Blame refpolicy/man/man8/named_selinux.8
Branch: 9539535cccf339733786b86b963cfee299bc6d2a
Chris PeBenito
bf080a
.TH "named_selinux" "8" "17 Jan 2005" "dwalsh@redhat.com" "named Selinux Policy documentation"
Chris PeBenito
bf080a
.SH "NAME"
Chris PeBenito
bf080a
named_selinux \- Security Enhanced Linux Policy for the Internet Name server (named) daemon
Chris PeBenito
bf080a
.SH "DESCRIPTION"
Chris PeBenito
bf080a
Chris PeBenito
bf080a
Security-Enhanced Linux secures the named server via flexible mandatory access
Chris PeBenito
bf080a
control.
Chris PeBenito
bf080a
.SH BOOLEANS
Chris PeBenito
bf080a
SELinux policy is customizable based on least access required. So by
Chris PeBenito
bf080a
default SElinux policy does not allow named to write master zone files. If you want to have named update the master zone files you need to set the named_write_master_zones boolean.
Chris PeBenito
bf080a
.TP
Chris PeBenito
bf080a
.br
Chris PeBenito
bf080a
setsebool -P named_write_master_zones 1
Chris PeBenito
bf080a
Chris PeBenito
bf080a
.TP
Chris PeBenito
bf080a
You can disable SELinux protection for the named daemon by executing:
Chris PeBenito
bf080a
.TP
Chris PeBenito
bf080a
setsebool -P named_disable_trans 1
Chris PeBenito
bf080a
.br
Chris PeBenito
bf080a
service named restart
Chris PeBenito
bf080a
.TP
Chris PeBenito
bf080a
system-config-securitylevel is a GUI tool available to customize SELinux policy settings.
Chris PeBenito
bf080a
.SH AUTHOR
Chris PeBenito
bf080a
This manual page was written by Dan Walsh <dwalsh@redhat.com>.
Chris PeBenito
bf080a
Chris PeBenito
bf080a
.SH "SEE ALSO"
Chris PeBenito
bf080a
selinux(8), named(8), chcon(1), setsebool(8)
Chris PeBenito
bf080a
Chris PeBenito
bf080a