Package: bind9
Version: 1:9.9.5.dfsg-9+deb8u6
Severity: important

Dear Maintainer,

in the systemd service file, the creation of the /var/run/named directory is 
missing, so bind cannot startet without root privilegs
my fix is:

> cat /etc/systemd/system/bind9.service

-----------------
[Unit]
Description=BIND Domain Name Server
Documentation=man:named(8)
After=network.target

[Service]
ExecStartPre=/bin/mkdir /var/run/named
ExecStartPre=/bin/chgrp bind /var/run/named
ExecStartPre=/bin/chmod 775 /var/run/named
ExecStart=/usr/sbin/named -f -u bind
ExecReload=/usr/sbin/rndc reload
ExecStop=/usr/sbin/rndc stop

[Install]
WantedBy=multi-user.target
-----------------


so there are two options, fix the directory, or remove the "-u bind" from the 
sytemd service file

-- System Information:
Debian Release: 8.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages bind9 depends on:
ii  adduser                3.113+nmu3
ii  bind9utils             1:9.9.5.dfsg-9+deb8u6
ii  debconf [debconf-2.0]  1.5.56
ii  init-system-helpers    1.22
ii  libbind9-90            1:9.9.5.dfsg-9+deb8u6
ii  libc6                  2.19-18+deb8u4
ii  libcap2                1:2.24-8
ii  libcomerr2             1.42.12-1.1
ii  libdns100              1:9.9.5.dfsg-9+deb8u6
ii  libgssapi-krb5-2       1.12.1+dfsg-19+deb8u2
ii  libisc95               1:9.9.5.dfsg-9+deb8u6
ii  libisccc90             1:9.9.5.dfsg-9+deb8u6
ii  libisccfg90            1:9.9.5.dfsg-9+deb8u6
ii  libk5crypto3           1.12.1+dfsg-19+deb8u2
ii  libkrb5-3              1.12.1+dfsg-19+deb8u2
ii  liblwres90             1:9.9.5.dfsg-9+deb8u6
ii  libssl1.0.0            1.0.1t-1+deb8u2
ii  libxml2                2.9.1+dfsg1-5+deb8u2
ii  lsb-base               4.1+Debian13+nmu1
ii  net-tools              1.60-26+b1
ii  netbase                5.3

bind9 recommends no packages.

Versions of packages bind9 suggests:
pn  bind9-doc   <none>
ii  dnsutils    1:9.9.5.dfsg-9+deb8u6
pn  resolvconf  <none>
pn  ufw         <none>

-- Configuration Files:
/etc/bind/named.conf.local changed [not included]

-- debconf information excluded

Reply via email to