| Server IP : 188.40.95.74 / Your IP : 216.73.216.188 Web Server : Apache System : Linux cp01.striminghost.net 3.10.0-1160.119.1.el7.tuxcare.els13.x86_64 #1 SMP Fri Nov 22 06:29:45 UTC 2024 x86_64 User : vlasotin ( 1054) PHP Version : 5.6.40 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/share/leapp-repository/repositories/system_upgrade/common/actors/setpermissiveselinux/ |
Upload File : |
from leapp import reporting
from leapp.actors import Actor
from leapp.libraries.actor.setpermissiveselinux import selinux_set_permissive
from leapp.models import SelinuxPermissiveDecision
from leapp.reporting import create_report, Report
from leapp.tags import FinalizationPhaseTag, IPUWorkflowTag
class SetPermissiveSelinux(Actor):
"""
Set SELinux mode.
In order to proceed with Upgrade process, SELinux should be set into permissive mode if it was
in enforcing mode.
"""
name = 'set_permissive_se_linux'
consumes = (SelinuxPermissiveDecision,)
produces = (Report,)
tags = (FinalizationPhaseTag, IPUWorkflowTag)
def process(self):
for decision in self.consume(SelinuxPermissiveDecision):
if decision.set_permissive:
success, err_msg = selinux_set_permissive()
if not success:
# FIXME: add an "action required" flag later
create_report([
reporting.Title('Could not set SElinux into permissive mode'),
reporting.Summary('{}'.format(err_msg)),
reporting.Severity(reporting.Severity.HIGH),
reporting.Groups([reporting.Groups.SELINUX, reporting.Groups.SECURITY]),
reporting.Groups([reporting.Groups.FAILURE]),
reporting.RelatedResource('file', '/etc/selinux/config')
])
self.log.critical('Could not set SElinux into permissive mode: %s.' % err_msg)