⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.177
Server IP:
50.6.168.112
Server:
Linux server-617809.webnetzimbabwe.com 5.14.0-570.25.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 9 04:57:09 EDT 2025 x86_64
Server Software:
Apache
PHP Version:
8.4.10
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
share
/
locale
/
bn_IN
/
LC_MESSAGES
/
View File Name :
setroubleshoot-plugins.mo
Ū s ´ L Ā ė Á 1 Ž V ā g 7 h | ( Ž ŧ t V I Ë Ŋ , Ķ / . 0 b _  Ļ Ú Ũ _ S ë P ?! N ! N ß! G ." ] v" O Ô" k $# R # q ã# f U$ V ŧ$ V % S j% j ž% B )& T l& ^ Á& Á ' t â' ? W( Z ( Y ō( L) X Û+ 4, E- X. n/ x0 1 z 2 š 3 Į3 į b4 3 J5 e ~5 _ ä5 e D6 f Ē6 7 Ā .7 ¸ ī7 à ¨8 l9 \ đ: b M; \ °; c < 7 q< < Š< : æ< != 1= 4 A= v= , = ž= 0 Ú= 1 > ] => 2 > K Î> 2 ? ] M? c Ģ? @ , @ L@ d _@ N Ä@ A _ +A ] A E éA - /B ]B 4 vB ! ĢB ' ÍB $ õB C _ ;C R C O îC : >D yD D #E B >E A E ^ ÃE s "F F Ž -G $ ÜH K N Ø N Ü \O đ 9P y *Q Å ¤S jW Ú íX # ČY ė\ u m^ Í ã` ė ąc P i īl 1 o đ 9u W *z č } å k~ ŧ Q ŧ Ĩ Ë ˙ q ŧ q æ . ŗ É ß ų é Ä ã  ¨ Ņ k = ¯ × ū ķ ī z j í ė ÷ ä ũ é 8 į : = [ 1 8 ËĄ 6 ¤ ;Ļ Q§ ⨠ĩ Ē ¸Ģ >Ŧ ( Y : Ž Ŋ¯ R Ū° > 1ą Ö p˛ Î G´ ļ \ )š b š \ éš Ú Fē !ģ ` ļģ ä ŧ D üŧ D AŊ { Ŋ a ž k dž h Đž Z 9ŋ [ ŋ đŋ \ Ā ¤ ëĀ \ Á íÁ úÂ Ä X $Ä }Ä # Ä ķ ´Å : ¨Æ ãÆ ņĮ Ņ ˙Č Y ŅÉ N +Ę zĘ d Ë S jË žË [ CĖ ° Ė Ē PÍ ûÍ ŠÎ \ 8Ī æ Ī g |Đ Į äĐ ß ŦŅ ā Ō mĶ t |Ô ? s D + g p Z _ 9 # P / ( - 2 c ^ @ ! J = 4 % b A Q i * a O n 1 7 6 m 0 5 " > ) ' U , V . : N & ` Y 8 [ \ H h M C E r j S f k X ; ] l < R d q F B L G $ T I K 3 W e o dac_override and dac_read_search capabilities usually indicates that the root process does not have access to a file based on the permission flags. This usually mean you have some file with the wrong ownership/permissions on it. SELinux denied access requested by $SOURCE. It is not expected that this access is required by $SOURCE and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Attempt restorecon -v '$TARGET_PATH' or chcon -t SIMILAR_TYPE '$TARGET_PATH' Changing the "$BOOLEAN" boolean to true will allow this access: "setsebool -P $BOOLEAN=1" Changing the "$BOOLEAN" boolean to true will allow this access: "setsebool -P $BOOLEAN=1." Changing the "allow_ftpd_use_nfs" boolean to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1." Changing the file_context to mnt_t will allow mount to mount the file system: "chcon -t mnt_t '$TARGET_PATH'." You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t mnt_t '$FIX_TARGET_PATH'" If httpd scripts should be allowed to write to public directories you need to turn on the $BOOLEAN boolean and change the file context of the public directory to public_content_rw_t. Read the httpd_selinux man page for further information: "setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>" You must also change the default file context labeling files on the system in order to preserve public directory labeling even on a full relabel. "semanage fcontext -a -t public_content_rw_t <path>" If you want $SOURCE to continue, you must turn on the $BOOLEAN boolean. Note: This boolean will affect all applications on the system. If you want httpd to send mail you need to turn on the $BOOLEAN boolean: "setsebool -P $BOOLEAN=1" If you want to allow $SOURCE to bind to port $PORT_NUMBER, you can execute # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER where PORT_TYPE is one of the following: %s. If this system is running as an NIS Client, turning on the allow_ypbind boolean may fix the problem. setsebool -P allow_ypbind=1. If you want to allow $SOURCE to connect to $PORT_NUMBER, you can execute # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER where PORT_TYPE is one of the following: %s. If you want to change the file context of $TARGET_PATH so that the automounter can execute it you can execute "chcon -t bin_t $TARGET_PATH". If you want this to survive a relabel, you need to permanently change the file context: execute "semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'". SELinux denied access requested by $SOURCE. It is not expected that this access is required by $SOURCE and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. SELinux denied access requested by the $SOURCE command. It looks like this is either a leaked descriptor or $SOURCE output was redirected to a file it is not allowed to access. Leaks usually can be ignored since SELinux is just closing the leak and reporting the error. The application does not use the descriptor, so it will run properly. If this is a redirection, you will not get output in the $TARGET_PATH. You should generate a bugzilla on selinux-policy, and it will get routed to the appropriate package. You can safely ignore this avc. SELinux denied access to $TARGET_PATH requested by $SOURCE. $TARGET_PATH has a context used for sharing by a different program. If you would like to share $TARGET_PATH from $SOURCE also, you need to change its file context to public_content_t. If you did not intend to allow this access, this could signal an intrusion attempt. SELinux denied cvs access to $TARGET_PATH. If this is a CVS repository it needs to have a file context label of cvs_data_t. If you did not intend to use $TARGET_PATH as a CVS repository it could indicate either a bug or it could signal an intrusion attempt. SELinux denied xen access to $TARGET_PATH. If this is a XEN image, it has to have a file context label of xen_image_t. The system is setup to label image files in directory /var/lib/xen/images correctly. We recommend that you copy your image file to /var/lib/xen/images. If you really want to have your xen image files in the current directory, you can relabel $TARGET_PATH to be xen_image_t using chcon. You also need to execute semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH' to add this new path to the system defaults. If you did not intend to use $TARGET_PATH as a xen image it could indicate either a bug or an intrusion attempt. SELinux has denied the $SOURCE access to potentially mislabeled files $TARGET_PATH. This means that SELinux will not allow httpd to use these files. If httpd should be allowed this access to these files you should change the file context to one of the following types, %s. Many third party apps install html files in directories that SELinux policy cannot predict. These directories have to be labeled with a file context which httpd can access. SELinux has denied the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH. Automounter can be setup to execute configuration files. If $TARGET_PATH is an automount executable configuration file it needs to have a file label of bin_t. If automounter is trying to execute something that it is not supposed to, this could indicate an intrusion attempt. SELinux has prevented vbetool from performing an unsafe memory operation. SELinux has prevented wine from performing an unsafe memory operation. SELinux is preventing $SOURCE_PATH "$ACCESS" access on $TARGET_PATH. SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH. SELinux is preventing $SOURCE_PATH "$ACCESS" to $TARGET_PATH. SELinux is preventing $SOURCE_PATH access to a leaked $TARGET_PATH file descriptor. SELinux is preventing $SOURCE_PATH from binding to port $PORT_NUMBER. SELinux is preventing $SOURCE_PATH from changing the access protection of memory on the heap. SELinux is preventing $SOURCE_PATH from connecting to port $PORT_NUMBER. SELinux is preventing $SOURCE_PATH from creating a file with a context of $SOURCE_TYPE on a filesystem. SELinux is preventing $SOURCE_PATH from loading $TARGET_PATH which requires text relocation. SELinux is preventing $SOURCE_PATH from making the program stack executable. SELinux is preventing Samba ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH. SELinux is preventing cvs ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH SELinux is preventing the $SOURCE_PATH from executing potentially mislabeled files $TARGET_PATH. SELinux is preventing the http daemon from sending mail. SELinux is preventing xen ($SOURCE_PATH) "$ACCESS" access to $TARGET_PATH. SELinux policy is preventing an httpd script from writing to a public directory. SELinux policy is preventing an httpd script from writing to a public directory. If httpd is not setup to write to public directories, this could signal an intrusion attempt. SELinux prevented $SOURCE from mounting on the file or directory "$TARGET_PATH" (type "$TARGET_TYPE"). SELinux prevented httpd $ACCESS access to http files. SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem. SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. The $SOURCE application attempted to change the access protection of memory on the heap (e.g., allocated using malloc). This is a potential security problem. Applications should not be doing this. Applications are sometimes coded incorrectly and request this permission. The <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a> web page explains how to remove this requirement. If $SOURCE does not work and you need it to work, you can configure SELinux temporarily to allow this access until the application is fixed. Please file a bug report against this package. Use a command like "cp -p" to preserve all permissions except SELinux context. You can alter the file context by executing chcon -R -t rsync_data_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t rsync_data_t '$FIX_TARGET_PATH'" You can alter the file context by executing chcon -R -t samba_share_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH'" You can alter the file context by executing chcon -t public_content_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t public_content_t '$FIX_TARGET_PATH'" You can alter the file context by executing chcon -t swapfile_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t swapfile_t '$FIX_TARGET_PATH'" You can alter the file context by executing chcon -t virt_image_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH'" You can alter the file context by executing chcon -t xen_image_t '$TARGET_PATH' You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH'" You can execute the following command as root to relabel your computer system: "touch /.autorelabel; reboot" You can generate a local policy module to allow this access - see <a href="http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385">FAQ</a> Please file a bug report. You can generate a local policy module to allow this access - see <a href="http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385">FAQ</a> You can restore the default system context to this file by executing the restorecon command. restorecon '$TARGET_PATH', if this file is a directory, you can recursively restore using restorecon -R '$TARGET_PATH'. Your system may be seriously compromised! Your system may be seriously compromised! $SOURCE_PATH attempted to mmap low kernel memory. Your system may be seriously compromised! $SOURCE_PATH tried to load a kernel module. Your system may be seriously compromised! $SOURCE_PATH tried to modify SELinux enforcement. Your system may be seriously compromised! $SOURCE_PATH tried to modify kernel configuration. Disable IPV6 properly. Either remove the mozplluger package by executing 'yum remove mozplugger' Or turn off enforcement of SELinux over the Firefox plugins. setsebool -P unconfined_mozilla_plugin_transition 0 If you decide to continue to run the program in question you will need to allow this operation. This can be done on the command line by executing: # setsebool -P mmap_low_allowed 1 You tried to place a type on a %s that is not a file type. This is not allowed, you must assigne a file type. You can list all file types using the seinfo command. seinfo -afile_type -x Changing the "$BOOLEAN" and "$WRITE_BOOLEAN" booleans to true will allow this access: "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1". warning: setting the "$WRITE_BOOLEAN" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on CIFS filesystems. # semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH' # restorecon -v '$FIX_TARGET_PATH' # semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH%s' # restorecon %s -v '$FIX_TARGET_PATH' # semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH' # restorecon -v '$FIX_TARGET_PATH' # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER where PORT_TYPE is one of the following: %s. A process might be attempting to hack into your system. Add net.ipv6.conf.all.disable_ipv6 = 1 to /etc/sysctl.conf Contact your security administrator and report this issue. Restore Context Restore Context SELinux is preventing $SOURCE_PATH "$ACCESS" access. Turn off memory protection You can read '%s' man page for more details. You might have been hacked. You need to change the label on $FIX_TARGET_PATH You need to change the label on $TARGET_BASE_PATH You need to change the label on $TARGET_BASE_PATH to public_content_t or public_content_rw_t. You need to change the label on $TARGET_BASE_PATH' You need to change the label on $TARGET_PATH to a type of a similar device. You need to change the label on '$FIX_TARGET_PATH' You should report this as a bug. You can generate a local policy module to allow this access. You should report this as a bug. You can generate a local policy module to dontaudit this access. execstack -c %s if you think that you might have been hacked setsebool -P %s %s turn on full auditing to get path information about the offending file and generate the error again. use a command like "cp -p" to preserve all permissions except SELinux context. you can run restorecon. you may be under attack by a hacker, since confined applications should never need this access. you may be under attack by a hacker, since confined applications should not need this access. you may be under attack by a hacker, this is a very dangerous access. you must change the labeling on $TARGET_PATH. you must fix the labels. you must move the cert file to the ~/.cert directory you must pick a valid file label. you must remove the mozplugger package. you must setup SELinux to allow this you must tell SELinux about this you must tell SELinux about this by enabling the 'httpd_unified' and 'http_enable_cgi' booleans you must tell SELinux about this by enabling the vbetool_mmap_zero_ignore boolean. you must tell SELinux about this by enabling the wine_mmap_zero_ignore boolean. you must turn off SELinux controls on the Firefox plugins. you need to add labels to it. you need to change the label on $TARGET_PATH to public_content_rw_t, and potentially turn on the allow_httpd_sys_script_anon_write boolean. you need to fully relabel. you need to report a bug. This is a potentially dangerous access. you need to report a bug. This is a potentially dangerous access. you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not blacklist the module' you need to use a different command. You are not allowed to preserve the SELinux context on the target file system. you should clear the execstack flag and see if $SOURCE_PATH works correctly. Report this as a bug on %s. You can clear the exestack flag by executing: Project-Id-Version: PACKAGE VERSION Report-Msgid-Bugs-To: PO-Revision-Date: 2017-08-31 08:31-0400 Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org> Language-Team: Bengali (India) (http://www.transifex.com/projects/p/fedora/language/bn_IN/) Language: bn_IN MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Plural-Forms: nplurals=2; plural=(n != 1); X-Generator: Zanata 4.6.2 <span class="whitespace other" title="Tab">Âģ</span>dac_override and dac_read_search āĻā§āĻˇāĻŽāĻ¤āĻž āĻĻā§āĻŦāĻžāĻ°āĻž āĻ¸āĻžāĻ§āĻžāĻ°āĻŖāĻ¤ āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŋāĻ¤ āĻšāĻ¯āĻŧ āĻ¯ā§ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋāĻ° āĻĢā§āĻ˛ā§āĻ¯āĻžāĻā§āĻ° āĻŽāĻžāĻ§ā§āĻ¯āĻŽā§ āĻĢāĻžāĻāĻ˛ā§āĻ° āĻāĻ¨ā§āĻ¯ root āĻĒā§āĻ°āĻ¸ā§āĻ¸ā§āĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ§āĻžāĻ°ā§āĻ¯ āĻšāĻ¯āĻŧ āĻ¨āĻžāĨ¤ āĻ¸āĻžāĻ§āĻžāĻ°āĻŖāĻ¤ āĻā§āĻ¨ā§ āĻĢāĻžāĻāĻ˛ā§āĻ° āĻŽāĻžāĻ˛āĻŋāĻāĻžāĻ¨āĻž/āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻā§āĻ˛ āĻĨāĻžāĻāĻ˛ā§ āĻāĻāĻŋ āĻĻā§āĻāĻž āĻĻā§āĻ¯āĻŧāĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE-āĻ° āĻ āĻ¨ā§āĻ°ā§āĻ§ āĻāĻ°āĻž āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°āĻžāĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻ¤ā§āĻ¯āĻžāĻā§āĻ¯āĻžāĻ¨ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻ¸āĻžāĻ§āĻžāĻ°āĻŖāĻ¤ $SOURCE-āĻ° āĻāĻ¨ā§āĻ¯ āĻāĻ āĻ¸āĻžāĻ§āĻžāĻ°āĻŖāĻ¤ $SOURCE-āĻ° āĻāĻ¨ā§āĻ¯ āĻāĻ āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻ¤ā§āĻ¯āĻžāĻļāĻŋāĻ¤ āĻ¨ā§ āĻāĻŦāĻ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻāĻāĻŋ āĻ āĻ¨ā§āĻĒā§āĻ°āĻŦā§āĻļā§āĻ° āĻ¸āĻāĻā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ā§āĻ° āĻā§āĻ¨ā§ āĻ¸ā§āĻ¨āĻŋāĻ°ā§āĻĻāĻŋāĻˇā§āĻ āĻ¸āĻāĻ¸ā§āĻāĻ°āĻŖ āĻ āĻĨāĻŦāĻž āĻāĻ¨āĻĢāĻŋāĻāĻžāĻ°ā§āĻļāĻ¨ā§āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ āĻ āĻ¤āĻŋāĻ°āĻŋāĻā§āĻ¤ āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°ā§ā§āĻāĻ¨ āĻšāĻŦā§āĨ¤ restorecon -v '$TARGET_PATH' āĻ āĻĨāĻŦāĻž chcon -t SIMILAR_TYPE '$TARGET_PATH' āĻĒā§āĻ°ā§āĻžāĻ¸ āĻāĻ°āĻž āĻšāĻŦā§ "$BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ā§āĻ° āĻŽāĻžāĻ¨ true āĻ§āĻžāĻ°ā§āĻ¯ āĻāĻ°āĻž āĻšāĻ˛ā§ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻšāĻŦā§: "setsebool -P $BOOLEAN=1" "$BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ā§āĻ° āĻŽāĻžāĻ¨ true (āĻ¸āĻ¤ā§āĻ¯) āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŖ āĻāĻ°āĻž āĻšāĻ˛ā§ āĻāĻ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻšāĻŦā§: "setsebool -P $BOOLEAN=1." "allow_ftpd_use_nfs" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ā§āĻ° āĻŽāĻžāĻ¨ true (āĻ¸āĻ¤ā§āĻ¯) āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŖ āĻāĻ°āĻž āĻšāĻ˛ā§ āĻāĻ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻšāĻŦā§: "setsebool -P allow_ftpd_use_nfs=1." file_context-āĻ° āĻŽāĻžāĻ¨ mnt_t āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŋāĻ¤ āĻšāĻ˛ā§ mount āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻĻā§āĻŦāĻžāĻ°āĻž āĻĢāĻžāĻāĻ˛ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻŽāĻžāĻāĻ¨ā§āĻ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§: "chcon -t mnt_t '$TARGET_PATH'." āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĢāĻžāĻāĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t mnt_t '$FIX_TARGET_PATH'" httpd āĻ¸ā§āĻā§āĻ°āĻŋāĻĒā§āĻāĻā§ āĻāĻ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ¤ā§ āĻ˛ā§āĻāĻžāĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻ¤ā§ āĻšāĻ˛ā§ $BOOLEAN āĻŦā§āĻ˛āĻŋāĻ¯āĻŧāĻžāĻ¨ āĻ¸āĻā§āĻ°āĻŋāĻ¯āĻŧ āĻāĻ°ā§āĻ¨ āĻ āĻ¸āĻžāĻ°ā§āĻŦāĻāĻ¨ā§āĻ¨ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ° āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ public_content_rw_t-āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°ā§āĻ¨āĨ¤ āĻ āĻ§āĻŋāĻ āĻāĻžāĻ¨āĻ¤ā§ httpd_selinux man āĻĒā§āĻˇā§āĻ āĻž āĻĒāĻĄāĻŧā§āĻ¨: "setsebool -P $BOOLEAN=1; chcon -t public_content_rw_t <path>" āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻ˛ā§āĻŦā§āĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t public_content_rw_t <path>" $SOURCE āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻ°ā§āĻŽ āĻ āĻā§āĻ°āĻ¸āĻ° āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ $BOOLEAN āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ¸āĻā§āĻ°āĻŋā§ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ˛ā§āĻ˛ā§āĻā§āĻ¯: āĻāĻ āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻŽāĻžāĻ¨ āĻĻā§āĻŦāĻžāĻ°āĻž āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻ¸āĻŽāĻ¸ā§āĻ¤ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ āĻĒā§āĻ°āĻāĻžāĻŦāĻŋāĻ¤ āĻšāĻŦā§ httpd āĻĻā§āĻŦāĻžāĻ°āĻž āĻŽā§āĻāĻ˛ āĻĒāĻžāĻ āĻžāĻ¨ā§āĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻ¤ā§ $BOOLEAN āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ¸āĻā§āĻ°āĻŋā§ āĻāĻ°ā§āĻ¨: "setsebool -P $BOOLEAN=1" $SOURCE-āĻā§ $PORT_NUMBER āĻĒā§āĻ°ā§āĻā§āĻ° āĻ¸āĻžāĻĨā§ āĻŦāĻžāĻāĻ¨ā§āĻĄ āĻāĻ°āĻžāĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻāĻŽāĻžāĻ¨ā§āĻĄāĻā§āĻ˛āĻŋ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§āĻ¨ # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER āĻāĻ āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ PORT_TYPE-āĻ° āĻāĻ¨ā§āĻ¯ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻāĻāĻāĻŋ āĻŽāĻžāĻ¨ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°āĻž āĻšāĻŦā§: %sāĨ¤ āĻāĻ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽāĻāĻŋ āĻ¯āĻĻāĻŋ NIS āĻā§āĻ˛āĻžā§ā§āĻ¨ā§āĻ āĻ°ā§āĻĒā§ āĻŦā§āĻ¯āĻŦāĻšā§āĻ¤ āĻšā§ āĻ¤āĻžāĻšāĻ˛ā§ allow_ypbind āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ¸āĻā§āĻ°āĻŋā§ āĻāĻ°āĻž āĻšāĻ˛ā§ āĻāĻ āĻ¸āĻŽāĻ¸ā§āĻ¯āĻž āĻ¸āĻŽāĻžāĻ§āĻžāĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ setsebool -P allow_ypbind=1āĨ¤ $SOURCE-āĻā§ āĻāĻ $PORT_NUMBER-āĻ° āĻ¸āĻžāĻĨā§ āĻ¸āĻāĻ¯ā§āĻā§āĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§āĻ¨ # semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER PORT_TYPE-āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻ¯ā§ āĻā§āĻ¨ā§ āĻāĻāĻāĻŋ āĻŽāĻžāĻ¨ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°āĻž āĻšāĻŦā§: %s. automounter āĻĻā§āĻŦāĻžāĻ°āĻž āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨āĻ¯ā§āĻā§āĻ¯ āĻāĻ°āĻžāĻ° āĻāĻĻā§āĻĻā§āĻļā§āĻ¯ā§ $TARGET_PATH'āĻ° āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ā§āĻ° āĻāĻ¨ā§āĻ¯ "chcon -t bin_t $TARGET_PATH" āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§āĻ¨āĨ¤ āĻĒā§āĻ¨āĻ°āĻžā§ āĻ˛ā§āĻŦā§āĻ˛ āĻāĻ°āĻžāĻ° āĻ¸āĻŽā§ āĻāĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋ āĻ°āĻžāĻāĻ¤ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§āĻ°ā§āĻĒā§ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ "semanage fcontext -a -t bin_t $FIX_TARGET_PATH" āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§āĻ¨āĨ¤ $SOURCE āĻĻā§āĻŦāĻžāĻ°āĻž āĻ āĻ¨ā§āĻ°ā§āĻ§ āĻāĻ°āĻž āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž āĻĒā§āĻ°āĻ¤ā§āĻ¯āĻžāĻā§āĻ¯āĻžāĻ¨ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ $SOURCE-āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ āĻāĻ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋāĻ° āĻĒā§āĻ°ā§ā§āĻāĻ¨ āĻĒā§āĻ°āĻ¤ā§āĻ¯āĻžāĻļāĻŋāĻ¤ āĻ¨ā§ āĻ āĻāĻāĻŋ āĻ āĻ¨ā§āĻĒā§āĻ°āĻŦā§āĻļā§āĻ° āĻ¸āĻāĻā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ā§āĻ° āĻ¸ā§āĻ¨āĻŋāĻ°ā§āĻĻāĻŋāĻˇā§āĻ āĻā§āĻ¨ā§ āĻ¸āĻāĻ¸ā§āĻāĻ°āĻŖ āĻ āĻĨāĻŦāĻž āĻāĻ¨āĻĢāĻŋāĻāĻžāĻ°ā§āĻļāĻ¨ā§āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§āĻ āĻ āĻ¤āĻŋāĻ°āĻŋāĻā§āĻ¤ āĻāĻ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋāĻ° āĻĒā§āĻ°ā§ā§āĻāĻ¨ āĻĻā§āĻāĻž āĻĻāĻŋāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE āĻāĻŽāĻžāĻ¨ā§āĻĄā§āĻ° āĻ āĻ¨ā§āĻ°ā§āĻ§ āĻāĻ°āĻž āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻ¤ā§āĻ¯āĻžāĻā§āĻ¯āĻžāĻ¨ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻāĻāĻŋ āĻāĻāĻāĻŋ āĻ˛āĻŋāĻāĻĄ āĻĄā§āĻ¸ā§āĻā§āĻ°āĻŋāĻĒā§āĻāĻ° āĻ āĻĨāĻŦāĻž $SOURCE āĻĻā§āĻŦāĻžāĻ°āĻž āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻāĻ¨ā§āĻ¯ āĻ āĻ¨ā§āĻŽā§āĻĻāĻŋāĻ¤ āĻ¨āĻž āĻšāĻā§āĻž āĻāĻāĻāĻŋ āĻĢāĻžāĻāĻ˛ā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĢāĻ˛āĻžāĻĢāĻ˛ āĻ¸ā§āĻĨāĻžāĻĒāĻ¨ā§āĻ° āĻ¨āĻŋāĻ°ā§āĻĻā§āĻļ āĻĻā§āĻā§āĻž āĻšā§ā§āĻāĻŋāĻ˛āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž āĻ¸āĻžāĻ§āĻžāĻ°āĻŖāĻ¤ āĻ˛āĻŋāĻ āĻŦāĻ¨ā§āĻ§ āĻāĻ°āĻž āĻšā§ āĻ āĻ¤ā§āĻ°ā§āĻāĻŋāĻ° āĻ¸ā§āĻāĻ¨āĻž āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻšā§āĨ¤ āĻāĻ āĻāĻžāĻ°āĻŖā§ āĻ˛āĻŋāĻ āĻāĻĒā§āĻā§āĻˇāĻž āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ āĻĻā§āĻŦāĻžāĻ°āĻž āĻĄā§āĻ¸ā§āĻā§āĻ°āĻŋāĻĒā§āĻāĻ° āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°āĻž āĻšā§ āĻ¨āĻž āĻāĻŦāĻ āĻāĻ° āĻĢāĻ˛ā§ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨āĻāĻŋ āĻ¸āĻ āĻŋāĻāĻāĻžāĻŦā§ āĻāĻ˛āĻŦā§āĨ¤ āĻ°āĻŋ-āĻĄāĻŋāĻ°ā§āĻāĻļāĻ¨ā§āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ $TARGET_PATH-āĻ āĻĢāĻ˛āĻžāĻĢāĻ˛ āĻĒāĻžāĻā§āĻž āĻ¯āĻžāĻŦā§ āĻ¨āĻžāĨ¤ selinux-policy āĻ¸āĻŽā§āĻŦāĻ¨ā§āĻ§ā§ āĻāĻāĻāĻŋ bugzilla āĻ¤ā§āĻ°āĻŋ āĻāĻ°āĻž āĻāĻāĻŋāĻ¤ āĻāĻŦāĻ āĻ¸ā§āĻāĻŋ āĻĒā§āĻ°āĻ¯ā§āĻā§āĻ¯ āĻĒā§āĻ¯āĻžāĻā§āĻā§āĻ° āĻāĻ¨ā§āĻ¯ āĻ¨āĻŋāĻ°ā§āĻĻā§āĻļ āĻāĻ°āĻž āĻšāĻŦā§āĨ¤ āĻāĻ avc-āĻāĻŋ āĻ āĻā§āĻ°āĻžāĻšā§āĻ¯ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE-āĻ° āĻāĻ°āĻž $TARGET_PATH āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ¨ā§āĻ°ā§āĻ§ āĻĒā§āĻ°āĻ¤ā§āĻ¯āĻžāĻā§āĻ¯āĻžāĻ¨ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻāĻāĻāĻŋ āĻĒā§āĻĨāĻ āĻĒā§āĻ°ā§āĻā§āĻ°āĻžāĻŽā§āĻ° āĻ¸āĻžāĻĨā§ āĻļā§ā§āĻžāĻ° āĻāĻ°āĻžāĻ° āĻāĻĻā§āĻĻā§āĻļā§āĻ¯ā§ $TARGET_PATH'āĻ° āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŋāĻ¤āĨ¤ āĻ¯āĻĻāĻŋ $TARGET_PATH-āĻā§ $SOURCE āĻĨā§āĻā§āĻ āĻļā§ā§āĻžāĻ° āĻāĻ°āĻ¤ā§ āĻāĻā§āĻā§āĻ āĻšāĻ¨ āĻ¤āĻžāĻšāĻ˛ā§ āĻāĻ° āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ public_content_t'āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¯āĻĻāĻŋ āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŋāĻ¤ āĻ¨āĻž āĻšā§ā§ āĻĨāĻžāĻā§ āĻ¤āĻžāĻšāĻ˛ā§ āĻāĻāĻŋ āĻ āĻ¨ā§āĻĒā§āĻ°āĻŦā§āĻļā§āĻ° āĻ¸āĻāĻā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $TARGET_PATH'āĻ cvs āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ CVS āĻ¸āĻāĻā§āĻ°āĻšāĻ¸ā§āĻĨāĻ˛ā§āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ cvs_data_t āĻšāĻā§āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ $TARGET_PATH'āĻā§ cvs āĻ¸āĻāĻā§āĻ°āĻšāĻ¸ā§āĻĨāĻ˛āĻ°ā§āĻĒā§ āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŖ āĻ¨āĻž āĻāĻ°āĻž āĻšāĻ˛ā§ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻāĻāĻŋ āĻā§āĻ¨ā§ āĻŦāĻžāĻ āĻ āĻĨāĻŦāĻž āĻ āĻ¨ā§āĻĒā§āĻ°āĻŦā§āĻļā§āĻ° āĻ¸āĻāĻā§āĻ¤āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž xen-āĻā§ $TARGET_PATH āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻšā§āĻ¨āĻŋ XEN āĻāĻŽā§āĻā§āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ˛ā§āĻŦā§āĻ˛ xen_image_t āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽāĻāĻŋ /var/lib/xen/images āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ° āĻ āĻ§ā§āĻ¨ āĻāĻĒāĻ¸ā§āĻĨāĻŋāĻ¤ āĻāĻŽā§āĻ āĻĢāĻžāĻāĻ˛āĻā§āĻ˛āĻŋ āĻ¸āĻ āĻŋāĻāĻ°ā§āĻĒā§, āĻ˛ā§āĻŦā§āĻ˛ āĻāĻ°āĻžāĻ° āĻāĻĻā§āĻĻā§āĻļā§āĻ¯ā§ āĻĒā§āĻ°āĻ¸ā§āĻ¤ā§āĻ¤ āĻāĻ°āĻž āĻšā§ā§āĻā§ āĻāĻŦāĻ /var/lib/xen/images-āĻ āĻĢāĻžāĻāĻ˛āĻā§āĻ˛āĻŋ āĻāĻĒāĻŋ āĻāĻ°āĻž āĻŦāĻžāĻā§āĻāĻ¨ā§ā§āĨ¤ āĻāĻ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ° āĻŽāĻ§ā§āĻ¯ā§ xen āĻāĻŽā§āĻ āĻĢāĻžāĻāĻ˛āĻā§āĻ˛āĻŋ āĻ¸ā§āĻĨāĻžāĻĒāĻ¨ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ chcon āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ $TARGET_PATH-āĻā§ xen_image_t āĻĢāĻžāĻāĻ˛/āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋ āĻ°ā§āĻĒā§ āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŖ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻāĻāĻŋ āĻāĻ°āĻž āĻšāĻ˛ā§ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻĄāĻŋāĻĢāĻ˛ā§āĻā§ āĻ¨āĻ¤ā§āĻ¨ āĻĒāĻžāĻĨ āĻ¯ā§āĻ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH' āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°ā§āĻ¨āĨ¤ āĻāĻĒāĻ¨āĻŋ āĻ¯āĻĻāĻŋ $TARGET_PATH-āĻā§ xen āĻāĻŽā§āĻāĻ°ā§āĻĒā§ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻāĻ¨ā§āĻ¯ āĻāĻŋāĻšā§āĻ¨āĻŋāĻ¤ āĻ¨āĻž āĻāĻ°ā§ āĻĨāĻžāĻā§āĻ¨ āĻ¤āĻžāĻšāĻ˛ā§ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻāĻāĻŋ āĻāĻāĻāĻŋ āĻŦāĻžāĻ āĻ āĻĨāĻŦāĻž āĻ āĻ¨ā§āĻĒā§āĻ°āĻŦā§āĻļā§āĻ° āĻ¸āĻāĻā§āĻ¤āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE-āĻā§ āĻ¸āĻ¨ā§āĻĻā§āĻšāĻāĻ¨āĻ āĻ˛ā§āĻŦā§āĻ˛ āĻ¸āĻš āĻĢāĻžāĻāĻ˛ $TARGET_PATH āĻĒā§āĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻāĻ° āĻĢāĻ˛ā§ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž httpd-āĻā§ āĻāĻ āĻ¸āĻŽāĻ¸ā§āĻ¤ āĻĢāĻžāĻāĻ˛ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻšāĻŦā§ āĻ¨āĻžāĨ¤ httpd-āĻ° āĻāĻ¨ā§āĻ¯ āĻāĻ āĻĢāĻžāĻāĻ˛āĻā§āĻ˛āĻŋ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻāĻāĻāĻŋ āĻ§āĻ°āĻ¨ā§ āĻĢāĻžāĻāĻ˛ā§āĻ° āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ, %s. āĻāĻŋāĻā§ āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ āĻ¸ā§āĻŦāĻ¤āĻ¨ā§āĻ¤ā§āĻ° āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨āĻā§āĻ˛āĻŋāĻ° āĻĻā§āĻŦāĻžāĻ°āĻž SELinux āĻĒāĻ˛āĻŋāĻ¸āĻŋāĻ° āĻ āĻāĻžāĻ¨āĻž āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ° āĻŽāĻ§ā§āĻ¯ā§ html āĻĢāĻžāĻāĻ˛ āĻ¸ā§āĻĨāĻžāĻĒāĻ¨ āĻāĻ°āĻž āĻšā§āĨ¤ āĻāĻ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻā§āĻ˛āĻŋāĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ httpd āĻĻā§āĻŦāĻžāĻ°āĻž āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°āĻ¯ā§āĻā§āĻ¯ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ¸āĻšāĻ¯ā§āĻā§ āĻ˛ā§āĻŦā§āĻ˛ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻ¸āĻ¨ā§āĻĻā§āĻšāĻāĻ¨āĻ āĻ˛ā§āĻŦā§āĻ˛ āĻ¸āĻš āĻĢāĻžāĻāĻ˛ $TARGET_PATH āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨ āĻāĻ°āĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ $TARGET_PATH āĻ¯āĻĻāĻŋ automount āĻāĻā§āĻ¸ā§āĻāĻŋāĻāĻā§āĻŦāĻ˛ āĻĢāĻžāĻāĻ˛ āĻšā§ āĻ¤āĻžāĻšāĻ˛ā§ bin_t āĻĢāĻžāĻāĻ˛ āĻ˛ā§āĻŦā§āĻ˛ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ Automounter āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻ¨āĻĢāĻŋāĻāĻžāĻ°ā§āĻļāĻ¨ āĻĢāĻžāĻāĻ˛ āĻāĻžāĻ˛āĻ¨āĻž āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻāĻā§āĻ¸ā§āĻāĻŋāĻāĻ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ āĻĒā§āĻ°āĻ¸ā§āĻ¤ā§āĻ¤ āĻ¨āĻž āĻāĻ°āĻž āĻā§āĻ¨ā§ āĻŦāĻ¸ā§āĻ¤ā§ Automounter āĻĻā§āĻŦāĻžāĻ°āĻž āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨ā§āĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻž āĻšāĻ˛ā§ āĻāĻāĻŋ āĻ āĻ¨ā§āĻĒā§āĻ°āĻŦā§āĻļā§āĻ° āĻ¸āĻāĻā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž vbetool-āĻā§ āĻŽā§āĻŽāĻ°āĻŋ āĻ¸āĻāĻā§āĻ°āĻžāĻ¨ā§āĻ¤ āĻāĻāĻāĻŋ āĻ āĻ¨āĻŋāĻ°āĻžāĻĒāĻĻ āĻāĻ°ā§āĻŽ āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨ āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž wine-āĻā§ āĻŽā§āĻŽāĻ°āĻŋ āĻ¸āĻāĻā§āĻ°āĻžāĻ¨ā§āĻ¤ āĻāĻāĻāĻŋ āĻ āĻ¨āĻŋāĻ°āĻžāĻĒāĻĻ āĻāĻ°ā§āĻŽ āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨ āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻĄāĻŋāĻāĻžāĻāĻ¸ $TARGET_PATH "$ACCESS" āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻĄāĻŋāĻāĻžāĻāĻ¸ $TARGET_PATH "$ACCESS" āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ $TARGET_PATH āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°āĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻāĻāĻāĻŋ leak āĻāĻ°āĻž $TARGET_PATH āĻĢāĻžāĻāĻ˛ āĻĄā§āĻ¸ā§āĻā§āĻ°āĻŋāĻĒā§āĻāĻ° āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻĒā§āĻ°ā§āĻ $PORT_NUMBER-āĻ° āĻ¸āĻžāĻĨā§ āĻŦāĻžāĻāĻ¨ā§āĻĄ āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ heap'āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻŽā§āĻŽāĻ°āĻŋ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻĒā§āĻ°ā§āĻ $PORT_NUMBER'āĻ° āĻ¸āĻžāĻĨā§ āĻ¸āĻāĻ¯ā§āĻ āĻāĻ°āĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻĻā§āĻā§āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCEPATH-āĻā§ āĻĢāĻžāĻāĻ˛-āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ $SOURCE_TYPE āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ¸āĻš āĻāĻāĻāĻŋ āĻĢāĻžāĻāĻ˛ āĻ¨āĻŋāĻ°ā§āĻŽāĻžāĻŖ āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ $TARGET_PATH āĻ˛ā§āĻĄ āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§, āĻāĻ āĻāĻžāĻā§ āĻā§āĻā§āĻ¸āĻ āĻ¸ā§āĻĨāĻžāĻ¨āĻžāĻ¨ā§āĻ¤āĻ° āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻĒā§āĻ°ā§āĻā§āĻ°āĻžāĻŽ āĻ¸ā§āĻā§āĻ¯āĻžāĻ āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨āĻ¯ā§āĻā§āĻ¯ (āĻāĻā§āĻ¸ā§āĻāĻŋāĻāĻā§āĻŦāĻ˛) āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž Samba-āĻā§ ($SOURCE_TYPE) āĻĄāĻŋāĻāĻžāĻāĻ¸ $TARGET_PATH "$ACCESS" āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž cvs ($SOURCE_TYPE)-āĻā§ āĻĄāĻŋāĻāĻžāĻāĻ¸ $TARGET_PATH "$ACCESS" āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ āĻ¸āĻ¨ā§āĻĻā§āĻšāĻāĻ¨āĻ āĻ˛ā§āĻŦā§āĻ˛ āĻ¸āĻš āĻĢāĻžāĻāĻ˛ ($TARGET_PATH) āĻĒā§āĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž http āĻĄā§āĻŽāĻ¨āĻā§ āĻŽā§āĻāĻ˛ āĻĒāĻžāĻ āĻžāĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž xen-āĻā§ ($SOURCE_PATH) $TARGET_PATH "$ACCESS" āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻ¨āĻŋā§āĻŽāĻ¨ā§āĻ¤āĻŋāĻ° āĻāĻ¨ā§āĻ¯ httpd āĻ¸ā§āĻā§āĻ°āĻŋāĻĒā§āĻāĻā§ āĻ¸āĻžāĻ°ā§āĻŦāĻāĻ¨ā§āĻ¨ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻ˛āĻŋāĻāĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻ¨āĻŋā§āĻŽāĻ¨ā§āĻ¤āĻŋāĻ° āĻāĻ¨ā§āĻ¯ httpd āĻ¸ā§āĻā§āĻ°āĻŋāĻĒā§āĻ āĻ¸āĻžāĻ°ā§āĻŦāĻāĻ¨ā§āĻ¨ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻŋāĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻ˛āĻŋāĻāĻ¤ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ āĻ ā§āĻ¯āĻžāĻ¨ā§āĻ¨āĻŋāĻŽāĻžāĻ¸ āĻ˛āĻŋāĻāĻ¨ā§āĻ° āĻāĻĻā§āĻĻā§āĻļā§āĻ¯ā§ http āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŖ āĻ¨āĻž āĻāĻ°āĻž āĻšāĻ˛ā§, āĻāĻāĻŋ āĻ¸āĻŽā§āĻāĻžāĻŦā§āĻ¯ āĻ āĻ¨ā§āĻĒā§āĻ°āĻŦā§āĻļā§āĻ° āĻ¸āĻāĻā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE-'āĻā§ āĻĢāĻžāĻāĻ˛ āĻ āĻĨāĻŦāĻž āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ¤ā§ āĻŽāĻžāĻāĻ¨ā§āĻ āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšā§ā§āĻā§ "$TARGET_PATH" (type "$TARGET_TYPE")āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž httpd-āĻā§ http āĻĢāĻžāĻāĻ˛ $ACCESS āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§ āĻŦāĻžāĻ§āĻž āĻ¸ā§āĻˇā§āĻāĻŋ āĻāĻ°āĻž āĻšāĻā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž ftp āĻĄā§āĻŽāĻ¨āĻā§ CIFS āĻĢāĻžāĻāĻ˛-āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻ¸āĻāĻ°āĻā§āĻˇāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ $ACCESS āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšāĻ¯āĻŧā§āĻā§āĨ¤ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž ftp āĻĄā§āĻŽāĻ¨āĻā§ NFS āĻĢāĻžāĻāĻ˛-āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻ¸āĻāĻ°āĻā§āĻˇāĻŋāĻ¤ āĻĢāĻžāĻāĻ˛ $ACCESS āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšāĻ¯āĻŧā§āĻā§āĨ¤ $SOURCE āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ā§āĻ° āĻĻā§āĻŦāĻžāĻ°āĻž heap-āĻ° āĻāĻĒāĻ° āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°āĻžāĻ§āĻŋāĻāĻžāĻ°ā§āĻ° āĻ¸ā§āĻŽāĻžāĻ°ā§āĻāĻž (āĻāĻĻāĻžāĻšāĻ°āĻŖ, malloc āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻ°āĻā§āĻˇāĻŋāĻ¤) āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ā§āĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻāĻāĻŋ āĻāĻāĻāĻŋ āĻ¸āĻŽā§āĻāĻžāĻŦā§āĻ¯ āĻ¸ā§āĻ°āĻā§āĻˇāĻž āĻā§āĻŋāĻ¤ āĻāĻļāĻā§āĻāĻžāĨ¤ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨āĻā§āĻ˛āĻŋāĻ° āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻ āĻāĻžāĻ°ā§āĻ¯ āĻāĻ°āĻž āĻāĻāĻŋāĻ¤ āĻ¨ā§āĨ¤ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻāĻĒāĻ¸ā§āĻĨāĻŋāĻ¤ āĻ¤ā§āĻ°ā§āĻāĻŋāĻĒā§āĻ°ā§āĻŖ āĻā§āĻĄā§āĻ° āĻĢāĻ˛ā§ āĻāĻ āĻ āĻ¨ā§āĻ°ā§āĻ§ āĻāĻ°āĻž āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a> āĻā§ā§āĻŦ āĻĒā§āĻ'āĻ āĻāĻ āĻāĻŦāĻļā§āĻ¯āĻāĻ¤āĻž āĻŽā§āĻā§ āĻĢā§āĻ˛āĻžāĻ° āĻ¨āĻŋāĻ°ā§āĻĻā§āĻļ āĻ˛ā§āĻāĻž āĻšā§ā§āĻā§āĨ¤ $SOURCE-āĻ° āĻ¸āĻ āĻŋāĻ āĻāĻ°ā§āĻŽ āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨ āĻĒā§āĻ°ā§ā§āĻāĻ¨ āĻšāĻ˛ā§ SELinux āĻāĻ¨āĻĢāĻŋāĻāĻžāĻ° āĻāĻ°ā§ āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ā§āĻ° āĻ¤ā§āĻ°ā§āĻāĻŋ āĻ¸āĻāĻļā§āĻ§āĻ¨ āĻ¨āĻž āĻāĻ°āĻž āĻ āĻŦāĻ§āĻŋ āĻ āĻ¸ā§āĻĨāĻžā§ā§ āĻ°ā§āĻĒā§ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°āĻžāĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°ā§āĻ¨āĨ¤ āĻ āĻ¨ā§āĻā§āĻ°āĻš āĻāĻ°ā§ āĻāĻ āĻĒā§āĻ¯āĻžāĻā§āĻā§āĻ° āĻāĻ¨ā§āĻ¯ āĻŦāĻžāĻ āĻ°āĻŋāĻĒā§āĻ°ā§āĻ</a> āĻĻāĻžā§ā§āĻ° āĻāĻ°ā§āĻ¨āĨ¤ SELinux āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻŦā§āĻ¯āĻ¤ā§āĻ¤ āĻ āĻ¨ā§āĻ¯āĻžāĻ¨ā§āĻ¯ āĻ¸āĻāĻ˛ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻ°āĻžāĻāĻ¤ā§ "cp -P" āĻ§āĻ°āĻ¨ā§āĻ° āĻā§āĻ¨ā§ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§āĻ¨āĨ¤ chcon -R -t rsync_data_t '$TARGET_PATH' āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĢāĻžāĻāĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t rsync_data_t '$FIX_TARGET_PATH'" chcon -R -t samba_share_t '$TARGET_PATH' āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĢāĻžāĻāĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH'" chcon -t public_content_t '$TARGET_PATH' āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĢāĻžāĻāĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t public_content_t '$FIX_TARGET_PATH'" chcon -t swapfile_t '$TARGET_PATH' āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĢāĻžāĻāĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t swapfile_t '$FIX_TARGET_PATH'" chcon -t virt_image_t '$TARGET_PATH' āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĢāĻžāĻāĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH'" chcon -t xen_image_t '$TARGET_PATH' āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°ā§ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻĢāĻžāĻāĻ˛ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĢāĻžāĻāĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ° āĻĢāĻ˛ā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ°āĻŋ-āĻ˛ā§āĻŦāĻ˛ (relabel) āĻāĻ°āĻž āĻšāĻ˛ā§āĻ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻĨāĻžāĻāĻŦā§āĨ¤ "semanage fcontext -a -t xen_image_t '$FIX_TARGET_PATH'" āĻāĻĒāĻ¨āĻžāĻ° āĻāĻŽā§āĻĒāĻŋāĻāĻāĻžāĻ°ā§āĻ° āĻĢāĻžāĻāĻ˛-āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻĒā§āĻ¨āĻ°āĻžā§ āĻ˛ā§āĻŦā§āĻ˛ āĻāĻ°āĻ¤ā§ root āĻĒāĻ°āĻŋāĻā§ā§ āĻāĻ˛ā§āĻ˛āĻŋāĻāĻŋāĻ¤ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§āĻ¨: "touch /.autorelabel; reboot" āĻāĻ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°āĻžāĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻĻāĻžāĻ¨ā§āĻ° āĻāĻ¨ā§āĻ¯ āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻĒāĻ˛āĻŋāĻ¸āĻŋ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ¨āĻŋāĻ°ā§āĻŽāĻžāĻŖ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§ - <a href="http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385">FAQ</a> āĻĒā§ā§āĻ¨ āĻ āĻ¨ā§āĻā§āĻ°āĻš āĻāĻ°ā§ āĻāĻāĻāĻŋ āĻŦāĻžāĻ āĻ°āĻŋāĻĒā§āĻ°ā§āĻ āĻĻāĻžā§ā§āĻ° āĻāĻ°ā§āĻ¨āĨ¤ āĻāĻ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°āĻžāĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻĻāĻžāĻ¨ā§āĻ° āĻāĻ¨ā§āĻ¯ āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻĒāĻ˛āĻŋāĻ¸āĻŋ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ¨āĻŋāĻ°ā§āĻŽāĻžāĻŖ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§ - <a href="http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385">FAQ</a> āĻĒā§ā§āĻ¨ restorecon āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ āĻĄāĻŋāĻĢāĻ˛ā§āĻ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻāĻ¨āĻā§āĻā§āĻ¸ āĻĒā§āĻ¨āĻ°ā§āĻĻā§āĻ§āĻžāĻ° āĻāĻ°āĻž āĻ¯āĻžāĻŦā§: restorecon '$TARGET_PATH'āĨ¤ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ restorecon -R '$TARGET_PATH' āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§ āĻ°āĻŋāĻāĻžāĻ°ā§āĻ¸āĻŋāĻ āĻ°ā§āĻĒā§ āĻĒā§āĻ¨āĻ°ā§āĻĻā§āĻ§āĻžāĻ° āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻāĻĒāĻ¨āĻžāĻ° āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻā§āĻ°ā§āĻ¤āĻ°āĻāĻžāĻŦā§ āĻŦāĻŋāĻĒāĻĻāĻā§āĻ°āĻ¸ā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§! āĻāĻĒāĻ¨āĻžāĻ° āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻā§āĻ°ā§āĻ¤āĻ°āĻāĻžāĻŦā§ āĻŦāĻŋāĻĒāĻĻāĻā§āĻ°āĻ¸ā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§! $SOURCE_PATH āĻĻā§āĻŦāĻžāĻ°āĻž low āĻāĻžāĻ°ā§āĻ¨ā§āĻ˛ āĻŽā§āĻŽāĻ°āĻŋ mmap āĻāĻ°āĻžāĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻāĻĒāĻ¨āĻžāĻ° āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻā§āĻ°ā§āĻ¤āĻ°āĻāĻžāĻŦā§ āĻŦāĻŋāĻĒāĻĻāĻā§āĻ°āĻ¸ā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§! $SOURCE_PATH āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻāĻāĻŋ āĻāĻžāĻ°ā§āĻ¨ā§āĻ˛ āĻŽāĻĄāĻŋāĻāĻ˛ āĻ˛ā§āĻĄ āĻāĻ°āĻžāĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻāĻĒāĻ¨āĻžāĻ° āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻā§āĻ°ā§āĻ¤āĻ°āĻāĻžāĻŦā§ āĻŦāĻŋāĻĒāĻĻāĻā§āĻ°āĻ¸ā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§! $SOURCE_PATH āĻĻā§āĻŦāĻžāĻ°āĻž SELinux āĻŦāĻžāĻ¸ā§āĻ¤āĻŦāĻžā§āĻ¨ā§āĻ° āĻ āĻŦāĻ¸ā§āĻĨāĻž āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ā§āĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻāĻĒāĻ¨āĻžāĻ° āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽ āĻā§āĻ°ā§āĻ¤āĻ°āĻāĻžāĻŦā§ āĻŦāĻŋāĻĒāĻĻāĻā§āĻ°āĻ¸ā§āĻ¤ āĻšāĻ¤ā§ āĻĒāĻžāĻ°ā§! $SOURCE_PATH āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻžāĻ°ā§āĻ¨ā§āĻ˛ā§āĻ° āĻāĻ¨āĻĢāĻŋāĻāĻžāĻ°ā§āĻļāĻ¨ā§āĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻ¸āĻ āĻŋāĻāĻāĻžāĻŦā§ IPV6 āĻ¨āĻŋāĻˇā§āĻā§āĻ°āĻŋāĻ¯āĻŧ āĻāĻ°ā§āĻ¨āĨ¤ 'yum remove mozplugger' āĻ¸āĻšāĻ¯ā§āĻā§ mozplluger āĻĒā§āĻ¯āĻžāĻā§āĻāĻāĻŋ āĻ¸āĻ°āĻŋā§ā§ āĻĢā§āĻ˛ā§āĻ¨ āĻ āĻĨāĻŦāĻž Firefox āĻĒā§āĻ˛āĻžāĻ-āĻāĻ¨ā§āĻ° āĻāĻ¨ā§āĻ¯ SELinux-āĻ° āĻ¸āĻā§āĻ°āĻŋā§ āĻŽā§āĻĄ (enforcement) āĻŦāĻ¨ā§āĻ§ āĻāĻ°ā§āĻ¨āĨ¤ setsebool -P unconfined_mozilla_plugin_transition 0 āĻ¸āĻāĻļā§āĻ˛āĻŋāĻˇā§āĻ āĻĒā§āĻ°ā§āĻā§āĻ°āĻžāĻŽāĻāĻŋāĻ° āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨āĻž āĻāĻžāĻ˛āĻŋā§ā§ āĻ¯ā§āĻ¤ā§ āĻāĻā§āĻā§āĻ āĻšāĻ˛ā§, āĻāĻ āĻāĻ°ā§āĻŽā§āĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻŽāĻžāĻ¨ā§āĻĄ-āĻ˛āĻžāĻāĻ¨ā§ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻ¸āĻšāĻ¯ā§āĻā§ āĻāĻ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻ¸āĻŽā§āĻāĻŦ āĻšāĻŦā§: # setsebool -P mmap_low_allowed 1 %s-āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ file type āĻāĻŋāĻ¨ā§āĻ¨ āĻ āĻ¨ā§āĻ¯ āĻā§āĻ¨ā§ type āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŖā§āĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻž āĻšā§ā§āĻāĻŋāĻ˛āĨ¤ āĻāĻāĻŋ āĻ āĻ¨ā§āĻŽā§āĻĻāĻŋāĻ¤ āĻ¨ā§ āĻ āĻāĻāĻāĻŋ file type āĻ§āĻžāĻ°ā§āĻ¯ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ seinfo āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻ¸āĻšāĻ¯ā§āĻā§ āĻ¸āĻ°ā§āĻŦāĻ§āĻ°āĻ¨ā§āĻ° file type-āĻ° āĻ¤āĻžāĻ˛āĻŋāĻāĻž āĻāĻžāĻ¨āĻž āĻ¯āĻžāĻŦā§āĨ¤ seinfo -afile_type -x "$BOOLEAN" āĻ "$WRITE_BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ā§āĻ° āĻŽāĻžāĻ¨ true (āĻ¸āĻ¤ā§āĻ¯) āĻšāĻ˛ā§ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°āĻžāĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻžāĻĒā§āĻ¤ āĻšāĻŦā§: "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1". āĻ¸āĻ¤āĻ°ā§āĻāĻŦāĻžāĻŖā§: "$WRITE_BOOLEAN" āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ā§āĻ° āĻŽāĻžāĻ¨ true āĻšāĻ˛ā§ ftp āĻĄā§āĻŽāĻ¨āĻā§ CIFS āĻĢāĻžāĻāĻ˛-āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻ¸āĻŽāĻ¸ā§āĻ¤ āĻĢāĻžāĻāĻ˛ āĻ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ¤ā§ āĻ˛ā§āĻāĻžāĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋāĻ° āĻĒāĻžāĻļāĻžāĻĒāĻžāĻļāĻŋ āĻ¸āĻŽāĻ¸ā§āĻ¤ āĻ¸āĻžāĻŦāĻ°ā§āĻāĻ¨ā§āĻ¨ āĻŦāĻŋāĻˇā§āĻŦāĻ¸ā§āĻ¤ā§āĻ¤ā§ (public_content_t āĻĒā§āĻ°āĻā§āĻ¤āĻŋāĻ° āĻĢāĻžāĻāĻ˛ āĻ āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋ) āĻ˛ā§āĻāĻžāĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻž āĻšāĻŦā§āĨ¤ # semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH' # restorecon -v '$FIX_TARGET_PATH' # semanage fcontext -a -t samba_share_t '$FIX_TARGET_PATH%s' # restorecon %s -v '$FIX_TARGET_PATH' # semanage fcontext -a -t virt_image_t '$FIX_TARGET_PATH' # restorecon -v '$FIX_TARGET_PATH' #semanage port -a -t PORT_TYPE -p %s $PORT_NUMBER <br>PORT_TYPE-āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻ¯ā§ āĻā§āĻ¨ā§ āĻāĻāĻāĻŋ āĻŽāĻžāĻ¨ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°āĻž āĻšāĻŦā§: %s. āĻāĻāĻāĻŋ āĻĒā§āĻ°āĻ¸ā§āĻ¸ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§ āĻšā§āĻ¯āĻžāĻ āĻāĻ°āĻžāĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻž āĻāĻ°āĻā§āĨ¤ /etc/sysctl.conf-āĻ° āĻŽāĻ§ā§āĻ¯ā§ net.ipv6.conf.all.disable_ipv6 = 1 āĻ¯ā§āĻ āĻāĻ°ā§āĻ¨ āĻ¨āĻŋāĻ°āĻžāĻĒāĻ¤ā§āĻ¤āĻž āĻ¸āĻāĻā§āĻ°āĻžāĻ¨ā§āĻ¤ āĻ ā§āĻ¯āĻžāĻĄāĻŽāĻŋāĻ¨āĻŋāĻ¸ā§āĻā§āĻ°ā§āĻāĻ°ā§āĻ° āĻ¸āĻžāĻĨā§ āĻ¯ā§āĻāĻžāĻ¯ā§āĻ āĻāĻ°ā§ āĻāĻ āĻ¸āĻŽāĻ¸ā§āĻ¯āĻž āĻ¸āĻŽā§āĻĒāĻ°ā§āĻā§ āĻāĻžāĻ¨āĻžāĻ¨āĨ¤ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒā§āĻ¨āĻ°ā§āĻĻā§āĻ§āĻžāĻ° āĻāĻ°ā§āĻ¨ āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻĒā§āĻ¨āĻ°ā§āĻĻā§āĻ§āĻžāĻ° āĻāĻ°ā§āĻ¨ SELinux āĻĻā§āĻŦāĻžāĻ°āĻž $SOURCE_PATH-āĻā§ "$ACCESS" āĻāĻ°āĻ¤ā§ āĻĒā§āĻ°āĻ¤āĻŋāĻ°ā§āĻ§ āĻāĻ°āĻž āĻšā§ā§āĻā§āĨ¤ āĻŽā§āĻŽāĻ°āĻŋāĻ° āĻ¨āĻŋāĻ°āĻžāĻĒāĻ¤ā§āĻ¤āĻž āĻŦā§āĻ¯āĻŦāĻ¸ā§āĻĨāĻž āĻŦāĻ¨ā§āĻ§ āĻāĻ°ā§āĻ¨ āĻ āĻ§āĻŋāĻ āĻŦāĻŋāĻŦāĻ°āĻŖā§āĻ° āĻāĻ¨ā§āĻ¯ '%s' man āĻĒā§āĻˇā§āĻ āĻž āĻĒā§āĻ¤ā§ āĻĒāĻžāĻ°ā§āĻ¨āĨ¤ āĻāĻĒāĻ¨āĻŋ āĻšā§āĻ¯āĻžāĻāĻŋāĻā§ā§āĻ° āĻļāĻŋāĻāĻžāĻ° āĻšā§ā§ āĻĨāĻžāĻāĻ¤ā§ āĻĒāĻžāĻ°ā§āĻ¨āĨ¤ $FIX_TARGET_PATH-āĻ° āĻ˛ā§āĻŦā§āĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ $TARGET_BASE_PATH-āĻ° āĻ˛ā§āĻŦā§āĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ $TARGET_BASE_PATH-āĻ° āĻ˛ā§āĻŦā§āĻ˛ public_content_t āĻ āĻĨāĻŦāĻž public_content_rw_t āĻ°ā§āĻĒā§ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ $TARGET_BASE_PATH'-āĻ° āĻ˛ā§āĻŦā§āĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ $TARGET_PATH-āĻ° āĻ˛ā§āĻŦā§āĻ˛āĻāĻŋ āĻ¸āĻŽāĻ¤ā§āĻ˛ā§āĻ¯ āĻĒā§āĻ°āĻā§āĻ¤āĻŋāĻ° āĻĄāĻŋāĻāĻžāĻāĻ¸ā§ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ '$FIX_TARGET_PATH'-āĻ° āĻ˛ā§āĻŦā§āĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ āĻāĻāĻŋ āĻŦāĻžāĻ āĻšāĻŋāĻ¸āĻžāĻŦā§ āĻĻāĻžā§ā§āĻ° āĻāĻ°āĻž āĻāĻāĻŋāĻ¤āĨ¤ āĻāĻ āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻ¨āĻŋā§āĻŽāĻ¨ā§āĻ¤āĻŋāĻ° āĻŽāĻĄāĻŋāĻāĻ˛ āĻĒā§āĻ°āĻ¸ā§āĻ¤ā§āĻ¤ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻŦāĻžāĻ āĻ°ā§āĻĒā§ āĻāĻāĻŋ āĻĻāĻžā§ā§āĻ° āĻāĻ°ā§āĻ¨āĨ¤ āĻāĻ āĻ āĻ§āĻŋāĻāĻžāĻ° dontaudit āĻ°ā§āĻĒā§ āĻāĻŋāĻšā§āĻ¨āĻŋāĻ¤ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ āĻāĻāĻāĻŋ āĻ¸ā§āĻĨāĻžāĻ¨ā§ā§ āĻĒāĻ˛āĻŋāĻ¸āĻŋ āĻŽāĻĄāĻŋāĻāĻ˛ āĻĒā§āĻ°āĻ¸ā§āĻ¤ā§āĻ¤ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ execstack -c %s āĻ¯āĻĻāĻŋ āĻšā§āĻ¯āĻžāĻāĻŋāĻā§ā§āĻ° āĻ¸āĻŽā§āĻāĻžāĻŦāĻ¨āĻž āĻĻā§āĻāĻž āĻĻā§ā§ setsebool -P %s %s āĻ¤ā§āĻ°ā§āĻāĻŋāĻĒā§āĻ°ā§āĻŖ āĻĢāĻžāĻāĻ˛ā§āĻ° āĻĒāĻžāĻĨ āĻĒā§āĻ°āĻžāĻĒā§āĻ¤ āĻāĻ°ā§ āĻ āĻĒā§āĻ¨āĻ°āĻžāĻ¯āĻŧ āĻ¤ā§āĻ°ā§āĻāĻŋ āĻā§āĻĒāĻ¨ā§āĻ¨ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖ āĻ āĻĄāĻŋāĻāĻŋāĻ āĻŦā§āĻ¯āĻŦāĻ¸ā§āĻĨāĻž āĻ¸āĻā§āĻ°āĻŋāĻ¯āĻŧ āĻāĻ°ā§āĻ¨āĨ¤ SELinux āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻŦā§āĻ¯āĻ¤ā§āĻ¤ āĻ āĻ¨ā§āĻ¯āĻžāĻ¨ā§āĻ¯ āĻ¸āĻāĻ˛ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻŋāĻ¤ āĻ°āĻžāĻāĻ¤ā§ "cp -P" āĻ§āĻ°āĻ¨ā§āĻ° āĻā§āĻ¨ā§ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°ā§āĻ¨āĨ¤ restorecon āĻ¸āĻā§āĻāĻžāĻ˛āĻ¨ āĻāĻ°āĻž āĻ¯āĻžāĻŦā§āĨ¤ āĻāĻ¨āĻĢāĻžāĻāĻ¨ āĻāĻ°āĻž āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻ āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°ā§ā§āĻāĻ¨ āĻšāĻŦā§ āĻ¨āĻžāĨ¤ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻāĻĒāĻ¨āĻŋ āĻšā§āĻ¯āĻžāĻāĻŋāĻ āĻāĻā§āĻ°āĻŽāĻŖā§āĻ° āĻļāĻŋāĻāĻžāĻ° āĻšā§ā§āĻā§āĻ¨āĨ¤ āĻāĻ¨āĻĢāĻžāĻāĻ¨ āĻāĻ°āĻž āĻ ā§āĻ¯āĻžāĻĒā§āĻ˛āĻŋāĻā§āĻļāĻ¨ āĻĻā§āĻŦāĻžāĻ°āĻž āĻāĻ āĻ āĻ§āĻŋāĻāĻžāĻ° āĻĒā§āĻ°ā§ā§āĻāĻ¨ āĻšāĻŦā§ āĻ¨āĻžāĨ¤ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻāĻĒāĻ¨āĻŋ āĻšā§āĻ¯āĻžāĻāĻŋāĻ āĻāĻā§āĻ°āĻŽāĻŖā§āĻ° āĻļāĻŋāĻāĻžāĻ° āĻšā§ā§āĻā§āĻ¨āĨ¤ āĻāĻ āĻ āĻ§āĻŋāĻāĻžāĻ° āĻ āĻ¤ā§āĻ¯āĻ¨ā§āĻ¤ āĻŦāĻŋāĻĒāĻā§āĻāĻ¨āĻ āĻāĻŦāĻ āĻ¸āĻŽā§āĻāĻŦ āĻāĻĒāĻ¨āĻŋ āĻā§āĻ¨ā§ āĻšā§āĻ¯āĻžāĻāĻŋāĻ āĻāĻā§āĻ°āĻŽāĻŖā§āĻ° āĻļāĻŋāĻāĻžāĻ° āĻšā§ā§āĻā§āĻ¨āĨ¤ $TARGET_PATH-āĻ° āĻ˛ā§āĻŦā§āĻ˛ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻ˛ā§āĻŦā§āĻ˛āĻā§āĻ˛āĻŋ āĻ¸āĻāĻļā§āĻ§āĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ cert āĻĢāĻžāĻāĻ˛āĻāĻŋ ~/.cert āĻĄāĻŋāĻ°ā§āĻā§āĻāĻ°āĻŋāĻ° āĻŽāĻ§ā§āĻ¯ā§ āĻ¸ā§āĻĨāĻžāĻ¨āĻžāĻ¨ā§āĻ¤āĻ° āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ āĻāĻāĻāĻŋ āĻŦā§āĻ§ file āĻ˛ā§āĻŦā§āĻ˛ āĻ¨āĻŋāĻ°ā§āĻŦāĻžāĻāĻ¨ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ mozplugger āĻĒā§āĻ¯āĻžāĻā§āĻ āĻ¸āĻ°āĻŋā§ā§ āĻĢā§āĻ˛āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻĒā§āĻ°āĻĻāĻžāĻ¨ āĻāĻ°āĻžāĻ° āĻāĻ¨ā§āĻ¯ SELinux āĻĒā§āĻ°āĻ¸ā§āĻ¤ā§āĻ¤ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ SELinux-āĻā§ āĻāĻ āĻ¸āĻŽā§āĻĒāĻ°ā§āĻā§ āĻ¸ā§āĻāĻŋāĻ¤ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ 'httpd_unified' āĻ 'http_enable_cgi' āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻā§āĻ˛āĻŋ āĻ¸āĻā§āĻ°āĻŋā§ āĻāĻ°ā§ SELinux-āĻā§ āĻāĻ āĻ¸āĻŽā§āĻĒāĻ°ā§āĻā§ āĻ¸ā§āĻāĻŋāĻ¤ āĻāĻ°ā§āĻ¨ vbetool_mmap_zero_ignore āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ āĻ¸āĻā§āĻ°āĻŋā§ āĻāĻ°ā§ SELinux-āĻā§ āĻāĻ āĻ¸āĻŽā§āĻĒāĻ°ā§āĻā§ āĻ¸ā§āĻāĻŋāĻ¤ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ wine_mmap_zero_ignore āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨āĻāĻŋ āĻ¸āĻā§āĻ°āĻŋā§ āĻāĻ°ā§ SELinux-āĻā§ āĻāĻ āĻ¸āĻŽā§āĻĒāĻ°ā§āĻā§ āĻ¸ā§āĻāĻŋāĻ¤ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ Firefox āĻĒā§āĻ˛āĻžāĻ-āĻāĻ¨ā§āĻ° āĻā§āĻˇā§āĻ¤ā§āĻ°ā§ SELinux āĻ¨āĻŋā§āĻ¨ā§āĻ¤ā§āĻ°āĻŖ āĻŦāĻ¨ā§āĻ§ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻāĻŋāĻ° āĻāĻ¨ā§āĻ¯ āĻ˛ā§āĻŦā§āĻ˛ āĻĒā§āĻ°ā§ā§āĻ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ $TARGET_PATH-āĻ° āĻ˛ā§āĻŦā§āĻ˛ public_content_rw_t-āĻ āĻĒāĻ°āĻŋāĻŦāĻ°ā§āĻ¤āĻ¨ āĻāĻ°ā§ allow_httpd_sys_script_anon_write āĻŦā§āĻ˛āĻŋā§āĻžāĻ¨ā§āĻ° āĻŽāĻžāĻ¨ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻāĻžāĻ˛ā§ āĻāĻ°āĻž āĻĒā§āĻ°ā§ā§āĻāĻ¨āĨ¤ āĻĒā§āĻ¨āĻ°āĻžā§ āĻ¸āĻŽā§āĻĒā§āĻ°ā§āĻŖāĻ°ā§āĻĒā§ āĻ˛ā§āĻŦā§āĻ˛ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻāĻāĻŋ āĻŦāĻžāĻ āĻĻāĻžāĻ¯āĻŧā§āĻ° āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻāĻŋ āĻ¸āĻŽā§āĻāĻŦāĻ¤ āĻŦāĻŋāĻĒāĻā§āĻāĻ¨āĻāĻāĻžāĻŦā§ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻĒā§āĻ°āĻā§āĻˇā§āĻāĻžāĨ¤ āĻŦāĻžāĻ āĻ¸āĻŽā§āĻĒāĻ°ā§āĻā§ āĻ¸ā§āĻāĻŋāĻ¤ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻ āĻ§āĻ°āĻ¨ā§āĻ° āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ°ā§āĻ° āĻ āĻ§āĻŋāĻāĻžāĻ°ā§āĻ° āĻĢāĻ˛ā§ āĻŦāĻŋāĻĒāĻĻ āĻĻā§āĻāĻž āĻĻāĻŋāĻ¤ā§ āĻĒāĻžāĻ°ā§āĨ¤ /proc/sys/net/ipv6/conf/all/disable_ipv6-āĻ° āĻŽāĻžāĻ¨ 1 āĻšāĻŋāĻ¸āĻžāĻŦā§ āĻ¨āĻŋāĻ°ā§āĻ§āĻžāĻ°āĻŖ āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻ āĻ āĻāĻ āĻŽāĻĄāĻŋā§āĻ˛āĻāĻŋ āĻŦā§āĻ˛ā§āĻ¯āĻžāĻ-āĻ˛āĻŋāĻ¸ā§āĻ āĻāĻ°āĻŦā§āĻ¨ āĻ¨āĻž' āĻāĻŋāĻ¨ā§āĻ¨ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻŦā§āĻ¯āĻŦāĻšāĻžāĻ° āĻāĻ°āĻž āĻāĻŦāĻļā§āĻ¯āĻāĨ¤ āĻāĻĻā§āĻĻāĻŋāĻˇā§āĻ āĻĢāĻžāĻāĻ˛-āĻ¸āĻŋāĻ¸ā§āĻā§āĻŽā§āĻ° āĻŽāĻ§ā§āĻ¯ā§ SELinux āĻāĻ¨āĻā§āĻā§āĻ¸āĻ āĻ¸āĻāĻ°āĻā§āĻˇāĻŖ āĻāĻ°āĻžāĻ° āĻ āĻ¨ā§āĻŽāĻ¤āĻŋ āĻ¨ā§āĻāĨ¤ execstack āĻĢā§āĻ˛ā§āĻ¯āĻžāĻ āĻŽā§āĻā§ āĻŽā§āĻā§ āĻ¯āĻžāĻāĻžāĻ āĻāĻ°ā§āĻ¨ $SOURCE_PATH āĻ¸āĻ āĻŋāĻāĻāĻžāĻŦā§ āĻāĻ˛āĻā§ āĻāĻŋ āĻ¨āĻžāĨ¤ %s-āĻ āĻāĻāĻŋ āĻŦāĻžāĻ āĻšāĻŋāĻ¸āĻžāĻŦā§ āĻĻāĻžāĻāĻŋāĻ˛ āĻāĻ°ā§āĻ¨āĨ¤ āĻ¨āĻŋāĻŽā§āĻ¨āĻ˛āĻŋāĻāĻŋāĻ¤ āĻāĻŽāĻžāĻ¨ā§āĻĄ āĻ¸āĻšāĻ¯ā§āĻā§ exestack āĻĢā§āĻ˛ā§āĻ¯āĻžāĻ āĻŽā§āĻā§ āĻĢā§āĻ˛āĻž āĻ¯āĻžāĻŦā§: