Chris PeBenito bf080a
.TH  "named_selinux"  "8"  "17 Jan 2005" "dwalsh@redhat.com" "named Selinux Policy documentation"
Chris PeBenito bf080a
.SH "NAME"
Chris PeBenito bf080a
named_selinux \- Security Enhanced Linux Policy for the Internet Name server (named) daemon
Chris PeBenito bf080a
.SH "DESCRIPTION"
Chris PeBenito bf080a
Chris PeBenito bf080a
Security-Enhanced Linux secures the named server via flexible mandatory access
Chris PeBenito bf080a
control.  
Chris PeBenito bf080a
.SH BOOLEANS
Chris PeBenito bf080a
SELinux policy is customizable based on least access required.  So by 
Chris PeBenito bf080a
default SElinux policy does not allow named to write master zone files.  If you want to have named update the master zone files you need to set the named_write_master_zones boolean.
Chris PeBenito bf080a
.TP
Chris PeBenito bf080a
.br
Chris PeBenito bf080a
setsebool -P named_write_master_zones 1
Chris PeBenito bf080a
Chris PeBenito bf080a
.TP
Chris PeBenito bf080a
You can disable SELinux protection for the named daemon by executing:
Chris PeBenito bf080a
.TP
Chris PeBenito bf080a
setsebool -P named_disable_trans 1
Chris PeBenito bf080a
.br
Chris PeBenito bf080a
service named restart
Chris PeBenito bf080a
.TP
Chris PeBenito bf080a
system-config-securitylevel is a GUI tool available to customize SELinux policy settings.
Chris PeBenito bf080a
.SH AUTHOR	
Chris PeBenito bf080a
This manual page was written by Dan Walsh <dwalsh@redhat.com>.
Chris PeBenito bf080a
Chris PeBenito bf080a
.SH "SEE ALSO"
Chris PeBenito bf080a
selinux(8), named(8), chcon(1), setsebool(8)
Chris PeBenito bf080a
Chris PeBenito bf080a