I don't think any security measure exists which is
necessary (unless it's required by law). But it's important that you assume that your BIND daemon will be compromised, and take pre-emptive measures for that. That's probably what your tutorial was aiming at with the
chroot suggestion. Perhaps you should get a good night's sleep and then try again. I mean,
chroot provides a very weak layer of security, but it's better than nothing at all. In the future, you might wanna look at
mandatory access control instead.
