hacked the postinst script to set the permission I wanted, so bind9 installs properly. Probably going to be broken with the next upgrade to that package. I diff --git a/debian/bind9.postinst b/debian/bind9.postinst index 98c4cd3..68e7f3b 100644 --- a/debian/bind9.postinst +++ b/debian/bind9.postinst @@ -116,7 +116,7 @@ if [ "$1" = configure ]; then uid=$(ls -ln /etc/bind/rndc.key | awk '{print $3}') if [ "$uid" = "0" ]; then - [ -n "$localconf" ] || chown bind /etc/bind/rndc.key + [ -n "$localconf" ] || chown root:bind /etc/bind/rndc.key chgrp bind /etc/bind chmod g+s /etc/bind chgrp bind /etc/bind/rndc.key /var/run/bind/run /var/cache/bind Although perhaps it should be something like + [ -n "$localconf" ] || chown $(getent passwd $uid | cut -d ':' -f 1):bind /etc/bind/rndc.key which just looks like a mess.