Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package bind for openSUSE:Factory checked in at 2022-08-05 19:50:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bind (Old) and /work/SRC/openSUSE:Factory/.bind.new.1521 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bind" Fri Aug 5 19:50:21 2022 rev:183 rq:993089 version:9.18.5 Changes: -------- --- /work/SRC/openSUSE:Factory/bind/bind.changes 2022-08-04 13:22:48.412386893 +0200 +++ /work/SRC/openSUSE:Factory/.bind.new.1521/bind.changes 2022-08-05 19:50:50.901432008 +0200 @@ -1,0 +2,18 @@ +Wed Aug 3 13:14:32 UTC 2022 - Jorik Cronenberg <jorik.cronenb...@suse.com> + +- When enabling query_logging by un-commenting an example in + bind.conf, named attempts to create a file in /var/log which + fails due to missing credentials. This also applies to the + "dump-file" and the "statistics-file". + This is solved by having systemd-tmpfiles create a subdirectory + "/var/log/named" owned by named:named and changing the file + paths accordingly: + /var/log/named_querylog -> /var/log/named/querylog + /var/log/named_dump.db -> /var/log/named/dump.db + /var/log/named.stats -> /var/log/named/stats + Also, in "named.service", the ReadWritePath was changed to + include "/var/log/named" rather than just "var/log". + [bsc#1200685, bind.conf, vendor-files/config/named.conf, + vendor-files/system/named.service] + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bind.conf ++++++ --- /var/tmp/diff_new_pack.vHXePM/_old 2022-08-05 19:50:51.725434136 +0200 +++ /var/tmp/diff_new_pack.vHXePM/_new 2022-08-05 19:50:51.733434156 +0200 @@ -8,4 +8,5 @@ C /var/lib/named/localhost.zone - - - - - C /var/lib/named/named.root.key - - - - - C /var/lib/named/root.hint - - - - - +d /var/log/named 750 named named - - ++++++ vendor-files.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor-files/config/named.conf new/vendor-files/config/named.conf --- old/vendor-files/config/named.conf 2022-01-26 08:38:15.055451213 +0100 +++ new/vendor-files/config/named.conf 2022-08-03 15:10:40.525745033 +0200 @@ -45,8 +45,8 @@ # Write dump and statistics file to the log subdirectory. - dump-file "/var/log/named_dump.db"; - statistics-file "/var/log/named.stats"; + dump-file "/var/log/named/dump.db"; + statistics-file "/var/log/named/stats"; # The forwarders record contains a list of servers to which queries # should be forwarded. Enable this line and modify the IP address to @@ -110,7 +110,7 @@ #logging { # # Log queries to a file limited to a size of 100 MB. # channel query_logging { -# file "/var/log/named_querylog" +# file "/var/log/named/querylog" # versions 3 size 100M; # print-time yes; // timestamp log entries # }; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/vendor-files/system/named.service new/vendor-files/system/named.service --- old/vendor-files/system/named.service 2022-01-19 09:37:14.353345484 +0100 +++ new/vendor-files/system/named.service 2022-08-03 16:07:54.294857010 +0200 @@ -13,7 +13,7 @@ ExecStart=/usr/sbin/named -u named $NAMED_ARGS ExecReload=/usr/bin/kill -HUP $MAINPID ProtectSystem=strict -ReadWritePaths=/var/lib/named /run/named /var/log +ReadWritePaths=/var/lib/named /run/named /var/log/named PrivateDevices=yes PrivateTmp=yes ProtectHome=yes