SELinux/bind

Domains
The named_t domain can only be transitioned towards through the initrc_t domain (i.e. through init scripts). The ndc_t domain (for the named domain controller) can be transitioned towards through the initrc_t and sysadm_t (general system administration) domains.

File types/labels
The following table lists the file type/labels defined in the bind module.

SELinux boolean: named_write_master_zones
The named policy offers one boolean called named_write_master_zones which, when enabled, allows the named daemon to write to its master zone files (i.e. named_zone_t). This is used in master/slave setups. research paper writer