diff -rupN bind9-9.7.0.dfsg.P1.orig/debian/apparmor-profile bind9-9.7.0.dfsg.P1/debian/apparmor-profile
--- bind9-9.7.0.dfsg.P1.orig/debian/apparmor-profile	2011-08-26 18:22:46.000000000 +0100
+++ bind9-9.7.0.dfsg.P1/debian/apparmor-profile	2011-08-26 18:23:59.225779862 +0100
@@ -44,4 +44,7 @@
   # syslog do the heavy lifting.
   /var/log/named/** rw,
   /var/log/named/ rw,
+
+  # allow access to GeoIP data files
+  /usr/share/GeoIP/** r,
 }