--- tools/etc/dnssec-tools/dnssec-tools.conf.orig	2009-10-20 11:50:28.000000000 -0700
+++ tools/etc/dnssec-tools/dnssec-tools.conf	2010-04-05 10:03:10.542983803 -0700
@@ -12,10 +12,10 @@
 # Paths to needed programs.  These may need adjusting for individual hosts.
 #
 keyarch		/usr/bin/keyarch
-keygen		/usr/local/sbin/dnssec-keygen
-rndc		/usr/local/sbin/rndc
-zonecheck	/usr/local/sbin/named-checkzone
-zonesign	/usr/local/sbin/dnssec-signzone
+keygen		/usr/sbin/dnssec-keygen
+rndc		/usr/sbin/rndc
+zonecheck	/usr/sbin/named-checkzone
+zonesign	/usr/sbin/dnssec-signzone
 rollchk		/usr/bin/rollchk
 zonesigner	/usr/bin/zonesigner
 
@@ -55,7 +55,7 @@
 # Settings that will be noticed by zonesigner.
 #
 # default_keyrec        output.krf
-archivedir      /usr/local/etc/dnssec-tools/KEY-SAFE
+archivedir      /var/dnssec-tools/KEY-SAFE
 entropy_msg	1
 savekeys        1
 kskcount	1
@@ -65,7 +65,7 @@
 # Settings for rollover-manager.
 #
 roll_loadzone	1
-roll_logfile	/usr/local/etc/dnssec-tools/log-rollerd
+roll_logfile	/var/log/dnssec-tools/log-rollerd
 roll_loglevel	info
 roll_sleeptime	60