From owner-freebsd-stable Mon Jan 7 12: 5:47 2002 Delivered-To: freebsd-stable@freebsd.org Received: from buffoon.automagic.org (buffoon.automagic.org [208.185.30.208]) by hub.freebsd.org (Postfix) with SMTP id 5E4AC37B400 for ; Mon, 7 Jan 2002 12:05:39 -0800 (PST) Received: (qmail 39583 invoked by uid 1000); 7 Jan 2002 20:05:38 -0000 Date: Mon, 7 Jan 2002 15:05:38 -0500 From: Joe Abley To: "Jacques A. Vidrine" Cc: cjclark@alum.mit.edu, Haikal Saadh , stable@FreeBSD.ORG Subject: Re: Chrooted bind out of the box Message-ID: <20020107150538.A39568@buffoon.automagic.org> References: <000001c195b1$db087880$41c801ca@warhawk> <20020105140846.D204@gohan.cjclark.org> <20020105222558.A95067@buffoon.automagic.org> <20020106112345.B237@gohan.cjclark.org> <20020107090632.P95067@buffoon.automagic.org> <20020107183532.GA94047@madman.nectar.cc> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020107183532.GA94047@madman.nectar.cc> User-Agent: Mutt/1.3.22.1i Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jan 07, 2002 at 12:35:32PM -0600, Jacques A. Vidrine wrote: > On Mon, Jan 07, 2002 at 09:06:32AM -0500, Joe Abley wrote: > > On Sun, Jan 06, 2002 at 11:23:45AM -0800, Crist J. Clark wrote: > > > and you still need to run as > > > bind:bind for chrooting to be much of a security measure. > > > > I will disagree with your last point... > > You might want to think about that some more. chroot'd or not, root > can do what it wants --- such as create device nodes for your disk > devices and mount them. I thought about it some more. I now agree with your last point :) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message