Domains hosted in Plesk are not accessible: Bind is not serving queries externally: named[]: open: /etc/named.conf: permission denied

Symptoms

• Domains are not resolving externally.

• The following errors could be found in /var/log/syslog:

  named[25513]: open: /etc/named.conf: permission denied
  named[25513]: loading configuration: permission denied
  kernel:[9748] audit: type=1400 audit(166963.1:193): apparmor="DENIED" operation="open" profile="/usr/sbin/named" name="/mnt/dir/plesk/var/named/run-root/etc/named.conf" pid=25513 comm="named" requested_mask="r" denied_mask="r" fsuid=110 ouid=0
  named[25513]: exiting (due to fatal error)

Cause

The named profile is in the apparmor's enforcing mode.

Resolution

1. Connect to the server via SSH

2. Open /etc/apparmor.d/local/usr.sbin.named file if any text editor, for example "vi".

3. Add the following line into the opened file:

   /var/named/run-root/** rwm,

4. Ensure that include <local/usr.sbin.named> directive is not commented with any preceding # and save the file.

   # Site-specific additions and overrides. See local/README for details.
   include <local/usr.sbin.named>
   }

5. Reload AppArmor:

   # systemctl reload apparmor

6. Start bind9 service:

   # systemctl restart bind9