Install BIND in a Chroot Jail

Translate from here

- Added extra logging options

- Fix the init script from the old

- Move from /conf back to /etc/named

- Post scripts on pastebin

named.conf

Old

Original Here

# Setup our directories and users
mkdir -p /var/chroot/named
echo "named:x:200:200:Nameserver:/var/chroot/named:/bin/false" >> /etc/passwd
echo "named:x:200:" >> /etc/group
cd /var/chroot/named/
mkdir -p dev etc/namedb/slave var/run
chown -R named:named etc/namedb/slave/
 
# Some required shindigles
chown named:named /var/chroot/named/var/run
mknod /var/chroot/named/dev/null c 1 3
mknod /var/chroot/named/dev/random c 1 8
chmod 666 /var/chroot/named/dev/{null,random}
cp /etc/localtime /var/chroot/named/etc/
 
### Come back to syslog 
 
# Secure that shit down
chown root /var/chroot
chmod 700 /var/chroot
chown named.named /var/chroot/named
chmod 700 /var/chroot/named/
cd /var/chroot/named
chattr +i etc/localtime var
 
# Install some bind action! (make sure no bind exists first)
cd /usr/src
wget http://ftp.isc.org/isc/bind9/9.6.1/bind-9.6.1.tar.gz
tar zxvf bind-*.tar.gz
cd bind*
./configure
make && make install
 
# Some configs
cd bind*
./configure
make && make install
 
# Some configs
vi /etc/init.d/named
chmod +x /etc/init.d/named
chkconfig --add named
vi /var/chroot/named/etc/named.conf
vi /var/chroot/named/etc/namedb/root.hint
Print/export
QR Code
QR Code sysadmin:fedora:ig:bind_in_jail (generated for current page)