Public bug reported:

Ubuntu Server 24.04 on a Raspberry Pi 5

In /etc/default/named I have:

OPTIONS="-4 -u bind"

All IPs are IPv4.

I edit /etc/bind/named.conf.options and I put this in there:

filter-aaaa-on-v4 yes;

Restart bind9, I get this error:

apparmor="DENIED" operation="open" class="file" profile="named"
name="/proc/version_signature" pid=13914 comm="named" requested_mask="r"
denied_mask="r" fsuid=109 ouid=0

If I add /proc/version_signature to the named AppArmor, then I get more
errors:

apparmor="DENIED" operation="capable" class="cap" profile="named"
pid=14309 comm="named" capability=21  capname="sys_admin"

I can't use that filter option and I need it.

** Affects: bind9 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2111943

Title:
  filter-aaaa-on-v4 breaks the service

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/2111943/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to