Red Hat Bugzilla – Bug 150163
vsftpd won't start from init scripts
Last modified: 2007-11-30 17:11:01 EST
Description of problem:
This appears to be an selinux issue, but I'm not seeing any audit messages. In
enforcing mode, vsftpd won't start from scripts. strace shows that when it
tries to bind to port 21 it returns EACCESS. If I start it from the comand line
directly, it runs fine. When started from init scripts it runs in the ftp_t
domain, but in the unconfined_t domain when run from a root shell.
Disabling selinux allows vsftpd to start from the init script.
System has been relabeled.
Version-Release number of selected component (if applicable):
Is boole ftpd_is_daemon turned on?
setsebool -P ftpd_is_daemon 1
Should fix this.
I thought this was set, but I must have been reading the diff of
booleans/booleans.rpmnew wrong. Setting it fixed it. Sorry about that.
Is there any way to allow anonymous uploads? ftpd_t does not appear to have
write permission to many labels except ftpd_temp_t?
New type added ftpd_anon_rw_t.