83 lines
2.9 KiB
HTML
83 lines
2.9 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
|
|
<HTML>
|
|
<HEAD>
|
|
<META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9">
|
|
<TITLE>Chroot-BIND8 HOWTO</TITLE>
|
|
<LINK HREF="Chroot-BIND8-HOWTO-1.html" REL=next>
|
|
|
|
|
|
</HEAD>
|
|
<BODY>
|
|
<A HREF="Chroot-BIND8-HOWTO-1.html">Next</A>
|
|
Previous
|
|
Contents
|
|
<HR>
|
|
<H1>Chroot-BIND8 HOWTO</H1>
|
|
|
|
<H2>Scott Wunsch, <CODE>scott at wunsch.org</CODE></H2>v1.4, 1 July 2001
|
|
<P><HR>
|
|
<EM>This document describes installing the BIND 8 nameserver to run in a chroot
|
|
jail and as a non-root user, to provide added security and minimise the
|
|
potential effects of a security compromise. This version of the document
|
|
covers the old but still popular BIND 8; there is another document which
|
|
provides similar information for BIND 9.</EM>
|
|
<HR>
|
|
<P>
|
|
<H2><A NAME="toc1">1.</A> <A HREF="Chroot-BIND8-HOWTO-1.html">Introduction</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.1">1.1 What?</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.2">1.2 Why?</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.3">1.3 Where?</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.4">1.4 How?</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.5">1.5 Disclaimer</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc2">2.</A> <A HREF="Chroot-BIND8-HOWTO-2.html">Preparing the Jail</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.1">2.1 Creating a User</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.2">2.2 Directory Structure</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.3">2.3 Placing the BIND Data</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.4">2.4 System Support Files</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.5">2.5 Logging</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc3">3.</A> <A HREF="Chroot-BIND8-HOWTO-3.html">Compiling BIND</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-3.html#ss3.1">3.1 Modifying Paths</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-3.html#ss3.2">3.2 Doing the Build</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc4">4.</A> <A HREF="Chroot-BIND8-HOWTO-4.html">Installing Your Shiny New BIND</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.1">4.1 Installing the Tools Outside the Jail</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.2">4.2 Installing the Binaries in the Jail</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.3">4.3 Setting up the Init Script</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.4">4.4 Configuration Changes</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc5">5.</A> <A HREF="Chroot-BIND8-HOWTO-5.html">The End</A></H2>
|
|
|
|
<UL>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-5.html#ss5.1">5.1 Launching BIND</A>
|
|
<LI><A HREF="Chroot-BIND8-HOWTO-5.html#ss5.2">5.2 That's It!</A>
|
|
</UL>
|
|
<P>
|
|
<H2><A NAME="toc6">6.</A> <A HREF="Chroot-BIND8-HOWTO-6.html">Appendix - Upgrading BIND Later</A></H2>
|
|
|
|
<P>
|
|
<H2><A NAME="toc7">7.</A> <A HREF="Chroot-BIND8-HOWTO-7.html">Appendix - Thanks</A></H2>
|
|
|
|
<P>
|
|
<H2><A NAME="toc8">8.</A> <A HREF="Chroot-BIND8-HOWTO-8.html">Appendix - Document Distribution Policy</A></H2>
|
|
|
|
<HR>
|
|
<A HREF="Chroot-BIND8-HOWTO-1.html">Next</A>
|
|
Previous
|
|
Contents
|
|
</BODY>
|
|
</HTML>
|