Re: AppArmor, DHCP, Bind9 issue [SOLVED]

2020-10-02 Thread Petr Menšík
Hello Olivier, On 10/1/20 5:27 PM, Olivier wrote: > Hello, > > Thank you all for replying ! > > Thanks to your suggestions, creating an /etc/bind/subdir directory, and > tweaking /etc/apparmor.d/usr.sbin.named allowed me to let ISC DHCP update > Bind9 entries. It depends, whether zone data are

Re: AppArmor, DHCP, Bind9 issue [SOLVED]

2020-10-01 Thread Ondřej Surý
> On 1. 10. 2020, at 17:27, Olivier wrote: > > 1. I'm hesitant to file a bug on Debian about this. As this both involves > Bind9 and AppArmor, would you say it deserves to be implemented and > documented in default Bind9 installation or that it is too specific for this ? Speaking with my

Re: AppArmor, DHCP, Bind9 issue [SOLVED]

2020-10-01 Thread Olivier
Hello, Thank you all for replying ! Thanks to your suggestions, creating an /etc/bind/subdir directory, and tweaking /etc/apparmor.d/usr.sbin.named allowed me to let ISC DHCP update Bind9 entries. 1. I'm hesitant to file a bug on Debian about this. As this both involves Bind9 and AppArmor,

Re: AppArmor, DHCP, Bind9 issue

2020-09-23 Thread Petr Menšík
Hi Olivier, we on Fedora use SELinux, but have similar problem. I think you should move db.bar.com to /var/lib/bind instead. That means, copy the file there. Leave symlink in /etc/bind to /var/lib/bind if necessary. Primary place after dynamic update must be in directory writable by named. It

Re: AppArmor, DHCP, Bind9 issue

2020-09-22 Thread Scott Nicholas
I think that's a good solution. I edited the config as you did but ended up moving zones into /etc/bind/zones. I guess because Debian already had some littered in /etc/bind but I did not want to give write access to that directory. I think that is your current issue. Classic permissions. "bind"

Re: AppArmor, DHCP, Bind9 issue

2020-09-22 Thread Mark Andrews
Put the zone file in /var/lib/bind and update named.conf. -- Mark Andrews > On 23 Sep 2020, at 00:43, Olivier wrote: >  > Hello, > > I've got one ISC-DHCP server instance (4.4.1) and one Bind9 (9.11.5) instance > installed on a Debian Buster box. > Both come from Debian stable repo. > > I

AppArmor, DHCP, Bind9 issue

2020-09-22 Thread Olivier
Hello, I've got one ISC-DHCP server instance (4.4.1) and one Bind9 (9.11.5) instance installed on a Debian Buster box. Both come from Debian stable repo. I would like my DHCP server to update Bind9 database when leases are allocated to DHCP clients. I followed instructions from [1]. I then met