<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I think the source of the systemd unit file is from: <a href="https://gitlab.isc.org/isc-packages/rpms/bind/-/blob/main/named.service.in" id="LPlnkOWALinkPreview">https://gitlab.isc.org/isc-packages/rpms/bind/-/blob/main/named.service.in</a> </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
(And I'm using ISC's repo)</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Perhaps Michał Kępień have any idea? <span id="🙂">🙂 </span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_1">
<div id="LPBorder_GTaHR0cHM6Ly9naXRsYWIuaXNjLm9yZy9pc2MtcGFja2FnZXMvcnBtcy9iaW5kLy0vYmxvYi9tYWluL25hbWVkLnNlcnZpY2UuaW4." class="LPBorder567630" style="width: 100%; margin-top: 16px; margin-bottom: 16px; position: relative; max-width: 800px; min-width: 424px;">
<table id="LPContainer567630" role="presentation" style="padding: 12px 36px 12px 12px; width: 100%; border-width: 1px; border-style: solid; border-color: rgb(200, 200, 200); border-radius: 2px;">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td>
<div id="LPImageContainer567630" style="position: relative; margin-right: 12px; height: 160px; overflow: hidden;">
<a target="_blank" id="LPImageAnchor567630" href="https://gitlab.isc.org/isc-packages/rpms/bind/-/blob/main/named.service.in"><img id="LPThumbnailImageId567630" alt="" height="160" style="display: block;" width="160" src="https://gitlab.isc.org/uploads/-/system/project/avatar/49/rpm-public.png"></a></div>
</td>
<td style="width: 100%;">
<div id="LPTitle567630" style="font-size: 21px; font-weight: 300; margin-right: 8px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px;">
<a target="_blank" id="LPUrlAnchor567630" href="https://gitlab.isc.org/isc-packages/rpms/bind/-/blob/main/named.service.in" style="text-decoration: none; color: var(--themePrimary);">named.service.in · main · ISC Packages / rpms / BIND RPMs - public</a></div>
<div id="LPDescription567630" style="font-size: 14px; max-height: 100px; color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px; margin-right: 8px; overflow: hidden;">
BIND RPM packaging</div>
<div id="LPMetadata567630" style="font-size: 14px; font-weight: 400; color: rgb(166, 166, 166); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif;">
gitlab.isc.org</div>
</td>
</tr>
</tbody>
</table>
<div id="LPCloseButtonContainer567630" class="BteeS" tabindex="0" title="Remove link preview" role="button">
<i data-icon-name="Cancel" aria-hidden="true" id="LPCloseButton567630" class="w6wS4 root-226"></i></div>
</div>
</div>
<br>
<div>
<div id="Signature">
<div></div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> bind-users <bind-users-bounces@lists.isc.org> on behalf of Reindl Harald <h.reindl@thelounge.net><br>
<b>Sent:</b> Friday, 10 June 2022 12.53<br>
<b>To:</b> bind-users@lists.isc.org <bind-users@lists.isc.org><br>
<b>Subject:</b> Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">[EKSTERN MAIL]<br>
<br>
<br>
Am 10.06.22 um 10:52 schrieb Søren Andersen:<br>
> I've installed a fresh BIND on a RHEL 8.6 system with enforcing SElinux,<br>
> and when I try to start BIND with the provided systemd unit file it just<br>
> waits and timeout, and also logs these errors in /var/log/message<br>
><br>
> Jun 10 10:09:25 systemd[1]: isc-bind-named.service: Can't convert PID<br>
> files /var/opt/isc/scls/isc-bind/run/named/named.pid O_PATH file<br>
> descriptor to proper file descriptor: Permission denied<br>
> Jun 10 10:09:25 systemd[1]: isc-bind-named.service: Can't convert PID<br>
> files /var/opt/isc/scls/isc-bind/run/named/named.pid O_PATH file<br>
> descriptor to proper file descriptor: Permission denied<br>
><br>
> If I remove PIDFile in the systemd unit it just works fine..<br>
><br>
><br>
> [Service]<br>
> Type=forking<br>
> EnvironmentFile=-/etc/opt/isc/scls/isc-bind/sysconfig/named<br>
> #PIDFile=/var/opt/isc/scls/isc-bind/run/named/named.pid<br>
> ExecStart=/opt/isc/isc-bind/root/usr/sbin/named -u named $OPTIONS<br>
> ExecReload=/bin/kill -HUP $MAINPID<br>
> ExecStop=/bin/kill -TERM $MAINPID<br>
> PrivateTmp=true<br>
><br>
> Anyone else experiences this?<br>
<br>
PIDFile shouldn't be needed at all - esepcially for threaded services<br>
it's useless, systemd knows the PID anyways<br>
<br>
if that option is used in the provided systemd-unit one should ask the<br>
guy who have written it: why?<br>
<br>
if it would be useful my "ExecReload=/usr/bin/kill -HUP $MAINPID" won't<br>
work for nearly 10 years without "PIDFile" (no i won't use and configure<br>
rndc - keep it simple)<br>
--<br>
Visit <a href="https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fbind-users&data=05%7C01%7Csoande%40norlys.dk%7C35049f37940f4be5405a08da4acfa434%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637904552917897567%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=LlGWwFT3ZmPNZIujZTrEw2vSVvIjumg4W8HogtxTPcQ%3D&reserved=0">
https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fbind-users&data=05%7C01%7Csoande%40norlys.dk%7C35049f37940f4be5405a08da4acfa434%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637904552917897567%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=LlGWwFT3ZmPNZIujZTrEw2vSVvIjumg4W8HogtxTPcQ%3D&reserved=0</a>
to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=05%7C01%7Csoande%40norlys.dk%7C35049f37940f4be5405a08da4acfa434%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637904552917897567%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=9cG5%2FQKYUONKU7zblcRLHkEsMMWzuxVgriKIwCtByE0%3D&reserved=0">
https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=05%7C01%7Csoande%40norlys.dk%7C35049f37940f4be5405a08da4acfa434%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637904552917897567%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=9cG5%2FQKYUONKU7zblcRLHkEsMMWzuxVgriKIwCtByE0%3D&reserved=0</a>
for more information.<br>
<br>
<br>
bind-users mailing list<br>
bind-users@lists.isc.org<br>
<a href="https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fbind-users&data=05%7C01%7Csoande%40norlys.dk%7C35049f37940f4be5405a08da4acfa434%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637904552917897567%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=LlGWwFT3ZmPNZIujZTrEw2vSVvIjumg4W8HogtxTPcQ%3D&reserved=0">https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fbind-users&data=05%7C01%7Csoande%40norlys.dk%7C35049f37940f4be5405a08da4acfa434%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637904552917897567%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=LlGWwFT3ZmPNZIujZTrEw2vSVvIjumg4W8HogtxTPcQ%3D&reserved=0</a><br>
</div>
</span></font></div>
</body>
</html>