regen master

diff --git a/configure b/configure
index 7b66f9b9a4d29b3f1f69e92ec9611627b02543c6..f3716b4f31672e29765721c3c9b0c994118b27f4 100755 (executable)
--- a/configure
+++ b/configure
@@ -940,7 +940,6 @@ infodir
 docdir
 oldincludedir
 includedir
-runstatedir
 localstatedir
 sharedstatedir
 sysconfdir
@@ -1104,7 +1103,6 @@ datadir='${datarootdir}'
 sysconfdir='${prefix}/etc'
 sharedstatedir='${prefix}/com'
 localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
 includedir='${prefix}/include'
 oldincludedir='/usr/include'
 docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
@@ -1357,15 +1355,6 @@ do
   | -silent | --silent | --silen | --sile | --sil)
     silent=yes ;;
 
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
   -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
     ac_prev=sbindir ;;
   -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
@@ -1503,7 +1492,7 @@ fi
 for ac_var in  exec_prefix prefix bindir sbindir libexecdir datarootdir \
                datadir sysconfdir sharedstatedir localstatedir includedir \
                oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-               libdir localedir mandir runstatedir
+               libdir localedir mandir
 do
   eval ac_val=\$$ac_var
   # Remove trailing slashes.
@@ -1656,7 +1645,6 @@ Fine tuning of the installation directories:
   --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
   --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
   --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
   --libdir=DIR            object code libraries [EPREFIX/lib]
   --includedir=DIR        C header files [PREFIX/include]
   --oldincludedir=DIR     C header files for non-gcc [/usr/include]

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index b42da56586cb8366c7a27b14032710a1798d93b6..aba56a3ad1cda7984ea6b1c97cfa85249a3196a2 100644 (file)
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -2752,17 +2752,16 @@ badresp:1,adberr:0,findfail:0,valfail:0]
 <dd>
               <p>
                 The working directory of the server.
-                Any non-absolute pathnames in the configuration file will be
-                taken
-                as relative to this directory. The default location for most
-                server
-                output files (e.g. <code class="filename">named.run</code>)
-                is this directory.
+                Any non-absolute pathnames in the configuration file will
+                be taken as relative to this directory. The default
+                location for most server output files
+                (e.g. <code class="filename">named.run</code>) is this directory.
                 If a directory is not specified, the working directory
                 defaults to `<code class="filename">.</code>', the directory from
-                which the server
-                was started. The directory specified should be an absolute
-                path.
+                which the server was started. The directory specified
+                should be an absolute path, and <span class="emphasis"><em>must</em></span>
+                be writable by the effective user ID of the
+                <span class="command"><strong>named</strong></span> process.
               </p>
             </dd>
 <dt><span class="term"><span class="command"><strong>dnstap</strong></span></span></dt>
@@ -3018,7 +3017,9 @@ badresp:1,adberr:0,findfail:0,valfail:0]
               <p>
                 Specifies the directory in which to store the files that
                 track managed DNSSEC keys.  By default, this is the working
-                directory.
+                directory.  The directory <span class="emphasis"><em>must</em></span>
+                be writable by the effective user ID of the
+                <span class="command"><strong>named</strong></span> process.
               </p>
               <p>
                 If <span class="command"><strong>named</strong></span> is not configured to use views,

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index 1a8ff64a30b4d92c3886ec4ac3c9809f3e15493a..78a78321784ac5ca9857422935c9f31dd7772e48 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -535,6 +535,15 @@
          anchor is now a fatal configuration error. [RT #46155]
        </p>
       </li>
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named</strong></span> will no longer start or accept
+         reconfiguration if the working directory (specified by the
+         <span class="command"><strong>directory</strong></span> option) or the managed-keys
+         directory (specified by <span class="command"><strong>managed-keys-directory</strong></span>
+         are not writable by the effective user ID. [RT #46077]
+       </p>
+      </li>
 <li class="listitem">
        <p>
          Previously, <span class="command"><strong>update-policy local;</strong></span> accepted

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index 131f3aff6032620791cf0211a190fa507cfcc293..40f7422070baca08ea051344113a3ef086227b94 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -496,6 +496,15 @@
          anchor is now a fatal configuration error. [RT #46155]
        </p>
       </li>
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named</strong></span> will no longer start or accept
+         reconfiguration if the working directory (specified by the
+         <span class="command"><strong>directory</strong></span> option) or the managed-keys
+         directory (specified by <span class="command"><strong>managed-keys-directory</strong></span>
+         are not writable by the effective user ID. [RT #46077]
+       </p>
+      </li>
 <li class="listitem">
        <p>
          Previously, <span class="command"><strong>update-policy local;</strong></span> accepted

diff --git a/lib/ns/tests/Atffile b/lib/ns/tests/Atffile
index 6398c1be80327bc0e4be53a8fea666f819fa8e35..29abafff361fa926f4cc88c2e4294fb50e7fb59a 100644 (file)
--- a/lib/ns/tests/Atffile
+++ b/lib/ns/tests/Atffile
@@ -4,3 +4,4 @@ prop: test-suite = bind9
 
 tp: listenlist_test
 tp: notify_test
+tp: query_test