← Back
Editing: allow_ftpd_use_nfs.cpython-312.pyc
� �Z`/ � �x � d dl Z e j dd�� Zej Zd dl� d dlmZ G d� de� Zy) � Nzsetroubleshoot-pluginsT)�fallback)�*)�Pluginc � � e Zd Z ed� Z ed� Z ed� ZdZ ed� ZdZ ed� Z ed� Z dZ d � Z d � Zy ) �pluginzY SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. aU SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux systems. The ftp daemon attempted to read one or more files or directories from a mounted filesystem of this type. As NFS filesystems do not support fine-grained SELinux labeling, all files and directories in the filesystem will have the same security context. If you have not configured the ftp daemon to read files from a NFS filesystem this access attempt could signal an intrusion attempt. z| Changing the "allow_ftpd_use_nfs" boolean to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1." z7/usr/sbin/setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1a� Changing the "allow_ftpd_use_nfs" and "ftpd_anon_write" booleans to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1". warning: setting the "ftpd_anon_write" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on NFS filesystems. z6If you want to allow ftpd to write to nfs file systemsz you must tell SELinux about thisz/# setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1c �f � t j | t � d| _ t d� | _ y )NTzEnable booleans.)r �__init__�__name__�fixable�_� button_text)�selfs �7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyr zplugin.__init__D s% � �����h�'��� � � /�0��� c �� � |j dg� r_|j dg� rM|j ddg� r:|j |j |j z � r| j d�� S y )N�ftpd_t�nfs_t�file�dir)� ftpd_use_nfs�ftpd_anon_write)�args)�matches_source_types�matches_target_types� has_tclass_in�all_accesses_are_in�create_file_perms� rw_dir_perms�report)r �avcs r �analyzezplugin.analyzeI sj � � � $� $�h�Z� 0� � $� $�g�Y� /� � � �v�u�o� .� �&�&�s�'<�'<�s�?O�?O�'O�P��{�{�(K�{�L�L�r N)r � __module__� __qualname__r �summary�problem_description�fix_description�fix_cmd�rw_fix_description� rw_fix_cmd�if_text� then_text�do_textr r! � r r r r sy � �� � �G� � � �� � � �O� H�G�� 3� 4�� K�J��H�I�G��4�5�I�?�G�1� r r )�gettext� translationr �setroubleshoot.util�setroubleshoot.Pluginr r r- r r �<module>r2 s< ��* � �G� � � 8�4� H� � ���� !� (�6�V� 6r
Save File
Cancel