← Back
Editing: automount_exec_config.cpython-312.pyc
� �Z`� � �x � d dl Z e j dd�� Zej Zd dl� d dlmZ G d� de� Zy) � Nzsetroubleshoot-pluginsT)�fallback)�*)�Pluginc �X � e Zd Z ed� Z ed� Z ed� ZdZdZdZ dZ d� Zd � Zy )�pluginzj SELinux is preventing the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH. a� SELinux has denied the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH. Automounter can be setup to execute configuration files. If $TARGET_PATH is an automount executable configuration file it needs to have a file label of bin_t. If automounter is trying to execute something that it is not supposed to, this could indicate an intrusion attempt. a, If you want to change the file context of $TARGET_PATH so that the automounter can execute it you can execute "chcon -t bin_t $TARGET_PATH". If you want this to survive a relabel, you need to permanently change the file context: execute "semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'". ze/usr/sbin/semanage fcontext -a -t bin_t '$FIX_TARGET_PATH';/usr/sbin/restorecon -v '$FIX_TARGET_PATH'z8If you want to allow automounter to execute $TARGET_PATHz3Change the file context of '$TARGET_PATH' to bin_t.z�# chcon -t bin_t '$FIX_TARGET_PATH' If you want this to survive a relabel, execute # semanage fcontext -a -t bin_t '$FIX_TARGET_PATH';restorecon -v '$FIX_TARGET_PATH' c �f � t j | t � d| _ t d� | _ y )NTzChange file context.)r �__init__�__name__�fixable�_�button_text)�selfs �:/usr/share/setroubleshoot/plugins/automount_exec_config.pyr zplugin.__init__6 s% � �����h�'�����3�4��� c � � |j dg� r5|j ddg� r"|j dg� r| j � S y )N�automount_t�execute�execute_no_trans�file)�matches_source_types�all_accesses_are_in� has_tclass_in�report)r �avcs r �analyzezplugin.analyze; sE � ��$�$�m�_�5��#�#�Y�0B�$C�D����v�h�'��;�;�=� �r N) r � __module__�__qualname__r �summary�problem_description�fix_description�fix_cmd�if_text� then_text�do_textr r � r r r r sW � � � � �G� � � �� � � �O� z�G�H�G�E�I��G� 5� r r )�gettext�translationr �setroubleshoot.util�setroubleshoot.Pluginr r r% r r �<module>r* s<