Hi From seeing the bug, it seems that we don't support unbound with chroot. Bug 1113947 - Add unbound-chroot systemd service for running unbound in the chroot (edit) https://bugzilla.redhat.com/show_bug.cgi?id=1113947 On the other hand,we are talking about chroot command here. Is there nothing with unbound chroot , or anything wrong with the description? In short,I was wondering whether unbound is supported with chroot or not. Thank you very much in advance. Reported by: rhn-support-shgao https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.5_release_notes/new_features_networking#annotations:d81534d4-0f1c-4bb3-86bb-f43e1ea71caf
We definitely do not recommend running unbound under chroot. SELinux system protection in enforcing mode provides much better security. If SELinux is enforcing then protection is already strong enough and chroot does not improve it significantly. Protection by chroot is lower and I would recommend to consider it only when SELinux cannot be kept in enforcing mode. I think we may prepare support article with steps required to have working unbound in chroot environment. But unlike bind we have not prepared special package with helpers, because it should not be necessary.
Thanks a lot for the input! The new release note is now published: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/new_features#BZ-2121623 linking to the new article: https://access.redhat.com/articles/6980379