chroot-jail

[Deepak Shrestha]

hi all,

from the chroot-howto:

Once BIND is running in the chroot jail, it will not be able to access
files outside the jail at all. However, it needs to access a few key
files, such as the system's C library. Exactly what libraries are required
will depend on your flavour of UNIX. For most modern Linux systems, the
following commands will be sufficient to put the necessary libraries in
place: 

     # cd /chroot/named/lib
     # cp -p /lib/libc-2.*.so .
     # ln -s libc-2.*.so libc.so.6
     # cp -p /lib/ld-2.*.so .
     # ln -s ld-2.*.so ld-linux.so.2

As an alternative, you could simply build statically-linked versions of
the BIND binaries to put in your chroot jail. 

how can we statically-link the lib files? and why is it necessary?

thanks in advance.

regards.