a

�Z`F
�@sDdd
lZej
ddd�Z
e
jZddlTddlmZ
Gdd�de�Zd
S)	�Nzsetroubleshoot-pluginsT)
Zfallback)
�
*)
�Pluginc@sLeZ
dZed
�
Zed�
Zed�
ZdZdd�Zed�
Z	ed�
Z
d	Zd
d�ZdS)
�pluginzN
    SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH.
    ab

    SELinux denied access to $TARGET_PATH requested by $SOURCE.
    $TARGET_PATH has a context used for sharing by a different program. If you
    would like to share $TARGET_PATH from $SOURCE also, you need to
    change its file context to public_content_t.  If you did not intend to
    allow this access, this could signal an intrusion attempt.
    a

    You can alter the file context by executing chcon -t public_content_t '$TARGET_PATH'
    You must also change the default file context files on the system in order to preserve them even on a full relabel.  "semanage fcontext -a -t public_content_t '$FIX_TARGET_PATH'"
    z(chcon -t public_content_t '$TARGET_PATH'c

Cst�
|t�
|�d
�

dS)N�)r�__init__�__name__Zset_priority)
�self�r	�3/usr/share/setroubleshoot/plugins/public_content.pyr.s

zplugin.__init__z8If you want to treat $TARGET_BASE_PATH as public contentz]You need to change the label on $TARGET_BASE_PATH to public_content_t or public_content_rw_t.z`# semanage fcontext -a -t public_content_t '$FIX_TARGET_PATH'
# restorecon -v '$FIX_TARGET_PATH'cCs>|
�gd
�
�
r6|
�
gd�
�
r6|
�|
j|
j�
r6|��SdSdS)N)Zsmbd_tZhttpd_tZftpd_tZhttpd_sys_script_tZnfsd_tZrsync_t)Z
samba_share_tzhttpd_.*_content_tZrsync_data_t)Zmatches_source_typesZmatches_target_typesZall_accesses_are_inZr_file_permsZr_dir_permsZreport)rZavcr	r	r
�analyze8s

��zplugin.analyzeN)
r�
__module__�__qualname__�
_ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdrZif_textZ	then_textZdo_textrr	r	r	r
rs


r)�gettextZtranslationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr	r	r	r
�<module>s