Date: Tue, 3 Dec 2013 10:40:42 +0100 From: Zenny <garbytrash@gmail.com> To: Michael Sinatra <michael@rancid.berkeley.edu> Cc: stable@freebsd.org Subject: Re: BIND chroot environment in 10-RELEASE...gone? Message-ID: <CACuV5sB_Dk_9cwQozBQq-khumkkuWzAtSz1HAU=SzAzEcjsaog@mail.gmail.com> In-Reply-To: <529D9CC5.8060709@rancid.berkeley.edu> References: <529D9CC5.8060709@rancid.berkeley.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
+1 On 12/3/13, Michael Sinatra <michael@rancid.berkeley.edu> wrote: > I am aware of the fact that unbound has "replaced" BIND in the base > system, starting with 10.0-RELEASE. What surprised me was recent > commits to ports/dns/bind99 (and presumably other versions) that appears > to take away the supported chroot capabilities. OTOH, it appears that > unbound has been given these capabilities. > > I have no issues with removing BIND from base, but taking away the very > robust chroot support that FreeBSD had for BIND is something I would > oppose. I like the idea of leveling the playing field for users of > other systems, but the way things have been implemented thus far--taking > away functionality from BIND while preferring unbound--seems > counter-productive. It doesn't really level the playing field, it just > turns it the other way. > > It seems like it would be pretty easy to preserve the /etc/rc.d/named > startup script and BIND.chroot.dist from 9.x and add them to the BIND > ports, so that people who need to run a full-blown BIND installation can > "just install the port" as was advised back in 2012 when the > BIND/unbound change was first being discussed on -hackers. What are the > obstacles to doing something like this? > > michael > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CACuV5sB_Dk_9cwQozBQq-khumkkuWzAtSz1HAU=SzAzEcjsaog>