fedra17 bind

Fedora17
bind9.9.2
open: /etc/named.conf: permission denied
--------
Dec 22 06:14:20 stsato named[19792]: ----------------------------------------------------
Dec 22 06:14:20 stsato named[19792]: BIND 9 is maintained by Internet Systems Consortium,
Dec 22 06:14:20 stsato named[19792]: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Dec 22 06:14:20 stsato named[19792]: corporation.  Support and training for BIND 9 are
Dec 22 06:14:20 stsato named[19792]: available at https://www.isc.org/support
Dec 22 06:14:20 stsato named[19792]: ----------------------------------------------------
Dec 22 06:14:20 stsato named[19792]: adjusted limit on open files from 4096 to 1048576
Dec 22 06:14:20 stsato named[19792]: found 1 CPU, using 1 worker thread
Dec 22 06:14:20 stsato named[19792]: using 1 UDP listener per interface
Dec 22 06:14:20 stsato named[19792]: using up to 4096 sockets
Dec 22 06:14:20 stsato named[19792]: loading configuration from '/etc/named.conf'
Dec 22 06:14:20 stsato named[19792]: open: /etc/named.conf: permission denied
Dec 22 06:14:20 stsato named[19792]: loading configuration: permission denied
Dec 22 06:14:20 stsato named[19792]: exiting (due to fatal error)
----------
FEEL CHROOT

mkdir /var/named/etc
mv /etc/named.* !$
ln -s /var/named/etc/named.conf /etc/named.conf

#// named.conf in "/etc" modify "/var/named/etc"
sed -e "s/\/etc/\/var\/named\/etc/g" named.conf

chown root.named /var/named/etc/*
chmod 640 !$

----------
CHECK

systemctl status named
/usr/sbin/named -u named
tail -f /var/log/messages

rndc
nslookup