Date: Mon, 20 Aug 2001 19:25:12 -0400 From: Chris Faulhaber <jedgar@fxp.org> To: Koji <koji@ciberteca.com> Cc: David Kirchner <davidk@accretivetg.com>, freebsd-security@freebsd.org Subject: Re: chroot named Message-ID: <20010820192512.A11150@peitho.fxp.org> In-Reply-To: <00a401c129ce$4c63df60$0164a8c0@daemon> References: <00a401c129ce$4c63df60$0164a8c0@daemon>
next in thread | previous in thread | raw e-mail | index | archive | help
--VS++wcV0S1rZb1Fb Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Aug 21, 2001 at 01:17:32AM +0200, Koji wrote: >=20 > # ldd /usr/libexec/named-xfer > /usr/libexec/named-xfer: > libc.so.4 =3D> /usr/lib/libc.so.4 (0x2809c000) >=20 > # ldd /usr/sbin/named > /usr/sbin/named: > libc.so.4 =3D> /usr/lib/libc.so.4 (0x280dd000) >=20 > my chroot environment don't have any library and works correctly. Why ? >=20 > # ls /etc/namedb/chroot > dev etc usr var >=20 Because you aren't doing zone transfers? When you start bind, it executes in the real system then chroots itself, never needing the chrooted bin/libs. If you do zone transfers you will need the appropriate bin (named-xfer) and associated libs in the chrooted dirs. You can also create a statically-linked named-xfer and forget the libs altogether. See http://www.fxp.org/jedgar/misc/bind.txt for step-by-step instructions. --=20 Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org --VS++wcV0S1rZb1Fb Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: FreeBSD: The Power To Serve iEYEARECAAYFAjuBnFcACgkQObaG4P6BelCIaQCeMHychyKZIh6mjgsFBJHvtQm7 ncEAn374GQ9QYb3OXtvZGWRhpc6cg7j6 =UxYF -----END PGP SIGNATURE----- --VS++wcV0S1rZb1Fb-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010820192512.A11150>