From owner-freebsd-questions@FreeBSD.ORG  Fri Feb 11 22:29:37 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4DFD716A4CE
	for <freebsd-questions@freebsd.org>;
	Fri, 11 Feb 2005 22:29:37 +0000 (GMT)
Received: from phenix.rootshell.be (phenix.rootshell.be [217.22.55.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0C91B43D31
	for <freebsd-questions@freebsd.org>;
	Fri, 11 Feb 2005 22:29:37 +0000 (GMT)
	(envelope-from kilim@phenix.rootshell.be)
Received: by phenix.rootshell.be (Postfix, from userid 58045)
	id 824751798C; Fri, 11 Feb 2005 23:29:31 +0100 (CET)
Date: Fri, 11 Feb 2005 23:29:31 +0100
From: kilim <kilim@phenix.rootshell.be>
To: freebsd-questions@freebsd.org
Message-ID: <20050211222931.GA14659@phenix.rootshell.be>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.1i
Subject: DNS' bind 9 chrooted by default ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Feb 2005 22:29:37 -0000

Hello,

regarding Bind 9, here:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-bind9.html

its stated that the configuration file resides in
/var/named/etc/namedb/ and that bind will be chrooted automatically.

Yet here: 

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-dns.html

steps are shown for manual chrooting of bind (not version 9)

So I just want to confirm it with you guys, is bind 9.3 really 
chrooted by default on 5.3 ?

I mean, don't have to do any of the steps as stated in the second link, for
chrooting ?

Thank you