Unix and Linux Discussions Tagged with for each |
|
Thread / Thread Starter |
Last Post |
Replies |
Views |
Forum |
|
|
|
0 |
11,690 |
Programming |
|
|
|
4 |
4,052 |
Shell Programming and Scripting |
|
|
|
3 |
1,809 |
Shell Programming and Scripting |
|
|
|
41 |
14,272 |
Shell Programming and Scripting |
|
|
|
3 |
14,108 |
Programming |
|
|
|
0 |
1,015 |
UNIX and Linux RSS News |
|
|
|
3 |
19,197 |
AIX |
|
|
|
7 |
5,945 |
IP Networking |
|
|
|
9 |
7,540 |
UNIX for Dummies Questions & Answers |
|
|
|
2 |
9,567 |
Shell Programming and Scripting |
|
|
|
1 |
2,109 |
UNIX for Dummies Questions & Answers |
|
|
|
5 |
36,905 |
UNIX for Advanced & Expert Users |
|
|
|
2 |
3,785 |
UNIX for Dummies Questions & Answers |
|
|
|
4 |
5,115 |
UNIX for Advanced & Expert Users |
|
|
|
3 |
7,449 |
UNIX for Dummies Questions & Answers |
|
|
|
2 |
18,452 |
UNIX for Advanced & Expert Users |
|
|
|
1 |
2,632 |
UNIX for Dummies Questions & Answers |
|
|
|
8 |
16,309 |
UNIX for Dummies Questions & Answers |
|
|
|
10 |
7,293 |
UNIX for Advanced & Expert Users |
|
|
|
5 |
5,722 |
UNIX for Dummies Questions & Answers |
|
|
|
4 |
2,983 |
Post Here to Contact Site Administrators and Moderators |
|
|
|
1 |
3,228 |
UNIX for Dummies Questions & Answers |
|
|
|
2 |
4,681 |
IP Networking |
|
|
|
1 |
3,376 |
UNIX for Dummies Questions & Answers |
|
|
|
1 |
15,990 |
UNIX for Dummies Questions & Answers |
|
|
|
3 |
61,299 |
UNIX for Dummies Questions & Answers |
|
|
|
5 |
6,221 |
UNIX for Dummies Questions & Answers |
|
|
|
2 |
10,177 |
UNIX for Dummies Questions & Answers |
|
|
|
3 |
4,339 |
UNIX for Dummies Questions & Answers |
|
|
|
3 |
3,919 |
UNIX for Dummies Questions & Answers |
|
|
|
1 |
7,059 |
IP Networking |
|
|
|
9 |
12,271 |
Cybersecurity |
|
|
|
3 |
29,604 |
Where do I download LINUX & UNIX? |
|
|
|
3 |
3,247 |
UNIX for Dummies Questions & Answers |
|
|
|
4 |
5,972 |
UNIX for Dummies Questions & Answers |
|
|
|
4 |
23,049 |
UNIX for Dummies Questions & Answers |
|
|
|
2 |
4,257 |
UNIX for Dummies Questions & Answers |
|
|
|
1 |
3,125 |
UNIX for Dummies Questions & Answers |
|
|
|
1 |
6,187 |
UNIX for Dummies Questions & Answers |
ftpd_selinux(8) ftpd SELinux policy documentation ftpd_selinux(8)
NAME
ftpd_selinux - Security-Enhanced Linux policy for ftp daemons.
DESCRIPTION
Security-Enhanced Linux provides security for ftp daemons via flexible mandatory access control.
FILE_CONTEXTS
SELinux requires files to have a file type. File types may be specified with semanage and are restored with restorecon. Policy governs the
access that daemons have to files.
Allow ftp servers to read the /var/ftp directory by adding the public_content_t file type to the directory and by restoring the file type.
semanage fcontext -a -t public_content_t "/var/ftp(/.*)?"
restorecon -F -R -v /var/ftp
Allow ftp servers to read and write /var/tmp/incoming by adding the public_content_rw_t type to the directory and by restoring the file
type. This also requires the allow_ftpd_anon_write boolean to be set.
semanage fcontext -a -t public_content_rw_t "/var/ftp/incoming(/.*)?"
restorecon -F -R -v /var/ftp/incoming
BOOLEANS
SELinux policy is based on least privilege required and may also be customizable by setting a boolean with setsebool.
Allow ftp servers to read and write files with the public_content_rw_t file type.
setsebool -P allow_ftpd_anon_write on
Allow ftp servers to read or write files in the user home directories.
setsebool -P ftp_home_dir on
Allow ftp servers to read or write all files on the system.
setsebool -P allow_ftpd_full_access on
Allow ftp servers to use cifs for public file transfer services.
setsebool -P allow_ftpd_use_cifs on
Allow ftp servers to use nfs for public file transfer services.
setsebool -P allow_ftpd_use_nfs on
system-config-selinux is a GUI tool available to customize SELinux policy settings.
AUTHOR
This manual page was written by Dan Walsh <dwalsh@redhat.com>.
SEE ALSO
selinux(8), ftpd(8), setsebool(8), semanage(8), restorecon(8)
dwalsh@redhat.com 17 Jan 2005 ftpd_selinux(8)