I can confirm that the following commands fixes the problem so Ubound can start again:
echo 'alias / -> /upper/,' >> /etc/apparmor.d/tunables/alias apparmor_parser -r -T -W /etc/apparmor.d/usr.sbin.unbound
I noticed that when it starts, another AppArmor-related error message is logged:
[ 257.707923] audit: type=1107 audit(1567174888.349:247): pid=976 uid=103 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call" bus="system" path="/org/freedesktop/systemd1" interface="org.freedesktop.systemd1.Manager" member="GetDynamicUsers" mask="send" name="org.freedesktop.systemd1" pid=6735 label="/usr/sbin/unbound" peer_pid=1 peer_label="unconfined" exe="/usr/bin/dbus-daemon" sauid=103 hostname=? addr=? terminal=?'
However, it does not appear to cause any problems as far as I could tell.
Tore
I can confirm that the following commands fixes the problem so Ubound can start again:
echo 'alias / -> /upper/,' >> /etc/apparmor. d/tunables/ alias d/usr.sbin. unbound
apparmor_parser -r -T -W /etc/apparmor.
I noticed that when it starts, another AppArmor-related error message is logged:
[ 257.707923] audit: type=1107 audit(156717488 8.349:247) : pid=976 uid=103 auid=4294967295 ses=4294967295 msg='apparmor= "DENIED" operation= "dbus_method_ call" bus="system" path="/ org/freedesktop /systemd1" interface= "org.freedeskto p.systemd1. Manager" member= "GetDynamicUser s" mask="send" name="org. freedesktop. systemd1" pid=6735 label=" /usr/sbin/ unbound" peer_pid=1 peer_label= "unconfined"
exe=" /usr/bin/ dbus-daemon" sauid=103 hostname=? addr=? terminal=?'
However, it does not appear to cause any problems as far as I could tell.
Tore