Domains are not accessible: Bind is not serving queries externally: named[]: open: /etc/named.conf: permission denied

Symptoms

• Domains are not resolving externally.

• The following errors could be found in /var/log/syslog:

  named[25513]: open: /etc/named.conf: permission denied
  named[25513]: loading configuration: permission denied
  kernel: [ 9748.360203] audit: type=1400 audit(1667404612.963:193): apparmor="DENIED" operation="open" profile="/usr/sbin/named" name="/mnt/dir/plesk/var/named/run-root/etc/named.conf" pid=25513 comm="named" requested_mask="r" denied_mask="r" fsuid=110 ouid=0
  named[25513]: exiting (due to fatal error)

Cause

The named profile is in the apparmor's enforcing mode.

Resolution

1. Connect to the server via SSH

2. Enable complain mode for named:

   # ln -s /etc/apparmor.d/usr.sbin.named /etc/apparmor.d/disable/

3. Reload apparmor

   # systemctl reload apparmor

4. Restart bind:

   # systemctl restart named