如果SELinux拒絕vsftpd上傳文件到用戶主目錄怎么辦
用慣了vsftpd,覺得vsftpd非常實用而且安全,但是那些初學者經常會遇到一些問題如下:
系統是CentOS 5.1,創建用戶后,不能登陸FTP,在/var/log/messages文件記錄以下信息:
Mar 31 13:46:15 localhost kernel: audit(1206942375.697:5719): avc: denied { append } for pid=32111 comm="vsftpd" name="test" dev=sda3 ino=19400200 scontext=root:system_r:ftpd_t:s0 tcontext=root:object_r:root_t:s0 tclass=file
SELinux ftp daemon policy is customizable based on least access required. So by default SElinux does not allow users to login and read their home directories.
If you are setting up this machine as a ftpd server and wish to allow users to access their home directorories, you need to set the ftp_home_dir boolean.
執行命令:
setsebool -P ftp_home_dir 1
上傳文件成功。
通過閱讀上面文章,你是否也遇到過這樣類似的問題,那就請留言給我,我幫你們解答!
【編輯推薦】