File: //proc/self/root/usr/share/setroubleshoot/plugins/__pycache__/restorecon.cpython-39.opt-1.pyc
a
y�bZ � @ s� d dl Z e jddd�Zej Zd dlT d dlmZ d dlZd dlT d dlZda dd� Z
g d �Z d
d � Z d dlZG d d
� d
e�Z
dS )� Nzsetroubleshoot-pluginsT)Zfallback)�*)�Pluginc C s. t s&tt�� �}|�� �d�a |�� | t v S )N�
)�customizable_types�open�selinuxZ selinux_customizable_types_path�read�split�close)�target�fd� r
�//usr/share/setroubleshoot/plugins/restorecon.py� customizable s
r )z/sys/z/proc/z/memfd:c C s t D ]}| �|�r dS qdS )NTF)�excluded_paths�
startswith)Z target_path�pathr
r
r �
excluded_path, s r c @ sT e Zd Zed�ZdZed�Zdd� Zed�Zdd� Z ed �Z
d
Z d d � Z d
d� Z
dS )�pluginzN
SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH.
z /sbin/restorecon $TARGET_PATHz�
You can restore the default system context to this file by executing the
restorecon command. restorecon '$TARGET_PATH', if this file is a directory,
you can recursively restore using restorecon -R '$TARGET_PATH'.
c C s t d�|d S )Na�
SELinux denied access requested by $SOURCE. $TARGET_PATH may
be mislabeled. $TARGET_PATH default SELinux type is
<B>%s</B>, but its current type is <B>$TARGET_TYPE</B>. Changing
this file back to the default type may fix your problem.
<p>
File contexts can be assigned to a file in the following ways.
<ul>
<li>Files created in a directory receive the file context of the parent directory by default.
<li>The SELinux policy might override the default label inherited from the parent directory by
specifying a process running in context A which creates a file in a directory labeled B
will instead create the file with label C. An example of this would be the dhcp client running
with the dhcpc_t type and creating a file in the directory /etc. This file would normally
receive the etc_t type due to parental inheritance but instead the file
is labeled with the net_conf_t type because the SELinux policy specifies this.
<li>Users can change the file context on a file using tools such as chcon, or restorecon.
</ul>
This file could have been mislabeled either by user error, or if an normally confined application
was run under the wrong domain.
<p>
However, this might also indicate a bug in SELinux because the file should not have been labeled
with this type.
<p>
If you believe this is a bug, please file a bug report against this package.
� )�_��self�avc�argsr
r
r �get_problem_description? s �z plugin.get_problem_descriptionzGIf you want to fix the label.
$TARGET_PATH default label should be %s.c C s | j |d S )Nr )�if_textr r
r
r � get_if_text\ s zplugin.get_if_textz�you can run restorecon. The access attempt may have been stopped due to insufficient permissions to access a parent directory in which case try to change the following command accordingly.z"# /sbin/restorecon -v $TARGET_PATHc C s0 t �| t� | �d� d| _d| _td�| _d S )N�d ZgreenTzRestore
Context)r �__init__�__name__Z set_priority�levelZfixabler Z button_text)r r
r
r r d s
zplugin.__init__c
C s: |j s
d S |jjdv rd S |jjtvr*d S |�d�r8d S i }t|d< t|d< t|d< t|d< t |d< |�
|� � ��r6|j d u r�d S |j dkr�d S |j d dkr�d S t
|j �r�d S t|jj�r�d S zNt�|j �d
�||j �d }|�d �d
}||jjk�r | �d |f�W S W n& t�y4 } z W Y d }~n
d }~0 0 d S )N)Zcifs_tZnfs_tZ relabelto�dir�fileZlnk_fileZchr_fileZblk_file�/r �"r �:� )Zquery_environmentZtcontext�typeZ
file_typesZall_accesses_are_in�S_IFDIR�S_IFREG�S_IFLNK�S_IFCHR�S_IFBLKZ
has_tclass_in�keysZtpathr r r Z matchpathcon�stripZtclassr Zreport�OSError)r r Zrestorecon_filesZmconZ mcon_type�er
r
r �analyzek s2
zplugin.analyzeN)r �
__module__� __qualname__r ZsummaryZfix_cmdZfix_descriptionr r r Z then_textZdo_textr r2 r
r
r
r r 2 s r )�gettextZ translationr Zsetroubleshoot.utilZsetroubleshoot.Pluginr �os�statr r r r r r r
r
r
r �<module> s