Am 11.02.19 um 18:01 schrieb Paul van der Vlis: Dear Paul,
> I upgraded from Debian9 tot Debian10 (testing). After this, bind did not > start. Syslog says it's AppArmor (see syslog below). > > A work-arround is "aa-complain /usr/sbin/named". > You need the package apparmor-utils for that. Are you using "allow-new-zones" in your bind configuration? Does adding /var/cache/bind/_default.nzd.lock rwk, to /etc/apparmor.d/local/usr.sbin.named and then reloading the apparmor config with apparmor_parser -r /etc/apparmor.d/usr.sbin.named fix this? Best Regards, Bernhard