Red Hat Bugzilla – Bug 219022
SELinux is preventing /usr/sbin/vsftpd (ftpd_t) "getattr" access to /home/lost+found (lost_found_t).
Last modified: 2007-11-30 17:11:51 EST
Description of problem:
SELinux denied access requested by /usr/sbin/vsftpd. It is not expected that
this access is required by /usr/sbin/vsftpd and this access may signal an
intrusion attempt. It is also possible that the specific version or
configuration of the application is causing it to require additional access.
Version-Release number of selected component (if applicable):
vsftpd-2.0.5-8 [application], selinux-policy-2.4.6-1.fc6 .
Selinux Enabled:True , Policy Type:targeted
Steps to Reproduce:
1. From menubar of a client PC select:
Places->Connet to server
on pop-up windows select
FTP (with login)
Server: hostname of server
User Name: userhomedir
than press button Connect
SELinux is preventing access to /home/lost+found
No errors, with following following SElinux policy setted: Allow ftp to
read/write files in the user home directories.
This is not a bug. Selinux implicit denied access to home dirs. Please allow ftp
write/read files in user home directories in SELinux.
/home/lost+found is system directory on ext3 partition with read permissions
only for root. You don't have access to this directory by ftp.
Created attachment 143320 [details]
Step by step description of problem
I had already setted the SElinux policy for the ftp before the use of the ftp
I did all step again to reproduce the problem with more info, you can see the
description in the attached file 'Step by step description of problem', the file
is a gzipped odt document with some shoot.
I hope it's enought for testing.
thanks for document, but I think, this is not problem in vsftpd, try to connect
in other client (lftp, ftp, tftp ..) please and paste me your results.
(In reply to comment #4)
> Hi Maurizio,
> thanks for document, but I think, this is not problem in vsftpd, try to connect
> in other client (lftp, ftp, tftp ..) please and paste me your results.
I agree with you Maros, it seems that the problem is about nautilus maybe ...
This is my tests result:
In the terminal window using ftp client there is no problem, all is ok.
Using gftp program it's the same, I did file transfer without any selinux warning.