From 0dc6e840a8e9bc69936808f997061925dc1b35cc Mon Sep 17 00:00:00 2001 From: Miroslav Grepl Date: Mon, 16 Feb 2015 13:04:00 +0100 Subject: [PATCH 01/68] * Mon Feb 16 2015 Miroslav Grepl - 3.0.61-1 - Fix catchall_boolean plugin to show correct man page for source type. --- .gitignore | 1 + setroubleshoot-plugins.spec | 17 ++++++++++++----- sources | 2 +- 3 files changed, 14 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index 85eaeca..de475d4 100644 --- a/.gitignore +++ b/.gitignore @@ -109,3 +109,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.0.58.tar.gz /setroubleshoot-plugins-3.0.59.tar.gz /setroubleshoot-plugins-3.0.60.tar.gz +/setroubleshoot-plugins-3.0.61.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index fbefed1..f207b31 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,13 +2,17 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.0.60 -Release: 2%{?dist} +Version: 3.0.61 +Release: 1%{?dist} License: GPLv2+ Group: Applications/System -URL: https://fedorahosted.org/setroubleshoot -# git clone git://git.fedorahosted.org/git/setroubleshoot.git; cd setroubleshoot -# git archive --prefix setroubleshoot-plugins-3.0.10/426cf8ea7a38e8c5179981219d831368161b65f2 > setroubleshoot-plugins-3.0.10.tar.gz +URL: https://github.com/fedora-selinux/setroubleshoot +# git clone https://github.com/fedora-selinux/setroubleshoot.git +# cd setroubleshoot/plugins/ +# git checkout setroubleshoot-plugins-%{version} +# ./autogen.sh +# make dist + Source0: %{name}-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch @@ -44,6 +48,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Mon Feb 16 2015 Miroslav Grepl - 3.0.61-1 +- Fix catchall_boolean plugin to show correct man page for source type. + * Sun Jun 08 2014 Fedora Release Engineering - 3.0.60-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild diff --git a/sources b/sources index a6b5c2d..1616a1d 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -81c99c2f77c9f155703ed4be1e1f00fa setroubleshoot-plugins-3.0.60.tar.gz +db36949160688c7cf0849a4f6082315a setroubleshoot-plugins-3.0.61.tar.gz From 5a1db765d9dae0751bbbccf96890bac557fc840a Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Fri, 19 Jun 2015 00:40:48 +0000 Subject: [PATCH 02/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index f207b31..a45f977 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.0.61 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -48,6 +48,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Jun 19 2015 Fedora Release Engineering - 3.0.61-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + * Mon Feb 16 2015 Miroslav Grepl - 3.0.61-1 - Fix catchall_boolean plugin to show correct man page for source type. From fec278a0f3d2db1fe1ac18c34748557ede98cdad Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Tue, 18 Aug 2015 18:33:11 +0200 Subject: [PATCH 03/68] setroubleshoot-plugins-3.3.1-0.1 - port setroubleshoot-plugins to Python 3 - based on python3 branch fedora-selinux/setroubleshoot - HEAD e52a05819c4dfe5bdc6998c75780c890ca9ed288 --- .gitignore | 1 + setroubleshoot-plugins.spec | 14 ++++++++++---- sources | 2 +- 3 files changed, 12 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index de475d4..7b3bc73 100644 --- a/.gitignore +++ b/.gitignore @@ -110,3 +110,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.0.59.tar.gz /setroubleshoot-plugins-3.0.60.tar.gz /setroubleshoot-plugins-3.0.61.tar.gz +/setroubleshoot-plugins-3.3.1.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index a45f977..ef8c5fa 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,14 +2,17 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.0.61 -Release: 2%{?dist} +Version: 3.3.1 +Release: 0.1%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot # git clone https://github.com/fedora-selinux/setroubleshoot.git # cd setroubleshoot/plugins/ -# git checkout setroubleshoot-plugins-%{version} +# # for the python3 version use +# git checkout python3 +# # for a relase use +# # git checkout setroubleshoot-plugins-%{version} # ./autogen.sh # make dist @@ -18,7 +21,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch BuildRequires: perl-XML-Parser -BuildRequires: intltool gettext python +BuildRequires: intltool gettext python3 Requires: setroubleshoot-server >= 3.1.16-1 %description @@ -48,6 +51,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Tue Aug 18 2015 Petr Lautrbach 3.3.1-0.1 +- port setroubleshoot-plugins to Python 3 + * Fri Jun 19 2015 Fedora Release Engineering - 3.0.61-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild diff --git a/sources b/sources index 1616a1d..f396cd3 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -db36949160688c7cf0849a4f6082315a setroubleshoot-plugins-3.0.61.tar.gz +3b3ccb2675290ddf793cf90f625f7df1 setroubleshoot-plugins-3.3.1.tar.gz From f8d6dd0c07cbbb7eb066cd30207fe3f25368a24c Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Fri, 21 Aug 2015 09:20:52 +0200 Subject: [PATCH 04/68] Fix date date in %changelog --- setroubleshoot-plugins.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index ef8c5fa..055e008 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -63,7 +63,7 @@ rm -rf %{buildroot} * Sun Jun 08 2014 Fedora Release Engineering - 3.0.60-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild -* Mon Jan 23 2014 Dan Walsh - 3.0.60-1 +* Thu Jan 23 2014 Dan Walsh - 3.0.60-1 - Change file.py plugin to handle alias between file_t and unlabeled_t * Wed Dec 4 2013 Dan Walsh - 3.0.59-1 From 3e7b499f179f5176cbf95ad21c32f89556e6f0dd Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Fri, 21 Aug 2015 12:03:22 +0200 Subject: [PATCH 05/68] Use PYTHON=%{__python3} and require python3-devel the during build process - change /usr/bin/python to /usr/bin/python3 in scripts - HEAD 2c79e9c0543b94def94388e14ee0d71db240e7ca --- setroubleshoot-plugins.spec | 8 ++++---- sources | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 055e008..6305d82 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -21,7 +21,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch BuildRequires: perl-XML-Parser -BuildRequires: intltool gettext python3 +BuildRequires: intltool gettext python3-devel Requires: setroubleshoot-server >= 3.1.16-1 %description @@ -34,12 +34,12 @@ to interpret SELinux AVC denials. %setup -q %build -%configure -make +%configure PYTHON=%{__python3} +make PYTHON=%{__python3} %install rm -rf %{buildroot} -make DESTDIR=%{buildroot} pkgdocdir=%{_pkgdocdir} install +make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %find_lang %{name} %clean diff --git a/sources b/sources index f396cd3..5542c26 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -3b3ccb2675290ddf793cf90f625f7df1 setroubleshoot-plugins-3.3.1.tar.gz +f1c402568e9ec615d149dd2597fccbef setroubleshoot-plugins-3.3.1.tar.gz From dec02e31af8855e9064f52cb2298fb7f35ead7fc Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Tue, 6 Oct 2015 09:17:13 +0200 Subject: [PATCH 06/68] setroubleshoot-plugins-3.3.2-1 - Update restorecon plugin to to identify a mislabeling of executable (BZ#1257682) --- .gitignore | 1 + setroubleshoot-plugins.spec | 7 +++++-- sources | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 7b3bc73..1069d66 100644 --- a/.gitignore +++ b/.gitignore @@ -111,3 +111,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.0.60.tar.gz /setroubleshoot-plugins-3.0.61.tar.gz /setroubleshoot-plugins-3.3.1.tar.gz +/setroubleshoot-plugins-3.3.2.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 6305d82..383def0 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,8 +2,8 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.1 -Release: 0.1%{?dist} +Version: 3.3.2 +Release: 1%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -51,6 +51,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Tue Oct 06 2015 Petr Lautrbach 3.3.2-1 +- Update restorecon plugin to to identify a mislabeling of executable (BZ#1257682) + * Tue Aug 18 2015 Petr Lautrbach 3.3.1-0.1 - port setroubleshoot-plugins to Python 3 diff --git a/sources b/sources index 5542c26..dfe409d 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -f1c402568e9ec615d149dd2597fccbef setroubleshoot-plugins-3.3.1.tar.gz +5a91c810f333994c1d8bb94332dee66e setroubleshoot-plugins-3.3.2.tar.gz From eaa3420056b06cb295daaff9fb2b14800745c1a2 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Tue, 10 Nov 2015 18:07:43 +0000 Subject: [PATCH 07/68] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 383def0..cecc2d6 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.2 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -51,6 +51,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Tue Nov 10 2015 Fedora Release Engineering - 3.3.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 + * Tue Oct 06 2015 Petr Lautrbach 3.3.2-1 - Update restorecon plugin to to identify a mislabeling of executable (BZ#1257682) From 4ca0d0886cd4831b1b5b9b946bc65c510bc6bd78 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 4 Feb 2016 23:53:20 +0000 Subject: [PATCH 08/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index cecc2d6..873a2e5 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.2 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -51,6 +51,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Thu Feb 04 2016 Fedora Release Engineering - 3.3.2-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + * Tue Nov 10 2015 Fedora Release Engineering - 3.3.2-2 - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 From 29497e1468bc6504f74b7917e55993af7986da96 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Mon, 4 Apr 2016 21:27:01 +0200 Subject: [PATCH 09/68] setroubleshoot-plugins-3.3.3-1 - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path s intended. - Suggest to use ausearch instead of grep - Update translations --- setroubleshoot-plugins.spec | 20 ++++++++------------ 1 file changed, 8 insertions(+), 12 deletions(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 873a2e5..20181e1 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,21 +2,12 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.2 -Release: 3%{?dist} +Version: 3.3.3 +Release: 1%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot -# git clone https://github.com/fedora-selinux/setroubleshoot.git -# cd setroubleshoot/plugins/ -# # for the python3 version use -# git checkout python3 -# # for a relase use -# # git checkout setroubleshoot-plugins-%{version} -# ./autogen.sh -# make dist - -Source0: %{name}-%{version}.tar.gz +Source0: https://fedorahosted.org/releases/s/e/setroubleshoot/%{name}-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch @@ -51,6 +42,11 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Mon Apr 04 2016 Petr Lautrbach - 3.3.3-1 +- Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended. +- Suggest to use ausearch instead of grep +- Update translations + * Thu Feb 04 2016 Fedora Release Engineering - 3.3.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild From 3896558f50ecc373edb7dd33f5f9ce235bbfc0ad Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Mon, 4 Apr 2016 21:35:44 +0200 Subject: [PATCH 10/68] Upload setroubleshoot-plugins-3.3.3.tar.gz --- .gitignore | 1 + sources | 1 + 2 files changed, 2 insertions(+) diff --git a/.gitignore b/.gitignore index 1069d66..1800d4d 100644 --- a/.gitignore +++ b/.gitignore @@ -112,3 +112,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.0.61.tar.gz /setroubleshoot-plugins-3.3.1.tar.gz /setroubleshoot-plugins-3.3.2.tar.gz +/setroubleshoot-plugins-3.3.3.tar.gz diff --git a/sources b/sources index dfe409d..f9d5a1c 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ 5a91c810f333994c1d8bb94332dee66e setroubleshoot-plugins-3.3.2.tar.gz +6bb0e38259ba4baed034a680fb2b3976 setroubleshoot-plugins-3.3.3.tar.gz From e1b29265e8fe61e6fd493a925b4b3f0b69ffa88f Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Fri, 6 May 2016 14:02:00 +0200 Subject: [PATCH 11/68] setroubleshoot-plugins-3.3.4-1 - Suggest my-.pp modules instead of mypol.pp (#1329037) - Suggest priority 300 for modules created by audit2allow --- .gitignore | 1 + setroubleshoot-plugins.spec | 8 ++++++-- sources | 3 +-- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 1800d4d..9f05827 100644 --- a/.gitignore +++ b/.gitignore @@ -113,3 +113,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.1.tar.gz /setroubleshoot-plugins-3.3.2.tar.gz /setroubleshoot-plugins-3.3.3.tar.gz +/setroubleshoot-plugins-3.3.4.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 20181e1..25633db 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,7 +2,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.3 +Version: 3.3.4 Release: 1%{?dist} License: GPLv2+ Group: Applications/System @@ -13,7 +13,7 @@ BuildArch: noarch BuildRequires: perl-XML-Parser BuildRequires: intltool gettext python3-devel -Requires: setroubleshoot-server >= 3.1.16-1 +Requires: setroubleshoot-server >= 3.3.6 %description This package provides a set of analysis plugins for use with @@ -42,6 +42,10 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri May 06 2016 Petr Lautrbach - 3.3.4-1 +- Suggest my-.pp modules instead of mypol.pp (#1329037) +- Suggest priority 300 for modules created by audit2allow + * Mon Apr 04 2016 Petr Lautrbach - 3.3.3-1 - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended. - Suggest to use ausearch instead of grep diff --git a/sources b/sources index f9d5a1c..ae3a9bb 100644 --- a/sources +++ b/sources @@ -1,2 +1 @@ -5a91c810f333994c1d8bb94332dee66e setroubleshoot-plugins-3.3.2.tar.gz -6bb0e38259ba4baed034a680fb2b3976 setroubleshoot-plugins-3.3.3.tar.gz +5e7117e7306087c00cf3bd287dce172a setroubleshoot-plugins-3.3.4.tar.gz From 1514cd58b0e644a6735a5b3e3d0a17c47a48e176 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Wed, 22 Jun 2016 17:23:43 +0200 Subject: [PATCH 12/68] setroubleshoot-plugins-3.3.5.1-1 - Catch all subprocess exceptions - Use subprocess.check_output() with a sequence of program arguments - Fix location of selinuxfs mount point --- .gitignore | 1 + setroubleshoot-plugins.spec | 7 ++++++- sources | 2 +- 3 files changed, 8 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 9f05827..439c170 100644 --- a/.gitignore +++ b/.gitignore @@ -114,3 +114,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.2.tar.gz /setroubleshoot-plugins-3.3.3.tar.gz /setroubleshoot-plugins-3.3.4.tar.gz +/setroubleshoot-plugins-3.3.5.1.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 25633db..b88256d 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,7 +2,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.4 +Version: 3.3.5.1 Release: 1%{?dist} License: GPLv2+ Group: Applications/System @@ -42,6 +42,11 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Wed Jun 22 2016 Petr Lautrbach - 3.3.5.1-1 +- Catch all subprocess exceptions +- Use subprocess.check_output() with a sequence of program arguments +- Fix location of selinuxfs mount point + * Fri May 06 2016 Petr Lautrbach - 3.3.4-1 - Suggest my-.pp modules instead of mypol.pp (#1329037) - Suggest priority 300 for modules created by audit2allow diff --git a/sources b/sources index ae3a9bb..558736c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -5e7117e7306087c00cf3bd287dce172a setroubleshoot-plugins-3.3.4.tar.gz +e88fd2ccdbbbaf5833dd59895a3e2ad2 setroubleshoot-plugins-3.3.5.1.tar.gz From f9be20076f3c508317b443a94429bb1ab84dac57 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Thu, 1 Sep 2016 11:12:17 +0200 Subject: [PATCH 13/68] setroubleshoot-plugins-3.3.6-1 - Fix catchall plugin message for capability2 (#1360392) - Stop executing restorecon plugin on specified path prefixes - Update translations --- setroubleshoot-plugins.spec | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index b88256d..3c786e8 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,7 +2,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.5.1 +Version: 3.3.6 Release: 1%{?dist} License: GPLv2+ Group: Applications/System @@ -42,6 +42,11 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Thu Sep 01 2016 Petr Lautrbach 3.3.6-1 +- Fix catchall plugin message for capability2 (#1360392) +- Stop executing restorecon plugin on specified path prefixes (#1270778) +- Update translations + * Wed Jun 22 2016 Petr Lautrbach - 3.3.5.1-1 - Catch all subprocess exceptions - Use subprocess.check_output() with a sequence of program arguments From 95e6de44aea9778e8465ebc566547c0ffdb372cc Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Thu, 1 Sep 2016 11:14:38 +0200 Subject: [PATCH 14/68] Upload setroubleshoot-plugins-3.3.6.tar.gz --- .gitignore | 1 + sources | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index 439c170..810c28f 100644 --- a/.gitignore +++ b/.gitignore @@ -115,3 +115,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.3.tar.gz /setroubleshoot-plugins-3.3.4.tar.gz /setroubleshoot-plugins-3.3.5.1.tar.gz +/setroubleshoot-plugins-3.3.6.tar.gz diff --git a/sources b/sources index 558736c..0774d2a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -e88fd2ccdbbbaf5833dd59895a3e2ad2 setroubleshoot-plugins-3.3.5.1.tar.gz +1516cd8120d31a03d132bd2dc1986e55 setroubleshoot-plugins-3.3.6.tar.gz From f1c027eee7f3eedc88c03b0883c7730fe3a8ad2e Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 11 Feb 2017 13:20:17 +0000 Subject: [PATCH 15/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 3c786e8..33e9fc0 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.6 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -42,6 +42,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Feb 11 2017 Fedora Release Engineering - 3.3.6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + * Thu Sep 01 2016 Petr Lautrbach 3.3.6-1 - Fix catchall plugin message for capability2 (#1360392) - Stop executing restorecon plugin on specified path prefixes (#1270778) From 255f178899bc859307d115170269cbd62e09e1ce Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Thu, 2 Mar 2017 10:48:14 +0100 Subject: [PATCH 16/68] Change links from fedorahosted.org to pagure.io --- setroubleshoot-plugins.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 33e9fc0..793b3bf 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -7,7 +7,7 @@ Release: 2%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot -Source0: https://fedorahosted.org/releases/s/e/setroubleshoot/%{name}-%{version}.tar.gz +Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch From 7ad56c94f2cef3ca23274172d140f156acefcbe5 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Tue, 13 Jun 2017 16:57:45 +0200 Subject: [PATCH 17/68] setroubleshoot-plugins-3.3.7-1 * Tue Jun 13 2017 Petr Lautrbach - 3.3.7-1 - cvs_data: Add "fix_cmd" and enable "fix" button - chrome: Update "fix_cmd" and enable "fix" button - automount_exec_config: Update messages and enable "fix" button - allow_ftpd_use_*: Update messages and enable "fix" button - allow_execmod: Update messages and enable "fix" button - catchall_boolean: fix import of boolean_desc (#1444549) - restorecon: fix "then" text - Spelling fixes --- .gitignore | 1 + setroubleshoot-plugins.spec | 14 ++++++++++++-- sources | 2 +- 3 files changed, 14 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 810c28f..74d3fcc 100644 --- a/.gitignore +++ b/.gitignore @@ -116,3 +116,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.4.tar.gz /setroubleshoot-plugins-3.3.5.1.tar.gz /setroubleshoot-plugins-3.3.6.tar.gz +/setroubleshoot-plugins-3.3.7.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 793b3bf..21990e9 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,8 +2,8 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.6 -Release: 2%{?dist} +Version: 3.3.7 +Release: 1%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -42,6 +42,16 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Tue Jun 13 2017 Petr Lautrbach - 3.3.7-1 +- cvs_data: Add "fix_cmd" and enable "fix" button +- chrome: Update "fix_cmd" and enable "fix" button +- automount_exec_config: Update messages and enable "fix" button +- allow_ftpd_use_*: Update messages and enable "fix" button +- allow_execmod: Update messages and enable "fix" button +- catchall_boolean: fix import of boolean_desc (#1444549) +- restorecon: fix "then" text +- Spelling fixes + * Sat Feb 11 2017 Fedora Release Engineering - 3.3.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild diff --git a/sources b/sources index 0774d2a..38bf10a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -1516cd8120d31a03d132bd2dc1986e55 setroubleshoot-plugins-3.3.6.tar.gz +SHA512 (setroubleshoot-plugins-3.3.7.tar.gz) = 27460a48c2ee7962debe5d2e5b406efb2969ad32d9316ec34caf6325da71c3efd622675359e10275873f9266761704a8249800c7d81c9fe1b5b815748794383f From fbde3ea6e8bcce44c01463606f5c55fa9efdf9de Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 27 Jul 2017 18:28:31 +0000 Subject: [PATCH 18/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 21990e9..28dbed6 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.7 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -42,6 +42,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Thu Jul 27 2017 Fedora Release Engineering - 3.3.7-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + * Tue Jun 13 2017 Petr Lautrbach - 3.3.7-1 - cvs_data: Add "fix_cmd" and enable "fix" button - chrome: Update "fix_cmd" and enable "fix" button From 2cca239508e8d4d44dfc90dc21fcb29bb07d13c8 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Fri, 15 Sep 2017 08:06:19 +0200 Subject: [PATCH 19/68] setroubleshoot-plugins-3.3.8-1 - Do not split If sentences to framework and plugins - requires setroubleshoot 3.3.13 at least - (rhbz#1210243, rhbz#1322734, hbz#1115510) - Update translations --- .gitignore | 1 + setroubleshoot-plugins.spec | 11 ++++++++--- sources | 2 +- 3 files changed, 10 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 74d3fcc..a426f39 100644 --- a/.gitignore +++ b/.gitignore @@ -117,3 +117,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.5.1.tar.gz /setroubleshoot-plugins-3.3.6.tar.gz /setroubleshoot-plugins-3.3.7.tar.gz +/setroubleshoot-plugins-3.3.8.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 28dbed6..9e4af03 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,8 +2,8 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.7 -Release: 2%{?dist} +Version: 3.3.8 +Release: 1%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -13,7 +13,7 @@ BuildArch: noarch BuildRequires: perl-XML-Parser BuildRequires: intltool gettext python3-devel -Requires: setroubleshoot-server >= 3.3.6 +Requires: setroubleshoot-server >= 3.3.13 %description This package provides a set of analysis plugins for use with @@ -42,6 +42,11 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Sep 15 2017 Petr Lautrbach - 3.3.8-1 +- Do not split If sentences to framework and plugins - requires + setroubleshoot 3.3.13 at least - (rhbz#1210243, rhbz#1322734, rhbz#1115510) +- Update translations + * Thu Jul 27 2017 Fedora Release Engineering - 3.3.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild diff --git a/sources b/sources index 38bf10a..cc9ecea 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (setroubleshoot-plugins-3.3.7.tar.gz) = 27460a48c2ee7962debe5d2e5b406efb2969ad32d9316ec34caf6325da71c3efd622675359e10275873f9266761704a8249800c7d81c9fe1b5b815748794383f +SHA512 (setroubleshoot-plugins-3.3.8.tar.gz) = 91d370e04a86632c4f374e5c9adcd314b8c7f2355b738c9d1a76382805c950cd30ff1b0c2a44e0246c400d78025e8b0b1b1ff90488d048f89a6b38a7c758795e From 8d2c8f7c69d8bdfa8a5e3edd79e86e7f8885e78d Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Sat, 18 Nov 2017 22:41:51 +0100 Subject: [PATCH 20/68] setroubleshoot-plugins-3.3.9-1 - Fix catchall plugin message for process2 --- .gitignore | 1 + setroubleshoot-plugins.spec | 5 ++++- sources | 1 + 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index a426f39..6ade5ad 100644 --- a/.gitignore +++ b/.gitignore @@ -118,3 +118,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.6.tar.gz /setroubleshoot-plugins-3.3.7.tar.gz /setroubleshoot-plugins-3.3.8.tar.gz +/setroubleshoot-plugins-3.3.9.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 9e4af03..29e65e2 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -2,7 +2,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.8 +Version: 3.3.9 Release: 1%{?dist} License: GPLv2+ Group: Applications/System @@ -42,6 +42,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Nov 18 2017 Petr Lautrbach - 3.3.9-1 +- Fix catchall plugin message for process2 + * Fri Sep 15 2017 Petr Lautrbach - 3.3.8-1 - Do not split If sentences to framework and plugins - requires setroubleshoot 3.3.13 at least - (rhbz#1210243, rhbz#1322734, rhbz#1115510) diff --git a/sources b/sources index cc9ecea..955be3e 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ SHA512 (setroubleshoot-plugins-3.3.8.tar.gz) = 91d370e04a86632c4f374e5c9adcd314b8c7f2355b738c9d1a76382805c950cd30ff1b0c2a44e0246c400d78025e8b0b1b1ff90488d048f89a6b38a7c758795e +SHA512 (setroubleshoot-plugins-3.3.9.tar.gz) = 8f5084f49ebb70268e14de7bed1c6706f847f3c3f0b9044ddfdd22b8fd189b2881c80bd20530167342b3bcb0963976520505351471d425228457131bf9707912 From ed6ad064845703a61e8931a81483317fa7113941 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Mon, 20 Nov 2017 07:29:35 +0100 Subject: [PATCH 21/68] setroubleshoot-plugins-3.3.9-2 - Update translations --- 0001-plugins-Update-translations.patch | 1310 ++++++++++++++++++++++++ setroubleshoot-plugins.spec | 8 +- sources | 1 - 3 files changed, 1316 insertions(+), 3 deletions(-) create mode 100644 0001-plugins-Update-translations.patch diff --git a/0001-plugins-Update-translations.patch b/0001-plugins-Update-translations.patch new file mode 100644 index 0000000..10f8347 --- /dev/null +++ b/0001-plugins-Update-translations.patch @@ -0,0 +1,1310 @@ +From bb5c936528299f34208c569e5e2764ac82fb44a2 Mon Sep 17 00:00:00 2001 +From: Petr Lautrbach +Date: Sat, 18 Nov 2017 23:16:49 +0100 +Subject: [PATCH] plugins: Update translations + +--- + plugins/po/ca.po | 136 ++++++++++++++----- + plugins/po/fr.po | 394 ++++++++++++++++++++++++++++++++++++++++++++++++++++--- + 2 files changed, 479 insertions(+), 51 deletions(-) + +diff --git a/plugins/po/ca.po b/plugins/po/ca.po +index c9c9055..38f31e9 100644 +--- a/plugins/po/ca.po ++++ b/plugins/po/ca.po +@@ -16,7 +16,7 @@ msgstr "" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-08-22 07:37-0400\n" ++"PO-Revision-Date: 2017-10-15 02:58-0400\n" + "Last-Translator: Robert Antoni Buj Gelonch \n" + "Language-Team: Catalan (http://www.transifex.com/projects/p/fedora/language/" + "ca/)\n" +@@ -276,7 +276,7 @@ msgstr "" + + #: ../src/allow_execmod.py:114 + msgid "Change label on the library." +-msgstr "" ++msgstr "Canvia l'etiqueta a la biblioteca." + + #: ../src/allow_execstack.py:60 + msgid "" +@@ -419,16 +419,16 @@ msgid "" + " " + msgstr "" + "\n" +-" El SELinux ha evitat que el dimoni ftp $ACCESS fitxers emmagatzemats a " +-"un sistema de fitxers CIFS.\n" ++" SELinux ha evitat que el dimoni ftp $ACCESS fitxers emmagatzemats a un " ++"sistema de fitxers CIFS.\n" + " CIFS (Comment Internet File System) és un sistema de fitxers de xarxa " + "semblant a\n" + " SMB (http://www." + "microsoft.com/mind/1196/cifs.asp)\n" + " El dimoni ftp ha intentat llegir un o més fitxers o directoris d'un\n" +-" sistema de fitxers muntat d'aquest tipus. Degut a què els sistemes de " +-"fitxers CIFS\n" +-" no suporten la granularitat de l'etiquetatge del SELinux, tots els " ++" sistema de fitxers muntat d'aquest tipus. A causa del fet que els " ++"sistemes de fitxers CIFS\n" ++" no admeten la granularitat de l'etiquetatge del SELinux, tots els " + "fitxers i directoris del\n" + " sistema de fitxers tindran el mateix context de seguretat.\n" + " \n" +@@ -512,14 +512,14 @@ msgid "" + " " + msgstr "" + "\n" +-" El SELinux ha evitat que el dimoni ftp $ACCESS fitxers desats en un " +-"sistema de fitxers NFS.\n" ++" SELinux ha evitat que el dimoni ftp $ACCESS fitxers desats en un sistema " ++"de fitxers NFS.\n" + " NFS (Network Filesystem) és un sistema de fitxers de xarxa molt " + "utilitzat en sistemes Unix / Linux\n" + " \n" + " El dimoni ftp ha intentat de llegir un o més fitxers o directoris d'un\n" +-" sistema de fitxers muntat d'aquest tipus. Degut a què el sistema de " +-"fitxers NFS\n" ++" sistema de fitxers muntat d'aquest tipus. A causa del fet que el sistema " ++"de fitxers NFS\n" + " no disposa d'etiquetació amb granularitat del SELinux, tots els fitxers\n" + " i directoris del sistema de fitxers tindran el mateix context de " + "seguretat.\n" +@@ -645,7 +645,7 @@ msgstr "" + + #: ../src/automount_exec_config.py:57 + msgid "Change file context." +-msgstr "" ++msgstr "Canvia el context del fitxer." + + #: ../src/bind_ports.py:27 + msgid "" +@@ -708,6 +708,7 @@ msgstr "" + #: ../src/bind_ports.py:47 + msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" + msgstr "" ++"Si voleu permetre que $SOURCE_PATH es vinculi al port de xarxa $PORT_NUMBER" + + #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 + #, python-format +@@ -748,9 +749,9 @@ msgid "" + msgstr "" + "\n" + "\n" +-" El SELinux ha denegat la sol·licitud d'accés de $SOURCE. Els paràmetres\n" +-" booleans \n" +-" no permeten aquest accés. Si no heu configurat $SOURCE per\n" ++" SELinux ha denegat la sol·licitud d'accés de $SOURCE. Els ajusts booleans " ++"\n" ++" actuals no permeten aquest accés. Si no heu configurat $SOURCE per\n" + " sol·licitar aquest accés, això podria indicar un intent d'intrusió.\n" + " Si teniu la intenció de permetre aquest accés, necessiteu canviar els\n" + " booleans del sistema.\n" +@@ -873,6 +874,8 @@ msgid "" + "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " + "processes labeled $TARGET_TYPE by default." + msgstr "" ++"Si creieu que per defecte $SOURCE_BASE_PATH pot accedir al $ACCESS en els " ++"processos etiquetats $TARGET_TYPE." + + #: ../src/catchall.py:52 + msgid "" +@@ -904,6 +907,9 @@ msgid "" + "# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME\n" + "# semodule -X 300 -i my-$MODULE_NAME.pp" + msgstr "" ++"Permeteu-ho per ara amb l'execució de:\n" ++"# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME\n" ++"# semodule -X 300 -i my-$MODULE_NAME.pp" + + #: ../src/connect_ports.py:27 ../src/sandbox_connect.py:29 + msgid "" +@@ -957,6 +963,7 @@ msgstr "" + msgid "" + "If you want to allow $SOURCE_PATH to connect to network port $PORT_NUMBER" + msgstr "" ++"Si voleu permetre que $SOURCE_PATH es connecti al port de xarxa $PORT_NUMBER" + + #: ../src/chrome.py:31 + msgid "" +@@ -983,15 +990,15 @@ msgstr "" + #: ../src/chrome.py:38 ../src/mozplugger.py:38 + #, python-format + msgid "If you want to use the %s package" +-msgstr "" ++msgstr "Si voleu utilitzar el paquet %s" + + #: ../src/chrome.py:43 + msgid "you must turn off SELinux controls on the Chrome plugins." +-msgstr "heu d'aturar els controls de SELinux als complements de Chrome." ++msgstr "heu d'aturar els controls de SELinux als connectors de Chrome." + + #: ../src/chrome.py:51 + msgid "Disable SELinux controls on Chrome plugins" +-msgstr "" ++msgstr "Inhabilita els controls de SELinux als connectors de Chrome" + + #: ../src/cvs_data.py:27 + msgid "" +@@ -1031,6 +1038,7 @@ msgstr "" + #: ../src/cvs_data.py:44 + msgid "If $TARGET_BASE_PATH should be shared via the cvs daemon" + msgstr "" ++"Si $TARGET_BASE_PATH hauria de compartir-se a través del dimoni de cvs" + + #: ../src/cvs_data.py:45 ../src/qemu_file_image.py:49 + msgid "You need to change the label on $TARGET_BASE_PATH'" +@@ -1038,7 +1046,7 @@ msgstr "Necessiteu canviar l'etiqueta a $TARGET_BASE_PATH'" + + #: ../src/cvs_data.py:54 + msgid "Change label" +-msgstr "" ++msgstr "Canvia l'etiqueta" + + #: ../src/dac_override.py:28 + msgid "\n" +@@ -1065,6 +1073,8 @@ msgid "" + "If you want to help identify if domain needs this access or you have a file " + "with the wrong permissions on your system" + msgstr "" ++"Si voleu ajudar a identificar si el domini necessita aquest accés o si teniu " ++"un fitxer amb permisos incorrectes al vostre sistema" + + #: ../src/dac_override.py:39 + msgid "" +@@ -1136,6 +1146,37 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++"\n" ++" SELinux ha denegat $SOURCE l'accés \"$ACCESS\" al dispositiu " ++"$TARGET_PATH.\n" ++" $TARGET_PATH està mal etiquetat, aquest dispositiu té el tipus " ++"d'etiqueta per defecte del directori /dev, que no hauria\n" ++" d'ocórrer. Tots els dispositius de caràcters i/o de blocs haurien de " ++"tenir una etiqueta.\n" ++"\n" ++" Podeu intentar de canviar l'etiqueta del fitxer mitjançant\n" ++"\n" ++" restorecon -v '$TARGET_PATH'.\n" ++"\n" ++" Si el dispositiu segueix estant etiquetat amb device_t, aleshores és un " ++"error de programari en la política de SELinux.\n" ++"\n" ++" Si us plau, ompliu un informe d'error de programari.\n" ++"\n" ++" Si mireu les altres etiquetes dels dispositius similars, ls -lZ /dev/" ++"SIMILAR, i trobeu un tipus que podria funcionar amb $TARGET_PATH,\n" ++" podeu utilitzar chcon -t TIPUS_SIMILAR '$TARGET_PATH', si això corregeix " ++"el problema, ho podeu fer permanent amb l'execució de\n" ++" semanage fcontext -a -t TIPUS_SIMILAR '$FIX_TARGET_PATH'\n" ++"\n" ++" Si restorecon canvia el context, això indica que l'aplicació que va " ++"crear el dispositiu, el va crear sense\n" ++" l'ús de les API de SELinux. Si podeu esbrinar quina aplicació va crear " ++"el dispositiu, si us plau, ompli un informe d'error de programari contra " ++"aquesta aplicació.\n" ++" \n" ++" " + + #: ../src/device.py:56 + msgid "" +@@ -1174,7 +1215,7 @@ msgstr "\n" + + #: ../src/disable_ipv6.py:40 + msgid "If you want to disable IPV6 on this machine" +-msgstr "" ++msgstr "Si voleu inhabilitar IPV6 en aquesta màquina" + + #: ../src/disable_ipv6.py:41 + msgid "" +@@ -1291,6 +1332,8 @@ msgid "" + "If you believe $SOURCE_BASE_PATH should be allowed to create " + "$TARGET_BASE_PATH files" + msgstr "" ++"Si creieu que $SOURCE_BASE_PATH pot crear els fitxers $TARGET_BASE_PATH " ++"files" + + #: ../src/filesystem_associate.py:44 + msgid "" +@@ -1416,6 +1459,8 @@ msgid "" + "If you want to allow httpd to execute cgi scripts and to unify HTTPD " + "handling of all content files." + msgstr "" ++"Si voleu permetre que httpd executi els scripts cgi i unificar el tractament " ++"HTTPD de tots els fitxers de continguts." + + #: ../src/httpd_unified.py:58 + msgid "" +@@ -1452,8 +1497,7 @@ msgid "" + msgstr "" + "\n" + " El vostre sistema pot trobar-se seriosament en un compromís! " +-"$SOURCE_PATH va intentar de modificar la configuració del nucli del sistema " +-"operatiu.\n" ++"$SOURCE_PATH va intentar de modificar la configuració del kernel.\n" + " " + + #: ../src/kernel_modules.py:33 +@@ -1475,6 +1519,8 @@ msgid "" + "If you do not think $SOURCE_BASE_PATH should try $ACCESS access on " + "$TARGET_BASE_PATH." + msgstr "" ++"Si no creieu que $SOURCE_PATH hagi d'internar l'accés $ACCESS en " ++"$TARGET_BASE_PATH." + + #: ../src/kernel_modules.py:45 ../src/selinuxpolicy.py:45 + msgid "" +@@ -1541,6 +1587,9 @@ msgid "" + "$TARGET_BASE_PATH $TARGET_CLASS, because you believe it should not need this " + "access." + msgstr "" ++"Si voleu ignorar $SOURCE_BASE_PATH que intenti l'accés $ACCESS " ++"al$TARGET_BASE_PATH $TARGET_CLASS, perquè creieu que no hauria de necessitar " ++"aquest accés." + + #: ../src/leaks.py:43 + msgid "" +@@ -1555,6 +1604,8 @@ msgid "" + "# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" + "# semodule -X 300 -i my-$SOURCE.pp" + msgstr "" ++"# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" ++"# semodule -X 300 -i my-$SOURCE.pp" + + #: ../src/mmap_zero.py:29 + msgid "" +@@ -1565,7 +1616,7 @@ msgid "" + msgstr "" + "\n" + " El vostre sistema pot trobar-se seriosament en un compromís! " +-"$SOURCE_PATH va intentar mmap la memòria baixa del sistema operatiu.\n" ++"$SOURCE_PATH va intentar mmap la memòria baixa del kernel.\n" + " " + + #: ../src/mmap_zero.py:33 +@@ -1592,7 +1643,7 @@ msgid "" + "kernel." + msgstr "" + "Si no creieu que $SOURCE_PATH necessiti fer mmap en la memòria baixa al " +-"nucli del sistema operatiu." ++"kernel." + + #: ../src/mmap_zero.py:47 + msgid "you may be under attack by a hacker, this is a very dangerous access." +@@ -1667,7 +1718,7 @@ msgstr "" + + #: ../src/mozplugger.py:43 + msgid "you must turn off SELinux controls on the Firefox plugins." +-msgstr "heu d'aturar els controls de SELinux als complements de Firefox." ++msgstr "heu d'aturar els controls de SELinux als connectors de Firefox." + + #: ../src/mozplugger_remove.py:31 + msgid "" +@@ -1701,7 +1752,7 @@ msgid "" + "If you want to to continue using SELinux Firefox plugin containment rather " + "then using mozplugger package" + msgstr "" +-"Si voleu continuar utilitzant la contenció del complement de Firefix de " ++"Si voleu continuar utilitzant la contenció del connector de Firefox de " + "SELinux en lloc d'utilitzar el paquet mozplugger" + + #: ../src/mozplugger_remove.py:45 +@@ -1732,18 +1783,28 @@ msgid "" + " # restorecon -R /root/.ssh\n" + " " + msgstr "" ++"\n" ++" Podeu restaurar el context per defecte de sistema d'aquest fitxer amb " ++"l'execució\n" ++" de l'ordre restorecon.\n" ++" # restorecon -R /root/.ssh\n" ++" " + + #: ../src/openvpn.py:49 + msgid "" + "If you want to mv $TARGET_BASE_PATH to standard location so that " + "$SOURCE_BASE_PATH can have $ACCESS access" + msgstr "" ++"Si voleu mv $TARGET_BASE_PATH a una ubicació estàndard perquè " ++"$SOURCE_BASE_PATH pugui tenir l'accés $ACCESS" + + #: ../src/openvpn.py:51 + msgid "" + "If you want to modify the label on $TARGET_BASE_PATH so that " + "$SOURCE_BASE_PATH can have $ACCESS access on it" + msgstr "" ++"Si voleu modificar l'etiqueta $TARGET_BASE_PATH perquè així " ++"$SOURCE_BASE_PATH hi pugui tenir l'accés $ACCESS" + + #: ../src/openvpn.py:55 + msgid "you must move the cert file to the ~/.cert directory" +@@ -1778,7 +1839,7 @@ msgstr "" + + #: ../src/public_content.py:50 + msgid "If you want to treat $TARGET_BASE_PATH as public content" +-msgstr "" ++msgstr "Si voleu tractar $TARGET_BASE_PATH com a un contingut públic" + + #: ../src/public_content.py:51 + msgid "" +@@ -1998,7 +2059,7 @@ msgstr "" + + #: ../src/rsync_data.py:45 + msgid "If $TARGET_BASE_PATH should be shared via the RSYNC daemon" +-msgstr "" ++msgstr "Si $TARGET_BASE_PATH ha de compartir-se a través del dimoni de RSYNC" + + #: ../src/rsync_data.py:46 + msgid "You need to change the label on $TARGET_BASE_PATH" +@@ -2147,7 +2208,7 @@ msgstr "" + + #: ../src/setenforce.py:48 + msgid "If you believe $SOURCE_PATH tried to disable SELinux." +-msgstr "" ++msgstr "Si crieu que $SOURCE_PATH va intentar inhabilitar SELinux." + + #: ../src/setenforce.py:49 + msgid "" +@@ -2173,6 +2234,12 @@ msgid "" + " # restorecon -R /root/.ssh\n" + " " + msgstr "" ++"\n" ++" Podeu restaurar el context per defecte de sistema d'aquest fitxer amb " ++"l'execució\n" ++" de l'ordre restorecon.\n" ++" # restorecon -R /root/.ssh\n" ++" " + + #: ../src/sshd_root.py:55 + msgid "Restore Context" +@@ -2184,6 +2251,10 @@ msgid "" + " SELinux is preventing $SOURCE_PATH \"$ACCESS\" to $TARGET_PATH.\n" + " " + msgstr "" ++"\n" ++" SELinux està impedint que en $SOURCE_PATH es tingui l'accés \"$ACCESS\" " ++"a $TARGET_PATH.\n" ++" " + + #: ../src/swapfile.py:31 + msgid "" +@@ -2212,6 +2283,8 @@ msgid "" + "If you do not believe your $SOURCE_PATH should be modifying the kernel, by " + "loading kernel modules" + msgstr "" ++"Si no creieu que el vostre $SOURCE_PATH hagi d'estar modificant el kernel " ++"amb la càrrega de mòduls del kernel" + + #: ../src/sys_module.py:29 + msgid "You might have been hacked." +@@ -2226,8 +2299,7 @@ msgid "" + msgstr "" + "\n" + " El vostre sistema pot trobar-se seriosament en un compromís! " +-"$SOURCE_PATH va intentar de carregar un mòdul del nucli del sistema operatiu." +-"\n" ++"$SOURCE_PATH va intentar de carregar un mòdul del kernel.\n" + " " + + #: ../src/sys_module.py:37 +@@ -2247,6 +2319,8 @@ msgid "" + "If you do not believe that $SOURCE_PATH should be attempting to modify the " + "kernel by loading a kernel module." + msgstr "" ++"Si no creieu que $SOURCE_PATH hagi d'intentar de modificar el kernel amb la " ++"càrrega d'un mòdul del kernel." + + #: ../src/sys_module.py:47 + msgid "A process might be attempting to hack into your system." +diff --git a/plugins/po/fr.po b/plugins/po/fr.po +index f38c77a..a2c76d5 100644 +--- a/plugins/po/fr.po ++++ b/plugins/po/fr.po +@@ -16,6 +16,7 @@ + # Thomas Canniot , 2007 + # Julie Carbone , 2016. #zanata + # corina roe , 2016. #zanata ++# Jean-Baptiste Holcroft , 2017. #zanata + msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" +@@ -24,8 +25,8 @@ msgstr "" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2016-08-21 09:40-0400\n" +-"Last-Translator: corina roe \n" ++"PO-Revision-Date: 2017-10-05 09:21-0400\n" ++"Last-Translator: Jean-Baptiste Holcroft \n" + "Language-Team: French (http://www.transifex.com/projects/p/fedora/language/" + "fr/)\n" + "Language: fr\n" +@@ -89,6 +90,8 @@ msgid "" + "If you want to allow $SOURCE_PATH to be able to write to shared public " + "content" + msgstr "" ++"Si vous souhaitez autoriser $SOURCE_PATH à écrire sur un contenu public " ++"partagé" + + #: ../src/allow_anon_write.py:45 + msgid "" +@@ -164,6 +167,8 @@ msgid "" + "If you do not think $SOURCE_PATH should need to map heap memory that is both " + "writable and executable." + msgstr "" ++"Si vous pensez que $SOURCE_PATH ne devrait pas faire correspondre la mémoire " ++"du tas, qui est à la fois exécutable et accessible en écriture." + + #: ../src/allow_execheap.py:51 + msgid "you need to report a bug. This is a potentially dangerous access." +@@ -205,6 +210,23 @@ msgid "" + " workaround, until the library is fixed. Please file a bug report.\n" + " " + msgstr "" ++"\n" ++" L'application $SOURCE a essayé de charger $TARGET_PATH qui\n" ++" exige une réinstallation du texte. C'est un problème potentiel de " ++"sécurité .\n" ++" La plupart des bibliothèques n'ont pas besoin de cette permission. Les " ++"bibliothèques sont\n" ++" parfois programmées incorrectement et demandent cette permission. La " ++"page web\n" ++" Essais de " ++"protection mémoire de SELinux\n" ++" explique comment retirer ces exigences. Vous pouvez configurer\n" ++" temporairement SELinux pour permettre à $TARGET_PATH d'utiliser le ré-" ++"adressage et contourner\n" ++" cette protection, jusqu'à ce que la bibliothèque soit corrigée. Merci de " ++"remplir un \n" ++" rapport de bogue pour ce paquet.\n" ++" " + + #: ../src/allow_execmod.py:44 + msgid "" +@@ -224,6 +246,26 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++" L'application $SOURCE a essayé de charger $TARGET_PATH qui\n" ++" exige une réinstallation du texte. C'est un problème potentiel de " ++"sécurité .\n" ++" La plupart des bibliothèques n'ont pas besoin de cette permission. Les " ++"bibliothèques sont\n" ++" parfois programmées incorrectement et demandent cette permission. La " ++"page web\n" ++" Essais de " ++"protection mémoire de SELinux\n" ++" explique le processus de vérification. Cet outil a examiné la " ++"bibliothèque\n" ++" et il apparait qu'elle a été correctement construite. Pour cette raison, " ++"\n" ++" setroubleshoot ne peut pas être certain que cette application est \n" ++" compromise. Cela pourrait être un problème sérieux. Votre système \n" ++" pourrait être compromis.\n" ++"\n" ++" Contactez votre administrateur et informez-le de ce problème. \n" ++" " + + #: ../src/allow_execmod.py:61 + msgid "" +@@ -249,7 +291,7 @@ msgstr "" + + #: ../src/allow_execmod.py:114 + msgid "Change label on the library." +-msgstr "" ++msgstr "Changer d’étiquette sur la bibliothèque." + + #: ../src/allow_execstack.py:60 + msgid "" +@@ -325,6 +367,9 @@ msgid "" + "If you do not think $SOURCE_PATH should need to map stack memory that is " + "both writable and executable." + msgstr "" ++"Si vous pensez que $SOURCE_PATH ne devrait pas faire correspondre " ++"l'allocation de mémoire de la pile, qui est à la fois exécutable et " ++"accessible en écriture." + + #: ../src/allow_execstack.py:90 + msgid "you need to report a bug. \n" +@@ -338,7 +383,9 @@ msgstr "" + msgid "If you believe that \n" + "%s\n" + "should not require execstack" +-msgstr "" ++msgstr "Si vous croyez que \n" ++"%s\n" ++"ne devrait pas avoir besoin de execstack" + + #: ../src/allow_execstack.py:108 + #, python-format +@@ -440,6 +487,7 @@ msgstr "" + #: ../src/allow_ftpd_use_cifs.py:62 + msgid "If you want to allow ftpd to write to cifs file systems" + msgstr "" ++"Si vous souhaitez autoriser ftpd à écrire sur les systèmes de fichiers CIFS" + + #: ../src/allow_ftpd_use_cifs.py:63 ../src/allow_ftpd_use_nfs.py:65 + msgid "you must tell SELinux about this" +@@ -447,7 +495,7 @@ msgstr "vous devez le faire savoir à SELinux" + + #: ../src/allow_ftpd_use_cifs.py:69 + msgid "Enable booleans" +-msgstr "" ++msgstr "Activer les booléens" + + #: ../src/allow_ftpd_use_nfs.py:29 + msgid "" +@@ -522,14 +570,23 @@ msgid "" + " directories with type public_content_t) in addition to writing to\n" + " files and directories on NFS filesystems. " + msgstr "" ++" Le changement des booléens « allow_ftpd_use_nfs » et\n" ++" « ftpd_anon_write » sur vrai autorisera cet accès :\n" ++" « setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1 ».\n" ++" avertissement : mettre le booléen « ftpd_anon_write » sur vrai\n" ++" autorisera le démon ftp à écrire dans tous les contenus publics " ++"(fichiers et\n" ++" répertoires avec le type public_content_t) en plus d'écrire dans\n" ++" les fichiers et répertoires du système de fichiers NFS. " + + #: ../src/allow_ftpd_use_nfs.py:64 + msgid "If you want to allow ftpd to write to nfs file systems" + msgstr "" ++"Si vous souhaitez autoriser ftpd à écrire sur les systèmes de fichiers NFS" + + #: ../src/allow_ftpd_use_nfs.py:71 + msgid "Enable booleans." +-msgstr "" ++msgstr "Activer les booléens." + + #: ../src/associate.py:32 ../src/openvpn.py:31 ../src/public_content.py:27 + #: ../src/qemu_blk_image.py:27 ../src/qemu_file_image.py:27 +@@ -572,6 +629,8 @@ msgid "" + "If you want to change the label of $TARGET_PATH to %s, you are not allowed " + "to since it is not a valid file type." + msgstr "" ++"Si vous souhaitez modifier l'étiquette de $TARGET_PATH en %s, ce qui est " ++"interdit car pas un type de fichier valide." + + #: ../src/associate.py:49 + msgid "you must pick a valid file label." +@@ -629,7 +688,7 @@ msgstr "" + + #: ../src/automount_exec_config.py:57 + msgid "Change file context." +-msgstr "" ++msgstr "Modifier le contexte du fichier." + + #: ../src/bind_ports.py:27 + msgid "" +@@ -703,6 +762,8 @@ msgstr "" + #: ../src/bind_ports.py:47 + msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" + msgstr "" ++"Si vous souhaitez autoriser $SOURCE_PATH à se lier au port réseau " ++"$PORT_NUMBER" + + #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 + #, python-format +@@ -772,7 +833,7 @@ msgstr "" + #: ../src/catchall_boolean.py:63 + #, python-format + msgid "If you want to %s" +-msgstr "" ++msgstr "Si vous souhaitez %s" + + #: ../src/catchall_boolean.py:66 + #, python-format +@@ -883,18 +944,24 @@ msgid "" + "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " + "processes labeled $TARGET_TYPE by default." + msgstr "" ++"Si vous pensez que $SOURCE_BASE_PATH devrait être autorisé à accéder $ACCESS " ++"sur les processus étiquetés $TARGET_TYPE par défaut." + + #: ../src/catchall.py:52 + msgid "" + "If you believe that $SOURCE_BASE_PATH should have the $ACCESS capability by " + "default." + msgstr "" ++"Si vous pensez que $SOURCE_BASE_PATH devrait avoir des capacités $ACCESS par " ++"défaut." + + #: ../src/catchall.py:53 + msgid "" + "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " + "the $TARGET_BASE_PATH $TARGET_CLASS by default." + msgstr "" ++"Si vous pensez que $SOURCE_BASE_PATH devrait être autorisé à accéder $ACCESS " ++"sur $TARGET_BASE_PATH $TARGET_CLASS par défaut." + + #: ../src/catchall.py:55 + msgid "" +@@ -910,6 +977,9 @@ msgid "" + "# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME\n" + "# semodule -X 300 -i my-$MODULE_NAME.pp" + msgstr "" ++"Autoriser cet accès pour le moment en exécutant :\n" ++"# ausearch -c \"$SOURCE\" --raw | audit2allow -M my-$MODULE_NAME\n" ++"# semodule -X 300 -i my-$MODULE_NAME.pp" + + #: ../src/connect_ports.py:27 ../src/sandbox_connect.py:29 + msgid "" +@@ -937,6 +1007,18 @@ msgid "" + " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé que $SOURCE se connecte à un port réseau $PORT_NUMBER " ++"qui ne possède pas de type SELinux lui étant associé.\n" ++" Si $SOURCE doit être autorisé à se connecter au port $PORT_NUMBER, " ++"veuillez utiliser la commande semanage pour assigner $PORT_NUMBER à " ++"un type de port auquel $SOURCE_TYPE peut se connecter(%s). \n" ++" \n" ++"\n" ++"Si $SOURCE n'est pas supposé\n" ++" se connecter au port $PORT_NUMBER, ceci pourrait indiquer une tentative " ++"d'intrusion.\n" ++" " + + #: ../src/connect_ports.py:38 + #, python-format +@@ -963,6 +1045,8 @@ msgstr "" + msgid "" + "If you want to allow $SOURCE_PATH to connect to network port $PORT_NUMBER" + msgstr "" ++"Si vous souhaitez autoriser $SOURCE_PATH à se connecter au port réseau " ++"$PORT_NUMBER" + + #: ../src/chrome.py:31 + msgid "" +@@ -1005,7 +1089,7 @@ msgstr "" + #: ../src/chrome.py:38 ../src/mozplugger.py:38 + #, python-format + msgid "If you want to use the %s package" +-msgstr "" ++msgstr "Si vous voulez utiliser le paquet %s" + + #: ../src/chrome.py:43 + msgid "you must turn off SELinux controls on the Chrome plugins." +@@ -1013,7 +1097,7 @@ msgstr "vous devrez désactiver les contrôles SELinux sur les greffons Chrome." + + #: ../src/chrome.py:51 + msgid "Disable SELinux controls on Chrome plugins" +-msgstr "" ++msgstr "Désactiver les contrôles SELinux sur les plugins Chrome" + + #: ../src/cvs_data.py:27 + msgid "" +@@ -1057,10 +1141,18 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++" Vous pouvez modifier le contexte du fichier en exécutant chcon -R -t " ++"cvs_data_t '$TARGET_PATH'\n" ++" Vous devez aussi changer le dossier par défaut des fichiers de contexte " ++"de votre système, même lors d'un réétiquetage complet, de manière à les " ++"préserver. « semanage fcontext -a -t cvs_data_t '$FIX_TARGET_PATH' »\n" ++"\n" ++" " + + #: ../src/cvs_data.py:44 + msgid "If $TARGET_BASE_PATH should be shared via the cvs daemon" +-msgstr "" ++msgstr "Si $TARGET_BASE_PATH devrait être partagé via le démon cvs" + + #: ../src/cvs_data.py:45 ../src/qemu_file_image.py:49 + msgid "You need to change the label on $TARGET_BASE_PATH'" +@@ -1068,7 +1160,7 @@ msgstr "Vous devez modifier l'étiquette sur $TARGET_BASE_PATH'" + + #: ../src/cvs_data.py:54 + msgid "Change label" +-msgstr "" ++msgstr "Changer l’étiquette" + + #: ../src/dac_override.py:28 + msgid "\n" +@@ -1100,6 +1192,8 @@ msgid "" + "If you want to help identify if domain needs this access or you have a file " + "with the wrong permissions on your system" + msgstr "" ++"Si vous souhaitez identifier si le domaine nécessite cet accès ou si vous " ++"possédez un fichier avec les mauvaises permissions sur votre système" + + #: ../src/dac_override.py:39 + msgid "" +@@ -1171,6 +1265,37 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++"\n" ++" SELinux a refusé l'accès de $SOURCE « $ACCESS » au périphérique " ++"$TARGET_PATH.\n" ++" $TARGET_PATH est mal étiqueté, ce périphérique porte l'étiquetage par " ++"défaut du répertoire /dev, ce qui ne devrait pas se\n" ++" produire. Tous les caractères et/ou les blocs de périphériques devraient " ++"être étiquetés.\n" ++"\n" ++" Vous pouvez tenter de modifier l'étiquetage du fichier en utilisant\n" ++"\n" ++" restorecon -v $TARGET_PATH.\n" ++"\n" ++" Si ce périphérique reste étiqueté, il s'agit alors d'un bug de la " ++"stratégie de SELinux.\n" ++"\n" ++" Merci de remplir un rapport de bug.\n" ++"\n" ++" Si vous cherchez des étiquetages de périphériques semblables, ls -lZ /" ++"dev/SIMILAR, et trouvez un type qui fonctionnerait pour $TARGET_PATH,\n" ++" vous pouvez utiliser chcon -t SIMILAR_TYPE '$TARGET_PATH'. Si cela " ++"corrige le problème, vous pouvez rendre le tout permanent en exécutant \n" ++" semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH'\n" ++"\n" ++" Si restorecon modifie le contexte, cela signifie que l'application qui a " ++"créé le périphérique l'a créé sans\n" ++" utiliser les API de SELinux. Si vous arrivez à déterminer quelle " ++"application a créé le périphérique, merci de remplir un rapport de bogue\n" ++" sur cette application.\n" ++"\n" ++" " + + #: ../src/device.py:56 + msgid "" +@@ -1209,7 +1334,7 @@ msgstr "\n" + + #: ../src/disable_ipv6.py:40 + msgid "If you want to disable IPV6 on this machine" +-msgstr "" ++msgstr "Si vous souhaitez désactiver IPV6 sur cette machine" + + #: ../src/disable_ipv6.py:41 + msgid "" +@@ -1280,11 +1405,11 @@ msgstr "" + + #: ../src/file.py:49 + msgid "This is caused by a newly created file system." +-msgstr "" ++msgstr "Ceci est dû à la création d'un nouveau système de fichiers." + + #: ../src/file.py:51 + msgid "If you think this is caused by a badly mislabeled machine." +-msgstr "" ++msgstr "Si vous pensez que ceci est dû à une machine mal étiquetée." + + #: ../src/file.py:55 + msgid "you need to add labels to it." +@@ -1353,6 +1478,8 @@ msgid "" + "If you believe $SOURCE_BASE_PATH should be allowed to create " + "$TARGET_BASE_PATH files" + msgstr "" ++"Si vous pensez que $SOURCE_BASE_PATH doit être autorisé à créer des fichiers " ++"$TARGET_BASE_PATH " + + #: ../src/filesystem_associate.py:44 + msgid "" +@@ -1387,6 +1514,13 @@ msgid "" + " signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé au démon http d'envoyer du courrier.\n" ++" Un script httpd essaye de se connecter à un port de courrier ou\n" ++" d'exécuter une commande sendmail. Si vous n'avez pas configuré\n" ++" httpd pour envoyer du courrier, cela pourrait signaler une tentative\n" ++" d'intrusion.\n" ++" " + + #: ../src/httpd_can_sendmail.py:39 + msgid "" +@@ -1405,7 +1539,7 @@ msgstr "" + + #: ../src/httpd_can_sendmail.py:47 + msgid "If you want to allow httpd to send mail" +-msgstr "" ++msgstr "Si vous souhaitez autoriser httpd à envoyer des courriels" + + #: ../src/httpd_can_sendmail.py:48 + msgid "you must setup SELinux to allow this" +@@ -1441,6 +1575,30 @@ msgid "" + " script types.\n" + " " + msgstr "" ++"\n" ++" SELinux a empêché l'accès httpd $ACCESS aux fichiers http.\n" ++"\n" ++" Normalement, httpd possède un accès complet à tous les fichiers " ++"étiquetés avec un contexte de fichier\n" ++" http. Cette machine possède une stratégie de sécurité plus stricte avec " ++"$BOOLEAN\n" ++" désactivé. Ceci requiert un étiquetage explicite de tous les fichiers. " ++"Si un fichier est\n" ++" un script cgi, il doit être étiqueté avec httpd_TYPE_script_exec_t afin " ++"de pouvoir\n" ++" être exécuté. Son contenu est accessible en lecture seule, il doit être " ++"étiqueté\n" ++" httpd_TYPE_content_t. S'il s'agit d'un contenu accessible en écriture, " ++"il doit être étiqueté\n" ++" httpd_TYPE_script_rw_t ou httpd_TYPE_script_ra_t. Vous pouvez utiliser " ++"la commande\n" ++" chcon pour modifier ces contextes. Veuillez vous reporter à la page man\n" ++" « man httpd_selinux » ou à la \n" ++" FAQ\n" ++" \"TYPE\" fait référence à « sys », « user », « staff » ou à d'autres " ++"types de scripts\n" ++" potentiels.\n" ++" " + + #: ../src/httpd_unified.py:50 + msgid "" +@@ -1459,6 +1617,8 @@ msgid "" + "If you want to allow httpd to execute cgi scripts and to unify HTTPD " + "handling of all content files." + msgstr "" ++"Si vous souhaitez autoriser httpd à exécuter des scripts cgi et à unifier la " ++"gestion HTTPD de tous les fichiers de contenu." + + #: ../src/httpd_unified.py:58 + msgid "" +@@ -1540,6 +1700,8 @@ msgid "" + "If you do not think $SOURCE_BASE_PATH should try $ACCESS access on " + "$TARGET_BASE_PATH." + msgstr "" ++"Si vous pensez que $SOURCE_BASE_PATH ne devrait pas tenter l'accès $ACCESS " ++"sur $TARGET_BASE_PATH." + + #: ../src/kernel_modules.py:45 ../src/selinuxpolicy.py:45 + msgid "" +@@ -1606,6 +1768,9 @@ msgid "" + "$TARGET_BASE_PATH $TARGET_CLASS, because you believe it should not need this " + "access." + msgstr "" ++"Si vous souhaitez ignorer que $SOURCE_BASE_PATH tente d'obtenir l'accès " ++"$ACCESS à $TARGET_BASE_PATH $TARGET_CLASS car vous pensez qu'il ne devrait " ++"pas nécessiter cet accès." + + #: ../src/leaks.py:43 + msgid "" +@@ -1620,6 +1785,8 @@ msgid "" + "# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" + "# semodule -X 300 -i my-$SOURCE.pp" + msgstr "" ++"# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" ++"# semodule -X 300 -i my-$SOURCE.pp" + + #: ../src/mmap_zero.py:29 + msgid "" +@@ -1650,12 +1817,27 @@ msgid "" + " compromised.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé à $SOURCE la capacité d'allouer de l'espace dans la \n" ++" zone mémoire basse du noyau via mmap. \n" ++" La capacité d'allouer cet espace mémoire est configuré par \n" ++" /proc/sys/kernel/mmap_min_addr. Empêcher cette allocation mémoire \n" ++" aide à se protéger contre l'exploitation des bugs du noyau de type \n" ++" 'null deref'. Toutes les applications ayant besoin de cet accès " ++"devraient \n" ++" déjà avoir une stratégie de sécurité écrite. Si une application " ++"compromise \n" ++" essaie de modifier le noyau, ce message pourrait être généré. Ceci est \n" ++" un problème sérieux. Votre système pourrait très bien être compromis.\n" ++" " + + #: ../src/mmap_zero.py:46 + msgid "" + "If you do not think $SOURCE_PATH should need to mmap low memory in the " + "kernel." + msgstr "" ++"Si vous pensez que $SOURCE_PATH ne devrait pas effectuer de projection en " ++"mémoire (« mmap ») de la mémoire basse dans le noyau." + + #: ../src/mmap_zero.py:47 + msgid "you may be under attack by a hacker, this is a very dangerous access." +@@ -1722,6 +1904,8 @@ msgstr "" + #: ../src/mounton.py:48 + msgid "If you want to allow $SOURCE_BASE_PATH to mount on $TARGET_BASE_PATH." + msgstr "" ++"Si vous souhaitez autoriser à $SOURCE_BASE_PATH d'être monté sur " ++"$TARGET_BASE_PATH." + + #: ../src/mounton.py:49 + msgid "you must change the labeling on $TARGET_PATH." +@@ -1812,6 +1996,8 @@ msgid "" + "If you want to to continue using SELinux Firefox plugin containment rather " + "then using mozplugger package" + msgstr "" ++"Si vous pouvez souhaiter continuer à utiliser le confinement de greffons " ++"Firefox de SELinux plutôt que d'utiliser le paquet mozplugger" + + #: ../src/mozplugger_remove.py:45 + msgid "you must remove the mozplugger package." +@@ -1826,6 +2012,11 @@ msgid "" + " is labeled correctly.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé l'accès requis par $SOURCE. $TARGET_PATH peut\n" ++" être mal étiqueté. openvpn est autorisé à lire le contenu du répertoire\n" ++" utilisateur si celui-ci est correctement étiqueté.\n" ++" " + + #: ../src/openvpn.py:41 + msgid "" +@@ -1835,18 +2026,28 @@ msgid "" + " # restorecon -R /root/.ssh\n" + " " + msgstr "" ++"\n" ++" Vous pouvez restaurer le contexte par défaut du système sur ce fichier " ++"en exécutant la\n" ++" commande restorecon.\n" ++" # restorecon -R /root/.ssh\n" ++" " + + #: ../src/openvpn.py:49 + msgid "" + "If you want to mv $TARGET_BASE_PATH to standard location so that " + "$SOURCE_BASE_PATH can have $ACCESS access" + msgstr "" ++"Si vous souhaitez déplacer $TARGET_BASE_PATH sur un emplacement standard de " ++"manière à ce que $SOURCE_BASE_PATH puisse obtenir l'accès $ACCESS" + + #: ../src/openvpn.py:51 + msgid "" + "If you want to modify the label on $TARGET_BASE_PATH so that " + "$SOURCE_BASE_PATH can have $ACCESS access on it" + msgstr "" ++"Si vous souhaitez modifier l'étiquette de $TARGET_BASE_PATH afin que " ++"$SOURCE_BASE_PATH puisse y obtenir l'accès $ACCESS" + + #: ../src/openvpn.py:55 + msgid "you must move the cert file to the ~/.cert directory" +@@ -1897,7 +2098,7 @@ msgstr "" + + #: ../src/public_content.py:50 + msgid "If you want to treat $TARGET_BASE_PATH as public content" +-msgstr "" ++msgstr "Si vous souhaitez considérer $TARGET_BASE_PATH comme contenu public" + + #: ../src/public_content.py:51 + msgid "" +@@ -1999,7 +2200,7 @@ msgstr "" + + #: ../src/qemu_file_image.py:48 + msgid "If $TARGET_BASE_PATH is a virtualization target" +-msgstr "" ++msgstr "Si $TARGET_BASE_PATH est une cible de virtualisation" + + #: ../src/restorecon.py:57 + msgid "" +@@ -2059,6 +2260,43 @@ msgid "" + "package.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé l'accès requis par $SOURCE. $TARGET_PATH pourrait\n" ++" être mal étiqueté. Le type SELinux par défaut de $TARGET_PATH est\n" ++" %s, mais son type actuel est $TARGET_TYPE. Modifier\n" ++" ce fichier en utilisant son type par défaut pourrait corriger le " ++"problème.\n" ++"

\n" ++" Les contextes de fichiers peuvent être assignés à un fichier comme suit.\n" ++"

    \n" ++"
  • Les fichiers créés dans un répertoire recoivent le contexte de " ++"fichier du répertoire parent par défaut.\n" ++"
  • La stratégie SELinux peut remplacer l'étiquette héritée par " ++"défaut du répertoire parent en\n" ++" spécifiant un processus exécuté dans le contexte A, qui crée un " ++"fichier dans un répertoire étiqueté B\n" ++" et au lieu de cela, créera un fichier avec l'étiquette C. Par " ++"exemple, un client dhcp exécuté avec\n" ++" le type dhclient_t créera un fichier dans le répertoire /etc. Ce " ++"fichier devrait normalement\n" ++" recevoir le type etc_t à cause de son héritage parental mais à " ++"la place, le fichier est\n" ++" étiqueté avec le type net_conf_t car la stratégie SELinux le " ++"spécifie.\n" ++"
  • Les utilisateur peuvent modifier le contexte de fichier d'un " ++"fichier à l'aide d'outils tels que chcon ou restorecon.\n" ++"
\n" ++" Ce fichier pourrait avoir été mal étiqueté à cause d'une erreur de " ++"l'utilisateur ou si une application normalement confinée\n" ++" a été exécutée sous le mauvais domaine.\n" ++"

\n" ++" Cependant, ceci pourrait aussi indiquer une anomalie dans SELinux, car " ++"le fichier n'aurait pas dû être étiqueté\n" ++" avec ce type.\n" ++"

\n" ++" Si vous pensez qu'il s'agit d'une anomalie, veuillez remplir un rapport " ++"d'anomalie pour ce paquet.\n" ++" " + + #: ../src/restorecon.py:90 + #, python-format +@@ -2066,6 +2304,8 @@ msgid "" + "If you want to fix the label. \n" + "$TARGET_PATH default label should be %s." + msgstr "" ++"Si vous souhaitez corriger l'étiquette. \n" ++"L'étiquette par défaut de $TARGET_PATH devrait être %s." + + #: ../src/restorecon.py:96 + msgid "" +@@ -2073,6 +2313,9 @@ msgid "" + "insufficient permissions to access a parent directory in which case try to " + "change the following command accordingly." + msgstr "" ++"vous pouvez lancer restorecon. La tentative d’accès pourrait avoir été " ++"stoppée due à des permissions insuffisantes d’accès au dossier parent, " ++"auquel cas essayez de changer la commande suivante en conséquence." + + #: ../src/restorecon.py:105 ../src/restorecon_source.py:73 + msgid "Restore\n" +@@ -2114,6 +2357,23 @@ msgid "" + "package.\n" + " " + msgstr "" ++"\n" ++"SELinux a refusé l'accès demandé par $SOURCE. $SOURCE_PATH peut être\n" ++"mal étiqueté. Le type SELinux par défaut de $SOURCE_PATH est\n" ++"%s, mais son type actuel est $SOURCE_TYPE. Revenir au\n" ++"type par défaut pour ce fichier pourrait corriger le problème.\n" ++"

\n" ++"Ce fichier peut avoir été mal étiqueté suite à une erreur utilisateur, ou " ++"bien si une\n" ++"application normalement confinée a été exécutée dans le mauvais domaine.\n" ++"

\n" ++"Néanmoins, ceci peut aussi indiquer une anomalie dans SELinux parce que le " ++"fichier\n" ++"ne devrait pas avoir été étiqueté avec ce type.\n" ++"

\n" ++"Si vous pensez qu'il s'agit d'une anomalie, veuillez émettre un rapport " ++"d'anomalie à propos de ce paquet.\n" ++" " + + #: ../src/restorecon_source.py:60 + #, python-format +@@ -2121,6 +2381,8 @@ msgid "" + "If you want to fix the label. \n" + "$SOURCE_PATH default label should be %s." + msgstr "" ++"Si vous souhaitez corriger l'étiquette. \n" ++"L'étiquette par défaut de $SOURCE_PATH devrait être %s." + + #: ../src/restorecon_source.py:65 + msgid "you can run restorecon." +@@ -2136,6 +2398,14 @@ msgid "" + " this message could indicate either a bug or an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé à RSYNC l'accès à $TARGET_PATH.\n" ++" S'il s'agit d'un dépôt RSYNC il doit comporter un étiquetage de contexte " ++"de fichier tel que\n" ++" rsync_data_t. Si vous n'avez pas l'intention d'utiliser $TARGET_PATH en " ++"tant que dépôt rsync\n" ++" cela peut soit signifier une anomalie, soit une tentative d'intrusion.\n" ++" " + + #: ../src/rsync_data.py:38 + msgid "" +@@ -2157,7 +2427,7 @@ msgstr "" + + #: ../src/rsync_data.py:45 + msgid "If $TARGET_BASE_PATH should be shared via the RSYNC daemon" +-msgstr "" ++msgstr "Si $TARGET_BASE_PATH devrait être partagé via le démon RSYNC" + + #: ../src/rsync_data.py:46 + msgid "You need to change the label on $TARGET_BASE_PATH" +@@ -2188,6 +2458,16 @@ msgid "" + "Samba and SELinux.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé à samba l'accès à $TARGET_PATH.\n" ++" Si vous souhaitez partager ce répertoire avec samba, il doit comporter " ++"un étiquetage de contexte de fichier tel que\n" ++" samba_share_t. Si vous n'avez pas l'intention d'utiliser $TARGET_PATH en " ++"tant que répertoire samba\n" ++" cela peut soit signifier une anomalie, soit une tentative d'intrusion.\n" ++" Veuillez vous référer à la page de manuel 'man samba_selinux' pour plus " ++"d'informations sur la manière de configurer Samba et SELinux.\n" ++" " + + #: ../src/samba_share.py:39 + msgid "" +@@ -2230,6 +2510,19 @@ msgid "" + " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux a interdit à $SOURCE de se connecter à un port réseau " ++"$PORT_NUMBER depuis un bac à sable.\n" ++" Si $SOURCE doit être autorisé à se connecter au port $PORT_NUMBER, vous " ++"devrez utiliser un type de bac à sable différent comme sandbox_web_t ou " ++"sandbox_net_t. \n" ++" # sandbox -X -t sandbox_net_t $SOURCE.\n" ++" \n" ++"\n" ++"Si $SOURCE n'est pas supposé\n" ++" se connecter à $PORT_NUMBER, cela peut signifier une tentative " ++"d'intrusion.\n" ++" " + + #: ../src/sandbox_connect.py:41 + msgid "" +@@ -2295,6 +2588,7 @@ msgstr "" + #: ../src/setenforce.py:27 + msgid "If you did not directly cause this AVC through testing." + msgstr "" ++"Si vous n'avez pas directement provoqué cet AVC en effectuant des tests." + + #: ../src/setenforce.py:28 + msgid "if you think that you might have been hacked" +@@ -2326,10 +2620,20 @@ msgid "" + " well be compromised.\n" + " " + msgstr "" ++"\n" ++" SELinux a empêché $SOURCE d'écrire dans un fichier sous /sys/fs/selinux.\n" ++" Les fichiers sous /sys/fs/selinux contrôlent la façon dont SELinux est " ++"configuré.\n" ++" Tous les programmes ayant besoin d'écrire dans des fichiers sous \n" ++" /sys/fs/selinux devraient déjà avoir une politique écrite pour eux.\n" ++" Si une application compromise essaie de désactiver SELinux,\n" ++" ce message AVC sera généré. C'est un problème sérieux. Votre système " ++"pourrait très bien être compromis.\n" ++" " + + #: ../src/setenforce.py:48 + msgid "If you believe $SOURCE_PATH tried to disable SELinux." +-msgstr "" ++msgstr "Si vous pensez que $SOURCE_PATH a tenté de désactiver SELinux." + + #: ../src/setenforce.py:49 + msgid "" +@@ -2348,6 +2652,12 @@ msgid "" + " is labeled correctly.\n" + " " + msgstr "" ++"\n" ++" L'accès refusé par SELinux et demandé par $SOURCE. $TARGET_PATH peut\n" ++" être mal étiqueté. sshd est autorisé à lire le contenu du répertoire /" ++"root/.ssh s'il\n" ++" est correctement étiqueté.\n" ++" " + + #: ../src/sshd_root.py:42 + msgid "" +@@ -2357,6 +2667,12 @@ msgid "" + " # restorecon -R /root/.ssh\n" + " " + msgstr "" ++"\n" ++" Vous pouvez restaurer le contexte par défaut du système sur ce fichier " ++"en exécutant la\n" ++" commande restorecon. \n" ++" # restorecon -R /root/.ssh\n" ++" " + + #: ../src/sshd_root.py:55 + msgid "Restore Context" +@@ -2381,6 +2697,15 @@ msgid "" + "an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux a refusé à $SOURCE l'accès à $TARGET_PATH.\n" ++" S'il s'agit d'un fichier swap, il doit comporter un étiquetage de " ++"contexte de fichier tel que\n" ++" swapfile_t. Si vous n'avez pas l'intention d'utiliser\n" ++" $TARGET_PATH en tant que fichier swap, cela indique vraisemblablement la " ++"présence d'une anomalie ;\n" ++" cependant il peut également s'agir d'une tentative d'intrusion.\n" ++" " + + #: ../src/swapfile.py:38 + msgid "" +@@ -2405,6 +2730,8 @@ msgid "" + "If you do not believe your $SOURCE_PATH should be modifying the kernel, by " + "loading kernel modules" + msgstr "" ++"Si vous pensez que $SOURCE_PATH ne devrait pas modifier le noyau en " ++"chargeant des modules de noyau" + + #: ../src/sys_module.py:29 + msgid "You might have been hacked." +@@ -2447,6 +2774,8 @@ msgid "" + "If you do not believe that $SOURCE_PATH should be attempting to modify the " + "kernel by loading a kernel module." + msgstr "" ++"Si vous pensez que $SOURCE_PATH ne devrait pas tenter de modifier le noyau " ++"en chargeant un module de noyau." + + #: ../src/sys_module.py:47 + msgid "A process might be attempting to hack into your system." +@@ -2487,6 +2816,8 @@ msgid "" + "If you do not want processes to require capabilities to use up all the " + "system resources on your system;" + msgstr "" ++"Si vous ne voulez pas que les processus requièrent des capacités à utiliser " ++"toutes les ressources du système sur votre système ;" + + #: ../src/sys_resource.py:40 + msgid "" +@@ -2507,6 +2838,25 @@ msgid "" + "/* Override max number of consoles on console allocation */\n" + "/* Override max number of keymaps */\n" + msgstr "" ++"vous devez diagnostiquer pourquoi votre système est à court de ressources " ++"système et corriger le problème.\n" ++"\n" ++"Selon /usr/include/linux/capability.h, sys_resource est nécessaire pour :\n" ++"\n" ++"/* Remplacer les limites de ressources. Définir des limites de ressources. */" ++"\n" ++"/* Remplacer les limites de quotas. */\n" ++"/* Remplacer l’espace réservé sur le système de fichiers ext2 */\n" ++"/* Modifier le mode de journalisation des données sur le système de fichiers " ++"ext3 (utilise les ressources de journalisation) */\n" ++"/* REMARQUE : ext2 honore fsuid lors de la vérification des ressources, donc " ++"vous pouvez également annuler en utilisant fsuid. */\n" ++"/* Remplacer les restrictions de taille sur les files d’attente des messages " ++"IPC */\n" ++"/* Autoriser des interruptions de plus de 64 Hz à partir de l’horloge temps " ++"réel */\n" ++"/* Remplacer le nombre maximum de consoles sur l’allocation de la console */\n" ++"/* Remplacer le nombre maximum de keymaps */\n" + + #: ../src/vbetool.py:30 + msgid "" +@@ -2572,6 +2922,8 @@ msgid "" + "If you want to ignore this AVC because it is dangerous and your machine " + "seems to be working correctly." + msgstr "" ++"Si vous souhaitez ignorer cet AVC car il est dangereux et votre machine " ++"semble fonctionner correctement." + + #: ../src/vbetool.py:56 + msgid "" +@@ -2647,6 +2999,8 @@ msgid "" + "If you want to ignore this AVC because it is dangerous and your wine " + "applications are working correctly." + msgstr "" ++"Si vous souhaitez ignorer cet AVC car il est dangereux et vos applications " ++"wine fonctionnent correctement." + + #: ../src/wine.py:67 + msgid "" +-- +2.15.0 + diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 29e65e2..1ae6f3e 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,11 +3,12 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.9 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz +Patch1: 0001-plugins-Update-translations.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch @@ -22,7 +23,7 @@ data and system data to provide user friendly reports describing how to interpret SELinux AVC denials. %prep -%setup -q +%autosetup -p 2 %build %configure PYTHON=%{__python3} @@ -42,6 +43,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Mon Nov 20 2017 Petr Lautrbach - 3.3.9-2 +- Update translations + * Sat Nov 18 2017 Petr Lautrbach - 3.3.9-1 - Fix catchall plugin message for process2 diff --git a/sources b/sources index 955be3e..adeb8b0 100644 --- a/sources +++ b/sources @@ -1,2 +1 @@ -SHA512 (setroubleshoot-plugins-3.3.8.tar.gz) = 91d370e04a86632c4f374e5c9adcd314b8c7f2355b738c9d1a76382805c950cd30ff1b0c2a44e0246c400d78025e8b0b1b1ff90488d048f89a6b38a7c758795e SHA512 (setroubleshoot-plugins-3.3.9.tar.gz) = 8f5084f49ebb70268e14de7bed1c6706f847f3c3f0b9044ddfdd22b8fd189b2881c80bd20530167342b3bcb0963976520505351471d425228457131bf9707912 From 0f5f35f894da406be0bc20612ee7715decd0f530 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Thu, 23 Nov 2017 09:10:55 +0100 Subject: [PATCH 22/68] setroubleshoot-plugins-3.3.9-3 - Update translations --- 0002-plugins-Update-translations.patch | 1833 ++++++++++++++++++++++++ setroubleshoot-plugins.spec | 6 +- 2 files changed, 1838 insertions(+), 1 deletion(-) create mode 100644 0002-plugins-Update-translations.patch diff --git a/0002-plugins-Update-translations.patch b/0002-plugins-Update-translations.patch new file mode 100644 index 0000000..7dda730 --- /dev/null +++ b/0002-plugins-Update-translations.patch @@ -0,0 +1,1833 @@ +From 584b1e33808a55c82259a0d7787cbfa5200d7022 Mon Sep 17 00:00:00 2001 +From: Vit Mojzis +Date: Wed, 22 Nov 2017 12:56:09 +0100 +Subject: [PATCH] plugins: Update translations + +https://fedora.zanata.org/iteration/view/setroubleshoot/master +synced-up with "stable" branch. +--- + plugins/po/as.po | 4 +- + plugins/po/bg.po | 4 +- + plugins/po/bn.po | 4 +- + plugins/po/bn_IN.po | 4 +- + plugins/po/ca.po | 6 +- + plugins/po/cs.po | 4 +- + plugins/po/da.po | 4 +- + plugins/po/de.po | 46 ++++++++-- + plugins/po/en_GB.po | 4 +- + plugins/po/es.po | 6 +- + plugins/po/eu.po | 2 +- + plugins/po/fi.po | 2 +- + plugins/po/fr.po | 6 +- + plugins/po/gu.po | 4 +- + plugins/po/hi.po | 4 +- + plugins/po/hu.po | 6 +- + plugins/po/it.po | 4 +- + plugins/po/ja.po | 243 ++++++++++++++++++++++++++++++++++++++++++++-------- + plugins/po/kn.po | 4 +- + plugins/po/ko.po | 6 +- + plugins/po/ml.po | 4 +- + plugins/po/mr.po | 4 +- + plugins/po/nl.po | 4 +- + plugins/po/or.po | 4 +- + plugins/po/pa.po | 4 +- + plugins/po/pl.po | 4 +- + plugins/po/pt.po | 4 +- + plugins/po/pt_BR.po | 6 +- + plugins/po/ru.po | 220 +++++++++++++++++++++++++++++++++++++++++++++-- + plugins/po/sr.po | 4 +- + plugins/po/sv.po | 6 +- + plugins/po/ta.po | 4 +- + plugins/po/te.po | 4 +- + plugins/po/uk.po | 4 +- + plugins/po/zh_CN.po | 6 +- + plugins/po/zh_TW.po | 4 +- + 36 files changed, 530 insertions(+), 123 deletions(-) + +diff --git a/plugins/po/as.po b/plugins/po/as.po +index afa9b53..c588986 100644 +--- a/plugins/po/as.po ++++ b/plugins/po/as.po +@@ -8,11 +8,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:20-0500\n" ++"PO-Revision-Date: 2017-09-01 08:31-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Assamese (http://www.transifex.com/projects/p/fedora/language/" + "as/)\n" +diff --git a/plugins/po/bg.po b/plugins/po/bg.po +index e05f95d..ad48a5e 100644 +--- a/plugins/po/bg.po ++++ b/plugins/po/bg.po +@@ -10,11 +10,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:20-0500\n" ++"PO-Revision-Date: 2017-09-01 08:31-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Bulgarian (http://www.transifex.com/projects/p/fedora/" + "language/bg/)\n" +diff --git a/plugins/po/bn.po b/plugins/po/bn.po +index 65e971b..a4c350a 100644 +--- a/plugins/po/bn.po ++++ b/plugins/po/bn.po +@@ -15,11 +15,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:20-0500\n" ++"PO-Revision-Date: 2017-09-01 08:31-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Bengali (http://www.transifex.com/projects/p/fedora/language/" + "bn/)\n" +diff --git a/plugins/po/bn_IN.po b/plugins/po/bn_IN.po +index cba0de3..a6da67c 100644 +--- a/plugins/po/bn_IN.po ++++ b/plugins/po/bn_IN.po +@@ -11,11 +11,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:20-0500\n" ++"PO-Revision-Date: 2017-09-01 08:31-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Bengali (India) (http://www.transifex.com/projects/p/fedora/" + "language/bn_IN/)\n" +diff --git a/plugins/po/ca.po b/plugins/po/ca.po +index 38f31e9..f66c708 100644 +--- a/plugins/po/ca.po ++++ b/plugins/po/ca.po +@@ -12,12 +12,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-10-15 02:58-0400\n" +-"Last-Translator: Robert Antoni Buj Gelonch \n" ++"PO-Revision-Date: 2017-10-26 09:45-0400\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Catalan (http://www.transifex.com/projects/p/fedora/language/" + "ca/)\n" + "Language: ca\n" +diff --git a/plugins/po/cs.po b/plugins/po/cs.po +index 70e09d7..7a7ce3c 100644 +--- a/plugins/po/cs.po ++++ b/plugins/po/cs.po +@@ -16,11 +16,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-08-29 05:54-0400\n" ++"PO-Revision-Date: 2017-09-02 03:57-0400\n" + "Last-Translator: Zdenek \n" + "Language-Team: Czech (http://www.transifex.com/projects/p/fedora/language/cs/" + ")\n" +diff --git a/plugins/po/da.po b/plugins/po/da.po +index 28b854b..9b43021 100644 +--- a/plugins/po/da.po ++++ b/plugins/po/da.po +@@ -8,11 +8,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:21-0500\n" ++"PO-Revision-Date: 2017-09-01 08:31-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Danish (http://www.transifex.com/projects/p/fedora/language/" + "da/)\n" +diff --git a/plugins/po/de.po b/plugins/po/de.po +index f720349..ac8bd6a 100644 +--- a/plugins/po/de.po ++++ b/plugins/po/de.po +@@ -16,16 +16,17 @@ + # Thomas Spura , 2008, 2009 + # Hedda Peters , 2016. #zanata + # Lisa Stemmler , 2016. #zanata ++# Vit Mojzis , 2017. #zanata + msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2016-08-23 06:37-0400\n" +-"Last-Translator: Hedda Peters \n" ++"PO-Revision-Date: 2017-11-22 06:34-0500\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: German (http://www.transifex.com/projects/p/fedora/language/" + "de/)\n" + "Language: de\n" +@@ -92,6 +93,8 @@ msgid "" + "If you want to allow $SOURCE_PATH to be able to write to shared public " + "content" + msgstr "" ++"Sie möchten, dass $SOURCE_PATH in gemeinsam genutzte, öffentliche Inhalte " ++"schreiben darf. " + + #: ../src/allow_anon_write.py:45 + msgid "" +@@ -169,6 +172,8 @@ msgid "" + "If you do not think $SOURCE_PATH should need to map heap memory that is both " + "writable and executable." + msgstr "" ++"Sie nicht glauben, dass $SOURCE_PATH auf Heap-Speicher verweisen sollte, der " ++"sowohl beschreibbar als auch ausführbar ist." + + #: ../src/allow_execheap.py:51 + msgid "you need to report a bug. This is a potentially dangerous access." +@@ -230,6 +235,25 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++" Die Anwendung $SOURCE versuchte $TARGET_PATH zu laden, was\n" ++" Textverschiebung benötigt. Dies ist ein mögliches Sicherheitsproblem.\n" ++" Die meisten Bibliotheken benötigen diese Erlaubnis nicht.\n" ++" Die Webseite \n" ++" SELinux Memory Protection Tests erklärt diesen Test. Dieses Tool " ++"führte eine\n" ++" Untersuchung der Bibliothek aus und stellte fest, dass diese korrekt " ++"aufgebaut ist.\n" ++" Setroubleshoot kann also nicht feststellen, ob diese Anwendung " ++"kompromittiert\n" ++" wurde oder nicht. Dies ist unter Umständen ein schwerwiegendes Problem.\n" ++" Ihr System wurde womöglich kompromittiert.\n" ++"\n" ++" Kontaktieren Sie Ihren Sicherheitsadministrator und melden diesen Fehler." ++"\n" ++"\n" ++" " + + #: ../src/allow_execmod.py:61 + msgid "" +@@ -333,6 +357,8 @@ msgid "" + "If you do not think $SOURCE_PATH should need to map stack memory that is " + "both writable and executable." + msgstr "" ++"Sie nicht glauben, dass $SOURCE_PATH auf Stack-Speicher verweisen sollte, " ++"der sowohl beschreibbar als auch ausführbar ist." + + #: ../src/allow_execstack.py:90 + msgid "you need to report a bug. \n" +@@ -346,7 +372,9 @@ msgstr "" + msgid "If you believe that \n" + "%s\n" + "should not require execstack" +-msgstr "" ++msgstr "Sie glauben, dass \n" ++"%s\n" ++"keinen execstack benötigen sollte" + + #: ../src/allow_execstack.py:108 + #, python-format +@@ -449,7 +477,7 @@ msgstr "" + + #: ../src/allow_ftpd_use_cifs.py:62 + msgid "If you want to allow ftpd to write to cifs file systems" +-msgstr "" ++msgstr "Sie möchten ftpd erlauben, auf cifs-Dateisysteme zu schreiben" + + #: ../src/allow_ftpd_use_cifs.py:63 ../src/allow_ftpd_use_nfs.py:65 + msgid "you must tell SELinux about this" +@@ -537,7 +565,7 @@ msgstr "" + + #: ../src/allow_ftpd_use_nfs.py:64 + msgid "If you want to allow ftpd to write to nfs file systems" +-msgstr "" ++msgstr "Sie möchten ftpd erlauben, auf nfs-Dateisysteme zu schreiben" + + #: ../src/allow_ftpd_use_nfs.py:71 + msgid "Enable booleans." +@@ -583,6 +611,8 @@ msgid "" + "If you want to change the label of $TARGET_PATH to %s, you are not allowed " + "to since it is not a valid file type." + msgstr "" ++"Sie möchten das Label von $TARGET_PATH ändern zu %s, dies ist nicht erlaubt, " ++"da es kein gültiger Dateityp ist." + + #: ../src/associate.py:49 + msgid "you must pick a valid file label." +@@ -716,6 +746,8 @@ msgstr "" + #: ../src/bind_ports.py:47 + msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" + msgstr "" ++"Sie möchten $SOURCE erlauben, mit dem Netzwerk-Port $​​PORT_NUMBER zu " ++"verbinden" + + #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 + #, python-format +@@ -784,7 +816,7 @@ msgstr "" + #: ../src/catchall_boolean.py:63 + #, python-format + msgid "If you want to %s" +-msgstr "" ++msgstr "Sie folgendes tun möchten: %s" + + #: ../src/catchall_boolean.py:66 + #, python-format +diff --git a/plugins/po/en_GB.po b/plugins/po/en_GB.po +index 9ea8749..5ec527a 100644 +--- a/plugins/po/en_GB.po ++++ b/plugins/po/en_GB.po +@@ -8,11 +8,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:21-0500\n" ++"PO-Revision-Date: 2017-09-01 08:31-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: English (United Kingdom) (http://www.transifex.com/projects/p/" + "fedora/language/en_GB/)\n" +diff --git a/plugins/po/es.po b/plugins/po/es.po +index 39f1521..b8da668 100644 +--- a/plugins/po/es.po ++++ b/plugins/po/es.po +@@ -19,12 +19,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-09-12 10:57-0400\n" +-"Last-Translator: Máximo Castañeda Riloba \n" ++"PO-Revision-Date: 2017-11-08 05:31-0500\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Spanish (http://www.transifex.com/projects/p/fedora/language/" + "es/)\n" + "Language: es\n" +diff --git a/plugins/po/eu.po b/plugins/po/eu.po +index accb903..23deb1e 100644 +--- a/plugins/po/eu.po ++++ b/plugins/po/eu.po +@@ -8,7 +8,7 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +diff --git a/plugins/po/fi.po b/plugins/po/fi.po +index c495f52..58b1c5b 100644 +--- a/plugins/po/fi.po ++++ b/plugins/po/fi.po +@@ -10,7 +10,7 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +diff --git a/plugins/po/fr.po b/plugins/po/fr.po +index a2c76d5..d417d94 100644 +--- a/plugins/po/fr.po ++++ b/plugins/po/fr.po +@@ -21,12 +21,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-10-05 09:21-0400\n" +-"Last-Translator: Jean-Baptiste Holcroft \n" ++"PO-Revision-Date: 2017-11-08 05:31-0500\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: French (http://www.transifex.com/projects/p/fedora/language/" + "fr/)\n" + "Language: fr\n" +diff --git a/plugins/po/gu.po b/plugins/po/gu.po +index c641b5a..11b0a55 100644 +--- a/plugins/po/gu.po ++++ b/plugins/po/gu.po +@@ -12,11 +12,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:22-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Gujarati (http://www.transifex.com/projects/p/fedora/language/" + "gu/)\n" +diff --git a/plugins/po/hi.po b/plugins/po/hi.po +index 223caa2..50bae3d 100644 +--- a/plugins/po/hi.po ++++ b/plugins/po/hi.po +@@ -14,11 +14,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:22-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Hindi (http://www.transifex.com/projects/p/fedora/language/hi/" + ")\n" +diff --git a/plugins/po/hu.po b/plugins/po/hu.po +index 38f1852..064d732 100644 +--- a/plugins/po/hu.po ++++ b/plugins/po/hu.po +@@ -14,12 +14,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-07-26 05:19-0400\n" +-"Last-Translator: Norbert Makula \n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Hungarian (http://www.transifex.com/projects/p/fedora/" + "language/hu/)\n" + "Language: hu\n" +diff --git a/plugins/po/it.po b/plugins/po/it.po +index af2b597..5214594 100644 +--- a/plugins/po/it.po ++++ b/plugins/po/it.po +@@ -16,11 +16,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2016-06-08 02:46-0400\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Italian (http://www.transifex.com/projects/p/fedora/language/" + "it/)\n" +diff --git a/plugins/po/ja.po b/plugins/po/ja.po +index 3d106b5..8ab4cf9 100644 +--- a/plugins/po/ja.po ++++ b/plugins/po/ja.po +@@ -14,16 +14,17 @@ + # Aiko Sasaki , 2016. #zanata + # Kenzo Moriguchi , 2016. #zanata + # Noriko Mizumoto , 2016. #zanata ++# Vit Mojzis , 2017. #zanata + msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2016-08-22 03:06-0400\n" +-"Last-Translator: Aiko Sasaki \n" ++"PO-Revision-Date: 2017-11-22 06:34-0500\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Japanese (http://www.transifex.com/projects/p/fedora/language/" + "ja/)\n" + "Language: ja\n" +@@ -81,7 +82,7 @@ msgstr "" + msgid "" + "If you want to allow $SOURCE_PATH to be able to write to shared public " + "content" +-msgstr "" ++msgstr "$SOURCE_PATH による共有の公開コンテンツへの書き込みを許可する場合" + + #: ../src/allow_anon_write.py:45 + msgid "" +@@ -152,7 +153,7 @@ msgstr "" + msgid "" + "If you do not think $SOURCE_PATH should need to map heap memory that is both " + "writable and executable." +-msgstr "" ++msgstr "$SOURCE_PATH に、書き込みと実行の両方が可能になるヒープメモリーのマッピングを行う必要がないと考える場合。" + + #: ../src/allow_execheap.py:51 + msgid "you need to report a bug. This is a potentially dangerous access." +@@ -209,6 +210,17 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++" $SOURCE アプリケーションは、テキスト移動を要求する $TARGET_PATH \n" ++" のロードを試行しました。 セキュリティー上の問題となる可能性があります。\n" ++" ほとんどのライブラリーはこの許可を必要としません。 \n" ++" \n" ++" SELinux Memory Protection Tests\n" ++" のウェブページではこのチェックについて説明しています。 このツールはライブラリーが正しく\n" ++" 構築されたかどうかを調べます。そのため、setroubleshoot " ++"はこのアプリケーションがセキュリティーのリスクにさらされているかどうかを判別できません。これは重大な問題となる可能性があり、お使いのシステムがセキュリティーのリスクにさらされている可能性があります。\n" ++" セキュリティー管理者に連絡し、この問題をレポートしてください。\n" ++" " + + #: ../src/allow_execmod.py:61 + msgid "" +@@ -300,7 +312,7 @@ msgstr "" + msgid "" + "If you do not think $SOURCE_PATH should need to map stack memory that is " + "both writable and executable." +-msgstr "" ++msgstr "$SOURCE_PATH に書き込みと実行の両方が可能となるスタックメモリーのマッピングを行なう必要がある場合。" + + #: ../src/allow_execstack.py:90 + msgid "you need to report a bug. \n" +@@ -313,7 +325,9 @@ msgstr "バグをレポートする必要があります。\n" + msgid "If you believe that \n" + "%s\n" + "should not require execstack" +-msgstr "" ++msgstr "%s は \n" ++"execstack を\n" ++"必要としないと信じている場合" + + #: ../src/allow_execstack.py:108 + #, python-format +@@ -406,7 +420,7 @@ msgstr "" + + #: ../src/allow_ftpd_use_cifs.py:62 + msgid "If you want to allow ftpd to write to cifs file systems" +-msgstr "" ++msgstr "ftpd が、cifs ファイルシステムに書込むことを許可したい場合" + + #: ../src/allow_ftpd_use_cifs.py:63 ../src/allow_ftpd_use_nfs.py:65 + msgid "you must tell SELinux about this" +@@ -486,7 +500,7 @@ msgstr "" + + #: ../src/allow_ftpd_use_nfs.py:64 + msgid "If you want to allow ftpd to write to nfs file systems" +-msgstr "" ++msgstr "ftpd が、nfs ファイルシステムに書込むことを許可したい場合" + + #: ../src/allow_ftpd_use_nfs.py:71 + msgid "Enable booleans." +@@ -526,7 +540,7 @@ msgstr "" + msgid "" + "If you want to change the label of $TARGET_PATH to %s, you are not allowed " + "to since it is not a valid file type." +-msgstr "" ++msgstr "$TARGET_PATH のラベルを %s に変更したくても、それは有効なファイルタイプではないため、許可されません。" + + #: ../src/associate.py:49 + msgid "you must pick a valid file label." +@@ -648,7 +662,7 @@ msgstr "" + + #: ../src/bind_ports.py:47 + msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" +-msgstr "" ++msgstr "$SOURCE_PATH をネットワークポート $PORT_NUMBER に接続したい場合" + + #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 + #, python-format +@@ -714,7 +728,7 @@ msgstr "" + #: ../src/catchall_boolean.py:63 + #, python-format + msgid "If you want to %s" +-msgstr "" ++msgstr "%s がしたい場合" + + #: ../src/catchall_boolean.py:66 + #, python-format +@@ -823,18 +837,22 @@ msgid "" + "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " + "processes labeled $TARGET_TYPE by default." + msgstr "" ++"$SOURCE_BASE_PATH に、 $TARGET_TYPE にラベルされているプロセスでの $ACCESS " ++"アクセスがデフォルトで許可されるべきと考える場合。" + + #: ../src/catchall.py:52 + msgid "" + "If you believe that $SOURCE_BASE_PATH should have the $ACCESS capability by " + "default." +-msgstr "" ++msgstr "$SOURCE_BASE_PATH には $ACCESS 機能をデフォルトで持たせるべきと考える場合。" + + #: ../src/catchall.py:53 + msgid "" + "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " + "the $TARGET_BASE_PATH $TARGET_CLASS by default." + msgstr "" ++"$SOURCE_BASE_PATH に、 $TARGET_BASE_PATH $TARGET_CLASS の $ACCESS " ++"アクセスがデフォルトで許可されるべきと考える場合。" + + #: ../src/catchall.py:55 + msgid "" +@@ -875,6 +893,16 @@ msgid "" + " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" $SOURCE による、ポートに関連付けられた SELinux タイプを持たないネットワークポート $PORT_NUMBER " ++"への接続を、SELinux は拒否しました。\n" ++" $SOURCE の $PORT_NUMBER での接続を許可する必要がある場合は、semanage " ++"コマンドを使用して、$PORT_NUMBER を、$SOURCE_TYPE が接続できるポートタイプに割り当てます (%s)。 \n" ++" \n" ++"\n" ++"$SOURCE による $PORT_NUMBER への接続が想定されていない場合、 \n" ++" 不正侵入の試行が示唆される可能性があります。\n" ++" " + + #: ../src/connect_ports.py:38 + #, python-format +@@ -899,7 +927,7 @@ msgstr "" + #: ../src/connect_ports.py:45 ../src/sandbox_connect.py:47 + msgid "" + "If you want to allow $SOURCE_PATH to connect to network port $PORT_NUMBER" +-msgstr "" ++msgstr "$SOURCE_PATH がネットワークポート $PORT_NUMBER に接続したい場合" + + #: ../src/chrome.py:31 + msgid "" +@@ -937,7 +965,7 @@ msgstr "" + #: ../src/chrome.py:38 ../src/mozplugger.py:38 + #, python-format + msgid "If you want to use the %s package" +-msgstr "" ++msgstr "%s パッケージを使用したい場合" + + #: ../src/chrome.py:43 + msgid "you must turn off SELinux controls on the Chrome plugins." +@@ -990,7 +1018,7 @@ msgstr "" + + #: ../src/cvs_data.py:44 + msgid "If $TARGET_BASE_PATH should be shared via the cvs daemon" +-msgstr "" ++msgstr "$TARGET_BASE_PATH は、cvs デーモンを経由して共有されている必要がある場合" + + #: ../src/cvs_data.py:45 ../src/qemu_file_image.py:49 + msgid "You need to change the label on $TARGET_BASE_PATH'" +@@ -1027,7 +1055,7 @@ msgstr "" + msgid "" + "If you want to help identify if domain needs this access or you have a file " + "with the wrong permissions on your system" +-msgstr "" ++msgstr "ドメインがこのアクセスを必要とするか、または使用システム上に間違えたパーミッションで ファイルを所有しているかを確認したい場合" + + #: ../src/dac_override.py:39 + msgid "" +@@ -1132,7 +1160,7 @@ msgstr "\n" + + #: ../src/disable_ipv6.py:40 + msgid "If you want to disable IPV6 on this machine" +-msgstr "" ++msgstr "このマシンにおいて IPV6 を無効化したい場合" + + #: ../src/disable_ipv6.py:41 + msgid "" +@@ -1193,11 +1221,11 @@ msgstr "" + + #: ../src/file.py:49 + msgid "This is caused by a newly created file system." +-msgstr "" ++msgstr "これは新規作成されたファイルシステムによって引き起こされたものです。" + + #: ../src/file.py:51 + msgid "If you think this is caused by a badly mislabeled machine." +-msgstr "" ++msgstr "これが、間違ったラベルを付けられたマシンによって起こされたと考える場合。" + + #: ../src/file.py:55 + msgid "you need to add labels to it." +@@ -1258,7 +1286,7 @@ msgstr "\n" + msgid "" + "If you believe $SOURCE_BASE_PATH should be allowed to create " + "$TARGET_BASE_PATH files" +-msgstr "" ++msgstr "$SOURCE_BASE_PATH は、 $TARGET_BASE_PATH ファイルを作成するために許可されているべきと考える場合" + + #: ../src/filesystem_associate.py:44 + msgid "" +@@ -1290,6 +1318,12 @@ msgid "" + " signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux は http デーモンによるメール送信を拒否しました。\n" ++" httpd スクリプトの1つがメールポートへの接続、または sendmail \n" ++" コマンドの実行を試行しています。 httpd に sendmail を設定していなかった場合は、\n" ++" 不正侵入の試行が示唆される可能性があります。\n" ++" " + + #: ../src/httpd_can_sendmail.py:39 + msgid "" +@@ -1307,7 +1341,7 @@ msgstr "" + + #: ../src/httpd_can_sendmail.py:47 + msgid "If you want to allow httpd to send mail" +-msgstr "" ++msgstr "httpd が、メール送信することを許可する場合" + + #: ../src/httpd_can_sendmail.py:48 + msgid "you must setup SELinux to allow this" +@@ -1360,7 +1394,7 @@ msgstr "" + msgid "" + "If you want to allow httpd to execute cgi scripts and to unify HTTPD " + "handling of all content files." +-msgstr "" ++msgstr "httpd による cgi スクリプトの実行、 および全コンテンツファイルの HTTPD 処理の統一を許可したい場合。" + + #: ../src/httpd_unified.py:58 + msgid "" +@@ -1433,6 +1467,7 @@ msgid "" + "If you do not think $SOURCE_BASE_PATH should try $ACCESS access on " + "$TARGET_BASE_PATH." + msgstr "" ++"$SOURCE_BASE_PATH が $TARGET_BASE_PATH の $ACCESS アクセスを試みるべきではないと考える場合。" + + #: ../src/kernel_modules.py:45 ../src/selinuxpolicy.py:45 + msgid "" +@@ -1492,6 +1527,8 @@ msgid "" + "$TARGET_BASE_PATH $TARGET_CLASS, because you believe it should not need this " + "access." + msgstr "" ++"このアクセスが必要とは思えないため、$SOURCE_BASE_PATH が、 $TARGET_BASE_PATH $TARGET_CLASS へ " ++"$ACCESS アクセスを試みることを、拒否したい場合。" + + #: ../src/leaks.py:43 + msgid "" +@@ -1534,12 +1571,22 @@ msgid "" + " compromised.\n" + " " + msgstr "" ++"\n" ++" SELinux は、カーネルのアドレス空間の低位置を mmap する $SOURCE の機能を \n" ++" 拒否しました。アドレス領域の低位置を mmap する機能は、 \n" ++" /proc/sys/kernel/mmap_min_addr で設定されます。このようなマッピングを拒否すると、 \n" ++" カーネルで null deref バグの悪用を防止する手助けになります。このアクセスを\n" ++" 必要とするアプリケーションはすべて独自のポリシーが記述されているはずです。 \n" ++" セキュリティ侵害されたアプリケーションによりカーネルの修正が試行されると、\n" ++" この AVC が生成されます。これは深刻な問題です。ご使用のシステムは非常に \n" ++" 高い確率でセキュリティが侵害されている可能性があります。\n" ++" " + + #: ../src/mmap_zero.py:46 + msgid "" + "If you do not think $SOURCE_PATH should need to mmap low memory in the " + "kernel." +-msgstr "" ++msgstr "$SOURCE_PATH にカーネル内で低いメモリーの mmap を行なう必要があるとは思えない場合。" + + #: ../src/mmap_zero.py:47 + msgid "you may be under attack by a hacker, this is a very dangerous access." +@@ -1597,7 +1644,7 @@ msgstr "" + + #: ../src/mounton.py:48 + msgid "If you want to allow $SOURCE_BASE_PATH to mount on $TARGET_BASE_PATH." +-msgstr "" ++msgstr "$SOURCE_BASE_PATH が、 $TARGET_BASE_PATH にマウントすることを許可したい場合。" + + #: ../src/mounton.py:49 + msgid "you must change the labeling on $TARGET_PATH." +@@ -1670,7 +1717,7 @@ msgstr "" + msgid "" + "If you want to to continue using SELinux Firefox plugin containment rather " + "then using mozplugger package" +-msgstr "" ++msgstr "mozplugger パッケージではなく、SELinux Firefox プラグインの内容を続けて使用したい場合。" + + #: ../src/mozplugger_remove.py:45 + msgid "you must remove the mozplugger package." +@@ -1685,6 +1732,11 @@ msgid "" + " is labeled correctly.\n" + " " + msgstr "" ++"\n" ++" SELinux は $SOURCE により要求されたアクセスを拒否しました。$TARGET_PATH \n" ++" には誤ったラベルが付けられている可能性があります。ラベルが適切に設定されている場合、openvpn はホームディレクトリーの \n" ++" コンテンツを読み込むことができます。\n" ++" " + + #: ../src/openvpn.py:41 + msgid "" +@@ -1694,18 +1746,25 @@ msgid "" + " # restorecon -R /root/.ssh\n" + " " + msgstr "" ++"\n" ++" restorecon コマンドを実行することにより、このファイルへデフォルトのシステムコンテキストを\n" ++" 復元できます。 \n" ++" # restorecon -R /root/.ssh\n" ++" " + + #: ../src/openvpn.py:49 + msgid "" + "If you want to mv $TARGET_BASE_PATH to standard location so that " + "$SOURCE_BASE_PATH can have $ACCESS access" + msgstr "" ++"$SOURCE_BASE_PATH が $ACCESS へアクセスできるよう、 $TARGET_BASE_PATH を標準の場所に移動したい場合" + + #: ../src/openvpn.py:51 + msgid "" + "If you want to modify the label on $TARGET_BASE_PATH so that " + "$SOURCE_BASE_PATH can have $ACCESS access on it" + msgstr "" ++"$SOURCE_BASE_PATH が $ACCESS へアクセスできるよう、 $TARGET_BASE_PATH のラベルを編集したい場合" + + #: ../src/openvpn.py:55 + msgid "you must move the cert file to the ~/.cert directory" +@@ -1753,7 +1812,7 @@ msgstr "" + + #: ../src/public_content.py:50 + msgid "If you want to treat $TARGET_BASE_PATH as public content" +-msgstr "" ++msgstr "$TARGET_BASE_PATH を公開コンテンツとして処理する場合" + + #: ../src/public_content.py:51 + msgid "" +@@ -1843,7 +1902,7 @@ msgstr "" + + #: ../src/qemu_file_image.py:48 + msgid "If $TARGET_BASE_PATH is a virtualization target" +-msgstr "" ++msgstr "$TARGET_BASE_PATH が仮想的なターゲットである場合" + + #: ../src/restorecon.py:57 + msgid "" +@@ -1901,13 +1960,40 @@ msgid "" + "package.\n" + " " + msgstr "" ++"\n" ++" SELinux は $SOURCE により要求されたアクセスを拒否しました。$TARGET_PATH には\n" ++" 誤ったラベルが付けられている可能性があります。$TARGET_PATH のデフォルト SELinux タイプは、\n" ++" %s ですが、現在のタイプは $TARGET_TYPE です。このファイルを\n" ++" デフォルトのタイプに戻すことにより、問題が解決される可能性があります。\n" ++"

\n" ++" ファイルのコンテキストは以下の方法で 1 つのファイルに割り当てることができます。\n" ++"

    \n" ++"
  • 1 つのディレクトリー内で作成されたファイルは、デフォルトで親ディレクトリーのファイルコンテキストを受け取ります。\n" ++"
  • SELinux ポリシーは、ラベル B が付けられたディレクトリーにファイルを作成するコンテキスト A " ++"で実行しているプロセスを指定することにより、\n" ++" 親ディレクトリーから継承したデフォルトのラベルを上書きし、代わりにラベル C を持つファイルを作成するようになります。\n" ++" この例として、dhclient_t タイプで実行していて、ディレクトリー /etc 内にファイルを作成するような dhcp " ++"クライアントがあります。このファイルは、\n" ++" 通常、親からの継承により etc_t タイプを受け取りますが、SELinux ポリシーの指定により、このファイルには代わりに " ++"net_conf_t タイプでラベルが付けられます。\n" ++"
  • ユーザーは、chcon や restorecon " ++"などのツールを使用することで、ファイル上のファイルコンテキストを変更することができます。\n" ++"
\n" ++" " ++"ユーザーエラーか、通常の制約されたアプリケーションが間違ったドメインで実行されたことにより、このファイルには誤ったラベルが付けられた可能性があります。\n" ++"

\n" ++" しかし、このファイルにこのタイプのラベルが付けられるはずがないため、これは SELinux 内のバグである可能性もあります。\n" ++"

\n" ++" これがバグだと思われる場合は、このパッケージについてバグレポートを作成してください。\n" ++" " + + #: ../src/restorecon.py:90 + #, python-format + msgid "" + "If you want to fix the label. \n" + "$TARGET_PATH default label should be %s." +-msgstr "" ++msgstr "ラベルを修正する場合。\n" ++"$TARGET_PATH のデフォルトラベルは %s のはずです。" + + #: ../src/restorecon.py:96 + msgid "" +@@ -1915,6 +2001,8 @@ msgid "" + "insufficient permissions to access a parent directory in which case try to " + "change the following command accordingly." + msgstr "" ++"restorecon " ++"を実行することができます。親ディレクトリーにアクセスするのに必要な権限がないため、要求されたアクセスが停止した可能性があります。この場合は、以下のコマンドを状況に応じて適切に変更します。" + + #: ../src/restorecon.py:105 ../src/restorecon_source.py:73 + msgid "Restore\n" +@@ -1955,13 +2043,29 @@ msgid "" + "package.\n" + " " + msgstr "" ++"\n" ++" SELinux により、$SOURCE のアクセスが拒否されました。\n" ++" $SOURCE_PATH に誤ったラベルが付けられている可能性があります。\n" ++" $SOURCE_PATH のデフォルトの SELinux タイプは%s ですが、\n" ++" 現在のタイプは $SOURCE_TYPE です。\n" ++" このファイルのタイプをデフォルトに戻すと、問題が解決する場合があります。\n" ++"

\n" ++" ユーザーエラーか、通常の制限されたアプリケーションが誤ったドメインで\n" ++" 実行されたことにより、このファイルには誤ったラベルが付けられた可能性があります。\n" ++"

\n" ++" しかし、このファイルにこのライブでラベルが付けられるはずがないため、\n" ++" SELinux のバグである可能性もあります。\n" ++"

\n" ++" これがバグだと思われる場合は、このパッケージについてバグレポートを提出してください。\n" ++" " + + #: ../src/restorecon_source.py:60 + #, python-format + msgid "" + "If you want to fix the label. \n" + "$SOURCE_PATH default label should be %s." +-msgstr "" ++msgstr "ラベルを修正する場合。\n" ++"$SOURCE_PATH のデフォルトランレベルは %s のはずです。" + + #: ../src/restorecon_source.py:65 + msgid "you can run restorecon." +@@ -1977,6 +2081,13 @@ msgid "" + " this message could indicate either a bug or an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux は、RSYNC が $TARGET_PATH にアクセスするのを拒否しました。\n" ++" これが RSYNC リポジトリーであるなら、rsync_data_t のファイル\n" ++" コンテキストラベルを持っている必要があります。$TARGET_PATH を\n" ++" RSYNC リポジトリーとして使用する予定ではなかった場合、\n" ++" このメッセージは、バグか、侵入の試みを示します。\n" ++" " + + #: ../src/rsync_data.py:38 + msgid "" +@@ -1996,7 +2107,7 @@ msgstr "" + + #: ../src/rsync_data.py:45 + msgid "If $TARGET_BASE_PATH should be shared via the RSYNC daemon" +-msgstr "" ++msgstr "$TARGET_BASE_PATH は RSYNC デーモンによって共有されるべきです" + + #: ../src/rsync_data.py:46 + msgid "You need to change the label on $TARGET_BASE_PATH" +@@ -2027,6 +2138,14 @@ msgid "" + "Samba and SELinux.\n" + " " + msgstr "" ++"\n" ++" SELinux は、samba が $TARGET_PATH へアクセスするのを拒否しました。\n" ++" このディレクトリーを samba を共有したい場合は、samba_share_t の\n" ++" ファイルコンテキストラベルを持っている必要があります。$TARGET_PATH を\n" ++" samba リポジトリーとして使用する意図ではなかった場合、このメッセージは、\n" ++" バグか、不正侵入が試みられた可能性を示しています。\n" ++" Samba と SELinux のセットアップに関する詳細は 'man samba_selinux' を参照してください。\n" ++" " + + #: ../src/samba_share.py:39 + msgid "" +@@ -2068,6 +2187,16 @@ msgid "" + " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux は、$SOURCE が、サンドボックスの中でネットワークポート $PORT_NUMBER に接続することを拒否しました。\n" ++" $SOURCE による $PORT_NUMBER への接続を許可する場合は、sandbox_web_t や sandbox_net_t " ++"などの別のサンドボックスタイプを使用する必要があります。 \n" ++" # sandbox -X -t sandbox_net_t $SOURCE\n" ++" \n" ++"\n" ++"$SOURCE による $PORT_NUMBER への接続ががサポートされていない場合、\n" ++" これは、侵入の試みである可能性があります。\n" ++" " + + #: ../src/sandbox_connect.py:41 + msgid "" +@@ -2127,7 +2256,7 @@ msgstr "" + + #: ../src/setenforce.py:27 + msgid "If you did not directly cause this AVC through testing." +-msgstr "" ++msgstr "この AVC は、このテストによって直接起こったものではない場合。" + + #: ../src/setenforce.py:28 + msgid "if you think that you might have been hacked" +@@ -2158,10 +2287,18 @@ msgid "" + " well be compromised.\n" + " " + msgstr "" ++"\n" ++" SELinux は、$SOURCE が /sys/fs/selinux 内のファイルに書き込むのを阻止しました。\n" ++" /sys/fs/selinux のファイルは、SELinux に設定された方法で制御されます。\n" ++" /sys/fs/selinux のファイルへの書き込みが必要なすべてのプログラムには、それぞれの\n" ++" ポリシーが事前に作成されている必要がありました。セキュリティーのリスクにさらされている\n" ++" アプリケーションが SELinux を無効にしようとすると、この AVC が生成されます。これは重要な問題です。\n" ++" ご使用のシステムはすでにセキュリティーのリスクにさらされている可能性があります。\n" ++" " + + #: ../src/setenforce.py:48 + msgid "If you believe $SOURCE_PATH tried to disable SELinux." +-msgstr "" ++msgstr "$SOURCE_PATH が SELinux を無効にしようとしたと考える場合。" + + #: ../src/setenforce.py:49 + msgid "" +@@ -2178,6 +2315,11 @@ msgid "" + " is labeled correctly.\n" + " " + msgstr "" ++"\n" ++" SELinux は $SOURCE により要求されたアクセスを拒否しました。$TARGET_PATH に\n" ++" 誤ったラベルが付けられている可能性があります。ラベルが適切に設定されている場合、\n" ++" sshd は /root/.ssh ディレクトリーのコンテンツを読み込むことができます。\n" ++" " + + #: ../src/sshd_root.py:42 + msgid "" +@@ -2187,6 +2329,11 @@ msgid "" + " # restorecon -R /root/.ssh\n" + " " + msgstr "" ++"\n" ++" restorecon コマンドを実行することにより、このファイルへのデフォルトのシステムコンテキストを\n" ++" 復元できます。\n" ++" # restorecon -R /root/.ssh\n" ++" " + + #: ../src/sshd_root.py:55 + msgid "Restore Context" +@@ -2212,6 +2359,13 @@ msgid "" + "an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux は、$TARGET_PATH への $SOURCE アクセスを拒否しました。\n" ++" これがスワップファイルならば、swapfile_t のファイルコンテキストラベルを\n" ++" 持っている必要があります。$TARGET_PATH をスワップファイルとして\n" ++" 使用する意図でなかった場合、\n" ++" このメッセージは、バグか、不正侵入が試みられた可能性を示しています。\n" ++" " + + #: ../src/swapfile.py:38 + msgid "" +@@ -2234,7 +2388,7 @@ msgstr "" + msgid "" + "If you do not believe your $SOURCE_PATH should be modifying the kernel, by " + "loading kernel modules" +-msgstr "" ++msgstr "$SOURCE_PATH は kernel モジュールをロードし、kernel を編集すべきではないと考える場合" + + #: ../src/sys_module.py:29 + msgid "You might have been hacked." +@@ -2273,7 +2427,7 @@ msgstr "" + msgid "" + "If you do not believe that $SOURCE_PATH should be attempting to modify the " + "kernel by loading a kernel module." +-msgstr "" ++msgstr "$SOURCE_PATH は kernel モジュールをロードし、kernel を編集しようとすべきではないと考える場合。" + + #: ../src/sys_module.py:47 + msgid "A process might be attempting to hack into your system." +@@ -2307,7 +2461,7 @@ msgstr "" + msgid "" + "If you do not want processes to require capabilities to use up all the " + "system resources on your system;" +-msgstr "" ++msgstr "プロセスに、システム上の全システムリソースを消費できる機能を要求させたくない場合;" + + #: ../src/sys_resource.py:40 + msgid "" +@@ -2328,6 +2482,19 @@ msgid "" + "/* Override max number of consoles on console allocation */\n" + "/* Override max number of keymaps */\n" + msgstr "" ++"システムリソースが不足している原因を突き止め、問題を解決する必要があります。\n" ++"\n" ++"/usr/include/linux/capability.h によると、sys_resource は次のような場合に必要となります。\n" ++"\n" ++"/* リソースの上限を無効にしてから設定する */\n" ++"/* クオータの上限を無効にする */\n" ++"/* ext2 ファイルシステムの予約領域を無効にする */\n" ++"/* ext3 ファイルシステムのデータジャーナリングモードを変更する (ジャーナリングのリソースを使用) */\n" ++"/* 注意: ext2 はリソースの無効化チェックの際に fsuid を受け取るため、fsuid で無効化を行うこともできます */\n" ++"/* IPC メッセージキューでサイズ制限を無効にする */\n" ++"/* リアルタイムクロックからの 64hz を超える割り込みを許可する */\n" ++"/* コンソールの割り当てでコンソールの最大数を無効にする */\n" ++"/* キーマップの最大数を無効にする */\n" + + #: ../src/vbetool.py:30 + msgid "" +@@ -2382,7 +2549,7 @@ msgstr "" + msgid "" + "If you want to ignore this AVC because it is dangerous and your machine " + "seems to be working correctly." +-msgstr "" ++msgstr "この AVC を無効にしたい場合。この AVC は警告だが、マシンは正常に動作しているため。" + + #: ../src/vbetool.py:56 + msgid "" +@@ -2448,7 +2615,7 @@ msgstr "" + msgid "" + "If you want to ignore this AVC because it is dangerous and your wine " + "applications are working correctly." +-msgstr "" ++msgstr "この AVC を無効にしたい場合。この AVC は警告だが、wine アプリケーションは正常に動作しているため。" + + #: ../src/wine.py:67 + msgid "" +diff --git a/plugins/po/kn.po b/plugins/po/kn.po +index c41b6b9..e013d74 100644 +--- a/plugins/po/kn.po ++++ b/plugins/po/kn.po +@@ -14,11 +14,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:24-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Kannada (http://www.transifex.com/projects/p/fedora/language/" + "kn/)\n" +diff --git a/plugins/po/ko.po b/plugins/po/ko.po +index 5176715..127989c 100644 +--- a/plugins/po/ko.po ++++ b/plugins/po/ko.po +@@ -12,12 +12,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2016-07-22 05:26-0400\n" +-"Last-Translator: Petr Lautrbach \n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Korean (http://www.transifex.com/projects/p/fedora/language/" + "ko/)\n" + "Language: ko\n" +diff --git a/plugins/po/ml.po b/plugins/po/ml.po +index c4479be..308715e 100644 +--- a/plugins/po/ml.po ++++ b/plugins/po/ml.po +@@ -9,11 +9,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:25-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Malayalam (http://www.transifex.com/projects/p/fedora/" + "language/ml/)\n" +diff --git a/plugins/po/mr.po b/plugins/po/mr.po +index 82dd24d..931c2f6 100644 +--- a/plugins/po/mr.po ++++ b/plugins/po/mr.po +@@ -10,11 +10,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:25-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Marathi (http://www.transifex.com/projects/p/fedora/language/" + "mr/)\n" +diff --git a/plugins/po/nl.po b/plugins/po/nl.po +index bc1d1d3..a2c378e 100644 +--- a/plugins/po/nl.po ++++ b/plugins/po/nl.po +@@ -12,11 +12,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-09-12 10:27-0400\n" ++"PO-Revision-Date: 2017-09-12 10:34-0400\n" + "Last-Translator: Geert Warrink \n" + "Language-Team: Dutch (http://www.transifex.com/projects/p/fedora/language/nl/" + ")\n" +diff --git a/plugins/po/or.po b/plugins/po/or.po +index fea4fbb..d111198 100644 +--- a/plugins/po/or.po ++++ b/plugins/po/or.po +@@ -12,11 +12,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:26-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Oriya (http://www.transifex.com/projects/p/fedora/language/or/" + ")\n" +diff --git a/plugins/po/pa.po b/plugins/po/pa.po +index 36f1542..dc7034c 100644 +--- a/plugins/po/pa.po ++++ b/plugins/po/pa.po +@@ -11,11 +11,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:27-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Panjabi (Punjabi) (http://www.transifex.com/projects/p/fedora/" + "language/pa/)\n" +diff --git a/plugins/po/pl.po b/plugins/po/pl.po +index 312bddf..7eba3a2 100644 +--- a/plugins/po/pl.po ++++ b/plugins/po/pl.po +@@ -11,11 +11,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-08-22 11:49-0400\n" ++"PO-Revision-Date: 2017-09-01 11:40-0400\n" + "Last-Translator: Piotr Drąg \n" + "Language-Team: Polish (http://www.transifex.com/projects/p/fedora/language/" + "pl/)\n" +diff --git a/plugins/po/pt.po b/plugins/po/pt.po +index 5386878..133fc5f 100644 +--- a/plugins/po/pt.po ++++ b/plugins/po/pt.po +@@ -10,11 +10,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:28-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Portuguese (http://www.transifex.com/projects/p/fedora/" + "language/pt/)\n" +diff --git a/plugins/po/pt_BR.po b/plugins/po/pt_BR.po +index e16dec0..7bb1f64 100644 +--- a/plugins/po/pt_BR.po ++++ b/plugins/po/pt_BR.po +@@ -16,12 +16,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2016-09-05 02:14-0400\n" +-"Last-Translator: Daniel Lara \n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Portuguese (Brazil) (http://www.transifex.com/projects/p/" + "fedora/language/pt_BR/)\n" + "Language: pt-BR\n" +diff --git a/plugins/po/ru.po b/plugins/po/ru.po +index 1d6a368..b2b2775 100644 +--- a/plugins/po/ru.po ++++ b/plugins/po/ru.po +@@ -8,18 +8,18 @@ + # Yulia , 2006, 2008, 2009, 2010, 2012 + # Yulia , 2013 + # Игорь Горбунов , 2013 +-# Terry Chuang , 2016. #zanata + # yuliya , 2016. #zanata ++# Vit Mojzis , 2017. #zanata + msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2016-08-29 03:07-0400\n" +-"Last-Translator: Terry Chuang \n" ++"PO-Revision-Date: 2017-11-22 06:35-0500\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Russian (http://www.transifex.com/projects/p/fedora/language/" + "ru/)\n" + "Language: ru\n" +@@ -227,6 +227,16 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++" Если вы доверяете $TARGET_PATH, можно изменить контекст\n" ++" файла на textrel_shlib_t. «chcon -t textrel_shlib_t \n" ++" $TARGET_PATH»\n" ++" Также необходимо изменить контексты файлов в системе, используемые по " ++"умолчанию, чтобы они сохранились даже при повторной разметке. \n" ++" «semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH'»\n" ++"\n" ++" \n" ++" " + + #: ../src/allow_execmod.py:114 + msgid "Change label on the library." +@@ -262,6 +272,26 @@ msgid "" + "file a bug report.\n" + " " + msgstr "" ++"\n" ++" Приложение $SOURCE попыталось сделать свой стек\n" ++" исполняемым, что представляет потенциальную угрозу безопасности.\n" ++" В этом не должно быть необходимости. \n" ++" Память стека не является исполняемой в большинстве ОС\n" ++" на сегодняшний день, и в будущем это не изменится.\n" ++" Исполняемый стек представляет собой исключительно серьезную проблему " ++"безопасности.\n" ++" Ошибка execstack может быть вызвана вредоносными программами.\n" ++" Иногда приложения, написанные\n" ++" некорректно, могут запросить это разрешение. Документ\n" ++" Тесты " ++"защиты памяти SELinux\n" ++" объясняет, как исключить использование такой возможности. Если $SOURCE " ++"не\n" ++" работает, когда это необходимо, можно настроить SELinux так, \n" ++" чтобы временно разрешить такую возможность, пока приложение не будет " ++"исправлено. Пожалуйста, \n" ++" создайте запрос в Bugzilla для этого пакета.\n" ++" " + + #: ../src/allow_execstack.py:79 + msgid "" +@@ -273,6 +303,11 @@ msgid "" + " execstack -s LIBRARY_PATH.\n" + " " + msgstr "" ++"\n" ++"Иногда для библиотеки может быть случайно выбран флаг execstack.\n" ++"Его можно снять, выполнив execstack -c LIBRARY_PATH.\n" ++"После этого перезапустите приложение.\n" ++"Если это не помогло, снова установите флаг: execstack -s LIBRARY_PATH. " + + #: ../src/allow_execstack.py:89 + msgid "" +@@ -340,6 +375,20 @@ msgid "" + " this access attempt could signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил демону ftp доступ $ACCESS к файлам в файловой системе " ++"CIFS.\n" ++" CIFS (Comment Internet File System) — сетевая файловая система,\n" ++" аналогичная SMB (http://www.microsoft.com/mind/1196/cifs.asp).\n" ++" Демон ftp попытался прочесть данные из смонтированной системы этого типа." ++"\n" ++" Так как CIFS не поддерживает низкоуровневое маркирование SELinux, \n" ++" все файлы и каталоги имеют один и тот же контекст безопасности.\n" ++" \n" ++" Если вы не настраивали демон ftp на чтение файлов из CIFS,\n" ++" попытка получения доступа может служить сигналом вторжения.\n" ++" " + + #: ../src/allow_ftpd_use_cifs.py:46 + msgid "" +@@ -414,6 +463,20 @@ msgid "" + " this access attempt could signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил доступ $ACCESS к файлам на разделе NFS.\n" ++" NFS (Network Filesystem) — сетевая файловая система, обычно используемая " ++"в системах UNIX/Linux.\n" ++"\n" ++" Демон ftp попытался прочесть данные из смонтированной системы этого типа." ++"\n" ++" Так как NFS система не поддерживает низкоуровневое маркирование SELinux, " ++"\n" ++" все файлы и каталоги имеют один и тот же контекст безопасности.\n" ++" \n" ++" Если вы не настраивали демон ftp на чтение файлов из NFS,\n" ++" попытка получения доступа может служить сигналом вторжения.\n" ++" " + + #: ../src/allow_ftpd_use_nfs.py:47 + msgid "" +@@ -571,6 +634,16 @@ msgid "" + " to bind to $PORT_NUMBER, this could signal an intrusion attempt.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил $SOURCE подключаться сетевому порту $PORT_NUMBER, " ++"которому не присвоен тип SELinux.\n" ++" Если $SOURCE должен иметь возможность подключения к этому порту, можно " ++"использовать команду semanage для добавления $PORT_NUMBER к типу, " ++"которому $SOURCE_TYPE может быть сопоставлен (%s).\n" ++" \n" ++"Если $SOURCE не должен\n" ++" соответствовать $PORT_NUMBER, возможно, имеет место попытка вторжения.\n" ++" " + + #: ../src/bind_ports.py:38 + #, python-format +@@ -643,6 +716,14 @@ msgid "" + " the access.\n" + " " + msgstr "" ++"\n" ++"\n" ++" SELinux отклонил запрос доступа от $SOURCE. Текущие настройки \n" ++" логических переменных не разрешают доступ. Такой запрос не \n" ++" ожидается от $SOURCE и может свидетельствовать о \n" ++" попытке вторжения. Если же вы действительно хотите разрешить доступ, \n" ++" потребуется изменить соответствующие логические переменные. \n" ++" " + + #: ../src/catchall_boolean.py:46 + msgid "" +@@ -653,6 +734,12 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++" Ограничиваемые процессы можно настроить так, чтобы они выполнялись с " ++"различными уровнями доступа. При этом доступ можно разрешать и запрещать с " ++"помощью логических переменных SELinux.\n" ++"\n" ++" " + + #: ../src/catchall_boolean.py:63 + #, python-format +@@ -711,6 +798,10 @@ msgid "" + "Then execute:\n" + "restorecon -v '$FIX_TARGET_PATH'\n" + msgstr "" ++"# semanage fcontext -a -t FILE_TYPE '$FIX_TARGET_PATH'\n" ++"где FILE_TYPE может принимать значения: %s. \n" ++"Затем выполните: \n" ++"restorecon -v '$FIX_TARGET_PATH'\n" + + #: ../src/catchall.py:29 ../src/chrome.py:29 ../src/mozplugger.py:29 + #: ../src/mozplugger_remove.py:29 +@@ -947,7 +1038,9 @@ msgstr "" + msgid "\n" + " SELinux is preventing $SOURCE_PATH the \"$ACCESS\" capability.\n" + " " +-msgstr "" ++msgstr "\n" ++" SELinux запретил операцию \"$ACCESS\" для $SOURCE_PATH. \n" ++" " + + #: ../src/dac_override.py:32 + msgid "" +@@ -988,6 +1081,13 @@ msgid "" + "If you see PATH record check ownership/permissions on file, and fix it,\n" + "otherwise report as a bugzilla." + msgstr "" ++"\n" ++"Включите аудит:\n" ++"# auditctl -w /etc/shadow -p w\n" ++"Попытайтесь заново создать AVC, после чего выполните:\n" ++"# ausearch -m avc -ts recent\n" ++"Если запись PATH осуществляет проверку разрешений файла, исправьте это, \n" ++"в противном случае создайте запрос в Bugzilla." + + #: ../src/device.py:29 + msgid "" +@@ -996,6 +1096,10 @@ msgid "" + "$TARGET_PATH.\n" + " " + msgstr "" ++"\n" ++" SELinux запрещает $SOURCE_PATH доступ «$ACCESS» к устройству " ++"$TARGET_PATH. \n" ++" " + + #: ../src/device.py:33 + msgid "" +@@ -1175,6 +1279,19 @@ msgid "" + " for the destination.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил $SOURCE создавать файл с контекстом $SOURCE_TYPE в " ++"файловой системе.\n" ++" Обычно это происходит при использовании команды «cp» для сохранения " ++"контекста файла при\n" ++" копировании (например, «cp -a»). Не все файловые контексты должны " ++"сохранять постоянство в разных файловых системах.\n" ++" Например, тип iso9660_t доступных только для чтения файлов не должен " ++"использоваться в\n" ++" системах, допускающих запись. В этом случае лучше подойдёт команда «cp -" ++"p», так как она адаптирует\n" ++" файловый контекст в зависимости от назначения.\n" ++" " + + #: ../src/filesystem_associate.py:40 + msgid "" +@@ -1319,6 +1436,17 @@ msgid "" + "for more information on setting up httpd and selinux.\n" + " " + msgstr "" ++"\n" ++" SELinux запрещает httpd ($SOURCE_PATH) доступ $ACCESS к $TARGET_PATH.\n" ++"\n" ++" Сценариям httpd не разрешено осуществлять запись без \n" ++" явной маркировки всех файлов. Если $TARGET_PATH допускает запись, \n" ++" то его надо отметить как httpd_sys_rw_content_t или " ++"httpd_sys_ra_content_t\n" ++" (если требуется только добавление).\n" ++" Подробную информацию можно найти на странице помощи\n" ++" «man httpd_selinux».\n" ++" " + + #: ../src/httpd_write_content.py:40 ../src/qemu_blk_image.py:45 + #: ../src/samba_share.py:45 ../src/swapfile.py:45 ../src/xen_image.py:48 +@@ -1350,6 +1478,16 @@ msgid "" + " serious issue. Your system may very well be compromised.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил $SOURCE изменять $TARGET. \n" ++" $SOURCE пытался изменить поведение ядра или вставить код в ядро. \n" ++" Для всех приложений, которым необходим такой уровень доступа, \n" ++" должна существовать отдельная политика. \n" ++" Если скомпрометированное приложение попытается модифицировать ядро,\n" ++" будет сгенерировано AVC. \n" ++" Это является серьёзной проблемой и может служить индикатором того, \n" ++" что система была скомпрометирована.\n" ++" " + + #: ../src/kernel_modules.py:44 ../src/selinuxpolicy.py:44 + msgid "" +@@ -1502,6 +1640,15 @@ msgid "" + " label of the file or directory.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил $SOURCE монтировать файловую систему в\n" ++" «$TARGET_PATH» с типом «$TARGET_TYPE». По умолчанию\n" ++" SELinux ограничивает монтирование файловых систем \n" ++" некоторыми файлами или\n" ++" каталогами (имеющими атрибут mountpoint). \n" ++" Тип «$TARGET_TYPE» не имеет этого атрибута. \n" ++" Можно попробовать изменить метку файла или каталога.\n" ++" " + + #: ../src/mounton.py:43 + msgid "" +@@ -2048,6 +2195,10 @@ msgid "" + "sandbox -X -t sandbox_net_t $SOURCE_PATH\n" + "Please read 'sandbox' man page for more details.\n" + msgstr "" ++"необходимо изменить type. sandbox_web_t или sandbox_net_t.\n" ++"Пример:\n" ++"sandbox -X -t sandbox_net_t $SOURCE_PATH\n" ++"За подробной информацией обратитесь к справочной странице sandbox.\n" + + #: ../src/selinuxpolicy.py:29 + msgid "\n" +@@ -2069,6 +2220,16 @@ msgid "" + " may very well be compromised.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил $SOURCE модифицировать $TARGET.\n" ++" $SOURCE пытался изменить конфигурацию политики selinux.\n" ++" Для всех приложений, которым необходим такой уровень доступа,\n" ++" должна существовать отдельная политика.\n" ++" Если скомпрометированное приложение попытается изменить политику,\n" ++" будет сгенерировано AVC.\n" ++" Это является серьезной проблемой и может служить индикатором того, \n" ++" что система могла быть скомпрометирована.\n" ++" " + + #: ../src/setenforce.py:27 + msgid "If you did not directly cause this AVC through testing." +@@ -2213,6 +2374,15 @@ msgid "" + " issue. Your system may very well be compromised.\n" + " " + msgstr "" ++"\n" ++" SELinux запретил $SOURCE загружать модуль ядра.\n" ++" Для всех приложений, которым необходим такой уровень доступа,\n" ++" должна существовать отдельная политика.\n" ++" Если скомпрометированное приложение попытается изменить модуль,\n" ++" будет сгенерировано AVC.\n" ++" Это является серьёзной проблемой и может служить индикатором того, \n" ++" что система была скомпрометирована.\n" ++" " + + #: ../src/sys_module.py:46 + msgid "" +@@ -2229,7 +2399,9 @@ msgid "" + "\n" + " SELinux is preventing $SOURCE_PATH the \"sys_resource\" capability.\n" + " " +-msgstr "" ++msgstr "\n" ++" SELinux запрещает возможность $SOURCE_PATH «sys_resource».\n" ++" " + + #: ../src/sys_resource.py:32 + msgid "" +@@ -2241,6 +2413,13 @@ msgid "" + "disk space, please report this as a bug.\n" + " " + msgstr "" ++"\n" ++"Ограниченные домены не должны требовать «sys_resource». Обычно это означает, " ++"что не хватает какого-либо ресурса, например, места на диске, памяти, квоты " ++"и т.д. Освободите место на диске и это \n" ++"AVC-сообщение должно исчезнуть. Если проблема сохранится после очистки " ++"диска, создайте отчет об ошибке.\n" ++" " + + #: ../src/sys_resource.py:39 + msgid "" +@@ -2293,6 +2472,16 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++"SELinux запретила действие, запрошенное $SOURCE, программой изменения\n" ++"состояния видео оборудования. Эта программа обычно выполняет небезопасные\n" ++"операции памяти, в то же время именно так поступают и вредоносные программы,\n" ++"замаскированные под vbetool.\n" ++"Эта утилита восстанавливает состояние видео при возврате системы из\n" ++"ждущего режима. Если компьютер не возобновляет работу, остаётся только\n" ++"разрешить это действие, тем самым ослабив защиту системы.\n" ++"\n" ++" " + + #: ../src/vbetool.py:45 ../src/wine.py:56 + msgid "" +@@ -2361,6 +2550,25 @@ msgid "" + "\n" + " " + msgstr "" ++"\n" ++"SELinux запретил выполнение операции, запрошенной wine-preloader, программой " ++"для запуска приложений Windows на Linux. Известно, что эта программа " ++"использует небезопасные операции с системной памятью, как и вредоносные " ++"программы, маскирующиеся под wine. Если вы\n" ++"пытаетесь запустить приложение Windows, можно либо разрешить\n" ++"данную операцию, тем самым ослабив защиту системы,\n" ++"либо отказаться от использования приложений Windows под Linux. Если же вы не " ++"пытались запустить приложение Windows, это означает, что вы атакованы одной " ++"из таких вредоносных программ или кто-то пытается использовать вашу систему.\n" ++"\n" ++"Обратитесь за более подробной информацией к статье \n" ++"\n" ++"http://wiki.winehq.org/PreloaderPageZeroProblem\n" ++"\n" ++"Там описаны другие проблемы, с которыми сталкивается программа wine из-за " ++"небезопасных операций с памятью, и возможные пути их решения.\n" ++"\n" ++" " + + #: ../src/wine.py:66 + msgid "" +diff --git a/plugins/po/sr.po b/plugins/po/sr.po +index 58cd022..8c34c0a 100644 +--- a/plugins/po/sr.po ++++ b/plugins/po/sr.po +@@ -10,11 +10,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:29-0500\n" ++"PO-Revision-Date: 2017-09-01 08:32-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Serbian (http://www.transifex.com/projects/p/fedora/language/" + "sr/)\n" +diff --git a/plugins/po/sv.po b/plugins/po/sv.po +index a8771c8..21ed877 100644 +--- a/plugins/po/sv.po ++++ b/plugins/po/sv.po +@@ -11,12 +11,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-08-26 05:10-0400\n" +-"Last-Translator: Göran Uddeborg \n" ++"PO-Revision-Date: 2017-09-01 08:33-0400\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Swedish \n" + "Language: sv\n" + "Plural-Forms: nplurals=2; plural=(n != 1);\n" +diff --git a/plugins/po/ta.po b/plugins/po/ta.po +index 7fa2933..08cbb91 100644 +--- a/plugins/po/ta.po ++++ b/plugins/po/ta.po +@@ -17,11 +17,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:30-0500\n" ++"PO-Revision-Date: 2017-09-01 08:33-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Tamil (http://www.transifex.com/projects/p/fedora/language/ta/" + ")\n" +diff --git a/plugins/po/te.po b/plugins/po/te.po +index 75d905b..23a313b 100644 +--- a/plugins/po/te.po ++++ b/plugins/po/te.po +@@ -11,11 +11,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2015-02-20 02:30-0500\n" ++"PO-Revision-Date: 2017-09-01 08:33-0400\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Telugu (http://www.transifex.com/projects/p/fedora/language/" + "te/)\n" +diff --git a/plugins/po/uk.po b/plugins/po/uk.po +index 037dcd7..e2f7996 100644 +--- a/plugins/po/uk.po ++++ b/plugins/po/uk.po +@@ -11,11 +11,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-08-24 02:48-0400\n" ++"PO-Revision-Date: 2017-09-01 12:05-0400\n" + "Last-Translator: Yuri Chornoivan \n" + "Language-Team: Ukrainian (http://www.transifex.com/projects/p/fedora/" + "language/uk/)\n" +diff --git a/plugins/po/zh_CN.po b/plugins/po/zh_CN.po +index 2d03be3..ec5d0fb 100644 +--- a/plugins/po/zh_CN.po ++++ b/plugins/po/zh_CN.po +@@ -16,12 +16,12 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-08-22 04:00-0400\n" +-"Last-Translator: cheng ye <18969068329@163.com>\n" ++"PO-Revision-Date: 2017-11-08 05:31-0500\n" ++"Last-Translator: Copied by Zanata \n" + "Language-Team: Chinese (China) (http://www.transifex.com/projects/p/fedora/" + "language/zh_CN/)\n" + "Language: zh-CN\n" +diff --git a/plugins/po/zh_TW.po b/plugins/po/zh_TW.po +index db1c112..7a167e8 100644 +--- a/plugins/po/zh_TW.po ++++ b/plugins/po/zh_TW.po +@@ -14,11 +14,11 @@ msgid "" + msgstr "" + "Project-Id-Version: PACKAGE VERSION\n" + "Report-Msgid-Bugs-To: \n" +-"POT-Creation-Date: 2017-09-14 17:36+0200\n" ++"POT-Creation-Date: 2017-11-22 12:19+0100\n" + "MIME-Version: 1.0\n" + "Content-Type: text/plain; charset=UTF-8\n" + "Content-Transfer-Encoding: 8bit\n" +-"PO-Revision-Date: 2017-09-06 01:22-0400\n" ++"PO-Revision-Date: 2017-11-08 05:31-0500\n" + "Last-Translator: Copied by Zanata \n" + "Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/fedora/" + "language/zh_TW/)\n" +-- +2.15.0 + diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 1ae6f3e..91a3615 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,12 +3,13 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.9 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz Patch1: 0001-plugins-Update-translations.patch +Patch2: 0002-plugins-Update-translations.patch BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch @@ -43,6 +44,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Thu Nov 23 2017 Petr Lautrbach - 3.3.9-3 +- Update translations + * Mon Nov 20 2017 Petr Lautrbach - 3.3.9-2 - Update translations From fc3ad7ba1fa75340bd9a7bc811496f9b59a16f69 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 9 Feb 2018 16:33:07 +0000 Subject: [PATCH 23/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 91a3615..40f2c1f 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.9 -Release: 3%{?dist} +Release: 4%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -44,6 +44,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Feb 09 2018 Fedora Release Engineering - 3.3.9-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + * Thu Nov 23 2017 Petr Lautrbach - 3.3.9-3 - Update translations From 8afd19dc58df46f90f81e249c5e488a1c0632ac1 Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Wed, 14 Feb 2018 00:37:02 +0100 Subject: [PATCH 24/68] Remove BuildRoot definition None of currently supported distributions need that. It was needed last for EL5 which is EOL now Signed-off-by: Igor Gnatenko --- setroubleshoot-plugins.spec | 1 - 1 file changed, 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 40f2c1f..f692d7d 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -10,7 +10,6 @@ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz Patch1: 0001-plugins-Update-translations.patch Patch2: 0002-plugins-Update-translations.patch -BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch BuildRequires: perl-XML-Parser From bd3fce216e8e76077737cdd0dcb05b3165da8006 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Mon, 19 Feb 2018 13:37:47 +0100 Subject: [PATCH 25/68] List gcc in BuildRequires https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/IJFYI5Q2BYZKIGDFS2WLOBDUSEGWHIKV/ https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires --- setroubleshoot-plugins.spec | 3 +++ 1 file changed, 3 insertions(+) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index f692d7d..45f4b8b 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -12,6 +12,9 @@ Patch1: 0001-plugins-Update-translations.patch Patch2: 0002-plugins-Update-translations.patch BuildArch: noarch +# gcc is needed only for ./configure +# Remove it when the build process is fixed +BuildRequires: gcc BuildRequires: perl-XML-Parser BuildRequires: intltool gettext python3-devel Requires: setroubleshoot-server >= 3.3.13 From 21d1a15c1133fb844f24c8670b0ca31a43486fd4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Miro=20Hron=C4=8Dok?= Date: Tue, 19 Jun 2018 11:27:25 +0200 Subject: [PATCH 26/68] Rebuilt for Python 3.7 --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 45f4b8b..6ccc705 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.9 -Release: 4%{?dist} +Release: 5%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -46,6 +46,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Tue Jun 19 2018 Miro Hrončok - 3.3.9-5 +- Rebuilt for Python 3.7 + * Fri Feb 09 2018 Fedora Release Engineering - 3.3.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild From 2f9b4743102dec326ab32ee8ca0b2a3803b6d6f3 Mon Sep 17 00:00:00 2001 From: Jason Tibbitts Date: Tue, 10 Jul 2018 01:20:27 -0500 Subject: [PATCH 27/68] Remove needless use of %defattr --- setroubleshoot-plugins.spec | 1 - 1 file changed, 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 6ccc705..9615617 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -41,7 +41,6 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install rm -rf %{buildroot} %files -f %{name}.lang -%defattr(-,root,root,-) %doc %{_pkgdocdir} %{_datadir}/setroubleshoot/plugins From 82235c11c31879a90749b9a3fad84e6e81e912dd Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 14 Jul 2018 06:00:23 +0000 Subject: [PATCH 28/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 9615617..c60d4bc 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -3,7 +3,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.9 -Release: 5%{?dist} +Release: 6%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot @@ -45,6 +45,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jul 14 2018 Fedora Release Engineering - 3.3.9-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + * Tue Jun 19 2018 Miro Hrončok - 3.3.9-5 - Rebuilt for Python 3.7 From 829d3b3f71e7ac44b480b62cb6084118268ad0e2 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Mon, 16 Jul 2018 13:24:29 +0200 Subject: [PATCH 29/68] Disable automatic compilation of Python files in extra directories https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/IDDR65FMKZYZYLL6DGFEKFACC55PELW3/ https://fedoraproject.org/wiki/Packaging:Python_Appendix#Manual_byte_compilation --- setroubleshoot-plugins.spec | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index c60d4bc..1f36a6b 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -1,5 +1,8 @@ %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}} +# Disable automatic compilation of Python files in extra directories +%global _python_bytecompile_extra 0 + Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.9 @@ -36,6 +39,9 @@ make PYTHON=%{__python3} rm -rf %{buildroot} make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %find_lang %{name} +# Manually invoke the python byte compile macro for each path that needs byte +# compilation. +%py_byte_compile %{__python3} %{buildroot}%{_datadir}/setroubleshoot/plugins %clean rm -rf %{buildroot} From f9907b47146cf4749941585eb0e393e75a7d82b3 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Sat, 8 Dec 2018 23:05:41 +0100 Subject: [PATCH 30/68] setroubleshoot-plugins-3.3.10-1 - Handle no "allowed_target_types" properly - bind_ports: Do not use when there are no allowed_target_types - Fix summary and "if" text for AVCs with unknown target path - plugins: Update translations --- .gitignore | 1 + 0001-plugins-Update-translations.patch | 1310 ----------------- 0002-plugins-Update-translations.patch | 1833 ------------------------ setroubleshoot-plugins.spec | 14 +- sources | 2 +- 5 files changed, 11 insertions(+), 3149 deletions(-) delete mode 100644 0001-plugins-Update-translations.patch delete mode 100644 0002-plugins-Update-translations.patch diff --git a/.gitignore b/.gitignore index 6ade5ad..073aeaa 100644 --- a/.gitignore +++ b/.gitignore @@ -119,3 +119,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.7.tar.gz /setroubleshoot-plugins-3.3.8.tar.gz /setroubleshoot-plugins-3.3.9.tar.gz +/setroubleshoot-plugins-3.3.10.tar.gz diff --git a/0001-plugins-Update-translations.patch b/0001-plugins-Update-translations.patch deleted file mode 100644 index 10f8347..0000000 --- a/0001-plugins-Update-translations.patch +++ /dev/null @@ -1,1310 +0,0 @@ -From bb5c936528299f34208c569e5e2764ac82fb44a2 Mon Sep 17 00:00:00 2001 -From: Petr Lautrbach -Date: Sat, 18 Nov 2017 23:16:49 +0100 -Subject: [PATCH] plugins: Update translations - ---- - plugins/po/ca.po | 136 ++++++++++++++----- - plugins/po/fr.po | 394 ++++++++++++++++++++++++++++++++++++++++++++++++++++--- - 2 files changed, 479 insertions(+), 51 deletions(-) - -diff --git a/plugins/po/ca.po b/plugins/po/ca.po -index c9c9055..38f31e9 100644 ---- a/plugins/po/ca.po -+++ b/plugins/po/ca.po -@@ -16,7 +16,7 @@ msgstr "" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-08-22 07:37-0400\n" -+"PO-Revision-Date: 2017-10-15 02:58-0400\n" - "Last-Translator: Robert Antoni Buj Gelonch \n" - "Language-Team: Catalan (http://www.transifex.com/projects/p/fedora/language/" - "ca/)\n" -@@ -276,7 +276,7 @@ msgstr "" - - #: ../src/allow_execmod.py:114 - msgid "Change label on the library." --msgstr "" -+msgstr "Canvia l'etiqueta a la biblioteca." - - #: ../src/allow_execstack.py:60 - msgid "" -@@ -419,16 +419,16 @@ msgid "" - " " - msgstr "" - "\n" --" El SELinux ha evitat que el dimoni ftp $ACCESS fitxers emmagatzemats a " --"un sistema de fitxers CIFS.\n" -+" SELinux ha evitat que el dimoni ftp $ACCESS fitxers emmagatzemats a un " -+"sistema de fitxers CIFS.\n" - " CIFS (Comment Internet File System) és un sistema de fitxers de xarxa " - "semblant a\n" - " SMB (http://www." - "microsoft.com/mind/1196/cifs.asp)\n" - " El dimoni ftp ha intentat llegir un o més fitxers o directoris d'un\n" --" sistema de fitxers muntat d'aquest tipus. Degut a què els sistemes de " --"fitxers CIFS\n" --" no suporten la granularitat de l'etiquetatge del SELinux, tots els " -+" sistema de fitxers muntat d'aquest tipus. A causa del fet que els " -+"sistemes de fitxers CIFS\n" -+" no admeten la granularitat de l'etiquetatge del SELinux, tots els " - "fitxers i directoris del\n" - " sistema de fitxers tindran el mateix context de seguretat.\n" - " \n" -@@ -512,14 +512,14 @@ msgid "" - " " - msgstr "" - "\n" --" El SELinux ha evitat que el dimoni ftp $ACCESS fitxers desats en un " --"sistema de fitxers NFS.\n" -+" SELinux ha evitat que el dimoni ftp $ACCESS fitxers desats en un sistema " -+"de fitxers NFS.\n" - " NFS (Network Filesystem) és un sistema de fitxers de xarxa molt " - "utilitzat en sistemes Unix / Linux\n" - " \n" - " El dimoni ftp ha intentat de llegir un o més fitxers o directoris d'un\n" --" sistema de fitxers muntat d'aquest tipus. Degut a què el sistema de " --"fitxers NFS\n" -+" sistema de fitxers muntat d'aquest tipus. A causa del fet que el sistema " -+"de fitxers NFS\n" - " no disposa d'etiquetació amb granularitat del SELinux, tots els fitxers\n" - " i directoris del sistema de fitxers tindran el mateix context de " - "seguretat.\n" -@@ -645,7 +645,7 @@ msgstr "" - - #: ../src/automount_exec_config.py:57 - msgid "Change file context." --msgstr "" -+msgstr "Canvia el context del fitxer." - - #: ../src/bind_ports.py:27 - msgid "" -@@ -708,6 +708,7 @@ msgstr "" - #: ../src/bind_ports.py:47 - msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" - msgstr "" -+"Si voleu permetre que $SOURCE_PATH es vinculi al port de xarxa $PORT_NUMBER" - - #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 - #, python-format -@@ -748,9 +749,9 @@ msgid "" - msgstr "" - "\n" - "\n" --" El SELinux ha denegat la sol·licitud d'accés de $SOURCE. Els paràmetres\n" --" booleans \n" --" no permeten aquest accés. Si no heu configurat $SOURCE per\n" -+" SELinux ha denegat la sol·licitud d'accés de $SOURCE. Els ajusts booleans " -+"\n" -+" actuals no permeten aquest accés. Si no heu configurat $SOURCE per\n" - " sol·licitar aquest accés, això podria indicar un intent d'intrusió.\n" - " Si teniu la intenció de permetre aquest accés, necessiteu canviar els\n" - " booleans del sistema.\n" -@@ -873,6 +874,8 @@ msgid "" - "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " - "processes labeled $TARGET_TYPE by default." - msgstr "" -+"Si creieu que per defecte $SOURCE_BASE_PATH pot accedir al $ACCESS en els " -+"processos etiquetats $TARGET_TYPE." - - #: ../src/catchall.py:52 - msgid "" -@@ -904,6 +907,9 @@ msgid "" - "# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME\n" - "# semodule -X 300 -i my-$MODULE_NAME.pp" - msgstr "" -+"Permeteu-ho per ara amb l'execució de:\n" -+"# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME\n" -+"# semodule -X 300 -i my-$MODULE_NAME.pp" - - #: ../src/connect_ports.py:27 ../src/sandbox_connect.py:29 - msgid "" -@@ -957,6 +963,7 @@ msgstr "" - msgid "" - "If you want to allow $SOURCE_PATH to connect to network port $PORT_NUMBER" - msgstr "" -+"Si voleu permetre que $SOURCE_PATH es connecti al port de xarxa $PORT_NUMBER" - - #: ../src/chrome.py:31 - msgid "" -@@ -983,15 +990,15 @@ msgstr "" - #: ../src/chrome.py:38 ../src/mozplugger.py:38 - #, python-format - msgid "If you want to use the %s package" --msgstr "" -+msgstr "Si voleu utilitzar el paquet %s" - - #: ../src/chrome.py:43 - msgid "you must turn off SELinux controls on the Chrome plugins." --msgstr "heu d'aturar els controls de SELinux als complements de Chrome." -+msgstr "heu d'aturar els controls de SELinux als connectors de Chrome." - - #: ../src/chrome.py:51 - msgid "Disable SELinux controls on Chrome plugins" --msgstr "" -+msgstr "Inhabilita els controls de SELinux als connectors de Chrome" - - #: ../src/cvs_data.py:27 - msgid "" -@@ -1031,6 +1038,7 @@ msgstr "" - #: ../src/cvs_data.py:44 - msgid "If $TARGET_BASE_PATH should be shared via the cvs daemon" - msgstr "" -+"Si $TARGET_BASE_PATH hauria de compartir-se a través del dimoni de cvs" - - #: ../src/cvs_data.py:45 ../src/qemu_file_image.py:49 - msgid "You need to change the label on $TARGET_BASE_PATH'" -@@ -1038,7 +1046,7 @@ msgstr "Necessiteu canviar l'etiqueta a $TARGET_BASE_PATH'" - - #: ../src/cvs_data.py:54 - msgid "Change label" --msgstr "" -+msgstr "Canvia l'etiqueta" - - #: ../src/dac_override.py:28 - msgid "\n" -@@ -1065,6 +1073,8 @@ msgid "" - "If you want to help identify if domain needs this access or you have a file " - "with the wrong permissions on your system" - msgstr "" -+"Si voleu ajudar a identificar si el domini necessita aquest accés o si teniu " -+"un fitxer amb permisos incorrectes al vostre sistema" - - #: ../src/dac_override.py:39 - msgid "" -@@ -1136,6 +1146,37 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+"\n" -+" SELinux ha denegat $SOURCE l'accés \"$ACCESS\" al dispositiu " -+"$TARGET_PATH.\n" -+" $TARGET_PATH està mal etiquetat, aquest dispositiu té el tipus " -+"d'etiqueta per defecte del directori /dev, que no hauria\n" -+" d'ocórrer. Tots els dispositius de caràcters i/o de blocs haurien de " -+"tenir una etiqueta.\n" -+"\n" -+" Podeu intentar de canviar l'etiqueta del fitxer mitjançant\n" -+"\n" -+" restorecon -v '$TARGET_PATH'.\n" -+"\n" -+" Si el dispositiu segueix estant etiquetat amb device_t, aleshores és un " -+"error de programari en la política de SELinux.\n" -+"\n" -+" Si us plau, ompliu un informe d'error de programari.\n" -+"\n" -+" Si mireu les altres etiquetes dels dispositius similars, ls -lZ /dev/" -+"SIMILAR, i trobeu un tipus que podria funcionar amb $TARGET_PATH,\n" -+" podeu utilitzar chcon -t TIPUS_SIMILAR '$TARGET_PATH', si això corregeix " -+"el problema, ho podeu fer permanent amb l'execució de\n" -+" semanage fcontext -a -t TIPUS_SIMILAR '$FIX_TARGET_PATH'\n" -+"\n" -+" Si restorecon canvia el context, això indica que l'aplicació que va " -+"crear el dispositiu, el va crear sense\n" -+" l'ús de les API de SELinux. Si podeu esbrinar quina aplicació va crear " -+"el dispositiu, si us plau, ompli un informe d'error de programari contra " -+"aquesta aplicació.\n" -+" \n" -+" " - - #: ../src/device.py:56 - msgid "" -@@ -1174,7 +1215,7 @@ msgstr "\n" - - #: ../src/disable_ipv6.py:40 - msgid "If you want to disable IPV6 on this machine" --msgstr "" -+msgstr "Si voleu inhabilitar IPV6 en aquesta màquina" - - #: ../src/disable_ipv6.py:41 - msgid "" -@@ -1291,6 +1332,8 @@ msgid "" - "If you believe $SOURCE_BASE_PATH should be allowed to create " - "$TARGET_BASE_PATH files" - msgstr "" -+"Si creieu que $SOURCE_BASE_PATH pot crear els fitxers $TARGET_BASE_PATH " -+"files" - - #: ../src/filesystem_associate.py:44 - msgid "" -@@ -1416,6 +1459,8 @@ msgid "" - "If you want to allow httpd to execute cgi scripts and to unify HTTPD " - "handling of all content files." - msgstr "" -+"Si voleu permetre que httpd executi els scripts cgi i unificar el tractament " -+"HTTPD de tots els fitxers de continguts." - - #: ../src/httpd_unified.py:58 - msgid "" -@@ -1452,8 +1497,7 @@ msgid "" - msgstr "" - "\n" - " El vostre sistema pot trobar-se seriosament en un compromís! " --"$SOURCE_PATH va intentar de modificar la configuració del nucli del sistema " --"operatiu.\n" -+"$SOURCE_PATH va intentar de modificar la configuració del kernel.\n" - " " - - #: ../src/kernel_modules.py:33 -@@ -1475,6 +1519,8 @@ msgid "" - "If you do not think $SOURCE_BASE_PATH should try $ACCESS access on " - "$TARGET_BASE_PATH." - msgstr "" -+"Si no creieu que $SOURCE_PATH hagi d'internar l'accés $ACCESS en " -+"$TARGET_BASE_PATH." - - #: ../src/kernel_modules.py:45 ../src/selinuxpolicy.py:45 - msgid "" -@@ -1541,6 +1587,9 @@ msgid "" - "$TARGET_BASE_PATH $TARGET_CLASS, because you believe it should not need this " - "access." - msgstr "" -+"Si voleu ignorar $SOURCE_BASE_PATH que intenti l'accés $ACCESS " -+"al$TARGET_BASE_PATH $TARGET_CLASS, perquè creieu que no hauria de necessitar " -+"aquest accés." - - #: ../src/leaks.py:43 - msgid "" -@@ -1555,6 +1604,8 @@ msgid "" - "# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" - "# semodule -X 300 -i my-$SOURCE.pp" - msgstr "" -+"# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" -+"# semodule -X 300 -i my-$SOURCE.pp" - - #: ../src/mmap_zero.py:29 - msgid "" -@@ -1565,7 +1616,7 @@ msgid "" - msgstr "" - "\n" - " El vostre sistema pot trobar-se seriosament en un compromís! " --"$SOURCE_PATH va intentar mmap la memòria baixa del sistema operatiu.\n" -+"$SOURCE_PATH va intentar mmap la memòria baixa del kernel.\n" - " " - - #: ../src/mmap_zero.py:33 -@@ -1592,7 +1643,7 @@ msgid "" - "kernel." - msgstr "" - "Si no creieu que $SOURCE_PATH necessiti fer mmap en la memòria baixa al " --"nucli del sistema operatiu." -+"kernel." - - #: ../src/mmap_zero.py:47 - msgid "you may be under attack by a hacker, this is a very dangerous access." -@@ -1667,7 +1718,7 @@ msgstr "" - - #: ../src/mozplugger.py:43 - msgid "you must turn off SELinux controls on the Firefox plugins." --msgstr "heu d'aturar els controls de SELinux als complements de Firefox." -+msgstr "heu d'aturar els controls de SELinux als connectors de Firefox." - - #: ../src/mozplugger_remove.py:31 - msgid "" -@@ -1701,7 +1752,7 @@ msgid "" - "If you want to to continue using SELinux Firefox plugin containment rather " - "then using mozplugger package" - msgstr "" --"Si voleu continuar utilitzant la contenció del complement de Firefix de " -+"Si voleu continuar utilitzant la contenció del connector de Firefox de " - "SELinux en lloc d'utilitzar el paquet mozplugger" - - #: ../src/mozplugger_remove.py:45 -@@ -1732,18 +1783,28 @@ msgid "" - " # restorecon -R /root/.ssh\n" - " " - msgstr "" -+"\n" -+" Podeu restaurar el context per defecte de sistema d'aquest fitxer amb " -+"l'execució\n" -+" de l'ordre restorecon.\n" -+" # restorecon -R /root/.ssh\n" -+" " - - #: ../src/openvpn.py:49 - msgid "" - "If you want to mv $TARGET_BASE_PATH to standard location so that " - "$SOURCE_BASE_PATH can have $ACCESS access" - msgstr "" -+"Si voleu mv $TARGET_BASE_PATH a una ubicació estàndard perquè " -+"$SOURCE_BASE_PATH pugui tenir l'accés $ACCESS" - - #: ../src/openvpn.py:51 - msgid "" - "If you want to modify the label on $TARGET_BASE_PATH so that " - "$SOURCE_BASE_PATH can have $ACCESS access on it" - msgstr "" -+"Si voleu modificar l'etiqueta $TARGET_BASE_PATH perquè així " -+"$SOURCE_BASE_PATH hi pugui tenir l'accés $ACCESS" - - #: ../src/openvpn.py:55 - msgid "you must move the cert file to the ~/.cert directory" -@@ -1778,7 +1839,7 @@ msgstr "" - - #: ../src/public_content.py:50 - msgid "If you want to treat $TARGET_BASE_PATH as public content" --msgstr "" -+msgstr "Si voleu tractar $TARGET_BASE_PATH com a un contingut públic" - - #: ../src/public_content.py:51 - msgid "" -@@ -1998,7 +2059,7 @@ msgstr "" - - #: ../src/rsync_data.py:45 - msgid "If $TARGET_BASE_PATH should be shared via the RSYNC daemon" --msgstr "" -+msgstr "Si $TARGET_BASE_PATH ha de compartir-se a través del dimoni de RSYNC" - - #: ../src/rsync_data.py:46 - msgid "You need to change the label on $TARGET_BASE_PATH" -@@ -2147,7 +2208,7 @@ msgstr "" - - #: ../src/setenforce.py:48 - msgid "If you believe $SOURCE_PATH tried to disable SELinux." --msgstr "" -+msgstr "Si crieu que $SOURCE_PATH va intentar inhabilitar SELinux." - - #: ../src/setenforce.py:49 - msgid "" -@@ -2173,6 +2234,12 @@ msgid "" - " # restorecon -R /root/.ssh\n" - " " - msgstr "" -+"\n" -+" Podeu restaurar el context per defecte de sistema d'aquest fitxer amb " -+"l'execució\n" -+" de l'ordre restorecon.\n" -+" # restorecon -R /root/.ssh\n" -+" " - - #: ../src/sshd_root.py:55 - msgid "Restore Context" -@@ -2184,6 +2251,10 @@ msgid "" - " SELinux is preventing $SOURCE_PATH \"$ACCESS\" to $TARGET_PATH.\n" - " " - msgstr "" -+"\n" -+" SELinux està impedint que en $SOURCE_PATH es tingui l'accés \"$ACCESS\" " -+"a $TARGET_PATH.\n" -+" " - - #: ../src/swapfile.py:31 - msgid "" -@@ -2212,6 +2283,8 @@ msgid "" - "If you do not believe your $SOURCE_PATH should be modifying the kernel, by " - "loading kernel modules" - msgstr "" -+"Si no creieu que el vostre $SOURCE_PATH hagi d'estar modificant el kernel " -+"amb la càrrega de mòduls del kernel" - - #: ../src/sys_module.py:29 - msgid "You might have been hacked." -@@ -2226,8 +2299,7 @@ msgid "" - msgstr "" - "\n" - " El vostre sistema pot trobar-se seriosament en un compromís! " --"$SOURCE_PATH va intentar de carregar un mòdul del nucli del sistema operatiu." --"\n" -+"$SOURCE_PATH va intentar de carregar un mòdul del kernel.\n" - " " - - #: ../src/sys_module.py:37 -@@ -2247,6 +2319,8 @@ msgid "" - "If you do not believe that $SOURCE_PATH should be attempting to modify the " - "kernel by loading a kernel module." - msgstr "" -+"Si no creieu que $SOURCE_PATH hagi d'intentar de modificar el kernel amb la " -+"càrrega d'un mòdul del kernel." - - #: ../src/sys_module.py:47 - msgid "A process might be attempting to hack into your system." -diff --git a/plugins/po/fr.po b/plugins/po/fr.po -index f38c77a..a2c76d5 100644 ---- a/plugins/po/fr.po -+++ b/plugins/po/fr.po -@@ -16,6 +16,7 @@ - # Thomas Canniot , 2007 - # Julie Carbone , 2016. #zanata - # corina roe , 2016. #zanata -+# Jean-Baptiste Holcroft , 2017. #zanata - msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" -@@ -24,8 +25,8 @@ msgstr "" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2016-08-21 09:40-0400\n" --"Last-Translator: corina roe \n" -+"PO-Revision-Date: 2017-10-05 09:21-0400\n" -+"Last-Translator: Jean-Baptiste Holcroft \n" - "Language-Team: French (http://www.transifex.com/projects/p/fedora/language/" - "fr/)\n" - "Language: fr\n" -@@ -89,6 +90,8 @@ msgid "" - "If you want to allow $SOURCE_PATH to be able to write to shared public " - "content" - msgstr "" -+"Si vous souhaitez autoriser $SOURCE_PATH à écrire sur un contenu public " -+"partagé" - - #: ../src/allow_anon_write.py:45 - msgid "" -@@ -164,6 +167,8 @@ msgid "" - "If you do not think $SOURCE_PATH should need to map heap memory that is both " - "writable and executable." - msgstr "" -+"Si vous pensez que $SOURCE_PATH ne devrait pas faire correspondre la mémoire " -+"du tas, qui est à la fois exécutable et accessible en écriture." - - #: ../src/allow_execheap.py:51 - msgid "you need to report a bug. This is a potentially dangerous access." -@@ -205,6 +210,23 @@ msgid "" - " workaround, until the library is fixed. Please file a bug report.\n" - " " - msgstr "" -+"\n" -+" L'application $SOURCE a essayé de charger $TARGET_PATH qui\n" -+" exige une réinstallation du texte. C'est un problème potentiel de " -+"sécurité .\n" -+" La plupart des bibliothèques n'ont pas besoin de cette permission. Les " -+"bibliothèques sont\n" -+" parfois programmées incorrectement et demandent cette permission. La " -+"page web\n" -+" Essais de " -+"protection mémoire de SELinux\n" -+" explique comment retirer ces exigences. Vous pouvez configurer\n" -+" temporairement SELinux pour permettre à $TARGET_PATH d'utiliser le ré-" -+"adressage et contourner\n" -+" cette protection, jusqu'à ce que la bibliothèque soit corrigée. Merci de " -+"remplir un \n" -+" rapport de bogue pour ce paquet.\n" -+" " - - #: ../src/allow_execmod.py:44 - msgid "" -@@ -224,6 +246,26 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+" L'application $SOURCE a essayé de charger $TARGET_PATH qui\n" -+" exige une réinstallation du texte. C'est un problème potentiel de " -+"sécurité .\n" -+" La plupart des bibliothèques n'ont pas besoin de cette permission. Les " -+"bibliothèques sont\n" -+" parfois programmées incorrectement et demandent cette permission. La " -+"page web\n" -+" Essais de " -+"protection mémoire de SELinux\n" -+" explique le processus de vérification. Cet outil a examiné la " -+"bibliothèque\n" -+" et il apparait qu'elle a été correctement construite. Pour cette raison, " -+"\n" -+" setroubleshoot ne peut pas être certain que cette application est \n" -+" compromise. Cela pourrait être un problème sérieux. Votre système \n" -+" pourrait être compromis.\n" -+"\n" -+" Contactez votre administrateur et informez-le de ce problème. \n" -+" " - - #: ../src/allow_execmod.py:61 - msgid "" -@@ -249,7 +291,7 @@ msgstr "" - - #: ../src/allow_execmod.py:114 - msgid "Change label on the library." --msgstr "" -+msgstr "Changer d’étiquette sur la bibliothèque." - - #: ../src/allow_execstack.py:60 - msgid "" -@@ -325,6 +367,9 @@ msgid "" - "If you do not think $SOURCE_PATH should need to map stack memory that is " - "both writable and executable." - msgstr "" -+"Si vous pensez que $SOURCE_PATH ne devrait pas faire correspondre " -+"l'allocation de mémoire de la pile, qui est à la fois exécutable et " -+"accessible en écriture." - - #: ../src/allow_execstack.py:90 - msgid "you need to report a bug. \n" -@@ -338,7 +383,9 @@ msgstr "" - msgid "If you believe that \n" - "%s\n" - "should not require execstack" --msgstr "" -+msgstr "Si vous croyez que \n" -+"%s\n" -+"ne devrait pas avoir besoin de execstack" - - #: ../src/allow_execstack.py:108 - #, python-format -@@ -440,6 +487,7 @@ msgstr "" - #: ../src/allow_ftpd_use_cifs.py:62 - msgid "If you want to allow ftpd to write to cifs file systems" - msgstr "" -+"Si vous souhaitez autoriser ftpd à écrire sur les systèmes de fichiers CIFS" - - #: ../src/allow_ftpd_use_cifs.py:63 ../src/allow_ftpd_use_nfs.py:65 - msgid "you must tell SELinux about this" -@@ -447,7 +495,7 @@ msgstr "vous devez le faire savoir à SELinux" - - #: ../src/allow_ftpd_use_cifs.py:69 - msgid "Enable booleans" --msgstr "" -+msgstr "Activer les booléens" - - #: ../src/allow_ftpd_use_nfs.py:29 - msgid "" -@@ -522,14 +570,23 @@ msgid "" - " directories with type public_content_t) in addition to writing to\n" - " files and directories on NFS filesystems. " - msgstr "" -+" Le changement des booléens « allow_ftpd_use_nfs » et\n" -+" « ftpd_anon_write » sur vrai autorisera cet accès :\n" -+" « setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1 ».\n" -+" avertissement : mettre le booléen « ftpd_anon_write » sur vrai\n" -+" autorisera le démon ftp à écrire dans tous les contenus publics " -+"(fichiers et\n" -+" répertoires avec le type public_content_t) en plus d'écrire dans\n" -+" les fichiers et répertoires du système de fichiers NFS. " - - #: ../src/allow_ftpd_use_nfs.py:64 - msgid "If you want to allow ftpd to write to nfs file systems" - msgstr "" -+"Si vous souhaitez autoriser ftpd à écrire sur les systèmes de fichiers NFS" - - #: ../src/allow_ftpd_use_nfs.py:71 - msgid "Enable booleans." --msgstr "" -+msgstr "Activer les booléens." - - #: ../src/associate.py:32 ../src/openvpn.py:31 ../src/public_content.py:27 - #: ../src/qemu_blk_image.py:27 ../src/qemu_file_image.py:27 -@@ -572,6 +629,8 @@ msgid "" - "If you want to change the label of $TARGET_PATH to %s, you are not allowed " - "to since it is not a valid file type." - msgstr "" -+"Si vous souhaitez modifier l'étiquette de $TARGET_PATH en %s, ce qui est " -+"interdit car pas un type de fichier valide." - - #: ../src/associate.py:49 - msgid "you must pick a valid file label." -@@ -629,7 +688,7 @@ msgstr "" - - #: ../src/automount_exec_config.py:57 - msgid "Change file context." --msgstr "" -+msgstr "Modifier le contexte du fichier." - - #: ../src/bind_ports.py:27 - msgid "" -@@ -703,6 +762,8 @@ msgstr "" - #: ../src/bind_ports.py:47 - msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" - msgstr "" -+"Si vous souhaitez autoriser $SOURCE_PATH à se lier au port réseau " -+"$PORT_NUMBER" - - #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 - #, python-format -@@ -772,7 +833,7 @@ msgstr "" - #: ../src/catchall_boolean.py:63 - #, python-format - msgid "If you want to %s" --msgstr "" -+msgstr "Si vous souhaitez %s" - - #: ../src/catchall_boolean.py:66 - #, python-format -@@ -883,18 +944,24 @@ msgid "" - "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " - "processes labeled $TARGET_TYPE by default." - msgstr "" -+"Si vous pensez que $SOURCE_BASE_PATH devrait être autorisé à accéder $ACCESS " -+"sur les processus étiquetés $TARGET_TYPE par défaut." - - #: ../src/catchall.py:52 - msgid "" - "If you believe that $SOURCE_BASE_PATH should have the $ACCESS capability by " - "default." - msgstr "" -+"Si vous pensez que $SOURCE_BASE_PATH devrait avoir des capacités $ACCESS par " -+"défaut." - - #: ../src/catchall.py:53 - msgid "" - "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " - "the $TARGET_BASE_PATH $TARGET_CLASS by default." - msgstr "" -+"Si vous pensez que $SOURCE_BASE_PATH devrait être autorisé à accéder $ACCESS " -+"sur $TARGET_BASE_PATH $TARGET_CLASS par défaut." - - #: ../src/catchall.py:55 - msgid "" -@@ -910,6 +977,9 @@ msgid "" - "# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME\n" - "# semodule -X 300 -i my-$MODULE_NAME.pp" - msgstr "" -+"Autoriser cet accès pour le moment en exécutant :\n" -+"# ausearch -c \"$SOURCE\" --raw | audit2allow -M my-$MODULE_NAME\n" -+"# semodule -X 300 -i my-$MODULE_NAME.pp" - - #: ../src/connect_ports.py:27 ../src/sandbox_connect.py:29 - msgid "" -@@ -937,6 +1007,18 @@ msgid "" - " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé que $SOURCE se connecte à un port réseau $PORT_NUMBER " -+"qui ne possède pas de type SELinux lui étant associé.\n" -+" Si $SOURCE doit être autorisé à se connecter au port $PORT_NUMBER, " -+"veuillez utiliser la commande semanage pour assigner $PORT_NUMBER à " -+"un type de port auquel $SOURCE_TYPE peut se connecter(%s). \n" -+" \n" -+"\n" -+"Si $SOURCE n'est pas supposé\n" -+" se connecter au port $PORT_NUMBER, ceci pourrait indiquer une tentative " -+"d'intrusion.\n" -+" " - - #: ../src/connect_ports.py:38 - #, python-format -@@ -963,6 +1045,8 @@ msgstr "" - msgid "" - "If you want to allow $SOURCE_PATH to connect to network port $PORT_NUMBER" - msgstr "" -+"Si vous souhaitez autoriser $SOURCE_PATH à se connecter au port réseau " -+"$PORT_NUMBER" - - #: ../src/chrome.py:31 - msgid "" -@@ -1005,7 +1089,7 @@ msgstr "" - #: ../src/chrome.py:38 ../src/mozplugger.py:38 - #, python-format - msgid "If you want to use the %s package" --msgstr "" -+msgstr "Si vous voulez utiliser le paquet %s" - - #: ../src/chrome.py:43 - msgid "you must turn off SELinux controls on the Chrome plugins." -@@ -1013,7 +1097,7 @@ msgstr "vous devrez désactiver les contrôles SELinux sur les greffons Chrome." - - #: ../src/chrome.py:51 - msgid "Disable SELinux controls on Chrome plugins" --msgstr "" -+msgstr "Désactiver les contrôles SELinux sur les plugins Chrome" - - #: ../src/cvs_data.py:27 - msgid "" -@@ -1057,10 +1141,18 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+" Vous pouvez modifier le contexte du fichier en exécutant chcon -R -t " -+"cvs_data_t '$TARGET_PATH'\n" -+" Vous devez aussi changer le dossier par défaut des fichiers de contexte " -+"de votre système, même lors d'un réétiquetage complet, de manière à les " -+"préserver. « semanage fcontext -a -t cvs_data_t '$FIX_TARGET_PATH' »\n" -+"\n" -+" " - - #: ../src/cvs_data.py:44 - msgid "If $TARGET_BASE_PATH should be shared via the cvs daemon" --msgstr "" -+msgstr "Si $TARGET_BASE_PATH devrait être partagé via le démon cvs" - - #: ../src/cvs_data.py:45 ../src/qemu_file_image.py:49 - msgid "You need to change the label on $TARGET_BASE_PATH'" -@@ -1068,7 +1160,7 @@ msgstr "Vous devez modifier l'étiquette sur $TARGET_BASE_PATH'" - - #: ../src/cvs_data.py:54 - msgid "Change label" --msgstr "" -+msgstr "Changer l’étiquette" - - #: ../src/dac_override.py:28 - msgid "\n" -@@ -1100,6 +1192,8 @@ msgid "" - "If you want to help identify if domain needs this access or you have a file " - "with the wrong permissions on your system" - msgstr "" -+"Si vous souhaitez identifier si le domaine nécessite cet accès ou si vous " -+"possédez un fichier avec les mauvaises permissions sur votre système" - - #: ../src/dac_override.py:39 - msgid "" -@@ -1171,6 +1265,37 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+"\n" -+" SELinux a refusé l'accès de $SOURCE « $ACCESS » au périphérique " -+"$TARGET_PATH.\n" -+" $TARGET_PATH est mal étiqueté, ce périphérique porte l'étiquetage par " -+"défaut du répertoire /dev, ce qui ne devrait pas se\n" -+" produire. Tous les caractères et/ou les blocs de périphériques devraient " -+"être étiquetés.\n" -+"\n" -+" Vous pouvez tenter de modifier l'étiquetage du fichier en utilisant\n" -+"\n" -+" restorecon -v $TARGET_PATH.\n" -+"\n" -+" Si ce périphérique reste étiqueté, il s'agit alors d'un bug de la " -+"stratégie de SELinux.\n" -+"\n" -+" Merci de remplir un rapport de bug.\n" -+"\n" -+" Si vous cherchez des étiquetages de périphériques semblables, ls -lZ /" -+"dev/SIMILAR, et trouvez un type qui fonctionnerait pour $TARGET_PATH,\n" -+" vous pouvez utiliser chcon -t SIMILAR_TYPE '$TARGET_PATH'. Si cela " -+"corrige le problème, vous pouvez rendre le tout permanent en exécutant \n" -+" semanage fcontext -a -t SIMILAR_TYPE '$FIX_TARGET_PATH'\n" -+"\n" -+" Si restorecon modifie le contexte, cela signifie que l'application qui a " -+"créé le périphérique l'a créé sans\n" -+" utiliser les API de SELinux. Si vous arrivez à déterminer quelle " -+"application a créé le périphérique, merci de remplir un rapport de bogue\n" -+" sur cette application.\n" -+"\n" -+" " - - #: ../src/device.py:56 - msgid "" -@@ -1209,7 +1334,7 @@ msgstr "\n" - - #: ../src/disable_ipv6.py:40 - msgid "If you want to disable IPV6 on this machine" --msgstr "" -+msgstr "Si vous souhaitez désactiver IPV6 sur cette machine" - - #: ../src/disable_ipv6.py:41 - msgid "" -@@ -1280,11 +1405,11 @@ msgstr "" - - #: ../src/file.py:49 - msgid "This is caused by a newly created file system." --msgstr "" -+msgstr "Ceci est dû à la création d'un nouveau système de fichiers." - - #: ../src/file.py:51 - msgid "If you think this is caused by a badly mislabeled machine." --msgstr "" -+msgstr "Si vous pensez que ceci est dû à une machine mal étiquetée." - - #: ../src/file.py:55 - msgid "you need to add labels to it." -@@ -1353,6 +1478,8 @@ msgid "" - "If you believe $SOURCE_BASE_PATH should be allowed to create " - "$TARGET_BASE_PATH files" - msgstr "" -+"Si vous pensez que $SOURCE_BASE_PATH doit être autorisé à créer des fichiers " -+"$TARGET_BASE_PATH " - - #: ../src/filesystem_associate.py:44 - msgid "" -@@ -1387,6 +1514,13 @@ msgid "" - " signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé au démon http d'envoyer du courrier.\n" -+" Un script httpd essaye de se connecter à un port de courrier ou\n" -+" d'exécuter une commande sendmail. Si vous n'avez pas configuré\n" -+" httpd pour envoyer du courrier, cela pourrait signaler une tentative\n" -+" d'intrusion.\n" -+" " - - #: ../src/httpd_can_sendmail.py:39 - msgid "" -@@ -1405,7 +1539,7 @@ msgstr "" - - #: ../src/httpd_can_sendmail.py:47 - msgid "If you want to allow httpd to send mail" --msgstr "" -+msgstr "Si vous souhaitez autoriser httpd à envoyer des courriels" - - #: ../src/httpd_can_sendmail.py:48 - msgid "you must setup SELinux to allow this" -@@ -1441,6 +1575,30 @@ msgid "" - " script types.\n" - " " - msgstr "" -+"\n" -+" SELinux a empêché l'accès httpd $ACCESS aux fichiers http.\n" -+"\n" -+" Normalement, httpd possède un accès complet à tous les fichiers " -+"étiquetés avec un contexte de fichier\n" -+" http. Cette machine possède une stratégie de sécurité plus stricte avec " -+"$BOOLEAN\n" -+" désactivé. Ceci requiert un étiquetage explicite de tous les fichiers. " -+"Si un fichier est\n" -+" un script cgi, il doit être étiqueté avec httpd_TYPE_script_exec_t afin " -+"de pouvoir\n" -+" être exécuté. Son contenu est accessible en lecture seule, il doit être " -+"étiqueté\n" -+" httpd_TYPE_content_t. S'il s'agit d'un contenu accessible en écriture, " -+"il doit être étiqueté\n" -+" httpd_TYPE_script_rw_t ou httpd_TYPE_script_ra_t. Vous pouvez utiliser " -+"la commande\n" -+" chcon pour modifier ces contextes. Veuillez vous reporter à la page man\n" -+" « man httpd_selinux » ou à la \n" -+" FAQ\n" -+" \"TYPE\" fait référence à « sys », « user », « staff » ou à d'autres " -+"types de scripts\n" -+" potentiels.\n" -+" " - - #: ../src/httpd_unified.py:50 - msgid "" -@@ -1459,6 +1617,8 @@ msgid "" - "If you want to allow httpd to execute cgi scripts and to unify HTTPD " - "handling of all content files." - msgstr "" -+"Si vous souhaitez autoriser httpd à exécuter des scripts cgi et à unifier la " -+"gestion HTTPD de tous les fichiers de contenu." - - #: ../src/httpd_unified.py:58 - msgid "" -@@ -1540,6 +1700,8 @@ msgid "" - "If you do not think $SOURCE_BASE_PATH should try $ACCESS access on " - "$TARGET_BASE_PATH." - msgstr "" -+"Si vous pensez que $SOURCE_BASE_PATH ne devrait pas tenter l'accès $ACCESS " -+"sur $TARGET_BASE_PATH." - - #: ../src/kernel_modules.py:45 ../src/selinuxpolicy.py:45 - msgid "" -@@ -1606,6 +1768,9 @@ msgid "" - "$TARGET_BASE_PATH $TARGET_CLASS, because you believe it should not need this " - "access." - msgstr "" -+"Si vous souhaitez ignorer que $SOURCE_BASE_PATH tente d'obtenir l'accès " -+"$ACCESS à $TARGET_BASE_PATH $TARGET_CLASS car vous pensez qu'il ne devrait " -+"pas nécessiter cet accès." - - #: ../src/leaks.py:43 - msgid "" -@@ -1620,6 +1785,8 @@ msgid "" - "# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" - "# semodule -X 300 -i my-$SOURCE.pp" - msgstr "" -+"# ausearch -x $SOURCE_PATH --raw | audit2allow -D -M my-$SOURCE\n" -+"# semodule -X 300 -i my-$SOURCE.pp" - - #: ../src/mmap_zero.py:29 - msgid "" -@@ -1650,12 +1817,27 @@ msgid "" - " compromised.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé à $SOURCE la capacité d'allouer de l'espace dans la \n" -+" zone mémoire basse du noyau via mmap. \n" -+" La capacité d'allouer cet espace mémoire est configuré par \n" -+" /proc/sys/kernel/mmap_min_addr. Empêcher cette allocation mémoire \n" -+" aide à se protéger contre l'exploitation des bugs du noyau de type \n" -+" 'null deref'. Toutes les applications ayant besoin de cet accès " -+"devraient \n" -+" déjà avoir une stratégie de sécurité écrite. Si une application " -+"compromise \n" -+" essaie de modifier le noyau, ce message pourrait être généré. Ceci est \n" -+" un problème sérieux. Votre système pourrait très bien être compromis.\n" -+" " - - #: ../src/mmap_zero.py:46 - msgid "" - "If you do not think $SOURCE_PATH should need to mmap low memory in the " - "kernel." - msgstr "" -+"Si vous pensez que $SOURCE_PATH ne devrait pas effectuer de projection en " -+"mémoire (« mmap ») de la mémoire basse dans le noyau." - - #: ../src/mmap_zero.py:47 - msgid "you may be under attack by a hacker, this is a very dangerous access." -@@ -1722,6 +1904,8 @@ msgstr "" - #: ../src/mounton.py:48 - msgid "If you want to allow $SOURCE_BASE_PATH to mount on $TARGET_BASE_PATH." - msgstr "" -+"Si vous souhaitez autoriser à $SOURCE_BASE_PATH d'être monté sur " -+"$TARGET_BASE_PATH." - - #: ../src/mounton.py:49 - msgid "you must change the labeling on $TARGET_PATH." -@@ -1812,6 +1996,8 @@ msgid "" - "If you want to to continue using SELinux Firefox plugin containment rather " - "then using mozplugger package" - msgstr "" -+"Si vous pouvez souhaiter continuer à utiliser le confinement de greffons " -+"Firefox de SELinux plutôt que d'utiliser le paquet mozplugger" - - #: ../src/mozplugger_remove.py:45 - msgid "you must remove the mozplugger package." -@@ -1826,6 +2012,11 @@ msgid "" - " is labeled correctly.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé l'accès requis par $SOURCE. $TARGET_PATH peut\n" -+" être mal étiqueté. openvpn est autorisé à lire le contenu du répertoire\n" -+" utilisateur si celui-ci est correctement étiqueté.\n" -+" " - - #: ../src/openvpn.py:41 - msgid "" -@@ -1835,18 +2026,28 @@ msgid "" - " # restorecon -R /root/.ssh\n" - " " - msgstr "" -+"\n" -+" Vous pouvez restaurer le contexte par défaut du système sur ce fichier " -+"en exécutant la\n" -+" commande restorecon.\n" -+" # restorecon -R /root/.ssh\n" -+" " - - #: ../src/openvpn.py:49 - msgid "" - "If you want to mv $TARGET_BASE_PATH to standard location so that " - "$SOURCE_BASE_PATH can have $ACCESS access" - msgstr "" -+"Si vous souhaitez déplacer $TARGET_BASE_PATH sur un emplacement standard de " -+"manière à ce que $SOURCE_BASE_PATH puisse obtenir l'accès $ACCESS" - - #: ../src/openvpn.py:51 - msgid "" - "If you want to modify the label on $TARGET_BASE_PATH so that " - "$SOURCE_BASE_PATH can have $ACCESS access on it" - msgstr "" -+"Si vous souhaitez modifier l'étiquette de $TARGET_BASE_PATH afin que " -+"$SOURCE_BASE_PATH puisse y obtenir l'accès $ACCESS" - - #: ../src/openvpn.py:55 - msgid "you must move the cert file to the ~/.cert directory" -@@ -1897,7 +2098,7 @@ msgstr "" - - #: ../src/public_content.py:50 - msgid "If you want to treat $TARGET_BASE_PATH as public content" --msgstr "" -+msgstr "Si vous souhaitez considérer $TARGET_BASE_PATH comme contenu public" - - #: ../src/public_content.py:51 - msgid "" -@@ -1999,7 +2200,7 @@ msgstr "" - - #: ../src/qemu_file_image.py:48 - msgid "If $TARGET_BASE_PATH is a virtualization target" --msgstr "" -+msgstr "Si $TARGET_BASE_PATH est une cible de virtualisation" - - #: ../src/restorecon.py:57 - msgid "" -@@ -2059,6 +2260,43 @@ msgid "" - "package.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé l'accès requis par $SOURCE. $TARGET_PATH pourrait\n" -+" être mal étiqueté. Le type SELinux par défaut de $TARGET_PATH est\n" -+" %s, mais son type actuel est $TARGET_TYPE. Modifier\n" -+" ce fichier en utilisant son type par défaut pourrait corriger le " -+"problème.\n" -+"

\n" -+" Les contextes de fichiers peuvent être assignés à un fichier comme suit.\n" -+"

    \n" -+"
  • Les fichiers créés dans un répertoire recoivent le contexte de " -+"fichier du répertoire parent par défaut.\n" -+"
  • La stratégie SELinux peut remplacer l'étiquette héritée par " -+"défaut du répertoire parent en\n" -+" spécifiant un processus exécuté dans le contexte A, qui crée un " -+"fichier dans un répertoire étiqueté B\n" -+" et au lieu de cela, créera un fichier avec l'étiquette C. Par " -+"exemple, un client dhcp exécuté avec\n" -+" le type dhclient_t créera un fichier dans le répertoire /etc. Ce " -+"fichier devrait normalement\n" -+" recevoir le type etc_t à cause de son héritage parental mais à " -+"la place, le fichier est\n" -+" étiqueté avec le type net_conf_t car la stratégie SELinux le " -+"spécifie.\n" -+"
  • Les utilisateur peuvent modifier le contexte de fichier d'un " -+"fichier à l'aide d'outils tels que chcon ou restorecon.\n" -+"
\n" -+" Ce fichier pourrait avoir été mal étiqueté à cause d'une erreur de " -+"l'utilisateur ou si une application normalement confinée\n" -+" a été exécutée sous le mauvais domaine.\n" -+"

\n" -+" Cependant, ceci pourrait aussi indiquer une anomalie dans SELinux, car " -+"le fichier n'aurait pas dû être étiqueté\n" -+" avec ce type.\n" -+"

\n" -+" Si vous pensez qu'il s'agit d'une anomalie, veuillez remplir un rapport " -+"d'anomalie pour ce paquet.\n" -+" " - - #: ../src/restorecon.py:90 - #, python-format -@@ -2066,6 +2304,8 @@ msgid "" - "If you want to fix the label. \n" - "$TARGET_PATH default label should be %s." - msgstr "" -+"Si vous souhaitez corriger l'étiquette. \n" -+"L'étiquette par défaut de $TARGET_PATH devrait être %s." - - #: ../src/restorecon.py:96 - msgid "" -@@ -2073,6 +2313,9 @@ msgid "" - "insufficient permissions to access a parent directory in which case try to " - "change the following command accordingly." - msgstr "" -+"vous pouvez lancer restorecon. La tentative d’accès pourrait avoir été " -+"stoppée due à des permissions insuffisantes d’accès au dossier parent, " -+"auquel cas essayez de changer la commande suivante en conséquence." - - #: ../src/restorecon.py:105 ../src/restorecon_source.py:73 - msgid "Restore\n" -@@ -2114,6 +2357,23 @@ msgid "" - "package.\n" - " " - msgstr "" -+"\n" -+"SELinux a refusé l'accès demandé par $SOURCE. $SOURCE_PATH peut être\n" -+"mal étiqueté. Le type SELinux par défaut de $SOURCE_PATH est\n" -+"%s, mais son type actuel est $SOURCE_TYPE. Revenir au\n" -+"type par défaut pour ce fichier pourrait corriger le problème.\n" -+"

\n" -+"Ce fichier peut avoir été mal étiqueté suite à une erreur utilisateur, ou " -+"bien si une\n" -+"application normalement confinée a été exécutée dans le mauvais domaine.\n" -+"

\n" -+"Néanmoins, ceci peut aussi indiquer une anomalie dans SELinux parce que le " -+"fichier\n" -+"ne devrait pas avoir été étiqueté avec ce type.\n" -+"

\n" -+"Si vous pensez qu'il s'agit d'une anomalie, veuillez émettre un rapport " -+"d'anomalie à propos de ce paquet.\n" -+" " - - #: ../src/restorecon_source.py:60 - #, python-format -@@ -2121,6 +2381,8 @@ msgid "" - "If you want to fix the label. \n" - "$SOURCE_PATH default label should be %s." - msgstr "" -+"Si vous souhaitez corriger l'étiquette. \n" -+"L'étiquette par défaut de $SOURCE_PATH devrait être %s." - - #: ../src/restorecon_source.py:65 - msgid "you can run restorecon." -@@ -2136,6 +2398,14 @@ msgid "" - " this message could indicate either a bug or an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé à RSYNC l'accès à $TARGET_PATH.\n" -+" S'il s'agit d'un dépôt RSYNC il doit comporter un étiquetage de contexte " -+"de fichier tel que\n" -+" rsync_data_t. Si vous n'avez pas l'intention d'utiliser $TARGET_PATH en " -+"tant que dépôt rsync\n" -+" cela peut soit signifier une anomalie, soit une tentative d'intrusion.\n" -+" " - - #: ../src/rsync_data.py:38 - msgid "" -@@ -2157,7 +2427,7 @@ msgstr "" - - #: ../src/rsync_data.py:45 - msgid "If $TARGET_BASE_PATH should be shared via the RSYNC daemon" --msgstr "" -+msgstr "Si $TARGET_BASE_PATH devrait être partagé via le démon RSYNC" - - #: ../src/rsync_data.py:46 - msgid "You need to change the label on $TARGET_BASE_PATH" -@@ -2188,6 +2458,16 @@ msgid "" - "Samba and SELinux.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé à samba l'accès à $TARGET_PATH.\n" -+" Si vous souhaitez partager ce répertoire avec samba, il doit comporter " -+"un étiquetage de contexte de fichier tel que\n" -+" samba_share_t. Si vous n'avez pas l'intention d'utiliser $TARGET_PATH en " -+"tant que répertoire samba\n" -+" cela peut soit signifier une anomalie, soit une tentative d'intrusion.\n" -+" Veuillez vous référer à la page de manuel 'man samba_selinux' pour plus " -+"d'informations sur la manière de configurer Samba et SELinux.\n" -+" " - - #: ../src/samba_share.py:39 - msgid "" -@@ -2230,6 +2510,19 @@ msgid "" - " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux a interdit à $SOURCE de se connecter à un port réseau " -+"$PORT_NUMBER depuis un bac à sable.\n" -+" Si $SOURCE doit être autorisé à se connecter au port $PORT_NUMBER, vous " -+"devrez utiliser un type de bac à sable différent comme sandbox_web_t ou " -+"sandbox_net_t. \n" -+" # sandbox -X -t sandbox_net_t $SOURCE.\n" -+" \n" -+"\n" -+"Si $SOURCE n'est pas supposé\n" -+" se connecter à $PORT_NUMBER, cela peut signifier une tentative " -+"d'intrusion.\n" -+" " - - #: ../src/sandbox_connect.py:41 - msgid "" -@@ -2295,6 +2588,7 @@ msgstr "" - #: ../src/setenforce.py:27 - msgid "If you did not directly cause this AVC through testing." - msgstr "" -+"Si vous n'avez pas directement provoqué cet AVC en effectuant des tests." - - #: ../src/setenforce.py:28 - msgid "if you think that you might have been hacked" -@@ -2326,10 +2620,20 @@ msgid "" - " well be compromised.\n" - " " - msgstr "" -+"\n" -+" SELinux a empêché $SOURCE d'écrire dans un fichier sous /sys/fs/selinux.\n" -+" Les fichiers sous /sys/fs/selinux contrôlent la façon dont SELinux est " -+"configuré.\n" -+" Tous les programmes ayant besoin d'écrire dans des fichiers sous \n" -+" /sys/fs/selinux devraient déjà avoir une politique écrite pour eux.\n" -+" Si une application compromise essaie de désactiver SELinux,\n" -+" ce message AVC sera généré. C'est un problème sérieux. Votre système " -+"pourrait très bien être compromis.\n" -+" " - - #: ../src/setenforce.py:48 - msgid "If you believe $SOURCE_PATH tried to disable SELinux." --msgstr "" -+msgstr "Si vous pensez que $SOURCE_PATH a tenté de désactiver SELinux." - - #: ../src/setenforce.py:49 - msgid "" -@@ -2348,6 +2652,12 @@ msgid "" - " is labeled correctly.\n" - " " - msgstr "" -+"\n" -+" L'accès refusé par SELinux et demandé par $SOURCE. $TARGET_PATH peut\n" -+" être mal étiqueté. sshd est autorisé à lire le contenu du répertoire /" -+"root/.ssh s'il\n" -+" est correctement étiqueté.\n" -+" " - - #: ../src/sshd_root.py:42 - msgid "" -@@ -2357,6 +2667,12 @@ msgid "" - " # restorecon -R /root/.ssh\n" - " " - msgstr "" -+"\n" -+" Vous pouvez restaurer le contexte par défaut du système sur ce fichier " -+"en exécutant la\n" -+" commande restorecon. \n" -+" # restorecon -R /root/.ssh\n" -+" " - - #: ../src/sshd_root.py:55 - msgid "Restore Context" -@@ -2381,6 +2697,15 @@ msgid "" - "an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux a refusé à $SOURCE l'accès à $TARGET_PATH.\n" -+" S'il s'agit d'un fichier swap, il doit comporter un étiquetage de " -+"contexte de fichier tel que\n" -+" swapfile_t. Si vous n'avez pas l'intention d'utiliser\n" -+" $TARGET_PATH en tant que fichier swap, cela indique vraisemblablement la " -+"présence d'une anomalie ;\n" -+" cependant il peut également s'agir d'une tentative d'intrusion.\n" -+" " - - #: ../src/swapfile.py:38 - msgid "" -@@ -2405,6 +2730,8 @@ msgid "" - "If you do not believe your $SOURCE_PATH should be modifying the kernel, by " - "loading kernel modules" - msgstr "" -+"Si vous pensez que $SOURCE_PATH ne devrait pas modifier le noyau en " -+"chargeant des modules de noyau" - - #: ../src/sys_module.py:29 - msgid "You might have been hacked." -@@ -2447,6 +2774,8 @@ msgid "" - "If you do not believe that $SOURCE_PATH should be attempting to modify the " - "kernel by loading a kernel module." - msgstr "" -+"Si vous pensez que $SOURCE_PATH ne devrait pas tenter de modifier le noyau " -+"en chargeant un module de noyau." - - #: ../src/sys_module.py:47 - msgid "A process might be attempting to hack into your system." -@@ -2487,6 +2816,8 @@ msgid "" - "If you do not want processes to require capabilities to use up all the " - "system resources on your system;" - msgstr "" -+"Si vous ne voulez pas que les processus requièrent des capacités à utiliser " -+"toutes les ressources du système sur votre système ;" - - #: ../src/sys_resource.py:40 - msgid "" -@@ -2507,6 +2838,25 @@ msgid "" - "/* Override max number of consoles on console allocation */\n" - "/* Override max number of keymaps */\n" - msgstr "" -+"vous devez diagnostiquer pourquoi votre système est à court de ressources " -+"système et corriger le problème.\n" -+"\n" -+"Selon /usr/include/linux/capability.h, sys_resource est nécessaire pour :\n" -+"\n" -+"/* Remplacer les limites de ressources. Définir des limites de ressources. */" -+"\n" -+"/* Remplacer les limites de quotas. */\n" -+"/* Remplacer l’espace réservé sur le système de fichiers ext2 */\n" -+"/* Modifier le mode de journalisation des données sur le système de fichiers " -+"ext3 (utilise les ressources de journalisation) */\n" -+"/* REMARQUE : ext2 honore fsuid lors de la vérification des ressources, donc " -+"vous pouvez également annuler en utilisant fsuid. */\n" -+"/* Remplacer les restrictions de taille sur les files d’attente des messages " -+"IPC */\n" -+"/* Autoriser des interruptions de plus de 64 Hz à partir de l’horloge temps " -+"réel */\n" -+"/* Remplacer le nombre maximum de consoles sur l’allocation de la console */\n" -+"/* Remplacer le nombre maximum de keymaps */\n" - - #: ../src/vbetool.py:30 - msgid "" -@@ -2572,6 +2922,8 @@ msgid "" - "If you want to ignore this AVC because it is dangerous and your machine " - "seems to be working correctly." - msgstr "" -+"Si vous souhaitez ignorer cet AVC car il est dangereux et votre machine " -+"semble fonctionner correctement." - - #: ../src/vbetool.py:56 - msgid "" -@@ -2647,6 +2999,8 @@ msgid "" - "If you want to ignore this AVC because it is dangerous and your wine " - "applications are working correctly." - msgstr "" -+"Si vous souhaitez ignorer cet AVC car il est dangereux et vos applications " -+"wine fonctionnent correctement." - - #: ../src/wine.py:67 - msgid "" --- -2.15.0 - diff --git a/0002-plugins-Update-translations.patch b/0002-plugins-Update-translations.patch deleted file mode 100644 index 7dda730..0000000 --- a/0002-plugins-Update-translations.patch +++ /dev/null @@ -1,1833 +0,0 @@ -From 584b1e33808a55c82259a0d7787cbfa5200d7022 Mon Sep 17 00:00:00 2001 -From: Vit Mojzis -Date: Wed, 22 Nov 2017 12:56:09 +0100 -Subject: [PATCH] plugins: Update translations - -https://fedora.zanata.org/iteration/view/setroubleshoot/master -synced-up with "stable" branch. ---- - plugins/po/as.po | 4 +- - plugins/po/bg.po | 4 +- - plugins/po/bn.po | 4 +- - plugins/po/bn_IN.po | 4 +- - plugins/po/ca.po | 6 +- - plugins/po/cs.po | 4 +- - plugins/po/da.po | 4 +- - plugins/po/de.po | 46 ++++++++-- - plugins/po/en_GB.po | 4 +- - plugins/po/es.po | 6 +- - plugins/po/eu.po | 2 +- - plugins/po/fi.po | 2 +- - plugins/po/fr.po | 6 +- - plugins/po/gu.po | 4 +- - plugins/po/hi.po | 4 +- - plugins/po/hu.po | 6 +- - plugins/po/it.po | 4 +- - plugins/po/ja.po | 243 ++++++++++++++++++++++++++++++++++++++++++++-------- - plugins/po/kn.po | 4 +- - plugins/po/ko.po | 6 +- - plugins/po/ml.po | 4 +- - plugins/po/mr.po | 4 +- - plugins/po/nl.po | 4 +- - plugins/po/or.po | 4 +- - plugins/po/pa.po | 4 +- - plugins/po/pl.po | 4 +- - plugins/po/pt.po | 4 +- - plugins/po/pt_BR.po | 6 +- - plugins/po/ru.po | 220 +++++++++++++++++++++++++++++++++++++++++++++-- - plugins/po/sr.po | 4 +- - plugins/po/sv.po | 6 +- - plugins/po/ta.po | 4 +- - plugins/po/te.po | 4 +- - plugins/po/uk.po | 4 +- - plugins/po/zh_CN.po | 6 +- - plugins/po/zh_TW.po | 4 +- - 36 files changed, 530 insertions(+), 123 deletions(-) - -diff --git a/plugins/po/as.po b/plugins/po/as.po -index afa9b53..c588986 100644 ---- a/plugins/po/as.po -+++ b/plugins/po/as.po -@@ -8,11 +8,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:20-0500\n" -+"PO-Revision-Date: 2017-09-01 08:31-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Assamese (http://www.transifex.com/projects/p/fedora/language/" - "as/)\n" -diff --git a/plugins/po/bg.po b/plugins/po/bg.po -index e05f95d..ad48a5e 100644 ---- a/plugins/po/bg.po -+++ b/plugins/po/bg.po -@@ -10,11 +10,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:20-0500\n" -+"PO-Revision-Date: 2017-09-01 08:31-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Bulgarian (http://www.transifex.com/projects/p/fedora/" - "language/bg/)\n" -diff --git a/plugins/po/bn.po b/plugins/po/bn.po -index 65e971b..a4c350a 100644 ---- a/plugins/po/bn.po -+++ b/plugins/po/bn.po -@@ -15,11 +15,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:20-0500\n" -+"PO-Revision-Date: 2017-09-01 08:31-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Bengali (http://www.transifex.com/projects/p/fedora/language/" - "bn/)\n" -diff --git a/plugins/po/bn_IN.po b/plugins/po/bn_IN.po -index cba0de3..a6da67c 100644 ---- a/plugins/po/bn_IN.po -+++ b/plugins/po/bn_IN.po -@@ -11,11 +11,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:20-0500\n" -+"PO-Revision-Date: 2017-09-01 08:31-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Bengali (India) (http://www.transifex.com/projects/p/fedora/" - "language/bn_IN/)\n" -diff --git a/plugins/po/ca.po b/plugins/po/ca.po -index 38f31e9..f66c708 100644 ---- a/plugins/po/ca.po -+++ b/plugins/po/ca.po -@@ -12,12 +12,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-10-15 02:58-0400\n" --"Last-Translator: Robert Antoni Buj Gelonch \n" -+"PO-Revision-Date: 2017-10-26 09:45-0400\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Catalan (http://www.transifex.com/projects/p/fedora/language/" - "ca/)\n" - "Language: ca\n" -diff --git a/plugins/po/cs.po b/plugins/po/cs.po -index 70e09d7..7a7ce3c 100644 ---- a/plugins/po/cs.po -+++ b/plugins/po/cs.po -@@ -16,11 +16,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-08-29 05:54-0400\n" -+"PO-Revision-Date: 2017-09-02 03:57-0400\n" - "Last-Translator: Zdenek \n" - "Language-Team: Czech (http://www.transifex.com/projects/p/fedora/language/cs/" - ")\n" -diff --git a/plugins/po/da.po b/plugins/po/da.po -index 28b854b..9b43021 100644 ---- a/plugins/po/da.po -+++ b/plugins/po/da.po -@@ -8,11 +8,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:21-0500\n" -+"PO-Revision-Date: 2017-09-01 08:31-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Danish (http://www.transifex.com/projects/p/fedora/language/" - "da/)\n" -diff --git a/plugins/po/de.po b/plugins/po/de.po -index f720349..ac8bd6a 100644 ---- a/plugins/po/de.po -+++ b/plugins/po/de.po -@@ -16,16 +16,17 @@ - # Thomas Spura , 2008, 2009 - # Hedda Peters , 2016. #zanata - # Lisa Stemmler , 2016. #zanata -+# Vit Mojzis , 2017. #zanata - msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2016-08-23 06:37-0400\n" --"Last-Translator: Hedda Peters \n" -+"PO-Revision-Date: 2017-11-22 06:34-0500\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: German (http://www.transifex.com/projects/p/fedora/language/" - "de/)\n" - "Language: de\n" -@@ -92,6 +93,8 @@ msgid "" - "If you want to allow $SOURCE_PATH to be able to write to shared public " - "content" - msgstr "" -+"Sie möchten, dass $SOURCE_PATH in gemeinsam genutzte, öffentliche Inhalte " -+"schreiben darf. " - - #: ../src/allow_anon_write.py:45 - msgid "" -@@ -169,6 +172,8 @@ msgid "" - "If you do not think $SOURCE_PATH should need to map heap memory that is both " - "writable and executable." - msgstr "" -+"Sie nicht glauben, dass $SOURCE_PATH auf Heap-Speicher verweisen sollte, der " -+"sowohl beschreibbar als auch ausführbar ist." - - #: ../src/allow_execheap.py:51 - msgid "you need to report a bug. This is a potentially dangerous access." -@@ -230,6 +235,25 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+" Die Anwendung $SOURCE versuchte $TARGET_PATH zu laden, was\n" -+" Textverschiebung benötigt. Dies ist ein mögliches Sicherheitsproblem.\n" -+" Die meisten Bibliotheken benötigen diese Erlaubnis nicht.\n" -+" Die Webseite \n" -+" SELinux Memory Protection Tests erklärt diesen Test. Dieses Tool " -+"führte eine\n" -+" Untersuchung der Bibliothek aus und stellte fest, dass diese korrekt " -+"aufgebaut ist.\n" -+" Setroubleshoot kann also nicht feststellen, ob diese Anwendung " -+"kompromittiert\n" -+" wurde oder nicht. Dies ist unter Umständen ein schwerwiegendes Problem.\n" -+" Ihr System wurde womöglich kompromittiert.\n" -+"\n" -+" Kontaktieren Sie Ihren Sicherheitsadministrator und melden diesen Fehler." -+"\n" -+"\n" -+" " - - #: ../src/allow_execmod.py:61 - msgid "" -@@ -333,6 +357,8 @@ msgid "" - "If you do not think $SOURCE_PATH should need to map stack memory that is " - "both writable and executable." - msgstr "" -+"Sie nicht glauben, dass $SOURCE_PATH auf Stack-Speicher verweisen sollte, " -+"der sowohl beschreibbar als auch ausführbar ist." - - #: ../src/allow_execstack.py:90 - msgid "you need to report a bug. \n" -@@ -346,7 +372,9 @@ msgstr "" - msgid "If you believe that \n" - "%s\n" - "should not require execstack" --msgstr "" -+msgstr "Sie glauben, dass \n" -+"%s\n" -+"keinen execstack benötigen sollte" - - #: ../src/allow_execstack.py:108 - #, python-format -@@ -449,7 +477,7 @@ msgstr "" - - #: ../src/allow_ftpd_use_cifs.py:62 - msgid "If you want to allow ftpd to write to cifs file systems" --msgstr "" -+msgstr "Sie möchten ftpd erlauben, auf cifs-Dateisysteme zu schreiben" - - #: ../src/allow_ftpd_use_cifs.py:63 ../src/allow_ftpd_use_nfs.py:65 - msgid "you must tell SELinux about this" -@@ -537,7 +565,7 @@ msgstr "" - - #: ../src/allow_ftpd_use_nfs.py:64 - msgid "If you want to allow ftpd to write to nfs file systems" --msgstr "" -+msgstr "Sie möchten ftpd erlauben, auf nfs-Dateisysteme zu schreiben" - - #: ../src/allow_ftpd_use_nfs.py:71 - msgid "Enable booleans." -@@ -583,6 +611,8 @@ msgid "" - "If you want to change the label of $TARGET_PATH to %s, you are not allowed " - "to since it is not a valid file type." - msgstr "" -+"Sie möchten das Label von $TARGET_PATH ändern zu %s, dies ist nicht erlaubt, " -+"da es kein gültiger Dateityp ist." - - #: ../src/associate.py:49 - msgid "you must pick a valid file label." -@@ -716,6 +746,8 @@ msgstr "" - #: ../src/bind_ports.py:47 - msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" - msgstr "" -+"Sie möchten $SOURCE erlauben, mit dem Netzwerk-Port $​​PORT_NUMBER zu " -+"verbinden" - - #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 - #, python-format -@@ -784,7 +816,7 @@ msgstr "" - #: ../src/catchall_boolean.py:63 - #, python-format - msgid "If you want to %s" --msgstr "" -+msgstr "Sie folgendes tun möchten: %s" - - #: ../src/catchall_boolean.py:66 - #, python-format -diff --git a/plugins/po/en_GB.po b/plugins/po/en_GB.po -index 9ea8749..5ec527a 100644 ---- a/plugins/po/en_GB.po -+++ b/plugins/po/en_GB.po -@@ -8,11 +8,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:21-0500\n" -+"PO-Revision-Date: 2017-09-01 08:31-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: English (United Kingdom) (http://www.transifex.com/projects/p/" - "fedora/language/en_GB/)\n" -diff --git a/plugins/po/es.po b/plugins/po/es.po -index 39f1521..b8da668 100644 ---- a/plugins/po/es.po -+++ b/plugins/po/es.po -@@ -19,12 +19,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-09-12 10:57-0400\n" --"Last-Translator: Máximo Castañeda Riloba \n" -+"PO-Revision-Date: 2017-11-08 05:31-0500\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Spanish (http://www.transifex.com/projects/p/fedora/language/" - "es/)\n" - "Language: es\n" -diff --git a/plugins/po/eu.po b/plugins/po/eu.po -index accb903..23deb1e 100644 ---- a/plugins/po/eu.po -+++ b/plugins/po/eu.po -@@ -8,7 +8,7 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" -diff --git a/plugins/po/fi.po b/plugins/po/fi.po -index c495f52..58b1c5b 100644 ---- a/plugins/po/fi.po -+++ b/plugins/po/fi.po -@@ -10,7 +10,7 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" -diff --git a/plugins/po/fr.po b/plugins/po/fr.po -index a2c76d5..d417d94 100644 ---- a/plugins/po/fr.po -+++ b/plugins/po/fr.po -@@ -21,12 +21,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-10-05 09:21-0400\n" --"Last-Translator: Jean-Baptiste Holcroft \n" -+"PO-Revision-Date: 2017-11-08 05:31-0500\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: French (http://www.transifex.com/projects/p/fedora/language/" - "fr/)\n" - "Language: fr\n" -diff --git a/plugins/po/gu.po b/plugins/po/gu.po -index c641b5a..11b0a55 100644 ---- a/plugins/po/gu.po -+++ b/plugins/po/gu.po -@@ -12,11 +12,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:22-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Gujarati (http://www.transifex.com/projects/p/fedora/language/" - "gu/)\n" -diff --git a/plugins/po/hi.po b/plugins/po/hi.po -index 223caa2..50bae3d 100644 ---- a/plugins/po/hi.po -+++ b/plugins/po/hi.po -@@ -14,11 +14,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:22-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Hindi (http://www.transifex.com/projects/p/fedora/language/hi/" - ")\n" -diff --git a/plugins/po/hu.po b/plugins/po/hu.po -index 38f1852..064d732 100644 ---- a/plugins/po/hu.po -+++ b/plugins/po/hu.po -@@ -14,12 +14,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-07-26 05:19-0400\n" --"Last-Translator: Norbert Makula \n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Hungarian (http://www.transifex.com/projects/p/fedora/" - "language/hu/)\n" - "Language: hu\n" -diff --git a/plugins/po/it.po b/plugins/po/it.po -index af2b597..5214594 100644 ---- a/plugins/po/it.po -+++ b/plugins/po/it.po -@@ -16,11 +16,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2016-06-08 02:46-0400\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Italian (http://www.transifex.com/projects/p/fedora/language/" - "it/)\n" -diff --git a/plugins/po/ja.po b/plugins/po/ja.po -index 3d106b5..8ab4cf9 100644 ---- a/plugins/po/ja.po -+++ b/plugins/po/ja.po -@@ -14,16 +14,17 @@ - # Aiko Sasaki , 2016. #zanata - # Kenzo Moriguchi , 2016. #zanata - # Noriko Mizumoto , 2016. #zanata -+# Vit Mojzis , 2017. #zanata - msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2016-08-22 03:06-0400\n" --"Last-Translator: Aiko Sasaki \n" -+"PO-Revision-Date: 2017-11-22 06:34-0500\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Japanese (http://www.transifex.com/projects/p/fedora/language/" - "ja/)\n" - "Language: ja\n" -@@ -81,7 +82,7 @@ msgstr "" - msgid "" - "If you want to allow $SOURCE_PATH to be able to write to shared public " - "content" --msgstr "" -+msgstr "$SOURCE_PATH による共有の公開コンテンツへの書き込みを許可する場合" - - #: ../src/allow_anon_write.py:45 - msgid "" -@@ -152,7 +153,7 @@ msgstr "" - msgid "" - "If you do not think $SOURCE_PATH should need to map heap memory that is both " - "writable and executable." --msgstr "" -+msgstr "$SOURCE_PATH に、書き込みと実行の両方が可能になるヒープメモリーのマッピングを行う必要がないと考える場合。" - - #: ../src/allow_execheap.py:51 - msgid "you need to report a bug. This is a potentially dangerous access." -@@ -209,6 +210,17 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+" $SOURCE アプリケーションは、テキスト移動を要求する $TARGET_PATH \n" -+" のロードを試行しました。 セキュリティー上の問題となる可能性があります。\n" -+" ほとんどのライブラリーはこの許可を必要としません。 \n" -+" \n" -+" SELinux Memory Protection Tests\n" -+" のウェブページではこのチェックについて説明しています。 このツールはライブラリーが正しく\n" -+" 構築されたかどうかを調べます。そのため、setroubleshoot " -+"はこのアプリケーションがセキュリティーのリスクにさらされているかどうかを判別できません。これは重大な問題となる可能性があり、お使いのシステムがセキュリティーのリスクにさらされている可能性があります。\n" -+" セキュリティー管理者に連絡し、この問題をレポートしてください。\n" -+" " - - #: ../src/allow_execmod.py:61 - msgid "" -@@ -300,7 +312,7 @@ msgstr "" - msgid "" - "If you do not think $SOURCE_PATH should need to map stack memory that is " - "both writable and executable." --msgstr "" -+msgstr "$SOURCE_PATH に書き込みと実行の両方が可能となるスタックメモリーのマッピングを行なう必要がある場合。" - - #: ../src/allow_execstack.py:90 - msgid "you need to report a bug. \n" -@@ -313,7 +325,9 @@ msgstr "バグをレポートする必要があります。\n" - msgid "If you believe that \n" - "%s\n" - "should not require execstack" --msgstr "" -+msgstr "%s は \n" -+"execstack を\n" -+"必要としないと信じている場合" - - #: ../src/allow_execstack.py:108 - #, python-format -@@ -406,7 +420,7 @@ msgstr "" - - #: ../src/allow_ftpd_use_cifs.py:62 - msgid "If you want to allow ftpd to write to cifs file systems" --msgstr "" -+msgstr "ftpd が、cifs ファイルシステムに書込むことを許可したい場合" - - #: ../src/allow_ftpd_use_cifs.py:63 ../src/allow_ftpd_use_nfs.py:65 - msgid "you must tell SELinux about this" -@@ -486,7 +500,7 @@ msgstr "" - - #: ../src/allow_ftpd_use_nfs.py:64 - msgid "If you want to allow ftpd to write to nfs file systems" --msgstr "" -+msgstr "ftpd が、nfs ファイルシステムに書込むことを許可したい場合" - - #: ../src/allow_ftpd_use_nfs.py:71 - msgid "Enable booleans." -@@ -526,7 +540,7 @@ msgstr "" - msgid "" - "If you want to change the label of $TARGET_PATH to %s, you are not allowed " - "to since it is not a valid file type." --msgstr "" -+msgstr "$TARGET_PATH のラベルを %s に変更したくても、それは有効なファイルタイプではないため、許可されません。" - - #: ../src/associate.py:49 - msgid "you must pick a valid file label." -@@ -648,7 +662,7 @@ msgstr "" - - #: ../src/bind_ports.py:47 - msgid "If you want to allow $SOURCE_PATH to bind to network port $PORT_NUMBER" --msgstr "" -+msgstr "$SOURCE_PATH をネットワークポート $PORT_NUMBER に接続したい場合" - - #: ../src/bind_ports.py:53 ../src/connect_ports.py:51 - #, python-format -@@ -714,7 +728,7 @@ msgstr "" - #: ../src/catchall_boolean.py:63 - #, python-format - msgid "If you want to %s" --msgstr "" -+msgstr "%s がしたい場合" - - #: ../src/catchall_boolean.py:66 - #, python-format -@@ -823,18 +837,22 @@ msgid "" - "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " - "processes labeled $TARGET_TYPE by default." - msgstr "" -+"$SOURCE_BASE_PATH に、 $TARGET_TYPE にラベルされているプロセスでの $ACCESS " -+"アクセスがデフォルトで許可されるべきと考える場合。" - - #: ../src/catchall.py:52 - msgid "" - "If you believe that $SOURCE_BASE_PATH should have the $ACCESS capability by " - "default." --msgstr "" -+msgstr "$SOURCE_BASE_PATH には $ACCESS 機能をデフォルトで持たせるべきと考える場合。" - - #: ../src/catchall.py:53 - msgid "" - "If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on " - "the $TARGET_BASE_PATH $TARGET_CLASS by default." - msgstr "" -+"$SOURCE_BASE_PATH に、 $TARGET_BASE_PATH $TARGET_CLASS の $ACCESS " -+"アクセスがデフォルトで許可されるべきと考える場合。" - - #: ../src/catchall.py:55 - msgid "" -@@ -875,6 +893,16 @@ msgid "" - " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" $SOURCE による、ポートに関連付けられた SELinux タイプを持たないネットワークポート $PORT_NUMBER " -+"への接続を、SELinux は拒否しました。\n" -+" $SOURCE の $PORT_NUMBER での接続を許可する必要がある場合は、semanage " -+"コマンドを使用して、$PORT_NUMBER を、$SOURCE_TYPE が接続できるポートタイプに割り当てます (%s)。 \n" -+" \n" -+"\n" -+"$SOURCE による $PORT_NUMBER への接続が想定されていない場合、 \n" -+" 不正侵入の試行が示唆される可能性があります。\n" -+" " - - #: ../src/connect_ports.py:38 - #, python-format -@@ -899,7 +927,7 @@ msgstr "" - #: ../src/connect_ports.py:45 ../src/sandbox_connect.py:47 - msgid "" - "If you want to allow $SOURCE_PATH to connect to network port $PORT_NUMBER" --msgstr "" -+msgstr "$SOURCE_PATH がネットワークポート $PORT_NUMBER に接続したい場合" - - #: ../src/chrome.py:31 - msgid "" -@@ -937,7 +965,7 @@ msgstr "" - #: ../src/chrome.py:38 ../src/mozplugger.py:38 - #, python-format - msgid "If you want to use the %s package" --msgstr "" -+msgstr "%s パッケージを使用したい場合" - - #: ../src/chrome.py:43 - msgid "you must turn off SELinux controls on the Chrome plugins." -@@ -990,7 +1018,7 @@ msgstr "" - - #: ../src/cvs_data.py:44 - msgid "If $TARGET_BASE_PATH should be shared via the cvs daemon" --msgstr "" -+msgstr "$TARGET_BASE_PATH は、cvs デーモンを経由して共有されている必要がある場合" - - #: ../src/cvs_data.py:45 ../src/qemu_file_image.py:49 - msgid "You need to change the label on $TARGET_BASE_PATH'" -@@ -1027,7 +1055,7 @@ msgstr "" - msgid "" - "If you want to help identify if domain needs this access or you have a file " - "with the wrong permissions on your system" --msgstr "" -+msgstr "ドメインがこのアクセスを必要とするか、または使用システム上に間違えたパーミッションで ファイルを所有しているかを確認したい場合" - - #: ../src/dac_override.py:39 - msgid "" -@@ -1132,7 +1160,7 @@ msgstr "\n" - - #: ../src/disable_ipv6.py:40 - msgid "If you want to disable IPV6 on this machine" --msgstr "" -+msgstr "このマシンにおいて IPV6 を無効化したい場合" - - #: ../src/disable_ipv6.py:41 - msgid "" -@@ -1193,11 +1221,11 @@ msgstr "" - - #: ../src/file.py:49 - msgid "This is caused by a newly created file system." --msgstr "" -+msgstr "これは新規作成されたファイルシステムによって引き起こされたものです。" - - #: ../src/file.py:51 - msgid "If you think this is caused by a badly mislabeled machine." --msgstr "" -+msgstr "これが、間違ったラベルを付けられたマシンによって起こされたと考える場合。" - - #: ../src/file.py:55 - msgid "you need to add labels to it." -@@ -1258,7 +1286,7 @@ msgstr "\n" - msgid "" - "If you believe $SOURCE_BASE_PATH should be allowed to create " - "$TARGET_BASE_PATH files" --msgstr "" -+msgstr "$SOURCE_BASE_PATH は、 $TARGET_BASE_PATH ファイルを作成するために許可されているべきと考える場合" - - #: ../src/filesystem_associate.py:44 - msgid "" -@@ -1290,6 +1318,12 @@ msgid "" - " signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux は http デーモンによるメール送信を拒否しました。\n" -+" httpd スクリプトの1つがメールポートへの接続、または sendmail \n" -+" コマンドの実行を試行しています。 httpd に sendmail を設定していなかった場合は、\n" -+" 不正侵入の試行が示唆される可能性があります。\n" -+" " - - #: ../src/httpd_can_sendmail.py:39 - msgid "" -@@ -1307,7 +1341,7 @@ msgstr "" - - #: ../src/httpd_can_sendmail.py:47 - msgid "If you want to allow httpd to send mail" --msgstr "" -+msgstr "httpd が、メール送信することを許可する場合" - - #: ../src/httpd_can_sendmail.py:48 - msgid "you must setup SELinux to allow this" -@@ -1360,7 +1394,7 @@ msgstr "" - msgid "" - "If you want to allow httpd to execute cgi scripts and to unify HTTPD " - "handling of all content files." --msgstr "" -+msgstr "httpd による cgi スクリプトの実行、 および全コンテンツファイルの HTTPD 処理の統一を許可したい場合。" - - #: ../src/httpd_unified.py:58 - msgid "" -@@ -1433,6 +1467,7 @@ msgid "" - "If you do not think $SOURCE_BASE_PATH should try $ACCESS access on " - "$TARGET_BASE_PATH." - msgstr "" -+"$SOURCE_BASE_PATH が $TARGET_BASE_PATH の $ACCESS アクセスを試みるべきではないと考える場合。" - - #: ../src/kernel_modules.py:45 ../src/selinuxpolicy.py:45 - msgid "" -@@ -1492,6 +1527,8 @@ msgid "" - "$TARGET_BASE_PATH $TARGET_CLASS, because you believe it should not need this " - "access." - msgstr "" -+"このアクセスが必要とは思えないため、$SOURCE_BASE_PATH が、 $TARGET_BASE_PATH $TARGET_CLASS へ " -+"$ACCESS アクセスを試みることを、拒否したい場合。" - - #: ../src/leaks.py:43 - msgid "" -@@ -1534,12 +1571,22 @@ msgid "" - " compromised.\n" - " " - msgstr "" -+"\n" -+" SELinux は、カーネルのアドレス空間の低位置を mmap する $SOURCE の機能を \n" -+" 拒否しました。アドレス領域の低位置を mmap する機能は、 \n" -+" /proc/sys/kernel/mmap_min_addr で設定されます。このようなマッピングを拒否すると、 \n" -+" カーネルで null deref バグの悪用を防止する手助けになります。このアクセスを\n" -+" 必要とするアプリケーションはすべて独自のポリシーが記述されているはずです。 \n" -+" セキュリティ侵害されたアプリケーションによりカーネルの修正が試行されると、\n" -+" この AVC が生成されます。これは深刻な問題です。ご使用のシステムは非常に \n" -+" 高い確率でセキュリティが侵害されている可能性があります。\n" -+" " - - #: ../src/mmap_zero.py:46 - msgid "" - "If you do not think $SOURCE_PATH should need to mmap low memory in the " - "kernel." --msgstr "" -+msgstr "$SOURCE_PATH にカーネル内で低いメモリーの mmap を行なう必要があるとは思えない場合。" - - #: ../src/mmap_zero.py:47 - msgid "you may be under attack by a hacker, this is a very dangerous access." -@@ -1597,7 +1644,7 @@ msgstr "" - - #: ../src/mounton.py:48 - msgid "If you want to allow $SOURCE_BASE_PATH to mount on $TARGET_BASE_PATH." --msgstr "" -+msgstr "$SOURCE_BASE_PATH が、 $TARGET_BASE_PATH にマウントすることを許可したい場合。" - - #: ../src/mounton.py:49 - msgid "you must change the labeling on $TARGET_PATH." -@@ -1670,7 +1717,7 @@ msgstr "" - msgid "" - "If you want to to continue using SELinux Firefox plugin containment rather " - "then using mozplugger package" --msgstr "" -+msgstr "mozplugger パッケージではなく、SELinux Firefox プラグインの内容を続けて使用したい場合。" - - #: ../src/mozplugger_remove.py:45 - msgid "you must remove the mozplugger package." -@@ -1685,6 +1732,11 @@ msgid "" - " is labeled correctly.\n" - " " - msgstr "" -+"\n" -+" SELinux は $SOURCE により要求されたアクセスを拒否しました。$TARGET_PATH \n" -+" には誤ったラベルが付けられている可能性があります。ラベルが適切に設定されている場合、openvpn はホームディレクトリーの \n" -+" コンテンツを読み込むことができます。\n" -+" " - - #: ../src/openvpn.py:41 - msgid "" -@@ -1694,18 +1746,25 @@ msgid "" - " # restorecon -R /root/.ssh\n" - " " - msgstr "" -+"\n" -+" restorecon コマンドを実行することにより、このファイルへデフォルトのシステムコンテキストを\n" -+" 復元できます。 \n" -+" # restorecon -R /root/.ssh\n" -+" " - - #: ../src/openvpn.py:49 - msgid "" - "If you want to mv $TARGET_BASE_PATH to standard location so that " - "$SOURCE_BASE_PATH can have $ACCESS access" - msgstr "" -+"$SOURCE_BASE_PATH が $ACCESS へアクセスできるよう、 $TARGET_BASE_PATH を標準の場所に移動したい場合" - - #: ../src/openvpn.py:51 - msgid "" - "If you want to modify the label on $TARGET_BASE_PATH so that " - "$SOURCE_BASE_PATH can have $ACCESS access on it" - msgstr "" -+"$SOURCE_BASE_PATH が $ACCESS へアクセスできるよう、 $TARGET_BASE_PATH のラベルを編集したい場合" - - #: ../src/openvpn.py:55 - msgid "you must move the cert file to the ~/.cert directory" -@@ -1753,7 +1812,7 @@ msgstr "" - - #: ../src/public_content.py:50 - msgid "If you want to treat $TARGET_BASE_PATH as public content" --msgstr "" -+msgstr "$TARGET_BASE_PATH を公開コンテンツとして処理する場合" - - #: ../src/public_content.py:51 - msgid "" -@@ -1843,7 +1902,7 @@ msgstr "" - - #: ../src/qemu_file_image.py:48 - msgid "If $TARGET_BASE_PATH is a virtualization target" --msgstr "" -+msgstr "$TARGET_BASE_PATH が仮想的なターゲットである場合" - - #: ../src/restorecon.py:57 - msgid "" -@@ -1901,13 +1960,40 @@ msgid "" - "package.\n" - " " - msgstr "" -+"\n" -+" SELinux は $SOURCE により要求されたアクセスを拒否しました。$TARGET_PATH には\n" -+" 誤ったラベルが付けられている可能性があります。$TARGET_PATH のデフォルト SELinux タイプは、\n" -+" %s ですが、現在のタイプは $TARGET_TYPE です。このファイルを\n" -+" デフォルトのタイプに戻すことにより、問題が解決される可能性があります。\n" -+"

\n" -+" ファイルのコンテキストは以下の方法で 1 つのファイルに割り当てることができます。\n" -+"

    \n" -+"
  • 1 つのディレクトリー内で作成されたファイルは、デフォルトで親ディレクトリーのファイルコンテキストを受け取ります。\n" -+"
  • SELinux ポリシーは、ラベル B が付けられたディレクトリーにファイルを作成するコンテキスト A " -+"で実行しているプロセスを指定することにより、\n" -+" 親ディレクトリーから継承したデフォルトのラベルを上書きし、代わりにラベル C を持つファイルを作成するようになります。\n" -+" この例として、dhclient_t タイプで実行していて、ディレクトリー /etc 内にファイルを作成するような dhcp " -+"クライアントがあります。このファイルは、\n" -+" 通常、親からの継承により etc_t タイプを受け取りますが、SELinux ポリシーの指定により、このファイルには代わりに " -+"net_conf_t タイプでラベルが付けられます。\n" -+"
  • ユーザーは、chcon や restorecon " -+"などのツールを使用することで、ファイル上のファイルコンテキストを変更することができます。\n" -+"
\n" -+" " -+"ユーザーエラーか、通常の制約されたアプリケーションが間違ったドメインで実行されたことにより、このファイルには誤ったラベルが付けられた可能性があります。\n" -+"

\n" -+" しかし、このファイルにこのタイプのラベルが付けられるはずがないため、これは SELinux 内のバグである可能性もあります。\n" -+"

\n" -+" これがバグだと思われる場合は、このパッケージについてバグレポートを作成してください。\n" -+" " - - #: ../src/restorecon.py:90 - #, python-format - msgid "" - "If you want to fix the label. \n" - "$TARGET_PATH default label should be %s." --msgstr "" -+msgstr "ラベルを修正する場合。\n" -+"$TARGET_PATH のデフォルトラベルは %s のはずです。" - - #: ../src/restorecon.py:96 - msgid "" -@@ -1915,6 +2001,8 @@ msgid "" - "insufficient permissions to access a parent directory in which case try to " - "change the following command accordingly." - msgstr "" -+"restorecon " -+"を実行することができます。親ディレクトリーにアクセスするのに必要な権限がないため、要求されたアクセスが停止した可能性があります。この場合は、以下のコマンドを状況に応じて適切に変更します。" - - #: ../src/restorecon.py:105 ../src/restorecon_source.py:73 - msgid "Restore\n" -@@ -1955,13 +2043,29 @@ msgid "" - "package.\n" - " " - msgstr "" -+"\n" -+" SELinux により、$SOURCE のアクセスが拒否されました。\n" -+" $SOURCE_PATH に誤ったラベルが付けられている可能性があります。\n" -+" $SOURCE_PATH のデフォルトの SELinux タイプは%s ですが、\n" -+" 現在のタイプは $SOURCE_TYPE です。\n" -+" このファイルのタイプをデフォルトに戻すと、問題が解決する場合があります。\n" -+"

\n" -+" ユーザーエラーか、通常の制限されたアプリケーションが誤ったドメインで\n" -+" 実行されたことにより、このファイルには誤ったラベルが付けられた可能性があります。\n" -+"

\n" -+" しかし、このファイルにこのライブでラベルが付けられるはずがないため、\n" -+" SELinux のバグである可能性もあります。\n" -+"

\n" -+" これがバグだと思われる場合は、このパッケージについてバグレポートを提出してください。\n" -+" " - - #: ../src/restorecon_source.py:60 - #, python-format - msgid "" - "If you want to fix the label. \n" - "$SOURCE_PATH default label should be %s." --msgstr "" -+msgstr "ラベルを修正する場合。\n" -+"$SOURCE_PATH のデフォルトランレベルは %s のはずです。" - - #: ../src/restorecon_source.py:65 - msgid "you can run restorecon." -@@ -1977,6 +2081,13 @@ msgid "" - " this message could indicate either a bug or an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux は、RSYNC が $TARGET_PATH にアクセスするのを拒否しました。\n" -+" これが RSYNC リポジトリーであるなら、rsync_data_t のファイル\n" -+" コンテキストラベルを持っている必要があります。$TARGET_PATH を\n" -+" RSYNC リポジトリーとして使用する予定ではなかった場合、\n" -+" このメッセージは、バグか、侵入の試みを示します。\n" -+" " - - #: ../src/rsync_data.py:38 - msgid "" -@@ -1996,7 +2107,7 @@ msgstr "" - - #: ../src/rsync_data.py:45 - msgid "If $TARGET_BASE_PATH should be shared via the RSYNC daemon" --msgstr "" -+msgstr "$TARGET_BASE_PATH は RSYNC デーモンによって共有されるべきです" - - #: ../src/rsync_data.py:46 - msgid "You need to change the label on $TARGET_BASE_PATH" -@@ -2027,6 +2138,14 @@ msgid "" - "Samba and SELinux.\n" - " " - msgstr "" -+"\n" -+" SELinux は、samba が $TARGET_PATH へアクセスするのを拒否しました。\n" -+" このディレクトリーを samba を共有したい場合は、samba_share_t の\n" -+" ファイルコンテキストラベルを持っている必要があります。$TARGET_PATH を\n" -+" samba リポジトリーとして使用する意図ではなかった場合、このメッセージは、\n" -+" バグか、不正侵入が試みられた可能性を示しています。\n" -+" Samba と SELinux のセットアップに関する詳細は 'man samba_selinux' を参照してください。\n" -+" " - - #: ../src/samba_share.py:39 - msgid "" -@@ -2068,6 +2187,16 @@ msgid "" - " to connect to $PORT_NUMBER, this could signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux は、$SOURCE が、サンドボックスの中でネットワークポート $PORT_NUMBER に接続することを拒否しました。\n" -+" $SOURCE による $PORT_NUMBER への接続を許可する場合は、sandbox_web_t や sandbox_net_t " -+"などの別のサンドボックスタイプを使用する必要があります。 \n" -+" # sandbox -X -t sandbox_net_t $SOURCE\n" -+" \n" -+"\n" -+"$SOURCE による $PORT_NUMBER への接続ががサポートされていない場合、\n" -+" これは、侵入の試みである可能性があります。\n" -+" " - - #: ../src/sandbox_connect.py:41 - msgid "" -@@ -2127,7 +2256,7 @@ msgstr "" - - #: ../src/setenforce.py:27 - msgid "If you did not directly cause this AVC through testing." --msgstr "" -+msgstr "この AVC は、このテストによって直接起こったものではない場合。" - - #: ../src/setenforce.py:28 - msgid "if you think that you might have been hacked" -@@ -2158,10 +2287,18 @@ msgid "" - " well be compromised.\n" - " " - msgstr "" -+"\n" -+" SELinux は、$SOURCE が /sys/fs/selinux 内のファイルに書き込むのを阻止しました。\n" -+" /sys/fs/selinux のファイルは、SELinux に設定された方法で制御されます。\n" -+" /sys/fs/selinux のファイルへの書き込みが必要なすべてのプログラムには、それぞれの\n" -+" ポリシーが事前に作成されている必要がありました。セキュリティーのリスクにさらされている\n" -+" アプリケーションが SELinux を無効にしようとすると、この AVC が生成されます。これは重要な問題です。\n" -+" ご使用のシステムはすでにセキュリティーのリスクにさらされている可能性があります。\n" -+" " - - #: ../src/setenforce.py:48 - msgid "If you believe $SOURCE_PATH tried to disable SELinux." --msgstr "" -+msgstr "$SOURCE_PATH が SELinux を無効にしようとしたと考える場合。" - - #: ../src/setenforce.py:49 - msgid "" -@@ -2178,6 +2315,11 @@ msgid "" - " is labeled correctly.\n" - " " - msgstr "" -+"\n" -+" SELinux は $SOURCE により要求されたアクセスを拒否しました。$TARGET_PATH に\n" -+" 誤ったラベルが付けられている可能性があります。ラベルが適切に設定されている場合、\n" -+" sshd は /root/.ssh ディレクトリーのコンテンツを読み込むことができます。\n" -+" " - - #: ../src/sshd_root.py:42 - msgid "" -@@ -2187,6 +2329,11 @@ msgid "" - " # restorecon -R /root/.ssh\n" - " " - msgstr "" -+"\n" -+" restorecon コマンドを実行することにより、このファイルへのデフォルトのシステムコンテキストを\n" -+" 復元できます。\n" -+" # restorecon -R /root/.ssh\n" -+" " - - #: ../src/sshd_root.py:55 - msgid "Restore Context" -@@ -2212,6 +2359,13 @@ msgid "" - "an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux は、$TARGET_PATH への $SOURCE アクセスを拒否しました。\n" -+" これがスワップファイルならば、swapfile_t のファイルコンテキストラベルを\n" -+" 持っている必要があります。$TARGET_PATH をスワップファイルとして\n" -+" 使用する意図でなかった場合、\n" -+" このメッセージは、バグか、不正侵入が試みられた可能性を示しています。\n" -+" " - - #: ../src/swapfile.py:38 - msgid "" -@@ -2234,7 +2388,7 @@ msgstr "" - msgid "" - "If you do not believe your $SOURCE_PATH should be modifying the kernel, by " - "loading kernel modules" --msgstr "" -+msgstr "$SOURCE_PATH は kernel モジュールをロードし、kernel を編集すべきではないと考える場合" - - #: ../src/sys_module.py:29 - msgid "You might have been hacked." -@@ -2273,7 +2427,7 @@ msgstr "" - msgid "" - "If you do not believe that $SOURCE_PATH should be attempting to modify the " - "kernel by loading a kernel module." --msgstr "" -+msgstr "$SOURCE_PATH は kernel モジュールをロードし、kernel を編集しようとすべきではないと考える場合。" - - #: ../src/sys_module.py:47 - msgid "A process might be attempting to hack into your system." -@@ -2307,7 +2461,7 @@ msgstr "" - msgid "" - "If you do not want processes to require capabilities to use up all the " - "system resources on your system;" --msgstr "" -+msgstr "プロセスに、システム上の全システムリソースを消費できる機能を要求させたくない場合;" - - #: ../src/sys_resource.py:40 - msgid "" -@@ -2328,6 +2482,19 @@ msgid "" - "/* Override max number of consoles on console allocation */\n" - "/* Override max number of keymaps */\n" - msgstr "" -+"システムリソースが不足している原因を突き止め、問題を解決する必要があります。\n" -+"\n" -+"/usr/include/linux/capability.h によると、sys_resource は次のような場合に必要となります。\n" -+"\n" -+"/* リソースの上限を無効にしてから設定する */\n" -+"/* クオータの上限を無効にする */\n" -+"/* ext2 ファイルシステムの予約領域を無効にする */\n" -+"/* ext3 ファイルシステムのデータジャーナリングモードを変更する (ジャーナリングのリソースを使用) */\n" -+"/* 注意: ext2 はリソースの無効化チェックの際に fsuid を受け取るため、fsuid で無効化を行うこともできます */\n" -+"/* IPC メッセージキューでサイズ制限を無効にする */\n" -+"/* リアルタイムクロックからの 64hz を超える割り込みを許可する */\n" -+"/* コンソールの割り当てでコンソールの最大数を無効にする */\n" -+"/* キーマップの最大数を無効にする */\n" - - #: ../src/vbetool.py:30 - msgid "" -@@ -2382,7 +2549,7 @@ msgstr "" - msgid "" - "If you want to ignore this AVC because it is dangerous and your machine " - "seems to be working correctly." --msgstr "" -+msgstr "この AVC を無効にしたい場合。この AVC は警告だが、マシンは正常に動作しているため。" - - #: ../src/vbetool.py:56 - msgid "" -@@ -2448,7 +2615,7 @@ msgstr "" - msgid "" - "If you want to ignore this AVC because it is dangerous and your wine " - "applications are working correctly." --msgstr "" -+msgstr "この AVC を無効にしたい場合。この AVC は警告だが、wine アプリケーションは正常に動作しているため。" - - #: ../src/wine.py:67 - msgid "" -diff --git a/plugins/po/kn.po b/plugins/po/kn.po -index c41b6b9..e013d74 100644 ---- a/plugins/po/kn.po -+++ b/plugins/po/kn.po -@@ -14,11 +14,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:24-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Kannada (http://www.transifex.com/projects/p/fedora/language/" - "kn/)\n" -diff --git a/plugins/po/ko.po b/plugins/po/ko.po -index 5176715..127989c 100644 ---- a/plugins/po/ko.po -+++ b/plugins/po/ko.po -@@ -12,12 +12,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2016-07-22 05:26-0400\n" --"Last-Translator: Petr Lautrbach \n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Korean (http://www.transifex.com/projects/p/fedora/language/" - "ko/)\n" - "Language: ko\n" -diff --git a/plugins/po/ml.po b/plugins/po/ml.po -index c4479be..308715e 100644 ---- a/plugins/po/ml.po -+++ b/plugins/po/ml.po -@@ -9,11 +9,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:25-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Malayalam (http://www.transifex.com/projects/p/fedora/" - "language/ml/)\n" -diff --git a/plugins/po/mr.po b/plugins/po/mr.po -index 82dd24d..931c2f6 100644 ---- a/plugins/po/mr.po -+++ b/plugins/po/mr.po -@@ -10,11 +10,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:25-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Marathi (http://www.transifex.com/projects/p/fedora/language/" - "mr/)\n" -diff --git a/plugins/po/nl.po b/plugins/po/nl.po -index bc1d1d3..a2c378e 100644 ---- a/plugins/po/nl.po -+++ b/plugins/po/nl.po -@@ -12,11 +12,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-09-12 10:27-0400\n" -+"PO-Revision-Date: 2017-09-12 10:34-0400\n" - "Last-Translator: Geert Warrink \n" - "Language-Team: Dutch (http://www.transifex.com/projects/p/fedora/language/nl/" - ")\n" -diff --git a/plugins/po/or.po b/plugins/po/or.po -index fea4fbb..d111198 100644 ---- a/plugins/po/or.po -+++ b/plugins/po/or.po -@@ -12,11 +12,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:26-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Oriya (http://www.transifex.com/projects/p/fedora/language/or/" - ")\n" -diff --git a/plugins/po/pa.po b/plugins/po/pa.po -index 36f1542..dc7034c 100644 ---- a/plugins/po/pa.po -+++ b/plugins/po/pa.po -@@ -11,11 +11,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:27-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Panjabi (Punjabi) (http://www.transifex.com/projects/p/fedora/" - "language/pa/)\n" -diff --git a/plugins/po/pl.po b/plugins/po/pl.po -index 312bddf..7eba3a2 100644 ---- a/plugins/po/pl.po -+++ b/plugins/po/pl.po -@@ -11,11 +11,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-08-22 11:49-0400\n" -+"PO-Revision-Date: 2017-09-01 11:40-0400\n" - "Last-Translator: Piotr Drąg \n" - "Language-Team: Polish (http://www.transifex.com/projects/p/fedora/language/" - "pl/)\n" -diff --git a/plugins/po/pt.po b/plugins/po/pt.po -index 5386878..133fc5f 100644 ---- a/plugins/po/pt.po -+++ b/plugins/po/pt.po -@@ -10,11 +10,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:28-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Portuguese (http://www.transifex.com/projects/p/fedora/" - "language/pt/)\n" -diff --git a/plugins/po/pt_BR.po b/plugins/po/pt_BR.po -index e16dec0..7bb1f64 100644 ---- a/plugins/po/pt_BR.po -+++ b/plugins/po/pt_BR.po -@@ -16,12 +16,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2016-09-05 02:14-0400\n" --"Last-Translator: Daniel Lara \n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Portuguese (Brazil) (http://www.transifex.com/projects/p/" - "fedora/language/pt_BR/)\n" - "Language: pt-BR\n" -diff --git a/plugins/po/ru.po b/plugins/po/ru.po -index 1d6a368..b2b2775 100644 ---- a/plugins/po/ru.po -+++ b/plugins/po/ru.po -@@ -8,18 +8,18 @@ - # Yulia , 2006, 2008, 2009, 2010, 2012 - # Yulia , 2013 - # Игорь Горбунов , 2013 --# Terry Chuang , 2016. #zanata - # yuliya , 2016. #zanata -+# Vit Mojzis , 2017. #zanata - msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2016-08-29 03:07-0400\n" --"Last-Translator: Terry Chuang \n" -+"PO-Revision-Date: 2017-11-22 06:35-0500\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Russian (http://www.transifex.com/projects/p/fedora/language/" - "ru/)\n" - "Language: ru\n" -@@ -227,6 +227,16 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+" Если вы доверяете $TARGET_PATH, можно изменить контекст\n" -+" файла на textrel_shlib_t. «chcon -t textrel_shlib_t \n" -+" $TARGET_PATH»\n" -+" Также необходимо изменить контексты файлов в системе, используемые по " -+"умолчанию, чтобы они сохранились даже при повторной разметке. \n" -+" «semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH'»\n" -+"\n" -+" \n" -+" " - - #: ../src/allow_execmod.py:114 - msgid "Change label on the library." -@@ -262,6 +272,26 @@ msgid "" - "file a bug report.\n" - " " - msgstr "" -+"\n" -+" Приложение $SOURCE попыталось сделать свой стек\n" -+" исполняемым, что представляет потенциальную угрозу безопасности.\n" -+" В этом не должно быть необходимости. \n" -+" Память стека не является исполняемой в большинстве ОС\n" -+" на сегодняшний день, и в будущем это не изменится.\n" -+" Исполняемый стек представляет собой исключительно серьезную проблему " -+"безопасности.\n" -+" Ошибка execstack может быть вызвана вредоносными программами.\n" -+" Иногда приложения, написанные\n" -+" некорректно, могут запросить это разрешение. Документ\n" -+" Тесты " -+"защиты памяти SELinux\n" -+" объясняет, как исключить использование такой возможности. Если $SOURCE " -+"не\n" -+" работает, когда это необходимо, можно настроить SELinux так, \n" -+" чтобы временно разрешить такую возможность, пока приложение не будет " -+"исправлено. Пожалуйста, \n" -+" создайте запрос в Bugzilla для этого пакета.\n" -+" " - - #: ../src/allow_execstack.py:79 - msgid "" -@@ -273,6 +303,11 @@ msgid "" - " execstack -s LIBRARY_PATH.\n" - " " - msgstr "" -+"\n" -+"Иногда для библиотеки может быть случайно выбран флаг execstack.\n" -+"Его можно снять, выполнив execstack -c LIBRARY_PATH.\n" -+"После этого перезапустите приложение.\n" -+"Если это не помогло, снова установите флаг: execstack -s LIBRARY_PATH. " - - #: ../src/allow_execstack.py:89 - msgid "" -@@ -340,6 +375,20 @@ msgid "" - " this access attempt could signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил демону ftp доступ $ACCESS к файлам в файловой системе " -+"CIFS.\n" -+" CIFS (Comment Internet File System) — сетевая файловая система,\n" -+" аналогичная SMB (http://www.microsoft.com/mind/1196/cifs.asp).\n" -+" Демон ftp попытался прочесть данные из смонтированной системы этого типа." -+"\n" -+" Так как CIFS не поддерживает низкоуровневое маркирование SELinux, \n" -+" все файлы и каталоги имеют один и тот же контекст безопасности.\n" -+" \n" -+" Если вы не настраивали демон ftp на чтение файлов из CIFS,\n" -+" попытка получения доступа может служить сигналом вторжения.\n" -+" " - - #: ../src/allow_ftpd_use_cifs.py:46 - msgid "" -@@ -414,6 +463,20 @@ msgid "" - " this access attempt could signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил доступ $ACCESS к файлам на разделе NFS.\n" -+" NFS (Network Filesystem) — сетевая файловая система, обычно используемая " -+"в системах UNIX/Linux.\n" -+"\n" -+" Демон ftp попытался прочесть данные из смонтированной системы этого типа." -+"\n" -+" Так как NFS система не поддерживает низкоуровневое маркирование SELinux, " -+"\n" -+" все файлы и каталоги имеют один и тот же контекст безопасности.\n" -+" \n" -+" Если вы не настраивали демон ftp на чтение файлов из NFS,\n" -+" попытка получения доступа может служить сигналом вторжения.\n" -+" " - - #: ../src/allow_ftpd_use_nfs.py:47 - msgid "" -@@ -571,6 +634,16 @@ msgid "" - " to bind to $PORT_NUMBER, this could signal an intrusion attempt.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил $SOURCE подключаться сетевому порту $PORT_NUMBER, " -+"которому не присвоен тип SELinux.\n" -+" Если $SOURCE должен иметь возможность подключения к этому порту, можно " -+"использовать команду semanage для добавления $PORT_NUMBER к типу, " -+"которому $SOURCE_TYPE может быть сопоставлен (%s).\n" -+" \n" -+"Если $SOURCE не должен\n" -+" соответствовать $PORT_NUMBER, возможно, имеет место попытка вторжения.\n" -+" " - - #: ../src/bind_ports.py:38 - #, python-format -@@ -643,6 +716,14 @@ msgid "" - " the access.\n" - " " - msgstr "" -+"\n" -+"\n" -+" SELinux отклонил запрос доступа от $SOURCE. Текущие настройки \n" -+" логических переменных не разрешают доступ. Такой запрос не \n" -+" ожидается от $SOURCE и может свидетельствовать о \n" -+" попытке вторжения. Если же вы действительно хотите разрешить доступ, \n" -+" потребуется изменить соответствующие логические переменные. \n" -+" " - - #: ../src/catchall_boolean.py:46 - msgid "" -@@ -653,6 +734,12 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+" Ограничиваемые процессы можно настроить так, чтобы они выполнялись с " -+"различными уровнями доступа. При этом доступ можно разрешать и запрещать с " -+"помощью логических переменных SELinux.\n" -+"\n" -+" " - - #: ../src/catchall_boolean.py:63 - #, python-format -@@ -711,6 +798,10 @@ msgid "" - "Then execute:\n" - "restorecon -v '$FIX_TARGET_PATH'\n" - msgstr "" -+"# semanage fcontext -a -t FILE_TYPE '$FIX_TARGET_PATH'\n" -+"где FILE_TYPE может принимать значения: %s. \n" -+"Затем выполните: \n" -+"restorecon -v '$FIX_TARGET_PATH'\n" - - #: ../src/catchall.py:29 ../src/chrome.py:29 ../src/mozplugger.py:29 - #: ../src/mozplugger_remove.py:29 -@@ -947,7 +1038,9 @@ msgstr "" - msgid "\n" - " SELinux is preventing $SOURCE_PATH the \"$ACCESS\" capability.\n" - " " --msgstr "" -+msgstr "\n" -+" SELinux запретил операцию \"$ACCESS\" для $SOURCE_PATH. \n" -+" " - - #: ../src/dac_override.py:32 - msgid "" -@@ -988,6 +1081,13 @@ msgid "" - "If you see PATH record check ownership/permissions on file, and fix it,\n" - "otherwise report as a bugzilla." - msgstr "" -+"\n" -+"Включите аудит:\n" -+"# auditctl -w /etc/shadow -p w\n" -+"Попытайтесь заново создать AVC, после чего выполните:\n" -+"# ausearch -m avc -ts recent\n" -+"Если запись PATH осуществляет проверку разрешений файла, исправьте это, \n" -+"в противном случае создайте запрос в Bugzilla." - - #: ../src/device.py:29 - msgid "" -@@ -996,6 +1096,10 @@ msgid "" - "$TARGET_PATH.\n" - " " - msgstr "" -+"\n" -+" SELinux запрещает $SOURCE_PATH доступ «$ACCESS» к устройству " -+"$TARGET_PATH. \n" -+" " - - #: ../src/device.py:33 - msgid "" -@@ -1175,6 +1279,19 @@ msgid "" - " for the destination.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил $SOURCE создавать файл с контекстом $SOURCE_TYPE в " -+"файловой системе.\n" -+" Обычно это происходит при использовании команды «cp» для сохранения " -+"контекста файла при\n" -+" копировании (например, «cp -a»). Не все файловые контексты должны " -+"сохранять постоянство в разных файловых системах.\n" -+" Например, тип iso9660_t доступных только для чтения файлов не должен " -+"использоваться в\n" -+" системах, допускающих запись. В этом случае лучше подойдёт команда «cp -" -+"p», так как она адаптирует\n" -+" файловый контекст в зависимости от назначения.\n" -+" " - - #: ../src/filesystem_associate.py:40 - msgid "" -@@ -1319,6 +1436,17 @@ msgid "" - "for more information on setting up httpd and selinux.\n" - " " - msgstr "" -+"\n" -+" SELinux запрещает httpd ($SOURCE_PATH) доступ $ACCESS к $TARGET_PATH.\n" -+"\n" -+" Сценариям httpd не разрешено осуществлять запись без \n" -+" явной маркировки всех файлов. Если $TARGET_PATH допускает запись, \n" -+" то его надо отметить как httpd_sys_rw_content_t или " -+"httpd_sys_ra_content_t\n" -+" (если требуется только добавление).\n" -+" Подробную информацию можно найти на странице помощи\n" -+" «man httpd_selinux».\n" -+" " - - #: ../src/httpd_write_content.py:40 ../src/qemu_blk_image.py:45 - #: ../src/samba_share.py:45 ../src/swapfile.py:45 ../src/xen_image.py:48 -@@ -1350,6 +1478,16 @@ msgid "" - " serious issue. Your system may very well be compromised.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил $SOURCE изменять $TARGET. \n" -+" $SOURCE пытался изменить поведение ядра или вставить код в ядро. \n" -+" Для всех приложений, которым необходим такой уровень доступа, \n" -+" должна существовать отдельная политика. \n" -+" Если скомпрометированное приложение попытается модифицировать ядро,\n" -+" будет сгенерировано AVC. \n" -+" Это является серьёзной проблемой и может служить индикатором того, \n" -+" что система была скомпрометирована.\n" -+" " - - #: ../src/kernel_modules.py:44 ../src/selinuxpolicy.py:44 - msgid "" -@@ -1502,6 +1640,15 @@ msgid "" - " label of the file or directory.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил $SOURCE монтировать файловую систему в\n" -+" «$TARGET_PATH» с типом «$TARGET_TYPE». По умолчанию\n" -+" SELinux ограничивает монтирование файловых систем \n" -+" некоторыми файлами или\n" -+" каталогами (имеющими атрибут mountpoint). \n" -+" Тип «$TARGET_TYPE» не имеет этого атрибута. \n" -+" Можно попробовать изменить метку файла или каталога.\n" -+" " - - #: ../src/mounton.py:43 - msgid "" -@@ -2048,6 +2195,10 @@ msgid "" - "sandbox -X -t sandbox_net_t $SOURCE_PATH\n" - "Please read 'sandbox' man page for more details.\n" - msgstr "" -+"необходимо изменить type. sandbox_web_t или sandbox_net_t.\n" -+"Пример:\n" -+"sandbox -X -t sandbox_net_t $SOURCE_PATH\n" -+"За подробной информацией обратитесь к справочной странице sandbox.\n" - - #: ../src/selinuxpolicy.py:29 - msgid "\n" -@@ -2069,6 +2220,16 @@ msgid "" - " may very well be compromised.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил $SOURCE модифицировать $TARGET.\n" -+" $SOURCE пытался изменить конфигурацию политики selinux.\n" -+" Для всех приложений, которым необходим такой уровень доступа,\n" -+" должна существовать отдельная политика.\n" -+" Если скомпрометированное приложение попытается изменить политику,\n" -+" будет сгенерировано AVC.\n" -+" Это является серьезной проблемой и может служить индикатором того, \n" -+" что система могла быть скомпрометирована.\n" -+" " - - #: ../src/setenforce.py:27 - msgid "If you did not directly cause this AVC through testing." -@@ -2213,6 +2374,15 @@ msgid "" - " issue. Your system may very well be compromised.\n" - " " - msgstr "" -+"\n" -+" SELinux запретил $SOURCE загружать модуль ядра.\n" -+" Для всех приложений, которым необходим такой уровень доступа,\n" -+" должна существовать отдельная политика.\n" -+" Если скомпрометированное приложение попытается изменить модуль,\n" -+" будет сгенерировано AVC.\n" -+" Это является серьёзной проблемой и может служить индикатором того, \n" -+" что система была скомпрометирована.\n" -+" " - - #: ../src/sys_module.py:46 - msgid "" -@@ -2229,7 +2399,9 @@ msgid "" - "\n" - " SELinux is preventing $SOURCE_PATH the \"sys_resource\" capability.\n" - " " --msgstr "" -+msgstr "\n" -+" SELinux запрещает возможность $SOURCE_PATH «sys_resource».\n" -+" " - - #: ../src/sys_resource.py:32 - msgid "" -@@ -2241,6 +2413,13 @@ msgid "" - "disk space, please report this as a bug.\n" - " " - msgstr "" -+"\n" -+"Ограниченные домены не должны требовать «sys_resource». Обычно это означает, " -+"что не хватает какого-либо ресурса, например, места на диске, памяти, квоты " -+"и т.д. Освободите место на диске и это \n" -+"AVC-сообщение должно исчезнуть. Если проблема сохранится после очистки " -+"диска, создайте отчет об ошибке.\n" -+" " - - #: ../src/sys_resource.py:39 - msgid "" -@@ -2293,6 +2472,16 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+"SELinux запретила действие, запрошенное $SOURCE, программой изменения\n" -+"состояния видео оборудования. Эта программа обычно выполняет небезопасные\n" -+"операции памяти, в то же время именно так поступают и вредоносные программы,\n" -+"замаскированные под vbetool.\n" -+"Эта утилита восстанавливает состояние видео при возврате системы из\n" -+"ждущего режима. Если компьютер не возобновляет работу, остаётся только\n" -+"разрешить это действие, тем самым ослабив защиту системы.\n" -+"\n" -+" " - - #: ../src/vbetool.py:45 ../src/wine.py:56 - msgid "" -@@ -2361,6 +2550,25 @@ msgid "" - "\n" - " " - msgstr "" -+"\n" -+"SELinux запретил выполнение операции, запрошенной wine-preloader, программой " -+"для запуска приложений Windows на Linux. Известно, что эта программа " -+"использует небезопасные операции с системной памятью, как и вредоносные " -+"программы, маскирующиеся под wine. Если вы\n" -+"пытаетесь запустить приложение Windows, можно либо разрешить\n" -+"данную операцию, тем самым ослабив защиту системы,\n" -+"либо отказаться от использования приложений Windows под Linux. Если же вы не " -+"пытались запустить приложение Windows, это означает, что вы атакованы одной " -+"из таких вредоносных программ или кто-то пытается использовать вашу систему.\n" -+"\n" -+"Обратитесь за более подробной информацией к статье \n" -+"\n" -+"http://wiki.winehq.org/PreloaderPageZeroProblem\n" -+"\n" -+"Там описаны другие проблемы, с которыми сталкивается программа wine из-за " -+"небезопасных операций с памятью, и возможные пути их решения.\n" -+"\n" -+" " - - #: ../src/wine.py:66 - msgid "" -diff --git a/plugins/po/sr.po b/plugins/po/sr.po -index 58cd022..8c34c0a 100644 ---- a/plugins/po/sr.po -+++ b/plugins/po/sr.po -@@ -10,11 +10,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:29-0500\n" -+"PO-Revision-Date: 2017-09-01 08:32-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Serbian (http://www.transifex.com/projects/p/fedora/language/" - "sr/)\n" -diff --git a/plugins/po/sv.po b/plugins/po/sv.po -index a8771c8..21ed877 100644 ---- a/plugins/po/sv.po -+++ b/plugins/po/sv.po -@@ -11,12 +11,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-08-26 05:10-0400\n" --"Last-Translator: Göran Uddeborg \n" -+"PO-Revision-Date: 2017-09-01 08:33-0400\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Swedish \n" - "Language: sv\n" - "Plural-Forms: nplurals=2; plural=(n != 1);\n" -diff --git a/plugins/po/ta.po b/plugins/po/ta.po -index 7fa2933..08cbb91 100644 ---- a/plugins/po/ta.po -+++ b/plugins/po/ta.po -@@ -17,11 +17,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:30-0500\n" -+"PO-Revision-Date: 2017-09-01 08:33-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Tamil (http://www.transifex.com/projects/p/fedora/language/ta/" - ")\n" -diff --git a/plugins/po/te.po b/plugins/po/te.po -index 75d905b..23a313b 100644 ---- a/plugins/po/te.po -+++ b/plugins/po/te.po -@@ -11,11 +11,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2015-02-20 02:30-0500\n" -+"PO-Revision-Date: 2017-09-01 08:33-0400\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Telugu (http://www.transifex.com/projects/p/fedora/language/" - "te/)\n" -diff --git a/plugins/po/uk.po b/plugins/po/uk.po -index 037dcd7..e2f7996 100644 ---- a/plugins/po/uk.po -+++ b/plugins/po/uk.po -@@ -11,11 +11,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-08-24 02:48-0400\n" -+"PO-Revision-Date: 2017-09-01 12:05-0400\n" - "Last-Translator: Yuri Chornoivan \n" - "Language-Team: Ukrainian (http://www.transifex.com/projects/p/fedora/" - "language/uk/)\n" -diff --git a/plugins/po/zh_CN.po b/plugins/po/zh_CN.po -index 2d03be3..ec5d0fb 100644 ---- a/plugins/po/zh_CN.po -+++ b/plugins/po/zh_CN.po -@@ -16,12 +16,12 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-08-22 04:00-0400\n" --"Last-Translator: cheng ye <18969068329@163.com>\n" -+"PO-Revision-Date: 2017-11-08 05:31-0500\n" -+"Last-Translator: Copied by Zanata \n" - "Language-Team: Chinese (China) (http://www.transifex.com/projects/p/fedora/" - "language/zh_CN/)\n" - "Language: zh-CN\n" -diff --git a/plugins/po/zh_TW.po b/plugins/po/zh_TW.po -index db1c112..7a167e8 100644 ---- a/plugins/po/zh_TW.po -+++ b/plugins/po/zh_TW.po -@@ -14,11 +14,11 @@ msgid "" - msgstr "" - "Project-Id-Version: PACKAGE VERSION\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2017-09-14 17:36+0200\n" -+"POT-Creation-Date: 2017-11-22 12:19+0100\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" --"PO-Revision-Date: 2017-09-06 01:22-0400\n" -+"PO-Revision-Date: 2017-11-08 05:31-0500\n" - "Last-Translator: Copied by Zanata \n" - "Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/fedora/" - "language/zh_TW/)\n" --- -2.15.0 - diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 1f36a6b..bf68ee1 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -5,14 +5,12 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.9 -Release: 6%{?dist} +Version: 3.3.10 +Release: 1%{?dist} License: GPLv2+ Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz -Patch1: 0001-plugins-Update-translations.patch -Patch2: 0002-plugins-Update-translations.patch BuildArch: noarch # gcc is needed only for ./configure @@ -20,7 +18,7 @@ BuildArch: noarch BuildRequires: gcc BuildRequires: perl-XML-Parser BuildRequires: intltool gettext python3-devel -Requires: setroubleshoot-server >= 3.3.13 +Requires: setroubleshoot-server >= 3.3.19 %description This package provides a set of analysis plugins for use with @@ -51,6 +49,12 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Dec 8 2018 Petr Lautrbach - 3.3.10-1 +- Handle no "allowed_target_types" properly +- bind_ports: Do not use when there are no allowed_target_types +- Fix summary and "if" text for AVCs with unknown target path +- plugins: Update translations + * Sat Jul 14 2018 Fedora Release Engineering - 3.3.9-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild diff --git a/sources b/sources index adeb8b0..9d8e3c4 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (setroubleshoot-plugins-3.3.9.tar.gz) = 8f5084f49ebb70268e14de7bed1c6706f847f3c3f0b9044ddfdd22b8fd189b2881c80bd20530167342b3bcb0963976520505351471d425228457131bf9707912 +SHA512 (setroubleshoot-plugins-3.3.10.tar.gz) = 169ca9b26fa21cc4e4fb68b23b1d05d238b72e52888376cff7f78e1e3e13ef31b78f53f4fa6a25296f1caa5cc9f0b5b163fc1edbd59584f708468ba8abfd90d1 From 11af16976e50443123ac370d2509223451ad51fb Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Mon, 28 Jan 2019 20:18:25 +0100 Subject: [PATCH 31/68] Remove obsolete Group tag References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag --- setroubleshoot-plugins.spec | 1 - 1 file changed, 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index bf68ee1..79472f5 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -8,7 +8,6 @@ Name: setroubleshoot-plugins Version: 3.3.10 Release: 1%{?dist} License: GPLv2+ -Group: Applications/System URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz BuildArch: noarch From 00e1a18fb881ac14c2e19d866b3f8cf92968843b Mon Sep 17 00:00:00 2001 From: Igor Gnatenko Date: Tue, 29 Jan 2019 05:47:30 +0100 Subject: [PATCH 32/68] Remove unneeded %clean section It is the behavior since EPEL5. Signed-off-by: Igor Gnatenko --- setroubleshoot-plugins.spec | 3 --- 1 file changed, 3 deletions(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 79472f5..d36b96c 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -40,9 +40,6 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install # compilation. %py_byte_compile %{__python3} %{buildroot}%{_datadir}/setroubleshoot/plugins -%clean -rm -rf %{buildroot} - %files -f %{name}.lang %doc %{_pkgdocdir} %{_datadir}/setroubleshoot/plugins From 841473bb17eacfec19b0e24ff1a8c7271e499f1f Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 2 Feb 2019 15:14:40 +0000 Subject: [PATCH 33/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index d36b96c..f412aa9 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.10 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -45,6 +45,9 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %{_datadir}/setroubleshoot/plugins %changelog +* Sat Feb 02 2019 Fedora Release Engineering - 3.3.10-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + * Sat Dec 8 2018 Petr Lautrbach - 3.3.10-1 - Handle no "allowed_target_types" properly - bind_ports: Do not use when there are no allowed_target_types From a6495b3bc3abe82bcabcbb6107ea0c90e760adb6 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 26 Jul 2019 23:07:36 +0000 Subject: [PATCH 34/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index f412aa9..82843b3 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.10 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -45,6 +45,9 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %{_datadir}/setroubleshoot/plugins %changelog +* Fri Jul 26 2019 Fedora Release Engineering - 3.3.10-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + * Sat Feb 02 2019 Fedora Release Engineering - 3.3.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild From e736530ddb6032596c67c89abfdf61f8456b2b92 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 30 Jan 2020 23:17:23 +0000 Subject: [PATCH 35/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 82843b3..d80478c 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.10 -Release: 3%{?dist} +Release: 4%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -45,6 +45,9 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %{_datadir}/setroubleshoot/plugins %changelog +* Thu Jan 30 2020 Fedora Release Engineering - 3.3.10-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + * Fri Jul 26 2019 Fedora Release Engineering - 3.3.10-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild From c3d50d5bd9ee3cdbab757e11cc1062e252963a35 Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Thu, 21 Nov 2019 11:09:45 +0100 Subject: [PATCH 36/68] setroubleshoot-plugins-3.3.11-1 - Add plugin which analyzes execmem denials - Add missing "If " strings - Update qemu_blk_image and qemu_file_image - Update "xen_image" plugin - Update "file" plugin - Update "missing" scripts to automake-1.15 --- .gitignore | 1 + setroubleshoot-plugins.spec | 12 ++++++++++-- sources | 2 +- 3 files changed, 12 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 073aeaa..e794404 100644 --- a/.gitignore +++ b/.gitignore @@ -120,3 +120,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.8.tar.gz /setroubleshoot-plugins-3.3.9.tar.gz /setroubleshoot-plugins-3.3.10.tar.gz +/setroubleshoot-plugins-3.3.11.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index d80478c..a622fa5 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -5,8 +5,8 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.10 -Release: 4%{?dist} +Version: 3.3.11 +Release: 1%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -45,6 +45,14 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %{_datadir}/setroubleshoot/plugins %changelog +* Thu Nov 21 2019 Vit Mojzis - 3.3.11-1 +- Add plugin which analyzes execmem denials +- Add missing "If " strings +- Update qemu_blk_image and qemu_file_image +- Update "xen_image" plugin +- Update "file" plugin +- Update "missing" scripts to automake-1.15 + * Thu Jan 30 2020 Fedora Release Engineering - 3.3.10-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild diff --git a/sources b/sources index 9d8e3c4..de60320 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (setroubleshoot-plugins-3.3.10.tar.gz) = 169ca9b26fa21cc4e4fb68b23b1d05d238b72e52888376cff7f78e1e3e13ef31b78f53f4fa6a25296f1caa5cc9f0b5b163fc1edbd59584f708468ba8abfd90d1 +SHA512 (setroubleshoot-plugins-3.3.11.tar.gz) = deacd53d25de259ca6f63f007c2ecfbb7e491991aea0acdd2904e0a8c58daea54dd10f98593f83aeb91d159e4150b10f0ecc3103679b8aa97b0e280418a249b6 From 946f50e24043cd9eb48cefc6fc686a1e9216650a Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Tue, 10 Mar 2020 09:35:05 +0100 Subject: [PATCH 37/68] tests: Add use-of-aliases-in-plugins --- .../use-of-aliases-in-plugins/runtest.sh | 50 ++++++++++++++ .../use-of-aliases-in-plugins/test_aliases.py | 65 +++++++++++++++++++ tests/tests.yml | 11 ++++ 3 files changed, 126 insertions(+) create mode 100755 tests/Regression/use-of-aliases-in-plugins/runtest.sh create mode 100755 tests/Regression/use-of-aliases-in-plugins/test_aliases.py create mode 100644 tests/tests.yml diff --git a/tests/Regression/use-of-aliases-in-plugins/runtest.sh b/tests/Regression/use-of-aliases-in-plugins/runtest.sh new file mode 100755 index 0000000..5720f99 --- /dev/null +++ b/tests/Regression/use-of-aliases-in-plugins/runtest.sh @@ -0,0 +1,50 @@ +#!/bin/bash +# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k +# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +# +# runtest.sh of /CoreOS/setroubleshoot-plugins/Regression/use-of-aliases-in-plugins +# Description: Make sure all types used in setroubleshoot plugins are +# defined in the policy and are not aliases +# Author: Vit Mojzis +# +# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ +# +# Copyright (c) 2020 Red Hat, Inc. +# +# This program is free software: you can redistribute it and/or +# modify it under the terms of the GNU General Public License as +# published by the Free Software Foundation, either version 2 of +# the License, or (at your option) any later version. +# +# This program is distributed in the hope that it will be +# useful, but WITHOUT ANY WARRANTY; without even the implied +# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR +# PURPOSE. See the GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see http://www.gnu.org/licenses/. +# +# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +# Include Beaker environment +. /usr/bin/rhts-environment.sh || exit 1 +. /usr/share/beakerlib/beakerlib.sh || exit 1 + +PACKAGE="setroubleshoot-plugins" + +rlJournalStart + rlPhaseStartSetup + rlAssertRpm ${PACKAGE} + rlRun "selinuxenabled" 0 + rlPhaseEnd + + rlPhaseStartTest "bz#1794807 - look for aliases and undefined types in plugins" + # lists all types not defined in the policy as "type_t not found" + # and all aliases as "alias_t is an alias of type_t" + # all issues are prefixed with a list of offending plugins + # returns 1 if an issue was found + rlRun "./test_aliases.py" 0 + rlPhaseEnd +rlJournalPrintText +rlJournalEnd + diff --git a/tests/Regression/use-of-aliases-in-plugins/test_aliases.py b/tests/Regression/use-of-aliases-in-plugins/test_aliases.py new file mode 100755 index 0000000..fec114e --- /dev/null +++ b/tests/Regression/use-of-aliases-in-plugins/test_aliases.py @@ -0,0 +1,65 @@ +#!/usr/bin/python3 + +# lists all types not defined in the policy as "type_t not found" +# and all aliases as "alias_t is an alias of type_t" +# all issues are prefixed with a list of offending plugins +# returns 1 if an issue was found + +import subprocess +import sepolicy +import sys +import re +from collections import defaultdict + +plugin_path = "/usr/share/setroubleshoot/plugins" +error_code = 0 + +if len(sys.argv) > 1: + plugin_path = sys.argv[1] + +try: + # search all plugin files in given location for the following pattern + # :_t + g = subprocess.check_output('grep -I [^A-Za-z_][A-Za-z][A-Za-z_]*_t[^A-Za-z_] -o {}/*.py'.format(plugin_path), + universal_newlines=True, shell=True) + lines = g.split('\n') +except: + exit(1) +# matches 2 groups: file name and type name +# ():(_t) +reg = re.compile('.*/(.+):[^A-Za-z_]([A-Za-z_]*_t)[^A-Za-z_]') +# generate a dictionary of of all type names used in setroubleshoot plugins +# where types are keys and lists of files where each type appeared are data +found = defaultdict(set) + +for l in lines: + m = reg.match(l) + + if m is None: + continue + + try: + t = m.group(2) + if "_TYPE_" in t: + continue + found[t].add(m.group(1)) + except: + # failed to match + continue + +for t in sorted(found.keys()): + try: + # try to find each type in system policy + i = next(sepolicy.info(sepolicy.TYPE, t))['name'] + if t != i: + # : alias_t is an alias of type_t + print("{}: {} is an alias of {}".format(", ".join(found[t]), t, i)) + error_code = 1 + except: + # skip types defined in selinux-policy modules that are not shipped any more + if t not in ["vbetool_t"]: + # : type_t not found + print("{}: {} not found".format(", ".join(found[t]), t)) + error_code = 1 + +exit(error_code) diff --git a/tests/tests.yml b/tests/tests.yml new file mode 100644 index 0000000..cc1af99 --- /dev/null +++ b/tests/tests.yml @@ -0,0 +1,11 @@ +- hosts: localhost + roles: + - role: standard-test-beakerlib + tags: + - classic + tests: + - Regression/use-of-aliases-in-plugins + required_packages: + - setroubleshoot-plugins + - selinux-policy-targeted + - python3-policycoreutils From 2fb3506d50f1710135cc624acdb6ad32a94952bd Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Mon, 16 Mar 2020 17:24:51 +0100 Subject: [PATCH 38/68] Fix last changelog entry date Fixes: error: %changelog not in descending chronological order --- setroubleshoot-plugins.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index a622fa5..70dd984 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -45,7 +45,7 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %{_datadir}/setroubleshoot/plugins %changelog -* Thu Nov 21 2019 Vit Mojzis - 3.3.11-1 +* Thu Jan 30 2020 Vit Mojzis - 3.3.11-1 - Add plugin which analyzes execmem denials - Add missing "If " strings - Update qemu_blk_image and qemu_file_image From aa5821aecd2658747dc45f576aa438eab505d09e Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Mon, 16 Mar 2020 17:07:09 +0100 Subject: [PATCH 39/68] setroubleshoot-plugins-3.3.12-1 - Use get_package_nvr* functions instead of get_rpm_nvr* - Update deprecated type references - Update translations --- .gitignore | 1 + setroubleshoot-plugins.spec | 12 ++++++++++-- sources | 2 +- 3 files changed, 12 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index e794404..11c7f78 100644 --- a/.gitignore +++ b/.gitignore @@ -121,3 +121,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.9.tar.gz /setroubleshoot-plugins-3.3.10.tar.gz /setroubleshoot-plugins-3.3.11.tar.gz +/setroubleshoot-plugins-3.3.12.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 70dd984..e9f63a8 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -5,11 +5,13 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.11 +Version: 3.3.12 Release: 1%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz +# git format-patch -N setroubleshoot-plugins- -- plugins +# i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done BuildArch: noarch # gcc is needed only for ./configure @@ -17,7 +19,8 @@ BuildArch: noarch BuildRequires: gcc BuildRequires: perl-XML-Parser BuildRequires: intltool gettext python3-devel -Requires: setroubleshoot-server >= 3.3.19 +# Introduction of get_package_nvr functions +Requires: setroubleshoot-server >= 3.3.23 %description This package provides a set of analysis plugins for use with @@ -45,6 +48,11 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %{_datadir}/setroubleshoot/plugins %changelog +* Tue Apr 21 2020 Vit Mojzis - 3.3.12-1 +- Use get_package_nvr* functions instead of get_rpm_nvr* +- Update deprecated type references +- Update translations + * Thu Jan 30 2020 Vit Mojzis - 3.3.11-1 - Add plugin which analyzes execmem denials - Add missing "If " strings diff --git a/sources b/sources index de60320..fbe69de 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (setroubleshoot-plugins-3.3.11.tar.gz) = deacd53d25de259ca6f63f007c2ecfbb7e491991aea0acdd2904e0a8c58daea54dd10f98593f83aeb91d159e4150b10f0ecc3103679b8aa97b0e280418a249b6 +SHA512 (setroubleshoot-plugins-3.3.12.tar.gz) = aec345a93aa7cfaea8468c72639dacb89dfc4fa9f1d2ed2e121f5ca20dfd37399877364d95cd8dd548cefcaee4ea818ae4465035a60b6ba18493eb548ef4c87e From 8516687b6ffafc71ad988e2f7b3dacbb6425da4a Mon Sep 17 00:00:00 2001 From: Tom Stellard Date: Tue, 14 Jul 2020 14:10:03 +0000 Subject: [PATCH 40/68] Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro --- setroubleshoot-plugins.spec | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index e9f63a8..d540467 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.12 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -37,7 +37,7 @@ make PYTHON=%{__python3} %install rm -rf %{buildroot} -make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install +%make_install PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} %find_lang %{name} # Manually invoke the python byte compile macro for each path that needs byte # compilation. @@ -48,6 +48,10 @@ make DESTDIR=%{buildroot} PYTHON=%{__python3} pkgdocdir=%{_pkgdocdir} install %{_datadir}/setroubleshoot/plugins %changelog +* Tue Jul 14 2020 Tom Stellard - 3.3.12-2 +- Use make macros +- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro + * Tue Apr 21 2020 Vit Mojzis - 3.3.12-1 - Use get_package_nvr* functions instead of get_rpm_nvr* - Update deprecated type references From 567e765e1f189dcb06b7a38a40618f20d12a66c0 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 29 Jul 2020 10:35:18 +0000 Subject: [PATCH 41/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index d540467..485e691 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.12 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -48,6 +48,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Wed Jul 29 2020 Fedora Release Engineering - 3.3.12-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + * Tue Jul 14 2020 Tom Stellard - 3.3.12-2 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro From 8567bb6f795a7c6fc423ec85b1919f7dea744f1b Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Mon, 14 Dec 2020 12:20:09 +0100 Subject: [PATCH 42/68] Add make to BuildRequires --- setroubleshoot-plugins.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 485e691..e4f7510 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -17,6 +17,7 @@ BuildArch: noarch # gcc is needed only for ./configure # Remove it when the build process is fixed BuildRequires: gcc +BuildRequires: make BuildRequires: perl-XML-Parser BuildRequires: intltool gettext python3-devel # Introduction of get_package_nvr functions From 81b2deb6335cd75abb65b4915c43bed4ae7e69eb Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Wed, 27 Jan 2021 20:15:30 +0000 Subject: [PATCH 43/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index e4f7510..909a19a 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.12 -Release: 3%{?dist} +Release: 4%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Wed Jan 27 2021 Fedora Release Engineering - 3.3.12-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + * Wed Jul 29 2020 Fedora Release Engineering - 3.3.12-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild From 0b9f18953a2d3bf1cb800323b523f26c9f0ab15a Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Mon, 29 Mar 2021 17:33:31 +0200 Subject: [PATCH 44/68] setroubleshoot-plugins-3.3.14-1 - Update translations --- .gitignore | 1 + setroubleshoot-plugins.spec | 7 +++++-- sources | 1 + 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 11c7f78..a58a8e6 100644 --- a/.gitignore +++ b/.gitignore @@ -122,3 +122,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.10.tar.gz /setroubleshoot-plugins-3.3.11.tar.gz /setroubleshoot-plugins-3.3.12.tar.gz +/setroubleshoot-plugins-3.3.14.tar.gz diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 909a19a..277aef5 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -5,8 +5,8 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.12 -Release: 4%{?dist} +Version: 3.3.14 +Release: 1%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Mon Mar 29 2021 Vit Mojzis - 3.3.14-1 +- Update translations + * Wed Jan 27 2021 Fedora Release Engineering - 3.3.12-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild diff --git a/sources b/sources index fbe69de..6b2fe43 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ SHA512 (setroubleshoot-plugins-3.3.12.tar.gz) = aec345a93aa7cfaea8468c72639dacb89dfc4fa9f1d2ed2e121f5ca20dfd37399877364d95cd8dd548cefcaee4ea818ae4465035a60b6ba18493eb548ef4c87e +SHA512 (setroubleshoot-plugins-3.3.14.tar.gz) = da6882a998aeade67891a722a5b94e2ba1072d9db5d73031854a2c0b51083a0eaf9519dd7987938a86c1f8d263d08882642ac447d7b4bbcd8a859db4b44d61c1 From fd9764ca644b533071fe4192095b0fc72ec01e35 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 23 Jul 2021 17:25:10 +0000 Subject: [PATCH 45/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 277aef5..e093575 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Jul 23 2021 Fedora Release Engineering - 3.3.14-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + * Mon Mar 29 2021 Vit Mojzis - 3.3.14-1 - Update translations From 9aca788f04ac91d9e271783ae38afe5e1bb674fc Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Fri, 3 Sep 2021 16:17:32 +0200 Subject: [PATCH 46/68] restorecon.py: exclude more paths It doesn't make sense to run restorecon on /sys/ /proc/ and /memfd: Resolves: rhbz#1960136 --- 0001-restorecon.py-exclude-more-paths.patch | 26 +++++++++++++++++++++ setroubleshoot-plugins.spec | 3 ++- 2 files changed, 28 insertions(+), 1 deletion(-) create mode 100644 0001-restorecon.py-exclude-more-paths.patch diff --git a/0001-restorecon.py-exclude-more-paths.patch b/0001-restorecon.py-exclude-more-paths.patch new file mode 100644 index 0000000..2189d21 --- /dev/null +++ b/0001-restorecon.py-exclude-more-paths.patch @@ -0,0 +1,26 @@ +From 0f508191647a41f92264c0c8fc877b0110bbd468 Mon Sep 17 00:00:00 2001 +From: Petr Lautrbach +Date: Tue, 10 Aug 2021 20:11:20 +0200 +Subject: [PATCH] restorecon.py: exclude more paths + +It doesn't make sense to run restorecon on /sys/ /proc/ and /memfd: +--- + src/restorecon.py | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/restorecon.py b/src/restorecon.py +index e3044c742367..9594c0d59d96 100644 +--- a/src/restorecon.py ++++ b/src/restorecon.py +@@ -39,7 +39,7 @@ def customizable(target): + + + # List of path prefixes for which this plugin is not executed +-excluded_paths = ["/sys/fs"] ++excluded_paths = ["/sys/", "/proc/", "/memfd:"] + # Test if the specified path starts with some excluded prefix + def excluded_path(target_path): + for path in excluded_paths: +-- +2.32.0 + diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index e093575..309489e 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -12,6 +12,7 @@ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz # git format-patch -N setroubleshoot-plugins- -- plugins # i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done +Patch0001: 0001-restorecon.py-exclude-more-paths.patch BuildArch: noarch # gcc is needed only for ./configure @@ -30,7 +31,7 @@ data and system data to provide user friendly reports describing how to interpret SELinux AVC denials. %prep -%autosetup -p 2 +%autosetup -p 1 %build %configure PYTHON=%{__python3} From 96233b03925dbac798f2710f33ae991bb5d3be67 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Fri, 3 Sep 2021 16:20:12 +0200 Subject: [PATCH 47/68] Drop old tarball from sources --- sources | 1 - 1 file changed, 1 deletion(-) diff --git a/sources b/sources index 6b2fe43..28a0bb9 100644 --- a/sources +++ b/sources @@ -1,2 +1 @@ -SHA512 (setroubleshoot-plugins-3.3.12.tar.gz) = aec345a93aa7cfaea8468c72639dacb89dfc4fa9f1d2ed2e121f5ca20dfd37399877364d95cd8dd548cefcaee4ea818ae4465035a60b6ba18493eb548ef4c87e SHA512 (setroubleshoot-plugins-3.3.14.tar.gz) = da6882a998aeade67891a722a5b94e2ba1072d9db5d73031854a2c0b51083a0eaf9519dd7987938a86c1f8d263d08882642ac447d7b4bbcd8a859db4b44d61c1 From 142c889cd20590a82000850f28ce6c6f4eb5f940 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Fri, 3 Sep 2021 16:22:46 +0200 Subject: [PATCH 48/68] setroubleshoot-plugins-3.3.14-3 - restorecon.py: exclude more paths (#1960136) --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 309489e..93ac068 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 2%{?dist} +Release: 3%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -50,6 +50,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Sep 3 2021 Petr Lautrbach - 3.3.14-3 +- restorecon.py: exclude more paths (#1960136) + * Fri Jul 23 2021 Fedora Release Engineering - 3.3.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild From c6ec1df399d429995a3ce35a0d24eb142419d935 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 22 Jan 2022 00:44:02 +0000 Subject: [PATCH 49/68] - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 93ac068..8a754fb 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 3%{?dist} +Release: 4%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -50,6 +50,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jan 22 2022 Fedora Release Engineering - 3.3.14-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + * Fri Sep 3 2021 Petr Lautrbach - 3.3.14-3 - restorecon.py: exclude more paths (#1960136) From e832770250ca886d899f4c6699961af29b723403 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 23 Jul 2022 08:26:03 +0000 Subject: [PATCH 50/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 8a754fb..59a4118 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 4%{?dist} +Release: 5%{?dist} License: GPLv2+ URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -50,6 +50,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jul 23 2022 Fedora Release Engineering - 3.3.14-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + * Sat Jan 22 2022 Fedora Release Engineering - 3.3.14-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild From 60ad8a1851bac73b981271005673727b36ae8bc4 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Thu, 10 Nov 2022 09:32:43 +0100 Subject: [PATCH 51/68] Migrate License tag to SPDX https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1 --- setroubleshoot-plugins.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 59a4118..545b7a1 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -7,7 +7,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 Release: 5%{?dist} -License: GPLv2+ +License: GPL-2.0-or-later URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz # git format-patch -N setroubleshoot-plugins- -- plugins From 3fdc35208b72edd47d3a321e910297fa10cec41e Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 21 Jan 2023 03:03:42 +0000 Subject: [PATCH 52/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 545b7a1..48c36a8 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 5%{?dist} +Release: 6%{?dist} License: GPL-2.0-or-later URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -50,6 +50,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jan 21 2023 Fedora Release Engineering - 3.3.14-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + * Sat Jul 23 2022 Fedora Release Engineering - 3.3.14-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild From b066bbbd7a4cda050adef9af48eaab9b77ca0c30 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 22 Jul 2023 01:28:31 +0000 Subject: [PATCH 53/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild Signed-off-by: Fedora Release Engineering --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 48c36a8..4e793ed 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 6%{?dist} +Release: 7%{?dist} License: GPL-2.0-or-later URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -50,6 +50,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jul 22 2023 Fedora Release Engineering - 3.3.14-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + * Sat Jan 21 2023 Fedora Release Engineering - 3.3.14-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild From 3e4d0a1bafb702a34ec632fdbf18c104261255db Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Wed, 26 Jul 2023 10:51:31 +0200 Subject: [PATCH 54/68] setroubleshoot-plugins-3.3.14-6 - Update generated configuration files (rhbz#2226425) - Improve disable_ipv6 plugin then_text --- ...mprove-disable_ipv6-plugin-then_text.patch | 29 + ...Update-generated-configuration-files.patch | 1036 +++++++++++++++++ setroubleshoot-plugins.spec | 8 +- 3 files changed, 1072 insertions(+), 1 deletion(-) create mode 100644 0002-Improve-disable_ipv6-plugin-then_text.patch create mode 100644 0003-Update-generated-configuration-files.patch diff --git a/0002-Improve-disable_ipv6-plugin-then_text.patch b/0002-Improve-disable_ipv6-plugin-then_text.patch new file mode 100644 index 0000000..697aabd --- /dev/null +++ b/0002-Improve-disable_ipv6-plugin-then_text.patch @@ -0,0 +1,29 @@ +From f8a5ef9b783f4be5fcb2fa711dd3b550b312a629 Mon Sep 17 00:00:00 2001 +From: Vit Mojzis +Date: Wed, 23 Nov 2022 18:25:20 +0100 +Subject: [PATCH] Improve disable_ipv6 plugin then_text +Content-type: text/plain + +Use more conscious language and be more explicit. + +Signed-off-by: Vit Mojzis +--- + src/disable_ipv6.py | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/disable_ipv6.py b/src/disable_ipv6.py +index 1c858213ddea..ca0b9cc7f49f 100644 +--- a/src/disable_ipv6.py ++++ b/src/disable_ipv6.py +@@ -38,7 +38,7 @@ Disable IPV6 properly. + fix_cmd = "" + + if_text = _("If you want to disable IPV6 on this machine") +- then_text = _("you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not blacklist the module'") ++ then_text = _("you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not disable the ipv6 kernel module'") + do_text = _("""Add + net.ipv6.conf.all.disable_ipv6 = 1 + to /etc/sysctl.conf +-- +2.41.0 + diff --git a/0003-Update-generated-configuration-files.patch b/0003-Update-generated-configuration-files.patch new file mode 100644 index 0000000..75b7aed --- /dev/null +++ b/0003-Update-generated-configuration-files.patch @@ -0,0 +1,1036 @@ +From 9e54f6a661330070ad25a0e86f197b3530bfc5c7 Mon Sep 17 00:00:00 2001 +From: Petr Lautrbach +Date: Wed, 26 Jul 2023 10:30:07 +0200 +Subject: [PATCH] Update generated configuration files +Content-type: text/plain + +Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2226425 + + Traceback (most recent call last): + File "", line 2, in + ModuleNotFoundError: No module named 'imp' + make[2]: *** [Makefile:372: install-pluginPYTHON] Error 1 +--- + INSTALL | 320 ++++++++++++++++++++++++++--------------------------- + install-sh | 174 ++++++++++++++++++----------- + missing | 16 +-- + py-compile | 59 ++++++---- + 4 files changed, 313 insertions(+), 256 deletions(-) + +diff --git a/INSTALL b/INSTALL +index 2099840756e6..e82fd21de2ea 100644 +--- a/INSTALL ++++ b/INSTALL +@@ -1,8 +1,8 @@ + Installation Instructions + ************************* + +-Copyright (C) 1994-1996, 1999-2002, 2004-2013 Free Software Foundation, +-Inc. ++ Copyright (C) 1994-1996, 1999-2002, 2004-2017, 2020-2021 Free ++Software Foundation, Inc. + + Copying and distribution of this file, with or without modification, + are permitted in any medium without royalty provided the copyright +@@ -12,97 +12,96 @@ without warranty of any kind. + Basic Installation + ================== + +- Briefly, the shell command `./configure && make && make install' ++ Briefly, the shell command './configure && make && make install' + should configure, build, and install this package. The following +-more-detailed instructions are generic; see the `README' file for ++more-detailed instructions are generic; see the 'README' file for + instructions specific to this package. Some packages provide this +-`INSTALL' file but do not implement all of the features documented ++'INSTALL' file but do not implement all of the features documented + below. The lack of an optional feature in a given package is not + necessarily a bug. More recommendations for GNU packages can be found + in *note Makefile Conventions: (standards)Makefile Conventions. + +- The `configure' shell script attempts to guess correct values for ++ The 'configure' shell script attempts to guess correct values for + various system-dependent variables used during compilation. It uses +-those values to create a `Makefile' in each directory of the package. +-It may also create one or more `.h' files containing system-dependent +-definitions. Finally, it creates a shell script `config.status' that ++those values to create a 'Makefile' in each directory of the package. ++It may also create one or more '.h' files containing system-dependent ++definitions. Finally, it creates a shell script 'config.status' that + you can run in the future to recreate the current configuration, and a +-file `config.log' containing compiler output (useful mainly for +-debugging `configure'). ++file 'config.log' containing compiler output (useful mainly for ++debugging 'configure'). + +- It can also use an optional file (typically called `config.cache' +-and enabled with `--cache-file=config.cache' or simply `-C') that saves +-the results of its tests to speed up reconfiguring. Caching is +-disabled by default to prevent problems with accidental use of stale +-cache files. ++ It can also use an optional file (typically called 'config.cache' and ++enabled with '--cache-file=config.cache' or simply '-C') that saves the ++results of its tests to speed up reconfiguring. Caching is disabled by ++default to prevent problems with accidental use of stale cache files. + + If you need to do unusual things to compile the package, please try +-to figure out how `configure' could check whether to do them, and mail +-diffs or instructions to the address given in the `README' so they can ++to figure out how 'configure' could check whether to do them, and mail ++diffs or instructions to the address given in the 'README' so they can + be considered for the next release. If you are using the cache, and at +-some point `config.cache' contains results you don't want to keep, you ++some point 'config.cache' contains results you don't want to keep, you + may remove or edit it. + +- The file `configure.ac' (or `configure.in') is used to create +-`configure' by a program called `autoconf'. You need `configure.ac' if +-you want to change it or regenerate `configure' using a newer version +-of `autoconf'. ++ The file 'configure.ac' (or 'configure.in') is used to create ++'configure' by a program called 'autoconf'. You need 'configure.ac' if ++you want to change it or regenerate 'configure' using a newer version of ++'autoconf'. + + The simplest way to compile this package is: + +- 1. `cd' to the directory containing the package's source code and type +- `./configure' to configure the package for your system. ++ 1. 'cd' to the directory containing the package's source code and type ++ './configure' to configure the package for your system. + +- Running `configure' might take a while. While running, it prints ++ Running 'configure' might take a while. While running, it prints + some messages telling which features it is checking for. + +- 2. Type `make' to compile the package. ++ 2. Type 'make' to compile the package. + +- 3. Optionally, type `make check' to run any self-tests that come with ++ 3. Optionally, type 'make check' to run any self-tests that come with + the package, generally using the just-built uninstalled binaries. + +- 4. Type `make install' to install the programs and any data files and ++ 4. Type 'make install' to install the programs and any data files and + documentation. When installing into a prefix owned by root, it is + recommended that the package be configured and built as a regular +- user, and only the `make install' phase executed with root ++ user, and only the 'make install' phase executed with root + privileges. + +- 5. Optionally, type `make installcheck' to repeat any self-tests, but ++ 5. Optionally, type 'make installcheck' to repeat any self-tests, but + this time using the binaries in their final installed location. + This target does not install anything. Running this target as a +- regular user, particularly if the prior `make install' required ++ regular user, particularly if the prior 'make install' required + root privileges, verifies that the installation completed + correctly. + + 6. You can remove the program binaries and object files from the +- source code directory by typing `make clean'. To also remove the +- files that `configure' created (so you can compile the package for +- a different kind of computer), type `make distclean'. There is +- also a `make maintainer-clean' target, but that is intended mainly ++ source code directory by typing 'make clean'. To also remove the ++ files that 'configure' created (so you can compile the package for ++ a different kind of computer), type 'make distclean'. There is ++ also a 'make maintainer-clean' target, but that is intended mainly + for the package's developers. If you use it, you may have to get + all sorts of other programs in order to regenerate files that came + with the distribution. + +- 7. Often, you can also type `make uninstall' to remove the installed ++ 7. Often, you can also type 'make uninstall' to remove the installed + files again. In practice, not all packages have tested that + uninstallation works correctly, even though it is required by the + GNU Coding Standards. + +- 8. Some packages, particularly those that use Automake, provide `make ++ 8. Some packages, particularly those that use Automake, provide 'make + distcheck', which can by used by developers to test that all other +- targets like `make install' and `make uninstall' work correctly. ++ targets like 'make install' and 'make uninstall' work correctly. + This target is generally not run by end users. + + Compilers and Options + ===================== + + Some systems require unusual options for compilation or linking that +-the `configure' script does not know about. Run `./configure --help' ++the 'configure' script does not know about. Run './configure --help' + for details on some of the pertinent environment variables. + +- You can give `configure' initial values for configuration parameters +-by setting variables in the command line or in the environment. Here +-is an example: ++ You can give 'configure' initial values for configuration parameters ++by setting variables in the command line or in the environment. Here is ++an example: + + ./configure CC=c99 CFLAGS=-g LIBS=-lposix + +@@ -113,21 +112,21 @@ Compiling For Multiple Architectures + + You can compile the package for more than one kind of computer at the + same time, by placing the object files for each architecture in their +-own directory. To do this, you can use GNU `make'. `cd' to the ++own directory. To do this, you can use GNU 'make'. 'cd' to the + directory where you want the object files and executables to go and run +-the `configure' script. `configure' automatically checks for the +-source code in the directory that `configure' is in and in `..'. This +-is known as a "VPATH" build. ++the 'configure' script. 'configure' automatically checks for the source ++code in the directory that 'configure' is in and in '..'. This is known ++as a "VPATH" build. + +- With a non-GNU `make', it is safer to compile the package for one ++ With a non-GNU 'make', it is safer to compile the package for one + architecture at a time in the source code directory. After you have +-installed the package for one architecture, use `make distclean' before ++installed the package for one architecture, use 'make distclean' before + reconfiguring for another architecture. + + On MacOS X 10.5 and later systems, you can create libraries and + executables that work on multiple system types--known as "fat" or +-"universal" binaries--by specifying multiple `-arch' options to the +-compiler but only a single `-arch' option to the preprocessor. Like ++"universal" binaries--by specifying multiple '-arch' options to the ++compiler but only a single '-arch' option to the preprocessor. Like + this: + + ./configure CC="gcc -arch i386 -arch x86_64 -arch ppc -arch ppc64" \ +@@ -136,105 +135,104 @@ this: + + This is not guaranteed to produce working output in all cases, you + may have to build one architecture at a time and combine the results +-using the `lipo' tool if you have problems. ++using the 'lipo' tool if you have problems. + + Installation Names + ================== + +- By default, `make install' installs the package's commands under +-`/usr/local/bin', include files under `/usr/local/include', etc. You +-can specify an installation prefix other than `/usr/local' by giving +-`configure' the option `--prefix=PREFIX', where PREFIX must be an ++ By default, 'make install' installs the package's commands under ++'/usr/local/bin', include files under '/usr/local/include', etc. You ++can specify an installation prefix other than '/usr/local' by giving ++'configure' the option '--prefix=PREFIX', where PREFIX must be an + absolute file name. + + You can specify separate installation prefixes for + architecture-specific files and architecture-independent files. If you +-pass the option `--exec-prefix=PREFIX' to `configure', the package uses ++pass the option '--exec-prefix=PREFIX' to 'configure', the package uses + PREFIX as the prefix for installing programs and libraries. + Documentation and other data files still use the regular prefix. + + In addition, if you use an unusual directory layout you can give +-options like `--bindir=DIR' to specify different values for particular +-kinds of files. Run `configure --help' for a list of the directories +-you can set and what kinds of files go in them. In general, the +-default for these options is expressed in terms of `${prefix}', so that +-specifying just `--prefix' will affect all of the other directory ++options like '--bindir=DIR' to specify different values for particular ++kinds of files. Run 'configure --help' for a list of the directories ++you can set and what kinds of files go in them. In general, the default ++for these options is expressed in terms of '${prefix}', so that ++specifying just '--prefix' will affect all of the other directory + specifications that were not explicitly provided. + + The most portable way to affect installation locations is to pass the +-correct locations to `configure'; however, many packages provide one or ++correct locations to 'configure'; however, many packages provide one or + both of the following shortcuts of passing variable assignments to the +-`make install' command line to change installation locations without ++'make install' command line to change installation locations without + having to reconfigure or recompile. + + The first method involves providing an override variable for each +-affected directory. For example, `make install ++affected directory. For example, 'make install + prefix=/alternate/directory' will choose an alternate location for all + directory configuration variables that were expressed in terms of +-`${prefix}'. Any directories that were specified during `configure', +-but not in terms of `${prefix}', must each be overridden at install +-time for the entire installation to be relocated. The approach of +-makefile variable overrides for each directory variable is required by +-the GNU Coding Standards, and ideally causes no recompilation. +-However, some platforms have known limitations with the semantics of +-shared libraries that end up requiring recompilation when using this +-method, particularly noticeable in packages that use GNU Libtool. +- +- The second method involves providing the `DESTDIR' variable. For +-example, `make install DESTDIR=/alternate/directory' will prepend +-`/alternate/directory' before all installation names. The approach of +-`DESTDIR' overrides is not required by the GNU Coding Standards, and ++'${prefix}'. Any directories that were specified during 'configure', ++but not in terms of '${prefix}', must each be overridden at install time ++for the entire installation to be relocated. The approach of makefile ++variable overrides for each directory variable is required by the GNU ++Coding Standards, and ideally causes no recompilation. However, some ++platforms have known limitations with the semantics of shared libraries ++that end up requiring recompilation when using this method, particularly ++noticeable in packages that use GNU Libtool. ++ ++ The second method involves providing the 'DESTDIR' variable. For ++example, 'make install DESTDIR=/alternate/directory' will prepend ++'/alternate/directory' before all installation names. The approach of ++'DESTDIR' overrides is not required by the GNU Coding Standards, and + does not work on platforms that have drive letters. On the other hand, + it does better at avoiding recompilation issues, and works well even +-when some directory options were not specified in terms of `${prefix}' +-at `configure' time. ++when some directory options were not specified in terms of '${prefix}' ++at 'configure' time. + + Optional Features + ================= + + If the package supports it, you can cause programs to be installed +-with an extra prefix or suffix on their names by giving `configure' the +-option `--program-prefix=PREFIX' or `--program-suffix=SUFFIX'. +- +- Some packages pay attention to `--enable-FEATURE' options to +-`configure', where FEATURE indicates an optional part of the package. +-They may also pay attention to `--with-PACKAGE' options, where PACKAGE +-is something like `gnu-as' or `x' (for the X Window System). The +-`README' should mention any `--enable-' and `--with-' options that the ++with an extra prefix or suffix on their names by giving 'configure' the ++option '--program-prefix=PREFIX' or '--program-suffix=SUFFIX'. ++ ++ Some packages pay attention to '--enable-FEATURE' options to ++'configure', where FEATURE indicates an optional part of the package. ++They may also pay attention to '--with-PACKAGE' options, where PACKAGE ++is something like 'gnu-as' or 'x' (for the X Window System). The ++'README' should mention any '--enable-' and '--with-' options that the + package recognizes. + +- For packages that use the X Window System, `configure' can usually ++ For packages that use the X Window System, 'configure' can usually + find the X include and library files automatically, but if it doesn't, +-you can use the `configure' options `--x-includes=DIR' and +-`--x-libraries=DIR' to specify their locations. ++you can use the 'configure' options '--x-includes=DIR' and ++'--x-libraries=DIR' to specify their locations. + + Some packages offer the ability to configure how verbose the +-execution of `make' will be. For these packages, running `./configure ++execution of 'make' will be. For these packages, running './configure + --enable-silent-rules' sets the default to minimal output, which can be +-overridden with `make V=1'; while running `./configure ++overridden with 'make V=1'; while running './configure + --disable-silent-rules' sets the default to verbose, which can be +-overridden with `make V=0'. ++overridden with 'make V=0'. + + Particular systems + ================== + +- On HP-UX, the default C compiler is not ANSI C compatible. If GNU +-CC is not installed, it is recommended to use the following options in ++ On HP-UX, the default C compiler is not ANSI C compatible. If GNU CC ++is not installed, it is recommended to use the following options in + order to use an ANSI C compiler: + + ./configure CC="cc -Ae -D_XOPEN_SOURCE=500" + + and if that doesn't work, install pre-built binaries of GCC for HP-UX. + +- HP-UX `make' updates targets which have the same time stamps as +-their prerequisites, which makes it generally unusable when shipped +-generated files such as `configure' are involved. Use GNU `make' +-instead. ++ HP-UX 'make' updates targets which have the same timestamps as their ++prerequisites, which makes it generally unusable when shipped generated ++files such as 'configure' are involved. Use GNU 'make' instead. + + On OSF/1 a.k.a. Tru64, some versions of the default C compiler cannot +-parse its `' header file. The option `-nodtk' can be used as +-a workaround. If GNU CC is not installed, it is therefore recommended +-to try ++parse its '' header file. The option '-nodtk' can be used as a ++workaround. If GNU CC is not installed, it is therefore recommended to ++try + + ./configure CC="cc" + +@@ -242,26 +240,26 @@ and if that doesn't work, try + + ./configure CC="cc -nodtk" + +- On Solaris, don't put `/usr/ucb' early in your `PATH'. This ++ On Solaris, don't put '/usr/ucb' early in your 'PATH'. This + directory contains several dysfunctional programs; working variants of +-these programs are available in `/usr/bin'. So, if you need `/usr/ucb' +-in your `PATH', put it _after_ `/usr/bin'. ++these programs are available in '/usr/bin'. So, if you need '/usr/ucb' ++in your 'PATH', put it _after_ '/usr/bin'. + +- On Haiku, software installed for all users goes in `/boot/common', +-not `/usr/local'. It is recommended to use the following options: ++ On Haiku, software installed for all users goes in '/boot/common', ++not '/usr/local'. It is recommended to use the following options: + + ./configure --prefix=/boot/common + + Specifying the System Type + ========================== + +- There may be some features `configure' cannot figure out ++ There may be some features 'configure' cannot figure out + automatically, but needs to determine by the type of machine the package + will run on. Usually, assuming the package is built to be run on the +-_same_ architectures, `configure' can figure that out, but if it prints ++_same_ architectures, 'configure' can figure that out, but if it prints + a message saying it cannot guess the machine type, give it the +-`--build=TYPE' option. TYPE can either be a short name for the system +-type, such as `sun4', or a canonical name which has the form: ++'--build=TYPE' option. TYPE can either be a short name for the system ++type, such as 'sun4', or a canonical name which has the form: + + CPU-COMPANY-SYSTEM + +@@ -270,101 +268,101 @@ where SYSTEM can have one of these forms: + OS + KERNEL-OS + +- See the file `config.sub' for the possible values of each field. If +-`config.sub' isn't included in this package, then this package doesn't ++ See the file 'config.sub' for the possible values of each field. If ++'config.sub' isn't included in this package, then this package doesn't + need to know the machine type. + + If you are _building_ compiler tools for cross-compiling, you should +-use the option `--target=TYPE' to select the type of system they will ++use the option '--target=TYPE' to select the type of system they will + produce code for. + + If you want to _use_ a cross compiler, that generates code for a + platform different from the build platform, you should specify the + "host" platform (i.e., that on which the generated programs will +-eventually be run) with `--host=TYPE'. ++eventually be run) with '--host=TYPE'. + + Sharing Defaults + ================ + +- If you want to set default values for `configure' scripts to share, +-you can create a site shell script called `config.site' that gives +-default values for variables like `CC', `cache_file', and `prefix'. +-`configure' looks for `PREFIX/share/config.site' if it exists, then +-`PREFIX/etc/config.site' if it exists. Or, you can set the +-`CONFIG_SITE' environment variable to the location of the site script. +-A warning: not all `configure' scripts look for a site script. ++ If you want to set default values for 'configure' scripts to share, ++you can create a site shell script called 'config.site' that gives ++default values for variables like 'CC', 'cache_file', and 'prefix'. ++'configure' looks for 'PREFIX/share/config.site' if it exists, then ++'PREFIX/etc/config.site' if it exists. Or, you can set the ++'CONFIG_SITE' environment variable to the location of the site script. ++A warning: not all 'configure' scripts look for a site script. + + Defining Variables + ================== + + Variables not defined in a site shell script can be set in the +-environment passed to `configure'. However, some packages may run ++environment passed to 'configure'. However, some packages may run + configure again during the build, and the customized values of these + variables may be lost. In order to avoid this problem, you should set +-them in the `configure' command line, using `VAR=value'. For example: ++them in the 'configure' command line, using 'VAR=value'. For example: + + ./configure CC=/usr/local2/bin/gcc + +-causes the specified `gcc' to be used as the C compiler (unless it is ++causes the specified 'gcc' to be used as the C compiler (unless it is + overridden in the site shell script). + +-Unfortunately, this technique does not work for `CONFIG_SHELL' due to +-an Autoconf limitation. Until the limitation is lifted, you can use +-this workaround: ++Unfortunately, this technique does not work for 'CONFIG_SHELL' due to an ++Autoconf limitation. Until the limitation is lifted, you can use this ++workaround: + + CONFIG_SHELL=/bin/bash ./configure CONFIG_SHELL=/bin/bash + +-`configure' Invocation ++'configure' Invocation + ====================== + +- `configure' recognizes the following options to control how it ++ 'configure' recognizes the following options to control how it + operates. + +-`--help' +-`-h' +- Print a summary of all of the options to `configure', and exit. ++'--help' ++'-h' ++ Print a summary of all of the options to 'configure', and exit. + +-`--help=short' +-`--help=recursive' ++'--help=short' ++'--help=recursive' + Print a summary of the options unique to this package's +- `configure', and exit. The `short' variant lists options used +- only in the top level, while the `recursive' variant lists options +- also present in any nested packages. ++ 'configure', and exit. The 'short' variant lists options used only ++ in the top level, while the 'recursive' variant lists options also ++ present in any nested packages. + +-`--version' +-`-V' +- Print the version of Autoconf used to generate the `configure' ++'--version' ++'-V' ++ Print the version of Autoconf used to generate the 'configure' + script, and exit. + +-`--cache-file=FILE' ++'--cache-file=FILE' + Enable the cache: use and save the results of the tests in FILE, +- traditionally `config.cache'. FILE defaults to `/dev/null' to ++ traditionally 'config.cache'. FILE defaults to '/dev/null' to + disable caching. + +-`--config-cache' +-`-C' +- Alias for `--cache-file=config.cache'. ++'--config-cache' ++'-C' ++ Alias for '--cache-file=config.cache'. + +-`--quiet' +-`--silent' +-`-q' ++'--quiet' ++'--silent' ++'-q' + Do not print messages saying which checks are being made. To +- suppress all normal output, redirect it to `/dev/null' (any error ++ suppress all normal output, redirect it to '/dev/null' (any error + messages will still be shown). + +-`--srcdir=DIR' ++'--srcdir=DIR' + Look for the package's source code in directory DIR. Usually +- `configure' can determine that directory automatically. ++ 'configure' can determine that directory automatically. + +-`--prefix=DIR' +- Use DIR as the installation prefix. *note Installation Names:: +- for more details, including other options available for fine-tuning +- the installation locations. ++'--prefix=DIR' ++ Use DIR as the installation prefix. *note Installation Names:: for ++ more details, including other options available for fine-tuning the ++ installation locations. + +-`--no-create' +-`-n' ++'--no-create' ++'-n' + Run the configure checks, but stop before creating any output + files. + +-`configure' also accepts some other, not widely useful, options. Run +-`configure --help' for more details. ++'configure' also accepts some other, not widely useful, options. Run ++'configure --help' for more details. +diff --git a/install-sh b/install-sh +index 0b0fdcbba69a..ec298b537402 100755 +--- a/install-sh ++++ b/install-sh +@@ -1,7 +1,7 @@ + #!/bin/sh + # install - install a program, script, or datafile + +-scriptversion=2013-12-25.23; # UTC ++scriptversion=2020-11-14.01; # UTC + + # This originates from X11R5 (mit/util/scripts/install.sh), which was + # later released in X11R6 (xc/config/util/install.sh) with the +@@ -69,6 +69,11 @@ posix_mkdir= + # Desired mode of installed file. + mode=0755 + ++# Create dirs (including intermediate dirs) using mode 755. ++# This is like GNU 'install' as of coreutils 8.32 (2020). ++mkdir_umask=22 ++ ++backupsuffix= + chgrpcmd= + chmodcmd=$chmodprog + chowncmd= +@@ -99,18 +104,28 @@ Options: + --version display version info and exit. + + -c (ignored) +- -C install only if different (preserve the last data modification time) ++ -C install only if different (preserve data modification time) + -d create directories instead of installing files. + -g GROUP $chgrpprog installed files to GROUP. + -m MODE $chmodprog installed files to MODE. + -o USER $chownprog installed files to USER. ++ -p pass -p to $cpprog. + -s $stripprog installed files. ++ -S SUFFIX attempt to back up existing files, with suffix SUFFIX. + -t DIRECTORY install into DIRECTORY. + -T report an error if DSTFILE is a directory. + + Environment variables override the default commands: + CHGRPPROG CHMODPROG CHOWNPROG CMPPROG CPPROG MKDIRPROG MVPROG + RMPROG STRIPPROG ++ ++By default, rm is invoked with -f; when overridden with RMPROG, ++it's up to you to specify -f if you want it. ++ ++If -S is not specified, no backups are attempted. ++ ++Email bug reports to bug-automake@gnu.org. ++Automake home page: https://www.gnu.org/software/automake/ + " + + while test $# -ne 0; do +@@ -137,8 +152,13 @@ while test $# -ne 0; do + -o) chowncmd="$chownprog $2" + shift;; + ++ -p) cpprog="$cpprog -p";; ++ + -s) stripcmd=$stripprog;; + ++ -S) backupsuffix="$2" ++ shift;; ++ + -t) + is_target_a_directory=always + dst_arg=$2 +@@ -255,6 +275,10 @@ do + dstdir=$dst + test -d "$dstdir" + dstdir_status=$? ++ # Don't chown directories that already exist. ++ if test $dstdir_status = 0; then ++ chowncmd="" ++ fi + else + + # Waiting for this to be detected by the "$cpprog $src $dsttmp" command +@@ -271,15 +295,18 @@ do + fi + dst=$dst_arg + +- # If destination is a directory, append the input filename; won't work +- # if double slashes aren't ignored. ++ # If destination is a directory, append the input filename. + if test -d "$dst"; then + if test "$is_target_a_directory" = never; then + echo "$0: $dst_arg: Is a directory" >&2 + exit 1 + fi + dstdir=$dst +- dst=$dstdir/`basename "$src"` ++ dstbase=`basename "$src"` ++ case $dst in ++ */) dst=$dst$dstbase;; ++ *) dst=$dst/$dstbase;; ++ esac + dstdir_status=0 + else + dstdir=`dirname "$dst"` +@@ -288,27 +315,16 @@ do + fi + fi + ++ case $dstdir in ++ */) dstdirslash=$dstdir;; ++ *) dstdirslash=$dstdir/;; ++ esac ++ + obsolete_mkdir_used=false + + if test $dstdir_status != 0; then + case $posix_mkdir in + '') +- # Create intermediate dirs using mode 755 as modified by the umask. +- # This is like FreeBSD 'install' as of 1997-10-28. +- umask=`umask` +- case $stripcmd.$umask in +- # Optimize common cases. +- *[2367][2367]) mkdir_umask=$umask;; +- .*0[02][02] | .[02][02] | .[02]) mkdir_umask=22;; +- +- *[0-7]) +- mkdir_umask=`expr $umask + 22 \ +- - $umask % 100 % 40 + $umask % 20 \ +- - $umask % 10 % 4 + $umask % 2 +- `;; +- *) mkdir_umask=$umask,go-w;; +- esac +- + # With -d, create the new directory with the user-specified mode. + # Otherwise, rely on $mkdir_umask. + if test -n "$dir_arg"; then +@@ -318,43 +334,49 @@ do + fi + + posix_mkdir=false +- case $umask in +- *[123567][0-7][0-7]) +- # POSIX mkdir -p sets u+wx bits regardless of umask, which +- # is incompatible with FreeBSD 'install' when (umask & 300) != 0. +- ;; +- *) +- tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$ +- trap 'ret=$?; rmdir "$tmpdir/d" "$tmpdir" 2>/dev/null; exit $ret' 0 +- +- if (umask $mkdir_umask && +- exec $mkdirprog $mkdir_mode -p -- "$tmpdir/d") >/dev/null 2>&1 +- then +- if test -z "$dir_arg" || { +- # Check for POSIX incompatibilities with -m. +- # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or +- # other-writable bit of parent directory when it shouldn't. +- # FreeBSD 6.1 mkdir -m -p sets mode of existing directory. +- ls_ld_tmpdir=`ls -ld "$tmpdir"` +- case $ls_ld_tmpdir in +- d????-?r-*) different_mode=700;; +- d????-?--*) different_mode=755;; +- *) false;; +- esac && +- $mkdirprog -m$different_mode -p -- "$tmpdir" && { +- ls_ld_tmpdir_1=`ls -ld "$tmpdir"` +- test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1" +- } +- } +- then posix_mkdir=: +- fi +- rmdir "$tmpdir/d" "$tmpdir" +- else +- # Remove any dirs left behind by ancient mkdir implementations. +- rmdir ./$mkdir_mode ./-p ./-- 2>/dev/null +- fi +- trap '' 0;; +- esac;; ++ # The $RANDOM variable is not portable (e.g., dash). Use it ++ # here however when possible just to lower collision chance. ++ tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$ ++ ++ trap ' ++ ret=$? ++ rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" 2>/dev/null ++ exit $ret ++ ' 0 ++ ++ # Because "mkdir -p" follows existing symlinks and we likely work ++ # directly in world-writeable /tmp, make sure that the '$tmpdir' ++ # directory is successfully created first before we actually test ++ # 'mkdir -p'. ++ if (umask $mkdir_umask && ++ $mkdirprog $mkdir_mode "$tmpdir" && ++ exec $mkdirprog $mkdir_mode -p -- "$tmpdir/a/b") >/dev/null 2>&1 ++ then ++ if test -z "$dir_arg" || { ++ # Check for POSIX incompatibilities with -m. ++ # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or ++ # other-writable bit of parent directory when it shouldn't. ++ # FreeBSD 6.1 mkdir -m -p sets mode of existing directory. ++ test_tmpdir="$tmpdir/a" ++ ls_ld_tmpdir=`ls -ld "$test_tmpdir"` ++ case $ls_ld_tmpdir in ++ d????-?r-*) different_mode=700;; ++ d????-?--*) different_mode=755;; ++ *) false;; ++ esac && ++ $mkdirprog -m$different_mode -p -- "$test_tmpdir" && { ++ ls_ld_tmpdir_1=`ls -ld "$test_tmpdir"` ++ test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1" ++ } ++ } ++ then posix_mkdir=: ++ fi ++ rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" ++ else ++ # Remove any dirs left behind by ancient mkdir implementations. ++ rmdir ./$mkdir_mode ./-p ./-- "$tmpdir" 2>/dev/null ++ fi ++ trap '' 0;; + esac + + if +@@ -365,7 +387,7 @@ do + then : + else + +- # The umask is ridiculous, or mkdir does not conform to POSIX, ++ # mkdir does not conform to POSIX, + # or it failed possibly due to a race condition. Create the + # directory the slow way, step by step, checking for races as we go. + +@@ -394,7 +416,7 @@ do + prefixes= + else + if $posix_mkdir; then +- (umask=$mkdir_umask && ++ (umask $mkdir_umask && + $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir") && break + # Don't fail if two instances are running concurrently. + test -d "$prefix" || exit 1 +@@ -427,14 +449,25 @@ do + else + + # Make a couple of temp file names in the proper directory. +- dsttmp=$dstdir/_inst.$$_ +- rmtmp=$dstdir/_rm.$$_ ++ dsttmp=${dstdirslash}_inst.$$_ ++ rmtmp=${dstdirslash}_rm.$$_ + + # Trap to clean up those temp files at exit. + trap 'ret=$?; rm -f "$dsttmp" "$rmtmp" && exit $ret' 0 + + # Copy the file name to the temp name. +- (umask $cp_umask && $doit_exec $cpprog "$src" "$dsttmp") && ++ (umask $cp_umask && ++ { test -z "$stripcmd" || { ++ # Create $dsttmp read-write so that cp doesn't create it read-only, ++ # which would cause strip to fail. ++ if test -z "$doit"; then ++ : >"$dsttmp" # No need to fork-exec 'touch'. ++ else ++ $doit touch "$dsttmp" ++ fi ++ } ++ } && ++ $doit_exec $cpprog "$src" "$dsttmp") && + + # and set any options; do chmod last to preserve setuid bits. + # +@@ -460,6 +493,13 @@ do + then + rm -f "$dsttmp" + else ++ # If $backupsuffix is set, and the file being installed ++ # already exists, attempt a backup. Don't worry if it fails, ++ # e.g., if mv doesn't support -f. ++ if test -n "$backupsuffix" && test -f "$dst"; then ++ $doit $mvcmd -f "$dst" "$dst$backupsuffix" 2>/dev/null ++ fi ++ + # Rename the file to the real destination. + $doit $mvcmd -f "$dsttmp" "$dst" 2>/dev/null || + +@@ -474,9 +514,9 @@ do + # file should still install successfully. + { + test ! -f "$dst" || +- $doit $rmcmd -f "$dst" 2>/dev/null || ++ $doit $rmcmd "$dst" 2>/dev/null || + { $doit $mvcmd -f "$dst" "$rmtmp" 2>/dev/null && +- { $doit $rmcmd -f "$rmtmp" 2>/dev/null; :; } ++ { $doit $rmcmd "$rmtmp" 2>/dev/null; :; } + } || + { echo "$0: cannot unlink or rename $dst" >&2 + (exit 1); exit 1 +@@ -493,9 +533,9 @@ do + done + + # Local variables: +-# eval: (add-hook 'write-file-hooks 'time-stamp) ++# eval: (add-hook 'before-save-hook 'time-stamp) + # time-stamp-start: "scriptversion=" + # time-stamp-format: "%:y-%02m-%02d.%02H" +-# time-stamp-time-zone: "UTC" ++# time-stamp-time-zone: "UTC0" + # time-stamp-end: "; # UTC" + # End: +diff --git a/missing b/missing +index b7e571efa44e..1fe1611f1851 100755 +--- a/missing ++++ b/missing +@@ -1,9 +1,9 @@ +-#!/bin/sh ++#! /bin/sh + # Common wrapper for a few potentially missing GNU programs. + +-scriptversion=2016-01-11.22; # UTC ++scriptversion=2018-03-07.03; # UTC + +-# Copyright (C) 1996-2017 Free Software Foundation, Inc. ++# Copyright (C) 1996-2021 Free Software Foundation, Inc. + # Originally written by Fran,cois Pinard , 1996. + + # This program is free software; you can redistribute it and/or modify +@@ -17,7 +17,7 @@ scriptversion=2016-01-11.22; # UTC + # GNU General Public License for more details. + + # You should have received a copy of the GNU General Public License +-# along with this program. If not, see . ++# along with this program. If not, see . + + # As a special exception to the GNU General Public License, if you + # distribute this file as part of a program that contains a +@@ -101,9 +101,9 @@ else + exit $st + fi + +-perl_URL=http://www.perl.org/ +-flex_URL=http://flex.sourceforge.net/ +-gnu_software_URL=http://www.gnu.org/software ++perl_URL=https://www.perl.org/ ++flex_URL=https://github.com/westes/flex ++gnu_software_URL=https://www.gnu.org/software + + program_details () + { +@@ -207,7 +207,7 @@ give_advice "$1" | sed -e '1s/^/WARNING: /' \ + exit $st + + # Local variables: +-# eval: (add-hook 'write-file-hooks 'time-stamp) ++# eval: (add-hook 'before-save-hook 'time-stamp) + # time-stamp-start: "scriptversion=" + # time-stamp-format: "%:y-%02m-%02d.%02H" + # time-stamp-time-zone: "UTC0" +diff --git a/py-compile b/py-compile +index bc2039140b6c..81b122b0a546 100755 +--- a/py-compile ++++ b/py-compile +@@ -1,9 +1,9 @@ + #!/bin/sh + # py-compile - Compile a Python program + +-scriptversion=2011-06-08.12; # UTC ++scriptversion=2021-02-27.01; # UTC + +-# Copyright (C) 2000-2014 Free Software Foundation, Inc. ++# Copyright (C) 2000-2021 Free Software Foundation, Inc. + + # This program is free software; you can redistribute it and/or modify + # it under the terms of the GNU General Public License as published by +@@ -16,7 +16,7 @@ scriptversion=2011-06-08.12; # UTC + # GNU General Public License for more details. + + # You should have received a copy of the GNU General Public License +-# along with this program. If not, see . ++# along with this program. If not, see . + + # As a special exception to the GNU General Public License, if you + # distribute this file as part of a program that contains a +@@ -27,7 +27,7 @@ scriptversion=2011-06-08.12; # UTC + # bugs to or send patches to + # . + +-if [ -z "$PYTHON" ]; then ++if test -z "$PYTHON"; then + PYTHON=python + fi + +@@ -96,27 +96,46 @@ done + + files=$* + if test -z "$files"; then +- usage_error "no files given" ++ usage_error "no files given" + fi + + # if basedir was given, then it should be prepended to filenames before + # byte compilation. +-if [ -z "$basedir" ]; then +- pathtrans="path = file" ++if test -z "$basedir"; then ++ pathtrans="path = file" + else +- pathtrans="path = os.path.join('$basedir', file)" ++ pathtrans="path = os.path.join('$basedir', file)" + fi + + # if destdir was given, then it needs to be prepended to the filename to + # byte compile but not go into the compiled file. +-if [ -z "$destdir" ]; then +- filetrans="filepath = path" ++if test -z "$destdir"; then ++ filetrans="filepath = path" + else +- filetrans="filepath = os.path.normpath('$destdir' + os.sep + path)" ++ filetrans="filepath = os.path.normpath('$destdir' + os.sep + path)" ++fi ++ ++python_major=`$PYTHON -V 2>&1 | sed -e 's/.* //;s/\..*$//;1q'` ++if test -z "$python_major"; then ++ echo "$me: could not determine $PYTHON major version, guessing 3" >&2 ++ python_major=3 ++fi ++ ++# The old way to import libraries was deprecated. ++if test "$python_major" -le 2; then ++ import_lib=imp ++ import_test="hasattr(imp, 'get_tag')" ++ import_call=imp.cache_from_source ++ import_arg2=', False' # needed in one call and not the other ++else ++ import_lib=importlib ++ import_test="hasattr(sys.implementation, 'cache_tag')" ++ import_call=importlib.util.cache_from_source ++ import_arg2= + fi + + $PYTHON -c " +-import sys, os, py_compile, imp ++import sys, os, py_compile, $import_lib + + files = '''$files''' + +@@ -129,15 +148,15 @@ for file in files.split(): + continue + sys.stdout.write(file) + sys.stdout.flush() +- if hasattr(imp, 'get_tag'): +- py_compile.compile(filepath, imp.cache_from_source(filepath), path) ++ if $import_test: ++ py_compile.compile(filepath, $import_call(filepath), path) + else: + py_compile.compile(filepath, filepath + 'c', path) + sys.stdout.write('\n')" || exit $? + + # this will fail for python < 1.5, but that doesn't matter ... + $PYTHON -O -c " +-import sys, os, py_compile, imp ++import sys, os, py_compile, $import_lib + + # pypy does not use .pyo optimization + if hasattr(sys, 'pypy_translation_info'): +@@ -153,18 +172,18 @@ for file in files.split(): + continue + sys.stdout.write(file) + sys.stdout.flush() +- if hasattr(imp, 'get_tag'): +- py_compile.compile(filepath, imp.cache_from_source(filepath, False), path) ++ if $import_test: ++ py_compile.compile(filepath, $import_call(filepath$import_arg2), path) + else: + py_compile.compile(filepath, filepath + 'o', path) +-sys.stdout.write('\n')" 2>/dev/null || : ++sys.stdout.write('\n')" 2>/dev/null || exit $? + + # Local Variables: + # mode: shell-script + # sh-indentation: 2 +-# eval: (add-hook 'write-file-hooks 'time-stamp) ++# eval: (add-hook 'before-save-hook 'time-stamp) + # time-stamp-start: "scriptversion=" + # time-stamp-format: "%:y-%02m-%02d.%02H" +-# time-stamp-time-zone: "UTC" ++# time-stamp-time-zone: "UTC0" + # time-stamp-end: "; # UTC" + # End: +-- +2.41.0 + diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 4e793ed..44deaf3 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,13 +6,15 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 7%{?dist} +Release: 8%{?dist} License: GPL-2.0-or-later URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz # git format-patch -N setroubleshoot-plugins- -- plugins # i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done Patch0001: 0001-restorecon.py-exclude-more-paths.patch +Patch0002: 0002-Improve-disable_ipv6-plugin-then_text.patch +Patch0003: 0003-Update-generated-configuration-files.patch BuildArch: noarch # gcc is needed only for ./configure @@ -50,6 +52,10 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Wed Jul 26 2023 Petr Lautrbach - 3.3.14-8 +- Update generated configuration files (rhbz#2226425) +- Improve disable_ipv6 plugin then_text + * Sat Jul 22 2023 Fedora Release Engineering - 3.3.14-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild From 007557e46ea508e3a904919e31ee535bd677d979 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 27 Jan 2024 02:41:44 +0000 Subject: [PATCH 55/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 44deaf3..80110d6 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 8%{?dist} +Release: 9%{?dist} License: GPL-2.0-or-later URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -52,6 +52,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jan 27 2024 Fedora Release Engineering - 3.3.14-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + * Wed Jul 26 2023 Petr Lautrbach - 3.3.14-8 - Update generated configuration files (rhbz#2226425) - Improve disable_ipv6 plugin then_text From 2ad1062d72c53aad0ffbc0d9a5d07b1b0b96b314 Mon Sep 17 00:00:00 2001 From: Milos Malik Date: Tue, 2 Apr 2024 13:24:41 +0200 Subject: [PATCH 56/68] run the existing tests via TMT/FMF Use the TMT/FMF instead of STI for running tests. STI does not respect the adjust section in main.fmf files of stored tests. Add missing main.fmf files to tests which are not TMT/FMF enabled. --- .fmf/version | 1 + plans/tests.fmf | 6 +++++ .../use-of-aliases-in-plugins/main.fmf | 25 +++++++++++++++++++ .../use-of-aliases-in-plugins/runtest.sh | 1 - 4 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 .fmf/version create mode 100644 plans/tests.fmf create mode 100644 tests/Regression/use-of-aliases-in-plugins/main.fmf diff --git a/.fmf/version b/.fmf/version new file mode 100644 index 0000000..d00491f --- /dev/null +++ b/.fmf/version @@ -0,0 +1 @@ +1 diff --git a/plans/tests.fmf b/plans/tests.fmf new file mode 100644 index 0000000..7d8f9cd --- /dev/null +++ b/plans/tests.fmf @@ -0,0 +1,6 @@ +summary: basic setroubleshoot-plugins test plan +discover: + how: fmf +execute: + how: tmt + diff --git a/tests/Regression/use-of-aliases-in-plugins/main.fmf b/tests/Regression/use-of-aliases-in-plugins/main.fmf new file mode 100644 index 0000000..8bd3e77 --- /dev/null +++ b/tests/Regression/use-of-aliases-in-plugins/main.fmf @@ -0,0 +1,25 @@ +summary: test types and aliases used in plugins +description: |+ + Make sure all types used in setroubleshoot plugins are defined in the policy and are not aliases + +contact: Vit Mojzis +component: + - setroubleshoot-plugins +test: ./runtest.sh +framework: beakerlib +recommend: + - libselinux-utils + - python3-policycoreutils + - setroubleshoot-plugins +duration: 15m +enabled: true +tag: + - NoRHEL4 + - NoRHEL5 + - NoRHEL6 + - NoRHEL7 + - targeted +adjust: + - enabled: false + when: distro == rhel-4, rhel-5, rhel-6, rhel-7 + continue: false diff --git a/tests/Regression/use-of-aliases-in-plugins/runtest.sh b/tests/Regression/use-of-aliases-in-plugins/runtest.sh index 5720f99..b540e6b 100755 --- a/tests/Regression/use-of-aliases-in-plugins/runtest.sh +++ b/tests/Regression/use-of-aliases-in-plugins/runtest.sh @@ -27,7 +27,6 @@ # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # Include Beaker environment -. /usr/bin/rhts-environment.sh || exit 1 . /usr/share/beakerlib/beakerlib.sh || exit 1 PACKAGE="setroubleshoot-plugins" From 0138d422b686546e80a783586b6b3015091e342b Mon Sep 17 00:00:00 2001 From: Milos Malik Date: Wed, 17 Apr 2024 09:55:06 +0200 Subject: [PATCH 57/68] remove the unnecessary tests.yaml file The repository already contains a TMT test plan (/plans/tests.fmf) which replaces the tests.yaml file. Let's leave the old STI way of running tests finally. --- tests/tests.yml | 11 ----------- 1 file changed, 11 deletions(-) delete mode 100644 tests/tests.yml diff --git a/tests/tests.yml b/tests/tests.yml deleted file mode 100644 index cc1af99..0000000 --- a/tests/tests.yml +++ /dev/null @@ -1,11 +0,0 @@ -- hosts: localhost - roles: - - role: standard-test-beakerlib - tags: - - classic - tests: - - Regression/use-of-aliases-in-plugins - required_packages: - - setroubleshoot-plugins - - selinux-policy-targeted - - python3-policycoreutils From 6ea678f88f5d5837b54aefee0b5fe455f0ac4878 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 20 Jul 2024 05:18:40 +0000 Subject: [PATCH 58/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 80110d6..e775cbf 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.14 -Release: 9%{?dist} +Release: 10%{?dist} License: GPL-2.0-or-later URL: https://github.com/fedora-selinux/setroubleshoot Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz @@ -52,6 +52,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jul 20 2024 Fedora Release Engineering - 3.3.14-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild + * Sat Jan 27 2024 Fedora Release Engineering - 3.3.14-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild From ae45697aee8d3fa6a95647a0347d650f1a2ae373 Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Mon, 6 Jan 2025 14:53:46 +0100 Subject: [PATCH 59/68] setroubleshoot-plugin-3.3.15 - restorecon.py: exclude more paths - Improve disable_ipv6 plugin then_text - Update generated configuration files - Update translations --- .gitignore | 1 + 0001-restorecon.py-exclude-more-paths.patch | 26 - ...mprove-disable_ipv6-plugin-then_text.patch | 29 - ...Update-generated-configuration-files.patch | 1036 ----------------- setroubleshoot-plugins.spec | 17 +- sources | 2 +- 6 files changed, 12 insertions(+), 1099 deletions(-) delete mode 100644 0001-restorecon.py-exclude-more-paths.patch delete mode 100644 0002-Improve-disable_ipv6-plugin-then_text.patch delete mode 100644 0003-Update-generated-configuration-files.patch diff --git a/.gitignore b/.gitignore index a58a8e6..e0500d1 100644 --- a/.gitignore +++ b/.gitignore @@ -123,3 +123,4 @@ setroubleshoot-plugins-2.1.55.tar.gz /setroubleshoot-plugins-3.3.11.tar.gz /setroubleshoot-plugins-3.3.12.tar.gz /setroubleshoot-plugins-3.3.14.tar.gz +/setroubleshoot-plugins-3.3.15.tar.gz diff --git a/0001-restorecon.py-exclude-more-paths.patch b/0001-restorecon.py-exclude-more-paths.patch deleted file mode 100644 index 2189d21..0000000 --- a/0001-restorecon.py-exclude-more-paths.patch +++ /dev/null @@ -1,26 +0,0 @@ -From 0f508191647a41f92264c0c8fc877b0110bbd468 Mon Sep 17 00:00:00 2001 -From: Petr Lautrbach -Date: Tue, 10 Aug 2021 20:11:20 +0200 -Subject: [PATCH] restorecon.py: exclude more paths - -It doesn't make sense to run restorecon on /sys/ /proc/ and /memfd: ---- - src/restorecon.py | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/src/restorecon.py b/src/restorecon.py -index e3044c742367..9594c0d59d96 100644 ---- a/src/restorecon.py -+++ b/src/restorecon.py -@@ -39,7 +39,7 @@ def customizable(target): - - - # List of path prefixes for which this plugin is not executed --excluded_paths = ["/sys/fs"] -+excluded_paths = ["/sys/", "/proc/", "/memfd:"] - # Test if the specified path starts with some excluded prefix - def excluded_path(target_path): - for path in excluded_paths: --- -2.32.0 - diff --git a/0002-Improve-disable_ipv6-plugin-then_text.patch b/0002-Improve-disable_ipv6-plugin-then_text.patch deleted file mode 100644 index 697aabd..0000000 --- a/0002-Improve-disable_ipv6-plugin-then_text.patch +++ /dev/null @@ -1,29 +0,0 @@ -From f8a5ef9b783f4be5fcb2fa711dd3b550b312a629 Mon Sep 17 00:00:00 2001 -From: Vit Mojzis -Date: Wed, 23 Nov 2022 18:25:20 +0100 -Subject: [PATCH] Improve disable_ipv6 plugin then_text -Content-type: text/plain - -Use more conscious language and be more explicit. - -Signed-off-by: Vit Mojzis ---- - src/disable_ipv6.py | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/src/disable_ipv6.py b/src/disable_ipv6.py -index 1c858213ddea..ca0b9cc7f49f 100644 ---- a/src/disable_ipv6.py -+++ b/src/disable_ipv6.py -@@ -38,7 +38,7 @@ Disable IPV6 properly. - fix_cmd = "" - - if_text = _("If you want to disable IPV6 on this machine") -- then_text = _("you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not blacklist the module'") -+ then_text = _("you need to set /proc/sys/net/ipv6/conf/all/disable_ipv6 to 1 and do not disable the ipv6 kernel module'") - do_text = _("""Add - net.ipv6.conf.all.disable_ipv6 = 1 - to /etc/sysctl.conf --- -2.41.0 - diff --git a/0003-Update-generated-configuration-files.patch b/0003-Update-generated-configuration-files.patch deleted file mode 100644 index 75b7aed..0000000 --- a/0003-Update-generated-configuration-files.patch +++ /dev/null @@ -1,1036 +0,0 @@ -From 9e54f6a661330070ad25a0e86f197b3530bfc5c7 Mon Sep 17 00:00:00 2001 -From: Petr Lautrbach -Date: Wed, 26 Jul 2023 10:30:07 +0200 -Subject: [PATCH] Update generated configuration files -Content-type: text/plain - -Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2226425 - - Traceback (most recent call last): - File "", line 2, in - ModuleNotFoundError: No module named 'imp' - make[2]: *** [Makefile:372: install-pluginPYTHON] Error 1 ---- - INSTALL | 320 ++++++++++++++++++++++++++--------------------------- - install-sh | 174 ++++++++++++++++++----------- - missing | 16 +-- - py-compile | 59 ++++++---- - 4 files changed, 313 insertions(+), 256 deletions(-) - -diff --git a/INSTALL b/INSTALL -index 2099840756e6..e82fd21de2ea 100644 ---- a/INSTALL -+++ b/INSTALL -@@ -1,8 +1,8 @@ - Installation Instructions - ************************* - --Copyright (C) 1994-1996, 1999-2002, 2004-2013 Free Software Foundation, --Inc. -+ Copyright (C) 1994-1996, 1999-2002, 2004-2017, 2020-2021 Free -+Software Foundation, Inc. - - Copying and distribution of this file, with or without modification, - are permitted in any medium without royalty provided the copyright -@@ -12,97 +12,96 @@ without warranty of any kind. - Basic Installation - ================== - -- Briefly, the shell command `./configure && make && make install' -+ Briefly, the shell command './configure && make && make install' - should configure, build, and install this package. The following --more-detailed instructions are generic; see the `README' file for -+more-detailed instructions are generic; see the 'README' file for - instructions specific to this package. Some packages provide this --`INSTALL' file but do not implement all of the features documented -+'INSTALL' file but do not implement all of the features documented - below. The lack of an optional feature in a given package is not - necessarily a bug. More recommendations for GNU packages can be found - in *note Makefile Conventions: (standards)Makefile Conventions. - -- The `configure' shell script attempts to guess correct values for -+ The 'configure' shell script attempts to guess correct values for - various system-dependent variables used during compilation. It uses --those values to create a `Makefile' in each directory of the package. --It may also create one or more `.h' files containing system-dependent --definitions. Finally, it creates a shell script `config.status' that -+those values to create a 'Makefile' in each directory of the package. -+It may also create one or more '.h' files containing system-dependent -+definitions. Finally, it creates a shell script 'config.status' that - you can run in the future to recreate the current configuration, and a --file `config.log' containing compiler output (useful mainly for --debugging `configure'). -+file 'config.log' containing compiler output (useful mainly for -+debugging 'configure'). - -- It can also use an optional file (typically called `config.cache' --and enabled with `--cache-file=config.cache' or simply `-C') that saves --the results of its tests to speed up reconfiguring. Caching is --disabled by default to prevent problems with accidental use of stale --cache files. -+ It can also use an optional file (typically called 'config.cache' and -+enabled with '--cache-file=config.cache' or simply '-C') that saves the -+results of its tests to speed up reconfiguring. Caching is disabled by -+default to prevent problems with accidental use of stale cache files. - - If you need to do unusual things to compile the package, please try --to figure out how `configure' could check whether to do them, and mail --diffs or instructions to the address given in the `README' so they can -+to figure out how 'configure' could check whether to do them, and mail -+diffs or instructions to the address given in the 'README' so they can - be considered for the next release. If you are using the cache, and at --some point `config.cache' contains results you don't want to keep, you -+some point 'config.cache' contains results you don't want to keep, you - may remove or edit it. - -- The file `configure.ac' (or `configure.in') is used to create --`configure' by a program called `autoconf'. You need `configure.ac' if --you want to change it or regenerate `configure' using a newer version --of `autoconf'. -+ The file 'configure.ac' (or 'configure.in') is used to create -+'configure' by a program called 'autoconf'. You need 'configure.ac' if -+you want to change it or regenerate 'configure' using a newer version of -+'autoconf'. - - The simplest way to compile this package is: - -- 1. `cd' to the directory containing the package's source code and type -- `./configure' to configure the package for your system. -+ 1. 'cd' to the directory containing the package's source code and type -+ './configure' to configure the package for your system. - -- Running `configure' might take a while. While running, it prints -+ Running 'configure' might take a while. While running, it prints - some messages telling which features it is checking for. - -- 2. Type `make' to compile the package. -+ 2. Type 'make' to compile the package. - -- 3. Optionally, type `make check' to run any self-tests that come with -+ 3. Optionally, type 'make check' to run any self-tests that come with - the package, generally using the just-built uninstalled binaries. - -- 4. Type `make install' to install the programs and any data files and -+ 4. Type 'make install' to install the programs and any data files and - documentation. When installing into a prefix owned by root, it is - recommended that the package be configured and built as a regular -- user, and only the `make install' phase executed with root -+ user, and only the 'make install' phase executed with root - privileges. - -- 5. Optionally, type `make installcheck' to repeat any self-tests, but -+ 5. Optionally, type 'make installcheck' to repeat any self-tests, but - this time using the binaries in their final installed location. - This target does not install anything. Running this target as a -- regular user, particularly if the prior `make install' required -+ regular user, particularly if the prior 'make install' required - root privileges, verifies that the installation completed - correctly. - - 6. You can remove the program binaries and object files from the -- source code directory by typing `make clean'. To also remove the -- files that `configure' created (so you can compile the package for -- a different kind of computer), type `make distclean'. There is -- also a `make maintainer-clean' target, but that is intended mainly -+ source code directory by typing 'make clean'. To also remove the -+ files that 'configure' created (so you can compile the package for -+ a different kind of computer), type 'make distclean'. There is -+ also a 'make maintainer-clean' target, but that is intended mainly - for the package's developers. If you use it, you may have to get - all sorts of other programs in order to regenerate files that came - with the distribution. - -- 7. Often, you can also type `make uninstall' to remove the installed -+ 7. Often, you can also type 'make uninstall' to remove the installed - files again. In practice, not all packages have tested that - uninstallation works correctly, even though it is required by the - GNU Coding Standards. - -- 8. Some packages, particularly those that use Automake, provide `make -+ 8. Some packages, particularly those that use Automake, provide 'make - distcheck', which can by used by developers to test that all other -- targets like `make install' and `make uninstall' work correctly. -+ targets like 'make install' and 'make uninstall' work correctly. - This target is generally not run by end users. - - Compilers and Options - ===================== - - Some systems require unusual options for compilation or linking that --the `configure' script does not know about. Run `./configure --help' -+the 'configure' script does not know about. Run './configure --help' - for details on some of the pertinent environment variables. - -- You can give `configure' initial values for configuration parameters --by setting variables in the command line or in the environment. Here --is an example: -+ You can give 'configure' initial values for configuration parameters -+by setting variables in the command line or in the environment. Here is -+an example: - - ./configure CC=c99 CFLAGS=-g LIBS=-lposix - -@@ -113,21 +112,21 @@ Compiling For Multiple Architectures - - You can compile the package for more than one kind of computer at the - same time, by placing the object files for each architecture in their --own directory. To do this, you can use GNU `make'. `cd' to the -+own directory. To do this, you can use GNU 'make'. 'cd' to the - directory where you want the object files and executables to go and run --the `configure' script. `configure' automatically checks for the --source code in the directory that `configure' is in and in `..'. This --is known as a "VPATH" build. -+the 'configure' script. 'configure' automatically checks for the source -+code in the directory that 'configure' is in and in '..'. This is known -+as a "VPATH" build. - -- With a non-GNU `make', it is safer to compile the package for one -+ With a non-GNU 'make', it is safer to compile the package for one - architecture at a time in the source code directory. After you have --installed the package for one architecture, use `make distclean' before -+installed the package for one architecture, use 'make distclean' before - reconfiguring for another architecture. - - On MacOS X 10.5 and later systems, you can create libraries and - executables that work on multiple system types--known as "fat" or --"universal" binaries--by specifying multiple `-arch' options to the --compiler but only a single `-arch' option to the preprocessor. Like -+"universal" binaries--by specifying multiple '-arch' options to the -+compiler but only a single '-arch' option to the preprocessor. Like - this: - - ./configure CC="gcc -arch i386 -arch x86_64 -arch ppc -arch ppc64" \ -@@ -136,105 +135,104 @@ this: - - This is not guaranteed to produce working output in all cases, you - may have to build one architecture at a time and combine the results --using the `lipo' tool if you have problems. -+using the 'lipo' tool if you have problems. - - Installation Names - ================== - -- By default, `make install' installs the package's commands under --`/usr/local/bin', include files under `/usr/local/include', etc. You --can specify an installation prefix other than `/usr/local' by giving --`configure' the option `--prefix=PREFIX', where PREFIX must be an -+ By default, 'make install' installs the package's commands under -+'/usr/local/bin', include files under '/usr/local/include', etc. You -+can specify an installation prefix other than '/usr/local' by giving -+'configure' the option '--prefix=PREFIX', where PREFIX must be an - absolute file name. - - You can specify separate installation prefixes for - architecture-specific files and architecture-independent files. If you --pass the option `--exec-prefix=PREFIX' to `configure', the package uses -+pass the option '--exec-prefix=PREFIX' to 'configure', the package uses - PREFIX as the prefix for installing programs and libraries. - Documentation and other data files still use the regular prefix. - - In addition, if you use an unusual directory layout you can give --options like `--bindir=DIR' to specify different values for particular --kinds of files. Run `configure --help' for a list of the directories --you can set and what kinds of files go in them. In general, the --default for these options is expressed in terms of `${prefix}', so that --specifying just `--prefix' will affect all of the other directory -+options like '--bindir=DIR' to specify different values for particular -+kinds of files. Run 'configure --help' for a list of the directories -+you can set and what kinds of files go in them. In general, the default -+for these options is expressed in terms of '${prefix}', so that -+specifying just '--prefix' will affect all of the other directory - specifications that were not explicitly provided. - - The most portable way to affect installation locations is to pass the --correct locations to `configure'; however, many packages provide one or -+correct locations to 'configure'; however, many packages provide one or - both of the following shortcuts of passing variable assignments to the --`make install' command line to change installation locations without -+'make install' command line to change installation locations without - having to reconfigure or recompile. - - The first method involves providing an override variable for each --affected directory. For example, `make install -+affected directory. For example, 'make install - prefix=/alternate/directory' will choose an alternate location for all - directory configuration variables that were expressed in terms of --`${prefix}'. Any directories that were specified during `configure', --but not in terms of `${prefix}', must each be overridden at install --time for the entire installation to be relocated. The approach of --makefile variable overrides for each directory variable is required by --the GNU Coding Standards, and ideally causes no recompilation. --However, some platforms have known limitations with the semantics of --shared libraries that end up requiring recompilation when using this --method, particularly noticeable in packages that use GNU Libtool. -- -- The second method involves providing the `DESTDIR' variable. For --example, `make install DESTDIR=/alternate/directory' will prepend --`/alternate/directory' before all installation names. The approach of --`DESTDIR' overrides is not required by the GNU Coding Standards, and -+'${prefix}'. Any directories that were specified during 'configure', -+but not in terms of '${prefix}', must each be overridden at install time -+for the entire installation to be relocated. The approach of makefile -+variable overrides for each directory variable is required by the GNU -+Coding Standards, and ideally causes no recompilation. However, some -+platforms have known limitations with the semantics of shared libraries -+that end up requiring recompilation when using this method, particularly -+noticeable in packages that use GNU Libtool. -+ -+ The second method involves providing the 'DESTDIR' variable. For -+example, 'make install DESTDIR=/alternate/directory' will prepend -+'/alternate/directory' before all installation names. The approach of -+'DESTDIR' overrides is not required by the GNU Coding Standards, and - does not work on platforms that have drive letters. On the other hand, - it does better at avoiding recompilation issues, and works well even --when some directory options were not specified in terms of `${prefix}' --at `configure' time. -+when some directory options were not specified in terms of '${prefix}' -+at 'configure' time. - - Optional Features - ================= - - If the package supports it, you can cause programs to be installed --with an extra prefix or suffix on their names by giving `configure' the --option `--program-prefix=PREFIX' or `--program-suffix=SUFFIX'. -- -- Some packages pay attention to `--enable-FEATURE' options to --`configure', where FEATURE indicates an optional part of the package. --They may also pay attention to `--with-PACKAGE' options, where PACKAGE --is something like `gnu-as' or `x' (for the X Window System). The --`README' should mention any `--enable-' and `--with-' options that the -+with an extra prefix or suffix on their names by giving 'configure' the -+option '--program-prefix=PREFIX' or '--program-suffix=SUFFIX'. -+ -+ Some packages pay attention to '--enable-FEATURE' options to -+'configure', where FEATURE indicates an optional part of the package. -+They may also pay attention to '--with-PACKAGE' options, where PACKAGE -+is something like 'gnu-as' or 'x' (for the X Window System). The -+'README' should mention any '--enable-' and '--with-' options that the - package recognizes. - -- For packages that use the X Window System, `configure' can usually -+ For packages that use the X Window System, 'configure' can usually - find the X include and library files automatically, but if it doesn't, --you can use the `configure' options `--x-includes=DIR' and --`--x-libraries=DIR' to specify their locations. -+you can use the 'configure' options '--x-includes=DIR' and -+'--x-libraries=DIR' to specify their locations. - - Some packages offer the ability to configure how verbose the --execution of `make' will be. For these packages, running `./configure -+execution of 'make' will be. For these packages, running './configure - --enable-silent-rules' sets the default to minimal output, which can be --overridden with `make V=1'; while running `./configure -+overridden with 'make V=1'; while running './configure - --disable-silent-rules' sets the default to verbose, which can be --overridden with `make V=0'. -+overridden with 'make V=0'. - - Particular systems - ================== - -- On HP-UX, the default C compiler is not ANSI C compatible. If GNU --CC is not installed, it is recommended to use the following options in -+ On HP-UX, the default C compiler is not ANSI C compatible. If GNU CC -+is not installed, it is recommended to use the following options in - order to use an ANSI C compiler: - - ./configure CC="cc -Ae -D_XOPEN_SOURCE=500" - - and if that doesn't work, install pre-built binaries of GCC for HP-UX. - -- HP-UX `make' updates targets which have the same time stamps as --their prerequisites, which makes it generally unusable when shipped --generated files such as `configure' are involved. Use GNU `make' --instead. -+ HP-UX 'make' updates targets which have the same timestamps as their -+prerequisites, which makes it generally unusable when shipped generated -+files such as 'configure' are involved. Use GNU 'make' instead. - - On OSF/1 a.k.a. Tru64, some versions of the default C compiler cannot --parse its `' header file. The option `-nodtk' can be used as --a workaround. If GNU CC is not installed, it is therefore recommended --to try -+parse its '' header file. The option '-nodtk' can be used as a -+workaround. If GNU CC is not installed, it is therefore recommended to -+try - - ./configure CC="cc" - -@@ -242,26 +240,26 @@ and if that doesn't work, try - - ./configure CC="cc -nodtk" - -- On Solaris, don't put `/usr/ucb' early in your `PATH'. This -+ On Solaris, don't put '/usr/ucb' early in your 'PATH'. This - directory contains several dysfunctional programs; working variants of --these programs are available in `/usr/bin'. So, if you need `/usr/ucb' --in your `PATH', put it _after_ `/usr/bin'. -+these programs are available in '/usr/bin'. So, if you need '/usr/ucb' -+in your 'PATH', put it _after_ '/usr/bin'. - -- On Haiku, software installed for all users goes in `/boot/common', --not `/usr/local'. It is recommended to use the following options: -+ On Haiku, software installed for all users goes in '/boot/common', -+not '/usr/local'. It is recommended to use the following options: - - ./configure --prefix=/boot/common - - Specifying the System Type - ========================== - -- There may be some features `configure' cannot figure out -+ There may be some features 'configure' cannot figure out - automatically, but needs to determine by the type of machine the package - will run on. Usually, assuming the package is built to be run on the --_same_ architectures, `configure' can figure that out, but if it prints -+_same_ architectures, 'configure' can figure that out, but if it prints - a message saying it cannot guess the machine type, give it the --`--build=TYPE' option. TYPE can either be a short name for the system --type, such as `sun4', or a canonical name which has the form: -+'--build=TYPE' option. TYPE can either be a short name for the system -+type, such as 'sun4', or a canonical name which has the form: - - CPU-COMPANY-SYSTEM - -@@ -270,101 +268,101 @@ where SYSTEM can have one of these forms: - OS - KERNEL-OS - -- See the file `config.sub' for the possible values of each field. If --`config.sub' isn't included in this package, then this package doesn't -+ See the file 'config.sub' for the possible values of each field. If -+'config.sub' isn't included in this package, then this package doesn't - need to know the machine type. - - If you are _building_ compiler tools for cross-compiling, you should --use the option `--target=TYPE' to select the type of system they will -+use the option '--target=TYPE' to select the type of system they will - produce code for. - - If you want to _use_ a cross compiler, that generates code for a - platform different from the build platform, you should specify the - "host" platform (i.e., that on which the generated programs will --eventually be run) with `--host=TYPE'. -+eventually be run) with '--host=TYPE'. - - Sharing Defaults - ================ - -- If you want to set default values for `configure' scripts to share, --you can create a site shell script called `config.site' that gives --default values for variables like `CC', `cache_file', and `prefix'. --`configure' looks for `PREFIX/share/config.site' if it exists, then --`PREFIX/etc/config.site' if it exists. Or, you can set the --`CONFIG_SITE' environment variable to the location of the site script. --A warning: not all `configure' scripts look for a site script. -+ If you want to set default values for 'configure' scripts to share, -+you can create a site shell script called 'config.site' that gives -+default values for variables like 'CC', 'cache_file', and 'prefix'. -+'configure' looks for 'PREFIX/share/config.site' if it exists, then -+'PREFIX/etc/config.site' if it exists. Or, you can set the -+'CONFIG_SITE' environment variable to the location of the site script. -+A warning: not all 'configure' scripts look for a site script. - - Defining Variables - ================== - - Variables not defined in a site shell script can be set in the --environment passed to `configure'. However, some packages may run -+environment passed to 'configure'. However, some packages may run - configure again during the build, and the customized values of these - variables may be lost. In order to avoid this problem, you should set --them in the `configure' command line, using `VAR=value'. For example: -+them in the 'configure' command line, using 'VAR=value'. For example: - - ./configure CC=/usr/local2/bin/gcc - --causes the specified `gcc' to be used as the C compiler (unless it is -+causes the specified 'gcc' to be used as the C compiler (unless it is - overridden in the site shell script). - --Unfortunately, this technique does not work for `CONFIG_SHELL' due to --an Autoconf limitation. Until the limitation is lifted, you can use --this workaround: -+Unfortunately, this technique does not work for 'CONFIG_SHELL' due to an -+Autoconf limitation. Until the limitation is lifted, you can use this -+workaround: - - CONFIG_SHELL=/bin/bash ./configure CONFIG_SHELL=/bin/bash - --`configure' Invocation -+'configure' Invocation - ====================== - -- `configure' recognizes the following options to control how it -+ 'configure' recognizes the following options to control how it - operates. - --`--help' --`-h' -- Print a summary of all of the options to `configure', and exit. -+'--help' -+'-h' -+ Print a summary of all of the options to 'configure', and exit. - --`--help=short' --`--help=recursive' -+'--help=short' -+'--help=recursive' - Print a summary of the options unique to this package's -- `configure', and exit. The `short' variant lists options used -- only in the top level, while the `recursive' variant lists options -- also present in any nested packages. -+ 'configure', and exit. The 'short' variant lists options used only -+ in the top level, while the 'recursive' variant lists options also -+ present in any nested packages. - --`--version' --`-V' -- Print the version of Autoconf used to generate the `configure' -+'--version' -+'-V' -+ Print the version of Autoconf used to generate the 'configure' - script, and exit. - --`--cache-file=FILE' -+'--cache-file=FILE' - Enable the cache: use and save the results of the tests in FILE, -- traditionally `config.cache'. FILE defaults to `/dev/null' to -+ traditionally 'config.cache'. FILE defaults to '/dev/null' to - disable caching. - --`--config-cache' --`-C' -- Alias for `--cache-file=config.cache'. -+'--config-cache' -+'-C' -+ Alias for '--cache-file=config.cache'. - --`--quiet' --`--silent' --`-q' -+'--quiet' -+'--silent' -+'-q' - Do not print messages saying which checks are being made. To -- suppress all normal output, redirect it to `/dev/null' (any error -+ suppress all normal output, redirect it to '/dev/null' (any error - messages will still be shown). - --`--srcdir=DIR' -+'--srcdir=DIR' - Look for the package's source code in directory DIR. Usually -- `configure' can determine that directory automatically. -+ 'configure' can determine that directory automatically. - --`--prefix=DIR' -- Use DIR as the installation prefix. *note Installation Names:: -- for more details, including other options available for fine-tuning -- the installation locations. -+'--prefix=DIR' -+ Use DIR as the installation prefix. *note Installation Names:: for -+ more details, including other options available for fine-tuning the -+ installation locations. - --`--no-create' --`-n' -+'--no-create' -+'-n' - Run the configure checks, but stop before creating any output - files. - --`configure' also accepts some other, not widely useful, options. Run --`configure --help' for more details. -+'configure' also accepts some other, not widely useful, options. Run -+'configure --help' for more details. -diff --git a/install-sh b/install-sh -index 0b0fdcbba69a..ec298b537402 100755 ---- a/install-sh -+++ b/install-sh -@@ -1,7 +1,7 @@ - #!/bin/sh - # install - install a program, script, or datafile - --scriptversion=2013-12-25.23; # UTC -+scriptversion=2020-11-14.01; # UTC - - # This originates from X11R5 (mit/util/scripts/install.sh), which was - # later released in X11R6 (xc/config/util/install.sh) with the -@@ -69,6 +69,11 @@ posix_mkdir= - # Desired mode of installed file. - mode=0755 - -+# Create dirs (including intermediate dirs) using mode 755. -+# This is like GNU 'install' as of coreutils 8.32 (2020). -+mkdir_umask=22 -+ -+backupsuffix= - chgrpcmd= - chmodcmd=$chmodprog - chowncmd= -@@ -99,18 +104,28 @@ Options: - --version display version info and exit. - - -c (ignored) -- -C install only if different (preserve the last data modification time) -+ -C install only if different (preserve data modification time) - -d create directories instead of installing files. - -g GROUP $chgrpprog installed files to GROUP. - -m MODE $chmodprog installed files to MODE. - -o USER $chownprog installed files to USER. -+ -p pass -p to $cpprog. - -s $stripprog installed files. -+ -S SUFFIX attempt to back up existing files, with suffix SUFFIX. - -t DIRECTORY install into DIRECTORY. - -T report an error if DSTFILE is a directory. - - Environment variables override the default commands: - CHGRPPROG CHMODPROG CHOWNPROG CMPPROG CPPROG MKDIRPROG MVPROG - RMPROG STRIPPROG -+ -+By default, rm is invoked with -f; when overridden with RMPROG, -+it's up to you to specify -f if you want it. -+ -+If -S is not specified, no backups are attempted. -+ -+Email bug reports to bug-automake@gnu.org. -+Automake home page: https://www.gnu.org/software/automake/ - " - - while test $# -ne 0; do -@@ -137,8 +152,13 @@ while test $# -ne 0; do - -o) chowncmd="$chownprog $2" - shift;; - -+ -p) cpprog="$cpprog -p";; -+ - -s) stripcmd=$stripprog;; - -+ -S) backupsuffix="$2" -+ shift;; -+ - -t) - is_target_a_directory=always - dst_arg=$2 -@@ -255,6 +275,10 @@ do - dstdir=$dst - test -d "$dstdir" - dstdir_status=$? -+ # Don't chown directories that already exist. -+ if test $dstdir_status = 0; then -+ chowncmd="" -+ fi - else - - # Waiting for this to be detected by the "$cpprog $src $dsttmp" command -@@ -271,15 +295,18 @@ do - fi - dst=$dst_arg - -- # If destination is a directory, append the input filename; won't work -- # if double slashes aren't ignored. -+ # If destination is a directory, append the input filename. - if test -d "$dst"; then - if test "$is_target_a_directory" = never; then - echo "$0: $dst_arg: Is a directory" >&2 - exit 1 - fi - dstdir=$dst -- dst=$dstdir/`basename "$src"` -+ dstbase=`basename "$src"` -+ case $dst in -+ */) dst=$dst$dstbase;; -+ *) dst=$dst/$dstbase;; -+ esac - dstdir_status=0 - else - dstdir=`dirname "$dst"` -@@ -288,27 +315,16 @@ do - fi - fi - -+ case $dstdir in -+ */) dstdirslash=$dstdir;; -+ *) dstdirslash=$dstdir/;; -+ esac -+ - obsolete_mkdir_used=false - - if test $dstdir_status != 0; then - case $posix_mkdir in - '') -- # Create intermediate dirs using mode 755 as modified by the umask. -- # This is like FreeBSD 'install' as of 1997-10-28. -- umask=`umask` -- case $stripcmd.$umask in -- # Optimize common cases. -- *[2367][2367]) mkdir_umask=$umask;; -- .*0[02][02] | .[02][02] | .[02]) mkdir_umask=22;; -- -- *[0-7]) -- mkdir_umask=`expr $umask + 22 \ -- - $umask % 100 % 40 + $umask % 20 \ -- - $umask % 10 % 4 + $umask % 2 -- `;; -- *) mkdir_umask=$umask,go-w;; -- esac -- - # With -d, create the new directory with the user-specified mode. - # Otherwise, rely on $mkdir_umask. - if test -n "$dir_arg"; then -@@ -318,43 +334,49 @@ do - fi - - posix_mkdir=false -- case $umask in -- *[123567][0-7][0-7]) -- # POSIX mkdir -p sets u+wx bits regardless of umask, which -- # is incompatible with FreeBSD 'install' when (umask & 300) != 0. -- ;; -- *) -- tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$ -- trap 'ret=$?; rmdir "$tmpdir/d" "$tmpdir" 2>/dev/null; exit $ret' 0 -- -- if (umask $mkdir_umask && -- exec $mkdirprog $mkdir_mode -p -- "$tmpdir/d") >/dev/null 2>&1 -- then -- if test -z "$dir_arg" || { -- # Check for POSIX incompatibilities with -m. -- # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or -- # other-writable bit of parent directory when it shouldn't. -- # FreeBSD 6.1 mkdir -m -p sets mode of existing directory. -- ls_ld_tmpdir=`ls -ld "$tmpdir"` -- case $ls_ld_tmpdir in -- d????-?r-*) different_mode=700;; -- d????-?--*) different_mode=755;; -- *) false;; -- esac && -- $mkdirprog -m$different_mode -p -- "$tmpdir" && { -- ls_ld_tmpdir_1=`ls -ld "$tmpdir"` -- test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1" -- } -- } -- then posix_mkdir=: -- fi -- rmdir "$tmpdir/d" "$tmpdir" -- else -- # Remove any dirs left behind by ancient mkdir implementations. -- rmdir ./$mkdir_mode ./-p ./-- 2>/dev/null -- fi -- trap '' 0;; -- esac;; -+ # The $RANDOM variable is not portable (e.g., dash). Use it -+ # here however when possible just to lower collision chance. -+ tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$ -+ -+ trap ' -+ ret=$? -+ rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" 2>/dev/null -+ exit $ret -+ ' 0 -+ -+ # Because "mkdir -p" follows existing symlinks and we likely work -+ # directly in world-writeable /tmp, make sure that the '$tmpdir' -+ # directory is successfully created first before we actually test -+ # 'mkdir -p'. -+ if (umask $mkdir_umask && -+ $mkdirprog $mkdir_mode "$tmpdir" && -+ exec $mkdirprog $mkdir_mode -p -- "$tmpdir/a/b") >/dev/null 2>&1 -+ then -+ if test -z "$dir_arg" || { -+ # Check for POSIX incompatibilities with -m. -+ # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or -+ # other-writable bit of parent directory when it shouldn't. -+ # FreeBSD 6.1 mkdir -m -p sets mode of existing directory. -+ test_tmpdir="$tmpdir/a" -+ ls_ld_tmpdir=`ls -ld "$test_tmpdir"` -+ case $ls_ld_tmpdir in -+ d????-?r-*) different_mode=700;; -+ d????-?--*) different_mode=755;; -+ *) false;; -+ esac && -+ $mkdirprog -m$different_mode -p -- "$test_tmpdir" && { -+ ls_ld_tmpdir_1=`ls -ld "$test_tmpdir"` -+ test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1" -+ } -+ } -+ then posix_mkdir=: -+ fi -+ rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" -+ else -+ # Remove any dirs left behind by ancient mkdir implementations. -+ rmdir ./$mkdir_mode ./-p ./-- "$tmpdir" 2>/dev/null -+ fi -+ trap '' 0;; - esac - - if -@@ -365,7 +387,7 @@ do - then : - else - -- # The umask is ridiculous, or mkdir does not conform to POSIX, -+ # mkdir does not conform to POSIX, - # or it failed possibly due to a race condition. Create the - # directory the slow way, step by step, checking for races as we go. - -@@ -394,7 +416,7 @@ do - prefixes= - else - if $posix_mkdir; then -- (umask=$mkdir_umask && -+ (umask $mkdir_umask && - $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir") && break - # Don't fail if two instances are running concurrently. - test -d "$prefix" || exit 1 -@@ -427,14 +449,25 @@ do - else - - # Make a couple of temp file names in the proper directory. -- dsttmp=$dstdir/_inst.$$_ -- rmtmp=$dstdir/_rm.$$_ -+ dsttmp=${dstdirslash}_inst.$$_ -+ rmtmp=${dstdirslash}_rm.$$_ - - # Trap to clean up those temp files at exit. - trap 'ret=$?; rm -f "$dsttmp" "$rmtmp" && exit $ret' 0 - - # Copy the file name to the temp name. -- (umask $cp_umask && $doit_exec $cpprog "$src" "$dsttmp") && -+ (umask $cp_umask && -+ { test -z "$stripcmd" || { -+ # Create $dsttmp read-write so that cp doesn't create it read-only, -+ # which would cause strip to fail. -+ if test -z "$doit"; then -+ : >"$dsttmp" # No need to fork-exec 'touch'. -+ else -+ $doit touch "$dsttmp" -+ fi -+ } -+ } && -+ $doit_exec $cpprog "$src" "$dsttmp") && - - # and set any options; do chmod last to preserve setuid bits. - # -@@ -460,6 +493,13 @@ do - then - rm -f "$dsttmp" - else -+ # If $backupsuffix is set, and the file being installed -+ # already exists, attempt a backup. Don't worry if it fails, -+ # e.g., if mv doesn't support -f. -+ if test -n "$backupsuffix" && test -f "$dst"; then -+ $doit $mvcmd -f "$dst" "$dst$backupsuffix" 2>/dev/null -+ fi -+ - # Rename the file to the real destination. - $doit $mvcmd -f "$dsttmp" "$dst" 2>/dev/null || - -@@ -474,9 +514,9 @@ do - # file should still install successfully. - { - test ! -f "$dst" || -- $doit $rmcmd -f "$dst" 2>/dev/null || -+ $doit $rmcmd "$dst" 2>/dev/null || - { $doit $mvcmd -f "$dst" "$rmtmp" 2>/dev/null && -- { $doit $rmcmd -f "$rmtmp" 2>/dev/null; :; } -+ { $doit $rmcmd "$rmtmp" 2>/dev/null; :; } - } || - { echo "$0: cannot unlink or rename $dst" >&2 - (exit 1); exit 1 -@@ -493,9 +533,9 @@ do - done - - # Local variables: --# eval: (add-hook 'write-file-hooks 'time-stamp) -+# eval: (add-hook 'before-save-hook 'time-stamp) - # time-stamp-start: "scriptversion=" - # time-stamp-format: "%:y-%02m-%02d.%02H" --# time-stamp-time-zone: "UTC" -+# time-stamp-time-zone: "UTC0" - # time-stamp-end: "; # UTC" - # End: -diff --git a/missing b/missing -index b7e571efa44e..1fe1611f1851 100755 ---- a/missing -+++ b/missing -@@ -1,9 +1,9 @@ --#!/bin/sh -+#! /bin/sh - # Common wrapper for a few potentially missing GNU programs. - --scriptversion=2016-01-11.22; # UTC -+scriptversion=2018-03-07.03; # UTC - --# Copyright (C) 1996-2017 Free Software Foundation, Inc. -+# Copyright (C) 1996-2021 Free Software Foundation, Inc. - # Originally written by Fran,cois Pinard , 1996. - - # This program is free software; you can redistribute it and/or modify -@@ -17,7 +17,7 @@ scriptversion=2016-01-11.22; # UTC - # GNU General Public License for more details. - - # You should have received a copy of the GNU General Public License --# along with this program. If not, see . -+# along with this program. If not, see . - - # As a special exception to the GNU General Public License, if you - # distribute this file as part of a program that contains a -@@ -101,9 +101,9 @@ else - exit $st - fi - --perl_URL=http://www.perl.org/ --flex_URL=http://flex.sourceforge.net/ --gnu_software_URL=http://www.gnu.org/software -+perl_URL=https://www.perl.org/ -+flex_URL=https://github.com/westes/flex -+gnu_software_URL=https://www.gnu.org/software - - program_details () - { -@@ -207,7 +207,7 @@ give_advice "$1" | sed -e '1s/^/WARNING: /' \ - exit $st - - # Local variables: --# eval: (add-hook 'write-file-hooks 'time-stamp) -+# eval: (add-hook 'before-save-hook 'time-stamp) - # time-stamp-start: "scriptversion=" - # time-stamp-format: "%:y-%02m-%02d.%02H" - # time-stamp-time-zone: "UTC0" -diff --git a/py-compile b/py-compile -index bc2039140b6c..81b122b0a546 100755 ---- a/py-compile -+++ b/py-compile -@@ -1,9 +1,9 @@ - #!/bin/sh - # py-compile - Compile a Python program - --scriptversion=2011-06-08.12; # UTC -+scriptversion=2021-02-27.01; # UTC - --# Copyright (C) 2000-2014 Free Software Foundation, Inc. -+# Copyright (C) 2000-2021 Free Software Foundation, Inc. - - # This program is free software; you can redistribute it and/or modify - # it under the terms of the GNU General Public License as published by -@@ -16,7 +16,7 @@ scriptversion=2011-06-08.12; # UTC - # GNU General Public License for more details. - - # You should have received a copy of the GNU General Public License --# along with this program. If not, see . -+# along with this program. If not, see . - - # As a special exception to the GNU General Public License, if you - # distribute this file as part of a program that contains a -@@ -27,7 +27,7 @@ scriptversion=2011-06-08.12; # UTC - # bugs to or send patches to - # . - --if [ -z "$PYTHON" ]; then -+if test -z "$PYTHON"; then - PYTHON=python - fi - -@@ -96,27 +96,46 @@ done - - files=$* - if test -z "$files"; then -- usage_error "no files given" -+ usage_error "no files given" - fi - - # if basedir was given, then it should be prepended to filenames before - # byte compilation. --if [ -z "$basedir" ]; then -- pathtrans="path = file" -+if test -z "$basedir"; then -+ pathtrans="path = file" - else -- pathtrans="path = os.path.join('$basedir', file)" -+ pathtrans="path = os.path.join('$basedir', file)" - fi - - # if destdir was given, then it needs to be prepended to the filename to - # byte compile but not go into the compiled file. --if [ -z "$destdir" ]; then -- filetrans="filepath = path" -+if test -z "$destdir"; then -+ filetrans="filepath = path" - else -- filetrans="filepath = os.path.normpath('$destdir' + os.sep + path)" -+ filetrans="filepath = os.path.normpath('$destdir' + os.sep + path)" -+fi -+ -+python_major=`$PYTHON -V 2>&1 | sed -e 's/.* //;s/\..*$//;1q'` -+if test -z "$python_major"; then -+ echo "$me: could not determine $PYTHON major version, guessing 3" >&2 -+ python_major=3 -+fi -+ -+# The old way to import libraries was deprecated. -+if test "$python_major" -le 2; then -+ import_lib=imp -+ import_test="hasattr(imp, 'get_tag')" -+ import_call=imp.cache_from_source -+ import_arg2=', False' # needed in one call and not the other -+else -+ import_lib=importlib -+ import_test="hasattr(sys.implementation, 'cache_tag')" -+ import_call=importlib.util.cache_from_source -+ import_arg2= - fi - - $PYTHON -c " --import sys, os, py_compile, imp -+import sys, os, py_compile, $import_lib - - files = '''$files''' - -@@ -129,15 +148,15 @@ for file in files.split(): - continue - sys.stdout.write(file) - sys.stdout.flush() -- if hasattr(imp, 'get_tag'): -- py_compile.compile(filepath, imp.cache_from_source(filepath), path) -+ if $import_test: -+ py_compile.compile(filepath, $import_call(filepath), path) - else: - py_compile.compile(filepath, filepath + 'c', path) - sys.stdout.write('\n')" || exit $? - - # this will fail for python < 1.5, but that doesn't matter ... - $PYTHON -O -c " --import sys, os, py_compile, imp -+import sys, os, py_compile, $import_lib - - # pypy does not use .pyo optimization - if hasattr(sys, 'pypy_translation_info'): -@@ -153,18 +172,18 @@ for file in files.split(): - continue - sys.stdout.write(file) - sys.stdout.flush() -- if hasattr(imp, 'get_tag'): -- py_compile.compile(filepath, imp.cache_from_source(filepath, False), path) -+ if $import_test: -+ py_compile.compile(filepath, $import_call(filepath$import_arg2), path) - else: - py_compile.compile(filepath, filepath + 'o', path) --sys.stdout.write('\n')" 2>/dev/null || : -+sys.stdout.write('\n')" 2>/dev/null || exit $? - - # Local Variables: - # mode: shell-script - # sh-indentation: 2 --# eval: (add-hook 'write-file-hooks 'time-stamp) -+# eval: (add-hook 'before-save-hook 'time-stamp) - # time-stamp-start: "scriptversion=" - # time-stamp-format: "%:y-%02m-%02d.%02H" --# time-stamp-time-zone: "UTC" -+# time-stamp-time-zone: "UTC0" - # time-stamp-end: "; # UTC" - # End: --- -2.41.0 - diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index e775cbf..8816896 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -5,16 +5,13 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins -Version: 3.3.14 -Release: 10%{?dist} +Version: 3.3.15 +Release: 1%{?dist} License: GPL-2.0-or-later -URL: https://github.com/fedora-selinux/setroubleshoot -Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz +URL: https://gitlab.com/setroubleshoot/plugins +Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz # git format-patch -N setroubleshoot-plugins- -- plugins # i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done -Patch0001: 0001-restorecon.py-exclude-more-paths.patch -Patch0002: 0002-Improve-disable_ipv6-plugin-then_text.patch -Patch0003: 0003-Update-generated-configuration-files.patch BuildArch: noarch # gcc is needed only for ./configure @@ -52,6 +49,12 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Mon Jan 06 2025 Petr Lautrbach - 3.3.15-1 +- restorecon.py: exclude more paths +- Improve disable_ipv6 plugin then_text +- Update generated configuration files +- Update translations + * Sat Jul 20 2024 Fedora Release Engineering - 3.3.14-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild diff --git a/sources b/sources index 28a0bb9..aeb5a6c 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (setroubleshoot-plugins-3.3.14.tar.gz) = da6882a998aeade67891a722a5b94e2ba1072d9db5d73031854a2c0b51083a0eaf9519dd7987938a86c1f8d263d08882642ac447d7b4bbcd8a859db4b44d61c1 +SHA512 (setroubleshoot-plugins-3.3.15.tar.gz) = 9741ecd48a7e0cde376ac0f818d94dad32c74acd2afc01ec6f5e3cf74ff9075d4f3406f1a3905cbbdd3833c8c2ef4213deaaf00d0012dbea582eb2b825618d5f From 8a691be0af1ed56f00ff4e2b5a859d0d8ccc0e52 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sun, 19 Jan 2025 10:28:23 +0000 Subject: [PATCH 60/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 8816896..43b8e87 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.15 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sun Jan 19 2025 Fedora Release Engineering - 3.3.15-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild + * Mon Jan 06 2025 Petr Lautrbach - 3.3.15-1 - restorecon.py: exclude more paths - Improve disable_ipv6 plugin then_text From 58317166d34b2894253356967409a753c8d64c32 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 25 Jul 2025 18:10:51 +0000 Subject: [PATCH 61/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 43b8e87..883c004 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.15 -Release: 2%{?dist} +Release: 3%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Jul 25 2025 Fedora Release Engineering - 3.3.15-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild + * Sun Jan 19 2025 Fedora Release Engineering - 3.3.15-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild From 2c6acc60c5cd30284bf09256d47c560538acbad0 Mon Sep 17 00:00:00 2001 From: Python Maint Date: Fri, 15 Aug 2025 15:17:32 +0200 Subject: [PATCH 62/68] Rebuilt for Python 3.14.0rc2 bytecode --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 883c004..06c3a77 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.15 -Release: 3%{?dist} +Release: 4%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Aug 15 2025 Python Maint - 3.3.15-4 +- Rebuilt for Python 3.14.0rc2 bytecode + * Fri Jul 25 2025 Fedora Release Engineering - 3.3.15-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild From 691c6b1e53edc37dc0ab40fdd51db89014001548 Mon Sep 17 00:00:00 2001 From: Python Maint Date: Fri, 19 Sep 2025 14:56:13 +0200 Subject: [PATCH 63/68] Rebuilt for Python 3.14.0rc3 bytecode --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 06c3a77..6992119 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.15 -Release: 4%{?dist} +Release: 5%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Sep 19 2025 Python Maint - 3.3.15-5 +- Rebuilt for Python 3.14.0rc3 bytecode + * Fri Aug 15 2025 Python Maint - 3.3.15-4 - Rebuilt for Python 3.14.0rc2 bytecode From 27717286ea82847bf0a75c834b8bd2b6a137ae43 Mon Sep 17 00:00:00 2001 From: jan janasek Date: Thu, 18 Sep 2025 14:17:44 +0200 Subject: [PATCH 64/68] fmf test plan update updating plan due to new destination of tests and since there is a dedecated repo for tests (https://gitlab.com/setroubleshoot/tests) there is no need to have current test directory. Signed-off-by: Jan Janasek --- plans/tests.fmf | 2 + .../use-of-aliases-in-plugins/main.fmf | 25 ------- .../use-of-aliases-in-plugins/runtest.sh | 49 -------------- .../use-of-aliases-in-plugins/test_aliases.py | 65 ------------------- 4 files changed, 2 insertions(+), 139 deletions(-) delete mode 100644 tests/Regression/use-of-aliases-in-plugins/main.fmf delete mode 100755 tests/Regression/use-of-aliases-in-plugins/runtest.sh delete mode 100755 tests/Regression/use-of-aliases-in-plugins/test_aliases.py diff --git a/plans/tests.fmf b/plans/tests.fmf index 7d8f9cd..5d615ae 100644 --- a/plans/tests.fmf +++ b/plans/tests.fmf @@ -1,6 +1,8 @@ summary: basic setroubleshoot-plugins test plan discover: how: fmf + url: https://gitlab.com/setroubleshoot/tests.git + filter: "component:setroubleshoot-plugins & tier: 1" execute: how: tmt diff --git a/tests/Regression/use-of-aliases-in-plugins/main.fmf b/tests/Regression/use-of-aliases-in-plugins/main.fmf deleted file mode 100644 index 8bd3e77..0000000 --- a/tests/Regression/use-of-aliases-in-plugins/main.fmf +++ /dev/null @@ -1,25 +0,0 @@ -summary: test types and aliases used in plugins -description: |+ - Make sure all types used in setroubleshoot plugins are defined in the policy and are not aliases - -contact: Vit Mojzis -component: - - setroubleshoot-plugins -test: ./runtest.sh -framework: beakerlib -recommend: - - libselinux-utils - - python3-policycoreutils - - setroubleshoot-plugins -duration: 15m -enabled: true -tag: - - NoRHEL4 - - NoRHEL5 - - NoRHEL6 - - NoRHEL7 - - targeted -adjust: - - enabled: false - when: distro == rhel-4, rhel-5, rhel-6, rhel-7 - continue: false diff --git a/tests/Regression/use-of-aliases-in-plugins/runtest.sh b/tests/Regression/use-of-aliases-in-plugins/runtest.sh deleted file mode 100755 index b540e6b..0000000 --- a/tests/Regression/use-of-aliases-in-plugins/runtest.sh +++ /dev/null @@ -1,49 +0,0 @@ -#!/bin/bash -# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# runtest.sh of /CoreOS/setroubleshoot-plugins/Regression/use-of-aliases-in-plugins -# Description: Make sure all types used in setroubleshoot plugins are -# defined in the policy and are not aliases -# Author: Vit Mojzis -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -# -# Copyright (c) 2020 Red Hat, Inc. -# -# This program is free software: you can redistribute it and/or -# modify it under the terms of the GNU General Public License as -# published by the Free Software Foundation, either version 2 of -# the License, or (at your option) any later version. -# -# This program is distributed in the hope that it will be -# useful, but WITHOUT ANY WARRANTY; without even the implied -# warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR -# PURPOSE. See the GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see http://www.gnu.org/licenses/. -# -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - -# Include Beaker environment -. /usr/share/beakerlib/beakerlib.sh || exit 1 - -PACKAGE="setroubleshoot-plugins" - -rlJournalStart - rlPhaseStartSetup - rlAssertRpm ${PACKAGE} - rlRun "selinuxenabled" 0 - rlPhaseEnd - - rlPhaseStartTest "bz#1794807 - look for aliases and undefined types in plugins" - # lists all types not defined in the policy as "type_t not found" - # and all aliases as "alias_t is an alias of type_t" - # all issues are prefixed with a list of offending plugins - # returns 1 if an issue was found - rlRun "./test_aliases.py" 0 - rlPhaseEnd -rlJournalPrintText -rlJournalEnd - diff --git a/tests/Regression/use-of-aliases-in-plugins/test_aliases.py b/tests/Regression/use-of-aliases-in-plugins/test_aliases.py deleted file mode 100755 index fec114e..0000000 --- a/tests/Regression/use-of-aliases-in-plugins/test_aliases.py +++ /dev/null @@ -1,65 +0,0 @@ -#!/usr/bin/python3 - -# lists all types not defined in the policy as "type_t not found" -# and all aliases as "alias_t is an alias of type_t" -# all issues are prefixed with a list of offending plugins -# returns 1 if an issue was found - -import subprocess -import sepolicy -import sys -import re -from collections import defaultdict - -plugin_path = "/usr/share/setroubleshoot/plugins" -error_code = 0 - -if len(sys.argv) > 1: - plugin_path = sys.argv[1] - -try: - # search all plugin files in given location for the following pattern - # :_t - g = subprocess.check_output('grep -I [^A-Za-z_][A-Za-z][A-Za-z_]*_t[^A-Za-z_] -o {}/*.py'.format(plugin_path), - universal_newlines=True, shell=True) - lines = g.split('\n') -except: - exit(1) -# matches 2 groups: file name and type name -# ():(_t) -reg = re.compile('.*/(.+):[^A-Za-z_]([A-Za-z_]*_t)[^A-Za-z_]') -# generate a dictionary of of all type names used in setroubleshoot plugins -# where types are keys and lists of files where each type appeared are data -found = defaultdict(set) - -for l in lines: - m = reg.match(l) - - if m is None: - continue - - try: - t = m.group(2) - if "_TYPE_" in t: - continue - found[t].add(m.group(1)) - except: - # failed to match - continue - -for t in sorted(found.keys()): - try: - # try to find each type in system policy - i = next(sepolicy.info(sepolicy.TYPE, t))['name'] - if t != i: - # : alias_t is an alias of type_t - print("{}: {} is an alias of {}".format(", ".join(found[t]), t, i)) - error_code = 1 - except: - # skip types defined in selinux-policy modules that are not shipped any more - if t not in ["vbetool_t"]: - # : type_t not found - print("{}: {} not found".format(", ".join(found[t]), t)) - error_code = 1 - -exit(error_code) From a650d518c8354d53623859348e59deaca31e2d2f Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Sat, 17 Jan 2026 17:55:36 +0000 Subject: [PATCH 65/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 6992119..cd440af 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.15 -Release: 5%{?dist} +Release: 6%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz @@ -49,6 +49,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Sat Jan 17 2026 Fedora Release Engineering - 3.3.15-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild + * Fri Sep 19 2025 Python Maint - 3.3.15-5 - Rebuilt for Python 3.14.0rc3 bytecode From fc34171f607d2ebb0451754b45469ca1e1f58571 Mon Sep 17 00:00:00 2001 From: Vit Mojzis Date: Mon, 9 Mar 2026 23:08:08 +0100 Subject: [PATCH 66/68] setroubleshoot-plugins-3.3.15-7 - Split multi-command fix_cmds into lists - catchall: Discourage creating custom policy modules Note: Swtiched from "Requires" to "Conflicts" with setroubleshoot-server to remove the circular dependency. --- ...it-multi-command-fix_cmds-into-lists.patch | 73 +++++++++++++++++++ ...urage-creating-custom-policy-modules.patch | 36 +++++++++ setroubleshoot-plugins.spec | 16 ++-- 3 files changed, 120 insertions(+), 5 deletions(-) create mode 100644 0001-Split-multi-command-fix_cmds-into-lists.patch create mode 100644 0002-catchall-Discourage-creating-custom-policy-modules.patch diff --git a/0001-Split-multi-command-fix_cmds-into-lists.patch b/0001-Split-multi-command-fix_cmds-into-lists.patch new file mode 100644 index 0000000..476333d --- /dev/null +++ b/0001-Split-multi-command-fix_cmds-into-lists.patch @@ -0,0 +1,73 @@ +From df90bf242b35a9e01f721dd7ad436f1bd5d21616 Mon Sep 17 00:00:00 2001 +From: Vit Mojzis +Date: Mon, 9 Mar 2026 22:03:31 +0100 +Subject: [PATCH] Split multi-command fix_cmds into lists + +This requires +https://gitlab.com/setroubleshoot/setroubleshoot/-/merge_requests/54/diffs?commit_id=d5d13afa86c2bd03952c04a187657ed981c9be7e +to work properly! +--- + src/allow_execmod.py | 3 ++- + src/automount_exec_config.py | 3 ++- + src/cvs_data.py | 3 ++- + src/file.py | 2 +- + 4 files changed, 7 insertions(+), 4 deletions(-) + +diff --git a/src/allow_execmod.py b/src/allow_execmod.py +index 6e1f6bf..0a3995f 100644 +--- a/src/allow_execmod.py ++++ b/src/allow_execmod.py +@@ -81,7 +81,8 @@ If you want this to survive a relabel, execute + # semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH';restorecon -v '$FIX_TARGET_PATH' + """ + +- fix_cmd = """/usr/sbin/semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH';/usr/sbin/restorecon -v '$FIX_TARGET_PATH'""" ++ fix_cmd = ["""/usr/sbin/semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH'""", ++ """/usr/sbin/restorecon -v '$FIX_TARGET_PATH'"""] + + def init_args(self, args): + if len(args) > 0: +diff --git a/src/automount_exec_config.py b/src/automount_exec_config.py +index a64eaf2..81ada8e 100644 +--- a/src/automount_exec_config.py ++++ b/src/automount_exec_config.py +@@ -40,7 +40,8 @@ class plugin(Plugin): + If you want to change the file context of $TARGET_PATH so that the automounter can execute it you can execute "chcon -t bin_t $TARGET_PATH". If you want this to survive a relabel, you need to permanently change the file context: execute "semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'". + ''') + +- fix_cmd = """/usr/sbin/semanage fcontext -a -t bin_t '$FIX_TARGET_PATH';/usr/sbin/restorecon -v '$FIX_TARGET_PATH'""" ++ fix_cmd = ["""/usr/sbin/semanage fcontext -a -t bin_t '$FIX_TARGET_PATH'""", ++ """/usr/sbin/restorecon -v '$FIX_TARGET_PATH'"""] + + if_text = 'If you want to allow automounter to execute $TARGET_PATH' + +diff --git a/src/cvs_data.py b/src/cvs_data.py +index 7451622..1e75ead 100644 +--- a/src/cvs_data.py ++++ b/src/cvs_data.py +@@ -46,7 +46,8 @@ class plugin(Plugin): + do_text = """# semanage fcontext -a -t cvs_data_t '$FIX_TARGET_PATH' + # restorecon -v '$FIX_TARGET_PATH'""" + +- fix_cmd = """/usr/sbin/semanage fcontext -a -t cvs_data_t '$FIX_TARGET_PATH';/usr/sbin/restorecon -v '$FIX_TARGET_PATH'""" ++ fix_cmd = ["""/usr/sbin/semanage fcontext -a -t cvs_data_t '$FIX_TARGET_PATH'""", ++ """/usr/sbin/restorecon -v '$FIX_TARGET_PATH'"""] + + def __init__(self): + Plugin.__init__(self, __name__) +diff --git a/src/file.py b/src/file.py +index ac24bf9..25f3a43 100644 +--- a/src/file.py ++++ b/src/file.py +@@ -66,7 +66,7 @@ home directory from a previous installation that did not use SELinux, 'restoreco + if args == (1,0): + return '/sbin/restorecon -R -v $TARGET_PATH' + else: +- return 'touch /.autorelabel; reboot' ++ return ['touch /.autorelabel', 'reboot'] + + def init_args(self, args): + if args == (1,0): +-- +2.53.0 + diff --git a/0002-catchall-Discourage-creating-custom-policy-modules.patch b/0002-catchall-Discourage-creating-custom-policy-modules.patch new file mode 100644 index 0000000..a3f28a1 --- /dev/null +++ b/0002-catchall-Discourage-creating-custom-policy-modules.patch @@ -0,0 +1,36 @@ +From 8ad7f4c5528fbbc52a3d391c702102c6fe262d83 Mon Sep 17 00:00:00 2001 +From: Vit Mojzis +Date: Tue, 9 Jun 2026 17:27:36 +0200 +Subject: [PATCH] catchall: Discourage creating custom policy modules + +Update the plugin text to discourage creating custom policy modules by +explaining the lack of support and potential security implications. +--- + src/catchall.py | 11 ++++++++--- + 1 file changed, 8 insertions(+), 3 deletions(-) + +diff --git a/src/catchall.py b/src/catchall.py +index 052d6d8..7e4a8fa 100644 +--- a/src/catchall.py ++++ b/src/catchall.py +@@ -54,9 +54,14 @@ class plugin(Plugin): + return _('If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on $TARGET_CLASS labeled $TARGET_TYPE by default.') + return _('If you believe that $SOURCE_BASE_PATH should be allowed $ACCESS access on the $TARGET_BASE_PATH $TARGET_CLASS by default.') + +- then_text = _('You should report this as a bug.\nYou can generate a local policy module to allow this access.') +- do_text = _("""Allow this access for now by executing: +-# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME ++ then_text = _(''' ++ You should report this as a bug.\n ++ If you are certain this access is legitimate and not an intrusion attempt, you ++ can generate a local policy module to allow it. ++ Custom policy modules are not supported as they may weaken the system policy and expose the system to security vulnerabilities. ++ ''') ++ ++ do_text = _("""# ausearch -c '$SOURCE' --raw | audit2allow -M my-$MODULE_NAME + # semodule -X 300 -i my-$MODULE_NAME.pp""") + + def __init__(self): +-- +2.53.0 + diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index cd440af..a931ed9 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,12 +6,14 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.15 -Release: 6%{?dist} +Release: 7%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz -# git format-patch -N setroubleshoot-plugins- -- plugins -# i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done +# git format-patch -N setroubleshoot-plugins- +# for j in 00*patch; do printf "Patch: %s\n" $j; done +Patch: 0001-Split-multi-command-fix_cmds-into-lists.patch +Patch: 0002-catchall-Discourage-creating-custom-policy-modules.patch BuildArch: noarch # gcc is needed only for ./configure @@ -20,8 +22,8 @@ BuildRequires: gcc BuildRequires: make BuildRequires: perl-XML-Parser BuildRequires: intltool gettext python3-devel -# Introduction of get_package_nvr functions -Requires: setroubleshoot-server >= 3.3.23 +# Support for multiple commands in fix_cmd +Conflicts: setroubleshoot-server < 3.3.37 %description This package provides a set of analysis plugins for use with @@ -49,6 +51,10 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Thu May 07 2026 Vit Mojzis - 3.3.15-7 +- Split multi-command fix_cmds into lists +- catchall: Discourage creating custom policy modules + * Sat Jan 17 2026 Fedora Release Engineering - 3.3.15-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild From b44ccaa1dfd6d4f54788884651cb69fee10b5ec7 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 17 Jul 2026 06:25:48 +0000 Subject: [PATCH 67/68] Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild --- setroubleshoot-plugins.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index a931ed9..9bda6f3 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -6,7 +6,7 @@ Summary: Analysis plugins for use with setroubleshoot Name: setroubleshoot-plugins Version: 3.3.15 -Release: 7%{?dist} +Release: 8%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz @@ -51,6 +51,9 @@ rm -rf %{buildroot} %{_datadir}/setroubleshoot/plugins %changelog +* Fri Jul 17 2026 Fedora Release Engineering - 3.3.15-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild + * Thu May 07 2026 Vit Mojzis - 3.3.15-7 - Split multi-command fix_cmds into lists - catchall: Discourage creating custom policy modules From e01770d15815e61505dffc18c61a12ffe90245fa Mon Sep 17 00:00:00 2001 From: jan janasek Date: Mon, 7 Sep 2026 13:57:04 +0200 Subject: [PATCH 68/68] Add VCS tag to spec file --- setroubleshoot-plugins.spec | 1 + 1 file changed, 1 insertion(+) diff --git a/setroubleshoot-plugins.spec b/setroubleshoot-plugins.spec index 9bda6f3..8ec5c8f 100644 --- a/setroubleshoot-plugins.spec +++ b/setroubleshoot-plugins.spec @@ -9,6 +9,7 @@ Version: 3.3.15 Release: 8%{?dist} License: GPL-2.0-or-later URL: https://gitlab.com/setroubleshoot/plugins +VCS: git:https://gitlab.com/setroubleshoot/plugins.git Source0: https://gitlab.com/-/project/24478430/uploads/1d856bff1c9fb16a8c6fc877d7fe91ca/setroubleshoot-plugins-3.3.15.tar.gz # git format-patch -N setroubleshoot-plugins- # for j in 00*patch; do printf "Patch: %s\n" $j; done