Problems chrooting BIND 9.2.2 in a Solaris 8 box

GARCIA CABALLERO Jordi <[email protected]> Thu, 11 Mar 2004 19:02:53 +0100
Newsgroups gmane.comp.security.sun,gmane.comp.security.basics
Message-ID <[email protected]>
Hi,

Chrooting BIND 9.2.2 in a Solaris 8 02/2002 box, I get this weird error when
running named in the jail:

# /usr/sbin/chroot /export/home/dns /usr/local/sbin/named -u named

What I see from the console

Mar 11 18:26:15 oasv020 named[11788]: /etc/named.conf:16: change directory
to '/dns/etc' failed: file not found
Mar 11 18:26:15 oasv020 named[11788]: /etc/named.conf:16: parsing failed
Mar 11 18:26:15 oasv020 named[11788]: loading configuration: file not found
Mar 11 18:26:15 oasv020 named[11788]: exiting (due to fatal error)

It is like chroot command does not work properly since it tries to access
the /etc chrooted directory that really points to /export/home/dns/etc
directory.

It is not the first time that I have chrooted the BIND service. A couple of
years ago, I chrooted BIND 8.2.2-P5 on a Solaris 8 box, following this
document from Sean Boran and I did not get any problem.

http://www.securityfocus.com/archive/attachment/66802/2/

Any ideas ?

Regards,

> Jordi Garcia
> Unix LSA - Office * AE4/1A-1.053
> 
> OFFICE FOR HARMONIZATION IN THE INTERNAL MARKET
> Information Technologies and Facilities Department
> « Production and Telecommunication » Service
> Servers, Databases and Applications Sector
> 
> Avenida de Europa, 4 - AC 77 - E-03080 Alicante - SPAIN
> 
> * +34 965 139 777
> * +34 965 139 614
> *  +34 629 284 187 (5777)
> *  [email protected]
> 
> 
>