|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/22697/root/usr/share/setroubleshoot/plugins/ |
Upload File : |
mò
¡8Hc @ sR d k Z e i d d d e ƒi Z d k Td k l Z d e f d „ ƒ YZ d S( Ns setroubleshoot-pluginss /usr/share/localet fallback( t *( s Plugint pluginc B sD t Z e d ƒ Z e d ƒ Z e d ƒ Z d Z d „ Z d „ Z RS( NsX
SELinux is preventing the users from running TCP servers in the usedomain.
sU
SELinux has denied the $SOURCE program from binding to a network port $PORT_NUMBER which does not have an SELinux type associated with it.
$SOURCE does not have an SELinux policy defined for it when run by the user, so it runs in the users domain. SELinux is currently setup to
deny TCP server to run within the user domain. If you did not expect programs like $SOURCE to bind to a network port, then this could signal
a intrusion attempt. If this system is running as an NIS Client, turning on the allow_ypbind boolean, may fix the problem.
setsebool -P allow_ypbind=1.
s›
If you want to allow user programs to run as TCP Servers, you can turn on the user_tcp_server boolean, by executing:
setsebool -P $BOOLEAN=1
s setsebool -P $BOOLEAN=1c C s t i | t ƒ d S( N( t Plugint __init__t selft __name__( R ( ( t4 /usr/share/setroubleshoot/plugins/user_tcp_server.pyR - s c C s… | i d d d g ƒ oh | i d g ƒ oU | i d g ƒ oB | i d d ƒ | i | t d ƒ | i | i | i
| i ƒ Sn d S( Nt user_tt staff_tt sysadm_tt port_tt name_bindt BOOLEANt user_tcp_servers
Network Ports(
t avct matches_source_typest matches_target_typest has_any_access_int set_template_substitutionsR t reportt _t summaryt problem_descriptiont fix_descriptiont fix_cmdt None( R R ( ( R t analyze0 s ?( R t
__module__R R R R R R R ( ( ( R R s ( t gettextt translationt Truet lgettextR t setroubleshoot.utilt setroubleshoot.PluginR R ( R R R R ( ( R t ? s