Re: How can I protect a service by SELinux?

Lukas Vrabec <[email protected]> Mon, 19 Aug 2019 16:04:30 +0200

Newsgroups	gmane.linux.redhat.fedora.selinux
Organization	Red Hat, Inc.
Message-ID	<[email protected]>

On 8/17/19 6:57 AM, Jason Long wrote:
> Hello,
> What SELinux option is good for a FTP server?
> 

Hi,

Sorry, I don't understand your question, what you mean by "option" ?
Your vsftpd service runs under ftpd_t SELinux domain which is correct
SELinux domain for mentioned service.

Thanks,
Lukas.

> Thanks.
> 
> On Monday, August 12, 2019, 10:17:19 AM GMT+4:30, Jason Long
> <[email protected]> wrote:
> 
> 
> Hello,
> I installed "vsftpd" service, but by default SELinux blocked it. I
> changed SELinux configuration by "setsebool -P ftpd_full_access 1", but
> I guess its mean that SELinux can't protect my "vsftpd" service. How can
> I use "vsftpd" service with SELinux enabled?
> 
> Thanks.
> 
> _______________________________________________
> selinux mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
> 


-- 
Lukas Vrabec
Senior Software Engineer, Security Technologies
Red Hat, Inc.

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]

signature.asc (application/pgp-signature, 488 B)