I checked again, to confirm the behavior. After reverting the changes in /etc/apparmor.d/usr.sbin.unbound:
sudo service apparmor reload sudo service unbound restart Job for unbound.service failed because a timeout was exceeded. See "systemctl status unbound.service" and "journalctl -xe" for details. dig +dnssec SOA iis.se ; <<>> DiG 9.10.3-P4-Ubuntu <<>> +dnssec SOA iis.se ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61659 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 65494 ;; QUESTION SECTION: ;iis.se. IN SOA ;; ANSWER SECTION: iis.se. 3600 IN SOA ns.nic.se. hostmaster.iis.se. 1519057201 14400 3600 1814400 14400 ;; Query time: 79 msec ;; SERVER: 127.0.0.53#53(127.0.0.53) ;; WHEN: Mon Feb 19 18:52:44 CET 2018 ;; MSG SIZE rcvd: 89 Versus applying the patch again. sudo service apparmor reload sudo service unbound restart dig +dnssec SOA iis.se ; <<>> DiG 9.10.3-P4-Ubuntu <<>> +dnssec SOA iis.se ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3817 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;iis.se. IN SOA ;; ANSWER SECTION: iis.se. 3600 IN SOA ns.nic.se. hostmaster.iis.se. 1519057201 14400 3600 1814400 14400 iis.se. 3600 IN RRSIG SOA 5 2 3600 20180301152001 20180219152001 65490 iis.se. jRZmwmeu1HeAhITwVf27l+3tWG+MenaxsfMDAngDWKQL7XX8ZzS4D2b8 KfntCeXSY0CLWJIo+jO3FKVOD/zydxyyhFlkovvT9f0QFgR+SMd7O7An H+P3UC1aTcudXbFmY3v5v+9UQOB5MXliZO2L3Ceyn6mV3mAq9zCO4jSO gSk= ;; AUTHORITY SECTION: iis.se. 3600 IN NS ns.nic.se. iis.se. 3600 IN NS ns3.nic.se. iis.se. 3600 IN NS i.ns.se. iis.se. 3600 IN RRSIG NS 5 2 3600 20180301152001 20180219152001 65490 iis.se. J5a516jlDZgx1kGeL6lzSfqzjbfiCzMO+Mg8R4lSeznkfNYNA50ord6M vYc8QZnHsX8ooUkt5uuZGbNIhp6OM7PCP3U6GT/od5Hul+x1Kucvddi3 0y0vXzmd0thIdve8iqSbhcaZw6SsSZPKsTb93ssgliK/89M5zr8cjOw6 d+A= ;; Query time: 311 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Mon Feb 19 18:54:17 CET 2018 ;; MSG SIZE rcvd: 472 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1723900 Title: unbound systemctl (re)start fails due to Apparmor profile issue To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1723900/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
