[Bug 289060] Re: named bind9 apparmor profile error
** Description changed: Binary package hint: bind9 Bind doesn't start when IPv6 is enabled. /var/log/messages tells me this: Oct 25 12:42:53 minerva kernel: [ 2229.682759] type=1503 audit(1224931373.808:14): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=103 name="/proc/5722/net/if_inet6" pid=5723 profile="/usr/sbin/named" This means apparmor is blocking access to the /proc//net/if_inet6 file Apparmor has the following configuration: /etc/apparmor.d/usr.sbin.named:27: /proc/net/if_inet6 r, This line should be changed in: /proc/**/net/if_inet6 r, Restarting apparmor and bind with the new apparmor configuration confirms it works now. + + Ubuntu 8.10 \n \l + Bind + Architecture: i386 + Version: 1:9.5.0.dfsg.P2-1ubuntu2 + + Package: apparmor-profiles + Architecture: i386 + Source: apparmor + Version: 2.3+1289-0ubuntu4 -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
I'm not sure it's related to the IPv6 bug #249824 -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
debdiff fixing this bug and bug #277370 ** Attachment added: "bind9_9.5.0.dfsg.P2-1ubuntu3.debdiff" http://launchpadlibrarian.net/19077019/bind9_9.5.0.dfsg.P2-1ubuntu3.debdiff ** Changed in: bind9 (Ubuntu) Status: New => In Progress -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
I also added: capability sys_resource, since this version of bind9 complains without it. -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
** Changed in: bind9 (Ubuntu) Assignee: (unassigned) => LaMont Jones (lamont) Status: In Progress => Fix Committed -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
This bug was fixed in the package bind9 - 1:9.5.0.dfsg.P2-5 --- bind9 (1:9.5.0.dfsg.P2-5) unstable; urgency=low [ISC] * 2463: IPv6 Advanced Socket API broken on linux. LP: #249824 [Jamie Strandboge] * apparmor: add capability sys_resource * apparmor: add krb keytab access. LP: #277370 [LaMont Jones] * apparmor: allow proc/*/net/if_inet6 read access too. LP: #289060 * apparmor: add /var/log/named/* entries. LP: #294935 [Ben Hutchings] * meta: Add dependency of bind9 on net-tools (ifconfig used in init script) * meta: Fix bind9utils Depends. * meta: fix typo in package description [localization folks] * l10n: add polish debconf translations. Closes: #506856 (L) -- Ubuntu Archive Auto-Sync <[EMAIL PROTECTED]> Wed, 10 Dec 2008 00:40:25 + ** Changed in: bind9 (Ubuntu) Status: Fix Committed => Fix Released -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
Is this ever going to be fixed for the stable release? The repetitive error mesasges about /proc/*/net/if_net6 came to my attention while looking for something else, which led me to this bug. It seems to have been first reported for a version that's still in Ibex, though there's a bumped version 1:9.5.0.dfsg.P2-1ubuntu3 that's since replaced it (and the leatter is installed here). I just installed Jamie's patch above, and it seems to address this issue. Oddly, it was NOT present here even though it appears to have been intended to be in the 1ubuntu3 - just noticed that. Okay, now I'm really confused. bind9 was just installed on this machine on 12/29, so it doesn't seem it could have been that an upgrade somehow missed this file... -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
It appears that the bind 9.4 and 9.5 packages have missed out on this patch. The Jaunty bind 9.6 package has the fix but for those of us that are still running Intrepid or Hardy LTS. Is there any chance of getting it applied to all the supported releases? Thanks in advance, Ian. -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
** Also affects: bind9 (Ubuntu Hardy) Importance: Undecided Status: New ** Also affects: bind9 (Ubuntu Intrepid) Importance: Undecided Status: New ** Changed in: bind9 (Ubuntu Hardy) Status: New => Triaged ** Changed in: bind9 (Ubuntu Intrepid) Status: New => Triaged -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
Closing this SRU request based on the fact that Intrepid has reached EOL. chuck ** Changed in: bind9 (Ubuntu Intrepid) Status: Triaged => Won't Fix -- named bind9 apparmor profile error https://bugs.launchpad.net/bugs/289060 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 289060] Re: named bind9 apparmor profile error
Hardy has seen the end of its life and is no longer receiving any updates. Marking the Hardy task for this ticket as "Won't Fix". ** Changed in: bind9 (Ubuntu Hardy) Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/289060 Title: named bind9 apparmor profile error To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/289060/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
