Ū x Ü Ŗ (
ė )
1 V H g h
| p
( í
$ t ž I 3 ~ } Ŋ ü , ē / į . b F Š Ļ Á Ũ h F S Ō! P &" N w" N Æ" G # ] ]# O ģ# k $ R w$ q Ę$ f <% V Ŗ% V ú% S Q& j Ĩ& B ' T S' ^ ¨' Á ( t É( ? >) Z ~) Y Ų) 3* X Â, - ,. ?/ U0
_1 m2 z y3 š ô3 Ž4 I5 į Đ5 3 ¸6 e ė6 _ R7 e ˛7 f 8 8 Ā 8 ¸ ]9 Ã : Ú: \ ^< b ģ< \ = + {= c §= 7 > < C> : > ģ> Ë> 4 Û> ? , +? X? ? t? 0 ´? 1 å? ] @ 2 u@ K ¨@ 2 ô@ ] 'A c
A éA , ųA &B d 9B N B íB _ C ] eC E ÃC - D 7D 4 PD !
D ' §D $ ĪD ôD _ E R uE O ČE 9 F : RF F ĢF 7G B RG A G ^ ×G s 6H ĒH Ę AI ų K Ĩ M u ŦO š "P ŧ ÜP Ņ Q kR % ëT \ Y Ņ nZ ~ @[ ŋ] 1 Đ^ Á ` Ŗ Äb Ũ he @ Fj [ m ão đu zz Æ ~ Ã Ũ~ } Ą ! ¤ ž Ä c ¤ ( Í Â į Á Ē
l õ Û y U đ Î w å F Ü , Ņ Đ [
, ÷ 7 L / f | i ã Z M b ¨ \ ĸ - h¤ { Ĩ § 4 +¨ $ `Š
Ģ ü Ŧ ų ō ũ ú đŽ O ë¯ ;° Vą î˛ ũ´ \ ¸ b d¸ \ Į¸ + $š z Pš Ëš S kē Ŧ ŋē F lģ P ŗģ b ŧ < gŧ u ¤ŧ C Ŋ ^Ŋ ^ ôŊ _ Sž ŗž c Kŋ ¯ŋ a MĀ $ ¯Ā C ÔÁ à Z (à à ü à í Ä : Å ŧÅ ÛÆ Á äĮ c ĻČ U
É `É c ëÉ P OĘ } Ę b Ë Ä Ë § FĖ ¤ îĖ Í ,Î b ÆÎ ņ )Ī q Đ Đ %Ņ Î ŧŅ 0 Ō ŧĶ V S _ Z I N 9 : j x 6 . @ g B Y ] F > J E v s 4 T 5 K l f H h Q ' c W k 0 i ^
* [ 1 o P U r M R p X e " ) t < = $ ; q C
7 3 a ( , A 2 m + & w \ - 8 d b u ! D # L O % n G ` / ?
dac_override and dac_read_search capabilities usually indicates that the root process does not have access to a file based on the permission flags. This usually mean you have some file with the wrong ownership/permissions on it.
SELinux denied access requested by $SOURCE. It is not
expected that this access is required by $SOURCE and this access
may signal an intrusion attempt. It is also possible that the specific
version or configuration of the application is causing it to require
additional access.
Attempt restorecon -v '$TARGET_PATH' or chcon -t SIMILAR_TYPE '$TARGET_PATH'
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1"
Changing the "$BOOLEAN" boolean to true will allow this access:
"setsebool -P $BOOLEAN=1."
Changing the "allow_ftpd_use_nfs" boolean to true will allow this access:
"setsebool -P allow_ftpd_use_nfs=1."
Changing the file_context to mnt_t will allow mount to mount the file system:
"chcon -t mnt_t '$TARGET_PATH'."
You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t mnt_t '$FIX_TARGET_PATH'"
If httpd scripts should be allowed to write to public directories you need to turn on the $BOOLEAN boolean and change the file context of the public directory to public_content_rw_t. Read the httpd_selinux
man page for further information:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t "
You must also change the default file context labeling files on the system in order to preserve public directory labeling even on a full relabel. "semanage fcontext -a -t public_content_rw_t "
If you want $SOURCE to continue, you must turn on the
$BOOLEAN boolean. Note: This boolean will affect all applications
on the system.
If you want httpd to send mail you need to turn on the
$BOOLEAN boolean: "setsebool -P
$BOOLEAN=1"
If you want to allow $SOURCE to bind to port $PORT_NUMBER, you can execute
# semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER
where PORT_TYPE is one of the following: %s.
If this system is running as an NIS Client, turning on the allow_ypbind boolean may fix the problem. setsebool -P allow_ypbind=1.
If you want to allow $SOURCE to connect to $PORT_NUMBER, you can execute
# sandbox -X -t sandbox_net_t $SOURCE
If you want to allow $SOURCE to connect to $PORT_NUMBER, you can execute
# semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER
where PORT_TYPE is one of the following: %s.
If you want to change the file context of $TARGET_PATH so that the automounter can execute it you can execute "chcon -t bin_t $TARGET_PATH". If you want this to survive a relabel, you need to permanently change the file context: execute "semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'".
SELinux denied access requested by $SOURCE. It is not
expected that this access is required by $SOURCE and this access
may signal an intrusion attempt. It is also possible that the specific
version or configuration of the application is causing it to require
additional access.
SELinux denied access requested by the $SOURCE command. It looks like this is either a leaked descriptor or $SOURCE output was redirected to a file it is not allowed to access. Leaks usually can be ignored since SELinux is just closing the leak and reporting the error. The application does not use the descriptor, so it will run properly. If this is a redirection, you will not get output in the $TARGET_PATH. You should generate a bugzilla on selinux-policy, and it will get routed to the appropriate package. You can safely ignore this avc.
SELinux denied access to $TARGET_PATH requested by $SOURCE.
$TARGET_PATH has a context used for sharing by a different program. If you
would like to share $TARGET_PATH from $SOURCE also, you need to
change its file context to public_content_t. If you did not intend to
allow this access, this could signal an intrusion attempt.
SELinux denied cvs access to $TARGET_PATH.
If this is a CVS repository it needs to have a file context label of
cvs_data_t. If you did not intend to use $TARGET_PATH as a CVS repository
it could indicate either a bug or it could signal an intrusion attempt.
SELinux denied xen access to $TARGET_PATH.
If this is a XEN image, it has to have a file context label of
xen_image_t. The system is setup to label image files in directory /var/lib/xen/images
correctly. We recommend that you copy your image file to /var/lib/xen/images.
If you really want to have your xen image files in the current directory, you can relabel $TARGET_PATH to be xen_image_t using chcon. You also need to execute semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH' to add this
new path to the system defaults. If you did not intend to use $TARGET_PATH as a xen
image it could indicate either a bug or an intrusion attempt.
SELinux has denied the $SOURCE access to potentially
mislabeled files $TARGET_PATH. This means that SELinux will not
allow httpd to use these files. If httpd should be allowed this access to these files you should change the file context to one of the following types, %s.
Many third party apps install html files
in directories that SELinux policy cannot predict. These directories
have to be labeled with a file context which httpd can access.
SELinux has denied the $SOURCE_PATH from executing potentially
mislabeled files $TARGET_PATH. Automounter can be setup to execute
configuration files. If $TARGET_PATH is an automount executable
configuration file it needs to have a file label of bin_t.
If automounter is trying to execute something that it is not supposed to, this could indicate an intrusion attempt.
SELinux has prevented vbetool from performing an unsafe memory operation.
SELinux has prevented wine from performing an unsafe memory operation.
SELinux is preventing $SOURCE_PATH "$ACCESS" access on $TARGET_PATH.
SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH.
SELinux is preventing $SOURCE_PATH "$ACCESS" to $TARGET_PATH.
SELinux is preventing $SOURCE_PATH access to a leaked $TARGET_PATH file descriptor.
SELinux is preventing $SOURCE_PATH from binding to port $PORT_NUMBER.
SELinux is preventing $SOURCE_PATH from changing the access
protection of memory on the heap.
SELinux is preventing $SOURCE_PATH from connecting to port $PORT_NUMBER.
SELinux is preventing $SOURCE_PATH from creating a file with a context of $SOURCE_TYPE on a filesystem.
SELinux is preventing $SOURCE_PATH from loading $TARGET_PATH which requires text relocation.
SELinux is preventing $SOURCE_PATH from making the program stack executable.
SELinux is preventing Samba ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH.
SELinux is preventing cvs ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH
SELinux is preventing the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH.
SELinux is preventing the http daemon from sending mail.
SELinux is preventing xen ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH.
SELinux policy is preventing an httpd script from writing to a public
directory.
SELinux policy is preventing an httpd script from writing to a public
directory. If httpd is not setup to write to public directories, this
could signal an intrusion attempt.
SELinux prevented $SOURCE from mounting on the file or directory
"$TARGET_PATH" (type "$TARGET_TYPE").
SELinux prevented httpd $ACCESS access to http files.
SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.
SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.
The $SOURCE application attempted to change the access protection of memory on
the heap (e.g., allocated using malloc). This is a potential security
problem. Applications should not be doing this. Applications are
sometimes coded incorrectly and request this permission. The
SELinux Memory Protection Tests
web page explains how to remove this requirement. If $SOURCE does not work and
you need it to work, you can configure SELinux temporarily to allow
this access until the application is fixed. Please file a bug
report against this package.
Use a command like "cp -p" to preserve all permissions except SELinux context.
You can alter the file context by executing chcon -R -t rsync_data_t '$TARGET_PATH'
You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t rsync_data_t '$FIX_TARGET_PATH'"
You can alter the file context by executing chcon -R -t samba_share_t '$TARGET_PATH'
You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH'"
You can alter the file context by executing chcon -t public_content_t '$TARGET_PATH'
You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t public_content_t '$FIX_TARGET_PATH'"
You can alter the file context by executing chcon -t swapfile_t '$TARGET_PATH'
You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t swapfile_t '$FIX_TARGET_PATH'"
You can alter the file context by executing chcon -t virt_image_t '$TARGET_PATH'
You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH'"
You can alter the file context by executing chcon -t xen_image_t '$TARGET_PATH'
You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH'"
You can execute the following command as root to relabel your
computer system: "touch /.autorelabel; reboot"
You can generate a local policy module to allow this
access - see FAQ
Please file a bug report.
You can generate a local policy module to allow this
access - see FAQ
You can restore the default system context to this file by executing the
restorecon command. restorecon '$SOURCE_PATH'.
You can restore the default system context to this file by executing the
restorecon command. restorecon '$TARGET_PATH', if this file is a directory,
you can recursively restore using restorecon -R '$TARGET_PATH'.
Your system may be seriously compromised!
Your system may be seriously compromised! $SOURCE_PATH attempted to mmap low kernel memory.
Your system may be seriously compromised! $SOURCE_PATH tried to load a kernel module.
Your system may be seriously compromised! $SOURCE_PATH tried to modify SELinux enforcement.
Your system may be seriously compromised! $SOURCE_PATH tried to modify kernel configuration.
Disable IPV6 properly.
Either remove the mozplluger package by executing 'yum remove mozplugger'
Or turn off enforcement of SELinux over the Firefox plugins.
setsebool -P unconfined_mozilla_plugin_transition 0
If you decide to continue to run the program in question you will need
to allow this operation. This can be done on the command line by
executing:
# setsebool -P mmap_low_allowed 1
You tried to place a type on a %s that is not a file type. This is not allowed, you must assigne a file type. You can list all file types using the seinfo command.
seinfo -afile_type -x
Changing the "$BOOLEAN" and
"$WRITE_BOOLEAN" booleans to true will allow this access:
"setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
warning: setting the "$WRITE_BOOLEAN" boolean to true will
allow the ftp daemon to write to all public content (files and
directories with type public_content_t) in addition to writing to
files and directories on CIFS filesystems. # semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH'
# restorecon -v '$FIX_TARGET_PATH' # semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH%s'
# restorecon %s -v '$FIX_TARGET_PATH' # semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH'
# restorecon -v '$FIX_TARGET_PATH' # semanage port -a -t %s -p %s $PORT_NUMBER # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER
where PORT_TYPE is one of the following: %s. A process might be attempting to hack into your system. Add
net.ipv6.conf.all.disable_ipv6 = 1
to /etc/sysctl.conf
Contact your security administrator and report this issue. Restore
Context Restore Context SELinux is preventing $SOURCE_PATH "$ACCESS" access. Turn off memory protection You can read '%s' man page for more details. You might have been hacked. You must tell SELinux about this by enabling the '%s' boolean.
You need to change the label on $FIX_TARGET_PATH You need to change the label on $TARGET_BASE_PATH You need to change the label on $TARGET_BASE_PATH to public_content_t or public_content_rw_t. You need to change the label on $TARGET_BASE_PATH' You need to change the label on $TARGET_PATH to a type of a similar device. You need to change the label on '$FIX_TARGET_PATH' You should report this as a bug.
You can generate a local policy module to allow this access. You should report this as a bug.
You can generate a local policy module to dontaudit this access. execstack -c %s if you think that you might have been hacked setsebool -P %s %s turn on full auditing to get path information about the offending file and generate the error again. use a command like "cp -p" to preserve all permissions except SELinux context. you can run restorecon. you may be under attack by a hacker, since confined applications should never need this access. you may be under attack by a hacker, since confined applications should not need this access. you may be under attack by a hacker, this is a very dangerous access. you must change the labeling on $TARGET_PATH. you must fix the labels. you must move the cert file to the ~/.cert directory you must pick a valid file label. you must remove the mozplugger package. you must setup SELinux to allow this you must tell SELinux about this you must tell SELinux about this by enabling the 'httpd_unified' and 'http_enable_cgi' booleans you must tell SELinux about this by enabling the vbetool_mmap_zero_ignore boolean. you must tell SELinux about this by enabling the wine_mmap_zero_ignore boolean. you must turn off SELinux controls on the Chrome plugins. you must turn off SELinux controls on the Firefox plugins. you need to add labels to it. you need to change the label on $TARGET_PATH to public_content_rw_t, and potentially turn on the allow_httpd_sys_script_anon_write boolean. you need to fully relabel. you need to report a bug.
This is a potentially dangerous access. you need to report a bug. This is a potentially dangerous access. you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not blacklist the module' you need to use a different command. You are not allowed to preserve the SELinux context on the target file system. you should clear the execstack flag and see if $SOURCE_PATH works correctly.
Report this as a bug on %s.
You can clear the exestack flag by executing: Project-Id-Version: PACKAGE VERSION
Report-Msgid-Bugs-To:
POT-Creation-Date: 2021-09-07 17:26+0200
PO-Revision-Date: 2017-08-31 08:31-0400
Last-Translator: Copied by Zanata
Language-Team: Assamese (http://www.transifex.com/projects/p/fedora/language/as/)
Language: as
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=2; plural=(n != 1);
X-Generator: Zanata 4.6.2
dac_override āĻā§°ā§ dac_read_search āĻā§āĻˇāĻŽāĻ¤āĻžāĻ¸āĻŽā§āĻšā§ āĻ¸āĻžāĻ§āĻžā§°āĻŖāĻ¤ āĻāĻāĻāĻŋāĻ¤ āĻĻāĻŋā§ā§ āĻ¯ā§ ā§°ā§āĻ āĻĒā§ā§°āĻā§ā§°āĻŋā§āĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĢā§āĻ˛ā§āĻāĻ¸āĻŽā§āĻšā§° āĻāĻĒā§°āĻ¤ āĻ¨āĻŋā§°ā§āĻā§° āĻā§°āĻŋ āĻāĻāĻž āĻĢāĻžāĻāĻ˛āĻ˛ā§ āĻ
āĻāĻŋāĻāĻŽ āĻ¨āĻžāĻāĨ¤ āĻ āĻ¸āĻžāĻ§āĻžā§°āĻŖāĻ¤ āĻŦā§āĻāĻžā§ āĻāĻĒā§āĻ¨āĻžā§° āĻā§āĻ˛ āĻ
āĻ§āĻŋāĻāĻžā§°āĻ¤ā§āĻŦ/āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĨāĻāĻž āĻāĻŋāĻā§āĻŽāĻžāĻ¨ āĻĢāĻžāĻāĻ˛ āĻāĻā§āĨ¤
SELinux āĻ $SOURCE āĻĻā§āĻŦāĻžā§°āĻž āĻ
āĻ¨ā§ā§°ā§āĻ§ āĻā§°āĻž āĻ
āĻāĻŋāĻāĻŽ āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻ˛ā§āĨ¤ āĻāĻ āĻ
āĻāĻŋāĻāĻŽ
$SOURCE āĻĻā§āĻŦāĻžā§°āĻž āĻĒā§ā§°ā§ā§āĻāĻ¨ āĻšāĻŦ āĻŦā§āĻ˛āĻŋ āĻāĻļāĻž āĻā§°āĻž āĻšā§ā§ąāĻž āĻ¨āĻžāĻ āĻā§°ā§ āĻāĻ āĻ¸āĻāĻā§āĻ¤ā§ āĻāĻāĻž
āĻ
āĻ¨āĻžāĻ§āĻŋāĻāĻžā§° āĻĒā§ā§°ā§ąā§āĻļā§° āĻāĻāĻāĻŋāĻ¤ āĻĻāĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤ āĻ¸āĻŽā§āĻāĻŦ āĻšāĻŦ āĻĒāĻžā§°ā§
āĻ¯ā§ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨ā§° āĻŦāĻŋāĻļā§āĻˇ āĻ¸āĻāĻ¸ā§āĻā§°āĻŖ āĻ
āĻĨāĻŦāĻž āĻ¸āĻā§°ā§āĻĒā§ āĻā§āĻžā§° āĻ
āĻ¤āĻŋā§°āĻŋāĻā§āĻ¤ āĻ
āĻāĻŋāĻāĻŽā§°
āĻĒā§ā§°ā§ā§āĻāĻ¨ā§ā§āĻ¤āĻž āĻĻā§āĻāĻžāĻ āĻāĻā§āĨ¤
restorecon -v '$TARGET_PATH' āĻ
āĻĨāĻŦāĻž chcon -t SIMILAR_TYPE '$TARGET_PATH' āĻā§āĻˇā§āĻāĻž āĻā§°āĻ
"$BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻ true āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻ˛ā§ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§ā§ąāĻž āĻ¯āĻžāĻŦ:
"setsebool -P $BOOLEAN=1"
"$BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻ true āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻ˛ā§ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§ā§ąāĻž āĻ¯āĻžāĻŦ:
"setsebool -P $BOOLEAN=1āĨ¤"
"$allow_ftpd_use_nfs" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻ true āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻ˛ā§ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§ā§ąāĻž āĻ¯āĻžāĻŦ:
"setsebool -P allow_ftpd_use_nfs=1āĨ¤"
file_context āĻ mnt_t āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻ˛ā§ āĻĢāĻžāĻāĻ˛ āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻŽāĻžāĻāĻ¨ā§āĻ āĻā§°āĻŋāĻŦāĻ˛ā§ āĻŽāĻžāĻāĻ¨ā§āĻā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦ:
"chcon -t mnt_t '$TARGET_PATH'āĨ¤"
āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¯āĻžāĻ¤ā§ āĻ¸āĻŋāĻšāĻ¤āĻ āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛āĻ¤ āĻ¸āĻā§°āĻā§āĻˇā§°āĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĨ¤ "semanage fcontext -a -t mnt_t '$FIX_TARGET_PATH'"
āĻ¯āĻĻāĻŋ httpd āĻ¸ā§āĻā§ā§°āĻŋāĻĒā§āĻāĻ¸āĻŽā§āĻšāĻ ā§°āĻžāĻāĻšā§ā§ąāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ¸āĻŽā§āĻšāĻ˛ā§ āĻ˛āĻŋāĻāĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦ āĻ˛āĻžāĻā§ āĻāĻĒā§āĻ¨āĻŋ $BOOLEAN āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ
āĻ¨ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻā§°ā§ ā§°āĻžāĻāĻšā§ā§ąāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋā§° āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤āĻ public_content_rw_t āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻ
āĻ§āĻŋāĻ āĻ¤āĻĨā§āĻ¯ā§° āĻŦāĻžāĻŦā§ httpd_selinux
man āĻĒā§āĻˇā§āĻ āĻž āĻĒā§āĻ:
"setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t "
āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛āĻ¤ ā§°āĻžāĻāĻšā§ā§ąāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦāĻ˛ā§ āĻāĻĒā§āĻ¨āĻŋ āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ˛ā§āĻŦā§āĻ˛ āĻĨāĻāĻž āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ "semanage fcontext -a -t public_content_rw_t "
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $SOURCE āĻ āĻāĻ˛āĻžāĻŦ āĻŦāĻŋāĻāĻžā§°ā§, āĻāĻĒā§āĻ¨āĻŋ
$BOOLEAN āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ
āĻ¨ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻŽāĻ¨ āĻā§°āĻŋāĻŦ: āĻāĻ āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽā§° āĻ¸āĻāĻ˛ā§ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨ā§°
āĻāĻĒā§°āĻ¤ āĻĒā§ā§°āĻāĻžā§ą āĻĒā§āĻ˛āĻžāĻŦāĨ¤
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ httpd āĻŽā§āĻāĻ˛ āĻĒā§ā§°ā§ā§°āĻŖ āĻā§°āĻžāĻŦ āĻŦāĻŋāĻāĻžā§°ā§ āĻāĻĒā§āĻ¨āĻŋ
$BOOLEAN boolean: "setsebool -P
$BOOLEAN=1" āĻ
āĻ¨ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $SOURCE āĻ āĻĒā§ā§°ā§āĻ $PORT_NUMBER āĻ˛ā§ āĻ¸āĻāĻ¯ā§āĻ āĻā§°āĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦ āĻŦāĻŋāĻāĻžā§°ā§, āĻāĻĒā§āĻ¨āĻŋ
# semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
āĻ¯āĻ¤ PORT_TYPE āĻšāĻ˛ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ā§° āĻāĻāĻž: %s.
āĻ¯āĻĻāĻŋ āĻāĻ āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻāĻāĻž NIS āĻā§āĻ˛āĻžāĻāĻ¨ā§āĻ āĻšāĻŋāĻāĻžāĻĒā§ āĻāĻ˛āĻŋ āĻāĻā§, allow_ypbind āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻ āĻ
āĻ¨ āĻā§°āĻŋāĻ˛ā§ āĻ¸āĻŽāĻ¸ā§āĻ¯āĻž āĻ āĻŋāĻ āĻšāĻŦ āĻĒāĻžā§°ā§āĨ¤ setsebool -P allow_ypbind=1āĨ¤
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $SOURCE āĻ $PORT_NUMBER ā§° āĻ¸ā§āĻ¤ā§ āĻ¸āĻāĻ¯ā§āĻ āĻā§°āĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦ āĻŦāĻŋāĻāĻžā§°ā§, āĻāĻĒā§āĻ¨āĻŋ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
# sandbox -X -t sandbox_net_t $SOURCE
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $SOURCE āĻ $PORT_NUMBER āĻ˛ā§ āĻ¸āĻāĻ¯ā§āĻ āĻā§°āĻžāĻŦ āĻŦāĻŋāĻāĻžā§°ā§, āĻāĻĒā§āĻ¨āĻŋ āĻĒā§ā§°ā§ā§°āĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§
# semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER
āĻ¯āĻ¤ PORT_TYPE āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ā§° āĻāĻāĻž: %s.
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $TARGET_PATH ā§° āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻŦāĻŋāĻāĻžā§°ā§ āĻ¯āĻžāĻ¤ā§ āĻ¸ā§āĻŦāĻŽāĻžāĻāĻ¨ā§āĻāĻžā§°ā§ āĻā§āĻžāĻ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§ āĻāĻĒā§āĻ¨āĻŋ "chcon -t bin_t $TARGET_PATH" āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦāĨ¤ āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ āĻā§āĻžāĻ āĻāĻāĻž āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛ āĻĒā§°āĻž āĻŦāĻāĻžāĻŦ āĻŦāĻŋāĻāĻžā§°āĻŋāĻā§, āĻāĻĒā§āĻ¨āĻŋ āĻ¸ā§āĻĨāĻžā§ā§āĻāĻžā§ąā§ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤: execute "semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'" āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤
SELinux āĻ $SOURCE āĻĻā§āĻŦāĻžā§°āĻž āĻ
āĻ¨ā§ā§°ā§āĻ§ āĻā§°āĻž āĻ
āĻāĻŋāĻāĻŽ āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻ˛ā§āĨ¤ āĻāĻ āĻ
āĻāĻŋāĻāĻŽ
$SOURCE āĻĻā§āĻŦāĻžā§°āĻž āĻĒā§ā§°ā§ā§āĻāĻ¨ āĻšāĻŦ āĻŦā§āĻ˛āĻŋ āĻāĻļāĻž āĻā§°āĻž āĻšā§ā§ąāĻž āĻ¨āĻžāĻ āĻā§°ā§ āĻāĻ āĻ¸āĻāĻā§āĻ¤ā§ āĻāĻāĻž
āĻ
āĻ¨āĻžāĻ§āĻŋāĻāĻžā§° āĻĒā§ā§°ā§ąā§āĻļā§° āĻāĻāĻāĻŋāĻ¤ āĻĻāĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤ āĻ¸āĻŽā§āĻāĻŦ āĻšāĻŦ āĻĒāĻžā§°ā§
āĻ¯ā§ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨ā§° āĻŦāĻŋāĻļā§āĻˇ āĻ¸āĻāĻ¸ā§āĻā§°āĻŖ āĻ
āĻĨāĻŦāĻž āĻ¸āĻā§°ā§āĻĒā§ āĻā§āĻžā§° āĻ
āĻ¤āĻŋā§°āĻŋāĻā§āĻ¤ āĻ
āĻāĻŋāĻāĻŽā§°
āĻĒā§ā§°ā§ā§āĻāĻ¨ā§ā§āĻ¤āĻž āĻĻā§āĻāĻžāĻ āĻāĻā§āĨ¤
SELinux āĻ $SOURCE āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻĻā§āĻŦāĻžā§°āĻž āĻ
āĻ¨ā§ā§°ā§āĻ§ āĻā§°āĻž āĻ
āĻāĻŋāĻāĻŽ āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻ˛ā§āĨ¤ āĻāĻ¨ā§ āĻ˛āĻžāĻāĻŋāĻā§ āĻ¯ā§āĻ¨ āĻ āĻšā§ āĻāĻāĻž āĻā§°ā§āĻ āĻŦāĻŋā§ąā§°āĻ āĻ
āĻĨāĻŦāĻž $SOURCE āĻāĻāĻāĻĒā§āĻāĻ āĻāĻ¨ā§ āĻāĻāĻž āĻĢāĻžāĻāĻ˛āĻ˛ā§ āĻĒā§āĻ¨ā§°āĻ¨āĻŋā§°ā§āĻĻā§āĻļ āĻā§°āĻž āĻšā§āĻā§ āĻ¯āĻ˛ā§ āĻ¤āĻžā§° āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¨āĻžāĻāĨ¤ āĻā§°ā§āĻāĻ¸āĻŽā§āĻš āĻ¸āĻžāĻ§āĻžā§°āĻŖāĻ¤ āĻāĻĒā§āĻā§āĻˇāĻž āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋ āĻ¯āĻŋāĻšā§āĻ¤ā§ SELinux āĻ āĻā§°ā§āĻ āĻŦāĻ¨ā§āĻ§ āĻā§°āĻŋ āĻ¤ā§ā§°ā§āĻāĻŋā§° āĻ¸āĻāĻŦāĻžāĻĻ āĻĻāĻŋ āĻāĻā§āĨ¤ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨ā§ āĻŦāĻŋā§ąā§°āĻ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻ¨āĻā§°ā§, āĻ¸ā§ā§ā§āĻšā§ āĻ āĻ¸āĻ āĻŋāĻāĻāĻžā§ąā§ āĻāĻ˛āĻŋāĻŦāĨ¤ āĻ¯āĻĻāĻŋ āĻ āĻāĻāĻž āĻĒā§āĻ¨ā§°āĻ¨āĻŋā§°ā§āĻĻā§āĻļ āĻšā§, āĻāĻĒā§āĻ¨āĻŋ $TARGET_PATH āĻ¤ āĻāĻāĻāĻĒā§āĻ āĻ¨āĻžāĻĒāĻžāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ selinux-policy āĻ¤ āĻāĻāĻž bugzilla āĻ¸ā§āĻāĻ¨ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ, āĻā§°ā§ āĻ āĻ¸āĻ āĻŋāĻ āĻĒā§āĻā§āĻāĻ āĻ˛ā§āĻā§ āĻĻāĻŋāĻļ āĻĒāĻžāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ avc āĻ āĻ¸ā§ā§°āĻā§āĻˇāĻŋāĻ¤āĻāĻžā§ąā§ āĻāĻĒā§āĻā§āĻˇāĻž āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦāĨ¤
SELinux āĻ $SOURCE āĻĻā§āĻŦāĻžā§°āĻž āĻ
āĻ¨ā§ā§°ā§āĻ§ āĻā§°āĻž $TARGET_PATH āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻ˛ā§āĨ¤
$TARGET_PATH ā§° āĻāĻāĻž āĻĒā§āĻĨāĻ āĻĒā§ā§°āĻā§ā§°āĻžāĻŽ āĻĻā§āĻŦāĻžā§°āĻž āĻ
āĻāĻļā§āĻĻāĻžā§°ā§ āĻā§°āĻŋāĻŦāĻ˛ā§ āĻŦā§āĻ¯ā§ąāĻšā§āĻ¤ āĻāĻāĻž āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻāĻā§āĨ¤
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $SOURCE ā§° āĻĒā§°āĻž $TARGET_PATH āĻ
āĻāĻļā§āĻĻāĻžā§°ā§ āĻā§°āĻŋāĻŦ āĻŦāĻŋāĻāĻžā§°ā§, āĻāĻĒā§āĻ¨āĻŋ āĻā§āĻžā§°
āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ public_content_t āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ
āĻĻāĻŋāĻŦ āĻ¨āĻŋāĻŦāĻŋāĻāĻžā§°ā§, āĻ āĻāĻāĻž āĻ
āĻ¨āĻžāĻ§āĻŋāĻāĻžā§° āĻĒā§ā§°ā§ąā§āĻļā§° āĻāĻāĻāĻŋāĻ¤ āĻĻāĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ˛ā§ cvs āĻ
āĻāĻŋāĻāĻŽ āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻ˛ā§āĨ¤
āĻ¯āĻĻāĻŋ āĻ āĻāĻāĻž CVS āĻāĻā§°āĻžāĻ˛ āĻšā§ āĻā§āĻžā§° āĻāĻāĻž āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ˛ā§āĻŦā§āĻ˛
cvs_data_t āĻĨāĻžāĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $TARGET_PATH āĻ āĻāĻāĻž CVS āĻāĻā§°āĻžāĻ˛ āĻšāĻŋāĻāĻžāĻĒā§
āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻŋāĻŦ āĻ¨āĻŋāĻŦāĻŋāĻāĻžā§°ā§ āĻ āĻāĻāĻž āĻŦāĻžāĻ āĻšāĻŦ āĻĒāĻžā§°ā§ āĻ
āĻĨāĻŦāĻž āĻ āĻāĻāĻž āĻ
āĻ¨āĻžāĻ§āĻŋāĻāĻžā§° āĻĒā§ā§°ā§ąā§āĻļā§° āĻāĻāĻāĻŋāĻ¤ āĻšāĻŦ āĻĒāĻžā§°ā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ˛ā§ xen āĻ
āĻāĻŋāĻāĻŽ āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻ˛ā§āĨ¤
āĻ¯āĻĻāĻŋ āĻ āĻāĻāĻž XEN āĻāĻŦāĻŋ āĻšā§, āĻā§āĻžā§° āĻāĻāĻž xen_image_t āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤
āĻ˛ā§āĻŦā§āĻ˛ āĻĨāĻžāĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋ /var/lib/xen/images āĻ¤ āĻāĻŦāĻŋ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš
āĻ¸āĻ āĻŋāĻāĻāĻžā§ąā§ āĻ˛ā§āĻŦā§āĻ˛ āĻā§°āĻŋāĻŦāĻ˛ā§ āĻ¸āĻāĻ¸ā§āĻĨāĻžāĻĒāĻŋāĻ¤āĨ¤ āĻāĻŽāĻŋ āĻāĻĒāĻĻā§āĻļ āĻĻāĻŋāĻ āĻ¯ā§ āĻāĻĒā§āĻ¨āĻŋ āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŦāĻŋ āĻĢāĻžāĻāĻ˛āĻ /var/lib/xen/images āĻāĻŦāĻŋāĻ¤ āĻāĻĒāĻŋ āĻā§°āĻāĨ¤
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ āĻ¸āĻāĻāĻžāĻā§ āĻāĻĒā§āĻ¨āĻžā§° xen āĻāĻŦāĻŋ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻšāĻ āĻŦā§°ā§āĻ¤āĻŽāĻžāĻ¨ āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ¤ āĻŦāĻŋāĻāĻžā§°ā§, āĻāĻĒā§āĻ¨āĻŋ chcon āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻŋ $TARGET_PATH āĻ xen_image_t āĻšāĻŋāĻāĻžāĻĒā§ āĻĒā§āĻ¨ā§° āĻ˛ā§āĻŦā§āĻ˛ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻ āĻ¨āĻ¤ā§āĻ¨ āĻĒāĻĨāĻ āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻ¯ā§āĻ āĻā§°āĻŋāĻŦāĻ˛ā§ semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ
āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ $TARGET_PATH āĻ āĻāĻāĻž xen
āĻāĻŦāĻŋ āĻšāĻŋāĻāĻžāĻĒā§ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻŋāĻŽ āĻŦā§āĻ˛āĻŋ āĻāĻŦāĻž āĻ¨āĻžāĻ āĻ āĻāĻāĻž āĻŦāĻžāĻ āĻ
āĻĨāĻŦāĻž āĻāĻāĻž āĻ
āĻ¨āĻžāĻ§āĻŋāĻāĻžā§° āĻĒā§ā§°ā§ąā§āĻļā§° āĻāĻāĻāĻŋāĻ¤ āĻĻāĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤
SELinux āĻ āĻŦāĻŋāĻā§ąā§ā§āĻāĻžā§ąā§ āĻā§āĻ˛ āĻ˛ā§āĻŦā§āĻ˛ āĻā§°āĻž āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš $TARGET_PATH āĻ˛ā§
$SOURCE āĻ
āĻāĻŋāĻāĻŽ āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻā§āĨ¤ āĻ āĻŦā§āĻāĻžā§ āĻ¯ā§ SELinux āĻ
httpd āĻ āĻāĻ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¨āĻŋāĻĻāĻŋāĻŦāĨ¤ āĻ¯āĻĻāĻŋ httpd āĻ āĻāĻ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻšāĻ˛ā§ āĻ
āĻāĻŋāĻāĻŽ āĻĻāĻŋāĻŦ āĻ˛āĻžāĻā§ āĻāĻĒā§āĻ¨āĻŋ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤āĻ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻ§ā§°āĻŖāĻ¸āĻŽā§āĻšā§° āĻāĻāĻžāĻ˛ā§, %s āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤
āĻŦāĻšā§āĻ¤ā§ āĻ¤ā§āĻ¤āĻŋā§ āĻĻāĻ˛ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨āĻ¸āĻŽā§āĻšā§ āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ¸āĻŽā§āĻšāĻ¤ html āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻāĻ¨āĻ¸ā§āĻāĻ˛ āĻā§°ā§
āĻ¯āĻžāĻ SELinux āĻ¨āĻŋāĻ¤āĻŋā§ā§ āĻāĻāĻ¤āĻŋā§āĻžāĻā§ āĻāĻŦ āĻ¨ā§ā§ąāĻžā§°ā§āĨ¤ āĻāĻ āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ¸āĻŽā§āĻšāĻ
āĻāĻāĻž āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻ¤āĻŋāĻ¤ā§° āĻ¸āĻšāĻžā§āĻ¤ āĻ˛ā§āĻŦā§āĻ˛ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¯āĻžāĻ httpd āĻ āĻ
āĻāĻŋāĻāĻŽ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤
SELinux āĻ $SOURCE_PATH āĻ āĻŦāĻŋāĻā§ąā§ā§āĻāĻžā§ąā§ āĻā§āĻ˛ āĻ§ā§°āĻŖā§ āĻ˛ā§āĻŦā§āĻ˛ āĻā§°āĻž
āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš $TARGET_PATH āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻž āĻ¨āĻžāĻāĻ āĻā§°āĻŋāĻā§āĨ¤ āĻ¸ā§āĻŦāĻŽāĻžāĻāĻ¨ā§āĻāĻžā§°āĻ
āĻ¸āĻā§°ā§āĻĒ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋāĻŦāĻ˛ā§ āĻ¸āĻāĻ¸ā§āĻĨāĻžāĻĒāĻ¨ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĨ¤ āĻ¯āĻĻāĻŋ $TARGET_PATH
āĻāĻāĻž āĻ¸ā§āĻŦāĻŽāĻžāĻāĻ¨ā§āĻ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻā§āĻŦā§āĻ˛ āĻ¸āĻā§°ā§āĻĒ āĻĢāĻžāĻāĻ˛ āĻā§āĻžā§° bin_t āĻ˛ā§āĻŦā§āĻ˛ āĻĨāĻžāĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤
āĻ¯āĻĻāĻŋ āĻ¸ā§āĻŦāĻŽāĻžāĻāĻ¨ā§āĻāĻžā§°ā§ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋāĻŦ āĻ¨āĻ˛āĻāĻž āĻāĻŋāĻŦāĻžāĻ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻžā§° āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋ āĻāĻā§, āĻ āĻāĻāĻž āĻ
āĻ¨āĻžāĻ§āĻŋāĻāĻžā§° āĻĒā§ā§°ā§ąā§āĻļā§° āĻāĻāĻāĻŋāĻ¤ āĻĻāĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤
SELinux āĻ vbetool āĻ āĻāĻāĻž āĻ
āĻ¸ā§ā§°āĻā§āĻˇāĻŋāĻ¤ āĻŽā§āĻŽā§°āĻŋ āĻāĻžā§°ā§āĻ¯ā§āĻ¯ āĻĒā§°āĻŋā§ąā§āĻļāĻ¨ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋāĻā§āĨ¤
SELinux āĻ wine āĻ āĻāĻāĻž āĻ
āĻ¸ā§ā§°āĻā§āĻˇāĻŋāĻ¤ āĻŽā§āĻŽā§°āĻŋ āĻāĻžā§°ā§āĻ¯ā§āĻ¯ āĻĒā§°āĻŋā§ąā§āĻļāĻ¨ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋāĻā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ¤ $SOURCE_PATH "$ACCESS" āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ˛ā§ $SOURCE_PATH "$ACCESS" āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ˛ā§ $SOURCE_PATH "$ACCESS" āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ āĻāĻāĻž $TARGET_PATH āĻĢāĻžāĻāĻ˛ āĻŦāĻŋā§ąā§°āĻāĻ˛ā§ $SOURCE_PATH āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $SOURCE_PATH āĻ āĻĒā§ā§°ā§āĻ $PORT_NUMBER āĻ˛āĻāĻ¤ āĻ¸āĻāĻ¯ā§āĻ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $SOURCE_PATH āĻ āĻšāĻŋāĻĒāĻ¤ āĻŽā§āĻŽā§°āĻŋā§° āĻ
āĻāĻŋāĻāĻŽ āĻ¸ā§ā§°āĻā§āĻˇāĻž
āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $SOURCE_PATH āĻ āĻĒā§ā§°ā§āĻ $PORT_NUMBER āĻ˛āĻāĻ¤ āĻ¸āĻāĻ¯ā§āĻ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $SOURCE_PATH āĻ āĻāĻāĻž āĻĢāĻžāĻāĻ˛āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ $SOURCE_TYPE ā§° āĻāĻāĻž āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ā§° āĻ¸ā§āĻ¤ā§ āĻāĻāĻž āĻĢāĻžāĻāĻ˛ āĻ¸ā§āĻˇā§āĻāĻŋ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $SOURCE_PATH āĻ $TARGET_PATH āĻ˛'āĻĄ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§ āĻ¯āĻžā§° āĻĒāĻžāĻ āĻāĻŦāĻ¨ā§āĻāĻ¨ā§° āĻĒā§ā§°ā§ā§āĻāĻ¨āĨ¤
SELinux āĻ $SOURCE_PATH āĻ āĻĒā§ā§°āĻā§ā§°āĻžāĻŽ āĻ¸ā§āĻā§āĻāĻ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻā§āĻŦā§āĻ˛ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ˛ā§ Samba ($SOURCE_PATH) "$ACCESS" āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ˛ā§ cvs ($SOURCE_PATH) "$ACCESS" āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§
SELinux āĻ $SOURCE_PATH āĻ āĻŦāĻŋāĻā§ąā§ā§āĻāĻžā§ąā§ āĻā§āĻ˛āĻ˛ā§āĻŦā§āĻ˛ āĻĢāĻžāĻāĻ˛ $TARGET_PATH āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ http āĻĄāĻŋāĻŽāĻ¨āĻ āĻŽā§āĻāĻ˛ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ $TARGET_PATH āĻ˛ā§ xen ($SOURCE_PATH) "$ACCESS" āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ¨ā§āĻ¤āĻŋā§ā§ āĻāĻāĻž httpd āĻ˛āĻŋāĻĒāĻŋāĻ āĻāĻāĻž ā§°āĻžāĻāĻšā§ā§ąāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ˛ā§ āĻ˛āĻŋāĻāĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤
SELinux āĻ¨ā§āĻ¤āĻŋā§ā§ āĻāĻāĻž httpd āĻ˛āĻŋāĻĒāĻŋāĻ āĻāĻāĻž ā§°āĻžāĻāĻšā§ā§ąāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ˛ā§ āĻ˛āĻŋāĻāĻžā§° āĻĒā§°āĻž
āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤ āĻ¯āĻĻāĻŋ httpd āĻ ā§°āĻžāĻāĻšā§ā§ąāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ˛ā§ āĻ˛āĻŋāĻāĻžā§° āĻŦāĻžāĻŦā§ āĻ¸āĻāĻšāĻ¤ āĻā§°āĻž āĻšā§ā§ąāĻž āĻ¨āĻžāĻ, āĻ
āĻāĻāĻž āĻ
āĻ¨āĻžāĻ§āĻŋāĻāĻžā§° āĻĒā§ā§°ā§ąā§āĻļā§° āĻā§āĻˇā§āĻāĻž āĻāĻāĻāĻŋāĻ¤ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤
SELinux āĻ $SOURCE āĻ āĻĢāĻžāĻāĻ˛ āĻ
āĻĨāĻŦāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ¤ āĻŽāĻžāĻāĻ¨ā§āĻ āĻā§°āĻžā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋāĻāĻŋāĻ˛
"$TARGET_PATH" (type "$TARGET_TYPE")āĨ¤
SELinux http āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻšāĻ˛ā§ httpd $ACCESS āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋāĻ˛ā§āĨ¤
SELinux āĻ ftp āĻĄāĻŋāĻŽāĻ¨āĻ āĻāĻāĻž CIFS āĻĢāĻžāĻāĻ˛āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš $ACCESS ā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋāĻ˛ā§āĨ¤
SELinux āĻ ftp āĻĄāĻŋāĻŽāĻ¨āĻ āĻāĻāĻž NFS āĻĢāĻžāĻāĻ˛āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš $ACCESS ā§° āĻĒā§°āĻž āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋāĻ˛ā§āĨ¤
$SOURCE āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨ā§ āĻšāĻŋāĻĒāĻ¤ āĻŽā§āĻŽā§°āĻŋā§° āĻ
āĻāĻŋāĻāĻŽ āĻ¸ā§ā§°āĻā§āĻˇāĻž āĻĒā§°āĻŋā§ąā§°ā§āĻ¤āĻ¨ āĻā§°āĻžā§° āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋāĻā§
(āĻāĻĻāĻžāĻšā§°āĻŖāĻ¸ā§āĻŦā§°ā§āĻĒ, malloc āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻŋ āĻāĻŦāĻ¨ā§āĻāĻŋāĻ¤)āĨ¤ āĻ āĻāĻāĻž āĻŦāĻŋāĻā§ąā§ā§ āĻ¸ā§ā§°āĻā§āĻˇāĻž
āĻ¸āĻŽāĻ¸ā§āĻ¯āĻžāĨ¤ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨āĻ¸āĻŽā§āĻšā§ āĻāĻ¨ā§ āĻā§°āĻŋāĻŦ āĻ¨āĻžāĻ˛āĻžāĻā§āĨ¤ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨āĻ¸āĻŽā§āĻš
āĻā§āĻ¤āĻŋā§āĻžāĻŦāĻž āĻā§āĻ˛āĻāĻžā§ąā§ āĻ'āĻĄ āĻā§°āĻž āĻĨāĻžāĻā§ āĻā§°ā§ āĻāĻ āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ
āĻ¨ā§ā§°ā§āĻ§ āĻā§°ā§āĨ¤
SELinux āĻŽā§āĻŽā§°āĻŋ āĻ¸ā§ā§°āĻā§āĻˇāĻž āĻĒā§°āĻŋāĻā§āĻˇāĻžāĻ¸āĻŽā§āĻš
ā§ąā§āĻŦ āĻĒā§āĻˇā§āĻ āĻžā§ āĻā§āĻ¨ā§āĻĻā§°ā§ āĻāĻ āĻĒā§ā§°ā§ā§āĻāĻ¨ā§ā§āĻ¤āĻž āĻāĻ¤ā§°ā§ā§ąāĻž āĻšāĻŦ āĻ¤āĻžā§° āĻŦāĻŋā§ąā§°āĻŖ āĻĻāĻŋā§ā§āĨ¤ āĻ¯āĻĻāĻŋ $SOURCE āĻāĻžā§°ā§āĻ¯ā§āĻ¯ āĻ¨āĻā§°ā§ āĻā§°ā§
āĻāĻĒā§āĻ¨āĻŋ āĻā§āĻžāĻ āĻāĻžā§°ā§āĻ¯ā§āĻ¯āĻ¤ āĻā§°āĻŋāĻŦ āĻŦāĻŋāĻāĻžā§°ā§, āĻāĻĒā§āĻ¨āĻŋ SELinux āĻ āĻ
āĻ¸ā§āĻĨāĻžā§ā§āĻāĻžā§ąā§ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦāĻ˛ā§ āĻ¸āĻā§°ā§āĻĒāĻŖ āĻā§°āĻŋāĻŦ
āĻĒāĻžā§°ā§ āĻ¯ā§āĻ¤āĻŋā§āĻžāĻ˛ā§āĻā§ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨ āĻ āĻŋāĻ āĻšā§ āĻ¨āĻžāĻ¯āĻžā§āĨ¤ āĻ
āĻ¨ā§āĻā§ā§°āĻš āĻā§°āĻŋ āĻāĻ āĻĒā§āĻā§āĻāĻā§° āĻŦāĻŋāĻĒā§°āĻŋāĻ¤ā§
āĻāĻāĻž āĻŦāĻžāĻ āĻ¸āĻāĻŦāĻžāĻĻ āĻāĻŽāĻž āĻĻāĻŋā§āĻāĨ¤
SELinux āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ā§° āĻŦāĻžāĻšāĻŋā§°ā§ āĻ¸āĻāĻ˛ā§ āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦāĻ˛ā§ "cp -p" ā§° āĻ¨āĻŋāĻāĻŋāĻ¨āĻž āĻāĻāĻž āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻāĨ¤
āĻāĻĒā§āĻ¨āĻŋ chcon -R -t rsync_data_t '$TARGET_PATH' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¸āĻŋāĻšāĻ¤āĻ āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛āĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦāĻ˛ā§āĨ¤ "semanage fcontext -a -t rsync_data_t '$FIX_TARGET_PATH'"
āĻāĻĒā§āĻ¨āĻŋ chcon -R -t samba_share_t '$TARGET_PATH' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¯āĻžāĻ¤ā§ āĻ¸āĻŋāĻšāĻ¤āĻ āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛āĻ¤ āĻ¸āĻā§°āĻā§āĻˇā§°āĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĨ¤ "semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH'"
āĻāĻĒā§āĻ¨āĻŋ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤āĻ chcon -t public_content_t '$TARGET_PATH' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽā§° āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¯āĻžāĻ¤ā§ āĻ¸āĻŋāĻšāĻ¤āĻ āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛āĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĨ¤ "semanage fcontext -a -t public_content_t '$FIX_TARGET_PATH'"
āĻāĻĒā§āĻ¨āĻŋ chcon -t swapfile_t '$TARGET_PATH' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¯āĻžāĻ¤ā§ āĻ¸āĻŋāĻšāĻ¤āĻ āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛āĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĨ¤ "semanage fcontext -a -t swapfile_t '$FIX_TARGET_PATH'"
āĻāĻĒā§āĻ¨āĻŋ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤āĻ chcon -t virt_image_t '$TARGET_PATH' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¯āĻžāĻ¤ā§ āĻ¸āĻŋāĻšāĻ¤āĻ āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§° āĻ˛ā§āĻŦā§āĻ˛āĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĨ¤ "semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH'"
āĻāĻĒā§āĻ¨āĻŋ chcon -t xen_image_t '$TARGET_PATH' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
āĻāĻĒā§āĻ¨āĻŋ āĻ˛āĻāĻ¤ā§ āĻāĻŋāĻ¸ā§āĻā§āĻŽā§° āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻ¯āĻžāĻ¤ā§ āĻ¸āĻŋāĻšāĻ¤āĻ āĻāĻāĻž āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻĒā§āĻ¨ā§°āĻ˛ā§āĻŦā§āĻ˛āĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĨ¤ "semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH'"
āĻāĻĒā§āĻ¨āĻŋ āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŽāĻĒāĻŋāĻāĻāĻžā§° āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻĒā§āĻ¨ā§° āĻ˛ā§āĻŦā§āĻ˛ āĻā§°āĻŋāĻŦāĻ˛ā§
āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻāĻŽāĻžāĻ¨ā§āĻĄāĻ ā§°ā§āĻ āĻšāĻŋāĻāĻžāĻĒā§ āĻĒā§ā§°ā§ā§°āĻŖ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§: "touch /.autorelabel; reboot"
āĻāĻĒā§āĻ¨āĻŋ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦāĻ˛ā§ āĻāĻāĻž āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻ¨ā§āĻ¤āĻŋ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ¸ā§āĻāĻ¨ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§
- FAQ āĻāĻžāĻāĻ
āĻ
āĻ¨ā§āĻā§ā§°āĻš āĻā§°āĻŋ āĻāĻāĻž āĻŦāĻžāĻ āĻ¸āĻāĻŦāĻžāĻĻ āĻāĻŽāĻž āĻĻāĻŋā§āĻāĨ¤
āĻāĻĒā§āĻ¨āĻŋ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦāĻ˛ā§ āĻāĻāĻž āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻ¨ā§āĻ¤āĻŋ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ¸ā§āĻāĻ¨ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§
- FAQ āĻāĻžāĻāĻ
āĻāĻĒā§āĻ¨āĻŋ āĻāĻ āĻĢāĻžāĻāĻ˛āĻ˛ā§ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĒā§āĻ¨ā§°ā§āĻĻā§āĻ§āĻžā§° āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ
restorecon āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋāĨ¤ restorecon '$SOURCE_PATH'.
āĻāĻĒā§āĻ¨āĻŋ restorecon āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻ
āĻŦāĻŋāĻāĻ˛ā§āĻĒāĻŋāĻ¤ āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤āĻ āĻāĻ āĻĢāĻžāĻāĻ˛āĻ˛ā§ āĻĒā§āĻ¨ā§°āĻāĻĻā§āĻ§āĻžā§°
āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦāĨ¤ restorecon '$TARGET_PATH', āĻ¯āĻĻāĻŋ āĻāĻ āĻĢāĻžāĻāĻ˛ āĻāĻāĻž āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋ āĻšā§,
āĻāĻĒā§āĻ¨āĻŋ restorecon -R '$TARGET_PATH' āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻŋ āĻŦāĻžā§°āĻāĻŦāĻžā§° āĻĒā§āĻ¨ā§°āĻāĻĻā§āĻ§āĻžā§° āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦāĨ¤
āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻā§ā§°ā§āĻ¤ā§°āĻāĻžā§ąā§ āĻ¸āĻžāĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻšāĻŦ āĻĒāĻžā§°ā§!
āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻā§ā§°ā§āĻ¤ā§°āĻāĻžā§ąā§ āĻ¸āĻžāĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻšāĻŦ āĻĒāĻžā§°ā§! $SOURCE_PATH āĻ āĻ¨āĻŋāĻŽā§āĻ¨ āĻāĻžā§°āĻ¨ā§āĻ˛ āĻŽā§āĻŽā§°āĻŋ mmap āĻā§°āĻžā§° āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋāĻāĻŋāĻ˛āĨ¤
āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻā§ā§°āĻ¤ā§°āĻāĻžā§ąā§ āĻ¸āĻžāĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻšāĻŦ āĻĒāĻžā§°ā§! $SOURCE_PATH āĻ āĻāĻāĻž āĻāĻžā§°āĻ¨ā§āĻ˛ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ˛'āĻĄ āĻā§°āĻžā§° āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋāĻāĻŋāĻ˛āĨ¤
āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻā§ā§°ā§āĻ¤ā§°āĻāĻžā§ąā§ āĻ¸āĻžāĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻšāĻŦ āĻĒāĻžā§°ā§! $SOURCE_PATH āĻ SELinux āĻŦāĻ˛ā§ąā§āĻā§°āĻŖ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻžā§° āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋāĻāĻŋāĻ˛āĨ¤
āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ āĻā§ā§°ā§āĻ¤ā§°āĻāĻžā§ąā§ āĻ¸āĻžāĻ˛ āĻ¸āĻžāĻ˛āĻ¨āĻŋ āĻšāĻŦ āĻĒāĻžā§°ā§! $SOURCE_PATH āĻ āĻāĻžā§°āĻ¨ā§āĻ˛ āĻ¸āĻā§°ā§āĻĒ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻžā§° āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋāĻāĻŋāĻ˛āĨ¤
IPV6 āĻ¸āĻ āĻŋāĻāĻāĻžā§ąā§ āĻ
āĻ¸āĻžāĻŽā§°ā§āĻĨāĻŦāĻžāĻ¨ āĻā§°āĻāĨ¤
āĻšā§ mozplluger āĻĒā§āĻā§āĻāĻāĻ 'yum remove mozplugger' āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ āĻāĻ¤ā§°āĻžāĻāĻ
āĻ
āĻĨāĻŦāĻž Firefox āĻĒā§āĻ˛āĻžāĻāĻŋāĻ¨āĻ¸āĻŽā§āĻšāĻ¤ SELinux enforcement āĻŦāĻ¨ā§āĻ§ āĻā§°āĻāĨ¤
setsebool -P unconfined_mozilla_plugin_transition 0
āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ āĻĒā§ā§°āĻā§ā§°āĻžāĻŽāĻ āĻĒā§ā§°āĻļā§āĻ¨āĻ¤ āĻāĻ˛āĻžāĻŦāĻ˛ā§ āĻ¨āĻŋā§°ā§āĻ§āĻžā§°āĻ¨ āĻā§°āĻŋāĻā§ āĻāĻĒā§āĻ¨āĻžā§° āĻāĻ āĻāĻžā§°ā§āĻ¯ā§āĻ¯āĻ āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ
āĻĻāĻŋā§āĻžā§° āĻĒā§ā§°ā§ā§āĻāĻ¨ āĻšāĻŦ āĻā§āĻžāĻ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻļāĻžā§°ā§āĻ¤ āĻā§°āĻŋāĻŦ āĻĒā§°āĻž āĻ¯āĻžāĻŦ
āĻāĻā§āĻ¸āĻŋāĻāĻŋāĻāĻ āĻā§°āĻŋ:
# setsebool -P mmap_low_allowed 1
āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻž %s āĻ¤ āĻāĻāĻž āĻ§ā§°āĻŖ āĻ¸ā§āĻĨāĻžāĻĒāĻ¨ āĻā§°āĻŋāĻŦ āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋāĻā§ āĻ¯āĻŋ āĻāĻāĻž āĻĢāĻžāĻāĻ˛ āĻ§ā§°āĻŖ āĻ¨āĻšā§āĨ¤ āĻā§āĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¨āĻžāĻ, āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻž āĻĢāĻžāĻāĻ˛ āĻ§ā§°āĻŖ āĻ§āĻžā§°ā§āĻ¯ā§āĻ¯ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ seinfo āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻŋ āĻ¸āĻāĻ˛ā§ āĻĢāĻžāĻāĻ˛ āĻ§ā§°āĻŖ āĻ¤āĻžāĻ˛āĻŋāĻāĻžāĻā§āĻā§āĻ¤ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦāĨ¤
seinfo -afile_type -x
"$BOOLEAN" āĻā§°ā§
"$WRITE_BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻ¸āĻŽā§āĻšāĻ true āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻ˛ā§ āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§ąāĻž āĻ¯āĻžāĻŦ:
"setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1".
āĻ¸āĻ¤ā§°ā§āĻāĻŦāĻžā§°ā§āĻ¤āĻž: "$WRITE_BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻ true āĻ˛ā§ āĻ¸āĻāĻšāĻ¤āĻŋ āĻā§°āĻŋāĻ˛ā§
ftp āĻĄāĻŋāĻŽāĻ¨āĻ āĻ¸āĻāĻ˛ā§ ā§°āĻžāĻāĻšā§ā§ąāĻž āĻ¸āĻŽāĻ˛āĻ˛ā§ (āĻ§ā§°āĻŖ public_content_t ā§° āĻ¸ā§āĻ¤ā§
āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻā§°ā§ āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ¸āĻŽā§āĻš ) āĻ˛āĻŋāĻāĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋā§āĻž āĻšāĻŦ CIFS āĻĢāĻžāĻāĻ˛āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¸āĻŽā§āĻšāĻ¤
āĻĢāĻžāĻāĻ˛āĻ¸āĻŽā§āĻš āĻā§°ā§ āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ¸āĻŽā§āĻšāĻ˛ā§ āĻ˛āĻŋāĻāĻžā§° āĻ
āĻ¤āĻŋā§°āĻŋāĻā§āĻ¤ā§āĨ¤ # semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH'
# restorecon -v '$FIX_TARGET_PATH' # semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH%s'
# restorecon %s -v '$FIX_TARGET_PATH' # semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH'
# restorecon -v '$FIX_TARGET_PATH' # semanage port -a -t %s -p %s $PORT_NUMBER # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER
āĻ¯āĻ¤ PORT_TYPE āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ā§° āĻāĻāĻž: %sāĨ¤ āĻāĻāĻž āĻĒā§ā§°āĻā§ā§°āĻŋā§āĻžā§ āĻšā§āĻ¤ā§ āĻāĻĒā§āĻ¨āĻžā§° āĻāĻŋāĻ¸ā§āĻā§āĻŽ āĻšā§āĻ āĻā§°āĻžā§° āĻā§āĻˇā§āĻāĻž āĻā§°āĻŋ āĻāĻā§āĨ¤ net.ipv6.conf.all.disable_ipv6 = 1 āĻ
/etc/sysctl.conf āĻ˛ā§
āĻ¯ā§āĻ āĻā§°āĻ
āĻāĻĒā§āĻ¨āĻžā§° āĻ¸ā§ā§°āĻā§āĻˇāĻž āĻĒā§ā§°āĻļāĻžāĻ¸āĻā§° āĻ¸ā§āĻ¤ā§ āĻ¯ā§āĻāĻžāĻ¯ā§āĻ āĻā§°āĻ āĻā§°ā§ āĻāĻ āĻŦāĻŋāĻˇā§ā§ āĻ¸ā§āĻā§āĻ¤ āĻā§°āĻāĨ¤ āĻĒā§āĻ¨ā§°ā§āĻĻā§āĻ§āĻžā§°
āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻĒā§āĻ¨ā§°ā§āĻĻā§āĻ§āĻžā§° āĻā§°āĻ SELinux āĻ $SOURCE_PATH "$ACCESS" āĻ
āĻāĻŋāĻāĻŽ āĻĒā§ā§°āĻ¤āĻŋā§°ā§āĻ§ āĻā§°āĻŋ āĻāĻā§āĨ¤ āĻŽā§āĻŽā§°āĻŋ āĻ¸ā§ā§°āĻā§āĻˇāĻž āĻŦāĻ¨ā§āĻ§ āĻā§°āĻ āĻ
āĻ§āĻŋāĻ āĻŦāĻŋā§ąā§°āĻŖā§° āĻŦāĻžāĻŦā§ āĻāĻĒā§āĻ¨āĻŋ '%s' man āĻĒā§āĻˇā§āĻ āĻž āĻĒā§āĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤ āĻāĻĒā§āĻ¨āĻžāĻ āĻšā§āĻ¤ā§ āĻšā§āĻ āĻā§°āĻž āĻšā§āĻā§āĨ¤ āĻāĻĒā§āĻ¨āĻŋ '%s' āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ¸āĻžāĻŽā§°ā§āĻĨāĻŦāĻžāĻ¨ āĻā§°āĻŋ SELinux āĻ āĻā§āĻžā§° āĻŦāĻŋāĻˇā§ā§ āĻāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤
āĻāĻĒā§āĻ¨āĻŋ $FIX_TARGET_PATH āĻ¤ āĻ˛ā§āĻŦā§āĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻāĻĒā§āĻ¨āĻŋ $TARGET_BASE_PATH ā§° āĻ˛ā§āĻŦā§āĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻāĻĒā§āĻ¨āĻŋ $TARGET_BASE_PATH to public_content_t āĻ
āĻĨāĻŦāĻž public_content_rw_t āĻ¤ āĻ˛ā§āĻŦā§āĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻ˛ā§āĻŦā§āĻ˛āĻ $TARGET_BASE_PATH' āĻ¤ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻāĻĒā§āĻ¨āĻŋ $TARGET_PATH ā§° āĻ˛ā§āĻŦā§āĻ˛āĻ āĻāĻāĻž āĻ¸āĻĻā§āĻļ āĻ¯āĻ¨ā§āĻ¤ā§ā§°ā§° āĻ§ā§°āĻŖāĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ '$FIX_TARGET_PATH' āĻ¤ āĻ˛ā§āĻŦā§āĻ˛ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ' āĻāĻĒā§āĻ¨āĻŋ āĻā§āĻžāĻ āĻāĻāĻž āĻŦāĻžāĻ āĻšāĻŋāĻāĻžāĻĒā§ āĻ¸āĻāĻŦāĻžāĻĻ āĻĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤
āĻāĻĒā§āĻ¨āĻŋ āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦāĻ˛ā§ āĻāĻāĻž āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻ¨ā§āĻ¤āĻŋ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ¸ā§āĻāĻ¨ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻā§āĻžāĻ āĻāĻāĻž āĻŦāĻžāĻ āĻšāĻŋāĻāĻžāĻĒā§ āĻ¸āĻāĻŦāĻžāĻĻ āĻĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤
āĻāĻĒā§āĻ¨āĻŋ āĻāĻ āĻ
āĻāĻŋāĻāĻŽ āĻŦāĻŋāĻļā§āĻ˛ā§āĻˇāĻŖā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¨āĻŋāĻĻāĻŋāĻŦāĻ˛ā§ āĻāĻāĻž āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻ¨ā§āĻ¤āĻŋ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ¸ā§āĻāĻ¨ āĻā§°āĻŋāĻŦ āĻĒāĻžā§°ā§āĨ¤ execstack -c %s āĻ¯āĻĻāĻŋ āĻāĻĒā§āĻ¨āĻŋ āĻāĻžā§ąā§ āĻāĻĒā§āĻ¨āĻžāĻ āĻšā§āĻ āĻā§°āĻž āĻšā§āĻā§ setsebool -P %s %s āĻ¨āĻŋā§āĻŽ āĻ¨āĻŽāĻ¨āĻž āĻĢāĻžāĻāĻ˛ā§° āĻĒāĻĨ āĻ¤āĻĨā§āĻ¯ āĻĒā§ā§°āĻžāĻĒā§āĻ¤ āĻā§°āĻŋāĻŦāĻ˛ā§ āĻā§°ā§ āĻ¤ā§ā§°ā§āĻāĻŋāĻ āĻāĻā§ āĻ¸ā§āĻāĻ¨ āĻā§°āĻŋāĻŦāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖ āĻ¸āĻŽā§āĻĒāĻžāĻĻāĻ¨ āĻā§°āĻŽā§āĻ āĻā§°āĻāĨ¤ SELinux āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ā§° āĻŦāĻžāĻšāĻŋā§°ā§ āĻ¸āĻāĻ˛ā§ āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻŋāĻŦāĻ˛ā§ "cp -p" ā§° āĻ¨āĻŋāĻāĻŋāĻ¨āĻž āĻāĻāĻž āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻāĨ¤ āĻāĻĒā§āĻ¨āĻŋ restorecon āĻāĻ˛āĻžāĻŦ āĻĒāĻžā§°āĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻ¨ āĻšā§āĻāĻžā§° āĻĻā§āĻŦāĻžā§°āĻž āĻāĻā§ā§°āĻŽāĻŖā§° āĻ¸āĻ¨ā§āĻŽā§āĻāĻŋāĻ¨ āĻšāĻŦ āĻĒāĻžā§°ā§, āĻ¯āĻŋāĻšā§āĻ¤ā§ āĻā§āĻĒāĻŖ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨āĻ¸āĻŽā§āĻšā§° āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻā§āĻ¤āĻŋā§āĻžāĻ āĻĒā§ā§°ā§ā§āĻāĻ¨ āĻ¨āĻšā§āĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻ¨ āĻšā§āĻāĻžā§° āĻĻā§āĻŦāĻžā§°āĻž āĻāĻā§ā§°āĻŽāĻŖā§° āĻ¸āĻ¨ā§āĻŽā§āĻāĻŋāĻ¨ āĻšāĻŦ āĻĒāĻžā§°ā§, āĻ¯āĻŋāĻšā§āĻ¤ā§ āĻā§āĻĒāĻŖ āĻāĻĒā§āĻ˛āĻŋāĻā§āĻāĻ¨āĻ¸āĻŽā§āĻšā§° āĻāĻ āĻ
āĻāĻŋāĻāĻŽā§° āĻĒā§ā§°ā§ā§āĻāĻ¨ āĻ¨āĻšā§āĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻ¨ āĻšā§āĻāĻžā§° āĻĻā§āĻŦāĻžā§°āĻž āĻāĻā§ā§°āĻŽāĻŖā§° āĻ¸āĻ¨ā§āĻŽā§āĻāĻŋāĻ¨ āĻšāĻŦ āĻĒāĻžā§°ā§, āĻ āĻāĻāĻž āĻ
āĻ¤āĻŋ āĻŦāĻŋāĻĒāĻĻāĻāĻ¨āĻ āĻ
āĻāĻŋāĻāĻŽāĨ¤ āĻāĻĒā§āĻ¨āĻŋ $TARGET_PATH āĻ¤ āĻ˛ā§āĻŦā§āĻ˛āĻŋāĻ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻ˛ā§āĻŦā§āĻ˛āĻ¸āĻŽā§āĻš āĻ āĻŋāĻ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ cert āĻĢāĻžāĻāĻ˛āĻ ~/.cert āĻĄāĻžāĻā§°ā§āĻāĻā§°āĻŋāĻ˛ā§ āĻ¸ā§āĻĨāĻžāĻ¨āĻžāĻ¨ā§āĻ¤ā§° āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻž āĻŦā§āĻ§ āĻĢāĻžāĻāĻ˛ āĻ˛ā§āĻŦā§āĻ˛ āĻŦāĻžāĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ mozplugger āĻĒā§āĻā§āĻāĻ āĻāĻ¤ā§°āĻžāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻā§āĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĻāĻŋāĻŦāĻ˛ā§ āĻāĻĒā§āĻ¨āĻŋ SELinux āĻ¸āĻāĻ¸ā§āĻĨāĻžāĻĒāĻ¨ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻāĻĒā§āĻ¨āĻŋ SELinux āĻ āĻā§āĻžā§° āĻŦāĻŋāĻˇā§ā§ āĻ¸ā§āĻā§āĻ¤ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻā§ āĻāĻĒā§āĻ¨āĻŋ SELinux ā§° āĻā§āĻžā§° āĻŦāĻŋāĻˇā§ā§ 'httpd_unified' āĻā§°ā§ 'http_enable_cgi' āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻ¸āĻŽā§āĻš āĻ¸āĻžāĻŽā§°ā§āĻĨāĻŦāĻžāĻ¨ āĻā§°āĻŋ āĻāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻāĻĒā§āĻ¨āĻŋ vbetool_mmap_zero_ignore āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ¸āĻžāĻŽā§°ā§āĻĨāĻŦāĻžāĻ¨ āĻā§°āĻŋ SELinux āĻ āĻā§āĻžā§° āĻŦāĻŋāĻˇā§ā§ āĻāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ SELinux āĻ āĻā§āĻžā§° āĻŦāĻŋāĻˇā§ā§ wine_mmap_zero_ignore āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ¸āĻžāĻŽā§°ā§āĻĨāĻŦāĻžāĻ¨ āĻā§°āĻŋ āĻāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ Chrome āĻĒā§āĻ˛āĻžāĻāĻŋāĻ¨āĻ¸āĻŽā§āĻšāĻ¤ SELinux āĻ¨āĻŋā§āĻ¨ā§āĻ¤ā§ā§°āĻŖāĻ¸āĻŽā§āĻš āĻŦāĻ¨ā§āĻ§ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ Firefox āĻĒā§āĻ˛āĻžāĻāĻŋāĻ¨āĻ¸āĻŽā§āĻšāĻ¤ SELinux āĻ¨āĻŋā§āĻ¨ā§āĻ¤ā§ā§°āĻ¨āĻ¸āĻŽā§āĻš āĻŦāĻ¨ā§āĻ§ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻā§āĻžāĻ¤ āĻ˛ā§āĻŦā§āĻ˛āĻ¸āĻŽā§āĻš āĻ¯ā§āĻ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ $TARGET_PATH āĻ¤ āĻ˛ā§āĻŦā§āĻ˛āĻ public_content_rw_t āĻ˛ā§ āĻ¸āĻ˛āĻ¨āĻŋ āĻā§°āĻŋāĻŦ, āĻā§°ā§ āĻŦāĻŋāĻā§ąā§ā§āĻāĻžā§ąā§ allow_httpd_sys_script_anon_write āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ
āĻ¨ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻ¸āĻŽā§āĻĒā§ā§°ā§āĻŖāĻāĻžā§ąā§ āĻĒā§āĻ¨ā§° āĻ˛ā§āĻŦā§āĻ˛ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻž āĻŦāĻžāĻ āĻāĻŽāĻž āĻĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤
āĻ āĻŦāĻŋāĻā§ąā§ā§āĻāĻžā§ąā§ āĻŦāĻŋāĻĒāĻĻāĻāĻ¨āĻ āĻ
āĻāĻŋāĻāĻŽāĨ¤ āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻž āĻŦāĻžāĻ āĻāĻŽāĻž āĻĻāĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻ āĻŦāĻŋāĻā§ąā§ā§āĻāĻžā§ąā§ āĻŦāĻŋāĻĒāĻĻāĻāĻ¨āĻ āĻ
āĻāĻŋāĻāĻŽāĨ¤ āĻāĻĒā§āĻ¨āĻŋ /proc/sys/net/ipv6/conf/all/disable_ipv6 to āĻ 1 āĻ˛ā§ āĻ¸āĻāĻšāĻ¤āĻŋ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻā§°ā§ āĻŽāĻĄāĻŋāĻāĻ˛āĻ āĻŦā§āĻ˛ā§āĻāĻ˛āĻŋāĻ¸ā§āĻ āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦ āĻāĻĒā§āĻ¨āĻŋ āĻāĻāĻž āĻŦā§āĻ˛ā§āĻ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻā§°āĻŋāĻŦ āĻ˛āĻžāĻāĻŋāĻŦāĨ¤ āĻāĻĒā§āĻ¨āĻžāĻ āĻ˛āĻā§āĻˇā§āĻ¯ āĻĢāĻžāĻāĻ˛āĻāĻŋāĻ¸ā§āĻā§āĻŽāĻ¤ SELinux āĻĒā§°āĻŋāĻĒā§ā§°ā§āĻā§āĻˇāĻ¤āĻŋāĻ¤ āĻ¸āĻā§°āĻā§āĻˇāĻŖ āĻā§°āĻžā§° āĻ
āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¨āĻžāĻāĨ¤ āĻāĻĒā§āĻ¨āĻŋ execstack āĻĢā§āĻ˛ā§āĻ āĻĒā§°āĻŋāĻˇā§āĻāĻžā§° āĻā§°āĻŋ āĻāĻžāĻŦ āĻ˛āĻžāĻā§ āĻ¯āĻĻāĻŋ $SOURCE_PATH āĻ¸āĻ āĻŋāĻāĻāĻžā§ąā§ āĻāĻžā§°ā§āĻ¯ā§āĻ¯ āĻā§°ā§āĨ¤
āĻā§āĻžāĻ %s āĻ¤ āĻāĻāĻž āĻŦāĻžāĻ āĻšāĻŋāĻāĻžāĻĒā§ āĻ¸āĻāĻŦāĻžāĻĻ āĻā§°āĻāĨ¤
āĻāĻĒā§āĻ¨āĻŋ exestack āĻĢā§āĻ˛ā§āĻāĻ āĻĒā§°āĻŋāĻˇā§āĻāĻžā§° āĻā§°āĻŋāĻŦ āĻĒāĻžā§°āĻŋāĻŦ āĻĒā§ā§°ā§ā§°āĻŖ āĻā§°āĻŋ: