Re: These 'roots' are bugging me.

[Christoph Moench-Tegeder <ry04@rz.uni-karlsruhe.de>]

## Stefan Srdic (linuxbox@telusplanet.net):

> Remember to statically compile BIND if your going to place it in a chroot 
> jail,

You may also put the Debian Bind 8.2.3 (8.2.3-0.potato) in a chroot.
Be sure to have the following files in your chroot:
dev/null
etc/bind/named.conf
etc/localtime
etc/group a single line: "named:x:GID:"
etc/ld.so.cache generated with ldconfig
lib/ld-2.1.3.so
lib/libc-2.1.3.so
lib/ld-linux.so.2 symlinked to ld-2.1.3.so
lib/libc.so.6 symlinked to libc-2.1.3.so
sbin/ldconfig may be deleted after setting up the chroot
sbin/named-xfer if you do XFER
var/run/

Have syslogd listen on $CHROOT/dev/log, too.
You may want to have directorys for keeping logs and zonefiles.
If you are receiving XFER, named must be able to write the zonefiles.
Remeber correcting the paths in named.conf.

All these were taken from the mentioned HOWTO at LDP, but it just worked
fine. All my BINDs (sounds great, but there are only five bored
DNS-caches) are running chrooted.

Regards,
cmt

-- 
Spare Space