/etc/bind/named.conf.local,

// Dynamic zone
  zone "foo.com" {
    type master;
    file "/var/lib/bind/foo.com";
    update-policy {
      // allow host to update themselves with a key having their own name
      grant *.foo.com self foo.com.;
    };
  };