PATH:
usr
/
share
/
setroubleshoot
/
plugins
# @author Dan Walsh <dwalsh@redhat.com> # # Copyright (C) 2010 Red Hat, Inc. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. # import gettext translation=gettext.translation('setroubleshoot-plugins', fallback=True) _=translation.gettext from setroubleshoot.util import * from setroubleshoot.Plugin import Plugin import re import os class plugin(Plugin): summary =_(''' Disable IPV6 properly. ''') problem_description = "" fix_description = "" fix_cmd = "" if_text = _("If you want to disable IPV6 on this machine") then_text = _("you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not blacklist the module'") do_text = _("""Add net.ipv6.conf.all.disable_ipv6 = 1 to /etc/sysctl.conf """) def __init__(self): Plugin.__init__(self, __name__) def analyze(self, avc): if avc.has_any_access_in(['module_request']) and avc.kmod == "net-pf-10": # MATCH, White means ignore avc return self.report() return None
[-] catchall_boolean.py
[edit]
[-] allow_execheap.py
[edit]
[+]
__pycache__
[-] mounton.py
[edit]
[-] selinuxpolicy.py
[edit]
[-] device.py
[edit]
[-] public_content.py
[edit]
[-] kernel_modules.py
[edit]
[-] restorecon_source.py
[edit]
[-] automount_exec_config.py
[edit]
[-] restorecon.py
[edit]
[-] mmap_zero.py
[edit]
[-] mozplugger_remove.py
[edit]
[-] sshd_root.py
[edit]
[-] sys_resource.py
[edit]
[-] leaks.py
[edit]
[-] allow_ftpd_use_nfs.py
[edit]
[-] chrome.py
[edit]
[-] allow_anon_write.py
[edit]
[-] filesystem_associate.py
[edit]
[-] allow_execmod.py
[edit]
[-] allow_execmem.py
[edit]
[-] xen_image.py
[edit]
[-] allow_ftpd_use_cifs.py
[edit]
[-] allow_execstack.py
[edit]
[-] connect_ports.py
[edit]
[-] catchall_labels.py
[edit]
[-] qemu_blk_image.py
[edit]
[-] dac_override.py
[edit]
[-] disable_ipv6.py
[edit]
[-] mozplugger.py
[edit]
[-] httpd_write_content.py
[edit]
[-] associate.py
[edit]
[-] httpd_can_sendmail.py
[edit]
[-] wine.py
[edit]
[-] sandbox_connect.py
[edit]
[-] swapfile.py
[edit]
[-] catchall.py
[edit]
[-] openvpn.py
[edit]
[-] samba_share.py
[edit]
[-] vbetool.py
[edit]
[-] rsync_data.py
[edit]
[-] sys_module.py
[edit]
[+]
..
[-] cvs_data.py
[edit]
[-] setenforce.py
[edit]
[-] httpd_unified.py
[edit]
[-] bind_ports.py
[edit]
[-] qemu_file_image.py
[edit]
[-] __init__.py
[edit]
[-] file.py
[edit]