Bernhard Schmidt <be...@debian.org> writes: >I have just uploaded 1:9.11.5.P4+dfsg-3 that should incorporate all your >local changes and also allowed /dev/urandom. I have upgraded my local >Samba AD DC to Buster with this configuration and it appears to work >fine, but this is only my personal server. > >The package should be built within the next couple of hours, could you >please test it (ideally with all your local AppArmor overrides removed >and in enforce mode)
Okay. I have installed the latest bind9 from unstable (1:9.11.5.P4+dfsg-3), and have purged my local changes to the 'local/usr.sbin.named' apparmor file. For now, I have also put the 'usr.sbin.named' profile in complain mode, because I want to minimize the breakage my testing users experience. I will watch for new apparmor="ALLOWED" logs in my system logs over the next several days, and will report back with my findings. (If the logs remain quiet for a few days, I will try 'enforce' mode.) -S.M.
