On Fri, 2007-02-02 at 18:10 +0530, François Patte wrote: > BTW, I am not an expert, what are the advantages to "chroot" bind > config? If everybody knows that bind is chrooted and where is the > location of the new config files.... The idea is that if someone manages to exploit BIND, it can't mess up the rest of your system, as it's locked in a jail. It's not about protecting BIND from something else. NB: It's not 100% locked up, people do find ways to break out of chroot jails. -- (Currently testing FC5, but still running FC4, if that's important.) Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.
