�
c�L]c@stdd
lZej
dde�

Z
e
jZddlTddlmZ
dd
lZddlTdef
d��YZ	d
S(i����Nssetroubleshoot-pluginstfallback(
t
*(
tPlugintplugincBsYeZ
ed�
Zed
�
Zed�
Zd�Zd�Zd�Zd�Z	d�Z
RS(sN
    SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH.
    s�
    SELinux denied access requested by $SOURCE. $TARGET_PATH may
    be mislabeled. openvpn is allowed to read content in home directory if it
    is labeled correctly.
    s�
    You can restore the default system context to this file by executing the
    restorecon command.  
    # restorecon -R /root/.ssh
    cCs(|d
dkrtd�
Std�
SdS(NitmovesjIf you want to mv $TARGET_BASE_PATH to standard location so that $SOURCE_BASE_PATH can have $ACCESS accessslIf you want to modify the label on $TARGET_BASE_PATH so that $SOURCE_BASE_PATH can have $ACCESS access on it(
t
_(tselftavctargs((s,/usr/share/setroubleshoot/plugins/openvpn.pytget_if_text/s


cCs(|d
dkrtd�
Std�
SdS(NiRs4you must move the cert file to the ~/.cert directorysyou must fix the labels.(
R(RRR((s,/usr/share/setroubleshoot/plugins/openvpn.pyt
get_then_text5s


cCs|d
dkrdSdSdS(NiRs5# mv $TARGET_PATH ~/.cert
# restorecon -R -v ~/.cert
sS# semanage fcontext -a -t home_cert_t $TARGET_PATH
# restorecon -R -v $TARGET_PATH
((RRR((s,/usr/share/setroubleshoot/plugins/openvpn.pytget_do_text;s
c

Cs*tj
|t�
|jd
�

d|_dS(Nityellow(Rt__init__t__name__tset_prioritytlevel(
R((s,/usr/share/setroubleshoot/plugins/openvpn.pyR
Es



cCsk|
jd
g
�
rg|
j
ddg�
rg|
j|
j�
rg|
jdg
�
rg|jd�
|jd�
gSdS(	Nt	openvpn_ttuser_home_tt
user_tmp_ttfileRtfixlabel(smoveN(RN(tmatches_source_typestmatches_target_typestall_accesses_are_intread_file_permst
has_tclass_intreporttNone(RR((s,/usr/share/setroubleshoot/plugins/openvpn.pytanalyzeJs




(Rt
__module__Rtsummarytproblem_descriptiontfix_descriptionR	R
RR
R(((s,/usr/share/setroubleshoot/plugins/openvpn.pyRs
						
	(
tgettextttranslationtTrueRtsetroubleshoot.utiltsetroubleshoot.PluginRtoststatR(((s,/usr/share/setroubleshoot/plugins/openvpn.pyt<module>s