File: //usr/share/setroubleshoot/plugins/dac_override.pyc
�
c�L]c @ s^ d d l Z e j d d e �Z e j Z d d l Td d l m Z d e f d � � YZ d S( i����Ns setroubleshoot-pluginst fallback( t *( t Plugint pluginc B sb e Z e d � Z e d � Z d Z d Z e d � Z e d � Z e d � Z d � Z
d � Z RS( sF
SELinux is preventing $SOURCE_PATH the "$ACCESS" capability.
s�
dac_override and dac_read_search capabilities usually indicates that the root process does not have access to a file based on the permission flags. This usually mean you have some file with the wrong ownership/permissions on it.
t su If you want to help identify if domain needs this access or you have a file with the wrong permissions on your systemsd turn on full auditing to get path information about the offending file and generate the error again.s�
Turn on full auditing
# auditctl -w /etc/shadow -p w
Try to recreate AVC. Then execute
# ausearch -m avc -ts recent
If you see PATH record check ownership/permissions on file, and fix it,
otherwise report as a bugzilla.c C s t j | t � d | _ d S( Nt green( R t __init__t __name__t level( t self( ( s1 /usr/share/setroubleshoot/plugins/dac_override.pyR 0 s c C s# | j d d g � r | j � Sd S( Nt dac_overridet dac_read_search( t has_any_access_int reportt None( R t avc( ( s1 /usr/share/setroubleshoot/plugins/dac_override.pyt analyze4 s
( R t
__module__t _t summaryt problem_descriptiont fix_descriptiont fix_cmdt if_textt then_textt do_textR R ( ( ( s1 /usr/share/setroubleshoot/plugins/dac_override.pyR s ( t gettextt translationt TrueR t setroubleshoot.utilt setroubleshoot.PluginR R ( ( ( s1 /usr/share/setroubleshoot/plugins/dac_override.pyt <module> s