Re: [CentOS] bind chroot, bind mounts and selinux

2015-09-09 Thread Tom Robinson
Hi Robert, Thanks for your response. On 10/09/15 13:02, Robert Moskowitz wrote: > I went through the chroot/selinux review when Centos6 came out. I went with > selinux and no chroot. > > I don't have too much of an issue with systemd; I am learning it as I go. I must admit that I'm not that per

Re: [CentOS] bind chroot, bind mounts and selinux

2015-09-09 Thread Robert Moskowitz
I went through the chroot/selinux review when Centos6 came out. I went with selinux and no chroot. I don't have too much of an issue with systemd; I am learning it as I go. I am putting up a Samba4 AD with Bind-DLZ backend. The Samba wiki explicitly calls out no chroot and kind of explains w

[CentOS] bind chroot, bind mounts and selinux

2015-09-09 Thread Tom Robinson
Hi All, I'm migrating a CentOS 6 bind instance (chrooted) to a CentOS 7 box and am curious of people's opinions on chrooting vs selinux as a way of securing bind. The bind-chroot on CentOS 7 also comes with a script (/usr/libexec/setup-named-chroot.sh) that sets up the much maligned systemd and