From owner-FreeBSD-users-jp@jp.freebsd.org  Fri Dec  1 12:10:28 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id MAA48486;
	Fri, 1 Dec 2000 12:10:28 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from multi.al.rim.or.jp (multi.al.rim.or.jp [202.247.191.124])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id MAA48479
	for <FreeBSD-users-jp@jp.freebsd.org>; Fri, 1 Dec 2000 12:10:27 +0900 (JST)
	(envelope-from yoshiaki@kt.rim.or.jp)
Received: from shell.rim.or.jp
	by multi.al.rim.or.jp (3.7W/HMX-12) id MAA27337
	for <FreeBSD-users-jp@jp.freebsd.org>; Fri, 1 Dec 2000 12:10:27 +0900 (JST)
Received: from localhost (yoshiaki_kt@localhost [127.0.0.1])
	by shell.rim.or.jp (8.9.3/3.7W/DI-2000071215) with ESMTP id MAA93971
	for <FreeBSD-users-jp@jp.freebsd.org>; Fri, 1 Dec 2000 12:10:26 +0900 (JST)
	(envelope-from yoshiaki@kt.rim.or.jp)
To: FreeBSD-users-jp@jp.freebsd.org
From: Yoshiaki Uchikawa <yoshiaki@kt.rim.or.jp>
In-Reply-To: <20001201111913.FCEE.ML@tokyo-club.com>
References: <20001201101756.FD5A.ML@tokyo-club.com>
	<3A2704591D1.8045S_TATSUNO@172.20.1.18>
	<20001201111913.FCEE.ML@tokyo-club.com>
X-Mailer: Mew version 1.94.1 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20001201121026I.yoshiaki@kt.rim.or.jp>
Date: Fri, 01 Dec 2000 12:10:26 +0900
X-Dispatcher: imput version 990905(IM130)
Lines: 24
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: FreeBSD-users-jp 57169
Subject: [FreeBSD-users-jp 57169] Re: sandbox
 =?ISO-2022-JP?B?GyRCISIbKEI=?= BIND
 =?ISO-2022-JP?B?GyRCJE4+bDlnGyhC?= 
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: yoshiaki@kt.rim.or.jp

From: Takeshi Nishioka <ml@tokyo-club.com>
Subject: [FreeBSD-users-jp 57168] Re: sandbox $B!"(B BIND $B$N>l9g(B 
Date: Fri, 01 Dec 2000 11:38:21 +0900

> $B2CF#$5$s!"1-:,$5$s!"M-Fq$&$4$6$$$^$9!#8!:w$,B-$j$J$+$C$?$h$&$GH?>J$7$F$$(B
> $B$^$9!#(B

$B8!:w$,B-$j$J$$$N$G$O$J$/$F0J2<N,!#(B
$B9M$($kA0$K!VHt$V!WI,MW$N$"$kFC<l$J>u67$O$"$j$($^$9$,F|>o$=$&$$$&$3$H(B
$B$P$+$j$d$C$F$$$?$i2s$j$KLBOG$r$+$1$^$9$7!"8zN($,6KC<$K0-$/$J$j$^$9!#(B

$B!tFC$K%a!<%j%s%0%j%9%H$N>l9g$O(B

<$B$[$H$s$IN,(B>

> /etc/named/named.conf $B$K5-:\$5$l$F$$$k(B
> 
> // NOTE!!! FreeBSD runs bind in a sandbox (see named_flags in rc.conf).

$BAGD>$K(B rc.conf $B$K=q$$$F$"$k%*%W%7%g%s$r$_$F$+$i$b$&0lEY9M$($F$_$F2<$5$$!#(B

#named_flags="-u bind -g bind"  # Flags for named
--
  yoshiaki@kt.rim.or.jp
