<html class="apple-mail-supports-explicit-dark-mode"><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><a href="https://bind9.readthedocs.io/en/stable/chapter6.html#the-journal-file">https://bind9.readthedocs.io/en/stable/chapter6.html#the-journal-file</a><br id="lineBreakAtBeginningOfSignature"><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 24. 8. 2025, at 3:54, Mike <debian@good-with-numbers.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span>I just set up `dnssec-policy default;` in my zones. Now I'm seeing error</span><br><span>messages like:</span><br><span></span><br><span> general: error: /etc/bind/good-with-numbers.com.signed.jnl: create: permission denied</span><br><span></span><br><span>Well, yeah, that's a read-only file system.</span><br><span></span><br><span> options {</span><br><span> directory "/var/cache/bind";</span><br><span></span><br><span>is set, so that's the working directory, so it should be writing into there.</span><br><span>Instead, it seems to be choosing the directory where the zone file is:</span><br><span></span><br><span> zone "good-with-numbers.com" {</span><br><span> file "/etc/bind/good-with-numbers.com";</span><br><span></span><br><span>Is there an override?</span><br><span>-- </span><br><span>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></body></html>