← Back
Editing: restorecon.cpython-312.pyc
� �% gZ � � � d dl Z e j dd�� Zej Zd dl� d dlmZ d dlZd dl� d dlZda d� Z g d�Z d � Z d dlZ G d � d e� Z y) � Nzsetroubleshoot-pluginsT)�fallback)�*)�Pluginc � � t sLt t j � � }|j � j d� a |j � | t v S )N� )�customizable_types�open�selinux� selinux_customizable_types_path�read�split�close)�target�fds �//usr/share/setroubleshoot/plugins/restorecon.py� customizabler sB � � � �'�9�9�;� <�� �W�W�Y�_�_�T� 2�� ��� � �'� '�'� )z/sys/z/proc/z/memfd:c �@ � t D ] }| j |� s� y y)NTF)�excluded_paths� startswith)� target_path�paths r � excluded_pathr , s � � �� � !� !�$� '�� � r c �l � e Zd Z ed� ZdZ ed� Zd� Z ed� Zd� Z ed� Z dZ d � Z d � Z y ) �pluginzN SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH. z /sbin/restorecon $TARGET_PATHz� You can restore the default system context to this file by executing the restorecon command. restorecon '$TARGET_PATH', if this file is a directory, you can recursively restore using restorecon -R '$TARGET_PATH'. c �$ � t d� |d z S )Na� SELinux denied access requested by $SOURCE. $TARGET_PATH may be mislabeled. $TARGET_PATH default SELinux type is <B>%s</B>, but its current type is <B>$TARGET_TYPE</B>. Changing this file back to the default type may fix your problem. <p> File contexts can be assigned to a file in the following ways. <ul> <li>Files created in a directory receive the file context of the parent directory by default. <li>The SELinux policy might override the default label inherited from the parent directory by specifying a process running in context A which creates a file in a directory labeled B will instead create the file with label C. An example of this would be the dhcp client running with the dhcpc_t type and creating a file in the directory /etc. This file would normally receive the etc_t type due to parental inheritance but instead the file is labeled with the net_conf_t type because the SELinux policy specifies this. <li>Users can change the file context on a file using tools such as chcon, or restorecon. </ul> This file could have been mislabeled either by user error, or if an normally confined application was run under the wrong domain. <p> However, this might also indicate a bug in SELinux because the file should not have been labeled with this type. <p> If you believe this is a bug, please file a bug report against this package. � )�_��self�avc�argss r �get_problem_descriptionz plugin.get_problem_description? s" � �� � �0 ��7�1� r zGIf you want to fix the label. $TARGET_PATH default label should be %s.c �& � | j |d z S )Nr )�if_textr s r � get_if_textzplugin.get_if_text\ s � ��|�|�d�1�g�%�%r z�you can run restorecon. The access attempt may have been stopped due to insufficient permissions to access a parent directory in which case try to change the following command accordingly.z"# /sbin/restorecon -v $TARGET_PATHc � � t j | t � | j d� d| _ d| _ t d� | _ y )N�d �greenTzRestore Context)r �__init__�__name__� set_priority�level�fixabler � button_text)r s r r* zplugin.__init__d s: � �����h�'� ���#� � �� ��� ��-�.��r c �F � |j sy |j j dv ry |j j t vry |j d� ry i }t |d< t |d< t |d< t |d< t |d< |j |j � � r�|j �y |j dk( ry |j d dk7 ry t |j � ry t |j j � ry t j |j j# d � ||j$ � d }|j' d � d }||j j k7 r| j) d |f� S y y # t* $ r }Y d }~y d }~ww xY w)N)�cifs_t�nfs_t� relabelto�dir�file�lnk_file�chr_file�blk_file�/r �"r �:� )�query_environment�tcontext�type� file_types�all_accesses_are_in�S_IFDIR�S_IFREG�S_IFLNK�S_IFCHR�S_IFBLK� has_tclass_in�keys�tpathr r r � matchpathcon�strip�tclassr �report�OSError)r r! �restorecon_files�mcon� mcon_type�es r �analyzezplugin.analyzek sz � ��$�$�T� �<�<� � � 5� 5�d� �<�<� � �J� .�t� � "� "�;� /�� ��")��� �#*��� �'.���$�'.���$�'.���$� � � � -� 2� 2� 4� 5��y�y� ���y�y�C� ���y�y��|�s�"�4� �S�Y�Y�'���C�L�L� -� -�.�� � �+�+�C�I�I�O�O�C�,@�BR�SV�S]�S]�B^�_�`a�b�� �*�*�S�/�!�,� � �� � � 1� 1�1� �;�;��9�~�6�6� 2� �� � ���� �s � A>F � F �F N)r+ � __module__� __qualname__r �summary�fix_cmd�fix_descriptionr# r% r& � then_text�do_textr* rS � r r r r 2 s` � �� � �G� .�G�� � �O� �6 �Z�[�G�&� � v� w�I�2�G�/�r r )�gettext� translationr �setroubleshoot.util�setroubleshoot.Pluginr �os�statr r r r r r r[ r r �<module>rb sc ��* � �G� � � 8�4� H� � ���� !� (� � � �� �(� 0��� �T�V� Tr
Save File
Cancel