debian 11 / bind dns server / slave zones

Discussion in 'ISPConfig 3 Priority Support' started by cmks, May 9, 2023.

  1. cmks

    cmks Member HowtoForge Supporter

    Hi,
    after setup a new client server (only used with the DNS role) with ISPConfig and bind, ISPConfig configures bind to store slave zone files under
    /etc/bind/slave
    The apparmor config prohibits bind to write anything under /etc/bind but expects bind to write at
    /var/cache/bind/

    I had to
    mkdir /var/cache/bind/slave
    and to symlink
    /etc/bind/slave -> /var/cache/bind/slave
    to get bind to deal with slave zones.

    I am not sure if this approach is the right one, but there is no config option in ISPConfig server config for the directory to store slave zones in.

    Regards,
    CMKS
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Which ISPConfig version?
     
  3. cmks

    cmks Member HowtoForge Supporter

    ISPConfig 3.2.9p1, indeed ;)
     
  4. pyte

    pyte Well-Known Member HowtoForge Supporter

    You could just permit it to write to the path. Something like this should work(?)

    Edit /etc/apparmor.d/local/usr.sbin.named and add the line "/etc/bind/slave rw,". Make sure to refresh apparmor after editing.

    Might want to read up on this, because apparmor is a long time ago for me :)
     

Share This Page