BIND named cannot write a "tmp" file

[jimbobrae]

linux v6.12.0-160000.33-default x86_64
ID=“opensuse-leap”
VERSION_ID=“16.0”
BIND 9.20.21 (Stable Release)

After a migration from 15.6 to 16.0 there were a quite a few annoying issues that arose due mainly to enabling selinux. Most of those have been resolved (mostly by disabling selinux).

A lingering problem is shown below. I do not understand why a tmp file cannot be created. The directory and file permissions should allow named to do whatever it wants, as it did in 15.6.

08-Jun-2026 10:51:02.984 general: error: dumping master file: /var/lib/named/master/tmp-ZXPKJIF3BZ: open: permission denied
08-Jun-2026 10:51:02.984 general: warning: zone 109.88.192.in-addr.arpa/IN: dump failed: permission denied

$ show-app named
412:named  8043  0.0  1.1 509552 185068 ?  Ssl  Jun06   0:24 /usr/sbin/named -u named
$
$  ll /var/lib/named/ | grep master
drwxr-xr-x. 1 root  root  1222 Jun  2 14:08 master/

[jimbobrae]

I looked more closely at the last line of data above and realized that it was not how I had modified the directory permissions, prior to a reboot. Below is the (again) changed permission for the master directory that allows “tmp” file creation.

This implies something is changing permissions without permission.

$ ll /var/lib/named/ | grep master
drwxrwxr-x. 1 named named 1222 Jun  8 13:41 master/
$

[mhurron]

During the migration, did you switch to SELinux?

[jimbobrae]

Yes. It offered the option; I chose it.

Also, I have since disabled it. I have returned to apparmor for now.