<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Hello,</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; ">Setup bind-9.9.2-P2 on a solaris 10 system using zones (an oracle implementation of OS virtualization), with a dns data/configuration zone and a dns zone. The dns data zone is on a private network and has the dns data tables for bind (directory where data files stored in named.conf options area), the bind installation, and bind configuration file, named.conf. The dns zone is on the internet routable public network, and has the dns data, bind
installation, and bind configuration file available to it in a read only file system. Figured that since we have successfully run earlier versions of bind on dns servers with the data directory and data files as read only to the userid bind runs as, this would also work, and provide the added benefit of preventing the OS of the zone running bind on the public network from being able modify the data area at all. </div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; ">The dns server using this configuration seems to be running fine, but each time bind re-reads the named.conf file these messages appear in named.log :</div><div style="color: rgb(0, 0,
0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><div style="background-color: transparent; ">28-Aug-2013 12:12:37.565 general: info: reloading zones succeeded</div><div style="background-color: transparent; ">28-Aug-2013 12:12:37.572 general: notice: all zones loaded</div><div style="background-color: transparent; ">28-Aug-2013 12:12:37.573 general: notice: running</div><div style="background-color: transparent; ">28-Aug-2013 12:12:37.573 general: error: file.c:300: unexpected error:</div><div style="background-color: transparent;
">28-Aug-2013 12:12:37.573 general: error: unable to convert errno to isc_result: 30: Read-only file system</div><div style="background-color: transparent; ">28-Aug-2013 12:12:39.279 general: error: file.c:300: unexpected error:</div><div style="background-color: transparent; ">28-Aug-2013 12:12:39.279 general: error: unable to convert errno to isc_result: 30: Read-only file system</div><div style="background-color: transparent; "><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; "><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; "><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; ">Is this error
something to be worried about, or is it more of an info message? Also, is much even gained security wise by disallowing the OS to write to the dns data area? This particular error can be fixed by separating the dns data directory from the bind configuration and bind installation, and putting it on a writable file system for the public dns zone, but if the above error is only a warning thinking of keeping the data as read only also. Any suggestions are appreciated.</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; "><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; ">Thanks</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman',
'new york', times, serif; font-style: normal; "><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal; "><br></div></div><div></div><div> </div><div>*****The content of this message is my personal opinion only, and should not be construed as anything that has been through rigorous scrutiny of the professional groups who devote their life and work to the topics being discussed********</div></div></body></html>