Chroot-BIND HOWTO

Scott Wunsch, scott at wunsch.orgv1.5, 1 December 2001
This document describes installing the BIND 9 nameserver to run in a chroot
jail and as a non-root user, to provide added security and minimise the
potential effects of a security compromise.  Note that this document has
been updated for BIND 9; if you still run BIND 8, you want the Chroot-BIND8
HOWTO instead.
1.
Introduction

• 
  1.1 What?
  
• 
  1.2 Why?
  
• 
  1.3 Where?
  
• 
  1.4 How?
  
• 
  1.5 Disclaimer
  

2.
Preparing the Jail

• 
  2.1 Creating a User
  
• 
  2.2 Directory Structure
  
• 
  2.3 Placing the BIND Data
  
• 
  2.4 System Support Files
  
• 
  2.5 Logging
  
• 
  2.6 Tightening Permissions
  

3.
Compiling and Installing Your Shiny New BIND

• 
  3.1 Doing the Compile
  

4.
Installing Your Shiny New BIND

• 
  4.1 Installing the Binaries
  
• 
  4.2 Setting up the Init Script
  
• 
  4.3 Configuration Changes
  

5.
The End

• 
  5.1 Launching BIND
  
• 
  5.2 That's It!
  

6.
Appendix - Upgrading BIND Later
7.
Appendix - Thanks
8.
Appendix - Document Distribution Policy
               
               
               

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/28922/showart_403234.html

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有