From: Ryan Graham <ryan.graham@gmail.com>
To: SELinux@tycho.nsa.gov
Subject: vsftpd and chrooted home directories
Date: Tue, 12 Oct 2004 16:21:31 -0700 [thread overview]
Message-ID: <42efd069041012162143f7aa9a@mail.gmail.com> (raw)
Hi, I'm going to throw out an AVC message and part of my config here.
Maybe someone will recognize this.
audit(1097622518.160:0): avc: denied { getattr } for pid=2774
exe=/usr/sbin/vsftpd path=/proc/2774/mounts dev= ino=181796880
scontext=root:system_r:ftpd_t tcontext=root:system_r:ftpd_t
tclass=file
audit(1097622518.174:0): avc: denied { search } for pid=2778
exe=/usr/sbin/vsftpd name=media dev=hda2 ino=5210119
scontext=root:system_r:ftpd_t
tcontext=system_u:object_r:user_home_dir_t tclass=dir
Response: 220 (vsFTPd 1.2.1)
Command: USER media
Response: 331 Please specify the password.
Command: PASS *****
Response: 500 OOPS: cannot change directory:/home/media
Error: Unable to connect!
local_enable=YES
write_enable=YES
local_umask=022
chroot_local_user=YES
pam_service_name=vsftpd
userlist_enable=YES
listen=YES
tcp_wrappers=YES
This all works on an almost identical FC2 box with enforcing off.
Am I being stupid here? Should I go back to the manuals or spam
audit2allow at it?
Thanks,
Ryan
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next reply other threads:[~2004-10-12 23:21 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-10-12 23:21 Ryan Graham [this message]
2004-10-13 13:47 ` vsftpd and chrooted home directories David A. Cafaro
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=42efd069041012162143f7aa9a@mail.gmail.com \
--to=ryan.graham@gmail.com \
--cc=SELinux@tycho.nsa.gov \
--cc=ryan.graham+cr@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.