linux selinux对于ftp的控制

1:安装seinfo命令 yun install  setools-console（注：在万恶的百度上面很难搜到seinfo的安装方法，到google，一搜便是，百度山寨google还是差很远，虽然一直在山寨，永远不会超越）

2:输入：seinfo试试，有了....

3:seinfo -b |grep ftp

[root@localhost /]# seinfo -b | grep ftp
   allow_ftpd_full_access
   allow_ftpd_use_cifs
   httpd_enable_ftp_server
   ftpd_use_fusefs
   tftp_use_nfs
   allow_ftpd_use_nfs
   ftpd_use_passive_mode
   ftp_home_dir
   ftpd_connect_db
   tftp_use_cifs
   tftp_anon_write
   allow_ftpd_anon_write

4:getsebool -a | grep ftp

5: 由于开启了selinux的linux系统安装vsftpd之后如果不对selinux进行设置，java调用vsftpd的方法上传文件会报错：如下

220 (vsFTPd 2.2.2)
Name (10.191.255.149:root): matthew
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> put install.log.syslog
local: install.log.syslog remote: install.log.syslog
227 Entering Passive Mode (10,191,255,149,189,211).
553 Could not create file.

然后我们在命令行输入如下：

setsebool -P allow_ftpd_full_access  1
setsebool -P ftp_home_dir on

成功如下：

220 (vsFTPd 2.2.2)
Name (10.191.255.149:root): matthew
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> put install.log.syslog
local: install.log.syslog remote: install.log.syslog
227 Entering Passive Mode (10,191,255,149,143,162).
150 Ok to send data.
226 Transfer complete.
3384 bytes sent in 0.000289 secs (11709.34 Kbytes/sec)