Re: Problems chrooting BIND 9.2.2 in a Solaris 8 box

"Ricardo J. Ulisses Filho" <[email protected]> Sat, 13 Mar 2004 14:08:03 -0300
Newsgroups gmane.comp.security.sun,gmane.comp.security.basics
Organization HOTlink Internet
Message-ID <[email protected]>
Hi,

It appears that named is trying to look for its hosts files into /dns/etc, 
since this should be the specified directory in named.conf.
Probably this directory (/export/home/dns/dns/etc) does not exist. 

Have you tried to do the chroot directly from named, by its -t flag?
AFAIK, Bind 9.2.2 provides the ability to chroot itself, after it processes 
all the command line arguments, with the -t flag.

Instead of 
# /usr/sbin/chroot /export/home/dns /usr/local/sbin/named -u named

Try
# /usr/local/sbin/named -u named -t /export/home/dns

Cheers,
-- 
Ricardo J. Ulisses Filho
_____________________________
[email protected]
Systems Administrator
HOTlink Internet

On Thursday 11 March 2004 15:02, GARCIA CABALLERO Jordi wrote:
> Hi,
>
> Chrooting BIND 9.2.2 in a Solaris 8 02/2002 box, I get this weird error
> when running named in the jail:
>
> # /usr/sbin/chroot /export/home/dns /usr/local/sbin/named -u named
>
> What I see from the console
>
> Mar 11 18:26:15 oasv020 named[11788]: /etc/named.conf:16: change directory
> to '/dns/etc' failed: file not found
> Mar 11 18:26:15 oasv020 named[11788]: /etc/named.conf:16: parsing failed
> Mar 11 18:26:15 oasv020 named[11788]: loading configuration: file not found
> Mar 11 18:26:15 oasv020 named[11788]: exiting (due to fatal error)
>
> It is like chroot command does not work properly since it tries to access
> the /etc chrooted directory that really points to /export/home/dns/etc
> directory.
>
> It is not the first time that I have chrooted the BIND service. A couple of
> years ago, I chrooted BIND 8.2.2-P5 on a Solaris 8 box, following this
> document from Sean Boran and I did not get any problem.
>
> http://www.securityfocus.com/archive/attachment/66802/2/
>
> Any ideas ?
>
> Regards,
>
> > Jordi Garcia
> > Unix LSA - Office * AE4/1A-1.053
> >
> > OFFICE FOR HARMONIZATION IN THE INTERNAL MARKET
> > Information Technologies and Facilities Department
> > « Production and Telecommunication » Service
> > Servers, Databases and Applications Sector
> >
> > Avenida de Europa, 4 - AC 77 - E-03080 Alicante - SPAIN
> >
> > * +34 965 139 777
> > * +34 965 139 614
> > *  +34 629 284 187 (5777)
> > *  [email protected]