chroot-jail ?? whats this

Lincoln Yeoh lyeoh at pop.jaring.nospam.my
Sat Apr 1 08:34:59 UTC 2000


On 31 Mar 2000 13:54:10 -0800, Joseph S D Yao <jsdy at cospo.osis.gov> wrote:

>(1) links point to the inodes themselves, so there is no need for any
>    link to be able to "see" its other.
>
>(2) links are non-directional, all are equal.

Yes, but would it still be safer to make copies? Or there's nothing to be
gained from the security standpoint?

Is making sure that the named process owner has no write permissions to all
files and is not the owner of any of the files good enough?

e.g. I run named with user namedp, and the files and directories are owned
by namedf.

Cheerio,

Link.

****************************
Reply to:     @Spam to
lyeoh at      @people at uu.net
pop.jaring.my @ 
*******************************



More information about the bind-users mailing list