BIND 10 #1497: Chroot for socket creator

[BIND 10 Development]

#1497: Chroot for socket creator
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:
  vorner                             |                Status:  new
                       Type:         |             Milestone:  Year 3 Task
  enhancement                        |  Backlog
                   Priority:  major  |            Resolution:
                  Component:  Boss   |             Sensitive:  0
  of BIND                            |           Sub-Project:  Core
                   Keywords:         |  Estimated Difficulty:  0
            Defect Severity:  N/A    |           Total Hours:  0
Feature Depending on Ticket:         |
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------
Changes (by shane):

 * milestone:  New Tasks => Year 3 Task Backlog


Comment:

 This was discussed on the BIND 10 development list. It's not a bad idea,
 although see my warning about probably needing a double-chroot here:

 https://lists.isc.org/pipermail/bind10-dev/2011-December/002895.html

 On FreeBSD the double-chroot does not appear to be necessary, but it also
 does not seem to hurt.

-- 
Ticket URL: <http://bind10.isc.org/ticket/1497#comment:1>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development