OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: DNSSEC and OpenBSD default BIND

From: Denis Fondras (openbsdledeuns.net)
Date: Mon Aug 16 2010 - 01:12:53 CDT


Hello,

Following my previous message from July, 18th, I am back to BIND as my
tests with nsd/unbound are not really conclusive (can't make both work
with only one IP and they don't support views).

So I rolled up my sleeves and started to port OpenBSD changes to
BIND-9.7.1-P2. Changing str-functions to strl-functions was the easy part :)
Unfortunately, I have a hard time with privileges separation and port
randomization. In fact I don't know where to place them.
I made a diff between OpenBSD version and BIND-9.4.2-P2 and tried to
port it to BIND-9.7.1-P2 but it seems there was a huge change in socket
and pidfile handling.

Is anyone willing to help understanding these changes ?

Thank you in advance,
Denis