Groups > linux.debian.user > #208680

Re: bind gets permission errors in buster--systemd-related?

From	Ross Boylan <rossboylan@stanfordalumni.org>
Newsgroups	linux.debian.user
Subject	Re: bind gets permission errors in buster--systemd-related?
Date	2019-05-15 20:30 +0200
Message-ID	<xY6P7-ko-1@gated-at.bofh.it> (permalink)
References	<xXUkV-1ki-3@gated-at.bofh.it> <xY4tX-7dR-1@gated-at.bofh.it> <xY5q2-7ME-3@gated-at.bofh.it> <xY62J-8fO-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, May 15, 2019 at 10:39 AM Sven Joachim <svenjoac@gmx.de> wrote:
....
> I am not really familiar with apparmor or resolvconf, but in
> /etc/apparmor.d/usr.sbin.named I found the following:
>
> ,----
> |   # support for resolvconf
> |   /{,var/}run/named/named.options r,
> `----
>
> which suggests that the standard way would be to use
> /run/named/named.options rather than /run/named/named.resolvers.
> Alternatively, you may put the following line into
> /etc/apparmor.d/local/usr.sbin.named:
>
>   /{,var/}run/named/named.resolvers r,

Yep.  Not only that, but just below that is
  # some people like to put logs in /var/log/named/ instead of having
  # syslog do the heavy lifting.
  /var/log/named/** rw,
  /var/log/named/ rw,
so if I switch my logs to there (and rename the directory), instead of
/var/log/bind,
 the logging should work too.  Or I could add apparmor entries for
/var/log/bind.

I'm still trying to figure out what, if anything, is necessary for
revised apparmor settings to take effect.

Thanks.

Thread

bind gets permission errors in buster--systemd-related? Ross Boylan <rossboylan@stanfordalumni.org> - 2019-05-15 07:10 +0200
  Re: bind gets permission errors in buster--systemd-related? Sven Joachim <svenjoac@gmx.de> - 2019-05-15 18:00 +0200
    Re: bind gets permission errors in buster--systemd-related? Ross Boylan <rossboylan@stanfordalumni.org> - 2019-05-15 19:00 +0200
      Re: bind gets permission errors in buster--systemd-related? Sven Joachim <svenjoac@gmx.de> - 2019-05-15 19:40 +0200
        Re: bind gets permission errors in buster--systemd-related? Ross Boylan <rossboylan@stanfordalumni.org> - 2019-05-15 20:30 +0200
  Re: bind gets permission errors in buster--systemd-related? Lee <ler762@gmail.com> - 2019-05-15 18:40 +0200
    Re: bind gets permission errors in buster--systemd-related? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-05-15 19:10 +0200
  Re: bind gets permission errors in buster--systemd-related? Bob Weber <bobrweber@gmail.com> - 2019-05-15 20:30 +0200

csiph-web