<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>If by "the RPM" you are referring to the ones distributed by the PowerDNS team (on repo.powerdns.com) then no, it does not. It also doesn't include a profile for AppArmor.<br></div><div><br></div><div>It is possible that the PowerDNS team would accept a contribution of such profiles to be included in the packages, but the ongoing cost of supporting those could be high, and it may not be possible to have the same profiles operate properly across all of the RPM-based distributions.<br></div><div><br></div><div>On Sun, Jul 30, 2023, at 06:48, Victor Hugo dos Santos wrote:<br></div><blockquote type="cite" id="qt" style=""><div dir="auto"><div>Hi<br></div><div dir="auto"><br></div><div dir="auto">The rpm should come with the correct selinux by default???<br></div><div dir="auto"><br></div><div dir="auto">Salu2<br></div><div dir="auto"><br></div></div><div><br></div><div class="qt-gmail_quote"><div dir="ltr" class="qt-gmail_attr">On Sat, Jul 29, 2023, 17:27 Kevin P. Fleming via Pdns-users <<a href="mailto:pdns-users@mailman.powerdns.com">pdns-users@mailman.powerdns.com</a>> wrote:<br></div><blockquote class="qt-gmail_quote" style="margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0.8ex;border-left-color:rgb(204, 204, 204);border-left-style:solid;border-left-width:1px;padding-left:1ex;"><div><u></u><br></div><div><div>There's nothing to 'fix' in pdns-auth. Its behavior is based on the functions it performs.<br></div><div><br></div><div>If there is no SELinux policy for it, or there is one but it's not correct, then SELinux will interfere. The proper solution is to determine whether any of the actions that pdns-auth is taking are invalid. If they are invalid, those are bugs (but this is unlikely); if they are valid, the SELinux policy needs to permit them.<br></div><div><br></div><div>On Sat, Jul 29, 2023, at 11:11, lejeczek via Pdns-users wrote:<br></div><blockquote type="cite" id="qt-m_-6202750761025058654qt"><div><span class="size" style="font-size:13px;"><span>Hi guys.<br> <br> Setting master=yes - on Centos 9s - results in SE denials and
'pdns' fails to start.<br> ...<br> About to create 3 backend threads for UDP<br> Exiting because communicator thread died with error: Resolver
binding to local UDP socket on '0.0.0.0': Permission denied<br> Started PowerDNS Authoritative Server.<br> ...<br> <br> Would you know if there ia boolean I'm missing or perhaps pdns'
end can be "fixed"?<br> It'd be good not to have build dedicated se module for that.<br> <br> many thanks, L.</span></span></div><div>_______________________________________________<br></div><div>Pdns-users mailing list<br></div><div><a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank" rel="noreferrer">Pdns-users@mailman.powerdns.com</a><br></div><div><a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" target="_blank" rel="noreferrer">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br></div><div><br></div></blockquote><div><br></div></div><div>_______________________________________________<br></div><div> Pdns-users mailing list<br></div><div> <a href="mailto:Pdns-users@mailman.powerdns.com" target="_blank" rel="noreferrer">Pdns-users@mailman.powerdns.com</a><br></div><div> <a href="https://mailman.powerdns.com/mailman/listinfo/pdns-users" rel="noreferrer noreferrer" target="_blank">https://mailman.powerdns.com/mailman/listinfo/pdns-users</a><br></div></blockquote></div></blockquote><div><br></div></body></html>