File: //usr/share/setroubleshoot/plugins/bind_ports.pyo
�
c�L]c @ s^ d d l Z e j d d e �Z e j Z d d l Td d l m Z d e f d � � YZ d S( i����Ns setroubleshoot-pluginst fallback( t *( t Plugint pluginc B s_ e Z e d � Z e d � Z e d � Z d Z e d � Z d Z d � Z d � Z
d � Z RS( sO
SELinux is preventing $SOURCE_PATH from binding to port $PORT_NUMBER.
s�
SELinux has denied the $SOURCE from binding to a network port $PORT_NUMBER which does not have an SELinux type associated with it.
If $SOURCE should be allowed to listen on $PORT_NUMBER, use the <i>semanage</i> command to assign $PORT_NUMBER to a port type that $SOURCE_TYPE can bind to (%s).
If $SOURCE is not supposed
to bind to $PORT_NUMBER, this could signal an intrusion attempt.
sI
If you want to allow $SOURCE to bind to port $PORT_NUMBER, you can execute
# semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER
where PORT_TYPE is one of the following: %s.
If this system is running as an NIS Client, turning on the allow_ypbind boolean may fix the problem. setsebool -P allow_ypbind=1.
t sF If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBERs! you need to modify the port type.c C sS | d j d � } t | � d k r3 t d � | St d � | d | d f Sd S( Ni t ,sc # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER
where PORT_TYPE is one of the following: %s.s+ # semanage port -a -t %s -p %s $PORT_NUMBERi ( t splitt lent _( t selft avct optionst ports( ( s/ /usr/share/setroubleshoot/plugins/bind_ports.pyt get_do_text2 s
c C s! t j | t � | j d � d S( Nid ( R t __init__t __name__t set_priority( R ( ( s/ /usr/share/setroubleshoot/plugins/bind_ports.pyR : s c C sr | j d d d d g � rn | j d g � rn | j � } | rn | j | j j d � d d j | � f � Sn d S( Nt hi_reserved_port_tt reserved_port_tt port_tt unreserved_port_tt name_bindR i s , ( t matches_target_typest has_any_access_int allowed_target_typest reportt tclassR t joint None( R R
t
allowed_types( ( s/ /usr/share/setroubleshoot/plugins/bind_ports.pyt analyze>