Viewing File: /usr/share/locale/ja/LC_MESSAGES/policycoreutils.mo
Þ Ž Œ% G \K xd , yd % Šd Ìd àd ôd e 'e @e Pe ? ge ; §e & ãe 9
f Df 9 af , f 7 Èf g I g I _g I ©g 3 óg 'h +h 4h ' Uh , }h ªh E Ÿh : i ( ?i . hi , i Äi ×i & éi / j . @j & oj 0 j / Çj S ÷j 8 Kk k k ¯k Âk Ók 7 äk d l ^ l è àl ) Ém ón ún þn o o
%o 3o <o M Mo o M Žo p H p G ]p ¥p ¶p G Îp q 3q Mq gq xq Q q ãq õq J þq
Ir N Tr £r Œr Õr 4 çr $ s ! As % cs M s ×s ès ) ñs / t Kt bt rt t t št »t Ît Òt > Þt I u 7 gu 6 u $ Öu ûu ~v C v ãv ) w ,w G Mw I w D ßw 8 $x 7 ]x L x - âx C y 7 Ty y O ©y ùy - z 5 Hz & ~z ) ¥z ) Ïz 1 ùz 7 +{ h c{ p Ì{ ? =| = }| > »| F ú| g A} ©} U È} I ~ E h~ 1 ®~ 6 à~ M < e : ¢ : Ý 2 1 K 0 } K ® - ú H ( 0 q : ¢ Ý þ . J < f & £ & Ê ( ñ A 0 \ 7 8 M S J Ú %
A
& a
&
¯
Î
0 æ
+ ( C 1 l ' ' Æ & î % Q ; @ Î ì ) ' 6 $ ^ € 3 » - ï & D 8 a # # Ÿ ) â - = : @ x $ ¹ 0 Þ & $ 6 0 [ 7 Ä 9 M ' ) ¯ Ù = ø + 6 F b @ © ' ê 4 % G # m , " Ú A ý 6 ? v ù 2 " K T n 9 Ã " ý * K % Î 2 ô 3 ' , [ * / ³ 0 ã 2 4 G I | " Æ ! é & 2 2 e % 6 Â ) ù 0 # + T % N Š õ ! . [ P 1 ¬ I Þ G ( p I ? × V K n G º M 7 P H 8 Ñ 6
" A : d / » Þ ë Ý Ê j š B 1 V * ³ 3 Ì ` $ | 0 ¡ * Ò J ý ] H ³ Š Ï Z - *¡ X¡ f v¡ E Ý¡ #¢ & @¢ K g¢ + ³¢ / ߢ 2 £ ! B£ ) d£ $ £ $ ³£ ) Ø£ ? € ( B€ < k€ ' š€ " Ѐ * ó€ Š Œ§ Ч ܧ ! ó§ , š ! Bš , dš š š œš ( Ú ) ìš © © .© 2 E© x© © © ¬© œ© kª tª 1 {ª ª ƪ 2 ݪ # « 1 4« f« 2 m« « º« " Û« º þ« ¹¬
@® œ Ư ° ( ° = ³° ñ° ± #± i +± P ± æ± ² ! ² <² Z² u² " ² ( ³² , ܲ ( ³ - 2³ % `³ ( ³ 1 ¯³ - á³ * Ž * :Ž 2 eŽ 8 Ž 9 ÑŽ µ % )µ $ Oµ 1 tµ Šµ ĵ åµ * ¶ 1¶ 2 N¶ ¶ " ¡¶ $ Ķ $ é¶ ! · ! 0· R· % n· · / °· à· ž "ž ( ;ž dž $ ž ¥ž Æž äž % ¹ + (¹ $ T¹ $ y¹ ¹ œ¹ ! Ú¹ $ ü¹ !º =º ' Xº º º ºº غ òº » /» L» a» y» 1 » È» â» ù» " Œ 6Œ TŒ iŒ Œ «Œ ÉŒ äŒ ýŒ œ 7œ $ Sœ xœ œ ·œ % Õœ + ûœ 'Ÿ ?Ÿ WŸ # wŸ Ÿ »Ÿ ØŸ * õŸ ¿ >¿ * Z¿ 5
¿ »¿ Ú¿ ! ù¿ ( À ! DÀ " fÀ ! À ) «À & ÕÀ & üÀ #Á $ =Á / bÁ / Á 7 ÂÁ 4 úÁ 4 / B d §Â Å ? ß 4 à ) Tà ) ~à 1 šÃ . Úà . Ä < 8Ä ) uÄ ) Ä 1 ÉÄ . ûÄ . *Å < YÅ ) Å ) ÀÅ 1 êÅ . Æ . KÆ < zÆ $ ·Æ ! ÜÆ þÆ ) Ç DÇ
[Ç fÇ Ç Ç
Ç «Ç 3 ²Ç æÇ ðÇ È "È 8È WÈ kÈ È È ¯È ËÈ - àÈ * É . 9É V hÉ ¿É ÓÉ @ ßÉ Ê »Ê ÇÊ ßÊ ^ ñÊ 9 PË p Ë 7 ûË 6 3Ì ? jÌ Y ªÌ > Í 4 CÍ 7 xÍ 6 °Í 6 çÍ R Î A qÎ @ ³Î @ ôÎ ( 5Ï ; ^Ï 5 Ï U ÐÏ &Ð R ŠÐ 4 ùÐ . .Ñ Z ]Ñ ` žÑ : Ò y TÒ @ ÎÒ 5 Ó i EÓ 5 ¯Ó 6 åÓ 4 Ô 6 QÔ U Ô 0 ÞÔ V Õ ; fÕ 8 ¢Õ % ÛÕ I Ö ; KÖ E Ö p ÍÖ >× K Ì× J Ø 9 cØ 7 Ø D ÕØ T Ù : oÙ @ ªÙ ; ëÙ - 'Ú 3 UÚ . Ú . žÚ 9 çÚ 9 !Û 0 [Û / Û 8 ŒÛ 6 õÛ 9 ,Ü C fÜ 6 ªÜ 7 áÜ . Ý D HÝ 5 Ý 7 ÃÝ 4 ûÝ 6 0Þ 5 gÞ 5 Þ ( ÓÞ C üÞ 8 @ß 7 yß 5 ±ß 5 çß à
%à 3à Rà [à A zà N Œà O á \ [á ; žá H ôá A =â N â ) Îâ øâ ã +ã 2ã ?ã 7 `ã * ã * Ãã W îã Fä Nä > Xä 6 ä ^ Îä E -å : så g ®å d æ g {æ 2 ãæ J ç - aç ; ç ( Ëç 0 ôç + %è X Qè ? ªè D êè < /é lé ' }é ( ¥é Îé Þé øé ê " 8ê # [ê ê ) ê Çê ãê ! ë "ë Cë F dë
«ë ¶ë Æë U ×ë b -ì \ ì i íì Wí lí
í í í ¶í Ôí ôí î " /î Rî eî oî î
î ¡î «î µî Èî % ãî Ì ï Öï àï - ð /ð ; >ð " zð o ð
ñ ( ñ . Eñ
tñ J ñ j Íñ ) 8ò bò hò 4 zò ) ¯ò / Ùò R ó \ó có gó |ó ? ó ' Òó úó ô + 0ô
\ô gô ô ô Žô & Ðô ÷ô õ ' õ Dõ \õ mõ & õ & §õ & Îõ õõ ö ö O 9ö ö + ö Œö Äö Ðö ìö 4 ÷ >÷ Z÷ i÷ ÷ 6 £÷ Ú÷ ç÷ ô÷ ø 3 #ø Wø `ø iø ø €ø Ãø Íø àø óø X üø
Uù `ù
wù
ù ù < ù # Ýù
ú ú ú *ú 4ú Fú Jú Tú Yú
hú
vú ú ú ªú Ëú ìú ! û )û Eû \û cû óû ýû P ü P bü ³ü L Èü ý J 0ý {ý ý U ·ý
þ "þ % .þ Tþ pþ þ M ¡þ ïþ ÿ 3 ÿ 7 Ëÿ D T ` ! {
ª µ œ Q  - : 6 S 5 C À B G Y n q € œ ) Ñ û
& 0 5
< H G
$ » à * å B ) S * } š Ž Ÿ 8 Ï ' 8 0 i p y
¥ ( Å î 3 û / G e & Ä Ô " ï - 3 : ( I l r ž ß § b Œ , C \ r ¢ µ Ç à õ 2
:
Y
k
}
±
Ÿ
Ð
â
ó
" 3 I Z : x 7 ³ ë
( 0 ? N J U J ë
¬
7 Z , F ¿
& m ; U © : ÿ ï : ' * _ R E ² s ø 4 l < ¡ T Þ E 3 . y 5 š ; Þ G T b · Á ( Ó $ ü ! 6 B J W j (
0 ® + ß 5 6 A
x X h é _ R ² V Q š q œ / 5 <
V E d ª Ç " æ ! + K R p ¡ ¹ Ò = ì
* A 8 U z Ï Ð | & ¯ % Ö , ü * ) ' T . | « · 1 Œ ) î ' ' @ - h E Ü ò ' ° ) Ø ! " ! , B! o! ! * ! r Ø! K" g" " " " ¢" ¶" Ë" ã" ) # +# & F# ' m# # ] Š# $ $ 0 $ r L$ U ¿$ % % 7% A%
_% m% y% . % * °% Û% L ø% ] E& £& ²& Ê& 0 Î& ÿ' L ( % l( ( ; ®( " ê( <
) E J) ) 0 §) 3 Ø) E * R* Z* f* j* _ t* # Ô* ; ø* ^ 4+ + + ·+ Ä+ , ß+ , 4 , # R, v, , , V , ' è, , -
=- H- ( ^- ( - °- " Æ- é- . !. ;. R. n. . €. Â. à. 7 / 8/ W/ 4 t/ ©/ Å/ Í/ Õ/ Ý/ å/ í/ õ/ ý/ 0 !0 + @0 l0 0
€0 " ¯0 Ò0 # ï0 7 1 K1 O1 < R1 7 1 7 Ç1 3 ÿ1 c 32 F 2 Þ2 ê2 ÷2 $ 3 = %3 % c3 < 3 7 Æ3 þ3
4
4 .4 D4 Z4 ^4 s4 4 4 4 4 % ©4 $ Ï4 # ô4 5 Ã !5 > å6 , $7 Q7 " q7 0 7 7 Å7 ý7 8 9 98
s8 ù8 G 9 S È9 2 : H O: J : 4 ã: ; r -; r ; r < M < Ô< Ø< + á< 6
= D D= = j ©= V > @ k> J ¬> J ÷> B? b? / {? > «? / ê? / @ D J@ 2 @ q Â@ = 4A rA A A žA ÍA H âA { +B u §B J C § hD F F F +F ' AF iF F ' F u ÆF $ <G r aG $ ÔG o ùG x iH $ âH * I i 2I , I / ÉI , ùI &J ) DJ } nJ ìJ
K u K K x ²K 6 +L $ bL $ L V ¬L 9 M B =M N M n ÏM >N WN @ mN U ®N . O 3O - OO }O O O €O ·O ÁO j ÚO EP X ÛP W 4Q B Q ÏQ J ÐR { S @ S K ØS B $T ~ gT æT nU l îU o [V ËV d SW p žW Z )X = X ÂX A [Y ` Y Q þY S PZ ] €Z P [ f S[ o º[ *\ Á Å\ ] ^ €^ 3_ Ê ³_ E ~` } Ä` t Ba { ·a g 3b l b q c ^ zc T Ùc K .d ] zd \ Ød ] 5e e U f s tf M èf 6g E ºg 4 h P 5h B h g Éh a 1i P i R äi 7j b ·j ÿ k l €l .m Ím E Tn T n F ïn F 6o G }o ; Åo T p S Vp P ªp l ûp W hq W Àq V r M or œr l ?s B ¬s 9 ïs I )t B st Q ¶t Q u 8 Zu b u Z öu S Qv = ¥v [ ãv H ?w F w Y Ïw e )x x l y O y ` Ñy O 2z L z 7 Ïz b { j{ o | J ó| : >} A y} m »} Z )~ ~ y M h Ø G A G < Ñ _ @ n ¯ = ö Ë K Â Y N h ¥ · s ]
S Ñ
[ % T { ó { o c ë W O Z § T a W c ¹ G ¥ F í M 4 k : î C ) V m o Ä P 4 f
C ì D 0 u H C I J Ø A g ¢ © t L > Á z u v o * x a K ÷ v C @ º c û Z _ ` º ª p Æ J 7 K K Î k H Ï E j [ ° a n ¡ : ¡ Y Ö¢ N 0€ B € Á € ¥ C Š K VŠ p ¢Š d § I x§ Q § ? š U Tš A ªš 9 ìš S &© o z© H ê© A 3ª 5 uª 3 «ª § ߪ , ¬ Ž® Ю * é® , ¯ ? A¯ ) ¯ < «¯ è¯ * ° ,° ( 3° A \° ° š° " ·° M Ú° ) (± R± e± q± ì ± ² ² W ² î² - ³ A 5³ ! w³ P ³ ê³ \ ÷³ . TŽ , Ž - °Ž ÞŽ ! ñµ $ ž 8º D» B N» Z » ì» ' þ» &Œ 9Œ P ŸŒ 9 œ 1 Iœ E {œ 1 Áœ 3 óœ = 'Ÿ B eŸ @ šŸ N éŸ C 8¿ R |¿ I Ï¿ D À ] ^À I ŒÀ F Á U MÁ Z £Á Y þÁ Z X = ³Â H ñ < :à A wà - ¹Ã 0 çà 0 Ä : IÄ 3 Ä L žÄ 9 Å < ?Å E |Å 5 ÂÅ 8 øÅ ? 1Æ - qÆ B Æ 6 âÆ C Ç 6 ]Ç 9 Ç 1 ÎÇ W È , XÈ E
È 1 ËÈ . ýÈ = ,É B jÉ A É C ïÉ 1 3Ê 1 eÊ . Ê < ÆÊ 1 Ë 7 5Ë 7 mË 0 ¥Ë - ÖË 3 Ì : 8Ì 3 sÌ < §Ì A äÌ > &Í 6 eÍ 2 Í H ÏÍ f Î 5 Î / µÎ B åÎ T (Ï E }Ï 3 ÃÏ C ÷Ï E ;Ð 5 Ð 2 ·Ð 0 êÐ 9 Ñ 1 UÑ , Ñ E ŽÑ 1 úÑ . ,Ò = [Ò B Ò A ÜÒ , Ó 7 KÓ I Ó K ÍÓ 7 Ô 4 QÔ C Ô G ÊÔ 5 Õ 9 HÕ C Õ L ÆÕ 5 Ö 2 IÖ < |Ö D ¹Ö E þÖ C D× E × G Î× D Ø Q [Ø 0 Ø H ÞØ \ 'Ù \ Ù ^ áÙ [ @Ú h Ú l Û ? rÛ - ²Û g àÛ U HÜ Q Ü Q ðÜ S BÝ P Ý ] çÝ a EÞ Q §Þ Q ùÞ S Kß P ß ] ðß a Nà T °à T á V Zá S ±á ` â d fâ B Ëâ @ ã = Oã * ã žã Ñã Þã ÷ã ä ä 8ä M ?ä ä ' ä 0 Âä ! óä ? å $ Uå ) zå €å 6 ºå $ ñå $ æ ? ;æ E {æ Q Áæ n ç ç ç } ±ç , /è \é 3 cé é « ªé f Vê µ œê b së a Öë d 8ì ì c 6í _ í k úí j fî _ Ñî ¡ 1ï Óï ~ Sð s Òð G Fñ i ñ ` øñ ¡ Yò Ê ûò w Æó Z >ô X ô òô £ |õ s ö Ý ö e r÷ W Ø÷ Š 0ø ] ×ø ` 5ù ` ù W ÷ù Oú M ãú 1û h Êû c 3ü B ü Úü k gý m Óý ± Aþ óþ ûÿ [ X ^ m · % [ Œ u \ L ë Z 8 [ U ï r E s ž X , W
\ Ý X : d ø a X ê T C { V
W k
V Ã
^ ] y Y × F 1 ~ x _ ÷ a W
a ¹
W s ? Ö Ý J ó ] > h { S W Õ Y - l / ô 5 $ $ Z ? ¢ _ â M B K a Ü > H O N × & Q Ã T j ü E & z l 9 ç W ! T y M Î D k a < Í W
i b Ì - Ù *
2 @ @ G ; É C C I F L Ô - ! L O 9 9 Ö 9 f J ± Ä Ý e ö ~ \ Û \! ó! " ." I" ? \" ) " 8 Æ" ? ÿ" 3 ?# + s# # ³# * Ç# ò# $ *$ :$ M$ c$ 3 $ ž$ Ä% 5 Ý% N & b& g |& B ä& '' Ç' J Þ' W )( ( k ( š ) ? ) í) ú) A * 8 U* E * Ô* X+ h+ l+ + o ¢+ G , / Z, * , M µ, - 8 - O- / o- , - 5 Ì- & . ). 5 J. + . ¬. Í. A î. ; 0/ 8 l/ 5 ¥/ Û/ ! î/ i 0 z0 B 0 Í0 Ô0 ! é0 4 1 _ @1 : 1 $ Û1 - 2 5 .2 X d2 œ2 Ì2 ß2 ø2 I 3 ^3 n3 + u3 + ¡3 > Í3 4 * 4 ' D4 l4 u 4 õ4 ! 5 (5 D5 T5 c h5 ? Ì5 6 6
;6
I6 $ T6 y6
}6 6 6 6 ¯6 Ÿ6 Ñ6 í6 6 7 6 <7 : s7 8 ®7 ? ç7 '8 é .8 9 ' %9 x M9 r Æ9 $ 9: x ^: * ×: l ; , o; ) ; } Æ; D< b< 3 x< 6 ¬< $ ã< $ = k -= = ê ²= Q > ] ï> M? l c? Ð? . ã? * @ =@ D@ W@ a@ h@ û@ % A 4A $ PA > uA D ŽA T ùA Z NB ©B % ÉB ïB H ùB 8 BC $ {C $ C W ÅC D . :D iD pD D D D D E ! $E FE 3 bE E D E e åE > KF ? F ÊF ÚF íF u G @ |G a œG H 5H ?H XH nH xH + H ; ŽH ðH c ýH $ aI 6 I 0 œI 0 îI W J wJ " J B ±J ( ôJ K *K 7K < MK K & L ?M
IM WM xM üM N ) #N MN \N & wN N ŒN & ÚN O O = 9O # wO O ·O ÒO äO ùO P /P IP aP zP P §P ·P ! ÈP êP & úP ] !Q Z Q 6 ÚQ ) R ;R CR YR oR d vR a ÛR ù =S 7T MT å `T Q FU N U i çU QV - gV V x &W f W X X 6 _Y ¢ Y ` 9Z œ Z Q X[ E ª[ ~ ð[ Q o\ B Á\ H ] H M] ` ] ÷] |^ ^ ? ¡^ < á^ * _ I_ e_ ! r_ _ E §_ B í_ F 0` 9 w` G ±` H ù` Ba Xa qa £ ôa b Ï *c Q úc Ld kd e e 6 'e ( ^e Z e = âe ? f 6 `f B f @ Úf g - (g 5 Vg % g % ²g & Øg ' ÿg b 'h h k Šh o i ] i à àj ù Ák 6 »l 6 òl [ )m ?
m 9 Åm N ÿm Nn Un a _n G Án I o I So J o b èo Kp gp p p Ä ©p = nq B ¬q ïq 4 r 1 Dr ) vr / r C Ðr s 0 ³s äs ÿs t t ,t Lt # mt ) t 5 »t & ñt 2 u P Ku $ u r Áu 4v Mv c cv Ö Çv w ?x Lx mx 8
x Ÿx Ðx àx 8 ðx B )y 7 ly €y Ž +z ! àz , { /{ ª 6{ 3 á| d } I z} 6 Ä} M û} ? I~ i ~ l ó~ 0 ` 7 W É ! £ ¯ Ä Î ª ç 0 p à 4 Ò ë $ G B 4 © # Þ n , A > Ý
! )
M K
I
( ã
4 = A . & ® ' Õ 2 ý 5 0 5 f 3 ( Ð 4 ù U . . 1 ³ R å + 8 d l t | ) € Î F ê ! 1 ( S | ) " Œ 7 ß E ] d D k ? ° ? ð > 0 o c m 8 £ C Ü < ` ] ^ Ÿ ! 6 X t ' ² ¶ Í æ ð ô û A ? S > Ò A È Ê X § Ü S é Ú Å > ( Ò 7 ã ü l + ô Ä à « F Œ À Ç î P œ ² c
0 « m ä i ? A ¡ S Ø J l O y Z } X N ê i K û ë Á I ¥ c ± Î
æ ¯ õ ¬ Ð ¡ ? w D R × " h Ñ é ö v ¶ X ª Š Ÿ á y ñ Á { Ž ê ° x r ß 8 { e n 6 b ; Ž À õ \ Ù r G : ç Z × Ä µ y E ë ® U V ` § Õ u
q § × * 1 ° I - « à } Þ
¿ s t @ R œ ¬ r E º C & ý } ² d U ® b Ú ä © Ç Ó Ñ
à ÷ € 5 È ª L X j Ÿ a x C
¢ ! © \ Ã x ] G y Ž ~ z ¥ « 3 ( Ô / ) N T P ` î ` ® Ä Ù ¯ ì d > + & Ï ' Ý n ð · Ë 3 Ñ û J o w
; ^ í € Š ! ú N T È þ  K ± 4 h Ð { œ l ç ò Ø | æ k ³ î Ö . ¯ Î
< 1 \ € $ ¬ @ D v ö k Î 4 0 N 7 " 5 ] p è K 5
~ s µ þ ¬ © n ž 8 Æ ¥ m @ â i ° d â ¶ ( ÷ » ' ù Õ 4 ö Ö { p
9 Ð Æ å E ù B D · Œ Q c ` × ß A } . > z + ^ $ } a û G È & M à [ d J £ ? Ò F , Á Ê ^ Û Q j C f Ô » K ø Á ¡ U * = 8 ç Ñ - þ p b E ð 2 9 \ ) Þ 6 À C º Ø I S x « ï . ¡ Ù Ÿ k _ ¡ ò ¯ m ò ä Ü ± | ; @ Y M + F . ^ c 1 O q ð µ H O - Í ú à Ø F r = ` ¬ í å o f º R V Y ø ¥ , R " Ò ! 8 C W Û ª Y E S v Ë 6 Å è - ! < á > å s [ í £ * ³ d Ï ÿ t ² B , Ý Ä Ã M O ÿ = N € ² V Š 4 $ ± ¹ 5 n ¹ | Ž L è " Å Õ ¿ å Ô ^ S é
ô # < ÷ D œ ' $ _ i Š g Ö ¥ š µ Ÿ Ë é Æ 8 : r % ñ ò þ L Q ÿ ú £ ß w £ # - ª # g Ý ú x ¶ ž ¯ c ¹ Ú 9 a Z O ] q É É 4 v š š A | ó î ê ¢ e ì ¿ ñ Q » Š ÷ = k ? ì z ý ü R
6 § Ü q H © # y 6 ( Í # ± % Þ í n & ] ® ö 3 ô u ) ó U Ê z ~ 0 m  ã T ' ® ° ¢ ã ª
I Û 5 0 ¢ g Ü » Ò Í . G P [
Ö É F á I H ! h Ì · Ì ¶ H s J ï w g W A o á l Ô ä ; v ó Ã ù Ê æ 7 Ï / Û Y Ž j ø Ý > À s , © ð B T W u f Î 2 l ô T J [ ~ & Þ X [ U ° * Â _ % % Ì 3 f § ï ø $ h Y ¹ š ê Ï ç ( e ï · a 2 3 ~ ß P š : g ' ž / / o { Õ D ¿ ) ó 9 j _ € ) p Ù % V b 7 ? * b ã < ³ ü
Ó e Z u + q ë a 7 / k 1 0 Œ @ Q : ] º 9 Ç z e ù Z Å : Â É 2 o Æ õ Ó f Ð w B ³ ý u ³ æ L \ Ì Ú P t Œ W ì ² i ý < â j V t | ¢ 2 K £ ; M Í Ë ü p û ë M ž m t W ÿ è H Ç ñ â B , h _ G " õ Ó = 1 L
SELinux Distribution fcontext Equivalence
SELinux Local fcontext Equivalence
%s changed labels.
%s is already in %s %s is not a domain type %s is not a valid context
%s is not a valid domain %s is not in %s %s must be a directory %s! Could not get current context for %s, not relabeling tty.
%s! Could not get new context for %s, not relabeling tty.
%s! Could not set new context for %s
%s: Can't load policy and enforcing mode requested: %s
%s: Can't load policy: %s
%s: Policy is already loaded and initial load requested
'%s' policy modules require existing domains ******************** IMPORTANT ***********************
-- Allowed %s [ %s ] -a option can not be used with '%s' domains. Read usage for more details. -d option can not be used with '%s' domains. Read usage for more details. -t option can not be used with '%s' domains. Read usage for more details. -w option can not be used with the --newtype option ... 600-1024 <b>...SELECT TO VIEW DATA...</b> <b>Add booleans from the %s policy:</b> <b>Add files/directories that %s manages</b> <b>Applications</b> <b>Deny all processes from ptracing or debugging other processes?</b> <b>Disable ability to run unconfined system processes?</b> <b>Disable all permissive processes?</b> <b>Enter name of application or user role:</b> <b>Enter network ports that %s binds on:</b> <b>Login Users</b> <b>Root Users</b> <b>Select additional roles for %s:</b> <b>Select common application traits for %s:</b> <b>Select domains that %s will administer:</b> <b>Select existing role to modify:</b> <b>Select network ports that %s connects to:</b> <b>Select roles that %s will transition to:</b> <b>Select the policy type for the application or user role you want to confine:</b> <b>Select the user_roles that will transition to %s:</b> <b>Select:</b> <b>System Configuration</b> <b>System Mode</b> <b>TCP Ports</b> <b>UDP Ports</b> <b>Which directory you will generate the %s policy?</b> <operation> File Labeling for <selected domain>. File labels will be created when update is applied. <operation> Network Port for <selected domain>. Ports will be created when update is applied. <small>
To change from Disabled to Enforcing mode
- Change the system mode from Disabled to Permissive
- Reboot, so that the system can relabel
- Once the system is working as planned
* Change the system mode to Enforcing</small>
A permissive domain is a process label that allows the process to do what it wants, with SELinux only logging the denials, but not enforcing them. Usually permissive domains indicate experimental policy, disabling the module could cause SELinux to deny access to a domain, that should be allowed. Action Add Add %s Add Boolean Add Booleans Dialog Add Directory Add File Add File Context Add File Equivalency Mapping. Mapping will be created when update is applied. Add File Labeling for %s Add File Labeling for %s. File labels will be created when update is applied. Add Login Mapping Add Login Mapping. Login Mapping will be created when update is applied. Add Login Mapping. User Mapping will be created when Update is applied. Add Network Port Add Network Port for %s Add Network Port for %s. Ports will be created when update is applied. Add SELinux File Equivalency Add SELinux Login Mapping Add SELinux Network Ports Add SELinux User Add SELinux User Mapping Add SELinux User Role. SELinux user roles will be created when update is applied. Add SELinux Users Add User Add User Roles. SELinux User Roles will be created when Update is applied. Add a file Add file Equivalence Mapping. Mapping will be created when Update is applied. Add file equiv labeling. Add file labeling for %s Add login mapping Add new %(TYPE)s file path for '%(DOMAIN)s' domains. Add new File Equivalence definition. Add new Login Mapping definition. Add new SELinux User/Role definition. Add new port definition to which the '%(APP)s' domain is allowed to %(PERM)s. Add ports for %s Add user Add/Remove booleans used by the %s domain Addr %s is defined in policy, cannot be deleted Addr %s is not defined Admin User Role Administrator Login User Role Advanced << Advanced >> Advanced Search << Advanced Search >> All All domains Allow %s to call bindresvport with 0. Binding to port 600-1024 Allow ABRT to modify public files used for public file transfer services. Allow Apache to communicate with avahi service via dbus Allow Apache to communicate with sssd service via dbus Allow Apache to execute tmp content. Allow Apache to modify public files used for public file transfer services. Directories/Files must be labeled public_content_rw_t. Allow Apache to query NS records Allow Apache to run in stickshift mode, not transition to passenger Allow Apache to run preupgrade Allow Apache to use mod_auth_ntlm_winbind Allow Apache to use mod_auth_pam Allow HTTPD scripts and modules to connect to cobbler over the network. Allow HTTPD scripts and modules to connect to databases over the network. Allow HTTPD scripts and modules to connect to the network using TCP. Allow HTTPD scripts and modules to server cobbler files. Allow HTTPD to connect to port 80 for graceful shutdown Allow HTTPD to run SSI executables in the same domain as system CGI scripts. Allow Puppet client to manage all file types. Allow Puppet master to use connect to MySQL and PostgreSQL database Allow Redis to run redis-sentinal notification scripts. Allow Zabbix to run su/sudo. Allow ZoneMinder to modify public files used for public file transfer services. Allow ZoneMinder to run su/sudo. Allow a user to login as an unconfined domain Allow all daemons the ability to read/write terminals Allow all daemons to use tcp wrappers. Allow all daemons to write corefiles to / Allow all domains to execute in fips_mode Allow all domains to have the kernel load modules Allow all domains to use other domains file descriptors Allow all domains write to kmsg_device, while kernel is executed with systemd.log_target=kmsg parameter. Allow all unconfined executables to use libraries requiring text relocation that are not labeled textrel_shlib_t Allow antivirus programs to read non security files on a system Allow any files/directories to be exported read/only via NFS. Allow any files/directories to be exported read/write via NFS. Allow any process to mmap any file on system with attribute file_type. Allow apache scripts to write to public content, directories/files must be labeled public_rw_content_t. Allow auditadm to exec content Allow cluster administrative cluster domains memcheck-amd64- to use executable memory Allow cluster administrative domains to connect to the network using TCP. Allow cluster administrative domains to manage all files on a system. Allow confined applications to run with kerberos. Allow confined applications to use nscd shared memory. Allow confined users the ability to execute the ping and traceroute commands. Allow confined virtual guests to interact with rawip sockets Allow confined virtual guests to interact with the sanlock Allow confined virtual guests to interact with the xserver Allow confined virtual guests to manage cifs files Allow confined virtual guests to manage nfs files Allow confined virtual guests to read fuse files Allow confined virtual guests to use executable memory and executable stack Allow confined virtual guests to use glusterd Allow confined virtual guests to use serial/parallel communication ports Allow confined virtual guests to use usb devices Allow confined web browsers to read home directory content Allow conman to manage nfs files Allow cups execmem/execstack Allow database admins to execute DML statement Allow dbadm to exec content Allow dhcpc client applications to execute iptables commands Allow ftpd to use ntfs/fusefs volumes. Allow ganesha to read/write fuse files Allow glance domain to manage fuse files Allow glance domain to use executable memory and executable stack Allow glusterd_t domain to use executable memory Allow glusterfsd to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. Allow glusterfsd to share any file/directory read only. Allow glusterfsd to share any file/directory read/write. Allow gpg web domain to modify public files used for public file transfer services. Allow gssd to list tmp directories and read the kerberos credential cache. Allow guest to exec content Allow http daemon to check spam Allow http daemon to connect to mythtv Allow http daemon to connect to zabbix Allow http daemon to send mail Allow httpd cgi support Allow httpd daemon to change its resource limits Allow httpd processes to manage IPA content Allow httpd processes to run IPA helper. Allow httpd scripts and modules execmem/execstack Allow httpd to access FUSE file systems Allow httpd to access cifs file systems Allow httpd to access nfs file systems Allow httpd to access openstack ports Allow httpd to act as a FTP client connecting to the ftp port and ephemeral ports Allow httpd to act as a FTP server by listening on the ftp port. Allow httpd to act as a relay Allow httpd to connect to sasl Allow httpd to connect to memcache server Allow httpd to connect to the ldap port Allow httpd to read home directories Allow httpd to read user content Allow httpd to run gpg Allow httpd to use built in scripting (usually php) Allow ksmtuned to use cifs/Samba file systems Allow ksmtuned to use nfs file systems Allow logadm to exec content Allow logging in and using the system from /dev/console. Allow logrotate to manage nfs files Allow logrotate to read logs inside Allow mailman to access FUSE file systems Allow mock to read files in home directories. Allow mozilla plugin domain to bind unreserved tcp/udp ports. Allow mozilla plugin domain to connect to the network using TCP. Allow mozilla plugin to support GPS. Allow mozilla plugin to support spice protocols. Allow mozilla plugin to use Bluejeans. Allow mysqld to connect to all ports Allow nagios run in conjunction with PNP4Nagios. Allow nagios/nrpe to call sudo from NRPE utils scripts. Allow nfs servers to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. Allow openshift to access nfs file systems without labels Allow openvpn to run unconfined scripts Allow pcp to bind to all unreserved_ports Allow pcp to read generic logs Allow piranha-lvs domain to connect to the network using TCP. Allow polipo to connect to all ports > 1023 Allow postfix_local domain full write access to mail_spool directories Allow postgresql to use ssh and rsync for point-in-time recovery Allow pppd to be run for a regular user Allow pppd to load kernel modules for certain modems Allow qemu-ga to manage qemu-ga date. Allow qemu-ga to read qemu-ga date. Allow racoon to read shadow Allow regular users direct dri device access Allow rpcd_t to manage fuse files Allow rsync server to manage all files/directories on the system. Allow rsync to export any files/directories read only. Allow rsync to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. Allow rsync to run as a client Allow s-c-kdump to run bootloader in bootloader_t. Allow samba to act as a portmapper Allow samba to act as the domain controller, add users, groups and change passwords. Allow samba to create new home directories (e.g. via PAM) Allow samba to export NFS volumes. Allow samba to export ntfs/fusefs volumes. Allow samba to modify public files used for public file transfer services. Files/Directories must be labeled public_content_rw_t. Allow samba to run unconfined scripts Allow samba to share any file/directory read only. Allow samba to share any file/directory read/write. Allow samba to share users home directories. Allow sandbox containers manage fuse files Allow sandbox containers to send audit messages Allow sandbox containers to use all capabilities Allow sandbox containers to use mknod system calls Allow sandbox containers to use netlink system calls Allow sandbox containers to use sys_admin system calls, for example mount Allow sanlock to manage cifs files Allow sanlock to manage nfs files Allow sanlock to read/write fuse files Allow sanlock to read/write user home directories. Allow sasl to read shadow Allow secadm to exec content Allow sge to access nfs file systems. Allow sge to connect to the network using any TCP port Allow smbd to load libgfapi from gluster. Allow spamd to read/write user home directories. Allow spamd_update to connect to all ports. Allow ssh logins as sysadm_r:sysadm_t Allow ssh with chroot env to read and write files in the user home directories Allow staff to exec content Allow sysadm to exec content Allow syslogd daemon to send mail Allow syslogd the ability to call nagios plugins. It is turned on by omprog rsyslog plugin. Allow syslogd the ability to read/write terminals Allow system cron jobs to relabel filesystem for restoring file contexts. Allow system cronjob to be executed on on NFS, CIFS or FUSE filesystem. Allow system to run with NIS Allow tftp to modify public files used for public file transfer services. Allow tftp to read and write files in the user home directories Allow the Irssi IRC Client to connect to any port, and to bind to any unreserved port. Allow the Telepathy connection managers to connect to any generic TCP port. Allow the Telepathy connection managers to connect to any network port. Allow the graphical login program to create files in HOME dirs as xdm_home_t. Allow the graphical login program to execute bootloader Allow the graphical login program to login directly as sysadm_r:sysadm_t Allow the mount commands to mount any directory or file. Allow tomcat to connect to databases over the network. Allow tomcat to read rpm database. Allow tomcat to use executable memory and executable stack Allow tor to act as a relay Allow transmit client label to foreign database Allow unconfined executables to make their heap memory executable. Doing this is a really bad idea. Probably indicates a badly coded executable, but could indicate an attack. This executable should be reported in bugzilla Allow unconfined executables to make their stack executable. This should never, ever be necessary. Probably indicates a badly coded executable, but could indicate an attack. This executable should be reported in bugzilla Allow unconfined users to transition to the Mozilla plugin domain when running xulrunner plugin-container. Allow unprivileged user to create and transition to svirt domains. Allow unprivileged users to execute DDL statement Allow user to use ssh chroot environment. Allow user music sharing Allow user spamassassin clients to use the network. Allow user to exec content Allow user to r/w files on filesystems that do not have extended attributes (FAT, CDROM, FLOPPY) Allow users to connect to PostgreSQL Allow users to connect to the local mysql server Allow users to login using a radius server Allow users to login using a yubikey OTP server or challenge response mode Allow users to resolve user passwd entries directly from ldap rather then using a sssd server Allow users to run TCP servers (bind to ports and accept connection from the same domain and outside users) disabling this forces FTP passive mode and may change other protocols. Allow users to run UDP servers (bind to ports and accept connection from the same domain and outside users) disabling this may break avahi discovering services on the network and other udp related services. Allow virtual processes to run as userdomains Allow xen to manage nfs files Allow xend to run blktapctrl/tapdisk. Not required if using dedicated logical volumes for disk images. Allow xend to run qemu-dm. Not required if using paravirt and no vfb. Allow xguest to exec content Allow xguest to use blue tooth devices Allow xguest users to configure Network Manager and connect to apache ports Allow xguest users to mount removable media Allow zarafa domains to setrlimit/sys_resource. Allow zebra daemon to write it configuration files Allows %s to bind to any udp port Allows %s to bind to any udp ports > 1024 Allows %s to connect to any tcp port Allows %s to connect to any udp port Allows XServer to execute writable memory Allows clients to write to the X server shared memory segments. Allows xdm_t to bind on vnc_port_t(5910) Alternate SELinux policy, defaults to /sys/fs/selinux/policy Alternate root directory, defaults to / Alternative root needs to be setup An permissive domain is a process label that allows the process to do what it wants, with SELinux only logging the denials, but not enforcing them. Usually permissive domains indicate experimental policy, disabling the module could cause SELinux to deny access to a domain, that should be allowed. An unconfined domain is a process label that allows the process to do what it wants, without SELinux interfering. Applications started at boot by the init system that SELinux do not have defined SELinux policy will run as unconfined if this module is enabled. Disabling it means all daemons will now be confined. To disable the unconfined_t user you must first remove unconfined_t from the users/login screens. Analyzing Policy... Application Application File Types Application Transitions From '%s' Application Transitions From 'select domain' Application Transitions Into '%s' Application Transitions Into 'select domain' Applications Applications - Advanced Search Apply Are you sure you want to delete %s '%s'? Bad format %(BOOLNAME)s: Record %(VALUE)s Boolean Boolean
Enabled Boolean %s Allow Rules Boolean %s is defined in policy, cannot be deleted Boolean %s is not defined Boolean Name Boolean name Boolean section. Boolean to determine whether the system permits loading policy, setting enforcing mode, and changing boolean values. Set this to true and you have to reboot to set it back. Booleans Browse Browse to select the file/directory for labeling. Builtin Permissive Types Calling Process Domain Can not combine +/- with other types of categories Can not have multiple sensitivities Can not modify sensitivity levels using '+' on %s Cancel Cannot find your entry in the shadow passwd file.
Cannot read policy store. Change process mode to enforcing Change process mode to permissive. Changing the policy type will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue? Changing to SELinux disabled requires a reboot. It is not recommended. If you later decide to turn SELinux back on, the system will be required to relabel. If you just want to see if SELinux is causing a problem on your system, you can go to permissive mode which will only log errors and not enforce SELinux policy. Permissive mode does not require a reboot Do you wish to continue? Changing to SELinux disabled requires a reboot. It is not recommended. If you later decide to turn SELinux back on, the system will be required to relabel. If you just want to see if SELinux is causing a problem on your system, you can go to permissive mode which will only log errors and not enforce SELinux policy. Permissive mode does not require a reboot. Do you wish to continue? Changing to SELinux enabled will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue? Class Command required for this type of policy Commit all changes in your current transaction to the server. Configue SELinux Confined Root Administrator Role Context Control the ability to mmap a low area of the address space, as configured by /proc/sys/vm/mmap_min_addr. Copyright (c)2006 Red Hat, Inc.
Copyright (c) 2006 Dan Walsh <dwalsh@redhat.com> Could not add SELinux user %s Could not add addr %s Could not add file context for %s Could not add ibendport %s/%s Could not add ibpkey %s/%s Could not add interface %s Could not add login mapping for %s Could not add port %(PROTOCOL)s/%(PORT)s Could not add prefix %(PREFIX)s for %(ROLE)s Could not add role %(ROLE)s for %(NAME)s Could not check if SELinux user %s is defined Could not check if addr %s is defined Could not check if boolean %s is defined Could not check if file context for %s is defined Could not check if ibendport %s/%s is defined Could not check if ibpkey %s/%s is defined Could not check if interface %s is defined Could not check if login mapping for %s is defined Could not check if port %(PROTOCOL)s/%(PORT)s is defined Could not check if port @%(PROTOCOL)s/%(PORT)s is defined Could not close descriptors.
Could not commit semanage transaction Could not create SELinux user for %s Could not create a key for %(PROTOTYPE)s/%(PORT)s Could not create a key for %s Could not create a key for %s/%d Could not create a key for %s/%s Could not create a key for ibendport %s/%s Could not create addr for %s Could not create context for %(PROTOCOL)s/%(PORT)s Could not create context for %s Could not create context for %s/%s Could not create file context for %s Could not create ibendport for %s/%s Could not create ibpkey for %s/%s Could not create interface for %s Could not create key for %s Could not create login mapping for %s Could not create module key Could not create port for %(PROTOCOL)s/%(PORT)s Could not create semanage handle Could not delete SELinux user %s Could not delete addr %s Could not delete all interface mappings Could not delete boolean %s Could not delete file context for %s Could not delete ibendport %s/%s Could not delete ibpkey %s/%s Could not delete interface %s Could not delete login mapping for %s Could not delete port %(PROTOCOL)s/%(PORT)s Could not delete the file context %s Could not delete the ibendport %s/%d Could not delete the ibpkey %s Could not delete the port %s Could not deleteall node mappings Could not determine enforcing mode.
Could not disable module %s Could not enable module %s Could not establish semanage connection Could not extract key for %s Could not get module enabled Could not get module lang_ext Could not get module name Could not get module priority Could not list SELinux modules Could not list SELinux users Could not list addrs Could not list booleans Could not list file contexts Could not list file contexts for home directories Could not list ibendports Could not list ibpkeys Could not list interfaces Could not list local file contexts Could not list login mappings Could not list ports Could not list roles for user %s Could not list the file contexts Could not list the ibendports Could not list the ibpkeys Could not list the ports Could not modify SELinux user %s Could not modify addr %s Could not modify boolean %s Could not modify file context for %s Could not modify ibendport %s/%s Could not modify ibpkey %s/%s Could not modify interface %s Could not modify login mapping for %s Could not modify port %(PROTOCOL)s/%(PORT)s Could not open file %s
Could not query addr %s Could not query file context %s Could not query file context for %s Could not query ibendport %s/%s Could not query ibpkey %s/%s Could not query interface %s Could not query port %(PROTOCOL)s/%(PORT)s Could not query seuser for %s Could not query user for %s Could not remove module %s (remove failed) Could not remove permissive domain %s (remove failed) Could not set MLS level for %s Could not set MLS range for %s Could not set SELinux user for %s Could not set active value of boolean %s Could not set addr context for %s Could not set exec context to %s.
Could not set file context for %s Could not set ibendport context for %s/%s Could not set ibpkey context for %s/%s Could not set interface context for %s Could not set mask for %s Could not set message context for %s Could not set mls fields in addr context for %s Could not set mls fields in file context for %s Could not set mls fields in ibendport context for %s/%s Could not set mls fields in ibpkey context for %s/%s Could not set mls fields in interface context for %s Could not set mls fields in port context for %(PROTOCOL)s/%(PORT)s Could not set module key name Could not set name for %s Could not set permissive domain %s (module installation failed) Could not set port context for %(PROTOCOL)s/%(PORT)s Could not set role in addr context for %s Could not set role in file context for %s Could not set role in ibendport context for %s/%s Could not set role in ibpkey context for %s/%s Could not set role in interface context for %s Could not set role in port context for %(PROTOCOL)s/%(PORT)s Could not set type in addr context for %s Could not set type in file context for %s Could not set type in ibendport context for %s/%s Could not set type in ibpkey context for %s/%s Could not set type in interface context for %s Could not set type in port context for %(PROTOCOL)s/%(PORT)s Could not set user in addr context for %s Could not set user in file context for %s Could not set user in ibendport context for %s/%s Could not set user in ibpkey context for %s/%s Could not set user in interface context for %s Could not set user in port context for %(PROTOCOL)s/%(PORT)s Could not start semanage transaction Could not test MLS enabled status Couldn't get default type.
Create/Manipulate temporary files in /tmp Current Enforcing Mode Customized Customized Permissive Types DBUS System Daemon Default Default Level Delete Delete %(TYPE)s file paths for '%(DOMAIN)s' domain. Delete %s Delete File Context Delete Modified File Labeling Delete Modified Ports Delete Modified Users Mapping. Delete Network Port Delete SELinux User Mapping Delete User Delete file equiv labeling. Delete file labeling for %s Delete login mapping Delete modified File Equivalence definitions. Delete modified Login Mapping definitions. Delete modified SELinux User/Role definitions. Delete modified port definitions to which the '%(APP)s' domain is allowed to %(PERM)s. Delete ports for %s Delete user Deny any process from ptracing or debugging any other processes. Deny user domains applications to map a memory region as both executable and writable, this is dangerous and the executable should be reported in bugzilla Description Desktop Login User Role Destination Class Determine whether ABRT can run in the abrt_handle_event_t domain to handle ABRT event scripts. Determine whether Bind can bind tcp socket to http ports. Determine whether Bind can write to master zone files. Generally this is used for dynamic DNS or zone transfers. Determine whether Cobbler can access cifs file systems. Determine whether Cobbler can access nfs file systems. Determine whether Cobbler can connect to the network using TCP. Determine whether Cobbler can modify public files used for public file transfer services. Determine whether Condor can connect to the network using TCP. Determine whether DHCP daemon can use LDAP backends. Determine whether Git CGI can access cifs file systems. Determine whether Git CGI can access nfs file systems. Determine whether Git CGI can search home directories. Determine whether Git session daemon can bind TCP sockets to all unreserved ports. Determine whether Git system daemon can access cifs file systems. Determine whether Git system daemon can access nfs file systems. Determine whether Git system daemon can search home directories. Determine whether Gitosis can send mail. Determine whether Nagios, NRPE can access nfs file systems. Determine whether Polipo can access nfs file systems. Determine whether Polipo session daemon can bind tcp sockets to all unreserved ports. Determine whether abrt-handle-upload can modify public files used for public file transfer services in /var/spool/abrt-upload/. Determine whether attempts by wine to mmap low regions should be silently blocked. Determine whether awstats can purge httpd log files. Determine whether boinc can execmem/execstack. Determine whether calling user domains can execute Git daemon in the git_session_t domain. Determine whether calling user domains can execute Polipo daemon in the polipo_session_t domain. Determine whether can antivirus programs use JIT compiler. Determine whether cdrecord can read various content. nfs, samba, removable devices, user temp and untrusted content files Determine whether collectd can connect to the network using TCP. Determine whether conman can connect to all TCP ports Determine whether crond can execute jobs in the user domain as opposed to the the generic cronjob domain. Determine whether cvs can read shadow password files. Determine whether dbadm can manage generic user files. Determine whether dbadm can read generic user files. Determine whether docker can connect to all TCP ports. Determine whether entropyd can use audio devices as the source for the entropy feeds. Determine whether exim can connect to databases. Determine whether exim can create, read, write, and delete generic user content files. Determine whether exim can read generic user content files. Determine whether fenced can connect to the TCP network. Determine whether fenced can use ssh. Determine whether ftpd can bind to all unreserved ports for passive mode. Determine whether ftpd can connect to all unreserved ports. Determine whether ftpd can connect to databases over the TCP network. Determine whether ftpd can login to local users and can read and write all files on the system, governed by DAC. Determine whether ftpd can modify public files used for public file transfer services. Directories/Files must be labeled public_content_rw_t. Determine whether ftpd can use CIFS used for public file transfer services. Determine whether ftpd can use NFS used for public file transfer services. Determine whether glance-api can connect to all TCP ports Determine whether haproxy can connect to all TCP ports. Determine whether icecast can listen on and connect to any TCP port. Determine whether irc clients can listen on and connect to any unreserved TCP ports. Determine whether keepalived can connect to all TCP ports. Determine whether logwatch can connect to mail over the network. Determine whether lsmd_plugin can connect to all TCP ports. Determine whether mcelog can execute scripts. Determine whether mcelog can use all the user ttys. Determine whether mcelog supports client mode. Determine whether mcelog supports server mode. Determine whether minidlna can read generic user content. Determine whether mpd can traverse user home directories. Determine whether mpd can use cifs file systems. Determine whether mpd can use nfs file systems. Determine whether mplayer can make its stack executable. Determine whether neutron can connect to all TCP ports Determine whether openvpn can connect to the TCP network. Determine whether openvpn can read generic user home content files. Determine whether polipo can access cifs file systems. Determine whether privoxy can connect to all tcp ports. Determine whether radius can use JIT compiler. Determine whether smartmon can support devices on 3ware controllers. Determine whether squid can connect to all TCP ports. Determine whether squid can run as a transparent proxy. Determine whether swift can connect to all TCP ports Determine whether tmpreaper can use cifs file systems. Determine whether tmpreaper can use nfs file systems. Determine whether tmpreaper can use samba_share files Determine whether to support lpd server. Determine whether tor can bind tcp sockets to all unreserved ports. Determine whether varnishd can use the full TCP network. Determine whether webadm can manage generic user files. Determine whether webadm can read generic user files. Determine whether zabbix can connect to all TCP ports Disable Disable Audit Disable kernel module loading. Disabled Disabled
Permissive
Enforcing
Display applications that can transition into or out of the '%s'. Display applications that can transition into or out of the 'selected domain'. Display boolean information that can be used to modify the policy for the '%s'. Display boolean information that can be used to modify the policy for the 'selected domain'. Display file type information that can be used by the '%s'. Display file type information that can be used by the 'selected domain'. Display network ports to which the '%s' can connect or listen to. Display network ports to which the 'selected domain' can connect or listen to. Domain name(s) of man pages to be created Dontaudit Apache to search dirs. Edit Network Port Enable Enable Audit Enable cluster mode for daemons. Enable extra rules in the cron domain to support fcron. Enable polyinstantiated directory support. Enable reading of urandom for all domains. Enable/Disable additional audit rules, that are normally not reported in the log files. Enabled Enforcing Enter Default Level for SELinux User to login with. Default s0 Enter MLS/MCS Range for this SELinux User.
s0-s0:c1023 Enter MLS/MCS Range for this login User. Defaults to the range for the Selected SELinux User. Enter SELinux role(s) to which the administror domain will transition Enter SELinux user(s) which will transition to this domain Enter a comma separated list of tcp ports or ranges of ports that %s connects to. Example: 612, 650-660 Enter a comma separated list of udp ports or ranges of ports that %s binds to. Example: 612, 650-660 Enter a comma separated list of udp ports or ranges of ports that %s connects to. Example: 612, 650-660 Enter complete path for executable to be confined. Enter complete path to init script used to start the confined application. Enter domain type which you will be extending Enter domain(s) which this confined admin will administrate Enter interface names, you wish to query Enter the MLS Label to assign to this file path. Enter the MLS Label to assign to this port. Enter the login user name of the user to which you wish to add SELinux User confinement. Enter the path to which you want to setup an equivalence label. Enter the port number or range to which you want to add a port type. Enter unique name for the confined application or user role. Equivalence Path Equivalence class for %s already exists Equivalence class for %s does not exists Equivalence: %s Error allocating memory.
Error allocating shell's argv0.
Error changing uid, aborting.
Error connecting to audit system.
Error resetting KEEPCAPS, aborting
Error sending audit message.
Error! Could not clear O_NONBLOCK on %s
Error! Could not open %s.
Error! Shell is not valid.
Error: multiple levels specified
Error: multiple roles specified
Error: multiple types specified
Error: you are not allowed to change levels on a non secure terminal
Executable Executable File Executable Files Executables which will transition to a different domain, when the '%s' executes them. Executables which will transition to a different domain, when the 'selected domain' executes them. Executables which will transition to the '%s', when executing a selected domains entrypoint. Executables which will transition to the 'selected domain', when executing a selected domains entrypoint. Existing Domain Type Existing User Roles Existing_User Export Export system settings to a file Failed to close tty properly
Failed to drop capabilities %m
Failed to read %s policy file Failed to send audit message Failed to transition to namespace
File
Specification File
Type File Contexts file File Equivalence File Labeling File Name File Path File Specification File Transitions From '%s' File Transitions From 'select domain' File Transitions define what happens when the current domain creates the content of a particular class in a directory of the destination type. Optionally a file name could be specified for the transition. File Type File Types defined for the '%s'. File Types defined for the 'selected domain'. File class: %s File context for %s is defined in policy, cannot be deleted File context for %s is not defined File equivalence cause the system to label content under the new path as if it were under the equivalence path. File path : %s File path used to enter the '%s' domain. File path used to enter the 'selected domain'. File path: %s File spec %(TARGET)s conflicts with equivalency rule '%(SOURCE)s %(DEST)s' File spec %(TARGET)s conflicts with equivalency rule '%(SOURCE)s %(DEST)s'; Try adding '%(DEST1)s' instead File specification can not include spaces Files Files Equivalence Files by '%s' will transitions to a different label. Files to which the '%s' domain can write. Files to which the 'selected domain' can write. Files/Directories which the %s "manages". Pid Files, Log Files, /var/lib Files ... Filter GPL Generate '%s' policy Generate '%s' policy Generate HTML man pages structure for selected SELinux man page Generate SELinux Policy module template Generate SELinux man pages Generate new policy module Graphical User Interface for SELinux Policy Group View Help: Application Types Page Help: Booleans Page Help: Executable Files Page Help: File Equivalence Page Help: Inbound Network Connections Page Help: Lockdown Page Help: Login Page Help: Outbound Network Connections Page Help: SELinux User Page Help: Start Page Help: Systems Page Help: Transition application file Page Help: Transition from application Page Help: Transition into application Page Help: Writable Files Page IB Device Name IB device name is required If-Then-Else rules written in policy that can
allow alternative access control. Import Import system settings from another machine Inbound Init script Interacts with the terminal Interface %s does not exist. Interface %s is defined in policy, cannot be deleted Interface %s is not defined Interface file Internet Services Daemon Internet Services Daemon (inetd) Internet Services Daemon are daemons started by xinetd Invalid Pkey Invalid Port Invalid Port Number Invalid file specification Invalid priority %d (needs to be between 1 and 999) Labeling Language Linux Group %s does not exist Linux User %s does not exist List SELinux Policy interfaces List View Load Policy Module Load policy module Lockdown Lockdown the SELinux System.
This screen can be used to turn up the SELinux Protections. Login
Name Login '%s' is required Login Mapping Login Name Login Name : %s Login mapping for %s is defined in policy, cannot be deleted Login mapping for %s is not defined Login name Loss of data Dialog MCS Level MCS Range MISSING FILE PATH MLS MLS Range MLS/ MLS/
MCS Range MLS/MCS
Level MLS/MCS Range MLS/MCS Range: %s Make Path Recursive Manage the SELinux configuration Minimal Terminal Login User Role Minimal Terminal User Role Minimal X Windows Login User Role Minimal X Windows User Role Mislabeled files exist Modify Modify %(TYPE)s file path for '%(DOMAIN)s' domain. Only bolded items in the list can be selected, this indicates they were modified previously. Modify %s Modify File Context Modify File Equivalency Mapping. Mapping will be created when update is applied. Modify File Labeling for %s. File labels will be created when update is applied. Modify Login Mapping Modify Login Mapping. Login Mapping will be modified when Update is applied. Modify Network Port for %s Modify Network Port for %s. Ports will be created when update is applied. Modify SELinux File Equivalency Modify SELinux User Mapping Modify SELinux User Role. SELinux user roles will be modified when update is applied. Modify SELinux Users Modify User Modify an existing login user record. Modify file equiv labeling. Modify file labeling for %s Modify login mapping Modify port definitions to which the '%(APP)s' domain is allowed to %(PERM)s. Modify ports for %s Modify selected modified File Equivalence definitions. Only bolded items in the list can be selected, this indicates they were modified previously. Modify selected modified Login Mapping definitions. Modify selected modified SELinux User/Role definitions. Modify user Module %s already loaded in current policy.
Do you want to continue? Module Name Module does not exists %s Module information for a new type More Details More Types More... Name Name must be alpha numberic with no spaces. Consider using option "-n MODULENAME" Network Network
Bind tab Network Port Network Port Definitions Network Ports to which the '%s' is allowed to connect. Network Ports to which the '%s' is allowed to listen. Network Ports to which the 'selected domain' is allowed to connect. Network Ports to which the 'selected domain' is allowed to listen. Network ports: %s Network protocol: %s No No SELinux Policy installed No context in file %s
Node Address is required Not yet implemented Only Daemon apps can use an init script.. Options Error %s Out of memory!
Outbound Password: Path Path Permissive Permit to prosody to bind apache port. Need to be activated to use BOSH. Pkey Number Policy Directory Policy Module Policy types which require a command Port Port %(PROTOCOL)s/%(PORT)s already defined Port %(PROTOCOL)s/%(PORT)s is defined in policy, cannot be deleted Port %(PROTOCOL)s/%(PORT)s is not defined Port @%(PROTOCOL)s/%(PORT)s is not defined Port Number Port Type Port is required Port number "%s" is not valid. 0 < PORT_NUMBER < 65536 Port number must be between 1 and 65536 Ports must be numbers or ranges of numbers from 1 to %d Prefix Priority Process Domain Process Types Proto Protocol Protocol udp or tcp is required Query SELinux policy network information Red Hat 2007 Relabel all files back to system defaults on reboot Relabel on next reboot. Remove loadable policy module Requires at least one category Requires prefix or roles Requires prefix, roles, level or range Requires setype Requires setype or serange Requires setype, serange or seuser Requires seuser or serange Retry Revert Revert Changes Revert boolean setting to system default Revert button will launch a dialog window which allows you to revert changes within the current transaction. Review the updates you have made before committing them to the system. To reset an item, uncheck the checkbox. All items checked will be updated in the system when you select update. Role Roles: %s Root Admin User Role Run restorecon on %(PATH)s to change its type from %(CUR_CONTEXT)s to the default %(DEF_CONTEXT)s? SELinux
User SELinux Administration SELinux Application Type SELinux Configuration SELinux Destination Type SELinux Directory Type SELinux File Label SELinux File Type SELinux IB End Port Type SELinux IB Pkey Type SELinux Interface SELinux MLS Label you wish to assign to this path. SELinux Policy Generation Tool SELinux Port
Type SELinux Port Type SELinux Roles SELinux Type SELinux Type is required SELinux User SELinux User : %s SELinux User Name SELinux User: %s SELinux Username SELinux Users SELinux boolean SELinux fcontext SELinux file type: %s SELinux name: %s SELinux node type is required SELinux policy is not managed or store cannot be accessed. SELinux user %s is defined in policy, cannot be deleted SELinux user %s is not defined SELinux user '%s' is required Sandbox Save to Update Save to update Select Select <b>tcp</b> if the port type should be assigned to tcp port numbers. Select <b>udp</b> if the port type should be assigned to udp port numbers. Select Make Path Recursive if you want to apply this label to all children of the specified directory path. objects under the directory to have this label. Select Management Object Select Ports Select Root Administrator User Role, if this user will be used to administer the machine while running as root. This user will not be able to login to the system directly. Select applications domains that %s will transition to. Select directory to generate policy files in Select directory(s) that the confined application owns and writes into Select domain Select executable file to be confined. Select file equivalence labeling to delete. File equivalence labeling will be deleted when update is applied. Select file labeling to delete. File labeling will be deleted when update is applied. Select file(s) that confined application creates or writes Select if you wish to relabel then entire file system on next reboot. Relabeling can take a very long time, depending on the size of the system. If you are changing policy types or going from disabled to enforcing, a relabel is required. Select init script file to be confined. Select login user mapping to delete. Login user mapping will be deleted when update is applied. Select ports to delete. Ports will be deleted when update is applied. Select the SELinux User to assign to this login user. Login users by default get assigned by the __default__ user. Select the SELinux file type to assign to this path. Select the domains that you would like this user administer. Select the file class to which this label will be applied. Defaults to all classes. Select the port type you want to assign to the specified port number. Select the system mode for the current session Select the system mode when the system first boots up Select the user roles that will transiton to the %s domain. Select the user roles that will transiton to this applications domains. Select users mapping to delete.Users mapping will be deleted when update is applied. Select... Selinux
File Type Semanage transaction already in progress Semanage transaction not in progress Sends audit messages Sends email Service Setup Script Show Modified Only Show mislabeled files only Show ports defined for this SELinux type Sorry, -l may be used with SELinux MLS support.
Sorry, newrole failed to drop capabilities
Sorry, newrole may be used only on a SELinux kernel.
Sorry, run_init may be used only on a SELinux kernel.
Source Domain Spec file Specify a new SELinux user name. By convention SELinux User names usually end in an _u. Specify the MLS Range for this user to login in with. Defaults to the selected SELinux Users MLS Range. Specify the default level that you would like this SELinux user to login with. Defaults to s0. Specify the mapping between the new path and the equivalence path. Everything under this new path will be labeled as if they were under the equivalence path. Specify the path using regular expressions that you would like to modify the labeling. Standard Init Daemon Standard Init Daemon are daemons started on boot via init scripts. Usually requires a script in /etc/rc.d/init.d State Status Subnet Prefix is required Subnet_Prefix Substitute %s is not valid. Substitute is not allowed to end with '/' Support NFS home directories Support SAMBA home directories Support X userspace object manager Support ecryptfs home directories Support fusefs home directories System System Default Enforcing Mode System Default Policy Type: System Policy Type: System Status: Disabled System Status: Enforcing System Status: Permissive Target %s is not valid. Target is not allowed to end with '/' Target Domain The entry '%s' is not a valid path. Paths must begin with a '/'. The entry that was entered is incorrect. Please try again in the ex:/.../... format. The sepolgen python module is required to setup permissive domains.
In some distributions it is included in the policycoreutils-devel patckage.
# yum install policycoreutils-devel
Or similar for your distro. This user can login to a machine via X or terminal. By default this user will have no setuid, no networking, no sudo, no su This user will login to a machine only via a terminal or remote login. By default this user will have no setuid, no networking, no su, no sudo. To disable this transition, go to the To enable this transition, go to the To make this policy package active, execute: Toggle between Customized and All Booleans Toggle between Customized and All Ports Toggle between all and customized file context Transitions Type Type %s is invalid, must be a file or device type Type %s is invalid, must be a ibpkey type Type %s is invalid, must be a node type Type %s is invalid, must be a port type Type %s is invalid, must be an ibendport type Type %s_t already defined in current policy.
Do you want to continue? Type Enforcement file Type field required Type is required Types USAGE: run_init <script> <args ...>
where: <script> is the name of the init script to run,
<args ...> are the arguments to that script. USER Types automatically get a tmp type Unable to allocate memory for new_context Unable to clear environment
Unable to obtain empty signal set
Unable to restore the environment, aborting
Unable to restore tty label...
Unable to set SIGHUP handler
Unify HTTPD handling of all content files. Unify HTTPD to communicate with the terminal. Needed for entering the passphrase for certificates at the terminal. Unknown or missing protocol Unreserved Ports (>1024) Update Update Changes Usage %s -L Usage %s -L -l user Usage %s -d File ... Usage %s -l -d user ... Usage %s -l CATEGORY user ... Usage %s -l [[+|-]CATEGORY],...] user ... Usage %s CATEGORY File ... Usage %s [[+|-]CATEGORY],...] File ... Use -- to end option list. For example User Application User Application are any application that you would like to confine that is started by a user User Mapping User Role User Role types can not be assigned executables. User with full networking, no setuid applications without transition, no su, can sudo to Root Administration Roles User with full networking, no setuid applications without transition, no sudo, no su. Users Uses Pam for authentication Uses dbus Uses nsswitch or getpw* calls Valid Types:
Verify Name Version Warning! Could not retrieve tty information.
Warning! Could not restore context for %s
Web Application/Script (CGI) Web Applications/Script (CGI) CGI scripts started by the web server (apache) With this flag, alternative root path needs to include file context files and policy.xml file Writable files Writes syslog messages Yes You are attempting to close the application without applying your changes.
* To apply changes you have made during this session, click No and click Update.
* To leave the application without applying your changes, click Yes. All changes that you have made during this session will be lost. You did not define module name. You must add a name made up of letters and numbers and containing no spaces. You must add at least one role for %s You must enter a executable You must enter a name for your policy module for your '%s'. You must enter a valid policy type You must enter the executable path for your confined process You must regenerate interface info by running /usr/bin/sepolgen-ifgen You must select a user You must specify one of the following values: %s You need to define a new type which ends with:
%s You need to install policycoreutils-gui package to use the gui option _Delete _Properties all all files all files
regular file
directory
character device
block device
socket
symbolic link
named pipe
allow host key based authentication allow staff user to create and transition to svirt domains. allow unconfined users to transition to the chrome sandbox domains when running chrome-sandbox application authentication failed.
block device boolean to get description cannot find valid entry in the passwd file.
character device chcat -- -CompanyConfidential /docs/businessplan.odt chcat -l +CompanyConfidential juser commands connect directory disallow programs, such as newrole, from transitioning to administrative user domains. dontaudit requires either 'on' or 'off' error on reading PAM service configuration.
executable executable to confine failed to build new range with level %s
failed to convert new context to string
failed to exec shell
failed to get account information
failed to get new context.
failed to get old_context.
failed to initialize PAM
failed to set PAM_TTY
failed to set new range %s
failed to set new role %s
failed to set new type %s
get all booleans descriptions getpass cannot open /dev/tty
ibendport %s/%s already defined ibendport %s/%s is defined in policy, cannot be deleted ibendport %s/%s is not defined ibpkey %s/%s already defined ibpkey %s/%s is defined in policy, cannot be deleted ibpkey %s/%s is not defined label37 label38 label39 label41 label42 label44 label50 label59 list all SELinux port types listen for inbound connections manage_krb5_rcache must be a boolean value name of policy to generate name of the OS for man pages named pipe newrole: %s: error on line %lu.
newrole: failure forking: %s newrole: incorrect password for %s
newrole: service name configuration hashtable overflow
off on path in which the generated SELinux man pages will be stored path in which the generated policy files will be stored path to which the confined processes will need to write query SELinux Policy to see description of booleans query SELinux Policy to see how a source process domain can transition to the target process domain query SELinux policy to see if domains can communicate with each other radiobutton regular file role tab run_init: incorrect password for %s
sepolicy generate: error: one of the arguments %s is required show SELinux type related to the port show ports to which this application can bind and/or connect show ports to which this domain can bind and/or connect socket file source process domain symbolic link system-config-selinux target process domain tcp transition
role tab translator-credits type udp unknown usage: %s [-qi]
use_kerberos must be a boolean value use_resolve must be a boolean value use_syslog must be a boolean value writable Project-Id-Version: PACKAGE VERSION
Report-Msgid-Bugs-To:
POT-Creation-Date: 2019-09-09 17:13+0200
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
PO-Revision-Date: 2018-09-17 03:02+0000
Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>
Language-Team: Japanese (http://www.transifex.com/projects/p/fedora/language/ja/)
Language: ja
Plural-Forms: nplurals=1; plural=0;
X-Generator: Zanata 4.6.2
SELinux ãã£ã¹ããªãã¥ãŒã·ã§ã³ fcontext ã®ç䟡
SELinux ããŒã«ã« fcontext ã®ç䟡
%s å€æŽãããã©ãã«ã
%s ã¯ãã§ã« %s ã«ãããŸã %s ã¯ãã¡ã€ã³ã¿ã€ãã§ã¯ãããŸãã %s ã¯æå¹ãªã³ã³ããã¹ãã§ã¯ãããŸãã
%s ç¡å¹ãªãã¡ã€ã³ã§ã %s 㯠%s ã«ãããŸãã %s ã¯ãã£ã¬ã¯ããªãŒã§ãªããã°ãªããŸãã %s! %s ã®çŸåšã®ã³ã³ããã¹ããååŸã§ããŸããã§ãããåã©ãã«ãè¡ã£ãŠãã tty ã§ã¯ãããŸããã
%s! %s ã®æ°ããã³ã³ããã¹ããååŸã§ããŸããã§ããã åã©ãã«ãè¡ã£ãŠãã tty ã§ã¯ãããŸããã
%s! %s ã®æ°ããã³ã³ããã¹ããèšå®ã§ããŸããã§ãã
%s: èŠæ±ãããããªã·ãŒãšåŒ·å¶ã¢ãŒããããŒãåºæ¥ãŸãã: %s
%s: ããªã·ãŒãããŒãã§ããŸãã: %s
%s: ããªã·ãŒã¯ããŒãæžã¿ã§ãåæããŒããå¿
èŠã§ã
'%s' ããªã·ãŒã¢ãžã¥ãŒã«ã«ã¯æ¢åã®ãã¡ã€ã³ãå¿
èŠã§ã ******************** éèŠ ***********************
-- Allowed %s [ %s ] '%s' ãã¡ã€ã³ã«ã¯ -a ãªãã·ã§ã³ã¯äœ¿çšã§ããŸããã詳现ã¯äœ¿ãæ¹ããèªã¿ãã ããã '%s' ãã¡ã€ã³ã«ã¯ -d ãªãã·ã§ã³ã¯äœ¿çšã§ããŸããã詳现ã¯äœ¿ãæ¹ããèªã¿ãã ããã '%s' ãã¡ã€ã³ã«ã¯ -t ãªãã·ã§ã³ã¯äœ¿çšã§ããŸããã詳现ã¯äœ¿ãæ¹ããèªã¿ãã ããã -w ãªãã·ã§ã³ã¯ --newtype ãªãã·ã§ã³ãšã®äœµçšã¯ã§ããŸãã ... 600-1024 <b>...ããŒã¿ãéžæããŠè¡šç€º...</b> <b>ããŒãªã¢ã³ã %s ããªã·ãŒããè¿œå :</b> <b>%s ã管çãããã¡ã€ã«/ãã£ã¬ã¯ããªãŒã®è¿œå </b> <b>ã¢ããªã±ãŒã·ã§ã³</b> <b>ããã»ã¹ãå¥ã®ããã»ã¹ã®ãããã°ã ptrace ãè¡ããªãããæåŠããŸãã?</b> <b>å¶éã®ãªãã·ã¹ãã ããã»ã¹ã®å®è¡æ©èœãç¡å¹ã«ããŸãã?</b> <b>permissive ããã»ã¹ããã¹ãŠç¡å¹ã«ããŸãã?</b> <b>ã¢ããªã±ãŒã·ã§ã³ããŠãŒã¶ãŒããŒã«ã®ååãèšå
¥:</b> <b>%s ã®ãã€ã³ãå
ãšãªããããã¯ãŒã¯ããŒãã®èšå
¥:</b> <b>ãã°ã€ã³ãŠãŒã¶ãŒ</b> <b>Root ãŠãŒã¶ãŒ</b> <b>%s ã«å¯Ÿããè¿œå ããŒã«ã®éžæ:</b> <b>%s ã®äžè¬çã¢ããªã±ãŒã·ã§ã³ç¹æ§ã®éžæ:</b> <b>%s ã管çãããã¡ã€ã³ã®éžæ:</b> <b>ä¿®æ£ããæ¢åã®ããŒã«ãéžæ:</b> <b>%s ã®æ¥ç¶å
ãšãªããããã¯ãŒã¯ããŒãã®éžæ:</b> <b>%s ã®é·ç§»å
ãšãªãããŒã«ãéžæ:</b> <b>å¶çŽãããã¢ããªã±ãŒã·ã§ã³ããŸãã¯ãŠãŒã¶ãŒããŒã«ã®ããªã·ãŒã¿ã€ããéžæ:</b> <b>%s ã«é·ç§»ãããŠãŒã¶ãŒããŒã«ã®éžæ (_R):</b> <b>éžæ:</b> <b>ã·ã¹ãã èšå®</b> <b>ã·ã¹ãã ã¢ãŒã</b> <b>TCP ããŒã</b> <b>UDP ããŒã</b> <b>ã©ã®ãã£ã¬ã¯ããªã§ %s ããªã·ãŒãçæããŸãã?</b> <operation> <selected domain> ã®ãã¡ã€ã«ã©ãã«ãæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãäœæãããŸãã <operation> <selected domain> ã®ãããã¯ãŒã¯ããŒããæŽæ°ã®é©çšæã«ããŒããäœæãããŸãã <small>
Disabled ãã Enforcing ã¢ãŒãã«å€æŽããã«ã¯ã
- ã·ã¹ãã ã¢ãŒãã Disabled ãã Permissive ã«å€æŽããŸã
- åèµ·åããŠãã·ã¹ãã ã«ã©ãã«ãä»ãçŽããŸã
- æåŸ
éãã«ã·ã¹ãã ãåäœãå§ãããã
* ã·ã¹ãã ã¢ãŒãã Enforcing ã«å€æŽããŸã</small>
permissive ãã¡ã€ã³ãšã¯ãããã»ã¹ãè¡ãããåäœãè¡ããããèš±å¯ããSELinux ã§ã¯æåŠã®ãã°ãèšé²ããã ãã§åŒ·å¶ã¯ããªãããã»ã¹ã©ãã«ã§ããéåžžãpermissive ãã¡ã€ã³ã¯è©Šéšçãªããªã·ãŒã瀺ããèš±å¯ãããã¹ããã¡ã€ã³ãžã®ã¢ã¯ã»ã¹ã SELinux ã«ããæåŠãããåå ãšããŠèããããã¢ãžã¥ãŒã«ãç¡å¹ã«ããŸãã åäœ è¿œå %s ã®è¿œå ããŒã«å€ã®è¿œå ããŒãªã¢ã³è¿œå ã®ãã€ã¢ãã° ãã£ã¬ã¯ããªãŒã®è¿œå ãã¡ã€ã«ã®è¿œå ãã¡ã€ã«ã³ã³ããã¹ãã®è¿œå ãã¡ã€ã«ç䟡æ§ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãè¿œå %s ã®ãã¡ã€ã«ã©ãã«ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãäœæãããŸãã ãã°ã€ã³ãããã³ã°ã®è¿œå ãã°ã€ã³ã®ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã ãã°ã€ã³ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãŠãŒã¶ãŒãããã³ã°ãäœæãããŸãã ãããã¯ãŒã¯ããŒãã®è¿œå %s ã®ãããã¯ãŒã¯ããŒããè¿œå %s ãããã¯ãŒã¯ããŒããè¿œå ããŸããæŽæ°ã®é©çšæã«ããŒããäœæãããŸãã SELinux ã®ãã¡ã€ã«ã®ç䟡æ§ãè¿œå SELinux ã®ãã°ã€ã³ãããã³ã°ã®è¿œå SELinux ãããã¯ãŒã¯ããŒãã®è¿œå SELinux ãŠãŒã¶ãŒã®è¿œå SELinux ãŠãŒã¶ãŒå²ãåœãŠã®è¿œå SELinux ãŠãŒã¶ãŒããŒã«ãè¿œå ããŸããæŽæ°ã®é©çšæã« SELinux ãŠãŒã¶ãŒããŒã«ãäœæãããŸãã SELinux ãŠãŒã¶ãŒã®è¿œå ãŠãŒã¶ãŒã®è¿œå ãŠãŒã¶ãŒããŒã«ãè¿œå ããŸããæŽæ°ã®é©çšæã« SELinux ãŠãŒã¶ãŒããŒã«ãäœæãããŸãã ãã¡ã€ã«ãè¿œå ãã ãã¡ã€ã«ã®ç䟡æ§ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãè¿œå ããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãè¿œå ãã°ã€ã³ãããã³ã°ã®è¿œå '%(DOMAIN)s' ãã¡ã€ã³ã®æ°ãã %(TYPE)s ãã¡ã€ã«ãã¹ãè¿œå ããŸãã æ°èŠã®ãã¡ã€ã«ç䟡æ§å®çŸ©ãè¿œå ããŸãã æ°èŠã®ãã°ã€ã³ãããã³ã°ã®å®çŸ©ãè¿œå ããŸãã æ°èŠã® SELinux ãŠãŒã¶ãŒãŸãã¯ããŒã«ã®å®çŸ©ãè¿œå ããŸãã %(PERM)s ãèš±å¯ãããŠãã '%(APP)s' ãã¡ã€ã³ã«ãæ°ããããŒãã®å®çŸ©ãè¿œå ããŸãã %s ã®ããŒããè¿œå ãŠãŒã¶ãŒã®è¿œå %s ãã¡ã€ã³ã§äœ¿çšãããããŒãªã¢ã³ã®è¿œå /åé€ ã¢ãã¬ã¹ %s ã¯ããªã·ãŒå
ã§å®çŸ©ãããŠããŸããåé€ã§ããŸãã ã¢ãã¬ã¹ %s ã¯å®çŸ©ãããŠããŸãã 管çãŠãŒã¶ãŒããŒã« 管çè
ã®ãã°ã€ã³ãŠãŒã¶ãŒããŒã« é«åºŠ << é«åºŠ >> é«åºŠãªæ€çŽ¢ << é«åºŠãªæ€çŽ¢ >> ãã¹ãŠ ãã¹ãŠã®ãã¡ã€ã³ ãŒãã®ä»ãã bindresvport ãžã®ã³ãŒã«ã %s ã«èš±å¯ãããããŒã 600-1024 ã«ãã€ã³ã ABRT ãããããªãã¯ãªãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãªãã¡ã€ã«ãå€æŽããããšãèš±å¯ããŸãã Apache ããdbus çµç±ã§ avahi ãµãŒãã¹ãšéä¿¡ããããšãèš±å¯ããŸãã Apache ããdbus çµç±ã§ sssd ãµãŒãã¹ãšéä¿¡ããããšãèš±å¯ããŸãã Apache ã tmp ã®å
容ãå®è¡ããããšãèš±å¯ããŸãã Apache ãããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãã¡ã€ã«ãå€æŽããããšãèš±å¯ããŸãããã£ã¬ã¯ããªãŒããã³ãã¡ã€ã«ã®ã©ãã«ã¯ public_content_rw_t ã«ããå¿
èŠããããŸãã Apache ã NS ã¬ã³ãŒããã¯ãšãªãŒããããšãèš±å¯ããŸãã Apache ãããã»ã³ãžã£ãŒã«é·ç§»ããããšãªããstickshift ã¢ãŒãã§å®è¡ããããšãèš±å¯ããŸãã Apache ã preupgrade ãèµ·åããããšãèš±å¯ããŸãã Apache ã mod_auth_ntlm_winbind ã䜿çšããããšãèš±å¯ããŸãã Apache ã mod_auth_pam ã䜿çšããããšãèš±å¯ããŸãã https ã®ã¹ã¯ãªãããšã¢ãžã¥ãŒã«ãããããã¯ãŒã¯çµç±ã§ cobbler ã«æ¥ç¶ããããšãèš±å¯ããŸãã httpd ã®ã¹ã¯ãªãããšã¢ãžã¥ãŒã«ãããããã¯ãŒã¯çµç±ã§ããŒã¿ããŒã¹ã«æ¥ç¶ããããšãèš±å¯ããŸãã httpd ã®ã¹ã¯ãªãããšã¢ãžã¥ãŒã«ããTCP ã䜿çšãããããã¯ãŒã¯ã«æ¥ç¶ããããšãèš±å¯ããŸãã HTTPD ã®ã¹ã¯ãªãããšã¢ãžã¥ãŒã«ã cobbler ãã¡ã€ã«ãåŠçããããšãèš±å¯ããŸãã HTTPD ãæ£ããã·ã£ããããŠã³ããããã80 çªããŒãã«æ¥ç¶ããããšãèš±å¯ããŸãã HTTPD ããã·ã¹ãã CGI ã¹ã¯ãªãããšåããã¡ã€ã³ã§ãSSI å®è¡ãã¡ã€ã«ãå®è¡ããããšãèš±å¯ããŸãã Puppet ã¯ã©ã€ã¢ã³ãããã¹ãŠã®ãã¡ã€ã«åœ¢åŒã管çããããšãèš±å¯ããŸãã Puppet ãã¹ã¿ãŒããMySQL ããã³ PostgreSQL ããŒã¿ããŒã¹ã«æ¥ç¶ããããšãèš±å¯ããŸãã Redis ããredis-sentinal éç¥ã¹ã¯ãªãããå®è¡ããããšãèš±å¯ããŸãã Zabbix ã su/sudo ãå®è¡ããããšãèš±å¯ããŸãã ZoneMinder ããããªãã¯ãªãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãªãã¡ã€ã«ãå€æŽããããšãèš±å¯ããŸãã ZoneMinder ã su/sudo ãå®è¡ããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒãå¶éããããã¡ã€ã³ãšããŠãã°ã€ã³ããããšãèš±å¯ããŸãã ãã¹ãŠã®ããŒã¢ã³ã端æ«ãèªã¿æžãããããšãèš±å¯ããŸãã ãã¹ãŠã®ããŒã¢ã³ã tcp wrappers ã䜿çšããããšãèš±å¯ããŸãã ãã¹ãŠã®ããŒã¢ã³ã / ã«ã³ã¢ãã¡ã€ã«ãæžã蟌ãããšãèš±å¯ããŸãã ãã¹ãŠã®ãã¡ã€ã³ã fips_mode ã§å®è¡ããããšãèš±å¯ããŸãã ãã¹ãŠã®ãã¡ã€ã³ãã«ãŒãã«ã®ããŒãã¢ãžã¥ãŒã«ãæã€ããšãèš±å¯ããŸãã ãã¹ãŠã®ãã¡ã€ã³ãä»ã®ãã¡ã€ã³ã®ãã¡ã€ã«èšè¿°åã䜿çšããããšãèš±å¯ããŸãã systemd.log_target=kmsg ãã©ã¡ãŒã¿ãŒã§ã«ãŒãã«ãå®è¡äžã«ããã¹ãŠã®ãã¡ã€ã³ã kmsg_device ã«æžã蟌ãããšèš±å¯ããŸãã textrel_shlib_t ã®ã©ãã«ä»ãããããŠããªãããã¹ãã®ç§»åã«å¿
èŠãªã©ã€ãã©ãªã䜿çšã§ãããããå¶éã®ãªãå®è¡ãã¡ã€ã«ããã¹ãŠèš±å¯ããŸãã ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ããã·ã¹ãã ã«ããéã»ãã¥ãªãã£ãã¡ã€ã«ãèªã¿èŸŒãããšãèš±å¯ããŸãã ãããããã¡ã€ã«ãšãã£ã¬ã¯ããªããNFS çµç±ã§èªã¿åãå°çšãšããŠãšã¯ã¹ããŒããããããšãèš±å¯ããŸãã ãããããã¡ã€ã«ãšãã£ã¬ã¯ããªããNFS çµç±ã§èªã¿æžãçšãšããŠãšã¯ã¹ããŒããããããšãèš±å¯ããŸãã file_type å±æ§ãæã€ã·ã¹ãã äžã®ãã¹ãŠã®ãã¡ã€ã«ã mmap ãããã¹ãŠã®ããã»ã¹ãèš±å¯ããŸãã Apache ã¹ã¯ãªããããããªãã¯ã³ã³ãã³ãã«æžã蟌ãããšãèš±å¯ããŸãããã£ã¬ã¯ããªãŒãšãã¡ã€ã«ã®ã©ãã«ã¯ public_rw_content_t ã«ããå¿
èŠããããŸãã auditadm ãã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã ã¯ã©ã¹ã¿ãŒç®¡çãã¡ã€ã³ã® memcheck-amd64- ãå®è¡å¯èœãªã¡ã¢ãªãŒã䜿çšããããšãèš±å¯ããŸãã ã¯ã©ã¹ã¿ãŒç®¡çãã¡ã€ã³ã TCP ã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ããããšãèš±å¯ããŸãã ã¯ã©ã¹ã¿ãŒç®¡çãã¡ã€ã³ãã·ã¹ãã ã«ãããã¹ãŠã®ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã å¶éãããã¢ããªã±ãŒã·ã§ã³ã Kerberos ãšãšãã«åäœããããšãèš±å¯ããŸãã å¶éãããã¢ããªã±ãŒã·ã§ã³ã NSCD å
±æã¡ã¢ãªãŒã䜿çšããããšãèš±å¯ããŸãã å¶éããããŠãŒã¶ãŒããping ããã³ traceroute ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã å¶éãããä»®æ³ãã·ã³ã rawip ãœã±ãããšéä¿¡ããããšãèš±å¯ããŸãã å¶éãããä»®æ³ãã·ã³ã sanlock ãšéä¿¡ããããšãèš±å¯ããŸãã ä»®æ³ãã·ã³ã X ãµãŒããŒãšéä¿¡ããããšãèš±å¯ããŸãã å¶éãããä»®æ³ãã·ã³ã CIFS ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã å¶éãããä»®æ³ãã·ã³ã NFS ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã å¶éãããä»®æ³ãã·ã³ã FUSE ãã¡ã€ã«ãèªã¿èŸŒãããšãèš±å¯ããŸãã å¶éãããä»®æ³ãã·ã³ãå®è¡å¯èœãªã¡ã¢ãªãŒããã³å®è¡å¯èœãªã¹ã¿ãã¯ã䜿çšããããšãèš±å¯ããŸãã å¶éãããä»®æ³ã²ã¹ãã glusterd ã䜿çšããããšãèš±å¯ããŸãã å¶éãããä»®æ³ãã·ã³ãã·ãªã¢ã«/ãã©ã¬ã«éä¿¡ããŒãã䜿çšããããšãèš±å¯ããŸãã ä»®æ³ãã·ã³ã USB ããã€ã¹ã䜿çšããããšãèš±å¯ããŸãã å¶éããã Web ãã©ãŠã¶ãŒããããŒã ãã£ã¬ã¯ããªãŒã®ã³ã³ãã³ããèªã¿åãããšãèš±å¯ããŸãã conman ã nfs ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã cups ã® execmem ãš execstack ãèš±å¯ããŸãã ããŒã¿ããŒã¹ç®¡çè
ã DML æãå®è¡ããããšãèš±å¯ããŸãã dbadm ãã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã dhcpc ã¯ã©ã€ã¢ã³ãã³ãã³ãã iptables ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã ftpd ã«ãã ntfs ããªã¥ãŒã ãŸã㯠fusefs ããªã¥ãŒã ã®äœ¿çšãèš±å¯ããŸãã ganesha ã fuse ãã¡ã€ã«ã®èªã¿æžããè¡ãããšãèš±å¯ããŸãã glance ãã¡ã€ã³ã fuse ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã glance ãã¡ã€ã³ããå®è¡å¯èœãªã¡ã¢ãªããã³å®è¡å¯èœãªã¹ã¿ãã¯ã䜿çšããããšãèš±å¯ããŸãã glusterd_t ãã¡ã€ã³ããå®è¡å¯èœãªã¡ã¢ãªãŒã䜿çšããããšãèš±å¯ããŸãã glusterfsd ãããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšãããããªãã¯ãã¡ã€ã«ãå€æŽããããšãèš±å¯ããŸãã ãã¡ã€ã«ããã³ãã£ã¬ã¯ããªã®ã©ãã«ã¯ public_content_rw_t ã§ãªããã°ãªããŸããã glusterfsd ãããã¹ãŠã®ãã¡ã€ã«ããã³ãã£ã¬ã¯ããªãŒããèªã¿åãå°çšã§å
±æããããšãèš±å¯ããŸãã glusterfsd ãããã¹ãŠã®ãã¡ã€ã«ããã³ãã£ã¬ã¯ããªãŒããèªã¿æžãå¯èœã§å
±æããããšãèš±å¯ããŸãã gpg web ãã¡ã€ã³ãããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãã¡ã€ã«ãå€æŽããããšãèš±å¯ããŸãã gssd ããäžæãã£ã¬ã¯ããªãŒã衚瀺ããkerberos èªèšŒæ
å ±ã®ãã£ãã·ã¥ãèªã¿èŸŒãããšãèš±å¯ããŸãã ã²ã¹ããã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã httpd ããŒã¢ã³ãè¿·æã¡ãŒã«ããã§ãã¯ããããšãèš±å¯ããŸãã HTTP ããŒã¢ã³ã mythtv ã«æ¥ç¶ããããšãèš±å¯ããŸãã HTTP ããŒã¢ã³ã Zabbix ã«æ¥ç¶ããããšãèš±å¯ããŸãã HTTP ããŒã¢ã³ãã¡ãŒã«ãéä¿¡ããããšãèš±å¯ããŸãã httpd ã cgi ããµããŒãããããšãèš±å¯ããŸã httpd ããŒã¢ã³ããªãœãŒã¹ã®å¶éãå€æŽããããšãèš±å¯ããŸãã httpd ããã»ã¹ã IPA ã³ã³ãã³ãã管çããããšãèš±å¯ããŸãã httpd ããã»ã¹ã IPA ãã«ããŒãèµ·åããããšãèš±å¯ããŸãã httpd ã®ã¹ã¯ãªãããšã¢ãžã¥ãŒã«ããexecmem/execstack ãå®è¡ããããšãèš±å¯ããŸãã httpd ã FUSE ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã httpd ã CIFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã httpd ã NFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã httpd ã OpenStack ããŒãã«ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã httpd ããFTP ããŒããšäžæããŒãã«æ¥ç¶ãã FTP ã¯ã©ã€ã¢ã³ããšããŠåäœããããšãèš±å¯ããŸãã httpd ã FTP ããŒãããªãã¹ã³ããFTP ãµãŒããŒãšããŠåäœããããšãèš±å¯ããŸãã httpd ããªã¬ãŒãšããŠåäœããããšãèš±å¯ããŸãã httpd ã SASL ã«æ¥ç¶ããããšãèš±å¯ããŸãã httpd ã memcache ãµãŒããŒã«æ¥ç¶ããããšãèš±å¯ããŸãã httpd ã LDAP ããŒãã«æ¥ç¶ããããšãèš±å¯ããŸãã httpd ãããŒã ãã£ã¬ã¯ããªãŒãèªã¿åãããšãèš±å¯ããŸãã httpd ããŠãŒã¶ãŒã®ã³ã³ãã³ããèªã¿åãããšãèš±å¯ããŸãã httpd ã gpg ãå®è¡ããããšãèš±å¯ããŸãã httpd ãçµã¿èŸŒã¿ã¹ã¯ãªãã (äžè¬çã« PHP) ã䜿çšããããšãèš±å¯ããŸãã ksmtuned ã CIFS/Samba ãã¡ã€ã«ã·ã¹ãã ã䜿çšããããšãèš±å¯ããŸãã ksmtuned ã NFS ãã¡ã€ã«ã·ã¹ãã ã䜿çšããããšãèš±å¯ããŸãã logadm ã«ããã³ã³ãã³ãã®å®è¡ãèš±å¯ããŸãã /dev/console ãããã°ã€ã³ããã·ã¹ãã ã䜿çšããããšãèš±å¯ããŸãã logrotate ã NFS ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã logrotate ãå
éšã®ãã°ãèªã¿åãããšãèš±å¯ããŸãã mailman ã FUSE ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã mock ãããŒã ãã£ã¬ã¯ããªãŒã«ãããã¡ã€ã«ãèªã¿èŸŒãããšãèš±å¯ããŸãã Mozilla ãã©ã°ã€ã³ãã¡ã€ã³ããäºçŽãããŠããªã tcp/udp ããŒãããã€ã³ãããããšãèš±å¯ããŸãã Mozilla ãã©ã°ã€ã³ããTCP ã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ããããšãèš±å¯ããŸãã Mozilla ãã©ã°ã€ã³ã GPS ããµããŒãããããšãèš±å¯ããŸãã Mozilla ãã©ã°ã€ã³ã SPICE ãããã³ã«ããµããŒãããããšãèš±å¯ããŸãã Mozilla ãã©ã°ã€ã³ã Bluejeans ã䜿çšããããšãèš±å¯ããŸãã mysqld ãããã¹ãŠã®ããŒãã«æ¥ç¶ããããšãèš±å¯ããŸãã nagios ã® PNP4Nagios ãšã®å®è¡ãèš±å¯ããŸãã nagios/nrpe ããNRPE utils ã¹ã¯ãªãããã sudo ãåŒã³åºãããšãèš±å¯ããŸãã NFS ãµãŒããŒãããããªãã¯ãªãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãªãã¡ã€ã«ãå€æŽããããšãèš±å¯ããŸãããã¡ã€ã«ãšãã£ã¬ã¯ããªãŒã¯ public_content_rw_t ã®ã©ãã«ãä»ããããŠããå¿
èŠããããŸãã openshift ããã©ãã«ç¡ã㧠NFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã openvpn ãå¶éã®ãªãã¹ã¯ãªãããå®è¡ããã®ãèš±å¯ãã unreserved_ports ãžã®ãã€ã³ãã pcp ã«èš±å¯ãã pcp ãäžè¬ã®ãã°ãèªã¿åãããšãèš±å¯ããŸãã piranha-lvs ãã¡ã€ã³ããTCP ã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ããããšãèš±å¯ããŸãã polipo ãã1024 以äžã®ãããªãããŒãã«æ¥ç¶ããããšãèš±å¯ããŸãã postfix_local ãã¡ã€ã³ããmail_spool ãã£ã¬ã¯ããªãŒãžã®å®å
šæžã蟌ã¿ã¢ã¯ã»ã¹æš©ãæã€ããšãèš±å¯ããŸãã PostgreSQL ãããã€ã³ãã€ã³ã¿ã€ã ãªã«ããªãŒã«ãssh ãš rsync ã䜿çšããããšãèš±å¯ããŸãã pppd ããéåžžã®ãŠãŒã¶ãŒã«å®è¡ãããããšãèš±å¯ããŸãã pppd ããç¹å®ã¢ãã çšã«ã«ãŒãã«ã¢ãžã¥ãŒã«ã®ããŒãããããšãèš±å¯ããŸãã qemu-ga ã qemu-ga ããŒã¿ã管çããããšãèš±å¯ããŸãã qemu-ga ã qemu-ga ããŒã¿ãèªã¿åãããšãèš±å¯ããŸãã racoon ã shadow ãèªã¿åãããšãèš±å¯ããŸãã éåžžã®ãŠãŒã¶ãŒã dri ããã€ã¹ã«çŽæ¥ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã rpcd_t ã«ãã fuse ãã¡ã€ã«ã®ç®¡çãèš±å¯ããŸãã rsync ãµãŒããŒããã·ã¹ãã ã«ãããã¹ãŠã®ãã¡ã€ã«ããã³ãã£ã¬ã¯ããªãŒã管çããããšãèš±å¯ããŸãã rsync ãããããªããã¡ã€ã«ããã³ãã£ã¬ã¯ããªãŒãèªã¿åãå°çšã§ãšã¯ã¹ããŒãããããšãèš±å¯ããŸãã rsync ãããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšãããããªãã¯ãã¡ã€ã«ãå€æŽããããšãèš±å¯ããŸãããã¡ã€ã«ãšãã£ã¬ã¯ããªãŒã®ã©ãã«ã¯ public_content_rw_t ã«ããå¿
èŠããããŸãã rsync ãã¯ã©ã€ã¢ã³ããšããŠåäœããããšãèš±å¯ããŸãã bootloader_t å
ã§ã®ããŒãããŒããŒã®å®è¡ããs-c-kdump ã«èš±å¯ããŸãã Samba ãããŒãããããŒãšããŠåäœããããšãèš±å¯ããŸãã Samba ãããã¡ã€ã³ã³ã³ãããŒã©ãŒãšããŠåäœãããŠãŒã¶ãŒãšã°ã«ãŒããè¿œå ãããã¹ã¯ãŒããå€æŽããããšãèš±å¯ããŸãã Samba ãã(PAM çµç±ãªã©ã§) æ°ããããŒã ãã£ã¬ã¯ããªãŒãäœæããããšãèš±å¯ããŸãã Samba ã NFS ããªã¥ãŒã ããšã¯ã¹ããŒãããããšãèš±å¯ããŸãã Samba ã ntfs/fusefs ããªã¥ãŒã ããšã¯ã¹ããŒãããããšãèš±å¯ããŸãã ãããªãã¯ãªãã¡ã€ã«è»¢éãµãŒãã¹åãã«äœ¿çšããããããªãã¯ãªãã¡ã€ã«ãå€æŽããããšã Samba ã«èš±å¯ããŸãããã¡ã€ã«/ãã£ãã£ã¬ã¯ããªãŒã« public_content_rw_t ãšããã©ãã«ãä»ããããŠããå¿
èŠããããŸãã Samba ããå¶éã®ãªãã¹ã¯ãªãããå®è¡ããããšãèš±å¯ããŸãã Samba ãããããªããã¡ã€ã«ãšãã£ã¬ã¯ããªãŒãèªã¿åãå°çšã§å
±æããããšãèš±å¯ããŸãã Samba ãããããªããã¡ã€ã«ãšãã£ã¬ã¯ããªãŒãèªã¿æžãå¯èœã§å
±æããããšãèš±å¯ããŸãã Samba ãããŠãŒã¶ãŒã®ããŒã ãã£ã¬ã¯ããªãŒãå
±æããããšãèš±å¯ããŸãã ãµã³ãããã¯ã¹ã³ã³ãããŒã«ãã fuse ãã¡ã€ã«ã®ç®¡çãèš±å¯ãã ãµã³ãããã¯ã¹ã³ã³ãããŒã«ããç£æ»ã¡ãã»ãŒãžã®éä¿¡ãèš±å¯ãã ãµã³ãããã¯ã¹ã³ã³ãããŒãå
šæ©èœã䜿çšããããšãèš±å¯ãã ãµã³ãããã¯ã¹ã³ã³ãããŒã«ãã mknod ã·ã¹ãã ã³ãŒã«ã®äœ¿çšãèš±å¯ãã ãµã³ãããã¯ã¹ã³ã³ãããŒã«ãã netlink ã·ã¹ãã ã³ãŒã«ã®äœ¿çšãèš±å¯ãã ãµã³ãããã¯ã¹ã³ã³ãããŒã sys_admin ã·ã¹ãã ã³ãŒã« (ããšãã° mount) ã䜿çšããããšãèš±å¯ããŸãã sanlock ã CIFS ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã sanlock ã NFS ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã sanlock ã fuse ãã¡ã€ã«ãèªã¿æžãããããšãèš±å¯ããŸãã sanlock ãããŠãŒã¶ãŒã®ããŒã ãã£ã¬ã¯ããªãŒãèªã¿æžãããããšãèš±å¯ããŸãã SASL ã shadow ãèªã¿åãããšãèš±å¯ããŸãã secadm ãã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã sge ããNFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ããããšãèš±å¯ããŸãã sge ãããã¹ãŠã® TCP ããŒãã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ããããšãèš±å¯ããŸãã smbd ããgluster ãã libgfapi ãããŒãããããšãèš±å¯ããŸãã spamd ããŠãŒã¶ãŒã®ããŒã ãã£ã¬ã¯ããªãŒãèªã¿æžãããããšãèš±å¯ããŸãã spamd_update ã«ããå
šããŒããžã®æ¥ç¶ãèš±å¯ããŸãã sysadm_r:sysadm_t ãšããŠã® ssh ãã°ã€ã³ãèš±å¯ããŸãã chroot ç°å¢ã® SSH ããŠãŒã¶ãŒã®ããŒã ãã£ã¬ã¯ããªãŒã«ãããã¡ã€ã«ãèªã¿æžãããããšãèš±å¯ããŸãã ã¹ã¿ãããã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã sysadm ãã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã syslogd ããŒã¢ã³ãã¡ãŒã«ãéä¿¡ããããšãèš±å¯ããŸãã syslogd ã nagios ãã©ã°ã€ã³ãåŒã³åºãããšãèš±å¯ããŸããããã¯ãomprog rsyslog ãã©ã°ã€ã³ã§æå¹ã«ããŸãã syslogd ã端æ«ãèªã¿æžãããããšãèš±å¯ããŸãã ã·ã¹ãã ã® cron ãžã§ãããã¡ã€ã«ã®ã³ã³ããã¹ã埩å
ã®ããããã¡ã€ã«ã·ã¹ãã ã®ã©ãã«ãã€ãçŽãããšãèš±å¯ããŸãã NFSãCIFS ãŸã㯠FUSE ãã¡ã€ã«ã·ã¹ãã ã§ãã·ã¹ãã ã«ãã cronjob ã®å®è¡ãèš±å¯ããŸãã ã·ã¹ãã ã NIS ã䜿çšããããšãèš±å¯ããŸãã ãããªãã¯ãªãã¡ã€ã«è»¢éãµãŒãã¹åãã«ãããªãã¯ãªãã¡ã€ã«ãå€æŽããããšã tftp ã«èš±å¯ããŸãã tftp ããŠãŒã¶ãŒã®ããŒã ãã£ã¬ã¯ããªãŒã«ãããã¡ã€ã«ãèªã¿æžãããããšãèš±å¯ããŸãã ããããããŒããžã®æ¥ç¶ãããã³äºçŽãããŠããªãããŒããžã®ãã€ã³ãããIrssi IRC ã¯ã©ã€ã¢ã³ãã«èš±å¯ããŸãã Telepathy æ¥ç¶ãããŒãžã£ãŒããã¹ãŠã®äžè¬ç㪠TCP ããŒãã«æ¥ç¶ããããšãèš±å¯ããŸãã Telepathy æ¥ç¶ãããŒãžã£ãŒããã¹ãŠã®ãããã¯ãŒã¯ããŒãã«æ¥ç¶ããããšãèš±å¯ããŸãã ã°ã©ãã£ã«ã«ãã°ã€ã³ããã°ã©ã ããxdm_home_t ãšããŠããŒã ãã£ã¬ã¯ããªãŒã«ãã¡ã€ã«ãäœæããããšãèš±å¯ããŸãã ã°ã©ãã£ã«ã«ãã°ã€ã³ããã°ã©ã ãããŒãããŒããŒãå®è¡ããããšãèš±å¯ããŸãã ã°ã©ãã£ã«ã«ãã°ã€ã³ããã°ã©ã ããsysadm_r:sysadm_t ãšããŠçŽæ¥ãã°ã€ã³ããããšãèš±å¯ããŸãã mount ã³ãã³ããããããªããã£ã¬ã¯ããªãŒãšãã¡ã€ã«ãããŠã³ãããããšãèš±å¯ããŸãã tomcat ããããã¯ãŒã¯çµç±ã§ããŒã¿ããŒã¹ã«æ¥ç¶ããããšãèš±å¯ããŸãã tomcat ã rpm ããŒã¿ããŒã¹ãèªã¿èŸŒãããšãèš±å¯ããŸãã tomcat ããå®è¡å¯èœãªã¡ã¢ãªãŒããã³å®è¡å¯èœãªã¹ã¿ãã¯ã䜿çšããããšãèš±å¯ããŸãã Tor ããªã¬ãŒãšããŠåäœããããšãèš±å¯ããŸãã ç°çš®ã®ããŒã¿ããŒã¹ã«ã¯ã©ã€ã¢ã³ãã©ãã«ãé·ç§»ããããšãèš±å¯ããŸãã å¶éãããªãå®è¡ãã¡ã€ã«ããheap ã¡ã¢ãªãŒãå®è¡å¯èœã«ããã®ããèš±å¯ããŸãã ãã®èšå®ã¯æšå¥šãããŸãããããããã äžé©åã«ã³ãŒãåãããå®è¡ãã¡ã€ã«ã瀺ããŸããã æ»æã瀺ãå ŽåããããŸãã ãã®å®è¡ãã¡ã€ã«ã¯ Bugzilla ã«å ±åããŠãã ããã å¶éãããªãå®è¡ãã¡ã€ã«ãããããã®ã¹ã¿ãã¯ãå®è¡å¯èœã«ããããšãèš±å¯ããŸããããã¯æšå¥šãããŸããããããããäžé©åã«ã³ãŒãåãããå®è¡ãã¡ã€ã«ãæå³ããŸãããæ»æãæå³ããå ŽåããããŸãããã®å®è¡ãã¡ã€ã«ã¯ Bugzilla ã«å ±åããŠãã ããã å¶éããããŠãŒã¶ãŒã running xulrunner plugin-container ãå®è¡ãããšããMozilla ãã©ã°ã€ã³ã®ãã¡ã€ã³ã«é·ç§»ããããšãèš±å¯ããŸãã æš©éã®ãªããŠãŒã¶ãŒã sVirt ãã¡ã€ã³ãäœæããããã«é·ç§»ããããšãèš±å¯ããŸãã éç¹æš©ãŠãŒã¶ãŒã DDL æãå®è¡ããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒã SSH chroot ç°å¢ã䜿çšããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒããã¥ãŒãžãã¯ãå
±æããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒ spamassassin ã¯ã©ã€ã¢ã³ãããããã¯ãŒã¯ã䜿çšããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒãã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã æ¡åŒµå±æ§ (FAT, CDROM, FLOPPY) ãæããªããã¡ã€ã«ã·ã¹ãã ã§ããã¡ã€ã«ãèªã¿æžãããããšããŠãŒã¶ãŒã«èš±å¯ããŸãã ãŠãŒã¶ãŒã PostgreSQL ã«æ¥ç¶ããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒãããŒã«ã«ã® MySQL ãµãŒããŒã«æ¥ç¶ããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒããRADIUS ãµãŒããŒã䜿çšããŠãã°ã€ã³ããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒã yubikey OTP ãµãŒããŒã䜿çšããŠãã°ã€ã³ããããšããŸãã¯å¿çã¢ãŒãã«ãã£ã¬ã³ãžããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒã SSSD ãµãŒããŒãä»ãããLDAP ããçŽæ¥ãŠãŒã¶ãŒ passwd ãšã³ããªãŒã解決ããããšãèš±å¯ããŸãã ãŠãŒã¶ãŒã TCP ãµãŒã㌠(ããŒãããã€ã³ãããåããã¡ã€ã³ãšå€éšã®ãŠãŒã¶ãŒããã®æ¥ç¶ãåãä»ãã) ãå®è¡ããããšãèš±å¯ããŸããããã¯åŒ·å¶çã« FTP ããã·ãã¢ãŒãã«èšå®ãããã®ä»ã®ãããã³ã«ãå€æŽããå¯èœæ§ããããŸãã ãŠãŒã¶ãŒã UDP ãµãŒã㌠(ããŒãããã€ã³ãããåããã¡ã€ã³ãšå€éšã®ãŠãŒã¶ãŒããã®æ¥ç¶ãåãä»ãã) ãå®è¡ããããšãèš±å¯ããŸãããããç¡å¹ã«ãããšããããã¯ãŒã¯äžã® avahi æ€åºãµãŒãã¹ãšããã®ä»ã® udp é¢é£ãµãŒãã¹ãäžæããå¯èœæ§ããããŸãã ãŠãŒã¶ãŒãã¡ã€ã³ãšããŠã®ä»®æ³ããã»ã¹ã®å®è¡ãèš±å¯ãã Xen ã NFS ãã¡ã€ã«ã管çããããšãèš±å¯ããŸãã xend ã blktapctrl/tapdisk ãå®è¡ããããšãèš±å¯ããŸãããã£ã¹ã¯ã€ã¡ãŒãžçšã®å°çšè«çããªã¥ãŒã ã䜿çšããŠããå Žåãé€ããŠãå¿
èŠãããŸããã xend ã qemu-dm ãå®è¡ããããšãèš±å¯ããŸããæºä»®æ³åã䜿çšããŠããŠãvfb ããªããã°ãå¿
èŠãããŸããã xguest ãã³ã³ãã³ããå®è¡ããããšãèš±å¯ããŸãã xguest ã Bluetooth ããã€ã¹ã䜿çšããããšãèš±å¯ããŸãã xguest ãŠãŒã¶ãŒã Network Manager ãèšå®ããApache ããŒãã«æ¥ç¶ããããšãèš±å¯ããŸãã xguest ãŠãŒã¶ãŒããªã ãŒããã«ã¡ãã£ã¢ãããŠã³ãããããšãèš±å¯ããŸãã zarafa ãã¡ã€ã³ã«ãã setrlimit/sys_rouserce ãèš±å¯ããŸãã zebra ããŒã¢ã³ãèšå®ãã¡ã€ã«ã«æžã蟌ãããšãèš±å¯ããŸãã å
šãŠã® udp ããŒããžã®ãã€ã³ãã %s ã«èš±å¯ãã %s ãã1024 以äžã®å
šãŠã® udp ããŒãã«ãã€ã³ãããã®ãèš±å¯ãã %s ããå
šãŠã® tcp ããŒãã«æ¥ç¶ããã®ãèš±å¯ãã å
šãŠã® udp ããŒããžã®æ¥ç¶ã %s ã«èš±å¯ãã XServer ãæžã蟌ã¿å¯èœã¡ã¢ãªãŒãå®è¡ããããšãèš±å¯ããŸãã ã¯ã©ã€ã¢ã³ãã X ãµãŒããŒå
±æã¡ã¢ãªãŒã»ã°ã¡ã³ãã«æžã蟌ãããšãèš±å¯ããŸãã xdm_t ã vnc_port_t(5910) ãžãã€ã³ãããããšãèš±å¯ããŸã 代æ¿ã® SELinux ããªã·ãŒãæšæºã¯ /sys/fs/selinux/policy 代æ¿ã«ãŒããã£ã¬ã¯ããªã/ ãæšæºã§ã ä»£æ¿ root ã®ã»ããã¢ãããå¿
èŠã§ãã permissive ãã¡ã€ã³ãšã¯ãããã»ã¹ãè¡ãããåäœãè¡ããããèš±å¯ããSELinux ã§ã¯æåŠã®ãã°ãèšé²ããã ãã§åŒ·å¶ã¯ããªãããã»ã¹ã©ãã«ã§ããéåžžãpermissive ãã¡ã€ã³ã¯è©Šéšçãªããªã·ãŒã瀺ããèš±å¯ãããã¹ããã¡ã€ã³ãžã®ã¢ã¯ã»ã¹ã SELinux ã«ããæåŠãããåå ãšããŠèããããã¢ãžã¥ãŒã«ãç¡å¹ã«ããŸãã å¶éã®ãªããã¡ã€ã³ãšã¯ãSELinux ã«åŠšå®³ãããããã»ã¹ãè¡ãããåäœãè¡ããããèš±å¯ããããã»ã¹ã©ãã«ã§ãããã®ã¢ãžã¥ãŒã«ãæå¹ã«ãªã£ãŠããå ŽåãSELinux ã«ããªã·ãŒãå®çŸ©ãããŠããªãåæã·ã¹ãã ã§èµ·åæã«éå§ãããã¢ããªã±ãŒã·ã§ã³ã¯ãå¶éã®ãªãããã»ã¹ãšããŠå®è¡ãããŸããunconfined_t ãŠãŒã¶ãŒãç¡å¹ã«ããã«ã¯ããŸã unconfined_t ããŠãŒã¶ãŒãŸãã¯ãã°ã€ã³ã®ç»é¢ããåé€ããå¿
èŠããããŸãã ããªã·ãŒã®åæäž... ã¢ããªã±ãŒã·ã§ã³ ã¢ããªã±ãŒã·ã§ã³ãã¡ã€ã«åœ¢åŒ '%s' ããã®ã¢ããªã±ãŒã·ã§ã³é·ç§» ãéžæãã¡ã€ã³ãããã®ã¢ããªã±ãŒã·ã§ã³é·ç§» '%s' ãžã®ã¢ããªã±ãŒã·ã§ã³é·ç§» ãéžæãã¡ã€ã³ããžã®ã¢ããªã±ãŒã·ã§ã³é·ç§» ã¢ããªã±ãŒã·ã§ã³ ã¢ããªã±ãŒã·ã§ã³ - é«åºŠãªæ€çŽ¢ é©çš æ¬åœã« %s '%s' ãåé€ããŸãã? äžæ£ãªåœ¢åŒ %(BOOLNAME)s ã§ã: %(VALUE)s ãèšé²ããŸã è«çå€ Boolean
æå¹ ããŒãªã¢ã³ %s èš±å¯ã«ãŒã« boolean %s ã¯ããªã·ãŒã§å®çŸ©ãããŠããŸããåé€ã§ããŸãã boolean %s ã¯å®çŸ©ãããŠããŸãã ããŒãªã¢ã³å Boolean å Boolean ã»ã¯ã·ã§ã³ã§ãã ããªã·ãŒã®ããŒããenforcing ã¢ãŒãã®èšå®ã boolean å€ã®å€æŽãã·ã¹ãã ã«èš±å¯ãããã©ãããæå®ãã Boolean ã§ãã true ã«èšå®ãããšã å
ã«æ»ãéã«åèµ·åãå¿
èŠã«ãªããŸãã ããŒãªã¢ã³ é²èŠ§ ã©ãã«ä»ããããã¡ã€ã«ããã£ã¬ã¯ããªã衚瀺ããŠéžæããŸãã çµã¿èŸŒã¿èš±å®¹åœ¢åŒ ããã»ã¹ã®ãã¡ã€ã³ã®åŒã³åºãäž ä»ã®ã¿ã€ãã®ã«ããŽãªãŒã§ +/- ãçµåã§ããŸãã è€æ°ã®æ床ãæãŠãŸãã %s 㧠'+' ã䜿ã£ãŠãæ床ã¬ãã«ãä¿®æ£ããããšãã§ããŸãã åãæ¶ã shadow ãã¹ã¯ãŒããã¡ã€ã«ã«è©²åœãããšã³ããªãŒãèŠã€ãããŸããã
ããªã·ãŒ store ãèªã¿èŸŒããŸããã ããã»ã¹ã¢ãŒãã Enforcing ã«å€æŽ ããã»ã¹ã¢ãŒãã Permissive ã«å€æŽ ããªã·ãŒã¿ã€ããå€æŽãããšã次åã·ã¹ãã ãåèµ·åãããšãæã«ããã¡ã€ã«ã·ã¹ãã å
šäœã®ã©ãã«ãå€æŽããŸããã©ãã«å€æŽã¯ããã¡ã€ã«ã·ã¹ãã ã®ãµã€ãºã«ãã£ãŠã¯æéãããããŸããç¶è¡ããŸãã? SELinux ãç¡å¹ã«ããå Žåã¯ãåèµ·åãå¿
èŠã§ãããã®å€æŽã¯æšå¥šãããŸãããåŸã§ SELinux ãæå¹ã«æ»ããšãã«ãã·ã¹ãã ã®ã©ãã«å€æŽãå¿
èŠã«ãªããŸããSELinux ãåé¡ã®åå ã«ãªã£ãŠãããã©ããã確èªãããå Žåã¯ãPermissive ã¢ãŒãã«ãããš SELinux ããªã·ãŒãé©çš (enforce) ãããããšã©ãŒããã°ã«åºåãããããã«ãªããŸãããŸããPermissive ã¢ãŒããžã®å€æŽã«ã¯ãåèµ·åãèŠæ±ãããŸãããç¶è¡ããŸãã?ã SELinux ãç¡å¹ã«å€æŽããå Žåã¯ãåèµ·åãå¿
èŠã§ãããã®å€æŽã¯æšå¥šãããŸãããåŸã§ SELinux ãæå¹ã«æ»ããšãã«ãã·ã¹ãã ã®ã©ãã«å€æŽãå¿
èŠã«ãªããŸããSELinux ãåé¡ã®åå ã«ãªã£ãŠãããã©ããã確èªãããå Žåã¯ãPermissive ã¢ãŒãã«ãããš SELinux ããªã·ãŒãé©çš (enforce) ãããããšã©ãŒããã°ã«åºåãããããã«ãªããŸãããŸããPermissive ã¢ãŒããžã®å€æŽã«ã¯ãåèµ·åã¯èŠæ±ãããŸãããç¶è¡ããŸãã? SELinux ãæå¹ã«ãããšã次åã·ã¹ãã ãåèµ·åãããšãã«ããã¡ã€ã«ã·ã¹ãã å
šäœã®ã©ãã«ãå€æŽã«ãªããŸããã©ãã«å€æŽã¯ããã¡ã€ã«ã·ã¹ãã ã®ãµã€ãºã«ãã£ãŠã¯æéãããããŸããç¶è¡ããŸãã? ã¯ã©ã¹ ãã®çš®é¡ã®ããªã·ãŒã«å¯ŸããŠèŠæ±ãããã³ãã³ã çŸåšã®ãã©ã³ã¶ã¯ã·ã§ã³å
ã®å€æŽããã¹ãŠãµãŒããŒã«éä¿¡ããŸãã SELinux ã®èšå® å¶éããã root 管çè
ããŒã« ã³ã³ããã¹ã /proc/sys/vm/mmap_min_addr ã§èšå®ãããŠããããã«ãã¢ãã¬ã¹ç©ºéã®äžéšã« mmap ããæ©èœãå¶åŸ¡ããŸãã Copyright (c)2006 Red Hat, Inc.
Copyright (c) 2006 Dan Walsh <dwalsh@redhat.com> SELinux ãŠãŒã¶ãŒ %s ãè¿œå ã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãè¿œå ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããè¿œå ã§ããŸããã§ãã ibendport %s/%s ãè¿œå ã§ããŸããã§ãã %s/%s ã« ibpkey ãè¿œå ã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãè¿œå ã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãè¿œå ã§ããŸããã§ãã %(PROTOCOL)s/%(PORT)s ããŒããè¿œå ã§ããŸããã§ãã %(ROLE)s ã®ãã¬ãã£ãã¯ã¹ %(PREFIX)s ãè¿œå ã§ããŸããã§ãã %(ROLE)s ã®ããŒã«ã %(NAME)s ã«è¿œå ã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒ %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã boolean %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ibendport %s/%s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ibpkey %s/%s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ããŒã %(PROTOCOL)s/%(PORT)s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ããŒã @%(PROTOCOL)s/%(PORT)s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ãã£ã¹ã¯ãªãã¿ãŒãçµäºã§ããŸããã§ããã
semanage ãã©ã³ã¶ã¯ã·ã§ã³ãã³ãããã§ããŸããã§ãã %s ã® SELinux ãŠãŒã¶ãŒãäœæã§ããŸããã§ãã %(PROTOTYPE)s/%(PORT)s ã®ããŒãäœæã§ããŸããã§ãã %s ã®ããŒãäœæã§ããŸããã§ãã %s/%d ã®ããŒãäœæã§ããŸããã§ãã %s/%s ã®ããŒãäœæã§ããŸããã§ãã ibendport %s/%s ã«ããŒãäœæã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ãäœæã§ããŸããã§ãã %(PROTOCOL)s/%(PORT)s ã®ã³ã³ããã¹ããäœæã§ããŸããã§ãã %s ã®ã³ã³ããã¹ããäœæã§ããŸããã§ãã %s/%s ã®ã³ã³ããã¹ããäœæã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããäœæã§ããŸããã§ãã %s/%s ã« ibendport ãäœæã§ããŸããã§ãã %s/%s ã® ibpkey ããŒãäœæã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ãäœæã§ããŸããã§ãã %s ã®ããŒãäœæã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãäœæã§ããŸããã§ãã ã¢ãžã¥ãŒã«ããŒãäœæã§ããŸããã§ãã %(PROTOCOL)s/%(PORT)s ã®ããŒããäœæã§ããŸããã§ãã semanage ãã³ãã«ãäœæã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒ %s ãåé€ã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãåé€ã§ããŸããã§ãã ãã¹ãŠã®ã€ã³ã¿ãŒãã§ã€ã¹ã®ãããã³ã°ãåé€ã§ããŸããã§ãã boolean %s ãåé€ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããåé€ã§ããŸããã§ãã ibendport %s/%s ãåé€ã§ããŸããã§ãã ibpkey %s/%s ãåé€ã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãåé€ã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãåé€ã§ããŸããã§ãã ããŒã %(PROTOCOL)s/%(PORT)s ãåé€ã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ã %s ãåé€ã§ããŸããã§ãã ibendport %s/%d ãåé€ã§ããŸããã§ãã ibpkey %s ããŒãåé€ã§ããŸããã§ãã ããŒã %s ãåé€ã§ããŸããã§ãã ãã¹ãŠã®ããŒããããã³ã°ãåé€ã§ããŸãã 匷å¶ã¢ãŒããå€æã§ããŸããã§ãã
ã¢ãžã¥ãŒã« %s ãç¡å¹ã«ã§ããŸããã§ãã ã¢ãžã¥ãŒã« %s ãæå¹ã«ã§ããŸããã§ãã semanage æ¥ç¶ã確ç«ã§ããŸããã§ãã %s ã®ããŒãæœåºã§ããŸããã§ãã ã¢ãžã¥ãŒã«ãæå¹ã«ã§ããŸããã§ãã ã¢ãžã¥ãŒã« lang_ext ãååŸã§ããŸããã§ãã ã¢ãžã¥ãŒã«åãååŸã§ããŸããã§ãã ã¢ãžã¥ãŒã«ã®åªå
床ãååŸã§ããŸããã§ãã SELinux ã®ã¢ãžã¥ãŒã«äžèŠ§ã衚瀺ã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ã¢ãã¬ã¹ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã boolean ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ãã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒã ãã£ã¬ã¯ããªãŒã®ãã¡ã€ã«ã³ã³ããã¹ãäžèŠ§ã衚瀺ã§ããŸããã§ãã ibendports ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ibpkeys ãäžèŠ§è¡šç€ºã§ããŸããïœãã ã€ã³ã¿ãŒãã§ãŒã¹ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒã«ã«ãã¡ã€ã«ã®ã³ã³ããã¹ãäžèŠ§ã衚瀺ã§ããŸããã§ãã ãã°ã€ã³ãããã³ã°ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒãã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ãŠãŒã¶ãŒ %s ã®ããŒã«äžèŠ§ã衚瀺ã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ããäžèŠ§è¡šç€ºã§ããŸããã§ãã ibendports ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ibpkeys ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒããäžèŠ§è¡šç€ºã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒ %s ãä¿®æ£ã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãä¿®æ£ã§ããŸããã§ãã boolean %s ãä¿®æ£ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããä¿®æ£ã§ããŸããã§ãã ibendport %s/%s ãå€æŽã§ããŸããã§ãã ibpkey %s/%s ãå€æŽã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãä¿®æ£ã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãä¿®æ£ã§ããŸããã§ãã ããŒã %(PROTOCOL)s/%(PORT)s ãå€æŽã§ããŸããã§ãã ãã¡ã€ã« %s ãéããŸããã§ãã
ã¢ãã¬ã¹ %s ãã¯ãšãªãŒã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ã %s ãã¯ãšãªãŒã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããã¯ãšãªãŒã§ããŸããã§ãã ibendport %s/%s ãã¯ãšãªãŒã§ããŸããã§ãã ibpkey %s/%s ãã¯ãšãªãŒã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãã¯ãšãªãŒã§ããŸããã§ãã ããŒã %(PROTOCOL)s/%(PORT)s ãã¯ãšãªãŒã§ããŸããã§ãã %s ã® seuser ãã¯ãšãªãŒã§ããŸããã§ãã %s ã®ãŠãŒã¶ãŒãã¯ãšãªãŒã§ããŸããã§ãã ã¢ãžã¥ãŒã« %s ãåé€ã§ããŸããã§ãã (åé€å€±æ) 蚱容ãã¡ã€ã³ %s ã®åé€ãã§ããŸããã§ãã (åé€ã«å€±æ) MLS ã¬ãã«ã %s ã«èšå®ã§ããŸããã§ãã %s ã® MLS ç¯å²ãèšå®ã§ããŸããã§ãã %s ã® SELinux ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã boolean %s ã®ã¢ã¯ãã£ããªå€ãèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã exec ã³ã³ããã¹ãã %s ã«èšå®ã§ããŸããã§ããã
%s ã®ãã¡ã€ã«ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s/%s ã« ibendport ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s/%s ã« ibpkey ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ãã¹ã¯ãèšå®ã§ããŸããã§ãã %s ã®ã¡ãã»ãŒãžã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã %s/%s ã® ibendport ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã %s/%s ã® ibpkey ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã %(PROTOCOL)s/%(PORT)s ã®ããŒãã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã ã¢ãžã¥ãŒã«ããŒã®ååãèšå®ã§ããŸããã§ãã %s ã®ååãèšå®ã§ããŸããã§ãã 蚱容ãã¡ã€ã³ %s ãèšå®ã§ããŸããã§ãã (ã¢ãžã¥ãŒã«ã®ã€ã³ã¹ããŒã«ã«å€±æ) %(PROTOCOL)s/%(PORT)s ã«ããŒãã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s/%s ã® ibendport ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s/%s ã® ibpkey ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %(PROTOCOL)s/%(PORT)s ã®ããŒãã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s/%s ã® ibendport ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s/%s ã® ibpkey ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %(PROTOCOL)s/%(PORT)s ã®ããŒãã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã %s/%s ã® ibendport ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã %s/%s ã® ibpkey ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã %(PROTOCOL)s/%(PORT)s ã®ããŒãã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã semanage ãã©ã³ã¶ã¯ã·ã§ã³ãéå§ã§ããŸããã§ãã MLS ãæå¹ã«ããç¶æ
ããã¹ãã§ããŸããã§ãã ããã©ã«ãã¿ã€ããååŸã§ããŸããã§ããã
/tmp ã«äžæãã¡ã€ã«ãäœæ/æäœ çŸåšã®åŒ·å¶ã¢ãŒã ã«ã¹ã¿ã ã«ã¹ã¿ã èš±å®¹åœ¢åŒ DBUS ã·ã¹ãã ããŒã¢ã³ åæå€ ããã©ã«ãã¬ãã« åé€ '%(DOMAIN)s' ãã¡ã€ã³ã® %(TYPE)s ãã¡ã€ã«ãã¹ãåé€ããŸãã %s ã®åé€ ãã¡ã€ã«ã³ã³ããã¹ãã®åé€ å€æŽããããã¡ã€ã«ã®ã©ãã«ãåé€ å€æŽãããããŒããåé€ å€æŽããããŠãŒã¶ãŒãããã³ã°ãåé€ããŸãã ãããã¯ãŒã¯ããŒãã®åé€ SELinux ãŠãŒã¶ãŒå²ãåœãŠã®åé€ ãŠãŒã¶ãŒã®åé€ ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãåé€ããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãåé€ ãã°ã€ã³ãããã³ã°ã®åé€ å€æŽæžã¿ãã¡ã€ã«ã®ç䟡æ§å®çŸ©ãåé€ããŸãã å€æŽæžã¿ãã°ã€ã³ãããã³ã°ã®å®çŸ©ãåé€ããŸãã å€æŽæžã¿ SELinux ãŠãŒã¶ãŒãŸãã¯ããŒã«ã®å®çŸ©ãåé€ããŸãã %(PERM)s ãèš±å¯ãããŠãã '%(APP)s' ãã¡ã€ã³ã«å€æŽããããŒãã®å®çŸ©ãåé€ããŸãã %s ã®ããŒããåé€ ãŠãŒã¶ãŒã®åé€ ãã¹ãŠã®ããã»ã¹ããä»ã®ãã¹ãŠã®ããã»ã¹ã ptrace ãŸãã¯ãããã°ããããšãæåŠããŸãã ãŠãŒã¶ãŒãã¡ã€ã³ã®ã¢ããªã±ãŒã·ã§ã³ã«ããã¡ã¢ãªãŒé åã®ãããã³ã°ããå®è¡å¯èœãšæžã蟌ã¿å¯èœã®äž¡æ¹ã§è¡ãããšãæåŠããŸãã ããã¯éåžžã«å±éºã§ãã®ã§ã å®è¡å¯èœãã¡ã€ã«ã«ã€ããŠã¯ Bugzilla ã«å ±åããŠãã ããã 説æ ãã¹ã¯ããããã°ã€ã³ãŠãŒã¶ãŒããŒã« 移è¡å
ã¯ã©ã¹ ABRT ã€ãã³ãã¹ã¯ãªããã®åŠçãã§ãããããabrt_handle_event_t domain ãã¡ã€ã³ã§ã® ABRT ã®å®è¡ãèš±å¯ãããã©ãããæå®ããŸãã BIND ããTCP ãœã±ããã HTTP ããŒãã«ãã€ã³ãã§ãããã©ãããæå®ããŸãã BIND ãããã¹ã¿ãŒãŸãŒã³ãã¡ã€ã«ã«æžã蟌ãããã©ãããæå®ããŸããããã¯éåžžãåç DNS ãŸãã¯ãŸãŒã³è»¢éã®ããã«äœ¿çšãããŸãã Cobbler ã CIFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ã§ãããã©ãããæå®ããŸãã Cobbler ã NFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ã§ãããã©ãããæå®ããŸãã Cobbler ã TCP ã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã Cobbler ããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãã¡ã€ã«ãå€æŽã§ãããã©ãããæå®ããŸãã Condor ã TCP ã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã DHCP ããŒã¢ã³ã LDAP ããã¯ãšã³ãã䜿çšã§ãããã©ãããæå®ããŸãã Git CGI ã«ãã cifs ãã¡ã€ã«ã·ã¹ãã ãžã®ã¢ã¯ã»ã¹ãå¯èœãã©ãããæå®ããŸãã Git CGI ã«ãã nfs ãã¡ã€ã«ã·ã¹ãã ãžã®ã¢ã¯ã»ã¹ãå¯èœãã©ãããæå®ããŸãã Git CGI ã«ããããŒã ãã£ã¬ã¯ããªã®æ€çŽ¢ãå¯èœãã©ãããæå®ããŸãã Git ã»ãã·ã§ã³ããŒã¢ã³ããäºçŽãããŠããªããã¹ãŠã®ããŒãã«ãTCP ãœã±ããããã€ã³ãã§ãããã©ãããæå®ããŸãã Git ã·ã¹ãã ããŒã¢ã³ã«ãã cifs ãã¡ã€ã«ã·ã¹ãã ãžã®ã¢ã¯ã»ã¹ãå¯èœãã©ãããæå®ããŸãã Git ã·ã¹ãã ããŒã¢ã³ã«ãã nfs ãã¡ã€ã«ã·ã¹ãã ãžã®ã¢ã¯ã»ã¹ãå¯èœãã©ãããæå®ããŸãã Git ã·ã¹ãã ããŒã¢ã³ã«ããããŒã ãã£ã¬ã¯ããªã®æ€çŽ¢ãå¯èœãã©ãããæå®ããŸãã Gitosis ãã¡ãŒã«ãéä¿¡ã§ãããã©ãããæå®ããŸãã NagiosãNRPE ããnfs ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ã§ãããã©ãããæå®ããŸãã Polipo ã NFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ã§ãããã©ãããæå®ããŸãã Polipo ã»ãã·ã§ã³ããŒã¢ã³ããTCP ãœã±ããããäºçŽããŠããªããã¹ãŠã®ããŒãã«ãã€ã³ãã§ãããã©ãããæå®ããŸãã /var/spool/abrt-upload/ å
ã®ãããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãã¡ã€ã«ã®å€æŽããabrt-handle-upload ã«èš±å¯ãããã©ãããæå®ããŸãã wine ãäœãªãŒãžã§ã³ã mmap ããè©Šè¡ããæé»çã«ãããã¯ããããã©ãããæå®ããŸãã awstats ã httpd ãã°ãã¡ã€ã«ãããŒãžã§ãããã©ãããæå®ããŸãã boinc ã«ãã xecmem ãŸã㯠execstack ãèš±å¯ãããã©ããæå®ããŸãã ãŠãŒã¶ãŒãã¡ã€ã³ãåŒã³åºããŠãgit_session_t domain 㧠Git ããŒã¢ã³ãå®è¡ã§ãããã©ãããæå®ããŸãã åŒã³åºããŠãããŠãŒã¶ãŒãã¡ã€ã³ããpolipo_session_t ãã¡ã€ã³ã«ãã㊠Polipo ããŒã¢ã³ãå®è¡ã§ãããã©ãããæå®ããŸãã ãŠã€ã«ã¹å¯ŸçãœãããŠã§ã¢ããJIT ã³ã³ãã€ã©ãŒã䜿çšã§ãããã©ãããæå®ããŸãã cdrecord ãããŸããŸãªå
容ãèªã¿åãã§ãããã©ãããæå®ããŸããNFSãSambaããªã ãŒããã«ããã€ã¹ããŠãŒã¶ãŒã®äžæé åããã³ä¿¡é ŒãããŠããªãå
容ã®ãã¡ã€ã«ã collectd ã TCP ã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã conman ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã æ±çšã® cronjob ãã¡ã€ã³å
ã®ãžã§ããšã¯å¥ã«ããŠãŒã¶ãŒãã¡ã€ã³å
ã®ãžã§ãã®å®è¡ã crond ã«èš±å¯ãããã©ãããæå®ããŸãã cvs ã shadow ãã¹ã¯ãŒããã¡ã€ã«ãèªã¿èŸŒãããã©ãããæå®ããŸãã dbadm ãäžè¬çãªãŠãŒã¶ãŒãã¡ã€ã«ã管çã§ãããã©ãããæå®ããŸãã dbadm ãäžè¬çãªãŠãŒã¶ãŒãã¡ã€ã«ãèªã¿èŸŒãããã©ãããæå®ããŸãã docker ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã entropyd ãããšã³ããããŒãã£ãŒãã®ãœãŒã¹ãšããŠããªãŒãã£ãªããã€ã¹ã䜿çšã§ãããã©ãããæå®ããŸãã exim ãããŒã¿ããŒã¹ã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã exim ãäžè¬çãªå
容ã®ãŠãŒã¶ãŒãã¡ã€ã«ãäœæãèªã¿åããæžã蟌ã¿ãããã³åé€ã§ãããã©ãããæå®ããŸãã exim ãäžè¬çãªå
容ã®ãŠãŒã¶ãŒãã¡ã€ã«ãèªã¿èŸŒãããã©ãããæå®ããŸãã fenced ã TCP ã䜿çšããŠãããã¯ãŒã¯ã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã fenced ã SSH ã䜿çšã§ãããã©ãããæå®ããŸãã ftpd ããäºçŽãããŠããªããã¹ãŠã®ããŒãã«ãããã·ãã¢ãŒãã§ãã€ã³ãã§ãããã©ãããæå®ããŸãã ftpd ããäºçŽãããŠããªããã¹ãŠã®ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã ftpd ã TCP ãããã¯ãŒã¯çµç±ã§ããŒã¿ããŒã¹ã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã ftpd ãããŒã«ã«ãŠãŒã¶ãŒã«ãã°ã€ã³ã§ããDAC ã管çããã·ã¹ãã ã«ãããã¹ãŠã®ãã¡ã€ã«ãèªã¿æžãã§ãããã©ãããæå®ããŸãã ftpd ãããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããããããªãã¯ãã¡ã€ã«ãå€æŽã§ãããã©ãããæå®ããŸãããã£ã¬ã¯ããªããã³ãã¡ã€ã«ã®ã©ãã«ã¯ public_content_rw_t ã«ããªããã°ãªããŸããã ftpd ãããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããã CIFS ã䜿çšã§ãããã©ãããæå®ããŸãã ftpd ãããããªãã¯ãã¡ã€ã«è»¢éãµãŒãã¹ã«äœ¿çšããã NFS ã䜿çšã§ãããã©ãããæå®ããŸãã glance-api ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã haproxy ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã icecast ããã¹ãŠã® TCP ããŒãããªãã¹ã³ã§ããæ¥ç¶ã§ãããã©ãããæå®ããŸãã IRC ã¯ã©ã€ã¢ã³ãããäºçŽãããŠããªããã¹ãŠã® TCP ããŒãããªãã¹ã³ã§ããæ¥ç¶ã§ãããã©ãããæå®ããŸãã keepalived ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã ãããã¯ãŒã¯çµç±ã«ããã¡ãŒã«ãžã®æ¥ç¶ããlogwatch ã«èš±å¯ãããã©ãããæå®ããŸãã lsmd_plugin ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã mcelog ãã¹ã¯ãªãããå®è¡ã§ãããã©ãããæå®ããŸãã mcelog ããã¹ãŠã®ãŠãŒã¶ãŒ tty ã䜿çšã§ãããã©ãããæå®ããŸãã mcelog ãã¯ã©ã€ã¢ã³ãã¢ãŒãããµããŒããããã©ãããæå®ããŸãã mcelog ããµãŒããŒã¢ãŒãããµããŒããããã©ãããæå®ããŸãã minidlna ã«ããæ±çšã®ãŠãŒã¶ãŒã³ã³ãã³ãèªã¿èŸŒã¿ãèš±å¯ãããã©ãããæå®ããŸãã mpd ãããŠãŒã¶ãŒã®ããŒã ãã£ã¬ã¯ããªãŒã®äžäœãåç
§ã§ãããã©ãããæå®ããŸãã mpd ã CIFS ãã¡ã€ã«ã·ã¹ãã ã䜿çšã§ãããã©ãããæå®ããŸãã mpd ã NFS ãã¡ã€ã«ã·ã¹ãã ã䜿çšã§ãããã©ãããæå®ããŸãã mplayer ããå®è¡å¯èœãªã¹ã¿ãã¯ãäœæã§ãããã©ãããæå®ããŸãã neutron ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã openvpn ã«ãã TCP ãããã¯ãŒã¯ãžã®æ¥ç¶ãèš±å¯ãããã©ãããæå®ããŸãã openvpn ãããŠãŒã¶ãŒã®ããŒã ãã£ã¬ã¯ããªãŒã«ããäžè¬çãªãã¡ã€ã«ãèªã¿èŸŒãããã©ãããæå®ããŸãã Polipo ã CIFS ãã¡ã€ã«ã·ã¹ãã ã«ã¢ã¯ã»ã¹ã§ãããã©ãããæå®ããŸãã privoxy ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã radius ã JIT ã³ã³ãã€ã©ãŒã䜿çšã§ãããã©ãããæå®ããŸãã smartmon ãã3ware ã³ã³ãããŒã©ãŒã«ãããŠããã€ã¹ããµããŒãã§ãããã©ãããæå®ããŸãã squid ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã squid ãééãããã·ãŒãšããŠå®è¡ã§ãããã©ãããæå®ããŸãã swift ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã tmpreaper ã cifs ãã¡ã€ã«ã·ã¹ãã ã䜿çšã§ãããã©ãããæå®ããŸãã tmpreaper ã NFS ãã¡ã€ã«ã·ã¹ãã ã䜿çšã§ãããã©ãããæå®ããŸãã tmpreaper ã samba_share ãã¡ã€ã«ã䜿çšã§ãããã©ãããæå®ããŸãã lpd ãµãŒããŒããµããŒããããã©ãããæå®ããŸãã tor ã TCP ãœã±ããããäºçŽãããŠããªããã¹ãŠã®ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã varnishd ãå®å
šãª TCP ãããã¯ãŒã¯ã䜿çšã§ãããã©ãããæå®ããŸãã webadm ãäžè¬çãªãŠãŒã¶ãŒãã¡ã€ã«ã管çã§ãããã©ãããæå®ããŸãã webadm ãäžè¬çãªãŠãŒã¶ãŒãã¡ã€ã«ãèªã¿èŸŒãããã©ãããæå®ããŸãã Zabbix ããã¹ãŠã® TCP ããŒãã«æ¥ç¶ã§ãããã©ãããæå®ããŸãã ç¡å¹ã«ãã ç£æ»ã®ç¡å¹å ã«ãŒãã«ã¢ãžã¥ãŒã«ã®ããŒããç¡å¹ã«ããŸãã ç¡å¹ ç¡å¹
容èª
匷å¶
'%s' ãšç¶æ
é·ç§»ã§ããã¢ããªã±ãŒã·ã§ã³ã衚瀺ããŸãã ãéžæãããã¡ã€ã³ããšé·ç§»ã§ããã¢ããªã±ãŒã·ã§ã³ã衚瀺ããŸãã ã%sãã®ããªã·ãŒãå€æŽããããã«äœ¿çšã§ããããŒãªã¢ã³æ
å ±ã衚瀺ããŸãã ãéžæãããã¡ã€ã³ãã®ããªã·ãŒãå€æŽããã®ã«äœ¿çšã§ããããŒãªã¢ã³æ
å ±ã衚瀺ããŸãã ã%sãã«ãã䜿çšã§ãããã¡ã€ã«ã¿ã€ãã®æ
å ±ã衚瀺ããŸãã ãéžæãããã¡ã€ã³ãã䜿çšã§ããã¿ã€ãã®æ
å ±ã衚瀺ããŸãã ã%sãããªãã¹ã³ãèš±å¯ããããããã¯ãŒã¯ããŒãã衚瀺ããŸãã ãéžæãããã¡ã€ã³ãããªãã¹ã³ãèš±å¯ãããããã¯ãŒã¯ããŒãã衚瀺ããŸãã äœæããã man ããŒãžã®ãã¡ã€ã³å Dontaudit Apache ããã£ã¬ã¯ããªãŒãæ€çŽ¢ã ãããã¯ãŒã¯ããŒãã®ç·šé æå¹ã«ãã ç£æ»ã®æå¹å ããŒã¢ã³ã®ã¯ã©ã¹ã¿ãŒã¢ãŒããæå¹ã«ããŸãã fcron ã«å¯Ÿå¿ãããããcron ãã¡ã€ã³å
ã§è¿œå ã®ã«ãŒã«ãæå¹ã«ããŸãã polyinstantiated ãã£ã¬ã¯ããªãŒã®ãµããŒããæå¹ã«ããŸãã å
šãã¡ã€ã³ã«å¯Ÿã㊠urandom ã®èªã¿åããæå¹ã«ããŸãã éåžžãã°ãã¡ã€ã«å
ã§å ±åãããªããè¿œå ã®ç£æ»ã«ãŒã«ã®æå¹å/ç¡å¹å æå¹å åŒ·å¶ SELinux ãŠãŒã¶ãŒããã°ã€ã³ããããã©ã«ãã®ã¬ãã«ãå
¥åããŸããããã©ã«ã㯠s0 ã«èšå®ãããŸãã ãã® SELinux ãŠãŒã¶ãŒã® MLS/MCS ç¯å²ãå
¥åããŸãã
s0-s0:c1023 ãã®ãã°ã€ã³ãŠãŒã¶ãŒã® MLS/MCS ç¯å²ãå
¥åããŸããããã©ã«ãã§ã¯éžæãã SELinux ãŠãŒã¶ãŒã®ç¯å²ãèšå®ãããŸãã 管çãã¡ã€ã³ãé·ç§»ãã SELinux ããŒã«ãå
¥åããŠãã ããã ãã®ãã¡ã€ã³ã«é·ç§»ãã SELinux ãŠãŒã¶ãŒãå
¥åããŠãã ããã tcp ããŒãããŸã㯠%s ã®æ¥ç¶å
ãšãªãããŒã矀ã®ç¯å²ããã³ã³ãã§åºåã£ãäžèŠ§ãèšå
¥ããŸããäŸ: 612, 650-660 udp ããŒãããŸã㯠%s ã®ãã€ã³ãå
ãšãªãããŒã矀ã®ç¯å²ããã³ã³ãã§åºåã£ãäžèŠ§ãèšå
¥ããŸããäŸ: 612, 650-660 udp ããŒãããŸã㯠%s ã®æ¥ç¶å
ãšãªãããŒã矀ã®ç¯å²ããã³ã³ãã§åºåã£ãäžèŠ§ãèšå
¥ããŸããäŸ: 612, 650-660 å¶çŽãã¹ãå®è¡ãã¡ã€ã«ã®å®å
šãã¹ãèšå
¥ããŸãã å¶çŽãããã¢ããªã±ãŒã·ã§ã³ã®éå§ã«äœ¿çšãããinit ã¹ã¯ãªããã®å®å
šãã¹ãèšå
¥ããŸãã æ¡åŒµãããã¡ã€ã³åœ¢åŒãå
¥åããŠãã ãã ãã®å¶éããã管çè
ã管çãããã¡ã€ã³ãå
¥åããŠãã ããã åãåãããå®è¡ããã€ã³ã¿ãŒãã§ãŒã¹åãå
¥åããŠãã ãã ãã®ãã¡ã€ã«ãã¹ã«å²ãåœãŠã MLS ã©ãã«ãå
¥åããŸãã ãã®ããŒãã«å²ãåœãŠã MLS ã©ãã«ãå
¥åããŸãã SELinux ãŠãŒã¶ãŒå¶éãè¿œå ããããŠãŒã¶ãŒã®ãã°ã€ã³ãŠãŒã¶ãŒåãå
¥åããŸãã ç䟡ã©ãã«ã®èšå®ãè¡ããã¹ãå
¥åããŸãã ããŒãã¿ã€ããè¿œå ãããããŒãçªå·ãŸãã¯ç¯å²ãå
¥åããŸãã å¶çŽãããã¢ããªã±ãŒã·ã§ã³ãŸãã¯ãŠãŒã¶ãŒããŒã«ã«ãåºæåãèšå
¥ããŸãã ç䟡ãã¹ %s ã®ç䟡ã¯ã©ã¹ã¯æ¢ã«ååšããŸã %s ã®ç䟡ã¯ã©ã¹ã¯ååšããŸãã ç䟡æ§: %s ã¡ã¢ãªã®å²ãåœãŠäžã«ãšã©ãŒãçºçããŸããã
ã·ã§ã«ã® argv0 å²ãåœãŠäžã«ãšã©ãŒãçºçããŸããã
uid ã®å€æŽäžã«ãšã©ãŒãçºçãäžæ¢ããŸãã
ç£æ»ã·ã¹ãã ã«æ¥ç¶äžã«ãšã©ãŒãçºçããŸããã
KEEPCAPS ã®ãªã»ããäžã«ãšã©ãŒãçºçãäžæ¢ããŸã
ç£æ»ã¡ãã»ãŒãžã®éä¿¡äžã«ãšã©ãŒãçºçããŸããã
ãšã©ãŒã%s ã«ãã㊠O_NONBLOCK ã解é€ã§ããŸããã§ããã
ãšã©ãŒ! %s ãéããŸããã§ããã
ãšã©ãŒãçºçããŸãããã·ã§ã«ãæå¹ã§ã¯ãããŸããã
ãšã©ãŒ: è€æ°ã®ã¬ãã«ãæå®ãããŠããŸã
ãšã©ãŒ: è€æ°ã®ããŒã«ãæå®ãããŠããŸã
ãšã©ãŒ: è€æ°ã®ã¿ã€ããæå®ãããŠããŸã
ãšã©ãŒ: ã»ãã¥ã¢ã§ã¯ãªã端æ«ã§ãã¬ãã«ãå€æŽããããšã¯èš±å¯ãããŸãã
å®è¡ãã¡ã€ã« å®è¡å¯èœãã¡ã€ã« å®è¡å¯èœãã¡ã€ã« '%s' ãããããå®è¡ãããšãã«ãä»ã®ãã¡ã€ã³ã«é·ç§»ããå®è¡å¯èœãªãã®ã ãéžæãããã¡ã€ã³ããããããå®è¡ãããšãã«ãä»ã®ãã¡ã€ã³ã«é·ç§»ããå®è¡å¯èœãªãã®ã éžæãããã¡ã€ã³ã®ãšã³ããªãŒãã€ã³ããå®è¡ãããšãã«ãã%sãã«é·ç§»ããå®è¡å¯èœãªãã®ã éžæãããã¡ã€ã³ã®ãšã³ããªãŒãã€ã³ããå®è¡ãããšãã«ããéžæãããã¡ã€ã³ãã«é·ç§»ããå®è¡å¯èœãªãã®ã æ¢åã®ãã¡ã€ã³åœ¢åŒ æ¢åã®ãŠãŒã¶ãŒããŒã« æ¢åã®ãŠãŒã¶ãŒ (_U) ãšã¯ã¹ããŒã ã·ã¹ãã èšå®ããã¡ã€ã«ã«ãšã¯ã¹ããŒãããŸã tty ã®æ£åžžçµäºã«å€±æããŸãã
ã±ã€ãããªã㣠%m ã®åé€ã«å€±æããŸãã
%s ããªã·ãŒãã¡ã€ã«ã®èªã¿èŸŒã¿ã«å€±æããŸãã ç£æ»ã¡ãã»ãŒãžã®éä¿¡ã«å€±æããŸãã åå空éã®é·ç§»ã«å€±æããŸãã
ãã¡ã€ã«
ä»æ§ ãã¡ã€ã«
åœ¢åŒ ãã¡ã€ã«ã³ã³ããã¹ããã¡ã€ã« ãã¡ã€ã«ã®çäŸ¡æ§ ãã¡ã€ã«ã®ã©ãã«ä»ã ãã¡ã€ã«å ãã¡ã€ã«ãã¹ ãã¡ã€ã«ã®ä»æ§ '%s' ããã®ãã¡ã€ã«é·ç§» ãéžæãã¡ã€ã³ãããã®ãã¡ã€ã«é·ç§» ãã¡ã€ã«é·ç§»ã§ã¯ãçŸåšã®ãã¡ã€ã³ã«ãã£ãŠãé·ç§»å
ã¿ã€ãã®ãã£ã¬ã¯ããªãŒå
ã«ç¹å®ã¯ã©ã¹ã®ã³ã³ãã³ããäœæããããšãã®åäœãå®çŸ©ããŸããé·ç§»ã«ã¯ãªãã·ã§ã³ã§ãã¡ã€ã«åãæå®ã§ããŸãã ãã¡ã€ã«ã®ã¿ã€ã '%s' çšã«å®çŸ©ããããã¡ã€ã«ã®ã¿ã€ãã ãéžæãããã¡ã€ã³ãçšã«å®çŸ©ããããã¡ã€ã«ã®ã¿ã€ãã ãã¡ã€ã«ã¯ã©ã¹: %s %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã¯ããªã·ãŒã§å®çŸ©ãããŠããŸãã åé€ã§ããŸãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã¯å®çŸ©ãããŠããŸãã ãã¡ã€ã«ã®ç䟡æ§ã«ãããã·ã¹ãã ã¯æ°ãããã¹é
äžã®ã³ã³ãã³ãããç䟡ãã¹é
äžã«ããããã«ã©ãã«ä»ãããŸãã ãã¡ã€ã«ãã¹: %s '%s' ãã¡ã€ã³ã«å
¥ãããã«äœ¿çšããããã¡ã€ã«ã®ãã¹ã ãéžæãããã¡ã€ã³ãã«å
¥ãããã«äœ¿çšããããã¡ã€ã«ã®ãã¹ã ãã¡ã€ã«ãã¹: %s ãã¡ã€ã«ã®ã¹ãã㯠%(TARGET)s ãåçã®ããŒã« '%(SOURCE)s %(DEST)s' ãšç«¶åããŠããŸã ãã¡ã€ã«ã®ã¹ãã㯠%(TARGET)s ãåçã®ã«ãŒã« '%(SOURCE)s %(DEST)s' ãšç«¶åããŠããŸãã代ããã« '%(DEST1)s' ãè¿œå ããŠã¿ãŠãã ãã ãã¡ã€ã«ã®æå®ã«ã¯ã¹ããŒã¹ã䜿çšã§ããŸãã ãã¡ã€ã« ãã¡ã€ã«ã®çäŸ¡æ§ '%s' ã«ãããã¡ã€ã«ã¯å¥ã®ã©ãã«ã«é·ç§»ããŸãã '%s' ãã¡ã€ã³ãæžã蟌ã¿å¯èœãªãã¡ã€ã«ã ãéžæãããã¡ã€ã³ããæžã蟌ã¿å¯èœãªãã¡ã€ã«ã %s ãã管çããããã¡ã€ã«/ãã£ã¬ã¯ããªãŒãPid ãã¡ã€ã«ããã°ãã¡ã€ã«ã/var/lib ãã¡ã€ã«ãªã©... ãã£ã«ã¿ãŒ GPL '%s' ããªã·ãŒã®çæ '%s' ããªã·ãŒã®çæ éžæããã SELinux ããã¥ã¢ã«ããŒãžåãã® HTML ããã¥ã¢ã«ããŒãžã®æ§æãçæãã SELinux ããªã·ãŒã¢ãžã¥ãŒã«ã®ãã³ãã¬ãŒããçæãã SELinux ããã¥ã¢ã«ããŒãžãçæãã æ°èŠããªã·ãŒã¢ãžã¥ãŒã«ã®çæ SELinux ããªã·ãŒã®ã°ã©ãã£ã«ã«ãŠãŒã¶ãŒã€ã³ã¿ãŒãã§ãŒã¹ ã°ã«ãŒã衚瀺 ãã«ã: ã¢ããªã±ãŒã·ã§ã³ã¿ã€ãã®ããŒãž ãã«ã: Boolean ã®ããŒãž ãã«ã: å®è¡å¯èœãã¡ã€ã«ã®ããŒãž ãã«ã: ãã¡ã€ã«ç䟡æ§ã®ããŒãž ãã«ã: çä¿¡ãããã¯ãŒã¯æ¥ç¶ã®ããŒãž ãã«ã: ããã¯ããŠã³ããŒãž ãã«ã: ãã°ã€ã³ããŒãž ãã«ã: çºä¿¡ãããã¯ãŒã¯æ¥ç¶ã®ããŒãž ãã«ã: SELinux ãŠãŒã¶ãŒã®ããŒãž ãã«ã: ã¹ã¿ãŒãããŒãž ãã«ã: ã·ã¹ãã ããŒãž ãã«ã: é·ç§»ã¢ããªã±ãŒã·ã§ã³ãã¡ã€ã«ã®ããŒãž ãã«ã: ã¢ããªã±ãŒã·ã§ã³ããã®é·ç§»ããŒãž ãã«ã: ã¢ããªã±ãŒã·ã§ã³ãžã®é·ç§»ããŒãž ãã«ã: æžã蟌ã¿å¯èœãã¡ã€ã«ã®ããŒãž IB ããã€ã¹å IB ããã€ã¹åãå¿
èŠã§ã 代æ¿ã¢ã¯ã»ã¹å¶åŸ¡ãèš±å¯ããããªã·ãŒã«
èšè¿°ããã If-Then-Else ã®ã«ãŒã«ã§ãã ã€ã³ããŒã å¥ã®ãã·ã³ããã·ã¹ãã èšå®ãã€ã³ããŒãããŸã å
¥å Init ã¹ã¯ãªãã ã¿ãŒããã«ãšå¯Ÿè©±ããŸã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãååšããŸããã ã€ã³ã¿ãŒãã§ãŒã¹ %s ã¯ããªã·ãŒã§å®çŸ©ãããŠããŸãã åé€ã§ããŸãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ã¯å®çŸ©ãããŠããŸãã ã€ã³ã¿ãŒãã§ã€ã¹ãã¡ã€ã« ã€ã³ã¿ãŒããããµãŒãã¹ããŒã¢ã³ ã€ã³ã¿ãŒããããµãŒãã¹ããŒã¢ã³ (inetd) ã€ã³ã¿ããããµãŒãã¹ããŒã¢ã³ã¯ãxinetd ãéå§ããããŒã¢ã³ã§ã ç¡å¹ãª Pkey ç¡å¹ãªããŒã ç¡å¹ãªããŒãçªå· ç¡å¹ãªãã¡ã€ã«æå® ç¡å¹ãªåªå
床 %d (1 ãã 999 ãŸã§ã®éã«ããããšãå¿
èŠ) ã©ããªã³ã° èšèª Linux ã°ã«ãŒã %s ã¯ååšããŸãã Linux ãŠãŒã¶ãŒ %s ã¯ååšããŸãã SELinux ããªã·ãŒã®ã€ã³ã¿ãŒãã§ãŒã¹äžèŠ§ã衚瀺 äžèŠ§è¡šç€º ããªã·ãŒã¢ãžã¥ãŒã«ã®èªã¿èŸŒã¿ ããªã·ãŒã¢ãžã¥ãŒã«ã®ããŒã ããã¯ããŠã³ SELinux ã·ã¹ãã ãããã¯ããŠã³ããŸãã
ãã®ç»é¢ã䜿çšã㊠SELinux ä¿è·ã匷åããŸãã ãã°ã€ã³
å ãã°ã€ã³ '%s' ãå¿
èŠã§ã ãã°ã€ã³ãããã³ã° ãã°ã€ã³å ãã°ã€ã³å: %s %s ã®ãã°ã€ã³ãããã³ã°ã¯ããªã·ãŒã§å®çŸ©ãããŠãããåé€ã¯ã§ããŸãã %s ã®ãã°ã€ã³ãããã³ã°ã¯å®çŸ©ãããŠããŸãã ãã°ã€ã³å ããŒã¿æ倱ãã€ã¢ãã° MCS ã¬ãã« MCS ç¯å² ãã¡ã€ã«ãã¹ããããŸãã MLS MLS ç¯å² MLS/ MLS/
MCS ç¯å² MLS/MCS
ã¬ãã« MLS/MCS ç¯å² MLS/MCS ç¯å²: %s ãã¹ãååž°çã«ãã SELinux èšå®ã®ç®¡ç æå°æš©éã®ç«¯æ«ãã°ã€ã³ãŠãŒã¶ãŒããŒã« ã¿ãŒããã«å
ã§æäœéã®ãŠãŒã¶ãŒããŒã« æå°æš©éã® X Window ãã°ã€ã³ãŠãŒã¶ãŒããŒã« X ãŠã£ã³ããŠå
ã§æäœéã®ãŠãŒã¶ãŒããŒã« ã©ãã«ä»ããééã£ãŠãããã¡ã€ã«ããããŸã ä¿®æ£ '%(DOMAIN)s' ãã¡ã€ã³ã® %(TYPE)s ãã¡ã€ã«ãã¹ãå€æŽããŸããéžæã§ããã®ã¯äžèŠ§å
ã®å€ªåã¢ã€ãã ã®ã¿ã§ããã€ãŸãã倪åã¢ã€ãã ã¯ä»¥åã«å€æŽããããšããããšã«ãªããŸãã %s ã®ä¿®æ£ ãã¡ã€ã«ã³ã³ããã¹ãã®ä¿®æ£ ãã¡ã€ã«ã®ç䟡æ§ãããã³ã°ãå€æŽããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãå€æŽããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãäœæãããŸãã ãã°ã€ã³ãããã³ã°ã®å€æŽ ãã°ã€ã³ãããã³ã°ãå€æŽããŸããæŽæ°ã®é©çšæã«ãã°ã€ã³ãããã³ã°ãå€æŽãããŸãã %s ã®ãããã¯ãŒã¯ããŒããå€æŽ %s ã®ãããã¯ãŒã¯ããŒããå€æŽããŸããæŽæ°ã®é©çšæã«ããŒããäœæãããŸãã SELinux ã®ãã¡ã€ã«ã®ç䟡æ§ãå€æŽ SELinux ãŠãŒã¶ãŒå²ãåœãŠã®ä¿®æ£ SELinux ãŠãŒã¶ãŒããŒã«ãå€æŽããŸããæŽæ°ã®é©çšæã« SELinux ãŠãŒã¶ãŒããŒã«ãå€æŽãããŸãã SELinux ãŠãŒã¶ãŒã®å€æŽ ãŠãŒã¶ãŒã®ä¿®æ£ æ¢åã®ãã°ã€ã³çšãŠãŒã¶ãŒèšé²ãä¿®æ£ ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãå€æŽããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãå€æŽ ãã°ã€ã³ãããã³ã°ã®å€æŽ %(PERM)s ãèš±å¯ãããŠãã '%(APP)s' ãã¡ã€ã³ã«å¯ŸããããŒãã®å®çŸ©ãå€æŽããŸãã %s ã®ããŒããç·šé éžæããå€æŽæžã¿ãã¡ã€ã«ç䟡æ§ã®å®çŸ©ãä¿®æ£ããŸããéžæã§ããã®ã¯äžèŠ§å
ã®å€ªåã¢ã€ãã ã®ã¿ã§ããã€ãŸãã倪åã¢ã€ãã ã¯ä»¥åã«å€æŽãããã¢ã€ãã ãšããããšã§ãã éžæããå€æŽæžã¿ãã°ã€ã³ãããã³ã°ã®å®çŸ©ãä¿®æ£ããŸãã éžæããå€æŽæžã¿ SELinux ãŠãŒã¶ãŒãŸãã¯ããŒã«ã®å®çŸ©ãä¿®æ£ããŸãã ãŠãŒã¶ãŒã®å€æŽ ã¢ãžã¥ãŒã« %s.pp ã¯ãæ¢ã«çŸåšã®ããªã·ãŒã«ããŒããããŠããŸãã
ç¶è¡ããŸãã? ã¢ãžã¥ãŒã«å ã¢ãžã¥ãŒã«ã«ã¯ %s ãååšããŸãã æ°ããã¿ã€ãã®ã¢ãžã¥ãŒã«æ
å ± 詳现 ãã®ä»ã¿ã€ã 詳现... åå ååã¯è±æ°å (ã¹ããŒã¹ãªã) ã§ãªããã°ãªããŸããããªãã·ã§ã³ "-n ã¢ãžã¥ãŒã«å" ã®äœ¿çšãæ€èšããŠäžãã ãããã¯ãŒã¯ ãããã¯ãŒã¯
ãã€ã³ãã¿ã ãããã¯ãŒã¯ããŒã ãããã¯ãŒã¯ããŒãã®å®çŸ© '%s' ãæ¥ç¶ãèš±å¯ããããããã¯ãŒã¯ããŒãã '%s' ããªãã¹ã³ãèš±å¯ããããããã¯ãŒã¯ããŒãã ãéžæãããã¡ã€ã³ããæ¥ç¶ãèš±å¯ãããããã¯ãŒã¯ããŒãã ãéžæãããã¡ã€ã³ãããªãã¹ã³ãèš±å¯ãããããã¯ãŒã¯ããŒãã ãããã¯ãŒã¯ããŒã: %s ãããã¯ãŒã¯ãããã³ã«: %s ããã ã€ã³ã¹ããŒã«ãããŠãã SELinux ããªã·ãŒããããŸãã ãã¡ã€ã« %s ã«ã³ã³ããã¹ãããããŸãã
ããŒãã¢ãã¬ã¹ãå¿
èŠã§ã ãŸã ãå®è£
ãããŠããŸãã ããŒã¢ã³ã¢ããªã±ãŒã·ã§ã³ã®ã¿ã init ã¹ã¯ãªããã䜿çšã§ããŸã ãªãã·ã§ã³ãšã©ãŒ %s ã¡ã¢ãªã®ç©ºã容éããããŸããã
åºå ãã¹ã¯ãŒã: ãã¹ ãã¹ å®¹èª prosody ã Apache ã®ããŒãã«æ¥ç¶ããããšãèš±å¯ããŸããBOSH ã®äœ¿çšãæå¹ã«ããå¿
èŠããããŸãã Pkey çªå· ããªã·ãŒãã£ã¬ã¯ããªãŒ ããªã·ãŒã¢ãžã¥ãŒã« ã³ãã³ããå¿
èŠãšããããªã·ãŒã¿ã€ã ããŒã ããŒã %(PROTOCOL)s/%(PORT)s ã¯ãã§ã«å®çŸ©ãããŠããŸã ããŒã %(PROTOCOL)s/%(PORT)s ã¯ããªã·ãŒã«å®çŸ©ãããŠãããããåé€ã§ããŸãã ããŒã %(PROTOCOL)s/%(PORT)s ã¯å®çŸ©ãããŠããŸãã ããŒã @%(PROTOCOL)s/%(PORT)s ã¯å®çŸ©ãããŠããŸãã ããŒãçªå· ããŒãã¿ã€ã ããŒããå¿
èŠã§ã ããŒãçªå· "%s" ã¯ç¡å¹ã§ããããŒãçªå·ã¯ 0 - 65536 (䞡端ã¯å«ãŸãªã) ã«ããŠãã ããã ããŒãçªå·ã¯ 1 ãã 65536 ã®éã«ããŠãã ããã ããŒãã¯æ°åããŸã㯠1 ãã %d ãŸã§ã®æ°åã®ç¯å²ã§ãªããã°ãªããŸãã ãã¬ãã£ãã¯ã¹ åªå
床 ããã»ã¹ãã¡ã€ã³ ããã»ã¹ã¿ã€ã ããã ãããã³ã« ãããã³ã« udp ã tcp ãå¿
èŠã§ã SELinux ããªã·ãŒãããã¯ãŒã¯æ
å ±ã®ã¯ãšãªãŒ Red Hat 2007 åèµ·åæã«ãå
šãã¡ã€ã«ãã·ã¹ãã ã®ããã©ã«ãã«ã©ãã«ãä»ãçŽããŸã 次åã®åèµ·åã§ã©ãã«å€æŽ ããŒãå¯èœãªããªã·ãŒã¢ãžã¥ãŒã«ã®åé€ å°ããšãã«ããŽãªãŒã 1 ã€å¿
èŠã§ã ãã¬ãã£ãã¯ã¹ãããŒã«ãå¿
èŠã§ã ãã¬ãã£ãã¯ã¹ããããŒã«ãã¬ãã«ãç¯å²ã®ãããããå¿
èŠã§ã setype ãå¿
èŠã§ã setype ã serange ãå¿
èŠã§ã setypeãserangeããŸã㯠seuser ã®ãããããå¿
èŠã§ã seuser ãŸã㯠serange ãå¿
èŠã§ã ããçŽã å
ã«æ»ã å€æŽãå
ã«æ»ã ããŒãªã¢ã³èšå®ãã·ã¹ãã ããã©ã«ãã«æ»ã å
ã«æ»ããã¿ã³ãããçŸåšã®ãã©ã³ã¶ã¯ã·ã§ã³å
ã®å€æŽãå
ã«æ»ããã€ã¢ãã°ãŠã£ã³ããŠãèµ·åããŸãã å ããæŽæ°ãã·ã¹ãã ã«éä¿¡ããåã«ç¢ºèªããŸããã¢ã€ãã ããªã»ããããã«ã¯ããã§ãã¯ããã¯ã¹ã®ãã§ãã¯ããŒã¯ãå€ããŸããæŽæ°ãéžæãããšããã§ãã¯ãä»ãããã¹ãŠã®ã¢ã€ãã ãã·ã¹ãã å
ã§æŽæ°ãããŸãã ããŒã« ããŒã«: %s Root 管çãŠãŒã¶ãŒããŒã« %(PATH)s 㧠restorecon ãå®è¡ããã¿ã€ãã %(CUR_CONTEXT)s ããããã©ã«ãã® %(DEF_CONTEXT)s ã«å€æŽããŸãã? SELinux
ãŠãŒã¶ãŒ SELinux ã®ç®¡ç SELinux ã¢ããªã±ãŒã·ã§ã³ã¿ã€ã SELinux èšå® SELinux 移è¡å
ã¿ã€ã SELinux ãã£ã¬ã¯ããªãŒã¿ã€ã SELinux ãã¡ã€ã«ã©ãã« SELinux ãã¡ã€ã«ã¿ã€ã SELinux IB ãšã³ãããŒãã¿ã€ã SELinux IB Pkey åœ¢åŒ SELinux ã€ã³ã¿ãŒãã§ãŒã¹ ãã®ãã¹ã«å²ãåœãŠã SELinux MLS ã©ãã«ã§ãã SELinux ããªã·ãŒçæããŒã« SELinux ããŒã
ã¿ã€ã SELinux ããŒãã¿ã€ã SELinux ããŒã« SELinux ã®ã¿ã€ã SELinux ã¿ã€ããå¿
èŠã§ã SELinux ãŠãŒã¶ãŒ SELinux ãŠãŒã¶ãŒ : %s SELinux ãŠãŒã¶ãŒå SELinux ãŠãŒã¶ãŒ: %s SELinux ãŠãŒã¶ãŒå SELinux ãŠãŒã¶ãŒ SELinux boolean SELinux fcontext SELinux ãã¡ã€ã«ã¿ã€ã: %s SELinux å: %s SELinux ããŒã圢åŒãå¿
èŠã§ã SELinux ããªã·ãŒã管çãããŠããªããã store ã«ã¢ã¯ã»ã¹ã§ããŸããã SELinux ãŠãŒã¶ãŒ %s ã¯ããªã·ãŒã§å®çŸ©ãããŠããŸããåé€ã§ããŸãã SELinux ãŠãŒã¶ãŒ %s ã¯å®çŸ©ãããŠããŸãã SELinux ãŠãŒã¶ãŒ '%s' ãå¿
èŠã§ã Sandbox æŽæ°ã®ããä¿å æŽæ°ã®ããä¿å éžæ tcp ããŒãçªå·ã«å²ãåœãŠãããŒãã¿ã€ãã®å Žå㯠<b>tcp</b> ãéžæããŸãã udp ããŒãçªå·ã«å²ãåœãŠãããŒãã¿ã€ãã®å Žå <b>udp</b> ãéžæããŸãã ãã®ã©ãã«ããæå®ãã£ã¬ã¯ããªãŒãã¹ã®ãã¹ãŠã®åã«é©çšãããå Žåã¯ããã¹ãååž°çã«ããããéžæããŸãããã®ãã£ã¬ã¯ããªãŒé
äžã®ãªããžã§ã¯ãã«ãã®ã©ãã«ãä»ããããŸãã 管ç察象ã®éžæ ããŒãã®éžæ root ãšããŠå®è¡äžã®ãã·ã³ã®ç®¡çãããã®ãŠãŒã¶ãŒã§è¡ãã«ã¯ãRoot 管çãŠãŒã¶ãŒããŒã«ãéžæããŸãããã®ãŠãŒã¶ãŒã§ãã·ã¹ãã ã«çŽæ¥ãã°ã€ã³ããããšã¯ã§ããŸããã %s ã®é·ç§»å
ãšãªãã¢ããªã±ãŒã·ã§ã³ãã¡ã€ã³ãéžæããŸãã ããªã·ãŒãã¡ã€ã«ãçæãããã£ã¬ã¯ããªãŒãéžæããŸã å¶éãããã¢ããªã±ãŒã·ã§ã³ãææããæžã蟌ããã£ã¬ã¯ããªãŒãéžæããŸã ãã¡ã€ã³ã®éžæ å¶éããå®è¡å¯èœãã¡ã€ã«ã®éžæ åé€ãããã¡ã€ã«ã®ç䟡æ§ã©ãã«ãéžæããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãåé€ãããŸãã åé€ãããã¡ã€ã«ã©ãã«ãéžæããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãåé€ãããŸãã å¶éãããã¢ããªã±ãŒã·ã§ã³ãäœæããŸãã¯æžã蟌ããã¡ã€ã«ãéžæããŸã 次åã®åèµ·åæã«ããã¡ã€ã«ã·ã¹ãã å
šäœã®ã©ãã«ãå€æŽãããå Žåã¯éžæããŸããã©ãã«å€æŽã¯ãã·ã¹ãã ã®ãµã€ãºã«ãã£ãŠã¯æéãããããŸããããªã·ãŒã¿ã€ããå€æŽããããDisabled ãã Enforcing ã«å€æŽããå Žåã¯ãã©ãã«ãå€æŽããå¿
èŠããããŸãã å¶éãã init ã¹ã¯ãªãããã¡ã€ã«ã®éžæ åé€ãããã°ã€ã³ãŠãŒã¶ãŒã®ãããã³ã°ãéžæããŸããæŽæ°ã®é©çšæã«ãã°ã€ã³ãŠãŒã¶ãŒã®ãããã³ã°ãåé€ãããŸãã åé€ããããŒããéžæããŸããæŽæ°ã®é©çšæã«ããŒããåé€ãããŸãã ãã®ãã°ã€ã³ãŠãŒã¶ãŒã«å²ãåœãŠã SELinux ãŠãŒã¶ãŒãéžæããŸããããã©ã«ãã§ã¯ãã°ã€ã³ãŠãŒã¶ãŒã«ã¯ __default__ user ãå²ãåœãŠãããŸãã ãã®ãã¹ã«å²ãåœãŠã SELinux ãã¡ã€ã«ã¿ã€ããéžæããŸãã ãã®ãŠãŒã¶ãŒã«ç®¡çãããããã¡ã€ã³ãéžæããŸã ãã®ã©ãã«ãé©çšããã¯ã©ã¹ãéžæããŸããããã©ã«ãã§ã¯ãã¹ãŠã®ã¯ã©ã¹ã«èšå®ãããŸãã æå®ããŒãçªå·ã«å²ãåœãŠããããŒãã¿ã€ããéžæããŸãã çŸåšã®ã»ãã·ã§ã³ã«ã·ã¹ãã ã¢ãŒããéžæããŸã ã·ã¹ãã ã®ååèµ·åæã«ã·ã¹ãã ã¢ãŒããéžæããŸã %s ãã¡ã€ã³ã«é·ç§»ãããŠãŒã¶ãŒããŒã«ãéžæããŸãã ãã®ã¢ããªã±ãŒã·ã§ã³ãã¡ã€ã³ã«é·ç§»ãããŠãŒã¶ãŒããŒã«ãéžæããŸã åé€ãããŠãŒã¶ãŒãããã³ã°ãéžæããŸããæŽæ°ã®é©çšæã«ãŠãŒã¶ãŒãããã³ã°ãåé€ãããŸãã éžæ... SELinux
ãã¡ã€ã«åœ¢åŒ Semanage ãã©ã³ã¶ã¯ã·ã§ã³ã¯æ¢ã«é²è¡ããŠããŸã Semanage ãã©ã³ã¶ã¯ã·ã§ã³ã¯é²è¡ããŠããŸãã ç£æ»ã®ã¡ãã»ãŒãžãéä¿¡ããŸã ã¡ãŒã«ãéä¿¡ããŸã ãµãŒãã¹ ã»ããã¢ããã¹ã¯ãªãã å€æŽã®ã¿è¡šç€º ã©ãã«ä»ããééã£ãŠãããã¡ã€ã«ã®ã¿è¡šç€ºããŸã ãã® SELinux ã¿ã€ãã«å®çŸ©ãããŠããããŒãã衚瀺 -l ã¯ãSELinux MLS ãµããŒãããªããšäœ¿çšã§ããŸããã
newrole ã¯ãæ©èœã®ããããã«å€±æããŸãã
newrole ã¯ãSELinux ã«ãŒãã«äžã§ãã䜿çšã§ããŸããã
run_init ã¯ãSELinux ã«ãŒãã«äžã§ãã䜿çšã§ããŸããã
ãœãŒã¹ãã¡ã€ã³ ã¹ããã¯ãã¡ã€ã« æ°ãã SELinux ãŠãŒã¶ãŒåãå
¥åããŸããæ
£äŸçã« SELinux ã®ãŠãŒã¶ãŒåã®æ«å°Ÿã¯ an _u ã«ãªããŸãã ãã®ãŠãŒã¶ãŒããã°ã€ã³ãã MLS ç¯å²ãæå®ããŸããããã©ã«ãã§ã¯éžæãã SELinux ãŠãŒã¶ãŒã® MLS ç¯å²ãèšå®ãããŸãã ãã® SELinux ãŠãŒã¶ãŒããã°ã€ã³ããããã©ã«ãã®ã¬ãã«ãæå®ããŸããããã©ã«ãã§ã¯ s0 ã«èšå®ãããŸãã æ°ãããã¹ãšç䟡ãã¹éã®ãããã³ã°ãæå®ããŸãããã®æ°ãããã¹ã®é
äžã«ãããã®ã¯ãã¹ãŠãç䟡ãã¹ã®é
äžã«ããããã«ã©ãã«ä»ããè¡ãããŸãã ã©ãã«ãå€æŽãããã¹ããæ£èŠè¡šçŸã䜿çšããŠæå®ããŸãã æšæºç㪠Init ããŒã¢ã³ æšæºç㪠Init ããŒã¢ã³ã¯ãèµ·åæã« init ã¹ã¯ãªããçµç±ã§éå§ããããŒã¢ã³ã§ããéåžžã/etc/rc.d/init.d ã«ã¹ã¯ãªãããå¿
èŠã§ãã ç¶æ
ç¶æ
ãµããããã®ãã¬ãã£ãã¯ã¹ãå¿
èŠã§ã ãµãããããã¬ãã£ãã¯ã¹(_P) 代æ¿ã® %s ã¯ç¡å¹ã§ãã代æ¿ã®æ«å°Ÿã« '/' ãä»ããããšã¯ã§ããŸãã NFS ããŒã ãã£ã¬ã¯ããªãŒããµããŒãããŸãã Samba ããŒã ãã£ã¬ã¯ããªãŒããµããŒãããŸãã X userspace object manager ããµããŒãããŸãã ecryptfs ããŒã ãã£ã¬ã¯ããªãŒããµããŒãããŸãã fusefs ããŒã ãã£ã¬ã¯ããªãŒããµããŒãããŸãã ã·ã¹ãã ã·ã¹ãã ããã©ã«ãã®åŒ·å¶ã¢ãŒã ã·ã¹ãã ããã©ã«ãã®ããªã·ãŒã¿ã€ã: ã·ã¹ãã ã®ããªã·ãŒã¿ã€ã: ã·ã¹ãã ç¶æ
: ç¡å¹ (Disabled) ã·ã¹ãã ç¶æ
: åŒ·å¶ (Enforcing) ã·ã¹ãã ç¶æ
: 蚱容 (Permissive) ã¿ãŒã²ãã %s ã¯ç¡å¹ã§ããã¿ãŒã²ããã®æ«å°Ÿã«ã/ãã¯ä»ããããŸããã ã¿ãŒã²ãããã¡ã€ã³ ãšã³ã㪠'%s' ã¯ç¡å¹ãªãã¹ã§ãããã¹ã®å
é 㯠'/' ã§éå§ããå¿
èŠããããŸãã å
¥åããããšã³ããªãŒã«èª€ãããããŸããex:/.../... ã®åœ¢åŒã§ããçŽããŠãã ããã sepolgen python ã¢ãžã¥ãŒã«ã§ã¯ã蚱容ãã¡ã€ã³ãèšå®ããå¿
èŠããããŸãã
äžéšã®ãã£ã¹ããªãã¥ãŒã·ã§ã³ã§ã¯ãpolicycoreutils-devel ããã±ãŒãžã«å«ãŸããŠããŸãã
# yum install policycoreutils-devel
ãŸãã¯ãã䜿ãã®ãã£ã¹ããªãã¥ãŒã·ã§ã³ã«é¡äŒŒã®æ©èœãããã§ãããã ãã®ãŠãŒã¶ãŒã¯ãX åã¯ã¿ãŒããã«ãä»ããŠãã·ã³ã«ãã°ã€ã³ã§ããŸããããã©ã«ãã§ã¯ããã®ãŠãŒã¶ãŒã¯ãsetuid ãããããã¯ãŒã¯éçšããsu ããsudo ãæã¡ãŸããã ãã®ãŠãŒã¶ãŒã¯ã¿ãŒããã«ãåã¯ãªã¢ãŒããã°ã€ã³ãä»ããŠã®ã¿ãã·ã³ã«ãã°ã€ã³ããŸããããã©ã«ãã§ã¯ããã®ãŠãŒã¶ãŒã¯ãsetuid ãããããã¯ãŒã¯éçšããsu ããsudo ãæã¡ãŸããã ãã®é·ç§»ãç¡å¹ã«ããã«ã¯æ¬¡ãžè¡ããŸã ãã®é·ç§»ãæå¹ã«ããã«ã¯æ¬¡ãžè¡ããŸã ãã®ããªã·ãŒããã±ãŒãžãæå¹ã«ããã«ã¯ã以äžãå®è¡ããŠäžãã: ã«ã¹ã¿ã åãšå
šãŠã®ããŒãªã¢ã³ã®éã§åãæ¿ã ã«ã¹ã¿ã åãšå
šãŠã®ããŒãã®éã§åãæ¿ã å
šãŠãšã«ã¹ã¿ã åã®ãã¡ã€ã«ã³ã³ããã¹ãã®éã§åãæ¿ã é·ç§» ã¿ã€ã åœ¢åŒ %s ãç¡å¹ã§ãããã¡ã€ã«ãŸãã¯ããã€ã¹åœ¢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããibpkey 圢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããããŒã圢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããããŒã圢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããibendport 圢åŒã§ããå¿
èŠããããŸã çŸåšã®ããªã·ãŒã«æ¢ã«å®çŸ©ãããŠãã %s_t ãèšå
¥ããŸãã
ç¶è¡ããŸãã? 匷å¶ãã¡ã€ã«ã®èšå
¥ ã¿ã€ãé
ç®ãå¿
èŠã§ã ã¿ã€ããå¿
èŠã§ã ã¿ã€ã 䜿ãæ¹: run_init <script> <args ...>
ããã§ã <script> ã«å®è¡ãã init ã¹ã¯ãªããã®ååã
<args ...> ã«ãã®ã¹ã¯ãªããã«å¯ŸããåŒæ°ãæå®ããŸãã USER ã¿ã€ãã¯ãèªåçã« tmp ã¿ã€ããåããŸã new_context ã«ã¡ã¢ãªãå²ãåœãŠãããšãã§ããŸãã ç°å¢ãæ¶å»ã§ããŸãã
空ã®ã·ã°ãã«ã»ãããååŸã§ããŸãã
ç°å¢ã埩å
ã§ããŸãããäžæ¢ããŸã
tty ã©ãã«ã埩å
ã§ããŸãã...
SIGHUP ãã³ãã©ãŒãèšå®ã§ããŸãã
å
šã³ã³ãã³ããã¡ã€ã«ã® HTTPD åŠçãçµ±äžããŸãã ã¿ãŒããã«ãšã®éä¿¡ã®ãã HTTPD ãçµ±äžããŸãã ã¿ãŒããã«ã§èšŒææžã®ãã¹ãã¬ãŒãºãå
¥åããéã«å¿
èŠã«ãªããŸãã äžæãŸãã¯æ¬ åŠããŠãããããã³ã« éäºçŽããŒã (>1024) æŽæ° å€æŽãæŽæ°ãã 䜿ãæ¹ %s -L 䜿ãæ¹ %s -L -l ãŠãŒã¶ãŒ 䜿ãæ¹ %s -d ãã¡ã€ã« ... 䜿ãæ¹ %s -l -d ãŠãŒã¶ãŒ ... 䜿ãæ¹ %s -l CATEGORY ãŠãŒã¶ãŒ ... 䜿ãæ¹ %s -l [[+|-]CATEGORY],...] ãŠãŒã¶ãŒ ... 䜿ãæ¹ %s CATEGORY ãã¡ã€ã« ... 䜿ãæ¹ %s [[+|-]CATEGORY],...] ãã¡ã€ã« ... ãªãã·ã§ã³ãªã¹ããçµäºããã«ã¯ -- ã䜿ããŸãã äŸãã°ã ãŠãŒã¶ãŒã¢ããªã±ãŒã·ã§ã³ ãŠãŒã¶ãŒã¢ããªã±ãŒã·ã§ã³ãšã¯ããŠãŒã¶ãŒãéå§ããŠå¶çŽããã¢ããªã±ãŒã·ã§ã³ã§ã ãŠãŒã¶ãŒã®å¯Ÿå¿è¡š ãŠãŒã¶ãŒããŒã« ãŠãŒã¶ãŒããŒã«ã¿ã€ãã¯ãå²ãåœãŠæžã¿ã®å®è¡ãã¡ã€ã«ã§ã¯ãããŸããã ãŠãŒã¶ãŒããããã¯ãŒã¯éçšã¯ãã¹ãŠå¯èœã§ãããé·ç§»ã®ãªã setuid ã¢ããªã±ãŒã·ã§ã³ãš su ã¯äœ¿çšã§ããŸãããRoot ã®ç®¡çããŒã«ã®ãããsudo ã¯äœ¿çšã§ããŸãã ãŠãŒã¶ãŒã¯ããããã¯ãŒã¯éçšã¯ãã¹ãŠå¯èœã§ãããé·ç§»ã®ãªã setuid ã¢ããªã±ãŒã·ã§ã³ãsu ãsudo ã¯äœ¿çšã§ããŸããã ãŠãŒã¶ãŒ èªèšŒã« Pam ã䜿çšããŸã dbus ã䜿çšããŸã nsswitch ãŸã㯠getpw* ã®ã³ãŒã«ã䜿çšããŸã æå¹ãªåœ¢åŒ:
ååã®ç¢ºèª ããŒãžã§ã³ èŠå! tty æ
å ±ãåã蟌ããŸããã§ããã
èŠå! %s ã®ã³ã³ããã¹ãã埩å
ã§ããŸããã§ãã
ãŠã§ãã¢ããªã±ãŒã·ã§ã³/ã¹ã¯ãªãã (CGI) ãŠã§ãã¢ããªã±ãŒã·ã§ã³/ã¹ã¯ãªãã (CGI) ã¯ããŠã§ããµãŒã㌠(apache) ãéå§ãã CGI ã¹ã¯ãªããã§ã ãã®ãã©ã°ã䜿çšããå Žåã¯ãä»£æ¿ root ãã¹ã«ãã¡ã€ã«ã³ã³ããã¹ãã®ãã¡ã€ã«ããã³ policy.xml ãã¡ã€ã«ãå«ãŸããå¿
èŠããããŸãã æžã蟌ã¿å¯èœãªãã¡ã€ã« syslog ã¡ãã»ãŒãžãæžã蟌ã¿ãŸã ã¯ã å€æŽãé©çšããã«ã¢ããªã±ãŒã·ã§ã³ãéããããšããŠããŸãã
* ãã®ã»ãã·ã§ã³äžã«å ããå€æŽãé©çšããã«ã¯ãããããããã¯ãªãã¯ããŠãããæŽæ°ããã¯ãªãã¯ããŸãã
* å€æŽãé©çšããªããŸãŸã¢ããªã±ãŒã·ã§ã³ãçµäºããã«ã¯ããã¯ãããã¯ãªãã¯ããŸãããã®ã»ãã·ã§ã³äžã«å ããå€æŽã¯ãã¹ãŠå€±ãããŸãã ã¢ãžã¥ãŒã«åãå®çŸ©ããŸããã§ããã æåãšæ°åã§æ§æãããåå (ã¹ããŒã¹ãªã) ãè¿œå ããå¿
èŠããããŸãã å°ãªããšã %s ã®ããŒã«ã 1 ã€è¿œå ããå¿
èŠããããŸã å®è¡ãã¡ã€ã«ãèšå
¥ããå¿
èŠããããŸã '%s' çšã®ããªã·ãŒã¢ãžã¥ãŒã«ã®ååãå
¥åããŠãã ããã æå¹ãªããªã·ãŒçš®å¥ãå
¥åããå¿
èŠããããŸã ã䜿çšã®ãå¶çŽãããããã»ã¹çšå®è¡ãã¡ã€ã«ãã¹ãèšå
¥ããå¿
èŠããããŸã /usr/bin/sepolgen-ifgen ãå®è¡ããã€ã³ã¿ãŒãã§ãŒã¹æ
å ±ãåçæããå¿
èŠããããŸã ãŠãŒã¶ãŒãéžæããå¿
èŠããããŸã 次ã®äžããå€ã 1 ã€æå®ããŠãã ãã: %s 次ã®æååã§çµããæ°ããã¿ã€ããå®çŸ©ããå¿
èŠããããŸã:
%s GUI ãªãã·ã§ã³ã䜿çšããã«ã¯ãpolicycoreutils-gui ããã±ãŒãžãã€ã³ã¹ããŒã«ããå¿
èŠããããŸãã åé€ (_D) ãããã㣠(_P) ãã¹ãŠ ãã¹ãŠã®ãã¡ã€ã« å
šãã¡ã€ã«
æšæºãã¡ã€ã«
ãã£ã¬ã¯ããªãŒ
ãã£ã©ã¯ã¿ãŒããã€ã¹
ãããã¯ããã€ã¹
ãœã±ãã
ã·ã³ããªãã¯ãªã³ã¯
named ãã€ã
ãã¹ãéµã«ããèªèšŒãèš±å¯ããŸãã staff ãŠãŒã¶ãŒã sVirt ãã¡ã€ã³ãäœæãããŸãã¯ããã«é·ç§»ããããšãèš±å¯ããŸãã å¶éãããŠããªããŠãŒã¶ãŒã chrome-sandbox ãå®è¡ããŠãããšãã«ãchrome sandbox ãã¡ã€ã³ã«é·ç§»ããããšãèš±å¯ããŸãã ã¢ããªã±ãŒã·ã§ã³ èªèšŒã«å€±æããŸããã
ãããã¯ããã€ã¹ 詳现ãååŸãã boolean passwd ãã¡ã€ã«ã«æå¹ãªãšã³ããªãèŠã€ãããŸããã
ãã£ã©ã¯ã¿ãŒããã€ã¹ chcat -- -CompanyConfidential /docs/businessplan.odt chcat -l +CompanyConfidential juser ã³ãã³ã æ¥ç¶ ãã£ã¬ã¯ããªãŒ newrole ãªã©ã®ããã°ã©ã ãã管çãŠãŒã¶ãŒãã¡ã€ã³ã«é·ç§»ããã®ãèš±å¯ããŸããã dontaudit 㯠'on' ãŸã㯠'off' ã«ããå¿
èŠããããŸã PAM ãµãŒãã¹èšå®ã®èªã¿èŸŒã¿ã«å€±æããŸããã
å®è¡å¯èœ å¶éã課ãå®è¡ãã¡ã€ã« ã¬ãã« %s ã§ãæ°ããç¯å²ããã«ãããã®ã«å€±æããŸãã
æ°ããã³ã³ããã¹ãã®æååãžã®å€æã«å€±æããŸãã
ã·ã§ã«ã®å®è¡ã«å€±æããŸãã
ã¢ã«ãŠã³ãæ
å ±ã®ååŸã«å€±æããŸãã
æ°ããã³ã³ããã¹ãã®ååŸã«å€±æããŸããã
old_context ã®ååŸã«å€±æããŸããã
PAM ã®åæåã«å€±æããŸãã
PAM_TTY ã®èšå®ã«å€±æããŸãã
æ°ããç¯å² %s ã®èšå®ã«å€±æããŸãã
æ°ããããŒã« %s ã®èšå®ã«å€±æããŸãã
æ°ããã¿ã€ã %s ã®èšå®ã«å€±æããŸãã
ãã¹ãŠã®ããŒãªã¢ã³ã®èª¬æãååŸãã getpass ã /dev/tty ãéããŸãã
ibendport %s/%s ã¯ãã§ã«å®çŸ©ãããŠããŸã ibendport %s/%s ã¯ããªã·ãŒã«å®çŸ©ãããŠãããããåé€ã§ããŸãã ibendport %s/%s ã¯å®çŸ©ãããŠããŸãã ibpkey %s/%s ã¯ãã§ã«å®çŸ©ãããŠããŸã ibpkey %s/%s ã¯ããªã·ãŒã«å®çŸ©ãããŠãããããåé€ã§ããŸãã ibpkey %s/%s ãå®çŸ©ãããŠããŸãã label37 label38 label39 label41 label42 label44 label50 label59 SELinux ããŒãã®å
šã¿ã€ãã衚瀺 çä¿¡æ¥ç¶ã®ãªãã¹ã³ manage_krb5_rcache ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã çæããããªã·ãŒã®åå ããã¥ã¢ã«ããŒãžåã OS å称 ååä»ããã€ã æ°ããŒã«: %s: %lu è¡ã«ãšã©ãŒã
newrole: ãã©ãŒã¯ã®å€±æ: %s newrole: %s ã®ãã¹ã¯ãŒããééã£ãŠããŸã
æ°ããŒã«: ãµãŒãã¹åèšå®ããã·ã¥ããŒãã«ããµã
ãªã ãªã³ çæããã SELinux ã® man ããŒãžã®æ ŒçŽå
ãšãªããã¹ çæãããããªã·ãŒãã¡ã€ã«ãä¿åããããã¹ å¶éãããããã»ã¹ãæžã蟌ãå¿
èŠããããã¹ SELinux ã«åãåãã㊠boolean ã®è©³çŽ°ã衚瀺ãã ãœãŒã¹ã®ããã»ã¹ãã¡ã€ã³ãç®çã®ããã»ã¹ãã¡ã€ã³ã«ã©ã®ããã«é·ç§»ã§ãããã SELinux ããªã·ãŒã«åãåããã ãã¡ã€ã³ãäºãã«éä¿¡ãè¡ãããã©ããã SELinux ããªã·ãŒã«åãåããã ã©ãžãªãã¿ã³ éåžžãã¡ã€ã« ããŒã«ã¿ã run_init: %s ã®ãã¹ã¯ãŒããééã£ãŠããŸã
sepolicy generate: ãšã©ãŒ: åŒæ° %s ã®ã©ãããå¿
èŠã§ã ãã®ããŒãã«é¢é£ãã SELinux ã®ã¿ã€ãã衚瀺 ãã®ã¢ããªã±ãŒã·ã§ã³ããã€ã³ããŸãã¯æ¥ç¶ã§ããããŒãã衚瀺ããŸã ãã®ãã¡ã€ã³ãçµåãæ¥ç¶ã ãŸãã¯çµåããŠæ¥ç¶ã§ããããŒãã衚瀺 ãœã±ãããã¡ã€ã« ãœãŒã¹ããã»ã¹ãã¡ã€ã³ ã·ã³ããªãã¯ãªã³ã¯ system-config-selinux ã¿ãŒã²ããããã»ã¹ãã¡ã€ã³ tcp é·ç§»
ããŒã«ã¿ã 翻蚳è
ã¯ã¬ãžãã ã¿ã€ã udp äžæ 䜿ãæ¹: %s [-qi]
use_kerberos ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã use_resolve ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã use_syslog ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã æžã蟌ã¿å¯èœ
Back to Directory
File Manager