[SOLVED] named service and SElinux

strfr · Post by **strfr** » 2011/08/15 08:39:28

Dear all,

I am having trouble to start up chrooted service named. With SElinux enabled, the service will not start (Permition on /var/named/chroot/etc/rndc.key denied), when starting it from root commandline by /usr/sbin/named -u named -t /var/named/chroot everything is all right. With disabled SElinux service will start properly. Trying to disable SElinux for named service only with bolean "setsebool -P named_disable_trans 1" gives me error "libsemanage.dbase_llist_set: record not found in the database".

Any help warmly appreciated

Thanks!

Post by **TrevorH** » 2011/08/15 09:12:12

What is the output from

[code]
ls -laZ /var/named/chroot/etc/rndc.key
[/code]

strfr · Post by **strfr** » 2011/08/15 09:43:21

[root@zoidberg etc]# ls -laZ /var/named/chroot/etc/rndc.key
-rw-r-----. root named unconfined_u:object_r:user_home_t:s0 /var/named/chroot/etc/rndc.key

thanks for super fast reply!

Post by **TrevorH** » 2011/08/15 10:18:34

Yeah, your files are mislabelled. Try

[code]
touch /.autorelabel
reboot
[/code]

(the 2nd command reboots your machine so only do this when it's convenient!)

strfr · Post by **strfr** » 2011/08/15 11:04:39

thank you TrevorH, everything all right here for now..
..that was simple ;-)

Thank you once again!

AlanBartlett · Post by **AlanBartlett** » 2011/08/15 18:48:51

Thank you for reporting back with your success.

On your behalf, and for posterity, this thread is marked [SOLVED].

CentOS