FC4, SELinux, virtual hosts, upload web content

Daniel J Walsh dwalsh at redhat.com
Mon Oct 17 23:51:53 UTC 2005


Valery Khamenya wrote:
>> you need to turn on the correct booleans to allow it to work.
>> setsebool -P allow_ftpd_anon_write=1
>>     
>
> sounds like anonymous are allowed now by selinux...
>
> First funny thing that access was not annymous, so why it was disabled
> before allow_ftpd_anon_write was changed?
>
> Secondly, public_content_rw_t still disallows the apache to access web
> pages. And if I bring httpd_sys_content_t back then apache is OK and
> vsftpd doesn't work :)
>
> Well, either ftp or apache. But not together now.
>
> --
> Valery A.Khamenya
>   
You need to set this boolean for each domain that needs the write 
capability. (httpd, rsync, smbd, ftpd)

setsebool -P allow_httpd_anon_write=1

man ftpd_selinux
man httpd_selinux
...

Should describe the usage


-- 





More information about the fedora-selinux-list mailing list