3

nm�a4�@sDdd
lZej
ddd�Z
e
jZddlTddlmZ
Gdd�de�Zd
S)	�Nzsetroubleshoot-pluginsT)
Zfallback)
�
*)
�Pluginc@sDeZ
dZed
�
Zed�
Zed�
ZdZed�
ZdZ	dd�Z
d	d
�ZdS)�pluginzT
    SELinux is preventing xen ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH.
    a�
    SELinux denied xen access to $TARGET_PATH.
    If this is a XEN image, it has to have a file context label of
    xen_image_t. The system is setup to label image files in directory /var/lib/xen/images
    correctly.  We recommend that you copy your image file to /var/lib/xen/images.
    If you really want to have your xen image files in the current directory, you can relabel $TARGET_PATH to be xen_image_t using chcon.  You also need to execute semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH' to add this
    new path to the system defaults. If you did not intend to use $TARGET_PATH as a xen
    image it could indicate either a bug or an intrusion attempt.
    a

    You can alter the file context by executing chcon -t xen_image_t '$TARGET_PATH'
    You must also change the default file context files on the system in order to preserve them even on a full relabel.  "semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH'"
    z,/usr/bin/chcon -t xen_image_t '$TARGET_PATH'z2You need to change the label on '$FIX_TARGET_PATH'z[# semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH'
# restorecon -v '$FIX_TARGET_PATH'c

Cs tj
|t�
d
|_td�
|_dS)NTz%Change the file label to xen_image_t.)r�__init__�__name__Zfixable�
_Zbutton_text)
�self�r	�./usr/share/setroubleshoot/plugins/xen_image.pyr5s


zplugin.__init__cCsF|
jd
dg�
r>|
j
|
j|
j�
r>|
jddg�
r>|
j�r>|j�SdSdS)NZxend_tZvirsh_t�file�dir)Zmatches_source_typesZall_accesses_are_inZr_file_permsZr_dir_permsZ
has_tclass_inZpath_is_not_standard_directoryZreport)rZavcr	r	r
�analyze:s



zplugin.analyzeN)r�
__module__�__qualname__rZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZ	then_textZdo_textrr
r	r	r	r
rs
r)�gettextZtranslationrZsetroubleshoot.utilZsetroubleshoot.Pluginrrr	r	r	r
�<module>s