regen master

configure

@@ -940,7 +940,6 @@ infodir
 docdir
 oldincludedir
 includedir
-runstatedir
 localstatedir
 sharedstatedir
 sysconfdir
@@ -1104,7 +1103,6 @@ datadir='${datarootdir}'
 sysconfdir='${prefix}/etc'
 sharedstatedir='${prefix}/com'
 localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
 includedir='${prefix}/include'
 oldincludedir='/usr/include'
 docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
@@ -1357,15 +1355,6 @@ do
   | -silent | --silent | --silen | --sile | --sil)
     silent=yes ;;
 
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
   -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
     ac_prev=sbindir ;;
   -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
@@ -1503,7 +1492,7 @@ fi
 for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
 		datadir sysconfdir sharedstatedir localstatedir includedir \
 		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir runstatedir
+		libdir localedir mandir
 do
   eval ac_val=\$$ac_var
   # Remove trailing slashes.
@@ -1656,7 +1645,6 @@ Fine tuning of the installation directories:
   --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
   --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
   --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
   --libdir=DIR            object code libraries [EPREFIX/lib]
   --includedir=DIR        C header files [PREFIX/include]
   --oldincludedir=DIR     C header files for non-gcc [/usr/include]

doc/arm/Bv9ARM.ch06.html

@@ -2752,17 +2752,16 @@ badresp:1,adberr:0,findfail:0,valfail:0]
 <dd>
               <p>
                 The working directory of the server.
-                Any non-absolute pathnames in the configuration file will be
-                taken
-                as relative to this directory. The default location for most
-                server
-                output files (e.g. <code class="filename">named.run</code>)
-                is this directory.
+                Any non-absolute pathnames in the configuration file will
+                be taken as relative to this directory. The default
+                location for most server output files
+                (e.g. <code class="filename">named.run</code>) is this directory.
                 If a directory is not specified, the working directory
                 defaults to `<code class="filename">.</code>', the directory from
-                which the server
-                was started. The directory specified should be an absolute
-                path.
+                which the server was started. The directory specified
+                should be an absolute path, and <span class="emphasis"><em>must</em></span>
+                be writable by the effective user ID of the
+                <span class="command"><strong>named</strong></span> process.
               </p>
             </dd>
 <dt><span class="term"><span class="command"><strong>dnstap</strong></span></span></dt>
@@ -3018,7 +3017,9 @@ badresp:1,adberr:0,findfail:0,valfail:0]
               <p>
                 Specifies the directory in which to store the files that
                 track managed DNSSEC keys.  By default, this is the working
-                directory.
+                directory.  The directory <span class="emphasis"><em>must</em></span>
+                be writable by the effective user ID of the
+                <span class="command"><strong>named</strong></span> process.
               </p>
               <p>
                 If <span class="command"><strong>named</strong></span> is not configured to use views,

doc/arm/Bv9ARM.ch09.html

@@ -535,6 +535,15 @@
 	  anchor is now a fatal configuration error. [RT #46155]
 	</p>
       </li>
+<li class="listitem">
+	<p>
+	  <span class="command"><strong>named</strong></span> will no longer start or accept
+	  reconfiguration if the working directory (specified by the
+	  <span class="command"><strong>directory</strong></span> option) or the managed-keys
+	  directory (specified by <span class="command"><strong>managed-keys-directory</strong></span>
+	  are not writable by the effective user ID. [RT #46077]
+	</p>
+      </li>
 <li class="listitem">
 	<p>
 	  Previously, <span class="command"><strong>update-policy local;</strong></span> accepted

doc/arm/notes.html

@@ -496,6 +496,15 @@
 	  anchor is now a fatal configuration error. [RT #46155]
 	</p>
       </li>
+<li class="listitem">
+	<p>
+	  <span class="command"><strong>named</strong></span> will no longer start or accept
+	  reconfiguration if the working directory (specified by the
+	  <span class="command"><strong>directory</strong></span> option) or the managed-keys
+	  directory (specified by <span class="command"><strong>managed-keys-directory</strong></span>
+	  are not writable by the effective user ID. [RT #46077]
+	</p>
+      </li>
 <li class="listitem">
 	<p>
 	  Previously, <span class="command"><strong>update-policy local;</strong></span> accepted

lib/ns/tests/Atffile

@@ -4,3 +4,4 @@ prop: test-suite = bind9
 
 tp: listenlist_test
 tp: notify_test
+tp: query_test