<html><head><meta http-equiv="content-type" content="text/html; charset=us-ascii"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><meta http-equiv="content-type" content="text/html; charset=us-ascii"><div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hi,<div><br></div><div>There's also the issue that there's no such thing as "the" PowerDNS install: you have a choice of about backends (of which about 4 could be called "common"), you could enable the API or not, you could use Carbon or not, you could use Primary/Replica (AXFR-based) transfers etc.</div><div><br></div><div>So creating a "generic" one for everything sounds easier than it is.</div><div><br></div><div>Frank</div><div><br><div><br><blockquote type="cite"><div>On 30 Jul 2023, at 12:57, Kevin P. Fleming via Pdns-users <pdns-users@mailman.powerdns.com> wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">If by "the RPM" you are referring to the ones distributed by the PowerDNS team (on<span class="Apple-converted-space"> </span><a href="http://repo.powerdns.com/">repo.powerdns.com</a>) then no, it does not. It also doesn't include a profile for AppArmor.<br></div><div style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><div style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">It is possible that the PowerDNS team would accept a contribution of such profiles to be included in the packages, but the ongoing cost of supporting those could be high, and it may not be possible to have the same profiles operate properly across all of the RPM-based distributions.<br></div><div style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><div style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">On Sun, Jul 30, 2023, at 06:48, Victor Hugo dos Santos wrote:<br></div><blockquote type="cite" id="qt" style="font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div dir="auto"><div>Hi<br></div><div dir="auto"><br></div><div dir="auto">The rpm should come with the correct selinux by default???<br></div><div dir="auto"><br></div><div dir="auto">Salu2<br></div><div dir="auto"><br></div></div><div><br></div><div class="qt-gmail_quote"><div dir="ltr" class="qt-gmail_attr">On Sat, Jul 29, 2023, 17:27 Kevin P. Fleming via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com">pdns-users@mailman.powerdns.com</a>> wrote:<br></div><blockquote class="qt-gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-color: rgb(204, 204, 204); border-left-style: solid; border-left-width: 1px; padding-left: 1ex;"><div><u></u><br></div><div><div>There's nothing to 'fix' in pdns-auth. Its behavior is based on the functions it performs.<br></div><div><br></div><div>If there is no SELinux policy for it, or there is one but it's not correct, then SELinux will interfere. The proper solution is to determine whether any of the actions that pdns-auth is taking are invalid. If they are invalid, those are bugs (but this is unlikely); if they are valid, the SELinux policy needs to permit them.<br></div><div><br></div><div>On Sat, Jul 29, 2023, at 11:11, lejeczek via Pdns-users wrote:<br></div><blockquote type="cite" id="qt-m_-6202750761025058654qt"><div><span class="size" style="font-size: 13px;"><span>Hi guys.<br><br>Setting master=yes - on Centos 9s - results in SE denials and 'pdns' fails to start.<br>...<br>About to create 3 backend threads for UDP<br>Exiting because communicator thread died with error: Resolver binding to local UDP socket on '0.0.0.0': Permission denied<br>Started PowerDNS Authoritative Server.<br>...<br><br>Would you know if there ia boolean I'm missing or perhaps pdns' end can be "fixed"?<br>It'd be good not to have build dedicated se module for that.<br><br>many thanks, L.</span></span></div><div>_______________________________________________<br></div><div>Pdns-users mailing list<br></div><div><a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank" rel="noreferrer">Pdns-users@mailman.powerdns.com</a><br></div><div><a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank" rel="noreferrer">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br></div><div><br></div></blockquote><div><br></div></div><div>_______________________________________________<br></div><div>Pdns-users mailing list<br></div><div><a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank" rel="noreferrer">Pdns-users@mailman.powerdns.com</a><br></div><div><a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br></div></blockquote></div></blockquote><div style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br></div><span style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Pdns-users mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Pdns-users@mailman.powerdns.com</span><br style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><span style="caret-color: rgb(0, 0, 0); font-family: Graphik-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">https://mailman.powerdns.com/mailman/listinfo/pdns-users</span></div></blockquote></div><br></div></div></body></html>