Next Previous Contents v1.4, 1 July 2001

This document describes installing the BIND 9 nameserver to run in a chroot jail and as a non-root user, to provide added security and minimise the potential effects of a security compromise. Note that this document has been updated for BIND 9; if you still run BIND 8, you want the Chroot-BIND8 HOWTO instead.

1. Introduction

• 1.1 What?
• 1.2 Why?
• 1.3 Where?
• 1.4 How?
• 1.5 Disclaimer

2. Preparing the Jail

3. Compiling and Installing Your Shiny New BIND

4. Installing Your Shiny New BIND

5. The End

• 5.1 Launching BIND
• 5.2 That’s It!

6. Appendix – Upgrading BIND Later

7. Appendix – Thanks

8. Appendix – Document Distribution Policy

Next Previous Contents