← Back
Editing: allow_execmod.cpython-312.opt-1.pyc
� �Z`� � � � d dl Z d dl� d dlZ ej dd�� Zej Zd dl� d dlmZ G d� de� Zy) � N)�*zsetroubleshoot-pluginsT)�fallback)�Pluginc � � e Zd Z ed� Z ed� Z ed� ZdZ ed� ZdZ dZ dZ d Z d Z d Zd Zd � Zd� Zd� Zd� Zd� Zd� Zd� Zy)�pluginzf SELinux is preventing $SOURCE_PATH from loading $TARGET_PATH which requires text relocation. aC The $SOURCE application attempted to load $TARGET_PATH which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a> web page explains how to remove this requirement. You can configure SELinux temporarily to allow $TARGET_PATH to use relocation as a workaround, until the library is fixed. Please file a bug report. a� The $SOURCE application attempted to load $TARGET_PATH which requires text relocation. This is a potential security problem. Most libraries should not need this permission. The <a href="http://people.redhat.com/drepper/selinux-mem.html"> SELinux Memory Protection Tests</a> web page explains this check. This tool examined the library and it looks like it was built correctly. So setroubleshoot can not determine if this application is compromised or not. This could be a serious issue. Your system may very well be compromised. Contact your security administrator and report this issue. z:Contact your security administrator and report this issue.aR If you trust $TARGET_PATH to run correctly, you can change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t '$TARGET_PATH'" You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH'" z6If this issue occurred during normal system operation.z�This alert could be a serious issue and your system could be compromised. Setroubleshoot examined '$FIX_TARGET_PATH' to make sure it was built correctly, but can not determine if this application has been compromised.z9Contact your security administrator and report this issuezOIf you trust $TARGET_PATH to run correctly and want to allow $SOURCE to load itzFYou need to change the label on '$FIX_TARGET_PATH' to textrel_shlib_t.z�# chcon -t textrel_shlib_t '$FIX_TARGET_PATH' If you want this to survive a relabel, execute # semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH';restorecon -v '$FIX_TARGET_PATH' zo/usr/sbin/semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH';/usr/sbin/restorecon -v '$FIX_TARGET_PATH'c �> � t |� dkD rd| _ d| _ y y )Nr FT)�len�fixable� report_bug)�self�argss �2/usr/share/setroubleshoot/plugins/allow_execmod.py� init_argszplugin.init_argsV s � � �t�9�q�=� �D�L� "�D�O� � c �N � t |� dkD r | j S | j S �Nr )r �unsafe_problem_description�problem_description�r �avcr s r �get_problem_descriptionz plugin.get_problem_description[ s% � � �t�9�q�=��2�2� 2��'�'�'r c �N � t |� dkD r | j S | j S r )r �unsafe_if_text�if_textr s r � get_if_textzplugin.get_if_text` �# � � �t�9�q�=��&�&� &��|�|�r c �N � t |� dkD r | j S | j S r )r �unsafe_then_text� then_textr s r � get_then_textzplugin.get_then_texte s# � � �t�9�q�=��(�(� (��~�~� r c �N � t |� dkD r | j S | j S r )r �unsafe_do_text�do_textr s r � get_do_textzplugin.get_do_textj r r c � � t j | t � d| _ t d� | _ | j d� y )NTz Change label on the library.� )r �__init__�__name__r �_� button_text� set_priority)r s r r' zplugin.__init__o s3 � �����X�&��� � � ;�<��� ���"� r c �Z � dd l }|j dg� �r |j dd|j g|j �� }|j g d�|j |j �� }|j j � |j � |j � |j dk( r| j d g� S t j |j j d � t � d }|j d � d d k( r| j � S y # Y y xY w)Nr �execmodz eu-readelfz-d)�stdout)�fgrepz-q�TEXTREL)�stdinr. � �unsafe�"�:� �lib_t)� subprocess�has_any_access_in�Popen�tpath�PIPEr. �close�wait� returncode�report�selinux� matchpathcon�strip�S_IFREG�split)r r r8 �p1�p2�mcons r �analyzezplugin.analyzeu s� � �� � � �)�� -� � �%�%�|�T�3�9�9�&E�j�o�o�%�^�� �%�%�&@�� � �Zd�Zi�Zi�%�j�� �I�I�O�O� � �G�G�I� �G�G�I��}�}��!��{�{�H�:�.�.��'�'�� � ����(<�g�F�q�I�D��z�z�#��q�!�W�,��{�{�}�$��� ��s �AD& �&D*N)r( � __module__� __qualname__r) �summaryr r �unsafe_fix_description�fix_descriptionr r r" r r r# �fix_cmdr r r r r$ r' rI � r r r r s� � � � � �G� � � �� "#� $� " � � Z��� � �O� N�N� w��P�N�_�G�X�I��G� D�G�#� (� � � � � r r ) rA �stat�gettext� translationr) �setroubleshoot.util�setroubleshoot.Pluginr r rP r r �<module>rV sD ��& � � � �G� � � 8�4� H� � ���� !� (�l�V� lr
Save File
Cancel