From owner-freebsd-security Sun Nov 14 5:25:54 1999 Delivered-To: freebsd-security@freebsd.org Received: from apotheosis.za.org (apotheosis.za.org [137.158.128.27]) by hub.freebsd.org (Postfix) with ESMTP id 3A53414D17 for ; Sun, 14 Nov 1999 05:25:33 -0800 (PST) (envelope-from mwest@uct.ac.za) Date: Sun, 14 Nov 1999 15:25:06 +0200 From: Matthew West To: David Gilbert Cc: security@FreeBSD.ORG Subject: Re: sandboxed bind. Message-ID: <19991114152506.A36773@apotheosis.za.org> References: <14382.11991.536272.989358@trooper.velocet.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <14382.11991.536272.989358@trooper.velocet.net>; from "David Gilbert" on Sat, Nov 13, 1999 at 10:39:03PM Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sat, Nov 13, 1999 at 10:39:03PM -0500, David Gilbert wrote: > I went through the motions to sandbox bind. My only real complaint was that > named-xfer was dynamically loaded (greatly increasing the cruft that had to > be in the sandbox). I found it much easier (and neater) to compile "named-xfer" as a static binary. This is described briefly at http://www.antisocial.net/~modred/papers/named.html > Is there an easy way to determine exactly what libraries are required by an > executable, BTW? "ldd" -- mwest@uct.ac.za To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message