Package: bind9 Version: 1:9.11.4+dfsg-3 Severity: important
apt throws some apparmor and permission errors while installing bind9: $ sudo apt install bind9 Reading package lists... Done Building dependency tree Reading state information... Done Suggested packages: bind9-doc ufw The following NEW packages will be installed: bind9 0 upgraded, 1 newly installed, 0 to remove and 136 not upgraded. Need to get 627 kB of archives. After this operation, 2,189 kB of additional disk space will be used. Get:1 http://ftp.de.debian.org/debian sid/main amd64 bind9 amd64 1:9.11.4+dfsg-3 [627 kB] Fetched 627 kB in 0s (1,346 kB/s) Preconfiguring packages ... Selecting previously unselected package bind9. (Reading database ... 458381 files and directories currently installed.) Preparing to unpack .../bind9_1%3a9.11.4+dfsg-3_amd64.deb ... Unpacking bind9 (1:9.11.4+dfsg-3) ... Setting up bind9 (1:9.11.4+dfsg-3) ... AppArmor parser error for /etc/apparmor.d/usr.sbin.named in /etc/apparmor.d/usr.sbin.named at line 36: missing an end of line character? (entry: /usr/share/dns/root.*) bind9-pkcs11.service is a disabled or a static unit not running, not starting it. bind9-resolvconf.service is a disabled or a static unit not running, not starting it. Job for bind9.service failed because the control process exited with error code. See "systemctl status bind9.service" and "journalctl -xe" for details. invoke-rc.d: initscript bind9, action "restart" failed. ● bind9.service - BIND Domain Name Server Loaded: loaded (/lib/systemd/system/bind9.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Mon 2018-07-30 21:45:34 CEST; 15ms ago Docs: man:named(8) Process: 14667 ExecStart=/usr/sbin/named $OPTIONS (code=exited, status=1/FAILURE) Main PID: 9684 (code=exited, status=0/SUCCESS) Jul 30 21:45:34 hostname named[14670]: listening on IPv4 interface lo, 127.0.0.1#53 Jul 30 21:45:34 hostname named[14670]: listening on IPv4 interface wlan0, 192.168.179.21#53 Jul 30 21:45:34 hostname named[14670]: generating session key for dynamic DNS Jul 30 21:45:34 hostname named[14670]: sizing zone task pool based on 5 zones Jul 30 21:45:34 hostname named[14670]: could not configure root hints from '/usr/share/dns/root.hints': permission denied Jul 30 21:45:34 hostname named[14670]: loading configuration: permission denied Jul 30 21:45:34 hostname named[14670]: exiting (due to fatal error) Jul 30 21:45:34 hostname systemd[1]: bind9.service: Control process exited, code=exited status=1 Jul 30 21:45:34 hostname systemd[1]: bind9.service: Failed with result 'exit-code'. Jul 30 21:45:34 hostname systemd[1]: Failed to start BIND Domain Name Server. dpkg: error processing package bind9 (--configure): installed bind9 package post-installation script subprocess returned error exit status 1 Processing triggers for systemd (239-7) ... Processing triggers for man-db (2.8.4-1) ... Errors were encountered while processing: bind9 needrestart is being skipped since dpkg has failed E: Sub-process /usr/bin/dpkg returned an error code (1) -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.17.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages bind9 depends on: ii adduser 3.117 ii bind9utils 1:9.11.4+dfsg-3 ii debconf [debconf-2.0] 1.5.69 ii dns-root-data 2018013001 ii libbind9-160 1:9.11.4+dfsg-3 ii libc6 2.27-5 ii libcap2 1:2.25-1.2 ii libcom-err2 1.44.3-1 ii libdns1102 1:9.11.4+dfsg-3 ii libfstrm0 0.3.0-1+b1 ii libgeoip1 1.6.12-1 ii libgssapi-krb5-2 1.16-2 ii libisc169 1:9.11.4+dfsg-3 ii libisccc160 1:9.11.4+dfsg-3 ii libisccfg160 1:9.11.4+dfsg-3 ii libjson-c3 0.12.1-1.3 ii libk5crypto3 1.16-2 ii libkrb5-3 1.16-2 ii liblmdb0 0.9.22-1 ii liblwres160 1:9.11.4+dfsg-3 ii libprotobuf-c1 1.2.1-2 ii libssl1.1 1.1.0h-4 ii libxml2 2.9.4+dfsg1-7+b1 ii lsb-base 9.20170808 ii net-tools 1.60+git20161116.90da8a0-2 ii netbase 5.4 ii zlib1g 1:1.2.11.dfsg-1 bind9 recommends no packages. Versions of packages bind9 suggests: pn bind9-doc <none> ii dnsutils 1:9.11.4+dfsg-3 ii resolvconf 1.79 pn ufw <none> -- debconf information: bind9/run-resolvconf: false bind9/start-as-user: bind bind9/different-configuration-file: