Redhat:FTP SELinux

From Define Wiki
Revision as of 12:39, 17 September 2013 by Michael (talk | contribs) (→‎SELinux Booleans)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

FTP and SELInux

SELINUX Types

ftpd_exec_t used for the vsftpd executable
xferlog_t assigned to the log files
public_content_t reuqired for files shared through ftp, except home directories
public_content_rw_t Required for directories where users can write files, except home directories

SELinux Booleans

All of the FTP booleans are disabled by default

allow_ftpd_anon_write allow anonymous users to write files - requires the public_content_rw_t on thedirectory
allow_ftpd_full allow regular users access to all files on the system
ftp_home_dir allow regular users access to their home directories, protected by username and password