dbfdg
3
nma
@ sD d dl Z e jdddZej Zd dlT d dlmZ G dd deZdS ) Nzsetroubleshoot-pluginsT)Zfallback)*)Pluginc @ sX e Zd ZedZedZedZdZedZdZ edZ
edZ dZ d d
Z
d d Zd
S )pluginzZ
SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
a
SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
CIFS (Comment Internet File System) is a network filesystem similar to
SMB (http://www.microsoft.com/mind/1196/cifs.asp)
The ftp daemon attempted to read one or more files or directories from
a mounted filesystem of this type. As CIFS filesystems do not support
fine-grained SELinux labeling, all files and directories in the
filesystem will have the same security context.
If you have not configured the ftp daemon to read files from a CIFS filesystem
this access attempt could signal an intrusion attempt.
zh
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1."
z8/usr/sbin/setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1a Changing the "$BOOLEAN" and
"$WRITE_BOOLEAN" booleans to true will allow this access:
"setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
warning: setting the "$WRITE_BOOLEAN" boolean to true will
allow the ftp daemon to write to all public content (files and
directories with type public_content_t) in addition to writing to
files and directories on CIFS filesystems. z7If you want to allow ftpd to write to cifs file systemsz you must tell SELinux about thisz0# setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1c C s t j| t d| _td| _d S )NTzEnable booleans)r __init____name__Zfixable_Z button_text)self r 8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyr B s zplugin.__init__c C sR |j dgrJ|jdgrJ|jddgrJ|j|j|j rD| jddS d S nd S d S ) NZftpd_tZcifs_tfiledir
ftpd_use_cifsftpd_anon_write)args)r
r )Zmatches_source_typesZmatches_target_typesZ
has_tclass_inZall_accesses_are_inZcreate_file_permsZ rw_dir_permsZreport)r Zavcr r r
analyzeG s zplugin.analyzeN)r
__module__ __qualname__r ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZrw_fix_descriptionZ
rw_fix_cmdZif_textZ then_textZdo_textr r r r r r
r s r )gettextZ translationr Zsetroubleshoot.utilZsetroubleshoot.Pluginr r r r r r
s