Hi guys,
I want to add a new 'service' to Solaris 10. Does anyone have any documentation that tells how to do that?
I have gone through a bunch of stuff on the net that tells how to enable, disable services, find whats wrong with a service and so on. All conveniently skip mention of how to... (6 Replies)
Hello,
A couple of times per week, i receive emails notifications when files are available for processing.
Currently i read these eamails with a java program and store the attachement on my C: drive and would now like to generate a PC script to send this file name up to UNIX-Solaris and... (3 Replies)
hi all
i am working on a monitoring script for my server... i am able to monitor all the explicit sessions ... the problem arises when some one is using editplus to modify a file in the server .. the unix server is not showing the edit plus access as a session ... how to monitor the actions... (3 Replies)
Hello Unix Admins:
Has any one in this distribution list implemented SVC (SAN Volume Contoller - A solution from IBM) in your environment? If you have, do you have any do's / don'ts? Anything which you like sharing would be really appreciated.
For example, my inputs:
I tried implementing... (1 Reply)
I'm having these weird errors.
svc.configd: Fatal error: Backend copy failed: fails to read from /etc/svc/repository.db at offset 106496: Bad file number
svc.configd: Fatal error: unable to create "boot" backup of "/etc/svc/repository.db"
Mar 10 13:04:23 svc.startd:... (5 Replies)
Write a tool that will be displayed in real time, what user connects or disconnects from a system that uses this tool :))
Maybe anyone can help me? (2 Replies)
After a memory upgrade all network interfaces are misconfigued. How do i resolve this issue. Below are some out puts.thanks.
ifconfig: plumb: SIOCLIFADDIF: eg000g0:2: no such interface
# ifconfig eg1000g0:2 plumb
ifconfig: plumb: SIOCLIFADDIF: eg1000g0:2: no such interface
# ifconfig... (2 Replies)
Hi Programming Geeks,
I got an interesting C++ and MySQL problem to solve.
I was unable to do this as I am not much confident on MySQL DB.
Please have a go at it if possible.
Write a C/C++ program that connects to a MySQLserver and checks if
the InnoDB plug-in is installed on it. If so,... (5 Replies)
Hi exports,
I have a T4 with 4 port internal NIC which 2 ports are active and, external one with 4 ports as well with only 2 ports active. So the total of the ports are 4 out of 8. I have created an link aggregation called gnic0 with ports net0, net1, net6 and, net7 in it. I also created a... (0 Replies)
Discussion started by: afadaghi
0 Replies
LEARN ABOUT MOJAVE
ftpd_selinux
ftpd_selinux(8) ftpd SELinux policy documentation ftpd_selinux(8)NAME
ftpd_selinux - Security-Enhanced Linux policy for ftp daemons.
DESCRIPTION
Security-Enhanced Linux provides security for ftp daemons via flexible mandatory access control.
FILE_CONTEXTS
SELinux requires files to have a file type. File types may be specified with semanage and are restored with restorecon. Policy governs the
access that daemons have to files.
Allow ftp servers to read the /var/ftp directory by adding the public_content_t file type to the directory and by restoring the file type.
semanage fcontext -a -t public_content_t "/var/ftp(/.*)?"
restorecon -F -R -v /var/ftp
Allow ftp servers to read and write /var/tmp/incoming by adding the public_content_rw_t type to the directory and by restoring the file
type. This also requires the allow_ftpd_anon_write boolean to be set.
semanage fcontext -a -t public_content_rw_t "/var/ftp/incoming(/.*)?"
restorecon -F -R -v /var/ftp/incoming
BOOLEANS
SELinux policy is based on least privilege required and may also be customizable by setting a boolean with setsebool.
Allow ftp servers to read and write files with the public_content_rw_t file type.
setsebool -P allow_ftpd_anon_write on
Allow ftp servers to read or write files in the user home directories.
setsebool -P ftp_home_dir on
Allow ftp servers to read or write all files on the system.
setsebool -P allow_ftpd_full_access on
Allow ftp servers to use cifs for public file transfer services.
setsebool -P allow_ftpd_use_cifs on
Allow ftp servers to use nfs for public file transfer services.
setsebool -P allow_ftpd_use_nfs on
system-config-selinux is a GUI tool available to customize SELinux policy settings.
AUTHOR
This manual page was written by Dan Walsh <dwalsh@redhat.com>.
SEE ALSO selinux(8), ftpd(8), setsebool(8), semanage(8), restorecon(8)dwalsh@redhat.com 17 Jan 2005 ftpd_selinux(8)