Ask Your Question

I need a list of SELinux rules for bind-chroot

asked 2017-08-09 09:58:44 +0000

toddandmargo gravatar image

Hi All,

Would someone point me to a paper describing what SELinux rules I need to implement to use with bind-chroot?

Many thanks, -T

edit retag flag offensive close merge delete


Does it not work?

Samuel Sieb ( 2017-08-11 20:17:34 +0000 )edit

It is working. I want to document what I did for the future, rather than waiting for alerts from SELinux

toddandmargo ( 2017-08-11 21:42:18 +0000 )edit

This is some of the manure I am trying to get around too:

# semanage fcontext -a -t FILE_TYPE 'session.key'

where FILE_TYPE is one of the following: dnssec_trigger_var_run_t, ipa_var_lib_t, krb5_host_rcache_t, krb5_keytab_t, named_cache_t, named_log_t, named_tmp_t, named_var_run_t.

# semanage fcontext -a -t named_var_run_t 'session.key'
# restorecon -v 'session.key'

How am I suppose to know what "FILE_TYPE" I am using?

Mumble, mumble

toddandmargo ( 2017-08-11 21:49:51 +0000 )edit

But I do. So where are the rules for bind?

toddandmargo ( 2017-08-11 23:34:53 +0000 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2017-08-11 22:16:05 +0000

Samuel Sieb gravatar image

You shouldn't need to mess around with selinux. See https://docs.fedoraproject.org/en-US/... for how to configure it.

edit flag offensive delete link more


SELinux cuts lose when you first start running bind-chroot. What is "suppose" to be and what "are" are two different things. Do you know the rules?

toddandmargo ( 2017-08-12 00:13:15 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

[hide preview]

Use your votes!

  • Use the 30 daily voting points that you get!
  • Up-vote well framed questions that provide enough information to enable people provide answers.
  • Thank your helpers by up-voting their comments and answers. If a question you asked has been answered, accept the best answer by clicking on the checkbox on the left side of the answer.
  • Down-voting might cost you karma, but you should consider doing so for incorrect or clearly detrimental questions and answers.

Question Tools

1 follower


Asked: 2017-08-09 09:58:44 +0000

Seen: 60 times

Last updated: Aug 11 '17