dbfdg 3 nma @sDddlZejdddZejZddlTddlmZGdddeZdS) Nzsetroubleshoot-pluginsT)Zfallback)*)Pluginc@sDeZdZedZedZedZdZdZdZ dZ dd Z d d Z d S) pluginzj SELinux is preventing the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH. a SELinux has denied the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH. Automounter can be setup to execute configuration files. If $TARGET_PATH is an automount executable configuration file it needs to have a file label of bin_t. If automounter is trying to execute something that it is not supposed to, this could indicate an intrusion attempt. a, If you want to change the file context of $TARGET_PATH so that the automounter can execute it you can execute "chcon -t bin_t $TARGET_PATH". If you want this to survive a relabel, you need to permanently change the file context: execute "semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'". ze/usr/sbin/semanage fcontext -a -t bin_t '$FIX_TARGET_PATH';/usr/sbin/restorecon -v '$FIX_TARGET_PATH'z8If you want to allow automounter to execute $TARGET_PATHz3Change the file context of '$TARGET_PATH' to bin_t.z# chcon -t bin_t '$FIX_TARGET_PATH' If you want this to survive a relabel, execute # semanage fcontext -a -t bin_t '$FIX_TARGET_PATH';restorecon -v '$FIX_TARGET_PATH' cCs tj|td|_td|_dS)NTzChange file context.)r__init____name__Zfixable_Z button_text)selfr :/usr/share/setroubleshoot/plugins/automount_exec_config.pyr6s zplugin.__init__cCs2|jdgr.|jddgr.|jdgr.|jSdS)NZ automount_tZexecuteZexecute_no_transfile)Zmatches_source_typesZall_accesses_are_inZ has_tclass_inZreport)rZavcr r r analyze;s   zplugin.analyzeN) r __module__ __qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZif_textZ then_textZdo_textrr r r r r rsr)gettextZ translationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr r r r s