>> [y4kk0@X ~]$ ls -Zd public_html/ >> drwxrwxrwx y4kk0 users system_u:object_r:httpd_user_content_t >> public_html/ >> [y4kk0@X ~]$ >> selinux-policy-targeted-1.25.4-10 >> system: Fedora Core 4 >> Maybe default policy should allow ftp server to enter this directory >> so users would be able to upload their WWW stuff via ftp? >Sounds reasonable, I will add it. Ouch, this seems like opening up an attack vector to me. Shouldn't ftp *upload* be to a write-only "holding cell" at least? ../Steven -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list
