HEX

File: //usr/share/setroubleshoot/plugins/__pycache__/allow_ftpd_use_cifs.cpython-39.pyc
a

�Z`�
�@sDddlZejddd�ZejZddlTddlmZGdd�de�ZdS)	�Nzsetroubleshoot-pluginsT)Zfallback)�*)�Pluginc@sXeZdZed�Zed�Zed�ZdZed�ZdZ	ed�Z
ed�ZdZd	d
�Z
dd�Zd
S)�pluginzZ
    SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
    a�
    SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
    CIFS (Comment Internet File System) is a network filesystem similar to
    SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>)
    The ftp daemon attempted to read one or more files or directories from
    a mounted filesystem of this type.  As CIFS filesystems do not support
    fine-grained SELinux labeling, all files and directories in the
    filesystem will have the same security context.

    If you have not configured the ftp daemon to read files from a CIFS filesystem
    this access attempt could signal an intrusion attempt.
    zh
    Changing the "$BOOLEAN" boolean to true will allow this access:
    "setsebool -P $BOOLEAN=1."
    z8/usr/sbin/setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1a� Changing the "$BOOLEAN" and
    "$WRITE_BOOLEAN" booleans to true will allow this access:
    "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
    warning: setting the "$WRITE_BOOLEAN" boolean to true will
    allow the ftp daemon to write to all public content (files and
    directories with type public_content_t) in addition to writing to
    files and directories on CIFS filesystems.  z7If you want to allow ftpd to write to cifs file systemsz you must tell SELinux about thisz0# setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1cCs t�|t�d|_td�|_dS)NTzEnable booleans)r�__init__�__name__Zfixable�_Zbutton_text)�self�r	�8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyrBszplugin.__init__cCsR|�dg�rJ|�dg�rJ|�ddg�rJ|�|j|j�rD|jdd�SdSndSdS)NZftpd_tZcifs_t�file�dir)Z
ftpd_use_cifsZftpd_anon_write)�args)Zmatches_source_typesZmatches_target_typesZ
has_tclass_inZall_accesses_are_inZcreate_file_permsZrw_dir_permsZreport)rZavcr	r	r
�analyzeGs
��zplugin.analyzeN)r�
__module__�__qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZrw_fix_descriptionZ
rw_fix_cmdZif_textZ	then_textZdo_textrrr	r	r	r
rs
r)�gettextZtranslationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr	r	r	r
�<module>s