Bug 186474

Summary: Targetted FTP policy does not prevent user from reading/writing from home directory
Product: [Fedora] Fedora Reporter: rambler8
Component: selinux-policy-targetedAssignee: Daniel Walsh <dwalsh>
Status: CLOSED RAWHIDE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 5   
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-05-05 15:03:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description rambler8 2006-03-23 19:40:12 UTC 
In the Security Level Configuration GUI, in the FTP section of the SELinux 
Policy, the option "Allow ftp to read/write files in the user home directories" 
is unchecked by default. 

If the SELinux Setting is Enforcing with this setting, a local user logging in 
to the vsftpd server can still read and write files in his home directory. 
However, the user is prevented from creating new directories as expected.

The following selinux packages are installed:

libselinux-1.29.7-1.2
libselinux-devel-1.29.7-1.2
libselinux-python-1.29.7-1.2
selinux-policy-2.2.23-15
selinux-policy-targeted-2.2.23-15
Comment 1 Daniel Walsh 2006-04-03 16:36:12 UTC 
Fixed in selinux-policy-2.2.29-2.fc5
Comment 3 Daniel Walsh 2006-05-05 15:03:19 UTC 
Closing as these have been marked as modified, for a while.  Feel free to reopen
if not fixed