+ 6g/ csz^RIt]P!RRR7t]Pt^RI5^RIHt!RR]4tR#) iNzsetroubleshoot-pluginsT)Zfallback)Z*)Plugincsa]tRt^to]!R4t]!R4t]!R4tRt]!R4t Rt ]!R4t ]!R4t Rt R tR tR tVtR #) pluginzY SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. aU SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux systems. The ftp daemon attempted to read one or more files or directories from a mounted filesystem of this type. As NFS filesystems do not support fine-grained SELinux labeling, all files and directories in the filesystem will have the same security context. If you have not configured the ftp daemon to read files from a NFS filesystem this access attempt could signal an intrusion attempt. z| Changing the "allow_ftpd_use_nfs" boolean to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1." z7/usr/sbin/setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1a Changing the "allow_ftpd_use_nfs" and "ftpd_anon_write" booleans to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1". warning: setting the "ftpd_anon_write" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on NFS filesystems. z6If you want to allow ftpd to write to nfs file systemsz you must tell SELinux about thisz/# setsebool -P ftpd_use_nfs=1 ftpd_anon_write=1csj\P!V\4RVn\ R4VnR#)TzEnable booleans.N)r__init____name__fixable_ button_text)selfs&7/usr/share/setroubleshoot/plugins/allow_ftpd_use_nfs.pyrZplugin.__init__Ds%h' /0cs VPR.4'dvVPR.4'd^VPRR.4'dEVPVPVP ,4'dVP RR7#R#)Zftpd_tZnfs_tZfileZdir)ZargsN)Z ftpd_use_nfsZftpd_anon_write)Zmatches_source_typesZmatches_target_typesZ has_tclass_inZall_accesses_are_inZcreate_file_permsZ rw_dir_permsZreport)rZavcs&&ranalyzeZplugin.analyzeIsv  $ $hZ 0 0  $ $gY / /   vuo . .&&s'<'r s:*    84 H  !(6V6r