|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21572/root/usr/share/setroubleshoot/plugins/ |
Upload File : |
mò
Ą8Hc @ sR d k Z e i d d d e i Z d k Td k l Z d e f d YZ d S( Ns setroubleshoot-pluginss /usr/share/localet fallback( t *( s Plugint pluginc B sV t Z e d Z e d Z e d Z d Z e d Z d Z d Z d Z
RS( NsX
SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesytem.
s]
SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux
systems.
The ftp daemon attempted to read one or more files or directories from
a mounted filesystem of this type. As NFS filesystems do not support
fine-grained SELinux labeling, all files and directories in the
filesystem will have the same security context.
If you have not configured the ftp daemon to read files from a NFS filesystem
this access attempt could signal an intrusion attempt.
s|
Changing the "allow_ftpd_use_nfs" boolean to true will allow this access:
"setsebool -P allow_ftpd_use_nfs=1."
s! setsebool -P allow_ftpd_use_nfs=1s Changing the "allow_ftpd_use_nfs" and
"$WRITE_BOOLEAN" booleans to true will allow this access:
"setsebool -P allow_ftpd_use_nfs=1 $WRITE_BOOLEAN=1".
warning: setting the "$WRITE_BOOLEAN" boolean to true will
allow the ftp daemon to write to all public content (files and
directories with type public_content_t) in addition to writing to
files and directories on NFS filesystems. s2 setsebool -P allow_ftpd_use_nfs=1 $WRITE_BOOLEAN=1c C s t i | t d S( N( t Plugint __init__t selft __name__( R ( ( t7 /usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyR ? s c C s | i d g oś | i d g oä | i d d g oÎ | i | i | i oH | i d d d d | i | t
d | i | i | i
| i Sq
| i | i | i oN | i d d d d
d d | i | t
d | i | i | i | i Sq
n d S(
Nt ftpd_tt nfs_tt filet dirt BOOLEANt allow_ftpd_use_nfst ACCESSt readingt FTPs reading and writingt
WRITE_BOOLEANt allow_ftpd_anon_write( t avct matches_source_typest matches_target_typest
has_tclass_int all_accesses_are_int r_file_permst r_dir_permst set_template_substitutionsR t reportt _t summaryt problem_descriptiont fix_descriptiont fix_cmdt create_file_permst rw_dir_permst rw_fix_descriptiont
rw_fix_cmdt None( R R ( ( R t analyzeB s <
( R t
__module__R R R R R R# R$ R R&