Something seems to have gone wrong with my bind installation.

There was an upgrade to this: Version: 1:9.7.3.dfsg-1~squeeze10

when the upgrade ran, the owner on /etc/bind/rndc.key got changed to bind:bind.

The service can't start until I change it to root:bind, as discussed in Debian Bug 386791.

However the package then sits at partially installed (because it couldn't start).

Any time I try to install other software, this post-install script runs, changes the ownership on rndc.key again, and bind fails to start.

I've tried tinkering with what I think is the postinstall script:
 /var/lib/dpkg/info/bind9.postinst but I can't much debug output. and it seems if I try to install the latest bind with dpkg, my edited version of that script gets overwritten.

What is the right approach to solving this?

Regards, Andrew.