Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 14 Nov 1999 15:25:06 +0200
From:      Matthew West <mwest@uct.ac.za>
To:        David Gilbert <dgilbert@velocet.ca>
Cc:        security@FreeBSD.ORG
Subject:   Re: sandboxed bind.
Message-ID:  <19991114152506.A36773@apotheosis.za.org>
In-Reply-To: <14382.11991.536272.989358@trooper.velocet.net>; from "David Gilbert" on Sat, Nov 13, 1999 at 10:39:03PM
References:  <bulk.47978.19991113192456@hub.freebsd.org> <14382.11991.536272.989358@trooper.velocet.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Nov 13, 1999 at 10:39:03PM -0500, David Gilbert wrote:
> I went through the motions to sandbox bind.  My only real complaint was that
> named-xfer was dynamically loaded (greatly increasing the cruft that had to
> be in the sandbox).

I found it much easier (and neater) to compile "named-xfer" as a static
binary.  This is described briefly at
http://www.antisocial.net/~modred/papers/named.html

> Is there an easy way to determine exactly what libraries are required by an
> executable, BTW?
"ldd"

--
mwest@uct.ac.za


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991114152506.A36773>