bind8 with dynamic zone: file permissions change to 444

[Mark_Andrews at isc.org]

> 
> Hi,
> 
> I have set up a dynamic dns service.
> 
> Authorisation is done via TSIG-Key, Slave transfers via IXFR.
> The zone file is owned by the bind User, the zone file permissions
> are set to 644. Everything works fine.
> 
> For a while...
> 
> Then the bind changes the permissions to 444, and does no longer 
> update the zone.
> 
> It seems to be volitional to change the zone file permissions,
> (I've found some passages in bin/named/ns_update.c) 
> but dynamic updates stop working after this change.
> 
> Any suggestions?
> 
	Well named doesn't need write permission for the zone.  It
	needs write permission for the directory and update log.
	Named uses rename() to replace the zone file in a atomic
	operation.

	What ever the problem is it is not the permissions on the
	zone file.

	Mark
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org