| Server IP : 68.178.164.50 / Your IP : 216.73.216.142 Web Server : Apache System : Linux 50.164.178.68.host.secureserver.net 5.14.0-611.26.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jan 29 05:24:47 EST 2026 x86_64 User : rathinambschool ( 1053) PHP Version : 8.2.30 Disable Function : exec,passthru,shell_exec,system MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /usr/share/setroubleshoot/plugins/__pycache__/ |
Upload File : |
a
�Z`�
� @ sD d dl Z e jddd�Zej Zd dlT d dlmZ G dd� de�ZdS ) � Nzsetroubleshoot-pluginsT)Zfallback)�*)�Pluginc @ sX e Zd Zed�Zed�Zed�ZdZed�ZdZ ed�Z
ed�ZdZd d
� Z
dd� Zd
S )�pluginzZ
SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
a�
SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
CIFS (Comment Internet File System) is a network filesystem similar to
SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>)
The ftp daemon attempted to read one or more files or directories from
a mounted filesystem of this type. As CIFS filesystems do not support
fine-grained SELinux labeling, all files and directories in the
filesystem will have the same security context.
If you have not configured the ftp daemon to read files from a CIFS filesystem
this access attempt could signal an intrusion attempt.
zh
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1."
z8/usr/sbin/setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1a� Changing the "$BOOLEAN" and
"$WRITE_BOOLEAN" booleans to true will allow this access:
"setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
warning: setting the "$WRITE_BOOLEAN" boolean to true will
allow the ftp daemon to write to all public content (files and
directories with type public_content_t) in addition to writing to
files and directories on CIFS filesystems. z7If you want to allow ftpd to write to cifs file systemsz you must tell SELinux about thisz0# setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1c C s t �| t� d| _td�| _d S )NTzEnable booleans)r �__init__�__name__Zfixable�_Zbutton_text)�self� r �8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyr B s zplugin.__init__c C sR |� dg�rJ|�dg�rJ|�ddg�rJ|�|j|j �rD| jdd�S d S nd S d S )NZftpd_tZcifs_t�file�dir)Z
ftpd_use_cifsZftpd_anon_write)�args)Zmatches_source_typesZmatches_target_typesZ
has_tclass_inZall_accesses_are_inZcreate_file_permsZrw_dir_permsZreport)r Zavcr r r
�analyzeG s
��zplugin.analyzeN)r �
__module__�__qualname__r ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZrw_fix_descriptionZ
rw_fix_cmdZif_textZ then_textZdo_textr r r r r r
r s
r )�gettextZtranslationr Zsetroubleshoot.utilZsetroubleshoot.Pluginr r r r r r
�<module> s