Re: Re : Bind 4.9.6 ~ Current | X86 Exploit

[deraadt () CVS OPENBSD ORG (Theo de Raadt)]

> Solution : static named compilation & chrooted execution.

The next openbsd release will ship with a chrooted named environment
as part of the system by default.  If you enable named, it will go into
it's chroot space, and revoke it's priviledges.

i don't trust that code.