[Bug 201954] Re: bind9 apparmor profile does not allow access to /var/lib/bind

LaMont Jones lamont.jones at ubuntu.com
Thu Apr 3 17:31:15 BST 2008


-9 includes more apparmor changes that need to be there for the profile
to be correct.  Please sync.

bind9 (1:9.4.2-9) unstable; urgency=low

  * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind
  * apparmor: make profile match README.Debian

 -- LaMont Jones <lamont at debian.org>  Tue, 01 Apr 2008 21:13:05 -0600

bind9 (1:9.4.2-8) unstable; urgency=low

  [ISC]

  * CVE-2008-0122: off by one error in (unused) inet_network function.
    Closes: #462783  LP: #203476

  [Michael Milligan]

  * Fix min-cache-ttl and min-ncache-ttl keywords

  [Jamie Strandboge]

  * apparmor: force complain-mode for apparmor on certain upgrades.  LP: #203528
  * debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named

 -- LaMont Jones <lamont at debian.org>  Tue, 18 Mar 2008 18:35:15 -0600

bind9 (1:9.4.2-7) unstable; urgency=low

  [Jamie Strandboge]

  * Allow rw access to /var/lib/bind/* in apparmor-profile.  LP: #201954

  [LaMont Jones]

  * Drop root-delegation comments from named.conf.  Closes: #217829,
#297219

 -- LaMont Jones <lamont at debian.org>  Sat, 15 Mar 2008 09:48:10 -0600


** CVE added: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0122

-- 
bind9 apparmor profile does not allow access to /var/lib/bind
https://bugs.launchpad.net/bugs/201954
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list