[Bug 466315] Re: bind9 missed a dependency with apparmor-profiles

[Kenyon Ralph]

On 2009-11-03T22:53:27-0000, Jamie Strandboge <jamie at ubuntu.com> wrote:
> apparmor-profiles is in universe, and bind9 is in main, so bind9 cannot
> depend on apparmor-profiles.

I see.

> This error is confusing because apparmor-profiles on 9.10 does not
> provide a profile for usr.sbin.named, and provides no abstractions.

Yes, this is strange.

% dlocate -S /etc/apparmor.d/usr.sbin.named
bind9: /etc/apparmor.d/usr.sbin.named

I did sudo aa-complain =named, sudo aptitude remove apparmor-profiles,
stopped and started bind9, saw no complaints. Same after sudo aa-enforce
=named, no problems, bind9 works.

So this bug might be some kind of weirdness that happens when upgrading
bind9. I did the jaunty->karmic upgrade via do-release-upgrade. I had
bind9 1:9.5.1.dfsg.P2-1ubuntu0.1 on jaunty.

> Kenyon, can you attach a tarball of your /etc/apparmor.d/ directory?
> $ sudo tar -zcvf /tmp/466315.tar.gz /etc/apparmor.d

Tarballs attached. One is with apparmor-profiles installed, one is after
removing it.

-- 
Kenyon Ralph


** Attachment added: "etc-apparmor.d-with-apparmor-profiles.tar.gz"
   http://launchpadlibrarian.net/35062090/etc-apparmor.d-with-apparmor-profiles.tar.gz

** Attachment added: "etc-apparmor.d-without-apparmor-profiles.tar.gz"
   http://launchpadlibrarian.net/35062091/etc-apparmor.d-without-apparmor-profiles.tar.gz

** Changed in: bind9 (Ubuntu)
       Status: Incomplete => Confirmed

** Summary changed:

- bind9 missed a dependency with apparmor-profiles
+ bind9 jaunty to karmic upgrade causes initial apparmor audit with openssl.cnf, seems fixed by installing apparmor-profiles but not really

-- 
bind9 jaunty to karmic upgrade causes initial apparmor audit with openssl.cnf, seems fixed by installing apparmor-profiles but not really
https://bugs.launchpad.net/bugs/466315
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in ubuntu.