Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual page 665

Figure 34.5 DHCP Server: Host Management
34.1.2 Expert Configuration
In addition to the configuration method discussed earlier, there is also an expert confi-
guration mode that allows you to tweak the DHCP server setup in every detail. Start
the expert configuration by selecting Expert Settings in the tree view in the left part of
the dialog.
Chroot Environment and Declarations
In this first dialog, make the existing configuration editable by selecting Start
DHCP Server. An important feature of the behavior of the DHCP server is its
ability to run in a chroot environment, or chroot jail, to secure the server host. If
the DHCP server should ever be compromised by an outside attack, the attacker
will still be behind bars in the chroot jail, which prevents him from touching the
rest of the system. The lower part of the dialog displays a tree view with the decla-
rations that have already been defined. Modify these with Add, Delete, and Edit.
Selecting Advanced takes you to additional expert dialogs. See Figure 34.6, "DHCP
Server: Chroot Jail and Declarations" (page 648). After selecting Add, define the
type of declaration to add. With Advanced, view the log file of the server, configure
TSIG key management, and adjust the configuration of the firewall according to
the setup of the DHCP server.
DHCP 647