Skip to main content
Notice removed Reward existing answer by Jeff Schaller
Bounty Ended with sebasth's answer chosen by Jeff Schaller
Tweeted twitter.com/StackUnix/status/1038125346263101441
Notice added Reward existing answer by Jeff Schaller
Bounty Started worth 100 reputation by Jeff Schaller
added 2 characters in body
Source Link
Faheem Mitha
  • 36.1k
  • 33
  • 130
  • 190

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in a non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in a non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?

Source Link
sebasth
  • 15.8k
  • 6
  • 53
  • 71

Configure SELinux to allow daemons to use files in non-default locations

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?