Re: AW: AW: AW: named 9.3.3 start-script

On Tue, Jul 08, 2008 at 01:07:54PM +0200, Schmidt, Florian wrote:

> Yeah, it is starting, after setting SElinux state to permissive and removing 
> the line I added to /etc/sysconfig/named.
> Problem is: It will not stop -.-
> In /var/log/audit/.. are a lot of named-related entries. Would it be helpful 
> to post some of them?

If you want to use named in a different directory than /var/named with
selinux enabled you need to have the right selinux labels in the new directory.
You can compare the security labels with ls -Z /var/named /configs/named

Something like: 
  semanage fcontext -l | grep /var/named
to see which labels you need and then running for all of them
  chcon -t system_u:object_r:named_zone_t:s0 /configs/named/*
  ...
or for a more permanent setup
  semanage fcontext -a -t system_u:object_r:named_zone_t:s0 
'/configs/named(/.*)?'
  ...
  restorecon -R /configs/named
will give you the correct selinux setup.
You might need to label /configs as system_u:object_r:var_t also I
think.

Kostas