# /etc/bind should be read-only for bind
# /var/lib/bind is for dynamically updated zone (and journal) files.
# /var/cache/bind is for slave/stub data, since we're not the origin of it.
# See /usr/share/doc/bind9/README.Debian.gz
Does this mean that the server guide should be updated?
Hm, then again, the apparmor policy file says:
# /etc/bind should be read-only for bind doc/bind9/ README. Debian. gz
# /var/lib/bind is for dynamically updated zone (and journal) files.
# /var/cache/bind is for slave/stub data, since we're not the origin of it.
# See /usr/share/
Does this mean that the server guide should be updated?