관리-도구
편집 파일: allow_anon_write.cpython-39.pyc
a �Z` � @ sD d dl Z e jddd�Zej Zd dlT d dlmZ G dd� de�ZdS ) � Nzsetroubleshoot-pluginsT)Zfallback)�*)�Pluginc @ sL e Zd Zed�Zed�Zed�Zed�Zed�Zdd� Z dd � Z d d � Z d S ) �pluginz^ SELinux policy is preventing an httpd script from writing to a public directory. z� SELinux policy is preventing an httpd script from writing to a public directory. If httpd is not setup to write to public directories, this could signal an intrusion attempt. a If httpd scripts should be allowed to write to public directories you need to turn on the $BOOLEAN boolean and change the file context of the public directory to public_content_rw_t. Read the httpd_selinux man page for further information: "setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>" You must also change the default file context labeling files on the system in order to preserve public directory labeling even on a full relabel. "semanage fcontext -a -t public_content_rw_t <path>" zNIf you want to allow $SOURCE_PATH to be able to write to shared public contentz�you need to change the label on $TARGET_PATH to public_content_rw_t, and potentially turn on the allow_httpd_sys_script_anon_write boolean.c C s d| }|S )Nzo# semanage fcontext -a -t public_content_rw_t $TARGET_PATH # restorecon -R -v $TARGET_PATH # setsebool -P %s %s� )�self�avc�argsZdo_textr r �5/usr/share/setroubleshoot/plugins/allow_anon_write.py� get_do_text/ s �zplugin.get_do_textc C s t �| t� d| _d S )NZgreen)r �__init__�__name__�level)r r r r r 5 s zplugin.__init__c C s� |� dg�r�|�|j�r�|�dg�r.| �d�S |�dg�rD| �d�S |�dg�rZ| �d�S |�dg�rp| �d �S |�d g�r�| �d �S |�d g�r�| �d �S d S )NZpublic_content_tZhttpd_t)Zallow_httpd_anon_write�1Zhttpd_sys_script_t)Z!allow_httpd_sys_script_anon_writer Zftpd_t)Zallow_ftpd_anon_writer Znfsd_t)Zallow_nfsd_anon_writer Zrsync_t)Zallow_rsync_anon_writer Zsmbd_t)Zallow_smbd_anon_writer )Zmatches_target_typesZall_accesses_are_inZcreate_file_permsZmatches_source_typesZreport)r r r r r �analyze9 s � zplugin.analyzeN) r � __module__� __qualname__�_ZsummaryZproblem_descriptionZfix_descriptionZif_textZ then_textr r r r r r r r s r )�gettextZ translationr Zsetroubleshoot.utilZsetroubleshoot.Pluginr r r r r r �<module> s