Package: bind9
Version: 1:9.11.4+dfsg-3
Severity: important
apt throws some apparmor and permission errors while installing bind9:
$ sudo apt install bind9
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
bind9-doc ufw
The following NEW packages will be installed:
bind9
0 upgraded, 1 newly installed, 0 to remove and 136 not upgraded.
Need to get 627 kB of archives.
After this operation, 2,189 kB of additional disk space will be used.
Get:1 http://ftp.de.debian.org/debian sid/main amd64 bind9 amd64
1:9.11.4+dfsg-3 [627 kB]
Fetched 627 kB in 0s (1,346 kB/s)
Preconfiguring packages ...
Selecting previously unselected package bind9.
(Reading database ... 458381 files and directories currently installed.)
Preparing to unpack .../bind9_1%3a9.11.4+dfsg-3_amd64.deb ...
Unpacking bind9 (1:9.11.4+dfsg-3) ...
Setting up bind9 (1:9.11.4+dfsg-3) ...
AppArmor parser error for /etc/apparmor.d/usr.sbin.named in
/etc/apparmor.d/usr.sbin.named at line 36: missing an end of line character?
(entry: /usr/share/dns/root.*)
bind9-pkcs11.service is a disabled or a static unit not running, not starting
it.
bind9-resolvconf.service is a disabled or a static unit not running, not
starting it.
Job for bind9.service failed because the control process exited with error
code.
See "systemctl status bind9.service" and "journalctl -xe" for details.
invoke-rc.d: initscript bind9, action "restart" failed.
● bind9.service - BIND Domain Name Server
Loaded: loaded (/lib/systemd/system/bind9.service; enabled; vendor preset:
enabled)
Active: failed (Result: exit-code) since Mon 2018-07-30 21:45:34 CEST; 15ms
ago
Docs: man:named(8)
Process: 14667 ExecStart=/usr/sbin/named $OPTIONS (code=exited,
status=1/FAILURE)
Main PID: 9684 (code=exited, status=0/SUCCESS)
Jul 30 21:45:34 hostname named[14670]: listening on IPv4 interface lo,
127.0.0.1#53
Jul 30 21:45:34 hostname named[14670]: listening on IPv4 interface wlan0,
192.168.179.21#53
Jul 30 21:45:34 hostname named[14670]: generating session key for dynamic DNS
Jul 30 21:45:34 hostname named[14670]: sizing zone task pool based on 5 zones
Jul 30 21:45:34 hostname named[14670]: could not configure root hints from
'/usr/share/dns/root.hints': permission denied
Jul 30 21:45:34 hostname named[14670]: loading configuration: permission denied
Jul 30 21:45:34 hostname named[14670]: exiting (due to fatal error)
Jul 30 21:45:34 hostname systemd[1]: bind9.service: Control process exited,
code=exited status=1
Jul 30 21:45:34 hostname systemd[1]: bind9.service: Failed with result
'exit-code'.
Jul 30 21:45:34 hostname systemd[1]: Failed to start BIND Domain Name Server.
dpkg: error processing package bind9 (--configure):
installed bind9 package post-installation script subprocess returned error
exit status 1
Processing triggers for systemd (239-7) ...
Processing triggers for man-db (2.8.4-1) ...
Errors were encountered while processing:
bind9
needrestart is being skipped since dpkg has failed
E: Sub-process /usr/bin/dpkg returned an error code (1)
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.17.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages bind9 depends on:
ii adduser 3.117
ii bind9utils 1:9.11.4+dfsg-3
ii debconf [debconf-2.0] 1.5.69
ii dns-root-data 2018013001
ii libbind9-160 1:9.11.4+dfsg-3
ii libc6 2.27-5
ii libcap2 1:2.25-1.2
ii libcom-err2 1.44.3-1
ii libdns1102 1:9.11.4+dfsg-3
ii libfstrm0 0.3.0-1+b1
ii libgeoip1 1.6.12-1
ii libgssapi-krb5-2 1.16-2
ii libisc169 1:9.11.4+dfsg-3
ii libisccc160 1:9.11.4+dfsg-3
ii libisccfg160 1:9.11.4+dfsg-3
ii libjson-c3 0.12.1-1.3
ii libk5crypto3 1.16-2
ii libkrb5-3 1.16-2
ii liblmdb0 0.9.22-1
ii liblwres160 1:9.11.4+dfsg-3
ii libprotobuf-c1 1.2.1-2
ii libssl1.1 1.1.0h-4
ii libxml2 2.9.4+dfsg1-7+b1
ii lsb-base 9.20170808
ii net-tools 1.60+git20161116.90da8a0-2
ii netbase 5.4
ii zlib1g 1:1.2.11.dfsg-1
bind9 recommends no packages.
Versions of packages bind9 suggests:
pn bind9-doc <none>
ii dnsutils 1:9.11.4+dfsg-3
ii resolvconf 1.79
pn ufw <none>
-- debconf information:
bind9/run-resolvconf: false
bind9/start-as-user: bind
bind9/different-configuration-file:
