Tim: >> I haven't struck any problems with doing that to /tmp/, but if you have >> a chrooted BIND and a nodev mounted /var/ you strike problems with it >> not being able to use its chrooted /dev/random, at least. Paul Howarth: > True. Noexec is probably more important to have though. I think I'll probably change the chroot location of the BIND files, though I'm yet to read a good reason why to even bother chrooting BIND (mine's not a public server, so that lessens the risk somewhat - I can bork it no matter where I've located it), that's another way I could work around the problem. -- (Currently running FC4, occasionally trying FC5.) Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.
