Hi,
i run vsftpd in a chrooted environement. Since yesterday, again in targeted mode. Loggin in, gives a 500 OOPS - Message
according to audit.log, the following is missing:
type=AVC msg=audit(1123825815.048:14086489): avc: denied { dac_override } for pid=21576 comm="vsftpd" capability=1 scontext=system_u:system_r:ftpd_t tcontext=system_u:system_r:ftpd_t tclass=capability
i inserted in local.te the following (according to audit2allow)
allow ftpd_t self:capability { dac_override dac_read_search };
...and now it works. Can anybody check this for other securiy holes? Or did i just do an error in my config now? using the ftpd_home...-boolean, this did not help, nor did ftpd_disable_trans=1 (what was not my wish)
Thanks for your reply Roger
selinux@lists.fedoraproject.org