3

nm�a�
�@sDdd
lZej
ddd�Z
e
jZddlTddlmZ
Gdd�de�Zd
S)	�Nzsetroubleshoot-pluginsT)
Zfallback)
�
*)
�Pluginc@sDeZ
dZed
�
Zed�
Zed�
ZdZdZdZ	dZ
dd	�Zd
d�ZdS)
�pluginzj
    SELinux is preventing the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH.
    a�

    SELinux has denied the $SOURCE_PATH from executing potentially
    mislabeled files $TARGET_PATH.  Automounter can be setup to execute
    configuration files. If $TARGET_PATH is an automount executable
    configuration file it needs to have a file label of bin_t.
    If automounter is trying to execute something that it is not supposed to, this could indicate an intrusion attempt.
    a,

    If you want to change the file context of $TARGET_PATH so that the automounter can execute it you can execute "chcon -t bin_t $TARGET_PATH".  If you want this to survive a relabel, you need to permanently change the file context: execute  "semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'".
    ze/usr/sbin/semanage fcontext -a -t bin_t '$FIX_TARGET_PATH';/usr/sbin/restorecon -v '$FIX_TARGET_PATH'z8If you want to allow automounter to execute $TARGET_PATHz3Change the file context of '$TARGET_PATH' to bin_t.z�# chcon -t bin_t '$FIX_TARGET_PATH'
If you want this to survive a relabel, execute
# semanage fcontext -a -t bin_t '$FIX_TARGET_PATH';restorecon -v '$FIX_TARGET_PATH'
c

Cs tj
|t�
d
|_td�
|_dS)NTzChange file context.)r�__init__�__name__Zfixable�
_Zbutton_text)
�self�r	�:/usr/share/setroubleshoot/plugins/automount_exec_config.pyr6s


zplugin.__init__cCs2|
jd
g
�
r.|
j
ddg�
r.|
jdg
�
r.|j�SdS)NZautomount_tZexecuteZexecute_no_trans�file)Zmatches_source_typesZall_accesses_are_inZ
has_tclass_inZreport)rZavcr	r	r
�analyze;s




zplugin.analyzeN)
r�
__module__�__qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZif_textZ	then_textZdo_textrrr	r	r	r
rs
r)�gettextZtranslationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr	r	r	r
�<module>s