bind：data / named.run权限被拒绝

我刚刚安装了Fedora 23并绑定了9.10，并且默认安装不运行。 我只创build了一个区域文件（可以通过语法检查进程确定），但是这个错误与我创build的任何区域数据无关：

Jan 05 08:05:09 localhost.localdomain named[5786]: isc_file_isplainfile 'data/named.run' failed: permission denied Jan 05 08:05:09 localhost.localdomain named[5786]: configuring logging: permission denied Jan 05 08:05:09 localhost.localdomain named[5786]: loading configuration: permission denied Jan 05 08:05:09 localhost.localdomain named[5786]: exiting (due to fatal error) 

这些是以下目录的权限：

 [root@localhost named]# ls -dl /var/named drwxr-x---. 5 root named 4096 Jan 5 07:58 /var/named [root@localhost named]# ls -dl /var/named/data drwxrwx---. 2 named named 4096 Dec 16 12:15 /var/named/data [root@localhost named]# 

目录/ var / named / data是空的。

strace显示了同样的错误：

• 为什么bind9给连接拒绝权限拒绝错误，当它是777
• NSloggingconfiguration不工作在绑定（bind9）在Ubuntu上
• 我如何设置maradns / nsd服务器来回答任何查询的单个IP地址
• 可视化DNS命名的查询日志
• 绑定9个区域文件

 [pid 5794] open("/dev/random", O_RDONLY|O_NONBLOCK) = 10 [pid 5794] fcntl(10, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) [pid 5794] fcntl(10, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0 [pid 5794] stat("data/named.run", 0x7f04aaf72630) = -1 EACCES (Permission denied) 

我希望在默认安装中不会出现这样的错误，例如configuration目录权限。 这里有什么问题？

这是我的/etc/named.conf文件：

 // // named.conf // // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS // server as a caching only nameserver (as a localhost DNS resolver only). // // See /usr/share/doc/bind*/sample/ for example named configuration files. // options { listen-on port 53 { 127.0.0.1; 192.168.0.14; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { localhost; }; /* - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion. - If you are building a RECURSIVE (caching) DNS server, you need to enable recursion. - If your recursive DNS server has a public IP address, you MUST enable access control to limit queries to your legitimate users. Failing to do so will cause your server to become part of large scale DNS amplification attacks. Implementing BCP38 within your network would greatly reduce such attack surface */ recursion yes; dnssec-enable yes; dnssec-validation yes; /* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; /* https://fedoraproject.org/wiki/Changes/CryptoPolicy */ include "/etc/crypto-policies/back-ends/bind.config"; }; logging { channel default_debug { file "data/named.run"; severity dynamic; }; }; zone "." IN { type hint; file "named.ca"; }; zone "supervisedchat.com" { type master; file "/var/named/supervisedchat.dns"; # 10.128.0.0/16 subnet }; zone "0.168.192.in-addr.arpa" { type master; file "/var/named/supervisedchat.rev"; # 10.128.0.0/16 subnet }; include "/etc/named.rfc1912.zones"; include "/etc/named.root.key"; [root@localhost named]# 

 logging { channel default_debug { file "/var/named/data/named.run"; severity dynamic; }; };