vsftpd: 550 permission denied( cannot upload File)

[dsr_deep]

hi there,
i have got centos 5.3 running on my system. i have installed vsftpd and created a separate folder to upload files( upload folder created in/var/ftp/pub). from my client end i can download ftp files but when i try to upload files from my client i get a error message 550: permission denied. the upload folder has full permission ie 777. checked the ftp config file everything looks ok.can some1 help me plz.

ftp config file

12 anonymous_enable=YES
15 local_enable=YES
27 anon_upload_enable=YES

[venikathir]

Please go through the blow in google search
Quick_HOWTO_:_Ch15_:_Linux_FTP_Server_Setup

this will help to solve ur issue

VKA
India

[atreyu]

That's a good guide. I did not see SELinux mentioned anywhere in it though. That can trip you up, too, if it is enabled. Check with:

getenforce

If it comes back with Enforcing then I think you might need to flip an SELinux boolean or something, if you want to keep SELinux enabled (usually a good idea, but can be a headache). If you don't care about SELinux, you can disable it and see if that fixes your problem (set SELINUX=disabled in /etc/selinux/config and reboot).

Come to think of it, you can quickly disable SELinux (well, technically, just make it Permissive, which just logs security violations instead of denying them), by doing this:

setenforce 0

If currently enforced, that will temporarily turn it off. You can do that, then try your ftp again.

[tboland]

This is a simple thing, but please check for
write_enable=YES
in your config file. Make sure it is not commented out.
If you made any changes, service vsftd restart.


SELinux:
setsebool -P ftp_home_dir=1
setsebool -P allow_ftpd_anon_write=1
setsebool -P allow_ftpd_full_access=1
semanage fcontext -a -t public_content_rw_t /var/ftp/pub
chcon -R -user_u -t public_content_rw_t /var/ftp/pub


ftp_home_dir=1 is not strictly needed now, but if you ever change to a user-based (non-anonymous) login, you will need it.

allow_ftpd_anon_write=1 allows ftp to write anonymously, but the fcontext has to be set to public_content_rw_t. Which is why that semanage fcontext is there.

allow_ftpd_full_access=1 allows us to use standard chmod 750 type permissions with FTP, instead of certain SELinux fcontexts. This is a security hole, and should be changed to allow_ftpd_full_access=0 once everything is running properly.