On Sun, 26 Dec 2021 10:47:42 -0500, Simon Deziel writes:
>What's in /etc/default/named? Chroot'ing could cause some issues.

This is stock, AFAICT:
-------
#
# run resolvconf?
RESOLVCONF=no

# startup options for the server
OPTIONS="-u bind"
-------

>Since you are hitting permission issues, I'd also check dmesg for 
>AppArmor denial messages (`dmesg | grep apparmor`).

At least there's nothing (to me) obvious:

root@fsckv2:~# dmesg | grep apparmor
[    6.889374] audit: type=1400 audit(1640488235.484:2): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="libreoffice-senddoc" 
pid=900 comm="apparmor_parser"
[    6.889470] audit: type=1400 audit(1640488235.484:3): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="libreoffice-xpdfimport" 
pid=901 comm="apparmor_parser"
[    6.889533] audit: type=1400 audit(1640488235.484:4): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="lsb_release" pid=889 
comm="apparmor_parser"
[    6.889746] audit: type=1400 audit(1640488235.484:5): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="libreoffice-oopslash" 
pid=896 comm="apparmor_parser"
[    6.889794] audit: type=1400 audit(1640488235.484:6): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=894 
comm="apparmor_parser"
[    6.889797] audit: type=1400 audit(1640488235.484:7): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" 
pid=894 comm="apparmor_parser"
[    6.890474] audit: type=1400 audit(1640488235.484:8): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=891 
comm="apparmor_parser"
[    6.890477] audit: type=1400 audit(1640488235.484:9): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="man_filter" pid=891 
comm="apparmor_parser"
[    6.890479] audit: type=1400 audit(1640488235.484:10): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="man_groff" pid=891 
comm="apparmor_parser"
[    6.891157] audit: type=1400 audit(1640488235.484:11): apparmor="STATUS" 
operation="profile_load" profile="unconfined" name="named" pid=899 
comm="apparmor_parser"

Kind regards,
Robert
-- 
-- Acronyms explained: TCPA
-- (T)otal (C)ontrol of (P)rivate (A)ssets
--                           - captainiglo

Reply via email to