dbfdg 3 nma4 @sDddlZejdddZejZddlTddlmZGdddeZdS) Nzsetroubleshoot-pluginsT)Zfallback)*)Pluginc@sDeZdZedZedZedZdZedZdZ ddZ d d Z d S) pluginzT SELinux is preventing xen ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH. a SELinux denied xen access to $TARGET_PATH. If this is a XEN image, it has to have a file context label of xen_image_t. The system is setup to label image files in directory /var/lib/xen/images correctly. We recommend that you copy your image file to /var/lib/xen/images. If you really want to have your xen image files in the current directory, you can relabel $TARGET_PATH to be xen_image_t using chcon. You also need to execute semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH' to add this new path to the system defaults. If you did not intend to use $TARGET_PATH as a xen image it could indicate either a bug or an intrusion attempt. a  You can alter the file context by executing chcon -t xen_image_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH'" z,/usr/bin/chcon -t xen_image_t '$TARGET_PATH'z2You need to change the label on '$FIX_TARGET_PATH'z[# semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH' # restorecon -v '$FIX_TARGET_PATH'cCs tj|td|_td|_dS)NTz%Change the file label to xen_image_t.)r__init____name__Zfixable_Z button_text)selfr ./usr/share/setroubleshoot/plugins/xen_image.pyr5s zplugin.__init__cCsF|jddgr>|j|j|jr>|jddgr>|jr>|jSdSdS)NZxend_tZvirsh_tfiledir)Zmatches_source_typesZall_accesses_are_inZ r_file_permsZ r_dir_permsZ has_tclass_inZpath_is_not_standard_directoryZreport)rZavcr r r analyze:s zplugin.analyzeN) r __module__ __qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZ then_textZdo_textrr r r r r rsr)gettextZ translationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr r r r s