<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1257">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello Michael,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Oh.. gosh.. You're right.. It works! - It wasn't 100% clear to me that this was the only correct way to install bind from your repo.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks a lot.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
/Søren<br>
<table style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 15px; color: rgb(32, 31, 30); width: 225pt;">
<tbody>
<tr>
<td style="padding:2.25pt"><br>
</td>
</tr>
</tbody>
</table>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Michał Kępień <michal@isc.org><br>
<b>Sent:</b> Monday, 13 June 2022 22.04<br>
<b>To:</b> Søren Andersen <soande@norlys.dk><br>
<b>Cc:</b> Sandro <lists@penguinpee.nl>; bind-users@lists.isc.org <bind-users@lists.isc.org><br>
<b>Subject:</b> Re: Unable to start Bind on a fresh RHEL 8.6 system with enforcing SELinux</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">[EKSTERN MAIL]<br>
<br>
<br>
Søren,<br>
<br>
> On a fresh install the selinux context are 'var_t', and if I changed it to 'named_var_run_t' it works!<br>
<br>
This is the suspicious part for me. How did you install the packages?<br>
The only supported way is the one that is documented [1]:<br>
<br>
dnf install isc-bind<br>
<br>
That pulls in the SCL metapackage which sets up SELinux file context<br>
equivalency rules [2] and relieves you from having to apply any sort of<br>
manual SELinux context tweaks.<br>
<br>
My guess is that you installed one of the "individual" packages<br>
directly, e.g. "dnf install isc-bind-bind". Please be aware that if the<br>
SELinux contexts are not set up by the metapackage, you may run into<br>
other similar issues in the future.<br>
<br>
[1] <a href="https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcopr.fedorainfracloud.org%2Fcoprs%2Fisc%2Fbind%2F&data=05%7C01%7Csoande%40norlys.dk%7Cb2bfc25e903842b100a108da4d77e387%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637907474569851316%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=GAHHaI6ZD5XmJFZTGNR0rEN4FnFy8IB8RveJeDnf9h4%3D&reserved=0">
https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcopr.fedorainfracloud.org%2Fcoprs%2Fisc%2Fbind%2F&data=05%7C01%7Csoande%40norlys.dk%7Cb2bfc25e903842b100a108da4d77e387%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637907474569851316%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=GAHHaI6ZD5XmJFZTGNR0rEN4FnFy8IB8RveJeDnf9h4%3D&reserved=0</a><br>
[2] <a href="https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitlab.isc.org%2Fisc-packages%2Frpms%2Fisc-bind%2F-%2Fblob%2F7b525a31c2bd9b51c10b2ed2aca8d5244221f359%2Fisc-bind.spec%23L77&data=05%7C01%7Csoande%40norlys.dk%7Cb2bfc25e903842b100a108da4d77e387%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637907474569851316%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=6vpWn48txk%2F3xsIsMyQvJwlxDEN4b5kGu4baOLytcJg%3D&reserved=0">
https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitlab.isc.org%2Fisc-packages%2Frpms%2Fisc-bind%2F-%2Fblob%2F7b525a31c2bd9b51c10b2ed2aca8d5244221f359%2Fisc-bind.spec%23L77&data=05%7C01%7Csoande%40norlys.dk%7Cb2bfc25e903842b100a108da4d77e387%7Ca6230a1c393a4c9e9938a643402658d9%7C0%7C0%7C637907474569851316%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=6vpWn48txk%2F3xsIsMyQvJwlxDEN4b5kGu4baOLytcJg%3D&reserved=0</a><br>
<br>
--<br>
Best regards,<br>
Michał Kępień<br>
</div>
</span></font></div>
</body>
</html>