ftp + selinux
Has anyone been able to get vsftp working on a system with the selinux module set to enforcing? It works fine if I set selinux to permissive. Here is the error I'm getting.
Laptop:~ MikeF$ ftp 192.168.0.15
Connected to 192.168.0.15.
220 (vsFTPd 1.2.1)
Name (192.168.0.15:MikeF): flintm
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/home/flintm
ftp: Login failed.
Here is the messages log error message I receive for this error.
Oct 12 07:39:25 server1 kernel: audit(1097584765.324:0): avc: denied { getattr } for pid=4087 exe=/usr/sbin/vsftpd path=/proc/4087/mounts dev=proc ino=267845648 scontext=root:system_r:ftpd_t tcontext=root:system_r:ftpd_t tclass=file
Oct 12 07:39:25 server1 kernel: audit(1097584765.332:0): avc: denied { search } for pid=4090 exe=/usr/sbin/vsftpd name=flintm dev=hda2 ino=3538946 scontext=root:system_r:ftpd_t tcontext=root:object_r:user_home_dir_t tclass=dir
Any ideas how to get this working? In reality, only one user account will need to access ftp. Selinux is new to me, so I'm having a little difficulty understanding where to go from here. Any good sites explaining how security contexts work and how to change to context of running processes and file systems?
Thanks for any help you can provide.
|