+ 6g csz^RIt]P!RRR7t]Pt^RI5^RIHt!RR]4tR#) iNzsetroubleshoot-pluginsT)Zfallback)Z*)Plugincsa]tRt^to]!R4t]!R4t]!R4tRt]!R4t Rt ]!R4t ]!R4t Rt R tR tR tVtR #) pluginzZ SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem. a SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem. CIFS (Comment Internet File System) is a network filesystem similar to SMB (http://www.microsoft.com/mind/1196/cifs.asp) The ftp daemon attempted to read one or more files or directories from a mounted filesystem of this type. As CIFS filesystems do not support fine-grained SELinux labeling, all files and directories in the filesystem will have the same security context. If you have not configured the ftp daemon to read files from a CIFS filesystem this access attempt could signal an intrusion attempt. zh Changing the "$BOOLEAN" boolean to true will allow this access: "setsebool -P $BOOLEAN=1." z8/usr/sbin/setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1a Changing the "$BOOLEAN" and "$WRITE_BOOLEAN" booleans to true will allow this access: "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1". warning: setting the "$WRITE_BOOLEAN" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on CIFS filesystems. z7If you want to allow ftpd to write to cifs file systemsz you must tell SELinux about thisz0# setsebool -P ftpd_use_cifs=1 ftpd_anon_write=1csj\P!V\4RVn\ R4VnR#)TzEnable booleansN)r__init____name__fixable_ button_text)selfs&8/usr/share/setroubleshoot/plugins/allow_ftpd_use_cifs.pyrZplugin.__init__Bs%h' ./cs$VPR.4'dxVPR.4'd`VPRR.4'dGVPVPVP ,4'dVP RR7#R#R#)Zftpd_tZcifs_tZfileZdir)ZargsN)Z ftpd_use_cifsZftpd_anon_write)Zmatches_source_typesZmatches_target_typesZ has_tclass_inZall_accesses_are_inZcreate_file_permsZ rw_dir_permsZreport)rZavcs&&ranalyzeZplugin.analyzeGsy  $ $hZ 0 0  $ $hZ 0 0   vuo . .&&s'<'r s:*    84 H  !(7V7r