The policy file is an INI file that is easy to read and modify. The policy file contains sub-policies identified by a name. The default sub-policy is bind. The various options under a sub-policy identify the policy-related actions. You cannot add sub-policies; however, you may modify the existing ones.
The contents of a policy file are as follows:
[bind]
add_a = yes
add_aaaa = yes
add_cname = yes
add_mx = yes
add_ns = yes
add_ptr = yes
add_srv = yes
add_txt = yes
add_zone = yes
delete_a = yes
delete_aaaa = yes
delete_cname = yes
delete_mx = yes
delete_ns = yes
delete_ptr = yes
delete_srv = yes
delete_txt = yes
delete_zone = yes
edit_soa = yes
To revoke permission on an action, set the attribute to no; to grant permission, set the attribute to yes.