HEX
Server: Apache
System: Linux 185.122.168.184.host.secureserver.net 5.14.0-570.60.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Nov 5 05:00:59 EST 2025 x86_64
User: barbeatleanalyti (1024)
PHP: 8.1.33
Disabled: NONE
$ pwd: /proc/self/root/usr/share/setroubleshoot/plugins/__pycache__/
Upload Files
File: //proc/self/root/usr/share/setroubleshoot/plugins/__pycache__/allow_ftpd_use_nfs.cpython-39.pyc
a

�Z`/
�@sDddlZejddd�ZejZddlTddlmZGdd�de�ZdS)	�Nzsetroubleshoot-pluginsT)Zfallback)�*)�Pluginc@sXeZdZed�Zed�Zed�ZdZed�ZdZ	ed�Z
ed�ZdZd	d
�Z
dd�Zd
S)�pluginzY
    SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
    aU
    SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
    NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux
    systems.

    The ftp daemon attempted to read one or more files or directories from
    a mounted filesystem of this type.  As NFS filesystems do not support
    fine-grained SELinux labeling, all files and directories in the
    filesystem will have the same security context.

    If you have not configured the ftp daemon to read files from a NFS filesystem
    this access attempt could signal an intrusion attempt.
    z|
    Changing the "allow_ftpd_use_nfs" boolean to true will allow this access:
    "setsebool -P allow_ftpd_use_nfs=1."
    z7/usr/sbin/setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1a� Changing the "allow_ftpd_use_nfs" and
    "ftpd_anon_write" booleans to true will allow this access:
    "setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1".
    warning: setting the "ftpd_anon_write" boolean to true will
    allow the ftp daemon to write to all public content (files and
    directories with type public_content_t) in addition to writing to
    files and directories on NFS filesystems.  z6If you want to allow ftpd to write to nfs file systemsz you must tell SELinux about thisz/# setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1cCs t�|t�d|_td�|_dS)NTzEnable booleans.)r�__init__�__name__Zfixable�_Zbutton_text)�self�r	�7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyrDszplugin.__init__cCsH|�dg�rD|�dg�rD|�ddg�rD|�|j|j�rD|jdd�SdS)NZftpd_tZnfs_t�file�dir)Zftpd_use_nfsZftpd_anon_write)�args)Zmatches_source_typesZmatches_target_typesZ
has_tclass_inZall_accesses_are_inZcreate_file_permsZrw_dir_permsZreport)rZavcr	r	r
�analyzeIs
��zplugin.analyzeN)r�
__module__�__qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZrw_fix_descriptionZ
rw_fix_cmdZif_textZ	then_textZdo_textrrr	r	r	r
rsr)�gettextZtranslationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr	r	r	r
�<module>s

@ Telegram