dns/application: Allowed bind using AppArmor to write temporary journal files

4 years ago · a51225ccc8
parent 3932501d54
commit a51225ccc8
1 changed files with 4 additions and 0 deletions
--- a/roles/dns/application/templates/aa-profile.local
+++ b/roles/dns/application/templates/aa-profile.local
@ -1,6 +1,10 @@
 {{ zones_directory }}/* rw,
 {{ zones_directory }}/*/tmp-* rwk,
+# Journal files required by Bind to save temporary changes
 {{ zones_directory }}/*/zone.db.jbk rwk,
 {{ zones_directory }}/*/zone.db.jnl rwk,
+{{ zones_directory }}/*/zone.db.jnw rwk,
 {{ zones_directory }}/*/zone.db.signed rwk,
+{{ zones_directory }}/*/zone.db.signed.jbk rwk,
 {{ zones_directory }}/*/zone.db.signed.jnl rwk,
+{{ zones_directory }}/*/zone.db.signed.jnw rwk,