In my experience, "When in doubt, blame SELinux!" <grin/>.

On Mon, Sep 23, 2013 at 8:28 AM, Alan Altmark <[email protected]>wrote:

> On Monday, 09/23/2013 at 09:12 EDT, Rick Troth <[email protected]> wrote:
> > > Sep 20 11:09:42 [hostname] kernel: type=1400
> audit(1379693382.822:20192):
> > avc:  denied  { search } for  pid=33900 comm="vsftpd" name="home"
> dev=dasda1
> > ino=8198 scontext=unconfined_u:system_r:ftpd_t:s0-s0:c0.c1023
> > tcontext=system_u:object_r:home_root_t:s0 tclass=dir
> >
> > These are clearly SELinux errors.
>
> They are indeed SELinux errors, but "clearly" is hardly applicable in this
> case.  If you haven't studied SELinux (hint!), you aren't going to
> recognize these messages.  (And nowhere does the message even say
> "SELinux" to provide needed context!)
>
> Alan Altmark
>
> Senior Managing z/VM and Linux Consultant
> IBM System Lab Services and Training
> ibm.com/systems/services/labservices
> office: 607.429.3323
> mobile; 607.321.7556
> [email protected]
> IBM Endicott
>
> ----------------------------------------------------------------------
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> ----------------------------------------------------------------------
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>



--
As of next week, passwords will be entered in Morse code.

Maranatha! <><
John McKown

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Reply via email to