관리-도구
편집 파일: restorecon.cpython-39.pyc
a y�bZ � @ s� d dl Z e jddd�Zej Zd dlT d dlmZ d dlZd dlT d dlZda dd� Z g d �Z d d � Z d dlZG d d � d e�Z dS )� Nzsetroubleshoot-pluginsT)Zfallback)�*)�Pluginc C s. t s&tt�� �}|�� �d�a |�� | t v S )N� )�customizable_types�open�selinuxZ selinux_customizable_types_path�read�split�close)�target�fd� r �//usr/share/setroubleshoot/plugins/restorecon.py� customizable s r )z/sys/z/proc/z/memfd:c C s t D ]}| �|�r dS qdS )NTF)�excluded_paths� startswith)Z target_path�pathr r r � excluded_path, s r c @ sT e Zd Zed�ZdZed�Zdd� Zed�Zdd� Z ed �Z d Z d d � Z d d� Z dS )�pluginzN SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH. z /sbin/restorecon $TARGET_PATHz� You can restore the default system context to this file by executing the restorecon command. restorecon '$TARGET_PATH', if this file is a directory, you can recursively restore using restorecon -R '$TARGET_PATH'. c C s t d�|d S )Na� SELinux denied access requested by $SOURCE. $TARGET_PATH may be mislabeled. $TARGET_PATH default SELinux type is <B>%s</B>, but its current type is <B>$TARGET_TYPE</B>. Changing this file back to the default type may fix your problem. <p> File contexts can be assigned to a file in the following ways. <ul> <li>Files created in a directory receive the file context of the parent directory by default. <li>The SELinux policy might override the default label inherited from the parent directory by specifying a process running in context A which creates a file in a directory labeled B will instead create the file with label C. An example of this would be the dhcp client running with the dhcpc_t type and creating a file in the directory /etc. This file would normally receive the etc_t type due to parental inheritance but instead the file is labeled with the net_conf_t type because the SELinux policy specifies this. <li>Users can change the file context on a file using tools such as chcon, or restorecon. </ul> This file could have been mislabeled either by user error, or if an normally confined application was run under the wrong domain. <p> However, this might also indicate a bug in SELinux because the file should not have been labeled with this type. <p> If you believe this is a bug, please file a bug report against this package. � )�_��self�avc�argsr r r �get_problem_description? s �z plugin.get_problem_descriptionzGIf you want to fix the label. $TARGET_PATH default label should be %s.c C s | j |d S )Nr )�if_textr r r r � get_if_text\ s zplugin.get_if_textz�you can run restorecon. The access attempt may have been stopped due to insufficient permissions to access a parent directory in which case try to change the following command accordingly.z"# /sbin/restorecon -v $TARGET_PATHc C s0 t �| t� | �d� d| _d| _td�| _d S )N�d ZgreenTzRestore Context)r �__init__�__name__Z set_priority�levelZfixabler Z button_text)r r r r r d s zplugin.__init__c C s: |j s d S |jjdv rd S |jjtvr*d S |�d�r8d S i }t|d< t|d< t|d< t|d< t |d< |� |� � ��r6|j d u r�d S |j dkr�d S |j d dkr�d S t |j �r�d S t|jj�r�d S zNt�|j �d �||j �d }|�d �d }||jjk�r | �d |f�W S W n& t�y4 } z W Y d }~n d }~0 0 d S )N)Zcifs_tZnfs_tZ relabelto�dir�fileZlnk_fileZchr_fileZblk_file�/r �"r �:� )Zquery_environmentZtcontext�typeZ file_typesZall_accesses_are_in�S_IFDIR�S_IFREG�S_IFLNK�S_IFCHR�S_IFBLKZ has_tclass_in�keysZtpathr r r Z matchpathcon�stripZtclassr Zreport�OSError)r r Zrestorecon_filesZmconZ mcon_type�er r r �analyzek s2 zplugin.analyzeN)r � __module__� __qualname__r ZsummaryZfix_cmdZfix_descriptionr r r Z then_textZdo_textr r2 r r r r r 2 s r )�gettextZ translationr Zsetroubleshoot.utilZsetroubleshoot.Pluginr �os�statr r r r r r r r r r �<module> s