82 lines
2.8 KiB
HTML
82 lines
2.8 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
|
|
<HTML>
|
|
<HEAD>
|
|
<META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9">
|
|
<TITLE>Chroot-BIND HOWTO</TITLE>
|
|
<LINK HREF="Chroot-BIND-HOWTO-1.html" REL=next>
|
|
|
|
|
|
</HEAD>
|
|
<BODY>
|
|
<A HREF="Chroot-BIND-HOWTO-1.html">Next</A>
|
|
Previous
|
|
Contents
|
|
<HR>
|
|
<H1>Chroot-BIND HOWTO</H1>
|
|
|
|
<H2>Scott Wunsch, <CODE>scott at wunsch.org</CODE></H2>v1.5, 1 December 2001
|
|
<P><HR>
|
|
<EM>This document describes installing the BIND 9 nameserver to run in a chroot
|
|
jail and as a non-root user, to provide added security and minimise the
|
|
potential effects of a security compromise. Note that this document has
|
|
been updated for BIND 9; if you still run BIND 8, you want the Chroot-BIND8
|
|
HOWTO instead.</EM>
|
|
<HR>
|
|
<P>
|
|
<H2><A NAME="toc1">1.</A> <A HREF="Chroot-BIND-HOWTO-1.html">Introduction</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-1.html#ss1.1">1.1 What?</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-1.html#ss1.2">1.2 Why?</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-1.html#ss1.3">1.3 Where?</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-1.html#ss1.4">1.4 How?</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-1.html#ss1.5">1.5 Disclaimer</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc2">2.</A> <A HREF="Chroot-BIND-HOWTO-2.html">Preparing the Jail</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-2.html#ss2.1">2.1 Creating a User</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-2.html#ss2.2">2.2 Directory Structure</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-2.html#ss2.3">2.3 Placing the BIND Data</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-2.html#ss2.4">2.4 System Support Files</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-2.html#ss2.5">2.5 Logging</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-2.html#ss2.6">2.6 Tightening Permissions</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc3">3.</A> <A HREF="Chroot-BIND-HOWTO-3.html">Compiling and Installing Your Shiny New BIND</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-3.html#ss3.1">3.1 Doing the Compile</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc4">4.</A> <A HREF="Chroot-BIND-HOWTO-4.html">Installing Your Shiny New BIND</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-4.html#ss4.1">4.1 Installing the Binaries</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-4.html#ss4.2">4.2 Setting up the Init Script</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-4.html#ss4.3">4.3 Configuration Changes</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc5">5.</A> <A HREF="Chroot-BIND-HOWTO-5.html">The End</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-5.html#ss5.1">5.1 Launching BIND</A>
|
|
<LI><A HREF="Chroot-BIND-HOWTO-5.html#ss5.2">5.2 That's It!</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc6">6.</A> <A HREF="Chroot-BIND-HOWTO-6.html">Appendix - Upgrading BIND Later</A></H2>
|
|
|
|
<P>
|
|
<H2><A NAME="toc7">7.</A> <A HREF="Chroot-BIND-HOWTO-7.html">Appendix - Thanks</A></H2>
|
|
|
|
<P>
|
|
<H2><A NAME="toc8">8.</A> <A HREF="Chroot-BIND-HOWTO-8.html">Appendix - Document Distribution Policy</A></H2>
|
|
|
|
<HR>
|
|
<A HREF="Chroot-BIND-HOWTO-1.html">Next</A>
|
|
Previous
|
|
Contents
|
|
</BODY>
|
|
</HTML>
|