"Stuart D. Gathman" wrote:
>
> We need to start hosting our own DNS service, and as as have been researching
> the many known security holes in the standard 'named' BIND server
Well... this is only becouse most distributions are far from being
secure. Notably BIND is really not a security problem becouse:
a) it can be compiled static to work chrooted (that's what I use),
b) it is not necessary to run it with root privileges.
Notably there are proper bind packages for almost any os distribution on
earth. And what you going to do, is already done, i.e. there are patches
to run bind without root privileges.
-- Mike
--
----------------------------------------------------------
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Archives and Other: <http://java.apache.org/main/mail.html>
Problems?: [EMAIL PROTECTED]
