SM0 She11

Path: / / usr / share / setroubleshoot / plugins / __pycache__

Full Path (server): /usr/share/setroubleshoot/plugins/__pycache__

📄 __init__.cpython-39.opt-1.pyc [E] [D]
📄 __init__.cpython-39.pyc [E] [D]
📄 allow_anon_write.cpython-39.opt-1.pyc [E] [D]
📄 allow_anon_write.cpython-39.pyc [E] [D]
📄 allow_execheap.cpython-39.opt-1.pyc [E] [D]
📄 allow_execheap.cpython-39.pyc [E] [D]
📄 allow_execmem.cpython-39.opt-1.pyc [E] [D]
📄 allow_execmem.cpython-39.pyc [E] [D]
📄 allow_execmod.cpython-39.opt-1.pyc [E] [D]
📄 allow_execmod.cpython-39.pyc [E] [D]
📄 allow_execstack.cpython-39.opt-1.pyc [E] [D]
📄 allow_execstack.cpython-39.pyc [E] [D]
📄 allow_ftpd_use_cifs.cpython-39.opt-1.pyc [E] [D]
📄 allow_ftpd_use_cifs.cpython-39.pyc [E] [D]
📄 allow_ftpd_use_nfs.cpython-39.opt-1.pyc [E] [D]
📄 allow_ftpd_use_nfs.cpython-39.pyc [E] [D]
📄 associate.cpython-39.opt-1.pyc [E] [D]
📄 associate.cpython-39.pyc [E] [D]
📄 automount_exec_config.cpython-39.opt-1.pyc [E] [D]
📄 automount_exec_config.cpython-39.pyc [E] [D]
📄 bind_ports.cpython-39.opt-1.pyc [E] [D]
📄 bind_ports.cpython-39.pyc [E] [D]
📄 catchall.cpython-39.opt-1.pyc [E] [D]
📄 catchall.cpython-39.pyc [E] [D]
📄 catchall_boolean.cpython-39.opt-1.pyc [E] [D]
📄 catchall_boolean.cpython-39.pyc [E] [D]
📄 catchall_labels.cpython-39.opt-1.pyc [E] [D]
📄 catchall_labels.cpython-39.pyc [E] [D]
📄 chrome.cpython-39.opt-1.pyc [E] [D]
📄 chrome.cpython-39.pyc [E] [D]
📄 connect_ports.cpython-39.opt-1.pyc [E] [D]
📄 connect_ports.cpython-39.pyc [E] [D]
📄 cvs_data.cpython-39.opt-1.pyc [E] [D]
📄 cvs_data.cpython-39.pyc [E] [D]
📄 dac_override.cpython-39.opt-1.pyc [E] [D]
📄 dac_override.cpython-39.pyc [E] [D]
📄 device.cpython-39.opt-1.pyc [E] [D]
📄 device.cpython-39.pyc [E] [D]
📄 disable_ipv6.cpython-39.opt-1.pyc [E] [D]
📄 disable_ipv6.cpython-39.pyc [E] [D]
📄 file.cpython-39.opt-1.pyc [E] [D]
📄 file.cpython-39.pyc [E] [D]
📄 filesystem_associate.cpython-39.opt-1.pyc [E] [D]
📄 filesystem_associate.cpython-39.pyc [E] [D]
📄 httpd_can_sendmail.cpython-39.opt-1.pyc [E] [D]
📄 httpd_can_sendmail.cpython-39.pyc [E] [D]
📄 httpd_unified.cpython-39.opt-1.pyc [E] [D]
📄 httpd_unified.cpython-39.pyc [E] [D]
📄 httpd_write_content.cpython-39.opt-1.pyc [E] [D]
📄 httpd_write_content.cpython-39.pyc [E] [D]
📄 kernel_modules.cpython-39.opt-1.pyc [E] [D]
📄 kernel_modules.cpython-39.pyc [E] [D]
📄 leaks.cpython-39.opt-1.pyc [E] [D]
📄 leaks.cpython-39.pyc [E] [D]
📄 mmap_zero.cpython-39.opt-1.pyc [E] [D]
📄 mmap_zero.cpython-39.pyc [E] [D]
📄 mounton.cpython-39.opt-1.pyc [E] [D]
📄 mounton.cpython-39.pyc [E] [D]
📄 mozplugger.cpython-39.opt-1.pyc [E] [D]
📄 mozplugger.cpython-39.pyc [E] [D]
📄 mozplugger_remove.cpython-39.opt-1.pyc [E] [D]
📄 mozplugger_remove.cpython-39.pyc [E] [D]
📄 openvpn.cpython-39.opt-1.pyc [E] [D]
📄 openvpn.cpython-39.pyc [E] [D]
📄 public_content.cpython-39.opt-1.pyc [E] [D]
📄 public_content.cpython-39.pyc [E] [D]
📄 qemu_blk_image.cpython-39.opt-1.pyc [E] [D]
📄 qemu_blk_image.cpython-39.pyc [E] [D]
📄 qemu_file_image.cpython-39.opt-1.pyc [E] [D]
📄 qemu_file_image.cpython-39.pyc [E] [D]
📄 restorecon.cpython-39.opt-1.pyc [E] [D]
📄 restorecon.cpython-39.pyc [E] [D]
📄 restorecon_source.cpython-39.opt-1.pyc [E] [D]
📄 restorecon_source.cpython-39.pyc [E] [D]
📄 rsync_data.cpython-39.opt-1.pyc [E] [D]
📄 rsync_data.cpython-39.pyc [E] [D]
📄 samba_share.cpython-39.opt-1.pyc [E] [D]
📄 samba_share.cpython-39.pyc [E] [D]
📄 sandbox_connect.cpython-39.opt-1.pyc [E] [D]
📄 sandbox_connect.cpython-39.pyc [E] [D]
📄 selinuxpolicy.cpython-39.opt-1.pyc [E] [D]
📄 selinuxpolicy.cpython-39.pyc [E] [D]
📄 setenforce.cpython-39.opt-1.pyc [E] [D]
📄 setenforce.cpython-39.pyc [E] [D]
📄 sshd_root.cpython-39.opt-1.pyc [E] [D]
📄 sshd_root.cpython-39.pyc [E] [D]
📄 swapfile.cpython-39.opt-1.pyc [E] [D]
📄 swapfile.cpython-39.pyc [E] [D]
📄 sys_module.cpython-39.opt-1.pyc [E] [D]
📄 sys_module.cpython-39.pyc [E] [D]
📄 sys_resource.cpython-39.opt-1.pyc [E] [D]
📄 sys_resource.cpython-39.pyc [E] [D]
📄 vbetool.cpython-39.opt-1.pyc [E] [D]
📄 vbetool.cpython-39.pyc [E] [D]
📄 wine.cpython-39.opt-1.pyc [E] [D]
📄 wine.cpython-39.pyc [E] [D]
📄 xen_image.cpython-39.opt-1.pyc [E] [D]
📄 xen_image.cpython-39.pyc [E] [D]

Editing: httpd_unified.cpython-39.opt-1.pyc

�����Z`u����������������������@���sD���d�dl�Z�e�jddd�Zej�Zd�dlZd�dlmZ�G�dd��de�ZdS�)�����Nzsetroubleshoot-pluginsT)Zfallback)�Pluginc�������������������@���sL���e�Zd�Zed�Zed�Zed�ZdZed�Zed�Z	dZ
dd	��Zd
d��ZdS�)
�pluginz?
    SELinux prevented httpd $ACCESS access to http files.
    aZ��
    SELinux prevented httpd $ACCESS access to http files.

Ordinarily httpd is allowed full access to all files labeled with http file
    context.  This machine has a tightened security policy with the $BOOLEAN
    turned off,  this requires explicit labeling of all files.  If a file is
    a cgi script it needs to be labeled with httpd_TYPE_script_exec_t in order
    to be executed.  If it is read only content, it needs to be labeled
    httpd_TYPE_content_t. If it is writable content, it needs to be labeled
    httpd_TYPE_script_rw_t or httpd_TYPE_script_ra_t. You can use the
    chcon command to change these context.  Please refer to the man page
    "man httpd_selinux" or
    <a href="http://fedora.redhat.com/docs/selinux-apache-fc3">FAQ</a>
    "TYPE" refers to one of "sys", "user" or "staff" or potentially other
    script types.
    zg
    Changing the "$BOOLEAN" boolean to true will allow this access:
    "setsebool -P $BOOLEAN=1"
    zsetsebool -P $BOOLEAN=1zcIf you want to allow httpd to execute cgi scripts and to unify HTTPD handling of all content files.z_you must tell SELinux about this by enabling the 'httpd_unified' and 'http_enable_cgi' booleansz1# setsebool -P httpd_unified=1 httpd_enable_cgi=1c�����������������C���s���t��|�t��|��d��d�S�)N����)r����__init__�__name__Zset_priority)�self��r����2/usr/share/setroubleshoot/plugins/httpd_unified.pyr���=���s����zplugin.__init__c�����������������C���sH���|��d�rD|�d�rD|jdks(|jdkrDt�d�sDt�d�sD|����S�d�S�)Nzhttpd_t httpd_.*_script_tz	httpd_.*t�file�dirZ
httpd_unifiedZhttpd_enable_cgi)Zmatches_source_typesZmatches_target_typesZtclass�selinuxZsecurity_get_boolean_activeZreport)r���Zavcr���r���r	����analyzeA���s����
�����zplugin.analyzeN)
r����
__module__�__qualname__�_ZsummaryZproblem_descriptionZfix_descriptionZfix_cmdZif_textZ	then_textZdo_textr���r
���r���r���r���r	���r������s���r���)�gettextZtranslationr���r���Zsetroubleshoot.Pluginr���r���r���r���r���r	����<module>���s
���