10.2. Extending SELinux policy for BIND custom logging

Procedure

1. Create a log directory:

   # mkdir -p /var/log/named
   # chown named:named /var/log/named
   # chmod 750 /var/log/named

2. Assign the named_log_t SELinux context to the new directory and the log file:

   # semanage fcontext -a -t named_log_t "/var/log/named(/.*)?"
   # restorecon -Rv /var/log/named

3. Restart the BIND server:

   # systemctl restart named