[Bug 289060] [NEW] named bind9 apparmor profile error

[Christophe Vandeplas]

Public bug reported:

Binary package hint: bind9

Bind doesn't start when IPv6 is enabled.
/var/log/messages tells me this:
Oct 25 12:42:53 minerva kernel: [ 2229.682759] type=1503 audit(1224931373.808:14): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=103 name="/proc/5722/net/if_inet6" pid=5723 profile="/usr/sbin/named"

This means apparmor is blocking access to the /proc/XXXX/net/if_inet6
file

Apparmor has the following configuration:
/etc/apparmor.d/usr.sbin.named:27:  /proc/net/if_inet6 r,

This line should be changed in:  /proc/**/net/if_inet6 r,

Restarting apparmor and bind with the new apparmor configuration
confirms it works now.

** Affects: bind9 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
named bind9 apparmor profile error 
https://bugs.launchpad.net/bugs/289060
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in ubuntu.