dbfdg 3 nmak@sDddlZejdddZejZddlTddlmZGdddeZdS) Nzsetroubleshoot-pluginsT)Zfallback)*)Pluginc@sLeZdZedZedZdZdZedZedZ edZ ddZ d d Z d S) pluginzF SELinux is preventing $SOURCE_PATH the "$ACCESS" capability. z dac_override and dac_read_search capabilities usually indicates that the root process does not have access to a file based on the permission flags. This usually mean you have some file with the wrong ownership/permissions on it. zuIf you want to help identify if domain needs this access or you have a file with the wrong permissions on your systemzdturn on full auditing to get path information about the offending file and generate the error again.z Turn on full auditing # auditctl -w /etc/shadow -p w Try to recreate AVC. Then execute # ausearch -m avc -ts recent If you see PATH record check ownership/permissions on file, and fix it, otherwise report as a bugzilla.cCstj|td|_dS)NZgreen)r__init____name__level)selfr 1/usr/share/setroubleshoot/plugins/dac_override.pyr0s zplugin.__init__cCs|jddgr|jSdS)NZ dac_overrideZdac_read_search)Zhas_any_access_inZreport)r Zavcr r r analyze4szplugin.analyzeN) r __module__ __qualname___ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZif_textZ then_textZdo_textrr r r r r rsr)gettextZ translationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr r r r s