APPLIES TO:

Symptoms

1. DNS service does not start at “Tools & Settings > Services Management“:

   Unable to make action: Unable to manage service by dnsmng: dnsmng: 

   Service /etc/init.d/bind9 failed to start ('--start', 'dns')
   

2. Component bind is marked as not installed on Tools & Settings > Components.
3. Attempt to update BIND package fails:

   ~# apt-get update bind9-utils
   ...
   update-initramfs: Generating /boot/initrd.img-3.2.0-51-generic
   Errors were encountered while processing:
    bind9
   E: Sub-process /usr/bin/dpkg returned an error code (1)
   

4. Messages in /var/log/syslog indicate that /usr/sbin/named process has been denied access to files:

   Jul 31 20:51:51 server kernel: [72092.073422] type=1400 audit(1375296711.625:24): 

   apparmor="DENIED" operation="open" parent=22090 profile="/usr/sbin/named" 

   name="/var/named/run-root/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libgost.so" 

   pid=22091 comm="named" requested_mask="r" denied_mask="r" fsuid=107 ouid=0
   

Cause

AppArmor security system is installed on the server and prevents proper update of BIND DNS server.

Resolution

1. Stop and disable AppArmor using instructions from article #112903:

   ~# /etc/init.d/apparmor stop
   ~# /etc/init.d/apparmor teardown
   ~# update-rc.d -f apparmor remove
   

2. Update/re-install BIND packages using apt-get:

   ~# apt-get install bind9
   

3. Update list of installed components in Plesk:

   ~# /opt/psa/admin/bin/packagemng --set-dirty-flag
   ~# /opt/psa/admin/bin/packagemng --list