Create a named chroot directory structure in /var/named, and use it

by default when named is enabled. Also, improve our default directory
layout by creating /var/named/etc/namedb/{master|slave} directories,
and use the former for the generated localhost* files.

Rather than using pax to copy device entries, mount devfs in the
chroot directory.

There may be some corner cases where things need to be adjusted,
but overall this structure has been well tested on a production
network, and should serve the needs of the vast majority of users.

UPDATING has instructions on how to do the conversion for those
with existing configurations.

3 files changed, 5 insertions, 10 deletions

diff --git a/etc/mtree/BIND.chroot.dist b/etc/mtree/BIND.chroot.dist
index c4662a0..510678c 100644
--- a/etc/mtree/BIND.chroot.dist
+++ b/etc/mtree/BIND.chroot.dist
@@ -5,16 +5,13 @@
 
 /set type=dir uname=root gname=wheel mode=0755
 .
-    dev
+    dev             mode=0555
     ..
     etc
-/set type=dir uname=bind gname=wheel mode=0755
-        namedb
-/set type=dir uname=root gname=wheel mode=0755
+        namedb      uname=bind
             master
             ..
-/set type=dir uname=bind gname=wheel mode=0755
-            slave
+            slave   uname=bind
             ..
         ..
     ..
diff --git a/etc/mtree/BSD.root.dist b/etc/mtree/BSD.root.dist
index 93c7046..874b136 100644
--- a/etc/mtree/BSD.root.dist
+++ b/etc/mtree/BSD.root.dist
@@ -32,10 +32,6 @@
         ..
         mtree
         ..
-        namedb
-            s               uname=bind gname=bind mode=0750
-            ..
-        ..
         ntp             mode=0700
         ..
         pam.d
diff --git a/etc/mtree/BSD.var.dist b/etc/mtree/BSD.var.dist
index 0293852..2b5b37e 100644
--- a/etc/mtree/BSD.var.dist
+++ b/etc/mtree/BSD.var.dist
@@ -47,6 +47,8 @@
     ..
     msgs            uname=daemon
     ..
+    named           uname=root
+    ..
     preserve
     ..
     run