← Back
Editing: allow_ftpd_use_cifs.cpython-312.opt-1.pyc
� �Z`� � �x � d dl Z e j dd�� Zej Zd dl� d dlmZ G d� de� Zy) � Nzsetroubleshoot-pluginsT)�fallback)�*)�Pluginc � � e Zd Z ed� Z ed� Z ed� ZdZ ed� ZdZ ed� Z ed� Z dZ d � Z d � Zy ) �pluginzZ SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem. a� SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem. CIFS (Comment Internet File System) is a network filesystem similar to SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>) The ftp daemon attempted to read one or more files or directories from a mounted filesystem of this type. As CIFS filesystems do not support fine-grained SELinux labeling, all files and directories in the filesystem will have the same security context. If you have not configured the ftp daemon to read files from a CIFS filesystem this access attempt could signal an intrusion attempt. zh Changing the "$BOOLEAN" boolean to true will allow this access: "setsebool -P $BOOLEAN=1." z8/usr/sbin/setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1a� Changing the "$BOOLEAN" and "$WRITE_BOOLEAN" booleans to true will allow this access: "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1". warning: setting the "$WRITE_BOOLEAN" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on CIFS filesystems. z7If you want to allow ftpd to write to cifs file systemsz you must tell SELinux about thisz0# setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1c �f � t j | t � d| _ t d� | _ y )NTzEnable booleans)r �__init__�__name__�fixable�_� button_text)�selfs �8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyr zplugin.__init__B s% � �����h�'��� � � .�/��� c �� � |j dg� r`|j dg� rN|j ddg� r;|j |j |j z � r| j d�� S y y )N�ftpd_t�cifs_t�file�dir)� ftpd_use_cifs�ftpd_anon_write)�args)�matches_source_types�matches_target_types� has_tclass_in�all_accesses_are_in�create_file_perms� rw_dir_perms�report)r �avcs r �analyzezplugin.analyzeG sm � � � $� $�h�Z� 0� � $� $�h�Z� 0� � � �v�u�o� .� �&�&�s�'<�'<�s�?O�?O�'O�P��{�{�(L�{�M�M��r N)r � __module__� __qualname__r �summary�problem_description�fix_description�fix_cmd�rw_fix_description� rw_fix_cmd�if_text� then_text�do_textr r! � r r r r sy � �� � �G� � � �� � � �O� I�G�� 4� 5�� L�J��I�J�G��4�5�I�@�G�0� r r )�gettext� translationr �setroubleshoot.util�setroubleshoot.Pluginr r r- r r �<module>r2 s< ��* � �G� � � 8�4� H� � ���� !� (�7�V� 7r
Save File
Cancel