변군이글루

named 실행 시 아래와 같은 에러가 발생할 경우
[root@dns3 slaves]# service named restart
named를 정지 중: [ OK ]
named를 시작 중: named: initgroups(): Operation not permitted [실패]

[root@dns3 slaves]# vi /var/log/messages
Mar 26 21:50:03 dns3 kernel: type=1400 audit(1301143803.811:5): avc: denied { getcap } for pid=1776 comm="named" scontext=root:system_r:named_t:s0 tcontext=root:system_r:named_t:s0 tclass=process

enforcing -> disabled 변경한 후 리붓팅 한다
[root@dns2 slaves]# cat /etc/sysconfig/selinux
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted