<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">El 29/6/23 a las 09:40, Anand Buddhdev
escribió:<br>
</div>
<blockquote type="cite"
cite="mid:38793118-58fd-73ea-7b44-0bd2ce374008@ripe.net">On
29/06/2023 14:13, Daniel Armando Rodriguez via bind-users wrote:
<br>
<br>
[snip]
<br>
<br>
<blockquote type="cite">Error is not the same as before, I see it
know (fresh eyes maybe)
<br>
<br>
Jun 29 08:42:37 web kernel: [5679658.761672] audit: type=1400
audit(1688038957.685:548): apparmor="DENIED" operation="mknod"
profile="named" name="/etc/bind/zonas/db.unau.edu.ar.jbk"
pid=1350974 comm="isc-net-0001" requested_mask="c"
denied_mask="c" fsuid=107 ouid=107
<br>
</blockquote>
<br>
[snip]
<br>
<br>
<blockquote type="cite">So, shouldn't that write attempt happen in
/var/cache/bind?
<br>
</blockquote>
<br>
When BIND signs a zone, it keeps a copy of the signed zone next to
the original zone file, by creating a .signed file. Along with
that it also creates a couple of other files, for journaling and
keeping state.
<br>
<br>
In your case, BIND will try to create those in /etc/bind/zonas,
and apparmor is denying it.
<br>
<br>
Move your zone files into /var/cache/bind, which is a better place
to keep zone files, and not /etc/bind (this should be for BIND's
configuration, not for zone files).
<br>
<br>
Regards,
<br>
Anand
<br>
</blockquote>
<div class="moz-signature"><br>
</div>
<div class="moz-signature">Indeed, after doing that stop complaining
:-)<br>
</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature"><br>
<div dir="ltr">________________________________________________<br>
<table>
<tbody>
<tr>
<td><img
src="https://correo.unau.edu.ar/skins/elastic/images/logo.svg"
width="73" height="96"></td>
<td><strong>Daniel A. Rodriguez</strong><br>
<em>Informática, Conectividad y Sistemas</em><br>
Universidad Nacional del Alto Uruguay<br>
San Vicente - Misiones - Argentina<br>
<a href="https://informatica.unau.edu.ar" rel="noopener">informatica.unau.edu.ar</a></td>
</tr>
</tbody>
</table>
</div>
</div>
</body>
</html>