bf5bc99f81
named can use ACLs defined by GeoIP of request. Such information is not available by default under named-chroot service. Enable GeoIP databases under chroot without explicit configuration.
25 lines
638 B
Plaintext
25 lines
638 B
Plaintext
# Configuration of files used in chroot
|
|
# Following files are made available after named-chroot.service start
|
|
# if they are missing or empty in target directory.
|
|
/etc/localtime
|
|
/etc/named.root.key
|
|
/etc/named.conf
|
|
/etc/named.rfc1912.zones
|
|
/etc/rndc.conf
|
|
/etc/rndc.key
|
|
/etc/named.iscdlv.key
|
|
/etc/crypto-policies/back-ends/bind.config
|
|
/etc/protocols
|
|
/etc/services
|
|
/etc/named.dnssec.keys
|
|
/etc/pki/dnssec-keys
|
|
/etc/named
|
|
/usr/lib64/bind
|
|
/usr/lib/bind
|
|
/usr/share/GeoIP
|
|
/run/named
|
|
# Warning: the order is important
|
|
# If a directory containing $ROOTDIR is listed here,
|
|
# it MUST be listed last. (/var/named contains /var/named/chroot)
|
|
/var/named
|