|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21573/root/usr/lib/python2.4/site-packages/setroubleshoot/ |
Upload File : |
m
3Uc @ s
d d d d d d d g Z d k Z d k Z d k Z d k Z d k Z d k Z e a e i i
d d d
Z d d d
d d d d d d d d d d d d d g Z h d h d h d d <d d <d! e
<<d" h d d
<d d <d! e <<d# h d d$ <d d <d! e <<d% h d d& <d d' <<d( h d d) <d d <d! e <<d* h d d
<d d+ <d! e <<d, h d d- <d d. <d! e <<d/ h d d0 <d d1 <d! e <<d2 h d d3 <d d <d! e <<d4 h d d <d d <d! e <<d5 h d e
<d d <d! e
<<d6 h d d7 <d d <d! e <<<d8 h d9 h d d: <d d; <<<d< h d= h d d> <d d? <<d@ h d dA <d dB <<dC h d dD <d dE <<<d h dF h d dG <d dH <<<dI h dJ h d dK <d d <<<dL h dM h d dN <d d <d! e <<dO h d dP <d d <d! e <<dQ h d dR <d d <d! e <<<dS h dM h d dT <d d <d! e <<dO h d dU <d d <d! e <<dQ h d dV <d d <d! e <<<d h dW h d dX <d d <<dY h d dZ <d d <<d[ h d d\ <d d] <<d^ h d d <d d_ <<<d` h da h d db <d d <<<dc h dd h d e i i
de df <d d <d! e
<<dg h d dh <d di <<<dj h dd h d e i i
de df <d d <d! e
<<dg h d dk <d di <<<dl h dm h d dn <d d <d! e <<do h d dp <d d <d! e <<<dq h dr h d ds <d dt <<du h d d <d dv dw i
e <<dY h d dx <d d <<dy h d dz <d d{ <<d| h d d} <d d <<d~ h d d <d d <<d h d d <d d <<<d h dr h d ds <d dt <<du h d d <d dv dw i
e <<dY h d d <d d <<dy h d d <d d{ <<d| h d d} <d d <<d~ h d d <d d <<d h d d <d d <<<d h d h d d <d d <<d h d d <d d <<<d h d h d d <d d <<d h d d <d d <<d h d d <d d <<d h d d <d d <<d h d e i i
dX d <d d <<<d h d h d d <d d <<d h d d <d d <<<d h d h d d <d d <d! e <<<Z d Z d Z e d Z e e e d Z e d Z d Z e i d Z d Z d Z e
d Z d Z e d j o d Z y, e i e i d d d d g \ Z Z Wn* e i! j
o e e i" d n Xe
Z# xY e D]Q \ Z$ Z% e$ d d f j o
e Z# n e$ d d f j o e e i" n q We# o e e n n e d S( t config_initt
get_configt
get_optiont
set_configt parse_config_settingt config_has_sectiont LOG_CATEGORIESNs /etc/setroubleshoots %s.cfgt setroubleshoott rpct xmlt cfgt alertt sigt plugint avct emailt guit gui_datat programt databaset servert dbust statst
communicationt generalt pid_filet values /var/run/setroubleshootd.pidt descriptiont t readOnlyt pkg_namet pkg_versions 2.0.5t project_urls7 http://hosted.fedoraproject.org/projects/setroubleshoots URL of project websitet rpc_versions 1.1t i18n_text_domains/ internationalization (i18n) translation catalogt i18n_locale_dirs /usr/share/locales9 internationalization (i18n) translation catalog directoryt
i18n_encodings utf-8s. internationalization (i18n) encoding (codeset)t data_dirs /usr/share/setroubleshoott
config_dirt use_auparset icon_namet setroubleshoot_icont helper_appst web_browser_launchers /usr/bin/htmlviews1 Helper application to launch web browser on a URLt auditt binary_protocol_socket_paths /var/run/audit_eventssL unix domain socket used to listen for audit messages (binary audit protocol)t text_protocol_socket_paths /var/run/audispd_eventssN unix domain socket used to listen for audit messages (textural audit protocol)t retry_intervali< sg number of seconds to wait before trying to connect to audit socket again in the event of socket failuret use_notificationt Trues3 use balloon notification in addition to status icont pluginst
plugin_dirs! /usr/share/setroubleshoot/pluginst session_dbust bus_names com.redhat.setroubleshoott object_paths /com/redhat/selinux/alert_objectt interfaces com.redhat.SEtroubleshootIfacet system_dbuss com.redhat.setroubleshootds /com/redhat/setroubleshootds com.redhat.SEtroubleshootdIfacet database_dirs /var/lib/setroubleshoott filenamet audit_listenert
max_alertsi2 s
Keep no more than this many alerts in the database. Oldest alerts based on
the alert's last seen date will be purged first. Zero implies no limitt
max_alert_ages<
Purge any alerts whose age based on it's last seen date exceeds this threshold.
Age may be specified as a sequence of integer unit pairs. Units may be one of
year,month,week,day,hour,minute,second and may optionally be plural.
Example: '2 weeks 1 day' sets the threshold at 15 days.
An empty string implies no limitt
connectiont default_portt 69783t listen_for_clientt paths /var/run/setroubleshoott setroubleshoot_servert address_lists {unix}%(path)ss_
List of socket addresses server should listen on for client
connections. Addresses should not contain any whitespace. Each address
is of the form "[{family}]address[:port]" where [] indicates the value
is optional. Valid values for family are inet or unix, if the family
is absent it defaults to inet. If the family is unix the address is
interpreted as a file path. If the family is inet the address is
interpreted as either a host name or IP address. As a special case if
the inet address is "hostname" the current hostname will be
substituted. If the family is inet the address may optionally be
followed by a colon (:) and a port number. If the port number is
absent in the address it defaults to the port specified in this config
section. Example, to listen on the local unix domain socket and
provide remote connections use this "{unix}%(path)s, hostname"
t client_connect_tos {unix}%(path)s hostnamet sockett buf_sizet 2048t timeoutt 5t setroubleshootd_logt levelt warnings
Global logging level. Levels are the same as in the python logging
module, but are case insenstive. The level may also be specified as an
integer. The defined levels in severity order are:[CRITICAL, ERROR,
WARNING, INFO, DEBUG]t
categoriesss
Comma seperated list of logging categories. Each categories may
optionally be followed by a colon(:) and a logging level, which either
may be one of the symbolic levels or numeric, e.g. ipc:info. If no
level is defined the default level is used. If the category name is
preceded by a tilde (~) the category is not logged at all.
The list of available categories is: [%s]s , s+ /var/log/setroubleshoot/setroubleshootd.logt filemodet ws5 should be "w" or "a" for write or append respectivelyt formats0 %(asctime)s [%(name)s.%(levelname)s] %(message)st consolet Falses# True|False, also log to the consolet profiles True|False, gather statisticst sealert_logt at accesst client_userst *s
Comma-separated list of users allowed to run the client and connect to
the local fault server and therefore see security denials.
Also accepts '*' to allow all users to connect.t
fix_cmd_userst roots|
Comma-separated list of users allowed to run the fix commands with
root privileges. Members of this list can execute the fix commands
specified in any alert. The command is executed with root privileges
so you should be very caeful who you add to this list as you are
granting them significant power to alter the security settings of this
system. The wildcard '*' is NOT allowed.t smtp_hostt localhosts The SMTP server addresst smtp_portt 25s The SMTP server portt from_addresst SELinux_Troubleshoots The From: email headert subjects SELinux AVC Alerts The Subject: email headert recipients_filepatht email_alert_recipientss{ Path name of file with email recipients. One address per line, optionally followed by enable flag. Comment character is #. t helpt help_urlsZ http://hosted.fedoraproject.org/projects/setroubleshoot/wiki/SETroubleShoot%%20User%%20FAQs URL to user help informationt bug_report_urls1 http://bugzilla.redhat.com/bugzilla/enter_bug.cgis URL used to report bugst testt analyzes Print plugin reportc C s t t a d S( N( t read_configurationt defaultst _cfg( ( ( t9 /usr/lib/python2.4/site-packages/setroubleshoot/config.pyR s c C s. t i } y | i t Wn0 t j
o$ } t i d t | f IJd Sn X| i } x | D] } | i | p | i | n x | | i D] \ } } | d } | i d t } | i | | p | i | | | q | o. t i d | | f IJ| i | | | q q Wqc W| S( Ns" error parsing config file (%s): %sR R s* error [%s] %s cannot be set in config file( t ConfigParsert SafeConfigParserR
t readt CFG_FILEt Exceptiont et syst stderrt NoneRk t keyst default_sectionst default_sectiont has_sectiont add_sectiont itemst default_optiont
propertiesR t getRS R t
has_optiont set( Rk Rs R
Rx R} Ry R R R~ ( ( Rm Rj s*
c C s ym| d j p
| t j o | SnH| t j o t | Sn-| t j o t | t o | Sn t | t o t | Sn | i d d d d d g j o t Sn | i d d d d d
g j o t Sn t
d | n | t j o t | Sng | d j o | SnR y$ d
k l
} | i d | | Wn* t j
o t i d | | f IJn XWnf t j
oZ } y$ d
k l
} | i d | | Wqt j
o t i d | | f IJqXn Xd S( Nt truet tt yest yt ont falset ft not nt offs cannot convert %s to booleant raw( s log_cfgs unknown type %s for option %ss# error unknown type %s for option %s( t cfg_typeRv t strR t intt boolt
isinstancet lowerR1 RS t
ValueErrort floatt setroubleshoot.logt log_cfgt errort ImportErrorRt Ru Rr Rs ( R R Rs R ( ( Rm t convert_cfg_type s<
" "
c C su d } | d j o$ | i | o t | | } n$ t | o t | | | } n | d j o
| } n | S( N( Rv R t kwdst has_keyt nameR R t sectionR t option_typet
default_value( R R R R R R ( ( Rm R s
c C s t d j o d Sn y| d j p
| t j o t i | | Sn | t j o t i | | Sn | t j o t i
| | Sn | t j o t i | | Sn | d j o t i | | d t
SnX y' d k l } | i d | | | Wn- t j
o! t i d | | | f IJn XWnp t j
od } y' d k l } | i d | | | Wn- t j
o! t i d | | | f IJn Xd Sn Xd S( NR ( s log_cfgs5 unknown type = %s getting %s option in %s section: %ss; error unknown type = %s getting %s option in %s section: %ss& cannot get %s option in %s section: %ss, error cannot get %s option in %s section: %s( Rl Rv R R R R t optionR t getintR t
getbooleanR t getfloatR1 R R R R Rt Ru Rr Rs ( R R R Rs R ( ( Rm R s2
#
c C s yM t d j o t Sn t i | p t i | n t i | | | Wn/ t j
o# } t i d | | | t Sn Xt
S( Ns6 Cannot set config: section='%s' option='%s' value='%s'( Rl Rv RS Rz R R{ R R R Rr Rs t log_programt exceptionR1 ( R R R Rs ( ( Rm R s
s% ([^.=]+?)\s*\.\s*([^.=]+?)\s*=\s*(.*)c C s t i | } | o1 | i d } | i d } | i d } nM y! d k l } | i
d | Wn$ t j
o t i
d | IJn Xt Sy' d k l } | i d | | | Wn- t j
o! t i
d | | | f IJn Xt | | | t S( Ni i i ( s log_cfgs4 could not parse '%s', must be 'section.option=value's; error: could not parse '%s', must be 'section.option=value's3 setting config: section='%s' option='%s' value='%s'( t config_setting_ret searcht cfg_settingt matcht groupR R R R R R R Rt Ru RS t debugR R1 ( R R R R R R ( ( Rm R s$
c C s t d j o d Sn y t i | SWnj t j
o^ } y$ d k l } | i d | | Wn* t j
o t
i d | | f IJn Xt Sn Xd S( N( s log_cfgs config_has_section(%s): %ss! error: config_has_section(%s): %s(
Rl Rv Rz R Rr Rs R R R R Rt Ru RS ( R Rs R ( ( Rm R * s
c C si t i d d d d d d } | i } | i x.| D]&} d } xM | | i D]; \ } } | i d t
} | p | o | d 7} qX qX W| d j o d | GHx | | i D] \ } } | d
} | i d t
} | i d d }
| o | o q n |
p
d
}
n | i d | |
GH| o
d | GHn d | | f GHHq Wq; q; Wd S( Nt widthiN t initial_indents # t subsequent_indenti R i s [%s]R R R s No Description Availables %s: s # READ ONLY, default = "%s"s %s = %s( t textwrapt TextWrappert wrapRk Rw t sectionst sortR t visibleOptionsR| R R~ R RS R t showReadOnlyR R t fill( Rk R R R R R R R R R~ R ( ( Rm t
dump_defaults9 s8
c C sw | i } | i xZ | D]R } | i | } | i x/ | D]' } t | | } d | | | f GHqC WHq Wd S( Ns [%s] %s = %s( R
R R R t optionsR R R ( R
R R R R R ( ( Rm t dump_configurationX s
t __main__c C s d GHd S( Ns5
-d generate default config file
-h help
( ( ( ( Rm t usageh s i t dhRk i s -ds
--defaultss -hs --help(& t __all__t getoptRt t osRn t reR Rv Rl RB t joinRq R RS R1 Rk R Rj R R R R t compileR R R R R t __name__R t argvt optst argst GetoptErrort exitt do_dump_defaultst oRV ( R R R R R R R R R Rq R R Rj R R R Rt R Rn RV R R R R Rk R R ( ( Rm t ? s^ 6 j ! !
,