I need a list of SELinux rules for bind-chroot

edit

Does it not work?

It is working. I want to document what I did for the future, rather than waiting for alerts from SELinux

This is some of the manure I am trying to get around too:

# semanage fcontext -a -t FILE_TYPE 'session.key'

where FILE_TYPE is one of the following: dnssec_trigger_var_run_t, ipa_var_lib_t, krb5_host_rcache_t, krb5_keytab_t, named_cache_t, named_log_t, named_tmp_t, named_var_run_t.

# semanage fcontext -a -t named_var_run_t 'session.key'
# restorecon -v 'session.key'

How am I suppose to know what "FILE_TYPE" I am using?

Mumble, mumble

But I do. So where are the rules for bind?