Why a chrooted bind need to mknod dev/null and dev/random ?
Howto say it's necessary but without explain reasons, I administrate chrooted bind servers without theses options, and all seems to work perfectly ...
Thanks for your answers.
Many programs and libraries open
You can check your binaries (including dynamic libraries) and see if the devices are mentioned. From a security standpoint, it's difficult to see any negative implications from