Skip to content

bind is not able to listen on new interfaces when interfaces change #233

Description

@bahamat

After the last change to drop permissions on bind, if the interfaces change named won't be able to open a socket.

Using either rndc scan or rndc reconfig will result in the following errors written to syslog:

2019-11-16T20:54:00+00:00 localhost named[23042]: [ID 873579 daemon.error] could not listen on UDP socket: permission denied
2019-11-16T20:54:00+00:00 localhost named[23042]: [ID 873579 daemon.error] creating IPv4 interface lo0 failed; interface ignored
2019-11-16T20:54:00+00:00 localhost named[23042]: [ID 873579 daemon.error] could not listen on UDP socket: permission denied
2019-11-16T20:54:00+00:00 localhost named[23042]: [ID 873579 daemon.error] creating IPv4 interface lo0 failed; interface ignored

I can run ppriv -s A+net_privaddr $(pgrep -c $(svcs -H -o ctid pkgsrc/bind)), which will allow named to recognize new interfaces and work properly with both rndc scan and rndc reconfig.

Activity

  1. added a commit that references this issue on Mar 17, 2020
    7914dcc
  2. added a commit that references this issue on Jun 7, 2020
  3. bahamat commented on Jul 20, 2020

    @bahamat
    Author

    It looks like a full explicit restart of the pkgsrc/bind smf service fixes this.

  4. added a commit that references this issue on Nov 28, 2021
  5. added a commit that references this issue on Dec 18, 2021
  6. added a commit that references this issue on Sep 4, 2022
  7. added a commit that references this issue on Sep 13, 2022
  8. 60 remaining items

  9. added a commit that references this issue on Jun 1, 2026
  10. added a commit that references this issue on Jul 26, 2026
  11. added a commit that references this issue on Aug 2, 2026
  12. added a commit that references this issue on Aug 25, 2026
  13. added a commit that references this issue on Aug 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions