By way of explanation, the crossdomain.xml file in var/lib/crossdomain.xml is for sctrans2, not DNAS2... the reference to etc/crossdomain.xml in the DNAS2 configuration file is just a default value -- we don't ship a crossdomain.xml file for DNAS2.
I'm not exceedingly familiar with Flash cross-domain access policies but it doesn't appear that the files need to be different, so I'll go ahead and add a crossdomain.xml file to the DNAS2 skeleton as well, and update the configuration file reference.