Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got bind setup on a fresh install of Ubuntu Karmic

I am trying to send bind some updates, but it fails with this message appearing in the logs

kernel: [254421.299955] type=1503 audit(1260156728.002:104): operation="mknod" pid=1111 parent=1 profile="/usr/sbin/named" requested_mask="w::" denied_mask="w::" fsuid=105 ouid=105 name="/etc/bind/primary/"

It seems to be selinux related, but I don't have selinux setup on the machine

share|improve this question
Are you sure that SElinux is disabled? What's the output of getenforce? – rodjek Dec 7 '09 at 4:14
It says 'Disabled' – aussiegeek Dec 7 '09 at 4:16
Output of ps aux |grep bind and ls -ld /etc/bind/primary plz – womble Dec 7 '09 at 4:44
ps aux |grep bind bind 1483 0.2 0.5 201952 23504 ? Ssl 14:55 0:00 /usr/sbin/named -u bind ls -ld /etc/bind/primary drwxr-sr-x 2 bind bind 4096 2009-12-04 16:07 /etc/bind/primary – aussiegeek Dec 7 '09 at 4:57
up vote 1 down vote accepted

Did you install bind with Ubuntu's package management or from source? Maybe AppArmor is kicking in?

share|improve this answer
Yes, it was AppArmour getting in the way – aussiegeek Dec 7 '09 at 7:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.