Package: bind9utils Version: 1:9.9.5.dfsg-9 Severity: important Dear Maintainer,
dnssec-keygen creates *.private files with mode 0600, but /etc/bind belongs to root and is only setguid bind. This means that by default bind9 (running as bind) cannot read them. Manual intervention is required to chmod the resulting files to 0640. Andrew Gallagher. -- System Information: Debian Release: 8.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 4.0.4-x86-linode75 (SMP w/8 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages bind9utils depends on: ii libbind9-90 1:9.9.5.dfsg-9 ii libc6 2.19-18 ii libcap2 1:2.24-8 ii libcomerr2 1.42.12-1.1 ii libdns100 1:9.9.5.dfsg-9 ii libgssapi-krb5-2 1.12.1+dfsg-19 ii libisc95 1:9.9.5.dfsg-9 ii libisccc90 1:9.9.5.dfsg-9 ii libisccfg90 1:9.9.5.dfsg-9 ii libk5crypto3 1.12.1+dfsg-19 ii libkrb5-3 1.12.1+dfsg-19 ii libpython2.7-stdlib [python-argparse] 2.7.9-2 ii libssl1.0.0 1.0.1k-3 ii libxml2 2.9.1+dfsg1-5 ii python 2.7.9-1 bind9utils recommends no packages. bind9utils suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org