⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.32
Server IP:
15.204.235.159
Server:
Linux srv.techlup.co.ke 4.18.0-553.5.1.el8_10.x86_64 #1 SMP Wed Jun 5 09:12:13 EDT 2024 x86_64
Server Software:
Apache
PHP Version:
8.2.27
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
share
/
setroubleshoot
/
plugins
/
__pycache__
/
View File Name :
allow_ftpd_use_nfs.cpython-36.opt-1.pyc
3 nm�a/ � @ sD d dl Z e jddd�Zej Zd dlT d dlmZ G dd� de�ZdS ) � Nzsetroubleshoot-pluginsT)Zfallback)�*)�Pluginc @ sX e Zd Zed�Zed�Zed�ZdZed�ZdZ ed�Z ed�ZdZd d � Z dd� Zd S )�pluginzY SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. aU SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux systems. The ftp daemon attempted to read one or more files or directories from a mounted filesystem of this type. As NFS filesystems do not support fine-grained SELinux labeling, all files and directories in the filesystem will have the same security context. If you have not configured the ftp daemon to read files from a NFS filesystem this access attempt could signal an intrusion attempt. z| Changing the "allow_ftpd_use_nfs" boolean to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1." z7/usr/sbin/setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1a� Changing the "allow_ftpd_use_nfs" and "ftpd_anon_write" booleans to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1". warning: setting the "ftpd_anon_write" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on NFS filesystems. z6If you want to allow ftpd to write to nfs file systemsz you must tell SELinux about thisz/# setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1c C s t j| t� d| _td�| _d S )NTzEnable booleans.)r �__init__�__name__Zfixable�_Zbutton_text)�self� r �7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyr D s zplugin.__init__c C sH |j dg�rD|jdg�rD|jddg�rD|j|j|j �rD| jdd�S d S ) NZftpd_tZnfs_t�file�dir�ftpd_use_nfs�ftpd_anon_write)�args)r r )Zmatches_source_typesZmatches_target_typesZ has_tclass_inZall_accesses_are_inZcreate_file_permsZrw_dir_permsZreport)r Zavcr r r �analyzeI s zplugin.analyzeN)r � __module__�__qualname__r ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZrw_fix_descriptionZ rw_fix_cmdZif_textZ then_textZdo_textr r r r r r r s r )�gettextZtranslationr Zsetroubleshoot.utilZsetroubleshoot.Pluginr r r r r r �<module> s