maybe chmod 0640 './bind/bind.keys'
maybe chgrp named './bind/named.conf'
maybe chmod 0640 './bind/named.conf'
+maybe chgrp named './bind/rndc.key'
+maybe chmod 0640 './bind/rndc.key'
maybe chmod 0755 './ca-certificates'
maybe chmod 0644 './ca-certificates.conf'
maybe chmod 0755 './ca-certificates/update.d'
--- /dev/null
+key "rndc-key" {
+ algorithm hmac-md5;
+ secret "QKTIfKDMtmXD1bedCCQWyA==";
+};
# DO NOT EDIT THIS FILE. CHANGES TO STARTUP PROFILES
# GO INTO /etc/csh.cshrc NOT /etc/csh.env
-setenv CONFIG_PROTECT '/usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa'
+setenv CONFIG_PROTECT '/var/bind /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa'
setenv CONFIG_PROTECT_MASK '/etc/gentoo-release /etc/sandbox.d /etc/env.d/java/ /etc/php/cli-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/apache2-php5.3/ext-active/ /etc/fonts/fonts.conf /etc/gconf /etc/terminfo /etc/ca-certificates.conf /etc/texmf/web2c /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/revdep-rebuild'
setenv EDITOR '/usr/bin/vi'
setenv GCC_SPECS ''
# DO NOT EDIT THIS FILE. CHANGES TO STARTUP PROFILES
# GO INTO /etc/profile NOT /etc/profile.env
-export CONFIG_PROTECT='/usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa'
+export CONFIG_PROTECT='/var/bind /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa'
export CONFIG_PROTECT_MASK='/etc/gentoo-release /etc/sandbox.d /etc/env.d/java/ /etc/php/cli-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/apache2-php5.3/ext-active/ /etc/fonts/fonts.conf /etc/gconf /etc/terminfo /etc/ca-certificates.conf /etc/texmf/web2c /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/revdep-rebuild'
export EDITOR='/usr/bin/vi'
export GCC_SPECS=''