PLDWWW: Vserver

[qwiat]

Author: qwiat   Date: Wed Mar 22 11:24:00 2006 GMT
Module: PLDWWW   URL: http://pld-linux.org/Vserver
---- Log message:


---- Page affected: Vserver

---- Diffs:

================================================================
  
  === bind won't install because of a mknod problem ===
  
- bind requires some special device nodes inside it's chroot jail located in ''/var/lib/named''. Vserver security does not allow device node creation so you will have to install the package specifying {{{--exclude-dirs=/var/lib/named/dev}}} and then create the devices from outside of the vserver context.
+ bind requires some special device nodes inside it's chroot jail located in ''/var/lib/named''. Vserver security does not allow device node creation so you will have to install the package specifying {{{--excludepath=/var/lib/named/dev}}} and then create devices {{{/dev/null}}} and {{{/dev/random}}} from outside of the vserver context.
  
  To run bind you will have to change one more thing. PLD version of bind uses chroot for extra security and vserver security removes all special kernel capabilities. To allow chrooting inside your DNS vserver, use the following: