.

KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY

Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory : /usr/share/locale/sv/LC_MESSAGES/

Upload File :

Current File : //usr/share/locale/sv/LC_MESSAGES/setroubleshoot-plugins.mo

Þ•pœ•p gq hÙ |B
;¿
;ûA7
EyŽ¿©Nðø•é……œžž;…Ú}`}Þ}\Ú Z‡dŠìœw›Œ°Œ=Ê„JþÏÎã.!/"Á?#$(%Ì.&-û&)(ß*)ð
*û*°ý+5®,Rä-G7.b.lâ.LO/Uœ/Nò/WA0`™0Hú0NC1E’1GØ1N 2do2MÔ2O"3ar3XÔ3X-4V†4CÝ4»!7]Ý8¹;9^õ9_T:¼´:_q;¼Ñ;ZŽ<]é<?G=V‡=ÓÞ=¶²@YiC]ÃCX!FZzFÏÕFÕ¥Hz{J|öJ†sLƒúL–~N
P#P(P,P@P
DPOP[P`PgPmP
tP
‚PP“P™P
«Q¶Q@¼QmýRmkSxÙS&RT&yU( V8ÉW€Y«ƒYû/Z”+[‰À[
J\ŠX]¡ã]£…^|)_w¦_{`zš`a¥a†²bŒ9cÆcžVd“õdŽ‰etf„fög" h),i1Vjˆk¿‘lQm5cnÉ™o,cpþqÚrjslt´|u;1vUmwJÃwbxfqxIØxP"yMsyWÁyez@zWÀz<{?U{C•{eÙ{P?|J|\Û|T8}^}Uì}'B~½j€](‚Ã†‚^Jƒ_©ƒÉ „_Ó„Ô3…`†ji†FÔ†W‡s‡¢€Š^#a‚]äfBì©–’z—”„•ˆ—–} —™ž˜
8šFšKšOšašeš rš|ššˆšŽš”š¤š·š½š5Ãš
ù›œ=&F1S6
D *d?JCg57_Vf^28"oAh4KlnERG!P)b.9iB0/@ W'>\#XpLYMQ<I(+`[T%N
j$3]c;UZmae-O,H:k
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1"

Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1."

Changing the "allow_ftpd_use_nfs" boolean to true will allow this access:
"setsebool -P allow_ftpd_use_nfs=1."

If ftp should be allowed to write to this directory you need to turn
on the $BOOLEAN boolean and change the file context of
the public directory to public_content_rw_t. Read the rsync_selinux
man page for further information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

If ftp should be allowed to write to this directory you need to turn
on the $BOOLEAN boolean and change the file context of
the public directory to public_content_rw_t. Read the samba_selinux
man page for further information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

If httpd scripts should be allowed to write to public directories you need to turn on the $BOOLEAN boolean and change the file context of the public directory to public_content_rw_t. Read the httpd_selinux
man page for further information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

If the ftp daemon should be allowed to write to this directory you need to turn
on the $BOOLEAN boolean and change the file context of
the public directory to public_content_rw_t. Read the ftpd_selinux
man page for further information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

If you allow the management of the kernel modules on your machine,
turn off the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=0".

If you do not want SELinux preventing ftp from writing files anywhere on
the system you need to turn on the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"

If you want a confined domain to use these files you will probably
need to relabel the file/directory with chcon. In some cases it is just
easier to relabel the system, to relabel execute: "touch
/.autorelabel; reboot"

If you want ftp to allow users access to their home directories
you need to turn on the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"

If you want httpd to allow database connections you need to turn on the
$BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"

If you want httpd to be able to run a particular shell script,
you can label it with chcon -t httpd_sys_script_exec_t SCRIPTFILE. If you
want httpd to be able execute any shell script you need to turn on
the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"

If you want httpd to connect to httpd/ftp ports you need to turn
on the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"

If you want httpd to connect to network ports you need to turn on the
httpd_can_network_network_connect boolean: "setsebool -P
$BOOLEAN=1"

If you want named to run as a secondary server and accept zone
transfers you need to turn on the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"

If you want ppp to be able to insert kernel modules you need to
turn on the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"

If you want samba to share home directories you need to turn on
the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"

If you want samba to share nfs file systems you need to turn on
the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"

If you want spamd to share home directories you need to turn on
the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"

If you want squid to connect to network ports you need to turn on
the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"

If you want the SSL Tunnel to run as a daemon you need to turn on
the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1". You also need to
tell SELinux which port SSL Tunnel will be running on. semanage
port -a -t stunnel_port_t -p tcp $PORT_NUMBER

If you want the http daemon to share home directories you need to
turn on the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"

If you want the http daemon to use built in scripting you need to
enable the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"

If you want the sasl authentication daemon to be able to read
the /etc/shadow file change the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1".

If you want to allow user programs to run as TCP Servers, you can turn on the user_tcp_server boolean, by executing:
setsebool -P $BOOLEAN=1

If you want to allow zebra to overwrite its configuration you must
turn on the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"

If you want to export a public file systems using nfs you need to
turn on the $BOOLEAN boolean: "setsebool -P
$BOOLEAN=1".

If you want to export file systems using nfs you need to turn on
the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1".

If you want to export writable file systems using nfs you need to turn on the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1".

If you want to modify the way SELinux is running on your machine
you need to bring the machine to single user mode with enforcing
turned off. The turn off the secure_mode_policyload boolean:
"setsebool -P secure_mode_policyload=0".

SELinux denied cvs access to $TARGET_PATH.
If this is a CVS repository it has to have a file context label of
cvs_data_t. If you did not intend to use $TARGET_PATH as a cvs repository
it could indicate either a bug or it could signal a intrusion attempt.

SELinux denied rsync access to $TARGET_PATH.
If this is a RSYNC repository it has to have a file context label of
rsync_data_t. If you did not intend to use $TARGET_PATH as a rsync repository
it could indicate either a bug or it could signal a intrusion attempt.

SELinux denied samba access to $TARGET_PATH.
If you want to share this directory with samba it has to have a file context label of
samba_share_t. If you did not intend to use $TARGET_PATH as a samba repository
it could indicate either a bug or it could signal a intrusion attempt.

SELinux has denied kernel module utilities from modifying
kernel modules. This machine is hardened to not allow the kernel to
be modified, except in single user mode. If you did not try to
manage a kernel module, this probably signals an intrusion.

SELinux has denied the Point-to-Point Protocol daemon from
inserting a kernel module. If pppd is not setup to insert kernel
modules, this probably signals a intrusion attempt.

SELinux has denied the ftp daemon access to users home directories
($TARGET_PATH). Someone is attempting to login via your ftp daemon
to a user account. If you only setup ftp to allow anonymous ftp,
this could signal a intrusion attempt.

SELinux has denied the ftp daemon write access to directories outside
the home directory ($TARGET_PATH). Someone has logged in via
your ftp daemon and is trying to create or write a file. If you only setup
ftp to allow anonymous ftp, this could signal a intrusion attempt.

SELinux has denied the management tools from modifying the way the
SELinux policy runs. This machine is hardened if you did not run
any SELinux tools, this probably signals an intrusion.

SELinux has denied the named daemon from writing zone
files. Ordinarily, named is not required to write to these files.
Only secondary servers should be required to write to these
directories. If this machine is not a secondary server, this
could signal a intrusion attempt.

SELinux has denied the samba daemon access to nfs file
systems. Someone is attempting to access an nfs file system via
your samba daemon. If you did not setup samba to share nfs file
systems, this probably signals a intrusion attempt.

SELinux has denied the sasl authentication daemon from reading the
/etc/shadow file. If the sasl authentication daemon (saslauthd) is
not setup to read the /etc/shadow, this could signals an
intrusion.

SELinux has denied the squid daemon from connecting to
$PORT_NUMBER. By default squid policy is setup to deny squid
connections. If you did not setup squid to network connections,
this could signal a intrusion attempt.

SELinux has denied the zebra daemon from writing out its
configuration files. Ordinarily, zebra is not required to write
its configuration files. If zebra was not setup to write the
config files, this could signal a intrusion attempt.

SELinux has preventing the nfs daemon (nfsd) from writing files on the local system. If you have not exported any file systems (rw), this could signals an intrusion.

SELinux has preventing the nfs daemon (nfsd) from writing to
directories marked as public. Usually these directories are
shared between multiple network daemons, like nfs, apache, ftp
etc. If you have not exported any public file systems for
writing, this could signal an intrusion.

SELinux is preventing access to files with the default label, default_t.

SELinux is preventing access to files with the label, file_t.

SELinux is preventing the ftp daemon from reading users home directories ($TARGET_PATH).

SELinux is preventing the ftp daemon from writing files outside the home directory ($TARGET_PATH).

SELinux is preventing the http daemon from acting as a ftp server.

SELinux is preventing the http daemon from communicating with the terminal.

SELinux is preventing the http daemon from connecting to a database.

SELinux is preventing the http daemon from connecting to network port $PORT_NUMBER
SELinux is preventing the http daemon from connecting to the itself or the relay ports

SELinux is preventing the http daemon from executing a shell script
SELinux is preventing the http daemon from using built-in scripting.

SELinux is preventing the kernel modules from being loaded.

SELinux is preventing the modification of the running policy.

SELinux is preventing the named daemon from writing to the zone directory
SELinux is preventing the nfs daemon from allowing clients to write to public directories.

SELinux is preventing the ppp daemon from inserting kernel modules.

SELinux is preventing the samba daemon from reading nfs file systems.

SELinux is preventing the sasl authentication server from reading the /etc/shadow file.

SELinux is preventing the squid daemon from connecting to network port $PORT_NUMBER
SELinux is preventing the users from running TCP servers in the usedomain.

SELinux is preventing the zebra daemon from writing its configurations files

SELinux permission checks on files labeled default_t are being
denied. These files/directories have the default label on them. This can
indicate a labeling problem, especially if the files being referred
to are not top level directories. Any files/directories under standard system directories, /usr,
/var. /dev, /tmp, ..., should not be labeled with the default
label. The default label is for files/directories which do not have a label on a
parent directory. So if you create a new directory in / you might
legitimately get this label.

SELinux permission checks on files labeled file_t are being
denied. file_t is the context the SELinux kernel gives to files
that do not have a label. This indicates a serious labeling
problem. No files on an SELinux box should ever be labeled file_t.
If you have just added a new disk drive to the system you can
relabel it using the restorecon command. Otherwise you should
relabel the entire files system.

SELinux policy is preventing the ftp daemon from writing to a public
directory.

SELinux policy is preventing the ftp daemon from writing to a public
directory. If ftpd is not setup to allow anonymous writes, this
could signal a intrusion attempt.

SELinux policy is preventing the http daemon from writing to a public
directory.

SELinux policy is preventing the rsync daemon from writing to a public
directory.

SELinux policy is preventing the rsync daemon from writing to a public
directory. If rsync is not setup to allow anonymous writes, this
could signal a intrusion attempt.

SELinux policy is preventing the samba daemon from writing to a public
directory.

SELinux policy is preventing the samba daemon from writing to a public
directory. If samba is not setup to allow anonymous writes, this
could signal a intrusion attempt.

SELinux prevented a java plugin ($SOURCE_TYPE) from making the stack executable.

SELinux prevented a mplayer plugin ($SOURCE_TYPE) from making the stack executable.

SELinux prevented httpd $ACCESS access to http files.

SELinux prevented the CVS application from reading the shadow password file.

SELinux prevented the CVS application from reading the shadow password file.
The CVS application requires this access when it is configured for direct
connection (i.e., pserver) and to authenticate to the system password / shadow
files without PAM. It is possible that this access request signals an intrusion
attempt.

It is recommended that CVS be configured to use PAM, authenticate to a separate
user file, or use another protocol (e.g., ssh) instead of allowing this access.
See the CVS manual for more details on why this access is potentially insecure
(<a href="http://ximbiot.com/cvs/manual/cvs-1.11.22/cvs_2.html">http://ximbiot.com/cvs/manual/cvs-1.11.22/cvs_2.html</a>).

SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
CIFS (Comment Internet File System) is a network filesystem similar to
SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>)
The ftp daemon attempted to read one or more files or directories from
a mounted filesystem of this type. As CIFS filesystems do not support
fine-grained SELinux labeling, all files and directories in the
filesystem will have the same security context.

If you have not configured the ftp daemon to read files from a CIFS filesystem
this access attempt could signal an intrusion attempt.

SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesytem.

SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux
systems.

The ftp daemon attempted to read one or more files or directories from
a mounted filesystem of this type. As NFS filesystems do not support
fine-grained SELinux labeling, all files and directories in the
filesystem will have the same security context.

If you have not configured the ftp daemon to read files from a NFS filesystem
this access attempt could signal an intrusion attempt.

SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesytem.

SELinux prevented the gss daemon from reading unprivileged user temporary files.

SELinux prevented the java plugin ($SOURCE_TYPE) from making the stack
executable. An executable stack should not be required by any
software (see <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a>
for more information). However, some versions of the Java plugin are known
to require this access to work properly. You should check for updates
to the software before allowing this access.

SELinux prevented the mplayer plugin ($SOURCE_TYPE) from making the stack
executable. An executable stack should not be required by any
software (see <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a>
for more information). However, some versions of the mplayer plugin are known
to require this access to work properly. You should check for updates
to the software before allowing this access.

You can execute the following command as root to relabel your
computer system: "touch /.autorelabel; reboot"

You can generate a local policy module to allow this
access - see <a href="http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385">FAQ</a>
Or you can disable SELinux protection altogether. Disabling
SELinux protection is not recommended.
Please file a <a href="http://bugzilla.redhat.com/bugzilla/enter_bug.cgi">bug report</a>
against this package.
If you want the http daemon to listen on the ftp port, you need to
enable the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1"
Changing the "$BOOLEAN" and
"$WRITE_BOOLEAN" booleans to true will allow this access:
"setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
warning: setting the "$WRITE_BOOLEAN" boolean to true will
allow the ftp daemon to write to all public content (files and
directories with type public_content_t) in addition to writing to
files and directories on CIFS filesystems. Changing the "allow_ftpd_use_nfs" and
"$WRITE_BOOLEAN" booleans to true will allow this access:
"setsebool -P allow_ftpd_use_nfs=1 $WRITE_BOOLEAN=1".
warning: setting the "$WRITE_BOOLEAN" boolean to true will
allow the ftp daemon to write to all public content (files and
directories with type public_content_t) in addition to writing to
files and directories on NFS filesystems. AuthorizationCRONCVSDomain Name ServiceFTPFile LabelFile SystemJavaKernelMediaMemoryNetwork PortsNetworkingRSYNCSAMBASELinux prevented the gss daemon from
reading unprivileged user temporary files (e.g., files in /tmp). Allowing this
access is low risk, but if you have not configured the gss daemon to
read these files this access request could signal an intrusion
attempt.Web ServerZebraProject-Id-Version: setroubleshoot
Report-Msgid-Bugs-To:
POT-Creation-Date: 2008-02-01 15:24-0500
PO-Revision-Date: 2007-01-18 19:15-0500
Last-Translator: Magnus Larsson <fedoratrans@gmail.com>
Language-Team: Swedish <sv@li.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Ã„ndra "$BOOLEAN" flaggan till sant fÃ¶r att tillÃ¥ta denna Ã¥tkomst:
"setsebool -P $BOOLEAN=1"

Ã„ndra "allow_ftpd_use_nfs" flaggan fÃ¶r att tillÃ¥ta denna Ã¥tkomst:
"setsebool -P allow_ftpd_use_nfs=1."

Om ftp ska tillÃ¥tas skriva till denna katalog mÃ¥ste du slÃ¥
pÃ¥ $BOOLEAN flaggan och Ã¤ndra filkontext fÃ¶r
publika katalogen till public_content_rw_t. LÃ¤s rsync_selinux
man sidan fÃ¶r mer information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

Om ftp ska tillÃ¥tas skriva till denna katalog mÃ¥ste du slÃ¥
pÃ¥ $BOOLEAN flaggan och Ã¤ndra filkontext fÃ¶r
publika katalogen till public_content_rw_t. LÃ¤s samba_selinux
man sidan fÃ¶r mer information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

Om httpd skript ska tillÃ¥tas skriva i publika kataloger mÃ¥ste du slÃ¥ pÃ¥ $BOOLEAN flaggan och Ã¤ndra filcontext fÃ¶r publika katalogen till public_content_rw_t. LÃ¤s httpd_selinux
man sida fÃ¶r mer information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

Om ftp-demonen ska tillÃ¥tas att skriva till denna katalog mÃ¥ste du slÃ¥
pÃ¥ $BOOLEAN flaggan och Ã¤ndra filkontexten fÃ¶r
den publika katalogen till public_content_rw_t. LÃ¤s ftpd_selinux
man sidan fÃ¶r mer information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>"

Om du tillÃ¥ter hantering av kÃ¤rnmoduler pÃ¥ din maskin,
slÃ¥ av $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=0".

Om du inte vill SELinux ska fÃ¶rhindra ftp frÃ¥n att skriva filer varsomhelst pÃ¥
systemet mÃ¥ste du slÃ¥ pÃ¥ $BOOLEAN-flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill ha en begrÃ¤nsad domÃ¤n som kan anvÃ¤nda dessa filer mÃ¥ste du
troligen mÃ¤rka om filen/katalogen med chcon. I en del fall Ã¤r det
lÃ¤ttare att mÃ¤rka om systemet, fÃ¶r att mÃ¤rka om kÃ¶r: "touch
/.autorelabel; reboot"

Om du vill ftp ska tillÃ¥ta anvÃ¤ndare komma Ã¥t sina hemkataloger
mÃ¥ste du slÃ¥ pÃ¥ $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill tillÃ¥ta httpd att ansluta till databaser sÃ¥ mÃ¥ste du slÃ¥ pÃ¥
$BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill att httpd ska kunna kÃ¶ra ett speciellt skalskript,
kan du mÃ¤rka det med chcon -t httpd_sys_script_exec_t SCRIPTFILE. Om
du vill att httpd ska kunna kÃ¶ra alla skalskript mÃ¥ste du slÃ¥ pÃ¥
flaggan $BOOLEAN: "setsebool -P $BOOLEAN=1"

Om du vill httpd ska kunna ansluta till httpd/ftp portar, mÃ¥ste du slÃ¥
pÃ¥ $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill httpd ska kunna ansluta till nÃ¤tverksportar mÃ¥ste du slÃ¥ pÃ¥
httpd_can_network_network_connect flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill named ska kÃ¶ra som en sekundÃ¤r server och acceptera
zonÃ¶verfÃ¶ringar mÃ¥ste du slÃ¥ pÃ¥ $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill att ppp ska kunna ladda kÃ¤rnmoduler mÃ¥ste du
slÃ¥ pÃ¥ $BOOLEAN flaggan: "setsebool -P $BOOLEAN=1"

Om du vill samba ska dela ut hemkataloger, mÃ¥ste du slÃ¥ pÃ¥
$BOOLEAN flaggan: "setsebool -P $BOOLEAN=1"

Om du vill att samba ska dela ut nfs filsystem mÃ¥ste du slÃ¥ pÃ¥
$BOOLEAN flaggan: "setsebool -P $BOOLEAN=1"

Om du vill att spamd ska dela ut hemkataloger mÃ¥ste du slÃ¥ pÃ¥
$BOOLEAN flaggan: "setsebool -P $BOOLEAN=1"

Om du vill att squid ska kunna ansluta till nÃ¤tverksportar mÃ¥ste du slÃ¥ pÃ¥
$BOOLEAN flagganboolean: "setsebool -P $BOOLEAN=1"

Om du vill att SSL Tunnel ska kÃ¶ra som en demon mÃ¥ste du slÃ¥ pÃ¥
$BOOLEAN flaggan: "setsebool -P $BOOLEAN=1". Du mÃ¥ste ocksÃ¥
sÃ¤ga till SELinux vilken port SSL Tunnel kommer kÃ¶ra pÃ¥. semanage
port -a -t stunnel_port_t -p tcp $PORT_NUMBER

Om du vill att http-demonen ska dela ut hemkataloger mÃ¥ste du
slÃ¥ pÃ¥ $BOOLEAN-flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill att http-demonen ska anvÃ¤nda inbyggd skriptning mÃ¥ste du
aktivera $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill sasl autentiserings-demonen ska kunna lÃ¤sa
/etc/shadow filen, Ã¤ndra $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1".

Om du vill tillÃ¥ta anvÃ¤ndarprogram att kÃ¶ra som TCP-servrar, kan du aktivera user_tcp_server-flaggan genom att kÃ¶ra:
setsebool -P $BOOLEAN=1

Om du vill tillÃ¥ta zebra att skriva Ã¶ver sin egna konfiguration mÃ¥ste du
aktivera $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1"

Om du vill exportera ett publikt filsystem som anvÃ¤nder nfs mÃ¥ste du
aktivera $BOOLEAN flaggan: "setsebool -P
$BOOLEAN=1".

Om du vill exportera filsystem med nfs mÃ¥ste du slÃ¥ pÃ¥
$BOOLEAN flaggan: "setsebool -P $BOOLEAN=1".

Om du vill exportera skrivbara filsystem som anvÃ¤nder nfs mÃ¥ste du slÃ¥ pÃ¥ $BOOLEAN flaggan: "setsebool -P $BOOLEAN=1".

Om du vill Ã¤ndra sÃ¤ttet SELinux kÃ¶r pÃ¥ din maskin
mÃ¥ste du ta ned din maskin i single user lÃ¤ge med upprÃ¤tthÃ¥llade
avstÃ¤ngt. StÃ¤ng sedan av secure_mode_policyload flaggan:
"setsebool -P secure_mode_policyload=0".

SELinux nekade cvs Ã¥tkomst till $TARGET_PATH.
Om detta Ã¤r ett CVS-datalager mÃ¥ste det ha en filkontextmÃ¤rkning med
cvs_data_t. Om du inte avsÃ¥g att anvÃ¤nda $TARGET_PATH som ett cvs-datalager
kan det indikera antingen ett fel eller pÃ¥visa ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux fÃ¶rhindrade rsync Ã¥tkomst till $TARGET_PATH.
Om detta Ã¤r ett rsync-datalager mÃ¥ste den ha en filkontextmÃ¤rkning med
rsync_data_t. Om du inte avsÃ¥g att anvÃ¤nda $TARGET_PATH som ett rsync-datalager
kan detta pÃ¥visa antingen ett fel eller ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux fÃ¶rhindrade samba Ã¥tkomst till $TARGET_PATH.
Om du vill dela denna katalog med samba mÃ¥ste den ha en filkontextmÃ¤rkning med
samba_share_t. Om du inte avsÃ¥g att anvÃ¤nda $TARGET_PATH som ett samba-datalager
kan detta pÃ¥visa antingen ett fel eller ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux har nekat kÃ¤rnmodul-verktygen frÃ¥n att Ã¤ndra
kÃ¤rnmoduler. Denna maskin Ã¤r hÃ¤rdad till att fÃ¶rhindra att kÃ¤rnan
Ã¤ndras, fÃ¶rutom in enanvÃ¤ndarlÃ¤ge. Om du inte fÃ¶rsÃ¶ker
Ã¤ndra en kÃ¤rnmodul, kan detta pÃ¥visa ett intrÃ¥ng.

SELinux har nekat Point-to-Point Protocol demonen frÃ¥n
sÃ¤tta in en kÃ¤rnmodul. Om pppd inte Ã¤r uppsatt att sÃ¤tta in kÃ¤rn-
moduler, detta kan vara ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux fÃ¶rhindrade ftp demonen Ã¥tkomst till anvÃ¤ndares hemkataloger
($TARGET_PATH). NÃ¥gon fÃ¶rsÃ¶ker logga in via din ftp-demon
till ett anvÃ¤ndarkonto. Om du satt upp ftp att endast tillÃ¥ta anonym ftp,
kan detta signalera ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux fÃ¶rhindrade ftp-demonen skrivrÃ¤ttigheter till kataloger utanfÃ¶r
hemkatalogen ($TARGET_PATH). NÃ¥gon har loggat in via din
ftp-demon och fÃ¶rsÃ¶ker skapa eller skriva till en fil. Om du bara satt upp
ftp att endast tillÃ¥ta anonym ftp, kan detta pÃ¥visa ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux har nekat adminstrations-verktygen frÃ¥n att Ã¤ndra sÃ¤ttet
SELinux policy kÃ¶rs. Maskinen Ã¤r hÃ¤rdad, om du inte kÃ¶r
nÃ¥gra SELinux verktyg,kan detta pÃ¥visa ett intrÃ¥ng.

SELinux har nekat named-demonen frÃ¥n att skriva zonfiler
Normalt krÃ¤ver named inte att skriva till dessa filer.
Endast sekundÃ¤ra servrar borde krÃ¤va att fÃ¥ skriva till dessa
kataloger. Om denna maskin inte Ã¤r en sekundÃ¤r server, detta
kan vara ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux har nekat samba demonen Ã¥tkomst till nfs fil-
system. NÃ¥gon fÃ¶rsÃ¶ker komma Ã¥t ett nfs-filsystem via
din samba-demon. Om du inte satte upp samba att dela ut nfs-fil-
system, detta kan troligen vara ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux har nekat sasl autentiseringsdemonen frÃ¥n att lÃ¤sa
/etc/shadow filen. Om sasl autentiseringsdemonen (saslauthd)
inte Ã¤r uppsatt att lÃ¤sa /etc/shadow, detta kan signalera ett
intrÃ¥ng.

SELinux har nekat squid-demonen frÃ¥n att ansluta till
$PORT_NUMBER. Standardpolicyn fÃ¶r squid Ã¤r att neka squid-
anslutningar. Om du inte satt upp squid till att gÃ¶ra
nÃ¤tverksanslutningar, kan detta pÃ¥visa ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux har nekat zebra-demonen frÃ¥n att skriva ut sin
konfigurationsfil. Normalt sett, krÃ¤ver zebra inte att skriva till
sina konfigurationsfiler. Om zebra inte var uppsatt till att skriva
konfig filer, detta kan signalera ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux har fÃ¶rhindrat nfs-demonen (nfsd) frÃ¥n att skriva filer pÃ¥ det lokala systemet. Om du inte har exporterat nÃ¥gra filsystem (rw), detta kan vara ett intrÃ¥ng.

SELinux fÃ¶rhindrar nfs demonen (nfsd) frÃ¥n att skriva till
kataloger mÃ¤rkta som publika. Oftast Ã¤r dessa kataloger
delade mellan flera nÃ¤tverksdemoner, som nfs, apache, ftp
etc. Om du inte har exporterat nÃ¥gra publika filsystem fÃ¶r
skrivning. kan detta var en signal fÃ¶r intrÃ¥ng.

SELinux fÃ¶rhindrar Ã¥tkomst till filer med standardmÃ¤rkningen, default_t.

SELinux fÃ¶rhindrar Ã¥tkomst till filer med mÃ¤rkningen, file_t.

SELinux fÃ¶rhindrar ftp demonen frÃ¥n att lÃ¤sa anvÃ¤ndares hemkataloger ($TARGET_PATH).

SELinux fÃ¶rhindrar ftp demonen frÃ¥n att skriva filer utanfÃ¶r hemkatalogen ($TARGET_PATH).

SELinux fÃ¶rhindrar http-demonen frÃ¥n agera som en ftp-server.

SELinux fÃ¶rhindrar http-demonen frÃ¥n att kommunicera med terminalen.

SELinux fÃ¶rhindrar http demonen frÃ¥n att ansluta till en databas.

SELinux fÃ¶rhindrar http demonen frÃ¥n att ansluta till nÃ¤tverksport $PORT_NUMBER
SELinux fÃ¶rhindrar http demonen frÃ¥n att ansluta sig till sig sjÃ¤lv eller relÃ¤-portarna

SELinux fÃ¶rhindrar http-demonen frÃ¥n exekvera skal-skript
SELinux policy fÃ¶rhindrar http-demonen frÃ¥n att anvÃ¤nda inbyggd skriptning

SELinux fÃ¶rhindrar kÃ¤rnmoduler frÃ¥n att laddas.

SELinux fÃ¶rhindrar Ã¤ndring av den kÃ¶rande policyn.

SELinux fÃ¶rhindrar named-demonen att skriva till zonkatalogen
SELinux fÃ¶rhindrar nfs demonen frÃ¥n att tillÃ¥ta klienter att skriva i publika kataloger.

SELinux fÃ¶rhindrar att ppp demonen frÃ¥n att lÃ¤ggatill kÃ¤rnmoduler.

SELinux fÃ¶rhindrar samba-demonen frÃ¥n att lÃ¤sa nfs filsystem.

SELinux fÃ¶rhindrar sasl authentiering servern frÃ¥n att lÃ¤sa /etc/shadow filen.

SELinux fÃ¶rhindrar squid-demonen frÃ¥n ansluta till nÃ¤tverksport $PORT_NUMBER
SELinux fÃ¶rhindrar anvÃ¤ndarna frÃ¥n att kÃ¶ra TCP-servrar i anvÃ¤ndardomÃ¤nen.

SELinux fÃ¶rhindrar zebra-demonen frÃ¥n att skriva sin konfigurations filer

SELinux rÃ¤ttighetskontroller pÃ¥ filer mÃ¤rkta default_t nekas.
Dessa filer/kataloger har standardmÃ¤rkningen pÃ¥ dem. Det kan
indikera ett mÃ¤rkningsproblem, sÃ¤rskilt om filerna som refereras
inte Ã¤r toppnivÃ¥kataloger. Filer/kataloger under standardsystemkataloger /usr,
/var. /dev, /tmp, ... ska inte mÃ¤rkas med standardmÃ¤rkningen.
StandardmÃ¤rkningen Ã¤r fÃ¶r filer/kataloger som inte har nÃ¥gon mÃ¤rkning pÃ¥ en
fÃ¶rÃ¤ldrakatalog. SÃ¥ om du skapar en ny katalog i / kan du fÃ¥
denna mÃ¤rkning legitimt.

SELinux rÃ¤ttighetskontroller pÃ¥ filer mÃ¤rkta file_t nekas.
file_t Ã¤r det kontext som SELinux-kÃ¤rnan ger filer
som inte har nÃ¥gon mÃ¤rkning. Detta indikerar ett seriÃ¶st mÃ¤rknings-
problem. Inga filer pÃ¥ en SELinux-maskin borde aldrig vara mÃ¤rkta file_t.
Om du precis har lagt till en ny diskenhet till systemet kan du
mÃ¤rka om den med restorecon kommandot. Annars borde du
mÃ¤rka om hela filsystemet.

SELinux policy fÃ¶rhindrar ftp demonen frÃ¥n att skriva till en publik
katalog.

SELinux policy fÃ¶rhindrar ftp-demonen frÃ¥n att skriva till en publik
katalog. Om ftpd inte Ã¤r uppsatt att tillÃ¥ta anonym skrivning, detta
kan pÃ¥visa ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux policy fÃ¶rhindrar http-demonen frÃ¥n att skriva till en publik
katalog.

SELinux policy fÃ¶rhindrar rsync-demonen frÃ¥n att skriva till en publik
katalog.

SELinux policy fÃ¶rhindrar rsync-demonen frÃ¥n att skriva till en publik
katalog. Om rsync inte Ã¤r uppsatt att tillÃ¥ta anonym skrivning, detta
kan signallera ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux policy fÃ¶rhindrar samba-demonen frÃ¥n att skriva till en publik
katalog.

SELinux policy fÃ¶rhindrar samba demonen frÃ¥n att skriva till en publik
katalog. Om samba inte Ã¤r uppsatt att tillÃ¥ta anonyma skrivningar, detta
kan vara en signal pÃ¥ ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux fÃ¶rhindrade en java plugin ($SOURCE_TYPE) frÃ¥n att gÃ¶ra stacken exekverbar.

SELinux fÃ¶rhindrade en mplayer-insticksmodul ($SOURCE_TYPE) frÃ¥n att gÃ¶ra stacken exekverbar.

SELinux fÃ¶rhindrade httpd $ACCESS-Ã¥tkomst till http-filer.

SELinux fÃ¶rhindrade CVS applikationen frÃ¥n att lÃ¤sa skugg-lÃ¶senordsfilen.

SELinux fÃ¶rhindrade CVS applikationen frÃ¥n att lÃ¤sa skugg-lÃ¶senordsfilen.
CVS-applikationen krÃ¤ver denna Ã¥tkomst nÃ¤r den Ã¤r konfigurerad fÃ¶r direkt
anslutning (ex, pserver) och fÃ¶r att autentisera till systemets lÃ¶senord / skugg-
filer utan PAM. Det Ã¤r mÃ¶jligt att denna Ã¥tkomst fÃ¶rfrÃ¥gan pÃ¥visar ett intrÃ¥ngs-
fÃ¶rsÃ¶k.

Det Ã¤r rekommenderat att CVS Ã¤r konfigurerad att anvÃ¤nda PAM, autentisering till en separat
anvÃ¤ndarfil, eller anvÃ¤nda ett annat protokoll (ex., ssh) istÃ¤llet fÃ¶r att tillÃ¥ta denna Ã¥tkomst.
Se CVS-manualen fÃ¶r mer detaljer om varfÃ¶r denna Ã¥tkomst kan vara osÃ¤ker
(<a href="http://ximbiot.com/cvs/manual/cvs-1.11.22/cvs_2.html">http://ximbiot.com/cvs/manual/cvs-1.11.22/cvs_2.html</a>).

SELinux fÃ¶rhindrade ftp demonen frÃ¥n $ACCESS filer lagrade pÃ¥ ett CIFS filsystem.
CIFS (Comment Internet File System) Ã¤r ett nÃ¤tverks-filsystem liknande
SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>)
ftp demonen fÃ¶rsÃ¶kte lÃ¤sa en eller flera kataloger frÃ¥n
ett monterat filsystem av denna typ. DÃ¥ CIFS-filsystem inte stÃ¶der
finkornig SELinux-mÃ¤rkning, kommer alla filer och kataloger i
filsystemet ha samma sÃ¤kerhetskontext.

Om du inte har konfigurerat ftp-demonen att lÃ¤sa filer frÃ¥n ett CIFS filsystem
kan detta fÃ¶rsÃ¶k vara ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux fÃ¶rhindrade ftp-demonen frÃ¥n $ACCESS filer lagrade pÃ¥ ett CIFS filsystem.

SELinux fÃ¶rhindrade ftp demonen frÃ¥n $ACCESS filer sparade pÃ¥ ett NFS filsystem.
NFS (Network Filesystem) Ã¤r ett nÃ¤tverksfilsystem vanligt anvÃ¤nt pÃ¥ Unix / Linux
system.

ftp demonen fÃ¶rsÃ¶kte lÃ¤sa en eller flera filer eller kataloger frÃ¥n
ett monterat filsystem av denna typ. Ett NFS-filsystem stÃ¶der inte
finkornig SELinux mÃ¤rkning, alla filer och kataloger i
filsystemet kommer ha samma sÃ¤kerhets-context.

Om du inte har konfigurerat ftp-demonen att filer frÃ¥n ett NFS filsystem
detta Ã¥tkomstfÃ¶rsÃ¶k kan signalera ett intrÃ¥ngsfÃ¶rsÃ¶k.

SELinux fÃ¶rhindrade ftp demonen frÃ¥n $ACCESS filer sparade pÃ¥ ett NFS filsystem.

SELinux fÃ¶rhindrade gss demonen frÃ¥n att lÃ¤sa opriviligerad anvÃ¤ndares temporÃ¤ra filer.

SELinux fÃ¶rhindrade java plugin ($SOURCE_TYPE) frÃ¥n att gÃ¶ra stacken
exekverbar. En exekverbar stack borde inte krÃ¤vas av nÃ¥gon
mjukvara (se <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a>
fÃ¶r mer information). Men en del versioner av Java plugin Ã¤r kÃ¤nda
fÃ¶r att krÃ¤va denna Ã¥tkomst fÃ¶r att fungera. Du borde kontrollera om det finns uppdateringar
till din mjukvara innan du tillÃ¥ter denna Ã¥tkomst.

SELinux fÃ¶rhindrade mplayer-insticksmodul ($SOURCE_TYPE) frÃ¥n att gÃ¶ra stacken
exekverbar. En exekverbar stack borde inte krÃ¤vas av nÃ¥gon
mjukvara (se <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a>
fÃ¶r mer information). Men en del versioner av mplayer-insticksmodul Ã¤r kÃ¤nda
fÃ¶r att krÃ¤va denna Ã¥tkomst fÃ¶r att fungera. Du borde kontrollera om det finns uppdateringar
till din mjukvara innan du tillÃ¥ter denna Ã¥tkomst.

Du kan exekvera fÃ¶ljande kommando som root fÃ¶r Ã¥termÃ¤rka ditt
datorsystem: "touch /.autorelabel; reboot"

Du kan generera en lokal policymodul att tillÃ¥ta denna
Ã¥tkomst - gÃ¥ till <a href="http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385">FAQ</a>
Eller sÃ¥ kan du inaktivera SELinux-skyddet helt. Inaktivera
SELinux-skydd Ã¤r inte att rekommendera.
Skicka in en <a href="http://bugzilla.redhat.com/bugzilla/enter_bug.cgi">felrapport</a>
fÃ¶r detta paket.
Om du vill att http-demonen ska kunna lyssna pÃ¥ ftp porten, mÃ¥ste du
aktivera $BOOLEAN flaggan: "setsebool -P $BOOLEAN=1"
Ã„ndra "$BOOLEAN" och
"$WRITE_BOOLEAN" flaggorn till sant tillÃ¥ter denna Ã¥tkomst :
"setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
varning: sÃ¤tta "$WRITE_BOOLEAN" flaggan till sant kommer
tillÃ¥ta ftp-demonen att skriva till allt publikt material (filer och
kataloger med typ public_content_t) fÃ¶rutom skriva till
filer och kataloger pÃ¥ CIFS-filsystem. Ã„ndra "allow_ftpd_use_nfs" och
"$WRITE_BOOLEAN" flaggor till sant fÃ¶r tillÃ¥ta denna Ã¥tkomst:
"setsebool -P allow_ftpd_use_nfs=1 $WRITE_BOOLEAN=1".
varning: sÃ¤tta "$WRITE_BOOLEAN" flaggan till sant kommer
tillÃ¥ta ftp demonen att skriva till allt publikt innehÃ¥ll (filer och
kataloger med typ public_content_t) fÃ¶rutom att skriva till
filer och kataloger pÃ¥ NFS filsystemet. AuktoriseringCRONCVSDomÃ¤nnamntjÃ¤nstFTPFilmÃ¤rkningFilsystemJavaKÃ¤rnaMediaMinneNÃ¤tverksportarNÃ¤tverksrelateratRSYNCSAMBASELinux fÃ¶rhindrade gss demonen frÃ¥n
att lÃ¤sa oprivilegierade anvÃ¤ndares temporÃ¤ra filer (t.ex., filer in /tmp). Att tillÃ¥ta
Ã¥tkomst Ã¤r en lÃ¥g risk, men om du inte har konfigurerat gss-demonen till
att lÃ¤sa dessa filer, denna Ã¥tkomstfÃ¶rfrÃ¥gan kan pÃ¥visa ett intrÃ¥ngs-
fÃ¶rsÃ¶k.WebbserverZebra

Anon7 - 2021