Chroot-BIND HOWTO

Next Previous Contents v1.4, 1 July 2001

This document describes installing the BIND 9 nameserver to run in a chroot jail and as a non-root user, to provide added security and minimise the potential effects of a security compromise. Note that this document has been updated for BIND 9; if you still run BIND 8, you want the Chroot-BIND8 HOWTO instead.

1. Introduction

  • 1.1 What?
  • 1.2 Why?
  • 1.3 Where?
  • 1.4 How?
  • 1.5 Disclaimer

2. Preparing the Jail

3. Compiling and Installing Your Shiny New BIND

4. Installing Your Shiny New BIND

5. The End

  • 5.1 Launching BIND
  • 5.2 That’s It!

6. Appendix – Upgrading BIND Later

7. Appendix – Thanks

8. Appendix – Document Distribution Policy

Next Previous Contents

READ  Linux Gazette Table of Contents Issue 17