How To Chroot Jail Bind Security Protecting BIND DNS Server Name BIND9
how to chroot jail bind security protecting bind dns server name bind9
how, to, chroot, jail, bind, security, protecting, bind, dns, server, name, bind9
How To Chroot Jail Bind Security Protecting BIND DNS Server Name BIND9
Post Description: how to chroot jail bind security protecting bind dns server name bind9
POST# 1023
Posted On: Fri Feb 29, 2008 12:01 pm
web hosting
Topic: How To Chroot Jail Bind Security Protecting BIND DNS Server Name BIND9
ok, i heard that you can do something to chroot bind to make it more secure.

how can i do that?


Mon Jul 09, 2007 7:24 pm
1
hostman
Reply #1737
this is how you do it?

login as root

send this command at the shell prompt:

yum install bind-chroot


once you have updated, you will see something like this:
Updated: bind-chroot.i386 31:9.4.1-6.1.fc7
Dependency Updated: bind.i386 31:9.4.1-6.1.fc7 bind-libs.i386 31:9.4.1-6.1.fc7 bind-utils.i386 31:9.4.1-6.1.fc7 caching-nameserver.i386 31:9.4.1-6.1.fc7
Complete!


now send these commands:

chmod 755 /var/named/
chmod 775 /var/named/chroot/
chmod 775 /var/named/chroot/var/
chmod 775 /var/named/chroot/var/named/
chmod 775 /var/named/chroot/var/run/
chmod 777 /var/named/chroot/var/run/named/
cd /var/named/chroot/var/named/
ln -s ../../ chroot


make named start at bootup everytime your computer starts:
chkconfig --levels 235 named on


now start DNS server with jail chroot
/etc/init.d/named start



What do you think?

* name:  

* email:  

* Please enter comments:


Receive Replies on my Comments
(An email will be sent to you when someone replies to your comments)

Add image to comments
yes no             upload