named_selinux(8)
NAME
named_selinux - Security Enhanced Linux Policy for the Internet Name
server (named) daemon
DESCRIPTION
Security-Enhanced Linux secures the named server via flexible mandatory
access control.
BOOLEANS
SELinux policy is customizable based on least access required. So by
default SElinux policy does not allow named to write master zone files.
If you want to have named update the master zone files you need to set
the named_write_master_zones boolean.
setsebool -P named_write_master_zones 1
You can disable SELinux protection for the named daemon by executing:
- setsebool -P named_disable_trans 1
- service named restart
- system-config-securitylevel is a GUI tool available to customize SELinux policy settings.
AUTHOR
This manual page was written by Dan Walsh <dwalsh@redhat.com>.