dbfdg 3 nma@sDddlZejdddZejZddlTddlmZGdddeZdS) Nzsetroubleshoot-pluginsT)Zfallback)*)Pluginc@sHeZdZedZedZedZdZedZedZ ddZ d d Z d S) pluginzR SELinux is preventing $SOURCE_PATH from connecting to port $PORT_NUMBER. a SELinux has denied $SOURCE from connecting to a network port $PORT_NUMBER within a sandbox. If $SOURCE should be allowed to connect on $PORT_NUMBER, you need to use a different sandbox type like sandbox_web_t or sandbox_net_t. # sandbox -X -t sandbox_net_t $SOURCE If $SOURCE is not supposed to connect to $PORT_NUMBER, this could signal an intrusion attempt. z~ If you want to allow $SOURCE to connect to $PORT_NUMBER, you can execute # sandbox -X -t sandbox_net_t $SOURCE zIIf you want to allow $SOURCE_PATH to connect to network port $PORT_NUMBERzyou need to modify the sandbox type. sandbox_web_t or sandbox_net_t. For example: sandbox -X -t sandbox_net_t $SOURCE_PATH Please read 'sandbox' man page for more details. cCstj|t|jddS)NK)r__init____name__Z set_priority)selfr 4/usr/share/setroubleshoot/plugins/sandbox_connect.pyr7s zplugin.__init__cCs$|jdgr |jdgr |jSdS)NZsandbox_x_client_tZ name_connect)Zmatches_source_typesZhas_any_access_inZreport)r Zavcr r r analyze;s  zplugin.analyzeN) r __module__ __qualname___ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZif_textZ then_textrr r r r r rsr)gettextZ translationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr r r r s