<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>=== /etc/bind<br>
<font face="monospace">total 84K<br>
drwxr-sr-x 3 root bind 4,0K jun 28 17:07 .<br>
drwxr-xr-x 134 root root 12K jun 22 11:15 ..<br>
-rw-r--r-- 1 root root 2,4K feb 26 06:27 bind.keys<br>
-rw-r--r-- 1 root root 255 feb 26 06:27 db.0<br>
-rw-r--r-- 1 root root 271 jun 30 2017 db.127<br>
-rw-r--r-- 1 root root 237 jun 30 2017 db.255<br>
-rw-r--r-- 1 root root 353 jun 30 2017 db.empty<br>
-rw-r--r-- 1 root root 270 jun 30 2017 db.local<br>
-rw-r--r-- 1 root root 3,1K may 3 2019 db.root<br>
-rw-r--r-- 1 root bind 458 feb 26 06:27 named.conf<br>
-rw-r--r-- 1 root root 498 ago 25 2020
named.conf.default-zones<br>
-rw-r--r-- 1 root root 1,2K jun 28 16:51 named.conf.local<br>
-rw-r--r-- 1 root root 2,8K jun 27 17:44 named.conf.options<br>
-rw-r----- 1 bind bind 144 may 17 13:51 rndc.key<br>
drwxr-xr-x 2 root bind 4,0K jun 28 16:54 zonas<br>
-rw-r--r-- 1 root root 1,3K jun 30 2017 zones.rfc1918</font><br>
<br>
<br>
=== /etc/bind/zonas<br>
<font face="monospace">total 40K<br>
drwxr-xr-x 2 root bind 4,0K jun 28 16:54 .<br>
drwxr-sr-x 3 root bind 4,0K jun 29 07:51 ..<br>
-rw-r--r-- 1 bind bind 323 ene 16 10:59
133.45.210.170.in-addr.arpa<br>
-rw-r--r-- 1 bind bind 394 ene 16 10:58
3.3.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.2.6.4.4.0.0.0.1.1.0.0.0.8.2.ip6.arpa<br>
-rw-r--r-- 1 bind bind 5,4K jun 22 12:40 db.unau.edu.ar</font><br>
<br>
=== /var/cache/bind/keys/<br>
<font face="monospace">total 24K<br>
drwxrwx--- 2 root bind 4,0K jun 23 11:26 .<br>
drwxrwxr-x 3 root bind 4,0K jun 28 16:56 ..<br>
-rw-r----- 1 root bind 342 jun 23 11:25
Kunau.edu.ar.+013+33519.key<br>
-rw-r----- 1 root bind 187 jun 23 11:25
Kunau.edu.ar.+013+33519.private<br>
-rw-r----- 1 root bind 341 jun 23 11:25
Kunau.edu.ar.+013+44318.key<br>
-rw-r----- 1 root bind 187 jun 23 11:25
Kunau.edu.ar.+013+44318.private</font><br>
<br>
Error is not the same as before, I see it know (fresh eyes maybe)<br>
<br>
<font face="monospace">Jun 29 08:42:37 web kernel:
[5679658.761672] audit: type=1400 audit(1688038957.685:548):
apparmor="DENIED" operation="mknod" profile="named"
name="/etc/bind/zonas/db.unau.edu.ar.jbk" pid=1350974
comm="isc-net-0001" requested_mask="c" denied_mask="c" fsuid=107
ouid=107<br>
Jun 29 08:42:37 web kernel: [5679658.767241] audit: type=1400
audit(1688038957.689:549): apparmor="DENIED" operation="mknod"
profile="named" name="/etc/bind/zonas/tmp-JjAGwma8Hr"
pid=1350974 comm="isc-net-0001" requested_mask="c"
denied_mask="c" fsuid=107 ouid=107<br>
Jun 29 08:42:37 web kernel: [5679658.761672] audit: type=1400
audit(1688038957.685:548): apparmor="DENIED" operation="mknod"
profile="named" name="/etc/bind/zonas/db.unau.edu.ar.jbk"
pid=1350974 comm="isc-net-0001" requested_mask="c"
denied_mask="c" fsuid=107 ouid=107<br>
Jun 29 08:42:37 web kernel: [5679658.767241] audit: type=1400
audit(1688038957.689:549): apparmor="DENIED" operation="mknod"
profile="named" name="/etc/bind/zonas/tmp-JjAGwma8Hr"
pid=1350974 comm="isc-net-0001" requested_mask="c"
denied_mask="c" fsuid=107 ouid=107</font><br>
<br>
<br>
So, shouldn't that write attempt happen in /var/cache/bind?<br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">El 28/6/23 a las 21:18, Mark Andrews
escribió:<br>
</div>
<blockquote type="cite"
cite="mid:FFCCE484-31B9-4431-97BD-0526D6146001@isc.org">
<pre class="moz-quote-pre" wrap="">Show us the current permissions now that you have fixed them including every directory from
the root. The permissions you had originally where wrong and wouldn’t normally be that way.
Something or someone changed them. It may have happened again. We can’t see what you see
so you have to show more details. If you you still have an error message cut-and-paste the
new one including time stamps.
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On 29 Jun 2023, at 09:03, Daniel A. Rodriguez via bind-users <a class="moz-txt-link-rfc2396E" href="mailto:bind-users@lists.isc.org"><bind-users@lists.isc.org></a> wrote:
Exactly the same
El 28 de junio de 2023 6:50:26 p. m. GMT-03:00, Mark Andrews <a class="moz-txt-link-rfc2396E" href="mailto:marka@isc.org"><marka@isc.org></a> escribió:
The *exact* same error, word for word, or a different permission denied?
On 29 Jun 2023, at 06:35, Daniel Armando Rodriguez via bind-users <a class="moz-txt-link-rfc2396E" href="mailto:bind-users@lists.isc.org"><bind-users@lists.isc.org></a> wrote:
However, as soon as I added this
dnssec-policy "default";
inline-signing yes;
Error came up again :-(
--
Visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at <a class="moz-txt-link-freetext" href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
--
Visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
ISC funds the development of this software with paid support subscriptions. Contact us at <a class="moz-txt-link-freetext" href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
<div class="moz-signature">-- <br>
<div dir="ltr">________________________________________________<br>
<table>
<tbody>
<tr>
<td><img
src="https://correo.unau.edu.ar/skins/elastic/images/logo.svg"
width="73" height="96"></td>
<td><strong>Daniel A. Rodriguez</strong><br>
<em>Informática, Conectividad y Sistemas</em><br>
Universidad Nacional del Alto Uruguay<br>
San Vicente - Misiones - Argentina<br>
<a href="https://informatica.unau.edu.ar" rel="noopener">informatica.unau.edu.ar</a></td>
</tr>
</tbody>
</table>
</div>
</div>
</body>
</html>