Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-07-01 Thread Petr Menšík
On 6/10/22 12:53, Reindl Harald wrote: PIDFile shouldn't be needed at all - esepcially for threaded services it's useless, systemd knows the PID anyways if that option is used in the provided systemd-unit one should ask the guy who have written it: why? if it would be useful my "ExecReload=/

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-14 Thread Michał Kępień
Søren, > Oh.. gosh.. You're right.. It works! - It wasn't 100% clear to me that this > was the only correct way to install bind from your repo. We have seen users run into this exact same issue before, so I have now made this particular bit of information more prominent on the "landing pages" of

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-14 Thread Søren Andersen
Cc: Sandro ; bind-users@lists.isc.org Subject: Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux [EKSTERN MAIL] Søren, > On a fresh install the selinux context are 'var_t', and if I changed it to > 'named_var_run_t' it works! This is the suspicio

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-13 Thread Michał Kępień
Søren, > On a fresh install the selinux context are 'var_t', and if I changed it to > 'named_var_run_t' it works! This is the suspicious part for me. How did you install the packages? The only supported way is the one that is documented [1]: dnf install isc-bind That pulls in the SCL meta

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-13 Thread Ondřej Surý
Sandro, you did nothing wrong. No need to apologize from your side. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours. > On 10. 6. 2022, at 17:45, Sandro wrote: > > My apologi

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-13 Thread Søren Andersen
7;/usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID' PrivateTmp=true [Install] WantedBy=multi-user.target Anyone else who are using ISC repo and have the same issue with the wrong selinux context? ____ From: bind-users on behalf of S

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Sandro
On 10-06-2022 17:21, Reindl Harald wrote: My apologies if I offended you. seriously - about what magic are you talking? do you even know what a pidfile is? it's a simple textfile where the process writes it's PID and PIDFile forces systemd to read that file and use the content as "Main PID"

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Reindl Harald
Am 10.06.22 um 17:07 schrieb Sandro: On 10-06-2022 16:02, Reindl Harald wrote: come on! the OP clearly stated the only problem is the "PIDFile" line in the systemd-unit and so what named writes or not is completly irrelevant "PIDFile" for systemd has nothing to do with "pid-file" of named

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Sandro
On 10-06-2022 16:02, Reindl Harald wrote: come on! the OP clearly stated the only problem is the "PIDFile" line in the systemd-unit and so what named writes or not is completly irrelevant "PIDFile" for systemd has nothing to do with "pid-file" of named :facepalm: Indeed. I was led down the

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Reindl Harald
Am 10.06.22 um 15:56 schrieb Sandro: On 10-06-2022 15:27, Reindl Harald wrote: Am 10.06.22 um 15:22 schrieb Sandro: On 10-06-2022 12:53, Reindl Harald wrote: if it would be useful my "ExecReload=/usr/bin/kill -HUP $MAINPID" won't work for nearly 10 years without "PIDFile" (no i won't use an

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Sandro
On 10-06-2022 15:27, Reindl Harald wrote: Am 10.06.22 um 15:22 schrieb Sandro: On 10-06-2022 12:53, Reindl Harald wrote: if it would be useful my "ExecReload=/usr/bin/kill -HUP $MAINPID" won't work for nearly 10 years without "PIDFile" (no i won't use and configure rndc - keep it simple) Th

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Reindl Harald
Am 10.06.22 um 15:22 schrieb Sandro: On 10-06-2022 12:53, Reindl Harald wrote: if it would be useful my "ExecReload=/usr/bin/kill -HUP $MAINPID" won't work for nearly 10 years without "PIDFile" (no i won't use and configure rndc - keep it simple) That's a personal choice, but probably not the

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Sandro
On 10-06-2022 10:52, Søren Andersen wrote: I've installed a fresh BIND on a RHEL 8.6 system with enforcing SElinux, and when I try to start BIND with the provided systemd unit file it just waits and timeout, and also logs these errors in /var/log/message Jun 10 10:09:25 systemd[1]: isc-bind-

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Reindl Harald
RestrictSUIDSGID=yes *From:* bind-users on behalf of Reindl Harald *Sent:* Friday, 10 June 2022 12.53 *To:* bind-users@lists.isc.org *Subject:* Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Søren Andersen
nd-users on behalf of Reindl Harald Sent: Friday, 10 June 2022 12.53 To: bind-users@lists.isc.org Subject: Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux [EKSTERN MAIL] Am 10.06.22 um 10:52 schrieb Søren Andersen: > I've installed a fresh BIND on a RHEL 8.6

Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Reindl Harald
Am 10.06.22 um 10:52 schrieb Søren Andersen: I've installed a fresh BIND on a RHEL 8.6 system with enforcing SElinux, and when I try to start BIND with the provided systemd unit file it just waits and timeout, and also logs these errors in /var/log/message Jun 10 10:09:25 systemd[1]: isc-bin

re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux

2022-06-10 Thread Søren Andersen
Hello, I've installed a fresh BIND on a RHEL 8.6 system with enforcing SElinux, and when I try to start BIND with the provided systemd unit file it just waits and timeout, and also logs these errors in /var/log/message Jun 10 10:09:25 systemd[1]: isc-bind-named.service: Can't convert PID files