proftpd's mod_ban uses shared memory, so I needed to add this policy locally on F-11: # Proftpd needs shared memory for mod_ban allow ftpd_t self:shm create_shm_perms; Paul.