[Bug 468729] [NEW] resolconf writes named.conf.options to wrong location for apparmor

[Martin Bark]

Public bug reported:

Binary package hint: resolvconf

After upgrading from 9.04 to 9.10 bind9 stopped working with this error
in /var/log/messages

type=1503 audit(1257080122.075:74): operation="open" pid=16439
parent=16437 profile="/usr/sbin/named" requested_mask="::r"
denied_mask="::r" fsuid=105 ouid=0 name="/var/run/bind/named.options"

I eventually tracked the issues down to resolvconf.  The file
/etc/resolvconf/update.d/bind is witting to /var/run/bind/named.options
but apparmor is configured in /etc/apparmor.d/usr.sbin.named to allow
bind to access /var/run/named/named.options

I fixed the issues by changed the line RUN_DIR=/var/run/bind to
RUN_DIR=/var/run/named in /etc/resolvconf/update.d/bind and updating my
named.conf to use /var/run/named/named.options

I guess the bind9 package has updated /etc/apparmor.d/usr.sbin.named in
9.10 but resolvconf has not been updated.  I think either the bind9 or
resolvconf packages need to be corrected in 9.10 so this will work out
the box.

I have the folowing software version on my ubuntu 9.10 machine:

bind0 :9.6.1.dfsg.P1-3
apparmor 2.3.1+1403-0ubuntu27
resolvconf 1.44ubuntu1

Thanks

ProblemType: Bug
Architecture: i386
Date: Sun Nov  1 14:35:11 2009
DistroRelease: Ubuntu 9.10
Package: resolvconf 1.44ubuntu1
PackageArchitecture: all
ProcEnviron:
 PATH=(custom, user)
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SourcePackage: resolvconf
Uname: Linux 2.6.31-14-generic i686

** Affects: resolvconf (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-bug i386

-- 
resolconf writes named.conf.options to wrong location for apparmor
https://bugs.launchpad.net/bugs/468729
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs