[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: bind9-chroot (was: questions on ITP)



also sprach Henrique de Moraes Holschuh (on Fri, 21 Sep 2001 04:44:41PM -0300):
> > how about this: i'll make the package (which will basically be a
> > postinst/prerm pair and nothing else, and then we can always integrate
> 
> IMHO it would be better if you did it the way it is done in the postfix
> package. The initscript sets up the chroot jail at daemon start (and
> restart), so that you can easily refresh the libs and conffiles needed
> inside the jail...  (unless bind9 does not need to have any libs and config
> files such as resolv.conf inside its jail, in which case there is no need
> for such a script).

i will play around with all this. right now, i am was thinking that it
would be easiest in a separate package, which would then be updated
for every bind and every libnss* package. i'll see.

i don't like the way that postfix is done because tripwire chokes
everytime postfix is restarted...

martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
-- 
"no problem is so formidable
 that you can't just walk away from it."
                                                          -- c. schulz

Attachment: pgpi7xd6HrWs9.pgp
Description: PGP signature


Reply to: