On Mon, Jan 14, 2002 at 07:52:59AM -0700, Stefan Srdic wrote:
>
> I don't have any pratical experience with FreeSWAN at all, however, I have
> statically compiled BIND 9 and placed it in a chroot jail on Debian. I
> wonder if it would hard to packge a chroot'ed setup of BIND9 once it
> completely configured?
>
As already said, documentation is a *Very* important part of a
distribution. IMHO the Securing Debian HOWTO (might change it to Manual
sometime in the future) does tackle an important issue.
I would be very grateful if you reviewed and improved the
(incomplete) information I wrote regarding Bind security in Debian (IMHO
it's better placed here than in a separate HOWTO).
Please read:
http://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-services.en.html#s-sec-bind
SGML sources are available through CVS (check
http://www.debian.org/doc/ddp), patches for the CVS sources are
prefered but I will also accept any other suggestions.
Regards
Javi
