HEX
Server: Apache
System: Linux hp3-stn-1011028.hostingp3.local 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: csh958633 (951153)
PHP: 8.3.30
Disabled: shell_exec,exec,system,popen,set_time_limit
$ pwd: /usr/share/setroubleshoot/plugins/
Upload Files
File: //usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyo
�
c�L]c@s^ddlZejdde�ZejZddlTddlmZdefd��YZdS(i����Nssetroubleshoot-pluginstfallback(t*(tPlugintplugincBsteZed�Zed�Zed�ZdZed�ZdZed�Z	ed�Z
dZd	�Zd
�Z
RS(sZ
    SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
    s�
    SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
    CIFS (Comment Internet File System) is a network filesystem similar to
    SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>)
    The ftp daemon attempted to read one or more files or directories from
    a mounted filesystem of this type.  As CIFS filesystems do not support
    fine-grained SELinux labeling, all files and directories in the
    filesystem will have the same security context.

    If you have not configured the ftp daemon to read files from a CIFS filesystem
    this access attempt could signal an intrusion attempt.
    sh
    Changing the "$BOOLEAN" boolean to true will allow this access:
    "setsebool -P $BOOLEAN=1."
    ssetsebool -P $BOOLEAN=1s� Changing the "$BOOLEAN" and
    "$WRITE_BOOLEAN" booleans to true will allow this access:
    "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
    warning: setting the "$WRITE_BOOLEAN" boolean to true will
    allow the ftp daemon to write to all public content (files and
    directories with type public_content_t) in addition to writing to
    files and directories on CIFS filesystems.  s(setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1s7If you want to allow ftpd to write to cifs file systemss you must tell SELinux about thiss<# setsebool -P allow_ftpd_use_cifs=1 allow_ftpd_anon_write=1cCstj|t�dS(N(Rt__init__t__name__(tself((s8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyRBscCsq|jdg�ri|jdg�ri|jddg�ri|j|j|j�rb|jdd�SdSndSdS(	Ntftpd_ttcifs_ttfiletdirtargstallow_ftpd_use_cifstallow_ftpd_anon_write(RR
(tmatches_source_typestmatches_target_typest
has_tclass_intall_accesses_are_intcreate_file_permstrw_dir_permstreporttNone(Rtavc((s8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pytanalyzeEs(Rt
__module__t_tsummarytproblem_descriptiontfix_descriptiontfix_cmdtrw_fix_descriptiont
rw_fix_cmdtif_textt	then_texttdo_textRR(((s8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyRs					(tgettextttranslationtTrueRtsetroubleshoot.utiltsetroubleshoot.PluginRR(((s8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyt<module>s
	

@ Telegram