resolvconf writes named.conf.options to wrong location for apparmor

[Martin Bark]

Binary package hint: resolvconf

After upgrading from 9.04 to 9.10 bind9 stopped working with this error in /var/log/messages

type=1503 audit(1257080122.075:74): operation="open" pid=16439 parent=16437 profile="/usr/sbin/named" requested_mask="::r" denied_mask="::r" fsuid=105 ouid=0 name="/var/run/bind/named.options"

I eventually tracked the issues down to resolvconf. The file /etc/resolvconf/update.d/bind is witting to /var/run/bind/named.options but apparmor is configured in /etc/apparmor.d/usr.sbin.named to allow bind to access /var/run/named/named.options

I fixed the issues by changed the line RUN_DIR=/var/run/bind to RUN_DIR=/var/run/named in /etc/resolvconf/update.d/bind and updating my named.conf to use /var/run/named/named.options

I guess the bind9 package has updated /etc/apparmor.d/usr.sbin.named in 9.10 but resolvconf has not been updated. I think either the bind9 or resolvconf packages need to be corrected in 9.10 so this will work out the box.

I have the folowing software version on my ubuntu 9.10 machine:

bind0 :9.6.1.dfsg.P1-3
apparmor 2.3.1+1403-0ubuntu27
resolvconf 1.44ubuntu1

Thanks

ProblemType: Bug
Architecture: i386
Date: Sun Nov 1 14:35:11 2009
DistroRelease: Ubuntu 9.10
Package: resolvconf 1.44ubuntu1
PackageArchitecture: all
ProcEnviron:
 PATH=(custom, user)
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SourcePackage: resolvconf
Uname: Linux 2.6.31-14-generic i686