Bug 34671 – publicfile policy files

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description petre rodan (RETIRED) 2003-11-28 23:30:21 UTC]

http and ftp daemon started by tcpserver (ucspi-tcp.te is needed)

[Comment 1 petre rodan (RETIRED) 2003-11-28 23:31:05 UTC]

Created attachment 21450 [details]
file_contexts

[Comment 2 petre rodan (RETIRED) 2003-11-28 23:31:41 UTC]

Created attachment 21451 [details]
type_enforcement

[Comment 3 petre rodan (RETIRED) 2003-12-03 13:17:02 UTC]

Created attachment 21649 [details]
file contexts

latest version

[Comment 4 petre rodan (RETIRED) 2003-12-03 13:17:50 UTC]

Created attachment 21650 [details]
type enforcement

latest

[Comment 5 petre rodan (RETIRED) 2003-12-03 13:19:12 UTC]

net_contexts should also contain:

ifdef(`publicfile.te', `portcon tcp 80  system_u:object_r:utcpserver_port_t
portcon tcp 21  system_u:object_r:utcpserver_port_t')

[Comment 6 Chris PeBenito (RETIRED) 2003-12-09 12:50:30 UTC]

committed to policy cvs.  does publicfile only use passive ftp?  is that why theres no portcon for tcp 20?

[Comment 7 petre rodan (RETIRED) 2003-12-12 02:40:20 UTC]

as a matter of fact it also supports active ftp, but I have seen that ftpd also only uses  ifdef(`ftpd.te', `portcon tcp 21 system_u:object_r:ftp_port_t') ...

so I am a little confused by this :(

[Comment 8 Chris PeBenito (RETIRED) 2003-12-21 09:46:06 UTC]

committed to portage

[Comment 9 petre rodan (RETIRED) 2003-12-22 02:55:39 UTC]

thanks, it works

bye,
peter

[Comment 10 Chris PeBenito (RETIRED) 2003-12-22 06:36:14 UTC]

closing