File: //usr/share/setroubleshoot/plugins/httpd_unified.pyc
�
c�L]c @ s` d d l Z e j d d e �Z e j Z d d l Z d d l m Z d e f d � � YZ d S( i����Ns setroubleshoot-pluginst fallback( t Plugint pluginc B sb e Z e d � Z e d � Z e d � Z d Z e d � Z e d � Z d Z d � Z
d � Z RS( s?
SELinux prevented httpd $ACCESS access to http files.
sW
SELinux prevented httpd $ACCESS access to http files.
Ordinarily httpd is allowed full access to all files labeled with http file
context. This machine has a tightened security policy with the $BOOLEAN
turned off, This requires explicit labeling of all files. If a file is
a cgi script it needs to be labeled with httpd_TYPE_script_exec_t in order
to be executed. If it is read only content, it needs to be labeled
httpd_TYPE_content_t, it is writable content. it needs to be labeled
httpd_TYPE_script_rw_t or httpd_TYPE_script_ra_t. You can use the
chcon command to change these context. Please refer to the man page
"man httpd_selinux" or
<a href="http://fedora.redhat.com/docs/selinux-apache-fc3">FAQ</a>
"TYPE" refers to one of "sys", "user" or "staff" or potentially other
script types.
sg
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1"
s setsebool -P $BOOLEAN=1sc If you want to allow httpd to execute cgi scripts and to unify HTTPD handling of all content files.s_ you must tell SELinux about this by enabling the 'httpd_unified' and 'http_enable_cgi' booleanss1 # setsebool -P httpd_unified=1 httpd_enable_cgi=1c C s! t j | t � | j d � d S( Ni ( R t __init__t __name__t set_priority( t self( ( s2 /usr/share/setroubleshoot/plugins/httpd_unified.pyR = s c C sj | j d � rf | j d � rf | j d k s< | j d k rf t j d � rf t j d � rf | j � Sd S( Ns httpd_t httpd_.*_script_ts httpd_.*tt filet dirt
httpd_unifiedt httpd_enable_cgi( t matches_source_typest matches_target_typest tclasst selinuxt security_get_boolean_activet reportt None( R t avc( ( s2 /usr/share/setroubleshoot/plugins/httpd_unified.pyt analyzeA s
( R t
__module__t _t summaryt problem_descriptiont fix_descriptiont fix_cmdt if_textt then_textt do_textR R ( ( ( s2 /usr/share/setroubleshoot/plugins/httpd_unified.pyR s ( t gettextt translationt TrueR R t setroubleshoot.PluginR R ( ( ( s2 /usr/share/setroubleshoot/plugins/httpd_unified.pyt <module> s