|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21572/root/usr/share/setroubleshoot/plugins/ |
Upload File : |
mò
¡8Hc @ sR d k Z e i d d d e ƒi Z d k Td k l Z d e f d „ ƒ YZ d S( Ns setroubleshoot-pluginss /usr/share/localet fallback( t *( s Plugint pluginc B sV t Z e d ƒ Z e d ƒ Z e d ƒ Z d Z e d ƒ Z d Z d „ Z d „ Z
RS( NsY
SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesytem.
s¶
SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
CIFS (Comment Internet File System) is a network filesystem similar to
SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>)
The ftp daemon attempted to read one or more files or directories from
a mounted filesystem of this type. As CIFS filesystems do not support
fine-grained SELinux labeling, all files and directories in the
filesystem will have the same security context.
If you have not configured the ftp daemon to read files from a CIFS filesystem
this access attempt could signal an intrusion attempt.
sh
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1."
s setsebool -P $BOOLEAN=1sƒ Changing the "$BOOLEAN" and
"$WRITE_BOOLEAN" booleans to true will allow this access:
"setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
warning: setting the "$WRITE_BOOLEAN" boolean to true will
allow the ftp daemon to write to all public content (files and
directories with type public_content_t) in addition to writing to
files and directories on CIFS filesystems. s( setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1c C s t i | t ƒ d S( N( t Plugint __init__t selft __name__( R ( ( t8 /usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyR ? s c C s | i d g ƒ oû | i d g ƒ oè | i d d g ƒ oÒ | i | i | i ƒ oH | i d d d d ƒ | i | t
d ƒ | i | i | i
| i ƒ Sq| i | i | i ƒ oN | i d d d d
d d ƒ | i | t
d ƒ | i | i | i | i ƒ Sqd Sn d Sd S(
Nt ftpd_tt cifs_tt filet dirt BOOLEANt allow_ftpd_use_cifst ACCESSt readingt FTPs reading and writingt
WRITE_BOOLEANt allow_ftpd_anon_write( t avct matches_source_typest matches_target_typest
has_tclass_int all_accesses_are_int r_file_permst r_dir_permst set_template_substitutionsR t reportt _t summaryt problem_descriptiont fix_descriptiont fix_cmdt create_file_permst rw_dir_permst rw_fix_descriptiont
rw_fix_cmdt None( R R ( ( R t analyzeB s <
( R t
__module__R R R R R R# R$ R R&