dbfdg 3 nma @sDddlZejdddZejZddlTddlmZGdddeZdS) Nzsetroubleshoot-pluginsT)Zfallback)*)Pluginc@sLeZdZedZedZedZdZedZedZ dZ dd Z d d Z d S) pluginzN SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH. a SELinux denied svirt access to $TARGET_PATH. If this is a virtualization image, it has to have a file context label of virt_image_t. The system is setup to label image files in directory./var/lib/libvirt/images correctly. We recommend that you copy your image file to /var/lib/libvirt/images. If you really want to have your image files in the current directory, you can relabel $TARGET_PATH to be virt_image_t using chcon. You also need to execute semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH' to add this new path to the system defaults. If you did not intend to use $TARGET_PATH as a virtualization image it could indicate either a bug or an intrusion attempt. a  You can alter the file context by executing chcon -t virt_image_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH'" z-/usr/bin/chcon -t virt_image_t '$TARGET_PATH'z/If $TARGET_BASE_PATH is a virtualization targetz2You need to change the label on $TARGET_BASE_PATH'z\# semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH' # restorecon -v '$FIX_TARGET_PATH'cCs*tj|t|jdd|_td|_dS)N<Tz$Set the image label to virt_image_t.)r__init____name__Z set_priorityZfixable_Z button_text)selfr 4/usr/share/setroubleshoot/plugins/qemu_file_image.pyr5s  zplugin.__init__cCsD|jdgr<|j|j|jr<|jddgr<|jr<|jSdSdS)NZsvirt_tfiledir)Zmatches_source_typesZall_accesses_are_inZ rw_file_permsZ r_dir_permsZ has_tclass_inZpath_is_not_standard_directoryZreport)r Zavcr r r analyze;s  zplugin.analyzeN) r __module__ __qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZif_textZ then_textZdo_textrrr r r r rsr)gettextZ translationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr r r r s