Помогите пожалуйсто с настройкой bind. Проблема такая:
Поставил бинд в chroot окружении, на centOS 5.4, но он чего-то при попытки запуска пишет "СБОЙ", просмотрел в логах, так там написано : "Apr 19 00:31:53 centos named[31700]: the working directory is not writable".
Уже и права "777" давал, и юзера named в root группу переводил, бестолку. Поиски в гугле результатов не дали, мож не так смотрел...
ip сервера - 192.168.1.3
Подскажите плиз, что сделать можно, или хотяб на подобную тему ссылку киньте.
Заранее спасибо!
Вот логи:
Apr 19 00:13:27 centos named[31528]: starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -u named -D -t /var/named/chroot
Apr 19 00:13:27 centos named[31528]: adjusted limit on open files from 1024 to 1048576
Apr 19 00:13:27 centos named[31528]: found 1 CPU, using 1 worker thread
Apr 19 00:13:27 centos named[31528]: using up to 4096 sockets
Apr 19 00:13:27 centos named[31528]: loading configuration from '/etc/named.conf'
Apr 19 00:13:27 centos named[31528]: using default UDP/IPv4 port range: [1024, 65535]
Apr 19 00:13:27 centos named[31528]: using default UDP/IPv6 port range: [1024, 65535]
Apr 19 00:13:27 centos named[31528]: listening on IPv4 interface lo, 127.0.0.1#53
Apr 19 00:13:27 centos named[31528]: listening on IPv4 interface eth0, 192.168.1.3#53
Apr 19 00:13:27 centos named[31528]: /etc/named.conf:5: using specific query-source port suppresses port randomization and can be insecure.
Apr 19 00:13:27 centos named[31528]: /etc/named.conf:6: using specific query-source port suppresses port randomization and can be insecure.
Apr 19 00:13:27 centos named[31528]: command channel listening on 127.0.0.1#953
Apr 19 00:13:27 centos named[31528]: command channel listening on ::1#953
Apr 19 00:13:27 centos kernel: printk: 2568 messages suppressed.
Apr 19 00:13:27 centos kernel: type=1400 audit(1271614407.950:6372): avc: denied { write } for pid=31529 comm="named" name="named" dev=hda1 ino=325658 scontext=root:system_r:named_t:s0 tcontext=system_u:object_r:named_zone_t:s0 tclass=dir
Apr 19 00:13:27 centos named[31528]: the working directory is not writable
Apr 19 00:13:27 centos named[31528]: zone 0.in-addr.arpa/IN: loaded serial 42
Apr 19 00:13:27 centos named[31528]: zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700
Apr 19 00:13:27 centos named[31528]: zone 168.192.in-addr.arpa/IN: loaded serial 2004071001
Apr 19 00:13:27 centos named[31528]: zone 255.in-addr.arpa/IN: loaded serial 42
Apr 19 00:13:27 centos named[31528]: zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700
Apr 19 00:13:27 centos named[31528]: test.kz:13: ignoring out-of-zone data (centos)
Apr 19 00:13:27 centos named[31528]: test.kz:14: ignoring out-of-zone data (proxy)
Apr 19 00:13:27 centos named[31528]: zone test.kz/IN: loaded serial 2004071001
Apr 19 00:13:27 centos named[31528]: zone localdomain/IN: loaded serial 42
Apr 19 00:13:27 centos named[31528]: zone localhost/IN: loaded serial 42
Apr 19 00:13:27 centos kernel: type=1400 audit(1271614407.964:6373): avc: denied { write } for pid=31529 comm="named" name="named" dev=hda1 ino=325658 scontext=root:system_r:named_t:s0 tcontext=system_u:object_r:named_zone_t:s0 tclass=dir
Apr 19 00:31:53 centos named[31700]: starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -u named -D -t /var/named/chroot
Apr 19 00:31:53 centos named[31700]: adjusted limit on open files from 1024 to 1048576
Apr 19 00:31:53 centos named[31700]: found 1 CPU, using 1 worker thread
Apr 19 00:31:53 centos named[31700]: using up to 4096 sockets
Apr 19 00:31:53 centos named[31700]: loading configuration from '/etc/named.conf'
Apr 19 00:31:53 centos named[31700]: using default UDP/IPv4 port range: [1024, 65535]
Apr 19 00:31:53 centos named[31700]: using default UDP/IPv6 port range: [1024, 65535]
Apr 19 00:31:53 centos named[31700]: listening on IPv4 interface lo, 127.0.0.1#53
Apr 19 00:31:53 centos named[31700]: listening on IPv4 interface eth0, 192.168.1.3#53
Apr 19 00:31:53 centos named[31700]: /etc/named.conf:5: using specific query-source port suppresses port randomization and can be insecure.
Apr 19 00:31:53 centos named[31700]: /etc/named.conf:6: using specific query-source port suppresses port randomization and can be insecure.
Apr 19 00:31:53 centos named[31700]: command channel listening on 127.0.0.1#953
Apr 19 00:31:53 centos named[31700]: command channel listening on ::1#953
Apr 19 00:31:53 centos kernel: type=1400 audit(1271615513.439:6374): avc: denied { write } for pid=31701 comm="named" name="named" dev=hda1 ino=325658 scontext=root:system_r:named_t:s0 tcontext=system_u:object_r:named_zone_t:s0 tclass=dir
Apr 19 00:31:53 centos named[31700]: the working directory is not writable
Apr 19 00:31:53 centos named[31700]: zone 0.in-addr.arpa/IN: loaded serial 42
Apr 19 00:31:53 centos named[31700]: zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700
Apr 19 00:31:53 centos named[31700]: zone 168.192.in-addr.arpa/IN: loaded serial 2004071001
Apr 19 00:31:53 centos named[31700]: zone 255.in-addr.arpa/IN: loaded serial 42
Apr 19 00:31:53 centos named[31700]: zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700
Apr 19 00:31:53 centos named[31700]: test.kz:13: ignoring out-of-zone data (centos)
Apr 19 00:31:53 centos named[31700]: test.kz:14: ignoring out-of-zone data (proxy)
Apr 19 00:31:53 centos named[31700]: zone test.kz/IN: loaded serial 2004071001
Apr 19 00:31:53 centos named[31700]: zone localdomain/IN: loaded serial 42
Apr 19 00:31:53 centos named[31700]: zone localhost/IN: loaded serial 42
Apr 19 00:31:53 centos kernel: type=1400 audit(1271615513.450:6375): avc: denied { write } for pid=31701 comm="named" name="named" dev=hda1 ino=325658 scontext=root:system_r:named_t:s0 tcontext=system_u:object_r:named_zone_t:s0 tclass=dirВот named.conf :
options {
listen-on port 53 { any; };
query-source port 53;
query-source-v6 port 53;
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
listen-on {192.168.1.3;};
allow-query { any; };
allow-recursion { any; };
recursion yes;
};
zone "test.kz" IN {
type master;
file "test.kz";
};
zone "168.192.in-addr.arpa" {
type master;
file "168.192.rev";
};
include "/etc/named.rfc1912.zones";Зоны:
$ttl 38400
@ SOA centos.test.kz. support.test.kz. (
2004071001 ;serial
108000 ;refresh
1800 ;retry
1209600 ;expiry
604800)
IN NS centos.test.kz.
@ IN A 192.168.1.3
centos. IN A 192.168.1.3
proxy. IN A 192.168.1.7$ttl 38400
@ IN SOA centos.test.kz. support.test.kz. (
2004071001 ;serial
108000 ;refresh
1800 ;retry
1209600 ;expiry
604800) ;ttl
IN NS centos.test.kz.
3.1 IN PTR centos.test.kz.
7.1 IN PTR proxy.