3

nm�a/
�@sDdd
lZej
ddd�Z
e
jZddlTddlmZ
Gdd�de�Zd
S)	�Nzsetroubleshoot-pluginsT)
Zfallback)
�
*)
�Pluginc@sXeZ
dZed
�
Zed�
Zed�
ZdZed�
ZdZ	ed�
Z
ed�
ZdZd	d
�Z
dd�Zd
S)�pluginzY
    SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
    aU
    SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
    NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux
    systems.

    The ftp daemon attempted to read one or more files or directories from
    a mounted filesystem of this type.  As NFS filesystems do not support
    fine-grained SELinux labeling, all files and directories in the
    filesystem will have the same security context.

    If you have not configured the ftp daemon to read files from a NFS filesystem
    this access attempt could signal an intrusion attempt.
    z|
    Changing the "allow_ftpd_use_nfs" boolean to true will allow this access:
    "setsebool -P allow_ftpd_use_nfs=1."
    z7/usr/sbin/setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1a�
 Changing the "allow_ftpd_use_nfs" and
    "ftpd_anon_write" booleans to true will allow this access:
    "setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1".
    warning: setting the "ftpd_anon_write" boolean to true will
    allow the ftp daemon to write to all public content (files and
    directories with type public_content_t) in addition to writing to
    files and directories on NFS filesystems.  z6If you want to allow ftpd to write to nfs file systemsz you must tell SELinux about thisz/# setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1c

Cs tj
|t�
d
|_td�
|_dS)NTzEnable booleans.)r�__init__�__name__Zfixable�
_Zbutton_text)
�self�r	�7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyrDs


zplugin.__init__cCsH|
jd
g
�
rD|
j
dg
�
rD|
jddg�
rD|
j|
j|
j�
rD|jdd�
SdS)	NZftpd_tZnfs_t�file�dir�ftpd_use_nfs�ftpd_anon_write)
�args)r
r)Zmatches_source_typesZmatches_target_typesZ
has_tclass_inZall_accesses_are_inZcreate_file_permsZrw_dir_permsZreport)rZavcr	r	r
�analyzeIs




zplugin.analyzeN)r�
__module__�__qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZrw_fix_descriptionZ
rw_fix_cmdZif_textZ	then_textZdo_textrrr	r	r	r
rs


r)�gettextZtranslationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr	r	r	r
�<module>s