�
c�L]c@s^dd
lZej
dde�

Z
e
jZddlTddlmZ
def
d��YZd
S(i����Nssetroubleshoot-pluginstfallback(
t
*(
tPlugintplugincBsteZ
ed�
Zed
�
Zed�
ZdZed�
ZdZed�
Z	ed�
Z
dZd	�Zd
�Z
RS(sY
    SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
    sU
    SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
    NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux
    systems.

    The ftp daemon attempted to read one or more files or directories from
    a mounted filesystem of this type.  As NFS filesystems do not support
    fine-grained SELinux labeling, all files and directories in the
    filesystem will have the same security context.

    If you have not configured the ftp daemon to read files from a NFS filesystem
    this access attempt could signal an intrusion attempt.
    s|
    Changing the "allow_ftpd_use_nfs" boolean to true will allow this access:
    "setsebool -P allow_ftpd_use_nfs=1."
    s!setsebool -P allow_ftpd_use_nfs=1s�
 Changing the "allow_ftpd_use_nfs" and
    "$WRITE_BOOLEAN" booleans to true will allow this access:
    "setsebool -P allow_ftpd_use_nfs=1 $WRITE_BOOLEAN=1".
    warning: setting the "$WRITE_BOOLEAN" boolean to true will
    allow the ftp daemon to write to all public content (files and
    directories with type public_content_t) in addition to writing to
    files and directories on NFS filesystems.  s2setsebool -P allow_ftpd_use_nfs=1 $WRITE_BOOLEAN=1s6If you want to allow ftpd to write to nfs file systemss you must tell SELinux about thiss9setsebool -P allow_ftpd_use_nfs=1 allow_ftpd_anon_write=1c

Cstj
|t�
dS(
N(Rt__init__t__name__(
tself((s7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyRDs
cCsi|
jd
g
�
re|
j
dg
�
re|
jddg�
re|
j|
j|
j�
re|jdd�
SndS(	Ntftpd_ttnfs_ttfiletdirtargstallow_ftpd_use_nfstallow_ftpd_anon_write(RR
(tmatches_source_typestmatches_target_typest
has_tclass_intall_accesses_are_intcreate_file_permstrw_dir_permstreporttNone(Rtavc((s7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pytanalyzeGs




(Rt
__module__t
_tsummarytproblem_descriptiontfix_descriptiontfix_cmdtrw_fix_descriptiont
rw_fix_cmdtif_textt	then_texttdo_textRR(((s7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyRs
				

	(tgettextttranslationtTrueRtsetroubleshoot.utiltsetroubleshoot.PluginRR(((s7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyt<module>s