Notice removed Reward existing answer by Jeff Schaller
    Bounty Ended with sebasth's answer chosen by Jeff Schaller
    Tweeted twitter.com/StackUnix/status/1038125346263101441
    Notice added Reward existing answer by Jeff Schaller
    Bounty Started worth 100 reputation by Jeff Schaller
2 added 2 characters in body
source | link

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in a non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in a non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?

1
source | link

Configure SELinux to allow daemons to use files in non-default locations

I have a daemon (apache/samba/vsftpd/...) running on SELinux enabled system and I need to allow it to use files in non-default location. The standard file permissions are configured to allow access.

If the daemon is running in permissive mode, everything works. When set back to enforcing it doesn't work anymore and I get a SELinux AVC denial messages.

How can I configure the system to allow the access in enforcing mode?