Re: DNSSEC policy using wrong directory?
Benny Pedersen via bind-users <[email protected]>
| Newsgroups | gmane.network.dns.bind9.user |
|---|---|
| Organization | junc.eu |
| Message-ID | <474f3d3f47fc5adea2fb3a9eb98c33d7__33047.0601840474$1756025495$gmane$org@junc.eu> |
Mike skrev den 2025-08-24 03:50:
> I just set up `dnssec-policy default;` in my zones. Now I'm seeing
> error
> messages like:
>
> general: error: /etc/bind/good-with-numbers.com.signed.jnl: create:
> permission denied
>
> Well, yeah, that's a read-only file system.
>
> options {
> directory "/var/cache/bind";
>
> is set, so that's the working directory, so it should be writing into
> there.
> Instead, it seems to be choosing the directory where the zone file is:
>
> zone "good-with-numbers.com" {
> file "/etc/bind/good-with-numbers.com";
>
> Is there an override?
/etc/bind should stay READONLY
/var/bind is READWHITE according to FHS filesystem layout
change file "/etc/bind/.... in named.conf
solved
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users