RE: Users writting to home directory

["Don Patterson" <don patterson tresys com>]

> ----- Original Message -----
> From: "James R. Marcus" <jmarcus mvalent net>
> To: "Stephen Smalley" <sds epoch ncsc mil>
> Cc: <selinux tycho nsa gov>
> Sent: Tuesday, August 24, 2004 2:14 PM
> Subject: RE: Users writting to home directory
> 
> 
> > Okay I tried just creating a user under home.  While in permissive 
> > mode they can login to the ftp server and upload and download.  
> > However when I turn on enforced mode they get this message:
> >
> > C:\Documents and Settings\jmarcus\Desktop>ftp ftp Connected to 
> > ftp.mvalent.local.
> > 220 Welcome to mValent, Inc. FTP service.
> > User (ftp.mvalent.local:(none)): jmarcus7
> > 331 Please specify the password.
> > Password:
> > 500 OOPS: cannot change directory:/home/jmarcus7 500 OOPS: child 
> > died Connection closed by remote host.
> >
> > C:\Documents and Settings\jmarcus\Desktop>
> >
> > ftp policy # seuseradd -g users -d /home/jmarcus7 -m -s /bin/bash  
> > -c "James R. Marcus" jmarcus7 loading new policy...
> >
> > Error relabeling users home directory files: User is not defined in 
> > the policy.
> >
> 
In case anyone sees a similar problem, this bug was fixed in setools 1.4.x.
To upgrade use the commands:

Fedora - 'yum update setools'
Gentoo - 'emerge setools'

Don Patterson
Tresys Technology
www.tresys.com