> > But how can I state that ftp has access to the users homedir and > > not > > allow access to user_home_t? > This is a good question. Actually, we shouldn't allow ftpd_t read the > locale files from within user_home_t directories. But now I'm not > sure if this will be possible. A different file context for /home/(.*)/usr/share/zoneinfo(/.*) in vsftpd policy module would be a feasible solution? Will ftpd_t honour this when creating new files?
-- Ramon de C Valle / Red Hat Security Response Team _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
