diff --git a/dns/manifests/init.pp b/dns/manifests/init.pp
index 1b0f743..103e28b 100644
--- a/dns/manifests/init.pp
+++ b/dns/manifests/init.pp
@@ -40,6 +40,7 @@ class dns::server {
         },
         require => Exec["rndc-confgen"],
         notify  => Service["named"],
+        seltype => "dnssec_t",
     }
 
     service { "named":