<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> <HTML> <HEAD> <META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9"> <TITLE>Chroot-BIND8 HOWTO</TITLE> <LINK HREF="Chroot-BIND8-HOWTO-1.html" REL=next> </HEAD> <BODY> <A HREF="Chroot-BIND8-HOWTO-1.html">Next</A> Previous Contents <HR> <H1>Chroot-BIND8 HOWTO</H1> <H2>Scott Wunsch, <CODE>scott at wunsch.org</CODE></H2>v1.4, 1 July 2001 <P><HR> <EM>This document describes installing the BIND 8 nameserver to run in a chroot jail and as a non-root user, to provide added security and minimise the potential effects of a security compromise. This version of the document covers the old but still popular BIND 8; there is another document which provides similar information for BIND 9.</EM> <HR> <P> <H2><A NAME="toc1">1.</A> <A HREF="Chroot-BIND8-HOWTO-1.html">Introduction</A></H2> <UL> <LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.1">1.1 What?</A> <LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.2">1.2 Why?</A> <LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.3">1.3 Where?</A> <LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.4">1.4 How?</A> <LI><A HREF="Chroot-BIND8-HOWTO-1.html#ss1.5">1.5 Disclaimer</A> </UL> <P> <H2><A NAME="toc2">2.</A> <A HREF="Chroot-BIND8-HOWTO-2.html">Preparing the Jail</A></H2> <UL> <LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.1">2.1 Creating a User</A> <LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.2">2.2 Directory Structure</A> <LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.3">2.3 Placing the BIND Data</A> <LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.4">2.4 System Support Files</A> <LI><A HREF="Chroot-BIND8-HOWTO-2.html#ss2.5">2.5 Logging</A> </UL> <P> <H2><A NAME="toc3">3.</A> <A HREF="Chroot-BIND8-HOWTO-3.html">Compiling BIND</A></H2> <UL> <LI><A HREF="Chroot-BIND8-HOWTO-3.html#ss3.1">3.1 Modifying Paths</A> <LI><A HREF="Chroot-BIND8-HOWTO-3.html#ss3.2">3.2 Doing the Build</A> </UL> <P> <H2><A NAME="toc4">4.</A> <A HREF="Chroot-BIND8-HOWTO-4.html">Installing Your Shiny New BIND</A></H2> <UL> <LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.1">4.1 Installing the Tools Outside the Jail</A> <LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.2">4.2 Installing the Binaries in the Jail</A> <LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.3">4.3 Setting up the Init Script</A> <LI><A HREF="Chroot-BIND8-HOWTO-4.html#ss4.4">4.4 Configuration Changes</A> </UL> <P> <H2><A NAME="toc5">5.</A> <A HREF="Chroot-BIND8-HOWTO-5.html">The End</A></H2> <UL> <LI><A HREF="Chroot-BIND8-HOWTO-5.html#ss5.1">5.1 Launching BIND</A> <LI><A HREF="Chroot-BIND8-HOWTO-5.html#ss5.2">5.2 That's It!</A> </UL> <P> <H2><A NAME="toc6">6.</A> <A HREF="Chroot-BIND8-HOWTO-6.html">Appendix - Upgrading BIND Later</A></H2> <P> <H2><A NAME="toc7">7.</A> <A HREF="Chroot-BIND8-HOWTO-7.html">Appendix - Thanks</A></H2> <P> <H2><A NAME="toc8">8.</A> <A HREF="Chroot-BIND8-HOWTO-8.html">Appendix - Document Distribution Policy</A></H2> <HR> <A HREF="Chroot-BIND8-HOWTO-1.html">Next</A> Previous Contents </BODY> </HTML>