Differences

This shows you the differences between two versions of the page.

--- jessie_bind_chroot [2015/12/20 19:10] – admin
+++ jessie_bind_chroot [2016/01/25 08:33] (current) – [Long story short:] admin
@@ Line 38: / Line 38: @@
 mknod /var/bind9/chroot/dev/random c 1 8
 chmod 660 /var/bind9/chroot/dev/{null,random}
+chown bind /var/bind9/chroot/dev/random
 </code>
 Move the current config directory into the new chroot directory:
@@ Line 69: / Line 70: @@
 /etc/init.d/rsyslog restart; /etc/init.d/bind9 start
 </code>
-A good idea too
+====Logging====
+/etc/logrotate.d/named
 <code>
-chown bind /var/bind9/chroot/dev/random
+/var/bind9/chroot/var/log/bind.log {
+        daily
+        compress
+        delaycompress
+        rotate 5
+        missingok
+        postrotate
+                [ -e /etc/init.d/bind9 ] && /etc/init.d/bind9 reload > /dev/null 2>&1 || true
+        endscript
+}
+/var/bind9/chroot/var/log/security_info.log {
+        daily
+        compress
+        delaycompress
+        rotate 5
+        missingok
+        postrotate
+                [ -e /etc/init.d/bind9 ] && /etc/init.d/bind9 reload > /dev/null 2>&1 || true
+        endscript
+}
+/var/bind9/chroot/var/log/update_debug.log {
+        daily
+        compress
+        delaycompress
+        rotate 5
+        missingok
+        postrotate
+                [ -e /etc/init.d/bind9 ] && /etc/init.d/bind9 reload > /dev/null 2>&1 || true
+        endscript
+}
 </code>
@@ Line 83: / Line 119: @@
 systemctl daemon-reload
-mkdir -p /var/bind9/chroot/{etc,dev,var/cache/bind,var/run/named}
+mkdir -p /var/bind9/chroot/{etc,dev,var/cache/bind,var/run/named,var/log}
 mknod /var/bind9/chroot/dev/null c 1 3
 mknod /var/bind9/chroot/dev/random c 1 8
 chmod 660 /var/bind9/chroot/dev/{null,random}
+chown bind /var/bind9/chroot/dev/random
 mv /etc/bind /var/bind9/chroot/etc
 ln -s /var/bind9/chroot/etc/bind /etc/bind
@@ Line 95: / Line 132: @@
 chgrp bind /var/bind9/chroot/var/{cache/bind,run/named}
 chown bind /var/bind9/chroot/dev/random
+touch /var/bind9/chroot/var/log/{bind.log,update_debug.log,security_info.log}
+ln -s /var/bind9/chroot/var/log/ /var/log/bind
+chgrp bind /var/bind9/chroot/var/log/*.log
 vi /etc/init.d/bind9
@@ Line 103: / Line 143: @@
 </code>
+  * Add the logrotate script from above