From owner-freebsd-bugs  Sat Jun 15 16:40: 9 2002
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 6B20637B41C
	for <freebsd-bugs@hub.freebsd.org>; Sat, 15 Jun 2002 16:40:01 -0700 (PDT)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id g5FNe1j99446;
	Sat, 15 Jun 2002 16:40:01 -0700 (PDT)
	(envelope-from gnats)
Received: from nwww.freebsd.org (www.FreeBSD.org [216.136.204.117])
	by hub.freebsd.org (Postfix) with ESMTP id 91F1737B40C
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 15 Jun 2002 16:33:03 -0700 (PDT)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by nwww.freebsd.org (8.12.2/8.12.2) with ESMTP id g5FNX3hG098178
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 15 Jun 2002 16:33:03 -0700 (PDT)
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.12.2/8.12.2/Submit) id g5FNX3aS098177;
	Sat, 15 Jun 2002 16:33:03 -0700 (PDT)
Message-Id: <200206152333.g5FNX3aS098177@www.freebsd.org>
Date: Sat, 15 Jun 2002 16:33:03 -0700 (PDT)
From: Brett Glass <brett@lariat.org>
To: freebsd-gnats-submit@FreeBSD.org
X-Send-Pr-Version: www-1.0
Subject: bin/39355: Sandboxing BIND difficult and error-prone
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org


>Number:         39355
>Category:       bin
>Synopsis:       Sandboxing BIND difficult and error-prone
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sat Jun 15 16:40:01 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     Brett Glass
>Release:        All recent releases
>Organization:
>Environment:
>Description:
The procedure for sandboxing BIND, as listed in the FreeBSD Handbook, requires files to be moved, permissions to be changed, directories to be created, configuration changes to be made.... All by hand. There are more than 20 steps to perform on 4.x out of the box, all fraught with potential errors.


>How-To-Repeat:
I can never repeat the problem exactly, because I make a different typo every time. ;-)
>Fix:
Ideally, the default install would be set up so that BIND was sandboxed from the get-go, or (at least) so that one could throw a switch in rc.conf to make it happen. Who maintains the BIND that's bundled with FreeBSD? Can we make this happen?
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message