X7ROOT File Manager
Current Path:
/usr/share/setroubleshoot/plugins
usr
/
share
/
setroubleshoot
/
plugins
/
📁
..
📄
__init__.py
(2 B)
📄
__init__.pyc
(132 B)
📄
__init__.pyo
(132 B)
📄
allow_anon_write.py
(3.25 KB)
📄
allow_anon_write.pyc
(3.15 KB)
📄
allow_anon_write.pyo
(3.15 KB)
📄
allow_execheap.py
(2.39 KB)
📄
allow_execheap.pyc
(2.32 KB)
📄
allow_execheap.pyo
(2.32 KB)
📄
allow_execmod.py
(4.5 KB)
📄
allow_execmod.pyc
(4.38 KB)
📄
allow_execmod.pyo
(4.38 KB)
📄
allow_execstack.py
(4.73 KB)
📄
allow_execstack.pyc
(4.87 KB)
📄
allow_execstack.pyo
(4.87 KB)
📄
allow_ftpd_use_cifs.py
(3.31 KB)
📄
allow_ftpd_use_cifs.pyc
(3.05 KB)
📄
allow_ftpd_use_cifs.pyo
(3.05 KB)
📄
allow_ftpd_use_nfs.py
(3.21 KB)
📄
allow_ftpd_use_nfs.pyc
(2.99 KB)
📄
allow_ftpd_use_nfs.pyo
(2.99 KB)
📄
associate.py
(2.15 KB)
📄
associate.pyc
(2.22 KB)
📄
associate.pyo
(2.22 KB)
📄
automount_exec_config.py
(2.3 KB)
📄
automount_exec_config.pyc
(2.23 KB)
📄
automount_exec_config.pyo
(2.23 KB)
📄
bind_ports.py
(2.81 KB)
📄
bind_ports.pyc
(2.82 KB)
📄
bind_ports.pyo
(2.82 KB)
📄
catchall.py
(2.89 KB)
📄
catchall.pyc
(2.85 KB)
📄
catchall.pyo
(2.85 KB)
📄
catchall_boolean.py
(2.87 KB)
📄
catchall_boolean.pyc
(3.07 KB)
📄
catchall_boolean.pyo
(3.07 KB)
📄
catchall_labels.py
(2.21 KB)
📄
catchall_labels.pyc
(2.28 KB)
📄
catchall_labels.pyo
(2.28 KB)
📄
chrome.py
(2.49 KB)
📄
chrome.pyc
(2.46 KB)
📄
chrome.pyo
(2.46 KB)
📄
connect_ports.py
(2.68 KB)
📄
connect_ports.pyc
(2.72 KB)
📄
connect_ports.pyo
(2.72 KB)
📄
cvs_data.py
(2.39 KB)
📄
cvs_data.pyc
(2.21 KB)
📄
cvs_data.pyo
(2.21 KB)
📄
dac_override.py
(2.1 KB)
📄
dac_override.pyc
(1.99 KB)
📄
dac_override.pyo
(1.99 KB)
📄
device.py
(2.73 KB)
📄
device.pyc
(2.57 KB)
📄
device.pyo
(2.57 KB)
📄
disable_ipv6.py
(1.63 KB)
📄
disable_ipv6.pyc
(1.52 KB)
📄
disable_ipv6.pyo
(1.52 KB)
📄
file.py
(2.75 KB)
📄
file.pyc
(2.9 KB)
📄
file.pyo
(2.9 KB)
📄
filesystem_associate.py
(2.46 KB)
📄
filesystem_associate.pyc
(2.41 KB)
📄
filesystem_associate.pyo
(2.41 KB)
📄
httpd_can_sendmail.py
(1.93 KB)
📄
httpd_can_sendmail.pyc
(1.92 KB)
📄
httpd_can_sendmail.pyo
(1.92 KB)
📄
httpd_unified.py
(2.86 KB)
📄
httpd_unified.pyc
(2.73 KB)
📄
httpd_unified.pyo
(2.73 KB)
📄
httpd_write_content.py
(2.11 KB)
📄
httpd_write_content.pyc
(2.02 KB)
📄
httpd_write_content.pyo
(2.02 KB)
📄
kernel_modules.py
(2.76 KB)
📄
kernel_modules.pyc
(2.29 KB)
📄
kernel_modules.pyo
(2.29 KB)
📄
leaks.py
(2.49 KB)
📄
leaks.pyc
(2.4 KB)
📄
leaks.pyo
(2.4 KB)
📄
mmap_zero.py
(2.33 KB)
📄
mmap_zero.pyc
(2.11 KB)
📄
mmap_zero.pyo
(2.11 KB)
📄
mounton.py
(2.48 KB)
📄
mounton.pyc
(2.3 KB)
📄
mounton.pyo
(2.3 KB)
📄
mozplugger.py
(2.78 KB)
📄
mozplugger.pyc
(2.67 KB)
📄
mozplugger.pyo
(2.67 KB)
📄
mozplugger_remove.py
(2.17 KB)
📄
mozplugger_remove.pyc
(2.05 KB)
📄
mozplugger_remove.pyo
(2.05 KB)
📄
openvpn.py
(2.76 KB)
📄
openvpn.pyc
(2.89 KB)
📄
openvpn.pyo
(2.89 KB)
📄
public_content.py
(2.57 KB)
📄
public_content.pyc
(2.5 KB)
📄
public_content.pyo
(2.5 KB)
📄
qemu_blk_image.py
(2.41 KB)
📄
qemu_blk_image.pyc
(2.33 KB)
📄
qemu_blk_image.pyo
(2.33 KB)
📄
qemu_file_image.py
(2.74 KB)
📄
qemu_file_image.pyc
(2.66 KB)
📄
qemu_file_image.pyo
(2.66 KB)
📄
restorecon.py
(5.32 KB)
📄
restorecon.pyc
(5.3 KB)
📄
restorecon.pyo
(5.3 KB)
📄
restorecon_source.py
(3.01 KB)
📄
restorecon_source.pyc
(3.14 KB)
📄
restorecon_source.pyo
(3.14 KB)
📄
rsync_data.py
(2.53 KB)
📄
rsync_data.pyc
(2.37 KB)
📄
rsync_data.pyo
(2.37 KB)
📄
samba_share.py
(2.94 KB)
📄
samba_share.pyc
(2.75 KB)
📄
samba_share.pyo
(2.75 KB)
📄
sandbox_connect.py
(2.23 KB)
📄
sandbox_connect.pyc
(2.13 KB)
📄
sandbox_connect.pyo
(2.13 KB)
📄
selinuxpolicy.py
(3.09 KB)
📄
selinuxpolicy.pyc
(2.4 KB)
📄
selinuxpolicy.pyo
(2.4 KB)
📄
setenforce.py
(2.39 KB)
📄
setenforce.pyc
(2.23 KB)
📄
setenforce.pyo
(2.23 KB)
📄
sshd_root.py
(2.08 KB)
📄
sshd_root.pyc
(1.99 KB)
📄
sshd_root.pyo
(1.99 KB)
📄
swapfile.py
(2.23 KB)
📄
swapfile.pyc
(2.1 KB)
📄
swapfile.pyo
(2.1 KB)
📄
sys_module.py
(2.35 KB)
📄
sys_module.pyc
(2.15 KB)
📄
sys_module.pyo
(2.15 KB)
📄
sys_resource.py
(2.62 KB)
📄
sys_resource.pyc
(2.44 KB)
📄
sys_resource.pyo
(2.44 KB)
📄
vbetool.py
(2.52 KB)
📄
vbetool.pyc
(2.43 KB)
📄
vbetool.pyo
(2.43 KB)
📄
wine.py
(2.92 KB)
📄
wine.pyc
(2.78 KB)
📄
wine.pyo
(2.78 KB)
📄
xen_image.py
(2.7 KB)
📄
xen_image.pyc
(2.55 KB)
📄
xen_image.pyo
(2.55 KB)
Editing: openvpn.py
# # Authors: Dan Walsh <dwalsh@redhat.com> # # Copyright (C) 2010 Red Hat, Inc. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. # import gettext translation=gettext.translation('setroubleshoot-plugins', fallback=True) _=translation.gettext from setroubleshoot.util import * from setroubleshoot.Plugin import Plugin import os from stat import * class plugin(Plugin): summary = _(''' SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH. ''') problem_description = _(''' SELinux denied access requested by $SOURCE. $TARGET_PATH may be mislabeled. openvpn is allowed to read content in home directory if it is labeled correctly. ''') fix_description = _(''' You can restore the default system context to this file by executing the restorecon command. # restorecon -R /root/.ssh ''') def get_if_text(self, avc, args): if (args[0] == "move"): return _('If you want to mv $TARGET_BASE_PATH to standard location so that $SOURCE_BASE_PATH can have $ACCESS access') else: return _('If you want to modify the label on $TARGET_BASE_PATH so that $SOURCE_BASE_PATH can have $ACCESS access on it') def get_then_text(self, avc, args): if (args[0] == "move"): return _('you must move the cert file to the ~/.cert directory') else: return _('you must fix the labels.') def get_do_text(self, avc, args): if (args[0] == "move"): return """# mv $TARGET_PATH ~/.cert # restorecon -R -v ~/.cert """ else: return """# semanage fcontext -a -t home_cert_t $TARGET_PATH # restorecon -R -v $TARGET_PATH """ def __init__(self): Plugin.__init__(self, __name__) self.set_priority(8) self.level="yellow" def analyze(self, avc): if (avc.matches_source_types(['openvpn_t']) and avc.matches_target_types(['user_home_t', 'user_tmp_t']) and avc.all_accesses_are_in(avc.read_file_perms) and avc.has_tclass_in(['file'])): return [self.report(("move",None)), self.report(("fixlabel",None))] return None
Upload File
Create Folder