Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Feb 2005 08:40:24 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        "bsd @ todoo. biz" <bsd@todoo.biz>
Cc:        Liste FreeBSD <freebsd-questions@freebsd.org>
Subject:   Re: Problem with mknod for /dev/random => jailed bind configuration
Message-ID:  <20050208164024.GA43179@xor.obsecurity.org>
In-Reply-To: <365b15da0d47b600ccf5fff25e3f440f@todoo.biz>
References:  <365b15da0d47b600ccf5fff25e3f440f@todoo.biz>

next in thread | previous in thread | raw e-mail | index | archive | help

--qDbXVdCdHGoSgWSk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Feb 08, 2005 at 03:38:27PM +0100, bsd @ todoo. biz wrote:
> Hello,
>=20
> I've tried to configure a bind server in a chroot jail and am facing a=20
> problem with /dev/random
> Thaugh I've read the man mknod I have to say that this didn't help me=20
> in solving the problem.
>=20
> When I start named with the -g switch here are the error.
>=20
> >08-Feb-2005 15:18:22.551 errno2result.c:109: unexpected error:
> >08-Feb-2005 15:18:22.551 unable to convert errno to isc_result: 6:=20
> >Device not configured
> >08-Feb-2005 15:18:22.551 could not open entropy source /dev/random:=20
> >unexpected error
> >08-Feb-2005 15:18:22.551 using pre-chroot entropy source /dev/random
>=20
> I've used the following mknod command :
>=20
> mknod /var/named/dev/null c 2 2
> mknod /var/named/dev/random c 2 3
>=20
> and also tried :
>=20
> mknod random c 245 0
> mknod null c 2 2
>=20
> I've chmod 666 the two files and make shure they are owned by bind:bind=
=20
> // ??

You forgot to mention what version of FreeBSD you're running.  If it's
5.x, you need to mount an appropriately configured devfs inside the
jail.  See the jail and devfs manpages.

Kris


--qDbXVdCdHGoSgWSk
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iD8DBQFCCOt3Wry0BWjoQKURAsUGAJ4pd9XGMnRmi8+qbYG1c7wNA/ydYACeIXrD
TeA/vaJH6ppVehg2O2YEjTM=
=5Ure
-----END PGP SIGNATURE-----

--qDbXVdCdHGoSgWSk--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050208164024.GA43179>