Subject: BIND9 and bcapabilities
From: Phil Daws <uxbod@splatnix.net>
Date: Thu, 23 Feb 2012 17:20:58 +0000 (GMT)
Thu, 23 Feb 2012 17:20:58 +0000 (GMT)
Hello all, 


am trying to get BIND working with chroot() but when I start named I am seeing: 



[root@nspriv01 /]# service named start 
mount: permission denied 


I have given the vserver MKNOD, CAP_SYS_CHROOT and CAP_SYS_RESOURCE but it only seems
to work if I give it CAP_SYS_ADMIN which appears very over kill. 


Which capability am I missing ? This is using kernel 3.0.16-vs2.3.2.1. 


-- 
Thanks, Phil 



Hello all,

am trying to get BIND working with chroot() but when I start named I am seeing:

[root@nspriv01 /]# service named start
mount: permission denied

I have given the vserver MKNOD, CAP SYS CHROOT and CAP SYS RESOURCE but it only seems to work if I give it CAP SYS ADMIN which appears very over kill.

Which capability am I missing ? This is using kernel 3.0.16-vs2.3.2.1.
--
Thanks, Phil