Package: bind9
Version: 1:9.9.5.dfsg-4
Severity: important
Tags: patch

Currently, the following scripts are installed by the bind9 package:

    /etc/ppp/ip-up.d/bind9
    /etc/ppp/ip-down.d/bind9
    /etc/network/if-up.d/bind9
    /etc/network/if-down.d/bind9

These scripts contain the following call:

    rndc reconfig >/dev/null 2>&1 || true

I had an issue on my system that made the named daemon freeze in such
a way that any rndc command would hang forever. Since rndc is called as
part of network interface up/down scripts, it made these scripts hang as
well. As a result, my machine lost its network connection.

Network interface up/down scripts should not have a critical dependency
on some non-critical part of the system (bind9) behaving correctly.
Otherwise it makes the network subsystem exceedingly brittle.

To fix the issue, I suggest replacing the line above with the following
so that the network subsystem will never wait on rndc:

    rndc reconfig >/dev/null 2>&1 &

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages bind9 depends on:
ii  adduser                3.113+nmu3
ii  bind9utils             1:9.9.5.dfsg-4
ii  debconf [debconf-2.0]  1.5.53
ii  init-system-helpers    1.19
ii  libbind9-90            1:9.9.5.dfsg-4
ii  libc6                  2.19-6
ii  libcap2                1:2.22-1.2
ii  libcomerr2             1.42.11-1
ii  libdns100              1:9.9.5.dfsg-4
ii  libgssapi-krb5-2       1.12.1+dfsg-3
ii  libisc95               1:9.9.5.dfsg-4
ii  libisccc90             1:9.9.5.dfsg-4
ii  libisccfg90            1:9.9.5.dfsg-4
ii  libk5crypto3           1.12.1+dfsg-3
ii  libkrb5-3              1.12.1+dfsg-3
ii  liblwres90             1:9.9.5.dfsg-4
ii  libssl1.0.0            1.0.1h-3
ii  libxml2                2.9.1+dfsg1-4
ii  lsb-base               4.1+Debian13
ii  net-tools              1.60-26
ii  netbase                5.2

bind9 recommends no packages.

Versions of packages bind9 suggests:
pn  bind9-doc                 <none>
ii  knot-dnsutils [dnsutils]  1.5.0-1
ii  resolvconf                1.75
pn  ufw                       <none>

-- Configuration Files:
/etc/bind/named.conf.local changed [not included]
/etc/bind/named.conf.options changed [not included]

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to