> On 1. 10. 2020, at 17:27, Olivier <oza.4...@gmail.com> wrote: > > 1. I'm hesitant to file a bug on Debian about this. As this both involves > Bind9 and AppArmor, would you say it deserves to be implemented and > documented in default Bind9 installation or that it is too specific for this ?
Speaking with my Debian Developer hat - I don’t think there’s a bug in Debian. The default AppArmor rules works fine for most installations, and there’s a mechanism to extend the rules (from bottom of /etc/apparmor.d/usr.sbin.named): # Site-specific additions and overrides. See local/README for details. #include <local/usr.sbin.named> Ondrej -- Ondřej Surý (He/Him) ond...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
