dbfdg 3 nmaq@sDddlZejdddZejZddlTddlmZGdddeZdS) Nzsetroubleshoot-pluginsT)Zfallback)*)Pluginc@s4eZdZedZdZedZdZddZddZ d S) plugina SELinux prevented httpd $ACCESS access to $TARGET_PATH. httpd scripts are not allowed to write to content without explicit labeling of all files. If $TARGET_PATH is writable content. it needs to be labeled httpd_sys_rw_content_t or if all you need is append you can label it httpd_sys_ra_content_t. Please refer to 'man httpd_selinux' for more information on setting up httpd and selinux. z1chcon -R -t httpd_sys_rw_content_t '$TARGET_PATH'z2You need to change the label on '$FIX_TARGET_PATH'zf# semanage fcontext -a -t httpd_sys_rw_content_t '$FIX_TARGET_PATH' # restorecon -v '$FIX_TARGET_PATH'cCstj|t|jddS)Nd)r__init____name__Z set_priority)selfr 8/usr/share/setroubleshoot/plugins/httpd_write_content.pyr,s zplugin.__init__cCsF|jddgrB|jdgrB|jddgrB|j|j|jrB|jSdS)NZhttpd_tZhttpd_sys_script_tZhttpd_sys_content_tfiledir)Zmatches_source_typesZmatches_target_typesZ has_tclass_inZall_accesses_are_inZcreate_file_permsZ rw_dir_permsZreport)rZavcr r r analyze0s  zplugin.analyzeN) r __module__ __qualname___Zproblem_descriptionZfix_cmdZ then_textZdo_textrr r r r r rsr)gettextZ translationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr r r r s