Re: Securing bind with systemd methods (was: bind-mount of /run/systemd for chrooted bind9/named)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jul 17, 2023, 15:44 Marc Haber <mh+systemd-devel@xxxxxxxxxxxx> wrote:

# /lib is necessary here, or execve will fail without indication for
# reason - that was a surprise and hard to debug because even strace
# didnt hint me towards the real issue
ExecPaths=/usr/sbin/named /usr/sbin/rndc /lib

This one in particular is not a systemd issue: All dynamically linked binaries are executed through /lib/ld-linux*.so as their "interpreter". (`file` will show the exact path.) I wish that had a dedicated errno, though.

[Index of Archives]     [LARTC]     [Bugtraq]     [Yosemite Forum]     [Photo]

  Powered by Linux