BIND-chroot question

quarterstaff

• April 06, 2018 10:55

My network manager has asked me why cPanel doesn't support bind-chroot. He is concerned about security issues, and what is in cPanel that makes bind-chroot unnecessary.

• 

  cPanelMichael

  • April 06, 2018 16:11

  Hello, As I understand, it's unsupported because it's not compatible with the /usr/local/cpanel/scripts/fixrndc script. You are welcome to try installing and configuring it, but note that we don't test the product with it enabled so it's possible you will encounter issues. I encourage you to open a feature request if you'd like to see it supported:

  0
• 

  quarterstaff

  • April 06, 2018 16:36

  Thanks Michael. It's not so much that I need it, it's that my network manager questioning the security implications of running bind without chroot. Is there anything in cPanel which mitigates security concerns of running it without chroot so that I can give him an informed answer?

  0
• 

  cPanelMichael

  • April 06, 2018 17:00

  Is there anything in cPanel which mitigates security concerns of running it without chroot so that I can give him an informed answer?

  
  Hello, There's nothing cPanel does specifically, though you can find a good discussion on whether or not bind-chroot is necessary on the following third-party URL: Why running named(bind) in chroot is so important for security? Or maybe it is not ? Thank you.

  0

Please sign in to leave a comment.