[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chrooting bind9



begin  Stefano Salvi quote on Fri, Jan 03, 2003 at 06:19:53PM +0100:
> There are two chances to do this:
> 1) using parameter --chroot of 'start-stop-daemon'
> 2) using parameter -t of bind
> In both ways I have to use -u parameter of bind to change user, otherwise 
> it can't get privileged resources as the 'domain' socket.
> Is there a difference in security with one method resspect to the other?

I don't think so.  I use the -t parameter of bind myself:

http://cryptio.net/~ferlatte/config

M

Attachment: pgpO2A3QOA_Sx.pgp
Description: PGP signature


Reply to: