bind named.conf 파일 소유권 오류 (loading configuration: permission denied)

bind named.conf 파일 소유권 오류 (loading configuration: permission denied)

※ named 데몬 named 계정으로 실행 시

/etc/named.conf named설정 파일 소유권 오류

named[2152]: none:0: open: /etc/named.conf: permission denied
named[2152]: loading configuration: permission denied

[root@mail ~]$ cat /var/log/messages
Dec 9 01:38:11 mail named[2152]: starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -u named
Dec 9 01:38:11 mail named[2152]: adjusted limit on open files from 1024 to 1048576
Dec 9 01:38:11 mail named[2152]: found 1 CPU, using 1 worker thread
Dec 9 01:38:11 mail named[2152]: using up to 4096 sockets
Dec 9 01:38:11 mail named[2152]: loading configuration from '/etc/named.conf'
Dec 9 01:38:11 mail named[2152]: none:0: open: /etc/named.conf: permission denied
Dec 9 01:38:11 mail named[2152]: loading configuration: permission denied
Dec 9 01:38:11 mail named[2152]: exiting (due to fatal error)

$ ls -l /etc/named.conf
-rw-r----- 1 root root 1002 12월 9 02:01 /etc/named.conf

/etc/named.conf 소유권 변경(소유자:root 그룹:named)

chown root.named /etc/named.conf

$ ls -l /etc/named.conf
-rw-r----- 1 root named 1002 12월 9 02:01 /etc/named.conf

소유권 변경 후 named 데몬를 실행시킨다. 정성적으로 데몬이 올라온다.

named[2200]: loading configuration from '/etc/named.conf'

named[2200]: running

$ cat /var/log/messages
Dec 9 01:38:54 mail named[2200]: starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -u named
Dec 9 01:38:54 mail named[2200]: adjusted limit on open files from 1024 to 1048576
Dec 9 01:38:54 mail named[2200]: found 1 CPU, using 1 worker thread
Dec 9 01:38:54 mail named[2200]: using up to 4096 sockets
Dec 9 01:38:54 mail named[2200]: loading configuration from '/etc/named.conf'
Dec 9 01:38:54 mail named[2200]: using default UDP/IPv4 port range: [1024, 65535]
Dec 9 01:38:54 mail named[2200]: using default UDP/IPv6 port range: [1024, 65535]
Dec 9 01:38:54 mail named[2200]: listening on IPv4 interface lo, 127.0.0.1#53
Dec 9 01:38:54 mail named[2200]: listening on IPv4 interface eth0, 192.168.0.50#53
Dec 9 01:38:54 mail named[2200]: command channel listening on 127.0.0.1#953
Dec 9 01:38:54 mail named[2200]: command channel listening on ::1#953
Dec 9 01:38:54 mail named[2200]: the working directory is not writable
Dec 9 01:38:54 mail named[2200]: zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700
Dec 9 01:38:54 mail named[2200]: zone localdomain/IN: loaded serial 199702270
Dec 9 01:38:54 mail named[2200]: zone localhost/IN: loaded serial 1997022700
Dec 9 01:38:54 mail named[2200]: running