search for: ssh_chroot_manage_apache_cont

...your problem goes away. setenforce 0 If SELinux is the issue then I strongly advice that you use existing SELinux Booleans or create your own local policy rather than turning SELinux off, or leaving your system in permissive mode. # getsebool -a | grep chroot ssh_chroot_full_access --> off ssh_chroot_manage_apache_content --> off ssh_chroot_rw_homedirs --> off https://wiki.centos.org/HowTos/SELinux may also help. If it is SELinux related I would also look at installing setroubleshoot and setroubleshoot-server. I hope this helps :)

...}; #!!!! This avc is allowed in the current policy allow chroot_user_t xauth_exec_t:file getattr; #============= xauth_t ============== allow xauth_t chroot_user_t:process sigchld; # getsebool -a | grep ssh allow_ssh_keysign --> off fenced_can_ssh --> off ssh_chroot_full_access --> on ssh_chroot_manage_apache_content --> off ssh_chroot_rw_homedirs --> on ssh_sysadm_login --> off These are definitely involved with the X11 forwarding issue because if I use: setenforce Permissive then gvim works for a chrooted session. However, when setenforce Enforcing is set then gvim fails with: 'E233: cannot o...

Hi, I have trouble setting up chrooted SFTP for our user. I got the basic SFTP chroot working, user is chrooted to its home directory, I've added /home/userb/etc directory with dummy passwd, group and localtime files. The problem is that instead of only accessing its own files, I need the user to be able to remove another users files. I have web application which runs as different user, the