| 4 |
- |
1 |
# BIND named process options
|
|
|
2 |
# ~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
3 |
# Currently, you can use the following options:
|
|
|
4 |
#
|
|
|
5 |
# ROOTDIR="/var/named/chroot" -- will run named in a chroot environment.
|
|
|
6 |
# you must set up the chroot environment
|
|
|
7 |
# (install the bind-chroot package) before
|
|
|
8 |
# doing this.
|
|
|
9 |
# NOTE:
|
|
|
10 |
# Those directories are automatically mounted to chroot if they are
|
|
|
11 |
# empty in the ROOTDIR directory. It will simplify maintenance of your
|
|
|
12 |
# chroot environment.
|
|
|
13 |
# - /var/named
|
|
|
14 |
# - /etc/pki/dnssec-keys
|
|
|
15 |
# - /etc/named
|
|
|
16 |
# - /usr/lib64/bind or /usr/lib/bind (architecture dependent)
|
|
|
17 |
#
|
|
|
18 |
# Those files are mounted as well if target file doesn't exist in
|
|
|
19 |
# chroot.
|
|
|
20 |
# - /etc/named.conf
|
|
|
21 |
# - /etc/rndc.conf
|
|
|
22 |
# - /etc/rndc.key
|
|
|
23 |
# - /etc/named.rfc1912.zones
|
|
|
24 |
# - /etc/named.dnssec.keys
|
|
|
25 |
# - /etc/named.iscdlv.key
|
|
|
26 |
#
|
|
|
27 |
# Don't forget to add "$AddUnixListenSocket /var/named/chroot/dev/log"
|
|
|
28 |
# line to your /etc/rsyslog.conf file. Otherwise your logging becomes
|
|
|
29 |
# broken when rsyslogd daemon is restarted (due update, for example).
|
|
|
30 |
#
|
|
|
31 |
# OPTIONS="whatever" -- These additional options will be passed to named
|
|
|
32 |
# at startup. Don't add -t here, use ROOTDIR instead.
|
|
|
33 |
#
|
|
|
34 |
# KEYTAB_FILE="/dir/file" -- Specify named service keytab file (for GSS-TSIG)
|
|
|
35 |
#
|
|
|
36 |
# DISABLE_ZONE_CHECKING -- By default, initscript calls named-checkzone
|
|
|
37 |
# utility for every zone to ensure all zones are
|
|
|
38 |
# valid before named starts. If you set this option
|
|
|
39 |
# to 'yes' then initscript doesn't perform those
|
|
|
40 |
# checks.
|
|
|
41 |
ROOTDIR=/var/named/chroot
|