bind910 ships with /etc/rndc.conf and the default key straight from the documentation. Please don't. Reproducible: Always Steps to Reproduce: 1. Find some person who didn't think about changing the key and copied the controls {} directive from the bind9 manual. 2. create a rndc.conf with the stock key 3. rndc -c rnd.conf stop 4. DNS stops. Actual Results: rndc: reload command successful Expected Results: permission denied.
Fixed in 9.1.0-5