diff --git a/policycoreutils-rhat.patch b/policycoreutils-rhat.patch index cb47e5f..bbdca42 100644 --- a/policycoreutils-rhat.patch +++ b/policycoreutils-rhat.patch @@ -1,786 +1,1090 @@ -diff --git a/policycoreutils/.tx/config b/policycoreutils/.tx/config -index 07643e9..daff18c 100644 ---- a/policycoreutils/.tx/config -+++ b/policycoreutils/.tx/config -@@ -1,5 +1,5 @@ - [main] --host = https://www.transifex.net -+host = https://www.transifex.com +diff --git a/policycoreutils/gui/booleansPage.py b/policycoreutils/gui/booleansPage.py +index eee954d..075b896 100644 +--- a/policycoreutils/gui/booleansPage.py ++++ b/policycoreutils/gui/booleansPage.py +@@ -31,7 +31,7 @@ import semanagePage + INSTALLPATH='/usr/share/system-config-selinux' + sys.path.append(INSTALLPATH) - [policycoreutils.policycoreutils] - file_filter = po/.po -diff --git a/policycoreutils/Makefile b/policycoreutils/Makefile -index 3980799..bea9814 100644 ---- a/policycoreutils/Makefile -+++ b/policycoreutils/Makefile -@@ -1,4 +1,4 @@ --SUBDIRS = sepolicy setfiles semanage load_policy newrole run_init sandbox secon audit2allow audit2why sestatus semodule_package semodule semodule_link semodule_expand semodule_deps sepolgen-ifgen setsebool scripts po man gui -+SUBDIRS = sepolicy setfiles semanage load_policy newrole run_init sandbox secon audit2allow sestatus semodule_package semodule semodule_link semodule_expand semodule_deps sepolgen-ifgen setsebool scripts po man gui semanage/default_encoding +-import commands ++import subprocess + ENFORCING=0 + PERMISSIVE=1 + DISABLED=2 +@@ -50,8 +50,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str - INOTIFYH = $(shell ls /usr/include/sys/inotify.h 2>/dev/null) + from glob import fnmatch -diff --git a/policycoreutils/audit2allow/Makefile b/policycoreutils/audit2allow/Makefile -index 88635d4..fc290ea 100644 ---- a/policycoreutils/audit2allow/Makefile -+++ b/policycoreutils/audit2allow/Makefile -@@ -5,14 +5,19 @@ LIBDIR ?= $(PREFIX)/lib - MANDIR ?= $(PREFIX)/share/man - LOCALEDIR ?= /usr/share/locale - --all: ; -+all: audit2why -+ -+audit2why: -+ ln -sf audit2allow audit2why - - install: all - -mkdir -p $(BINDIR) - install -m 755 audit2allow $(BINDIR) -+ (cd $(BINDIR); ln -sf audit2allow audit2why) - install -m 755 sepolgen-ifgen $(BINDIR) - -mkdir -p $(MANDIR)/man1 - install -m 644 audit2allow.1 $(MANDIR)/man1/ -+ install -m 644 audit2why.1 $(MANDIR)/man1/ - - clean: - rm -f *~ -diff --git a/policycoreutils/audit2allow/audit2allow b/policycoreutils/audit2allow/audit2allow -index 8e0c396..75aef55 100644 ---- a/policycoreutils/audit2allow/audit2allow -+++ b/policycoreutils/audit2allow/audit2allow -@@ -1,7 +1,8 @@ - #! /usr/bin/python -Es - # Authors: Karl MacMillan -+# Authors: Dan Walsh - # --# Copyright (C) 2006-2007 Red Hat -+# Copyright (C) 2006-2013 Red Hat - # see file 'COPYING' for use and warranty information - # - # This program is free software; you can redistribute it and/or -@@ -18,7 +19,7 @@ - # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA - # - --import sys -+import sys, os - - import sepolgen.audit as audit - import sepolgen.policygen as policygen -@@ -29,6 +30,8 @@ import sepolgen.defaults as defaults - import sepolgen.module as module - from sepolgen.sepolgeni18n import _ - import selinux.audit2why as audit2why -+import locale -+locale.setlocale(locale.LC_ALL, '') - - class AuditToPolicy: - VERSION = "%prog .1" -@@ -80,8 +83,7 @@ class AuditToPolicy: - parser.add_option("--interface-info", dest="interface_info", help="file name of interface information") - parser.add_option("--debug", dest="debug", action="store_true", default=False, - help="leave generated modules for -M") +@@ -170,16 +170,15 @@ class booleansPage: + # change cursor + if boolean == None: + return ++ self.wait() + try: +- self.wait() +- (rc, out) = commands.getstatusoutput("semanage boolean -d %s" % boolean) - -- parser.add_option("-w", "--why", dest="audit2why", action="store_true", default=False, -+ parser.add_option("-w", "--why", dest="audit2why", action="store_true", default=(os.path.basename(sys.argv[0])=="audit2why"), - help="Translates SELinux audit messages into a description of why the access was denied") +- self.ready() +- if rc != 0: +- return self.error(out) ++ subprocess.check_output("semanage boolean -d %s" % boolean, ++ stderr=subprocess.STDOUT, ++ shell=True) + self.load(self.filter) +- except ValueError, e: +- self.error(e.args[0]) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() - options, args = parser.parse_args() -@@ -267,12 +269,10 @@ class AuditToPolicy: - continue + def filter_changed(self, *arg): + filter = arg[0].get_text() +@@ -224,17 +223,25 @@ class booleansPage: + self.store.set_value(iter, ACTIVE , not val) + self.wait() + setsebool="/usr/sbin/setsebool -P %s %d" % (key, not val) +- rc,out = commands.getstatusoutput(setsebool) +- if rc != 0: +- self.error(out) +- self.load(self.filter) ++ try: ++ subprocess.check_output(setsebool, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.load(self.filter) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) + self.ready() - if rc == audit2why.CONSTRAINT: -- print "\t\tPolicy constraint violation.\n" -- print "\t\tMay require adding a type attribute to the domain or type to satisfy the constraint.\n" -- print "\t\tConstraints are defined in the policy sources in policy/constraints (general), policy/mcs (MCS), and policy/mls (MLS).\n" -- for reason in data: -- print "\t\tNote: Possible cause is the source and target %s differ\n" % reason -- continue -+ print "#!!!! This avc is a constraint violation. You would need to modify the attributes of either the source or target types to allow this access.\n" -+ print "#Constraint rule: \n\t" + data[0] -+ for reason in data[1:]: -+ print "#\tPossible cause is the source %s and target %s are different.\n\b" % reason + def on_revert_clicked(self, button): + self.wait() + setsebool="semanage boolean --deleteall" +- commands.getstatusoutput(setsebool) +- self.load(self.filter) ++ try: ++ subprocess.check_output(setsebool, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.load(self.filter) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) + self.ready() - if rc == audit2why.RBAC: - print "\t\tMissing role allow rule.\n" -@@ -329,7 +329,7 @@ class AuditToPolicy: - g.set_module_name(self.__options.module) + def on_local_clicked(self, button): +diff --git a/policycoreutils/gui/domainsPage.py b/policycoreutils/gui/domainsPage.py +index 6af1e9a..39a4574 100644 +--- a/policycoreutils/gui/domainsPage.py ++++ b/policycoreutils/gui/domainsPage.py +@@ -20,7 +20,7 @@ import string + import gtk + import gtk.glade + import os +-import commands ++import subprocess + import gobject + import sys + import seobject +@@ -41,8 +41,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str - if self.__options.output: -- fd = open(self.__options.output, "w") -+ fd = open(self.__options.output, "a") - else: - fd = sys.stdout - writer.write(g.get_module(), fd) -@@ -350,6 +350,9 @@ class AuditToPolicy: - except ValueError, e: - print e - sys.exit(1) -+ except IOError, e: -+ print e -+ sys.exit(1) - - if __name__ == "__main__": - app = AuditToPolicy() -diff --git a/policycoreutils/audit2allow/audit2allow.1 b/policycoreutils/audit2allow/audit2allow.1 -index a854a45..2929b68 100644 ---- a/policycoreutils/audit2allow/audit2allow.1 -+++ b/policycoreutils/audit2allow/audit2allow.1 -@@ -29,7 +29,7 @@ - \- generate SELinux policy allow/dontaudit rules from logs of denied operations - - .BR audit2why --\- translates SELinux audit messages into a description of why the access was denied (audit2allow -w) -+\- translates SELinux audit messages into a description of why the access was denied (audit2allow \-w) - - .SH SYNOPSIS - .B audit2allow -@@ -37,16 +37,16 @@ - .SH OPTIONS - .TP - .B "\-a" | "\-\-all" --Read input from audit and message log, conflicts with -i -+Read input from audit and message log, conflicts with \-i - .TP - .B "\-b" | "\-\-boot" --Read input from audit messages since last boot conflicts with -i -+Read input from audit messages since last boot conflicts with \-i - .TP - .B "\-d" | "\-\-dmesg" - Read input from output of - .I /bin/dmesg. - Note that all audit messages are not available via dmesg when --auditd is running; use "ausearch -m avc | audit2allow" or "-a" instead. -+auditd is running; use "ausearch \-m avc | audit2allow" or "\-a" instead. - .TP - .B "\-D" | "\-\-dontaudit" - Generate dontaudit rules (Default: allow) -@@ -65,7 +65,7 @@ read input only after last policy reload - Generate module/require output - .TP - .B "\-M " --Generate loadable module package, conflicts with -o -+Generate loadable module package, conflicts with \-o - .TP - .B "\-p " | "\-\-policy " - Policy file to use for analysis -@@ -123,7 +123,7 @@ an 'allow' rule. - .PP - .B Using audit2allow to generate module policy - --$ cat /var/log/audit/audit.log | audit2allow -m local > local.te -+$ cat /var/log/audit/audit.log | audit2allow \-m local > local.te - $ cat local.te - module local 1.0; - -@@ -141,7 +141,7 @@ allow myapp_t etc_t:file { getattr open read }; - - .B Using audit2allow to generate module policy using reference policy - --$ cat /var/log/audit/audit.log | audit2allow -R -m local > local.te -+$ cat /var/log/audit/audit.log | audit2allow \-R \-m local > local.te - $ cat local.te - policy_module(local, 1.0) - -@@ -155,34 +155,49 @@ files_read_etc_files(myapp_t) - - .B Building module policy using Makefile - --# SELinux provides a policy devel environment under /usr/share/selinux/devel -+# SELinux provides a policy devel environment under -+# /usr/share/selinux/devel including all of the shipped -+# interface files. - # You can create a te file and compile it by executing --$ make -f /usr/share/selinux/devel/Makefile --$ semodule -i local.pp -+ -+$ make -f /usr/share/selinux/devel/Makefile local.pp -+ -+ -+# This make command will compile a local.te file in the current -+# directory. If you did not specify a "pp" file, the make file -+# will compile all "te" files in the current directory. After -+# you compile your te file into a "pp" file, you need to install -+# it using the semodule command. -+ -+$ semodule \-i local.pp - - .B Building module policy manually - - # Compile the module --$ checkmodule -M -m -o local.mod local.te -+$ checkmodule \-M \-m \-o local.mod local.te -+ - # Create the package --$ semodule_package -o local.pp -m local.mod -+$ semodule_package \-o local.pp \-m local.mod -+ - # Load the module into the kernel --$ semodule -i local.pp -+$ semodule \-i local.pp - - .B Using audit2allow to generate and build module policy --$ cat /var/log/audit/audit.log | audit2allow -M local --Generating type enforcment file: local.te --Compiling policy: checkmodule -M -m -o local.mod local.te --Building package: semodule_package -o local.pp -m local.mod -+ -+$ cat /var/log/audit/audit.log | audit2allow \-M local -+Generating type enforcement file: local.te -+Compiling policy: checkmodule \-M \-m \-o local.mod local.te -+Building package: semodule_package \-o local.pp \-m local.mod - - ******************** IMPORTANT *********************** - - In order to load this newly created policy package into the kernel, - you are required to execute - --semodule -i local.pp -+semodule \-i local.pp -+ -+.B Using audit2allow to generate monolithic (non\-module) policy - --.B Using audit2allow to generate monolithic (non-module) policy - $ cd /etc/selinux/$SELINUXTYPE/src/policy - $ cat /var/log/audit/audit.log | audit2allow >> domains/misc/local.te - $ cat domains/misc/local.te -diff --git a/policycoreutils/audit2allow/audit2why.1 b/policycoreutils/audit2allow/audit2why.1 -new file mode 100644 -index 0000000..a9e8893 ---- /dev/null -+++ b/policycoreutils/audit2allow/audit2why.1 -@@ -0,0 +1 @@ -+.so man1/audit2allow.1 -diff --git a/policycoreutils/audit2allow/sepolgen-ifgen b/policycoreutils/audit2allow/sepolgen-ifgen -index ef4bec3..3967ba5 100644 ---- a/policycoreutils/audit2allow/sepolgen-ifgen -+++ b/policycoreutils/audit2allow/sepolgen-ifgen -@@ -62,6 +62,9 @@ def parse_options(): - return options - - def get_policy(): -+ p = selinux.selinux_current_policy_path() -+ if os.path.exists(p): -+ return p - i = selinux.security_policyvers() - p = selinux.selinux_binary_policy_path() + "." + str(i) - while i > 0 and not os.path.exists(p): -diff --git a/policycoreutils/audit2why/Makefile b/policycoreutils/audit2why/Makefile -deleted file mode 100644 -index 63eb8b3..0000000 ---- a/policycoreutils/audit2why/Makefile -+++ /dev/null -@@ -1,18 +0,0 @@ --# Installation directories. --PREFIX ?= $(DESTDIR)/usr --BINDIR ?= $(PREFIX)/bin --MANDIR ?= $(PREFIX)/share/man + class domainsPage(semanagePage): + def __init__(self, xml): +@@ -115,18 +115,17 @@ class domainsPage(semanagePage): + selection = self.view.get_selection() + store, iter = selection.get_selected() + domain = store.get_value(iter, 0) ++ self.wait() ++ cmd = "semanage permissive -d %s_t" % domain + try: +- self.wait() +- status, output = commands.getstatusoutput("semanage permissive -d %s_t" % domain) +- self.ready() +- if status != 0: +- self.error(output) +- else: +- domain = store.set_value(iter, 1, "") +- self.itemSelected(selection) - --TARGETS=audit2why -- --all: $(TARGETS) -- --install: all -- -mkdir -p $(BINDIR) -- install -m 755 $(TARGETS) $(BINDIR) -- -mkdir -p $(MANDIR)/man1 -- install -m 644 audit2why.1 $(MANDIR)/man1/ -- --clean: -- --relabel: -diff --git a/policycoreutils/audit2why/audit2why b/policycoreutils/audit2why/audit2why -deleted file mode 100644 -index 21a72aa..0000000 ---- a/policycoreutils/audit2why/audit2why -+++ /dev/null -@@ -1,2 +0,0 @@ --#!/bin/sh --/usr/bin/audit2allow -w $* -diff --git a/policycoreutils/audit2why/audit2why.1 b/policycoreutils/audit2why/audit2why.1 -deleted file mode 100644 -index a9e8893..0000000 ---- a/policycoreutils/audit2why/audit2why.1 -+++ /dev/null -@@ -1 +0,0 @@ --.so man1/audit2allow.1 -diff --git a/policycoreutils/gui/Makefile b/policycoreutils/gui/Makefile -index b5abbb9..9d9f820 100644 ---- a/policycoreutils/gui/Makefile -+++ b/policycoreutils/gui/Makefile -@@ -1,7 +1,10 @@ - # Installation directories. - PREFIX ?= ${DESTDIR}/usr -+SYSCONFDIR ?= ${DESTDIR}/etc - BINDIR ?= $(PREFIX)/bin - SHAREDIR ?= $(PREFIX)/share/system-config-selinux -+DATADIR ?= $(PREFIX)/share -+MANDIR ?= $(PREFIX)/share/man +- except ValueError, e: +- self.error(e.args[0]) ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ domain = store.set_value(iter, 1, "") ++ self.itemSelected(selection) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() - TARGETS= \ - booleansPage.py \ -@@ -16,18 +19,30 @@ portsPage.py \ - semanagePage.py \ - statusPage.py \ - system-config-selinux.glade \ -+system-config-selinux.png \ - usersPage.py - - all: $(TARGETS) system-config-selinux.py polgengui.py - - install: all -+ -mkdir -p $(MANDIR)/man8 - -mkdir -p $(SHAREDIR) - -mkdir -p $(BINDIR) -+ -mkdir -p $(DATADIR)/pixmaps -+ -mkdir -p $(DATADIR)/icons/hicolor/24x24/apps -+ -mkdir -p $(SYSCONFDIR) -+ -mkdir -p $(DATADIR)/polkit-1/actions/ - install -m 755 system-config-selinux.py $(SHAREDIR) -+ install -m 755 system-config-selinux $(BINDIR) - install -m 755 polgengui.py $(SHAREDIR) -- install -m 755 sepolgen $(BINDIR) - install -m 644 $(TARGETS) $(SHAREDIR) + def propertiesDialog(self): + # Do nothing +@@ -140,15 +139,14 @@ class domainsPage(semanagePage): + selection = self.view.get_selection() + store, iter = selection.get_selected() + domain = store.get_value(iter, 0) ++ self.wait() ++ cmd = "semanage permissive -a %s_t" % domain + try: +- self.wait() +- status, output = commands.getstatusoutput("semanage permissive -a %s_t" % domain) +- self.ready() +- if status != 0: +- self.error(output) +- else: +- domain = store.set_value(iter, 1, _("Permissive")) +- self.itemSelected(selection) - -+ install -m 644 system-config-selinux.8 $(MANDIR)/man8 -+ install -m 644 selinux-polgengui.8 $(MANDIR)/man8 -+ install -m 644 system-config-selinux.png $(DATADIR)/pixmaps -+ install -m 644 system-config-selinux.png $(DATADIR)/icons/hicolor/24x24/apps -+ install -m 644 system-config-selinux.png $(DATADIR)/system-config-selinux -+ install -m 644 *.desktop $(DATADIR)/system-config-selinux -+ install -m 644 org.selinux.config.policy $(DATADIR)/polkit-1/actions/ - clean: +- except ValueError, e: +- self.error(e.args[0]) ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ domain = store.set_value(iter, 1, _("Permissive")) ++ self.itemSelected(selection) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() +diff --git a/policycoreutils/gui/fcontextPage.py b/policycoreutils/gui/fcontextPage.py +index 131f1c2..600232e 100644 +--- a/policycoreutils/gui/fcontextPage.py ++++ b/policycoreutils/gui/fcontextPage.py +@@ -21,7 +21,7 @@ import gtk.glade + import os + import gobject + import seobject +-import commands ++import subprocess + from semanagePage import *; - indent: -diff --git a/policycoreutils/gui/org.selinux.config.policy b/policycoreutils/gui/org.selinux.config.policy -new file mode 100644 -index 0000000..fb2adf6 ---- /dev/null -+++ b/policycoreutils/gui/org.selinux.config.policy -@@ -0,0 +1,22 @@ -+ -+ -+ + SPEC_COL = 0 +@@ -55,8 +55,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + + class fcontextPage(semanagePage): +@@ -124,7 +124,7 @@ class fcontextPage(semanagePage): + self.fcontext=seobject.fcontextRecords() + self.store.clear() + fcon_dict=self.fcontext.get_all(self.local) +- keys = fcon_dict.keys() ++ keys = list(fcon_dict.keys()) + keys.sort() + for k in keys: + if not self.match(fcon_dict, k, filter): +@@ -170,19 +170,18 @@ class fcontextPage(semanagePage): + + def delete(self): + store, iter = self.view.get_selection().get_selected() ++ fspec=store.get_value(iter, SPEC_COL) ++ ftype=store.get_value(iter, FTYPE_COL) ++ self.wait() + try: +- fspec=store.get_value(iter, SPEC_COL) +- ftype=store.get_value(iter, FTYPE_COL) +- self.wait() +- (rc, out) = commands.getstatusoutput("semanage fcontext -d -f '%s' '%s'" % (ftype, fspec)) +- self.ready() +- +- if rc != 0: +- return self.error(out) ++ subprocess.check_output("semanage fcontext -d -f '%s' '%s'" % (ftype, fspec), ++ stderr=subprocess.STDOUT, ++ shell=True) + store.remove(iter) + self.view.get_selection().select_path ((0,)) +- except ValueError, e: +- self.error(e.args[0]) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + + def add(self): + ftype=["", "--", "-d", "-c", "-b", "-s", "-l", "-p" ] +@@ -192,17 +191,20 @@ class fcontextPage(semanagePage): + list_model=self.fcontextFileTypeCombo.get_model() + active = self.fcontextFileTypeCombo.get_active() + self.wait() +- (rc, out) = commands.getstatusoutput("semanage fcontext -a -t %s -r %s -f '%s' '%s'" % (type, mls, ftype[active], fspec)) +- self.ready() +- if rc != 0: +- self.error(out) ++ try: ++ subprocess.check_output("semanage fcontext -a -t %s -r %s -f '%s' '%s'" % (type, mls, ftype[active], fspec), ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ iter=self.store.append() ++ self.store.set_value(iter, SPEC_COL, fspec) ++ self.store.set_value(iter, FTYPE_COL, ftype) ++ self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls)) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + return False + +- iter=self.store.append() +- self.store.set_value(iter, SPEC_COL, fspec) +- self.store.set_value(iter, FTYPE_COL, ftype) +- self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls)) +- + def modify(self): + fspec=self.fcontextEntry.get_text().strip() + type=self.fcontextTypeEntry.get_text().strip() +@@ -211,13 +213,16 @@ class fcontextPage(semanagePage): + iter = self.fcontextFileTypeCombo.get_active_iter() + ftype=list_model.get_value(iter,0) + self.wait() +- (rc, out) = commands.getstatusoutput("semanage fcontext -m -t %s -r %s -f '%s' '%s'" % (type, mls, ftype, fspec)) +- self.ready() +- if rc != 0: +- self.error(out) ++ try: ++ subprocess.check_output("semanage fcontext -m -t %s -r %s -f '%s' '%s'" % (type, mls, ftype, fspec), ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ store, iter = self.view.get_selection().get_selected() ++ self.store.set_value(iter, SPEC_COL, fspec) ++ self.store.set_value(iter, FTYPE_COL, ftype) ++ self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls)) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + return False +- +- store, iter = self.view.get_selection().get_selected() +- self.store.set_value(iter, SPEC_COL, fspec) +- self.store.set_value(iter, FTYPE_COL, ftype) +- self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls)) +diff --git a/policycoreutils/gui/html_util.py b/policycoreutils/gui/html_util.py +index 68eed76..32de37a 100644 +--- a/policycoreutils/gui/html_util.py ++++ b/policycoreutils/gui/html_util.py +@@ -30,7 +30,8 @@ import htmllib + import formatter as Formatter + import string + from types import * +-import StringIO ++import io ++import collections + + #------------------------------------------------------------------------------ + +@@ -119,7 +120,7 @@ def unescape_html(s): + + def html_to_text(html, maxcol=80): + try: +- buffer = StringIO.StringIO() ++ buffer = io.StringIO() + formatter = Formatter.AbstractFormatter(TextWriter(buffer, maxcol)) + parser = HTMLParserAnchor(formatter) + parser.feed(html) +@@ -127,7 +128,7 @@ def html_to_text(html, maxcol=80): + text = buffer.getvalue() + buffer.close() + return text +- except Exception, e: ++ except Exception as e: + log_program.error('cannot convert html to text: %s' % e) + return None + +@@ -149,7 +150,7 @@ def html_document(*body_components): + elif type(body_component) in [TupleType, ListType]: + for item in body_component: + doc += item +- elif callable(body_component): ++ elif isinstance(body_component, collections.Callable): + result = body_component() + if type(result) in [TupleType, ListType]: + for item in result: +diff --git a/policycoreutils/gui/loginsPage.py b/policycoreutils/gui/loginsPage.py +index ec29fd9..e52debd 100644 +--- a/policycoreutils/gui/loginsPage.py ++++ b/policycoreutils/gui/loginsPage.py +@@ -22,7 +22,7 @@ import gtk.glade + import os + import gobject + import sys +-import commands ++import subprocess + import seobject + from semanagePage import *; + +@@ -39,8 +39,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + class loginsPage(semanagePage): + def __init__(self, xml): +@@ -68,7 +68,7 @@ class loginsPage(semanagePage): + self.filter=filter + self.login = seobject.loginRecords() + dict = self.login.get_all(0) +- keys = dict.keys() ++ keys = list(dict.keys()) + keys.sort() + self.store.clear() + for k in keys: +@@ -92,7 +92,7 @@ class loginsPage(semanagePage): + self.loginsSelinuxUserCombo.add_attribute(cell, 'text', 0) + + selusers = seobject.seluserRecords().get_all(0) +- keys = selusers.keys() ++ keys = list(selusers.keys()) + keys.sort() + for k in keys: + if k != "system_u": +@@ -133,14 +133,18 @@ class loginsPage(semanagePage): + raise ValueError(_("Login '%s' is required") % login) + + self.wait() +- (rc, out) = commands.getstatusoutput("semanage login -d %s" % login) +- self.ready() +- if rc != 0: +- self.error(out) ++ try: ++ subprocess.check_output("semanage login -d %s" % login, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ store.remove(iter) ++ self.view.get_selection().select_path ((0,)) ++ except subprocess.CalledProcessError as e: ++ self.ready() ++ self.error(e.output) + return False +- store.remove(iter) +- self.view.get_selection().select_path ((0,)) +- except ValueError, e: ++ except ValueError as e: + self.error(e.args[0]) + + def add(self): +@@ -152,17 +156,20 @@ class loginsPage(semanagePage): + iter = self.loginsSelinuxUserCombo.get_active_iter() + seuser = list_model.get_value(iter,0) + self.wait() +- (rc, out) = commands.getstatusoutput("semanage login -a -s %s -r %s %s" % (seuser, serange, target)) +- self.ready() +- if rc != 0: +- self.error(out) ++ try: ++ subprocess.check_output("semanage login -a -s %s -r %s %s" % (seuser, serange, target), ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ iter = self.store.append() ++ self.store.set_value(iter, 0, target) ++ self.store.set_value(iter, 1, seuser) ++ self.store.set_value(iter, 2, seobject.translate(serange)) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + return False + +- iter = self.store.append() +- self.store.set_value(iter, 0, target) +- self.store.set_value(iter, 1, seuser) +- self.store.set_value(iter, 2, seobject.translate(serange)) +- + def modify(self): + target=self.loginsNameEntry.get_text().strip() + serange=self.loginsMLSEntry.get_text().strip() +@@ -172,13 +179,16 @@ class loginsPage(semanagePage): + iter = self.loginsSelinuxUserCombo.get_active_iter() + seuser=list_model.get_value(iter,0) + self.wait() +- (rc, out) = commands.getstatusoutput("semanage login -m -s %s -r %s %s" % (seuser, serange, target)) +- self.ready() +- if rc != 0: +- self.error(out) ++ try: ++ subprocess.check_output("semanage login -m -s %s -r %s %s" % (seuser, serange, target), ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ store, iter = self.view.get_selection().get_selected() ++ self.store.set_value(iter, 0, target) ++ self.store.set_value(iter, 1, seuser) ++ self.store.set_value(iter, 2, seobject.translate(serange)) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + return False +- +- store, iter = self.view.get_selection().get_selected() +- self.store.set_value(iter, 0, target) +- self.store.set_value(iter, 1, seuser) +- self.store.set_value(iter, 2, seobject.translate(serange)) +diff --git a/policycoreutils/gui/mappingsPage.py b/policycoreutils/gui/mappingsPage.py +index fd0ea75..ecd95bf 100644 +--- a/policycoreutils/gui/mappingsPage.py ++++ b/policycoreutils/gui/mappingsPage.py +@@ -37,8 +37,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + class loginsPage: + def __init__(self, xml): +@@ -49,7 +49,7 @@ class loginsPage: + self.view.set_model(self.store) + self.login = loginRecords() + dict = self.login.get_all(0) +- keys = dict.keys() ++ keys = list(dict.keys()) + keys.sort() + for k in keys: +- print "%-25s %-25s %-25s" % (k, dict[k][0], translate(dict[k][1])) ++ print("%-25s %-25s %-25s" % (k, dict[k][0], translate(dict[k][1]))) +diff --git a/policycoreutils/gui/modulesPage.py b/policycoreutils/gui/modulesPage.py +index 9ff0766..20f64b5 100644 +--- a/policycoreutils/gui/modulesPage.py ++++ b/policycoreutils/gui/modulesPage.py +@@ -20,7 +20,7 @@ import string + import gtk + import gtk.glade + import os +-import commands ++import subprocess + import gobject + import sys + import seobject +@@ -41,8 +41,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + class modulesPage(semanagePage): + def __init__(self, xml): +@@ -107,53 +107,51 @@ class modulesPage(semanagePage): + def new_module(self, args): + try: + Popen(["/usr/share/system-config-selinux/polgengui.py"]) +- except ValueError, e: ++ except ValueError as e: + self.error(e.args[0]) + + def delete(self): + store, iter = self.view.get_selection().get_selected() + module = store.get_value(iter, 0) ++ self.wait() + try: +- self.wait() +- status, output = commands.getstatusoutput("semodule -r %s" % module) +- self.ready() +- if status != 0: +- self.error(output) +- else: +- store.remove(iter) +- self.view.get_selection().select_path ((0,)) +- +- except ValueError, e: +- self.error(e.args[0]) ++ subprocess.check_output("semodule -r %s" % module, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ store.remove(iter) ++ self.view.get_selection().select_path ((0,)) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + + def enable_audit(self, button): + self.audit_enabled = not self.audit_enabled ++ if self.audit_enabled: ++ cmd = "semodule -DB" ++ label = _("Disable Audit")) ++ else: ++ cmd = "semodule -B" ++ label = _("Enable Audit")) ++ self.wait() + try: +- self.wait() +- if self.audit_enabled: +- status, output =commands.getstatusoutput("semodule -DB") +- button.set_label(_("Disable Audit")) +- else: +- status, output =commands.getstatusoutput("semodule -B") +- button.set_label(_("Enable Audit")) +- self.ready() +- +- if status != 0: +- self.error(output) +- +- except ValueError, e: +- self.error(e.args[0]) ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ button.set_label(label) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + + def disable_audit(self, button): ++ self.wait() ++ cmd = "semodule -B" + try: +- self.wait() +- status, output =commands.getstatusoutput("semodule -B") +- self.ready() +- if status != 0: +- self.error(output) +- +- except ValueError, e: +- self.error(e.args[0]) ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + + def propertiesDialog(self): + # Do nothing +@@ -178,14 +176,14 @@ class modulesPage(semanagePage): + dialog.destroy() + + def add(self, file): ++ self.wait() ++ cmd = "semodule -i %s" % file + try: +- self.wait() +- status, output =commands.getstatusoutput("semodule -i %s" % file) +- self.ready() +- if status != 0: +- self.error(output) +- else: +- self.load() +- +- except ValueError, e: +- self.error(e.args[0]) ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.load() ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + -+ System Config SELinux -+ http://fedorahosted.org/system-config-selinux -+ -+ -+ Run System Config SELinux -+ Authentication is required to run system-config-selinux -+ system-selinux -+ -+ no -+ no -+ auth_admin -+ -+ /usr/share/system-config-selinux/system-config-selinux.py -+ true -+ -+ diff --git a/policycoreutils/gui/polgengui.py b/policycoreutils/gui/polgengui.py -index 1c16f7b..8b6f902 100644 +index 0f0e564..ab2b9c5 100644 --- a/policycoreutils/gui/polgengui.py +++ b/policycoreutils/gui/polgengui.py -@@ -4,7 +4,7 @@ - # - # Dan Walsh - # --# Copyright (C) 2007-2012 Red Hat -+# Copyright (C) 2007-2013 Red Hat - # - # This program is free software; you can redistribute it and/or modify - # it under the terms of the GNU General Public License as published by -@@ -28,7 +28,12 @@ import os - import gobject - import gnome +@@ -30,25 +30,29 @@ import gnome import sys --from sepolicy import generate -+try: -+ from sepolicy import generate -+except ValueError,e: -+ sys.stderr.write("%s: %s\n" % (e.__class__.__name__, str(e))) -+ sys.exit(1) + try: + from sepolicy import generate +-except ValueError,e: ++except ValueError as e: + sys.stderr.write("%s: %s\n" % (e.__class__.__name__, str(e))) + sys.exit(1) +- + import sepolicy.interface - import commands +-import commands ++import subprocess -@@ -320,14 +325,16 @@ class childWindow: - col = gtk.TreeViewColumn(_("Application"), gtk.CellRendererText(), text = 0) - self.admin_treeview.append_column(col) + import re -- -- for u in sepolicy.interface.get_user(): -- iter = self.transition_store.append() -- self.transition_store.set_value(iter, 0, u) -- -- for a in sepolicy.interface.get_admin(): -- iter = self.admin_store.append() -- self.admin_store.set_value(iter, 0, a) -+ try: -+ for u in sepolicy.interface.get_user(): -+ iter = self.transition_store.append() -+ self.transition_store.set_value(iter, 0, u) -+ -+ for a in sepolicy.interface.get_admin(): -+ iter = self.admin_store.append() -+ self.admin_store.set_value(iter, 0, a) -+ except ValueError,e: -+ self.error(e.message) + def get_all_modules(): ++ all_modules = [] ++ cmd = "semodule -l 2>/dev/null" + try: +- all_modules = [] +- rc, output=commands.getstatusoutput("semodule -l 2>/dev/null") +- if rc == 0: +- l = output.split("\n") +- for i in l: +- all_modules.append(i.split()[0]) +- except: +- pass ++ output = subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ l = output.split("\n") ++ for i in l: ++ all_modules.append(i.split()[0]) ++ ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + + return all_modules + +@@ -67,8 +71,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + gnome.program_init("SELinux Policy Generation Tool", "5") + +@@ -194,7 +198,7 @@ class childWindow: + self.all_modules = get_all_modules() + self.all_roles = generate.get_all_roles() + self.all_users = generate.get_all_users() +- except RuntimeError, e: ++ except RuntimeError as e: + self.all_types = [] + self.all_modules = [] + self.all_roles = [] +@@ -262,7 +266,7 @@ class childWindow: + self.out_udp_entry = self.xml.get_widget("out_udp_entry") + self.network_buttons[self.out_udp_all_checkbutton] = [ self.out_udp_entry ] + +- for b in self.network_buttons.keys(): ++ for b in list(self.network_buttons.keys()): + b.connect("clicked",self.network_all_clicked) + + self.boolean_treeview = self.xml.get_widget("boolean_treeview") +@@ -333,7 +337,7 @@ class childWindow: + for a in sepolicy.interface.get_admin(): + iter = self.admin_store.append() + self.admin_store.set_value(iter, 0, a) +- except ValueError,e: ++ except ValueError as e: + self.error(e.message) def confine_application(self): - return self.get_type() in generate.APPLICATIONS -diff --git a/policycoreutils/gui/selinux-polgengui.8 b/policycoreutils/gui/selinux-polgengui.8 -new file mode 100644 -index 0000000..52bf7dd ---- /dev/null -+++ b/policycoreutils/gui/selinux-polgengui.8 -@@ -0,0 +1,35 @@ -+.TH "selinux-polgengui" "8" "8 April 2013" "System Config Tools Manual" "System Config Tools Manual" -+ -+.SH NAME -+selinux\-polgengui \- SELinux Policy Generation Tool -+ -+.SH SYNOPSIS -+.B selinux-polgengui -+ -+.SH DESCRIPTION -+\fBselinux-polgengui\fP is a graphical tool, which can be used to create a framework for building SELinux Policy. -+.SH OPTIONS -+None -+ -+.SH FILES -+\fi/usr/bin/selinux-polgengui\fP -+ -+.SH Examples -+To run the program type: -+ -+selinux-polgengui -+ -+.PP -+.SH "SEE ALSO" -+.TP -+selinux(1), sepolicy(8), sepolicy-generate(8) -+.PP -+ -+.SH REPORTING BUGS -+Report bugs to . -+ -+.SH LICENSE AND AUTHORS -+\fBselinux-polgengui\fP is licensed under the GNU Public License and -+is copyrighted by Red Hat, Inc. -+.br -+This man page was written by Daniel Walsh +@@ -519,7 +523,7 @@ class childWindow: + + self.info(my_policy.generate(outputdir)) + return False +- except ValueError, e: ++ except ValueError as e: + self.error(e.message) + + def delete(self, args): +@@ -687,7 +691,7 @@ class childWindow: + try: + generate.verify_ports(self.in_tcp_entry.get_text()) + generate.verify_ports(self.in_udp_entry.get_text()) +- except ValueError, e: ++ except ValueError as e: + self.error(e.message) + return True + +@@ -695,7 +699,7 @@ class childWindow: + try: + generate.verify_ports(self.out_tcp_entry.get_text()) + generate.verify_ports(self.out_udp_entry.get_text()) +- except ValueError, e: ++ except ValueError as e: + self.error(e.message) + return True + +@@ -734,12 +738,12 @@ class childWindow: + policy.set_program(exe) + policy.gen_writeable() + policy.gen_symbols() +- for f in policy.files.keys(): ++ for f in list(policy.files.keys()): + iter = self.store.append() + self.store.set_value(iter, 0, f) + self.store.set_value(iter, 1, FILE) + +- for f in policy.dirs.keys(): ++ for f in list(policy.dirs.keys()): + iter = self.store.append() + self.store.set_value(iter, 0, f) + self.store.set_value(iter, 1, DIR) +diff --git a/policycoreutils/gui/portsPage.py b/policycoreutils/gui/portsPage.py +index bfb4e36..e85e807 100644 +--- a/policycoreutils/gui/portsPage.py ++++ b/policycoreutils/gui/portsPage.py +@@ -23,7 +23,7 @@ import os + import gobject + import sys + import seobject +-import commands ++import subprocess + from semanagePage import *; + + ## +@@ -43,8 +43,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + class portsPage(semanagePage): + def __init__(self, xml): +@@ -120,7 +120,7 @@ class portsPage(semanagePage): + self.filter=filter + self.port = seobject.portRecords() + dict = self.port.get_all(self.local) +- keys = dict.keys() ++ keys = list(dict.keys()) + keys.sort() + self.store.clear() + for k in keys: +@@ -141,7 +141,7 @@ class portsPage(semanagePage): + self.filter=filter + self.port = seobject.portRecords() + dict = self.port.get_all_by_type(self.local) +- keys = dict.keys() ++ keys = list(dict.keys()) + keys.sort() + self.store.clear() + for k in keys: +@@ -185,16 +185,17 @@ class portsPage(semanagePage): + store, iter = self.view.get_selection().get_selected() + port = store.get_value(iter, PORT_COL) + protocol = store.get_value(iter, 1) ++ self.wait() ++ cmd = "semanage port -d -p %s %s" % (protocol, port)) + try: +- self.wait() +- (rc, out) = commands.getstatusoutput("semanage port -d -p %s %s" % (protocol, port)) +- self.ready() +- if rc != 0: +- return self.error(out) ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) + store.remove(iter) + self.view.get_selection().select_path ((0,)) +- except ValueError, e: +- self.error(e.args[0]) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + + def add(self): + target = self.ports_name_entry.get_text().strip() +@@ -210,17 +211,20 @@ class portsPage(semanagePage): + iter = self.ports_protocol_combo.get_active_iter() + protocol = list_model.get_value(iter,0) + self.wait() +- (rc, out) = commands.getstatusoutput("semanage port -a -p %s -r %s -t %s %s" % (protocol, mls, target, port_number)) +- self.ready() +- if rc != 0: +- self.error(out) +- return False +- iter = self.store.append() ++ cmd = "semanage port -a -p %s -r %s -t %s %s" % (protocol, mls, target, port_number) ++ try: ++ output = subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ iter = self.store.append() + +- self.store.set_value(iter, TYPE_COL, target) +- self.store.set_value(iter, PORT_COL, port_number) +- self.store.set_value(iter, PROTOCOL_COL, protocol) +- self.store.set_value(iter, MLS_COL, mls) ++ self.store.set_value(iter, TYPE_COL, target) ++ self.store.set_value(iter, PORT_COL, port_number) ++ self.store.set_value(iter, PROTOCOL_COL, protocol) ++ self.store.set_value(iter, MLS_COL, mls) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + + def modify(self): + target = self.ports_name_entry.get_text().strip() +@@ -230,16 +234,22 @@ class portsPage(semanagePage): + iter = self.ports_protocol_combo.get_active_iter() + protocol = list_model.get_value(iter,0) + self.wait() +- (rc, out) = commands.getstatusoutput("semanage port -m -p %s -r %s -t %s %s" % (protocol, mls, target, port_number)) +- self.ready() +- if rc != 0: +- self.error(out) ++ cmd = "semanage port -m -p %s -r %s -t %s %s" % (protocol, mls, target, port_number) ++ try: ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ store, iter = self.view.get_selection().get_selected() ++ self.store.set_value(iter, TYPE_COL, target) ++ self.store.set_value(iter, PORT_COL, port_number) ++ self.store.set_value(iter, PROTOCOL_COL, protocol) ++ self.store.set_value(iter, MLS_COL, mls) ++ self.ready() ++ return True ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + return False +- store, iter = self.view.get_selection().get_selected() +- self.store.set_value(iter, TYPE_COL, target) +- self.store.set_value(iter, PORT_COL, port_number) +- self.store.set_value(iter, PROTOCOL_COL, protocol) +- self.store.set_value(iter, MLS_COL, mls) + + def on_group_clicked(self, button): + self.ports_add_button.set_sensitive(self.group) diff --git a/policycoreutils/gui/selinux-polgengui.desktop b/policycoreutils/gui/selinux-polgengui.desktop -new file mode 100644 -index 0000000..0c2f399 ---- /dev/null +index 0c2f399..bbcb18f 100644 +--- a/policycoreutils/gui/selinux-polgengui.desktop +++ b/policycoreutils/gui/selinux-polgengui.desktop -@@ -0,0 +1,67 @@ -+[Desktop Entry] -+Name=SELinux Policy Generation Tool -+Name[bn_IN]=SELinux Policy নির্মাণের সামগ্রী -+Name[ca]=Eina de generació de polítiques del SELinux -+Name[da]=Regelsætgenereringsværktøj til SELinux -+Name[de]=Tool zur Erstellung von SELinux-Richtlinien -+Name[es]=Generador de Políticas de SELinux -+Name[fi]=SELinux-käytäntöjen generointityökalu -+Name[fr]=Outil de génération de stratégies SELinux -+Name[gu]=SELinux પોલિસી બનાવટ સાધન -+Name[hi]=SELinux पॉलिसी जनन औजार -+Name[it]=Tool di generazione della policy di SELinux -+Name[ja]=SELinux ポリシー生成ツール -+Name[kn]=SELinux ಪಾಲಿಸಿ ಉತ್ಪಾದನಾ ಉಪಕರಣ -+Name[ko]=SELinux 정책 생성 도구 -+Name[ml]=SELinux പോളിസി ഉത്പാദന പ്രയോഗം -+Name[mr]=SELinux करार निर्माण साधन -+Name[nl]=SELinux tactiek generatie gereedschap -+Name[or]=SELinux ନୀତି ସୃଷ୍ଟି ଉପକରଣ -+Name[pa]=SELinux ਪਾਲਿਸੀ ਨਿਰਮਾਣ ਜੰਤਰ -+Name[pl]=Narzędzie tworzenia polityki SELinuksa -+Name[pt]=Ferramenta de Geração de Políticas SELinux -+Name[pt_BR]=Ferramenta de criação de políticas do SELinux -+Name[ru]=Средство создания политики SELinux -+Name[sv]=Genereringsverktyg för SELinuxpolicy -+Name[ta]=SELinux பாலிசி உற்பத்தி கருவி -+Name[te]=SELinux నిర్వహణ -+Name[uk]=Утиліта генерації правил SELinux -+Name[zh_CN]=SELinux 策略生成工具 -+Name[zh_TW]=SELinux 政策產生工具（SELinux Policy Generation Tool） -+Comment=Generate SELinux policy modules -+Comment[bn_IN]=SELinux নিয়মনীতির মডিউল নির্মাণ করুন -+Comment[ca]=Genera els mòduls de les polítiques de SELinux -+Comment[da]=Generér SELinux-regelsætmodul -+Comment[de]=Tool zur Erstellung von SELinux-Richtlinien -+Comment[es]=Generar módulos de política de SELinux -+Comment[fi]=Generoi SELinuxin käytäntömoduuleja -+Comment[fr]=Génére des modules de stratégie SELinux -+Comment[gu]=SELinux પોલિસી મોડ્યુલોને ઉત્પન્ન કરો -+Comment[hi]=नया पॉलिसी मॉड्यूल उत्पन्न करें -+Comment[it]=Genera moduli della politica di SELinux -+Comment[ja]=新しいポリシーモジュールの作成 -+Comment[kn]=SELinux ಪಾಲಿಸಿ ಘಟಕಗಳನ್ನು ಉತ್ಪಾದಿಸು -+Comment[ko]=SELinux 정책 모듈 생성 -+Comment[ml]=SELinux യ പോളിസി ഘങ്ങള്‍ തയ്യാറാക്കുക -+Comment[mr]=SELinux करार घटके निर्माण करा -+Comment[nl]=Maak een SELinux tactiek module aan -+Comment[or]=SELinux ନୀତି ଏକକାଂଶ ସୃଷ୍ଟିକରନ୍ତୁ -+Comment[pa]=SELinux ਪਾਲਿਸੀ ਮੈਡਿਊਲ ਬਣਾਓ -+Comment[pl]=Tworzenie nowych modułów polityki SELinuksa -+Comment[pt]=Gerar módulos de políticas SELinux -+Comment[pt_BR]=Gerar módulos de política do SELinux -+Comment[ru]=Генерация модулей политики SELinux -+Comment[sv]=Generera SELinux-policymoduler -+Comment[ta]=SELinux கொள்கை தொகுதியை உருவாக்கவும் -+Comment[te]=SELinux పాలసీ మాడ్యూళ్ళను వుద్భవింపచేయుము -+Comment[uk]=Створення модулів контролю доступу SELinux -+Comment[zh_CN]=生成 SELinux 策略模块 -+Comment[zh_TW]=產生 SELinux 政策模組 -+StartupNotify=true -+Icon=system-config-selinux -+Exec=/usr/bin/selinux-polgengui -+Type=Application -+Terminal=false -+Categories=System;Security; -+X-Desktop-File-Install-Version=0.2 -+Keywords=policy;security;selinux;avc;permission;mac; -diff --git a/policycoreutils/gui/system-config-selinux b/policycoreutils/gui/system-config-selinux -new file mode 100755 -index 0000000..5be5ccd ---- /dev/null -+++ b/policycoreutils/gui/system-config-selinux -@@ -0,0 +1,3 @@ -+#!/bin/sh -+ -+exec /usr/bin/pkexec /usr/share/system-config-selinux/system-config-selinux.py -diff --git a/policycoreutils/gui/system-config-selinux.8 b/policycoreutils/gui/system-config-selinux.8 -new file mode 100644 -index 0000000..eca2024 ---- /dev/null -+++ b/policycoreutils/gui/system-config-selinux.8 -@@ -0,0 +1,37 @@ -+.TH "system-config-selinux" "8" "8 April 2013" "System Config Tools Manual" "System Config Tools Manual" -+ -+.SH NAME -+system\-config\-selinux \- SELinux Management tool -+ -+.SH SYNOPSIS -+.B system-config-selinux -+ -+.SH DESCRIPTION -+\fBsystem-config-selinux\fP provides a graphical interface for managing the -+SELinux configuration. -+ -+.SH OPTIONS -+None -+ -+.SH FILES -+\fi/usr/bin/system-config-selinux\fP -+ -+.SH Examples -+To run the program type: -+ -+system-config-selinux -+ -+.PP -+.SH "SEE ALSO" -+.TP -+selinux(1), semanage(8) -+.PP -+ -+.SH REPORTING BUGS -+Report bugs to . -+ -+.SH LICENSE AND AUTHORS -+\fBsystem-config-selinux\fP is licensed under the GNU Public License and -+is copyrighted by Red Hat, Inc. -+.br -+This man page was written by Daniel Walsh +@@ -64,4 +64,3 @@ Type=Application + Terminal=false + Categories=System;Security; + X-Desktop-File-Install-Version=0.2 +-Keywords=policy;security;selinux;avc;permission;mac; +diff --git a/policycoreutils/gui/semanagePage.py b/policycoreutils/gui/semanagePage.py +index 3a0e478..342ecb2 100644 +--- a/policycoreutils/gui/semanagePage.py ++++ b/policycoreutils/gui/semanagePage.py +@@ -37,8 +37,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + def idle_func(): + while gtk.events_pending(): +@@ -139,7 +139,7 @@ class semanagePage: + if self.add() == False: + continue + break; +- except ValueError, e: ++ except ValueError as e: + self.error(e.args[0]) + self.dialog.hide() + +@@ -152,7 +152,7 @@ class semanagePage: + if self.modify() == False: + continue + break; +- except ValueError, e: ++ except ValueError as e: + self.error(e.args[0]) + self.dialog.hide() + +diff --git a/policycoreutils/gui/statusPage.py b/policycoreutils/gui/statusPage.py +index 02685f2..8ee96b8 100644 +--- a/policycoreutils/gui/statusPage.py ++++ b/policycoreutils/gui/statusPage.py +@@ -27,7 +27,7 @@ import tempfile + INSTALLPATH = '/usr/share/system-config-selinux' + sys.path.append(INSTALLPATH) + +-import commands ++import subprocess + ENFORCING = 1 + PERMISSIVE = 0 + DISABLED = -1 +@@ -45,10 +45,10 @@ gettext.bindtextdomain(PROGNAME, "/usr/share/locale") + gettext.textdomain(PROGNAME) + import selinux + try: +- gettext.install(PROGNAME, localedir="/usr/share/locale", unicode=1) ++ gettext.install(PROGNAME, localedir="/usr/share/locale", str=1) + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str + + class statusPage: + def __init__(self, xml): diff --git a/policycoreutils/gui/system-config-selinux.desktop b/policycoreutils/gui/system-config-selinux.desktop -new file mode 100644 -index 0000000..8822ce2 ---- /dev/null +index 8822ce2..befdb23 100644 +--- a/policycoreutils/gui/system-config-selinux.desktop +++ b/policycoreutils/gui/system-config-selinux.desktop -@@ -0,0 +1,67 @@ -+[Desktop Entry] -+Name=SELinux Management -+Name[bn_IN]=SELinux পরিচালনা -+Name[da]=Håndtering af SELinux -+Name[de]=SELinux-Management -+Name[ca]=Gestió de SELinux -+Name[es]=Administración de SELinux -+Name[fi]=SELinuxin ylläpito -+Name[fr]=Gestion de SELinux -+Name[gu]=SELinux સંચાલન -+Name[hi]=SELinux प्रबंधन -+Name[jp]=SELinux 管理 -+Name[it]=Gestione di SELinux -+Name[kn]=SELinux ವ್ಯವಸ್ಥಾಪನೆ -+Name[ko]=SELinux 관리 -+Name[ml]=SELinux മാനേജ്മെന്റ് -+Name[mr]=SELinux मॅनेजमेंट -+Name[nl]=SELinux beheer -+Name[or]=SELinux ପରିଚାଳନା -+Name[pa]=SELinux ਮੈਨੇਜਮੈਂਟ -+Name[pl]=Zarządzanie SELinuksem -+Name[pt_BR]=Gerenciamento do SELinux -+Name[pt]=Gestão de SELinux -+Name[ru]=Управление SELinux -+Name[sv]=SELinux-hantering -+Name[ta]=SELinux மேலாண்மை -+Name[te]=SELinux నిర్వహణ -+Name[uk]=Керування SELinux -+Name[zh_CN]=SELinux 管理 -+Name[zh_TW]=SELinux 管理 -+Comment=Configure SELinux in a graphical setting -+Comment[bn_IN]=গ্রাফিক্যাল পরিবেশে SELinux কনফিগার করুন -+Comment[ca]=Configura SELinuc an mode de preferències gràfiques -+Comment[da]=Konfigurér SELinux i et grafisk miljø -+Comment[de]=SELinux in einer grafischen Einstellung konfigurieren -+Comment[es]=Defina SELinux en una configuración de interfaz gráfica -+Comment[fi]=Tee SELinuxin asetukset graafisesti -+Comment[fr]=Configure SELinux dans un environnement graphique -+Comment[gu]=ગ્રાફિકલ સુયોજનમાં SELinux ને રૂપરેખાંકિત કરો -+Comment[hi]=SELinux को आलेखी सेटिंग में विन्यस्त करें -+Comment[it]=Configura SELinux in una impostazione grafica -+Comment[jp]=グラフィカルな設定画面で SELinux を設定する -+Comment[ko]=SELinux를 그래픽 사용자 인터페이스로 설정 -+Comment[kn]=SELinux ಅನ್ನು ಒಂದು ಚಿತ್ರಾತ್ಮಕ ಸಿದ್ದತೆಯಲ್ಲಿ ಸಂರಚಿಸಿ -+Comment[ml]=ഒരു ഗ്രാഫിക്കല്‍ സജ്ജീകരണത്തില്‍ SELinux ക്രമീകരിയ്ക്കുക -+Comment[mr]=ग्राफिकल सेटिंगमध्ये SELinux संरचीत करा -+Comment[nl]=Configureer SELinux in een grafische omgeving -+Comment[or]=SELinux କୁ ଆଲେଖିକ ସଂରଚନାରେ ବିନ୍ୟାସ କରନ୍ତୁ -+Comment[pa]=SELinux ਨੂੰ ਗਰਾਫੀਕਲ ਸੈਟਿੰਗ ਵਿੱਚ ਸੰਰਚਿਤ ਕਰੋ -+Comment[pl]=Konfiguracja SELinuksa w trybie graficznym -+Comment[pt]=Configurar o SELinux num ambiente gráfico -+Comment[pt_BR]=Configure o SELinux em uma configuração gráfica -+Comment[ru]=Настройка SELinux в графическом режиме -+Comment[sv]=Konfigurera SELinux i en grafisk miljö -+Comment[ta]=SELinuxஐ ஒரு வரைகலை அமைவில் கட்டமைக்கவும் -+Comment[te]=SELinuxను గ్రాఫికల్ అమర్పునందు ఆకృతీకరించుము -+Comment[uk]=Засіб для налаштування SELinux з графічним інтерфейсом -+Comment[zh_CN]=在图形设置中配置 SELinux -+Comment[zh_TW]=在圖形話設定中配置 SELinux -+StartupNotify=true -+Icon=system-config-selinux -+Exec=/usr/bin/system-config-selinux -+Type=Application -+Terminal=false -+Categories=System;Security; -+X-Desktop-File-Install-Version=0.2 -+Keywords=policy;security;selinux;avc;permission;mac; -diff --git a/policycoreutils/gui/system-config-selinux.png b/policycoreutils/gui/system-config-selinux.png -new file mode 100644 -index 0000000..68ffcb7 -Binary files /dev/null and b/policycoreutils/gui/system-config-selinux.png differ -diff --git a/policycoreutils/load_policy/load_policy.8 b/policycoreutils/load_policy/load_policy.8 -index f9ca36e..a86073f 100644 ---- a/policycoreutils/load_policy/load_policy.8 -+++ b/policycoreutils/load_policy/load_policy.8 -@@ -19,7 +19,7 @@ values in the policy file. - suppress warning messages. - .TP - .B \-i --inital policy load. Only use this if this is the first time policy is being loaded since boot (usually called from initramfs). -+initial policy load. Only use this if this is the first time policy is being loaded since boot (usually called from initramfs). +@@ -64,4 +64,3 @@ Type=Application + Terminal=false + Categories=System;Security; + X-Desktop-File-Install-Version=0.2 +-Keywords=policy;security;selinux;avc;permission;mac; +diff --git a/policycoreutils/gui/system-config-selinux.py b/policycoreutils/gui/system-config-selinux.py +index bc3027e..9482fa5 100644 +--- a/policycoreutils/gui/system-config-selinux.py ++++ b/policycoreutils/gui/system-config-selinux.py +@@ -25,9 +25,9 @@ import string + import sys + try: + import gtk +-except RuntimeError, e: +- print "system-config-selinux:", e +- print "This is a graphical application and requires DISPLAY to be set." ++except RuntimeError as e: ++ print("system-config-selinux:", e) ++ print("This is a graphical application and requires DISPLAY to be set.") + sys.exit (1) - .SH "EXIT STATUS" - .TP -diff --git a/policycoreutils/man/man5/selinux_config.5 b/policycoreutils/man/man5/selinux_config.5 -index 4963cdc..dbfec55 100644 ---- a/policycoreutils/man/man5/selinux_config.5 -+++ b/policycoreutils/man/man5/selinux_config.5 -@@ -92,7 +92,7 @@ The binary policy name has by convention the SELinux policy version that it supp - .RS - This entry is deprecated and should be removed or set to \fI0\fR. - .sp --If set to \fI1\fR, then \fBselinux_mkload_policy\fR(3) will read the local customisation for booleans (see \fBbooleans\fR(5)) and users (see \fBlocal.users\fR(5)). -+If set to \fI1\fR, then \fBselinux_mkload_policy\fR(3) will read the local customization for booleans (see \fBbooleans\fR(5)) and users (see \fBlocal.users\fR(5)). - .RE - .sp - .B REQUIRESEUSERS -@@ -122,7 +122,7 @@ This is an optional entry that allows the file system to be relabeled. - .sp - If set to \fI0\fR and there is a file called \fI.autorelabel\fR in the root directory, then on a reboot, the loader will drop to a shell where a root login is required. An administrator can then manually relabel the file system. - .sp --If set to \fI1\fR or no entry present (the default) and there is a \fI.autorelabel\fR file in the root directory, then the file system will be automatically relabeled using \fBfixfiles -F restore\fR -+If set to \fI1\fR or no entry present (the default) and there is a \fI.autorelabel\fR file in the root directory, then the file system will be automatically relabeled using \fBfixfiles \-F restore\fR - .sp - In both cases the \fI/.autorelabel\fR file will be removed so that relabeling is not done again. - .RE -diff --git a/policycoreutils/mcstrans/man/man8/mcs.8 b/policycoreutils/mcstrans/man/man8/mcs.8 -index 44126bf..aeaf22e 100644 ---- a/policycoreutils/mcstrans/man/man8/mcs.8 -+++ b/policycoreutils/mcstrans/man/man8/mcs.8 -@@ -20,7 +20,7 @@ readable form. Administrators can define any labels they want in this file. - Certain applications like printing and auditing will use these labels to - identify the files. By setting a category on a file you will prevent - other applications/services from having access to the files. --.p -+.P - Examples of file labels would be PatientRecord, CompanyConfidential etc. + import gtk.glade +@@ -57,8 +57,8 @@ try: + unicode=False, + codeset = 'utf-8') + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str - .SH "SEE ALSO" -diff --git a/policycoreutils/newrole/newrole.1 b/policycoreutils/newrole/newrole.1 -index 376c458..c47bc52 100644 ---- a/policycoreutils/newrole/newrole.1 -+++ b/policycoreutils/newrole/newrole.1 -@@ -44,7 +44,7 @@ Additional arguments - .I ARGS - may be provided after a -- option, - in which case they are supplied to the new shell. --In particular, an argument of -- -c will cause the next argument to be -+In particular, an argument of \-\- \-c will cause the next argument to be - treated as a command by most command interpreters. - .PP - If a command argument is specified to newrole and the command name is found -@@ -66,31 +66,31 @@ shows the current version of newrole - .SH EXAMPLE - .br - Changing role: -- # id -Z -+ # id \-Z - staff_u:staff_r:staff_t:SystemLow-SystemHigh -- # newrole -r sysadm_r -- # id -Z -+ # newrole \-r sysadm_r -+ # id \-Z - staff_u:sysadm_r:sysadm_t:SystemLow-SystemHigh + gnome.program_init("SELinux Management Tool", "5") - Changing sensitivity only: -- # id -Z -+ # id \-Z - staff_u:sysadm_r:sysadm_t:Unclassified-SystemHigh -- # newrole -l Secret -- # id -Z -+ # newrole \-l Secret -+ # id \-Z - staff_u:sysadm_r:sysadm_t:Secret-SystemHigh +@@ -95,7 +95,7 @@ class childWindow: + self.add_page(portsPage.portsPage(xml)) + self.add_page(modulesPage.modulesPage(xml)) # modules + self.add_page(domainsPage.domainsPage(xml)) # domains +- except ValueError, e: ++ except ValueError as e: + self.error(e.message) - .PP - Changing sensitivity and clearance: -- # id -Z -+ # id \-Z - staff_u:sysadm_r:sysadm_t:Unclassified-SystemHigh -- # newrole -l Secret-Secret -- # id -Z -+ # newrole \-l Secret-Secret -+ # id \-Z - staff_u:sysadm_r:sysadm_t:Secret + xml.signal_connect("on_quit_activate", self.destroy) +diff --git a/policycoreutils/gui/usersPage.py b/policycoreutils/gui/usersPage.py +index 93804ac..6fcf70d 100644 +--- a/policycoreutils/gui/usersPage.py ++++ b/policycoreutils/gui/usersPage.py +@@ -22,7 +22,7 @@ import gtk.glade + import os + import gobject + import sys +-import commands ++import subprocess + import seobject + from semanagePage import *; - .PP - Running a program in a given role or level: -- # newrole -r sysadm_r -- -c "/path/to/app arg1 arg2..." -- # newrole -l Secret -- -c "/path/to/app arg1 arg2..." -+ # newrole \-r sysadm_r \-\- \-c "/path/to/app arg1 arg2..." -+ # newrole \-l Secret \-\- \-c "/path/to/app arg1 arg2..." +@@ -34,10 +34,10 @@ import gettext + gettext.bindtextdomain(PROGNAME, "/usr/share/locale") + gettext.textdomain(PROGNAME) + try: +- gettext.install(PROGNAME, localedir="/usr/share/locale", unicode=1) ++ gettext.install(PROGNAME, localedir="/usr/share/locale", str=1) + except IOError: +- import __builtin__ +- __builtin__.__dict__['_'] = unicode ++ import builtins ++ builtins.__dict__['_'] = str - .SH FILES - /etc/passwd - user account information + class usersPage(semanagePage): + def __init__(self, xml): +@@ -69,7 +69,7 @@ class usersPage(semanagePage): + self.filter=filter + self.user = seobject.seluserRecords() + dict = self.user.get_all() +- keys = dict.keys() ++ keys = list(dict.keys()) + keys.sort() + self.store.clear() + for k in keys: +@@ -106,15 +106,19 @@ class usersPage(semanagePage): + roles = self.selinuxRolesEntry.get_text() + + self.wait() +- (rc, out) = commands.getstatusoutput("semanage user -a -R '%s' -r %s %s" % (roles, range, user)) +- self.ready() +- if rc != 0: ++ try: ++ subprocess.check_output("semanage user -a -R '%s' -r %s %s" % (roles, range, user), ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ iter = self.store.append() ++ self.store.set_value(iter, 0, user) ++ self.store.set_value(iter, 1, range) ++ self.store.set_value(iter, 2, roles) ++ except: + self.error(out) ++ self.ready() + return False +- iter = self.store.append() +- self.store.set_value(iter, 0, user) +- self.store.set_value(iter, 1, range) +- self.store.set_value(iter, 2, roles) + + def modify(self): + user = self.selinuxUserEntry.get_text() +@@ -122,13 +126,18 @@ class usersPage(semanagePage): + roles = self.selinuxRolesEntry.get_text() + + self.wait() +- (rc, out) = commands.getstatusoutput("semanage user -m -R '%s' -r %s %s" % (roles, range, user)) +- self.ready() +- +- if rc != 0: +- self.error(out) ++ cmd = "semanage user -m -R '%s' -r %s %s" % (roles, range, user) ++ try: ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ self.load(self.filter) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + return False +- self.load(self.filter) ++ return True + + def delete(self): + store, iter = self.view.get_selection().get_selected() +@@ -138,12 +147,17 @@ class usersPage(semanagePage): + raise ValueError(_("SELinux user '%s' is required") % user) + + self.wait() +- (rc, out) = commands.getstatusoutput("semanage user -d %s" % user) +- self.ready() +- if rc != 0: +- self.error(out) ++ cmd = "semanage user -d %s" % user ++ try: ++ subprocess.check_output(cmd, ++ stderr=subprocess.STDOUT, ++ shell=True) ++ self.ready() ++ store.remove(iter) ++ self.view.get_selection().select_path ((0,)) ++ except subprocess.CalledProcessError as e: ++ self.error(e.output) ++ self.ready() + return False +- store.remove(iter) +- self.view.get_selection().select_path ((0,)) +- except ValueError, e: ++ except ValueError as e: + self.error(e.args[0]) diff --git a/policycoreutils/newrole/newrole.c b/policycoreutils/newrole/newrole.c -index 8fbf2d0..4e59a06 100644 +index dfb8c7f..4e59a06 100644 --- a/policycoreutils/newrole/newrole.c +++ b/policycoreutils/newrole/newrole.c @@ -547,9 +547,7 @@ static int drop_capabilities(int full) @@ -866,8 +1170,12 @@ index 8fbf2d0..4e59a06 100644 int pam_status; /* pam return code */ pam_handle_t *pam_handle; /* opaque handle used by all PAM functions */ -@@ -1226,15 +1231,23 @@ int main(int argc, char *argv[]) - fd = open(ttyn, O_RDONLY | O_NONBLOCK); +@@ -1223,18 +1228,26 @@ int main(int argc, char *argv[]) + fprintf(stderr, _("Could not close descriptors.\n")); + goto err_close_pam; + } +- fd = open(ttyn, O_RDWR | O_NONBLOCK); ++ fd = open(ttyn, O_RDONLY | O_NONBLOCK); if (fd != 0) goto err_close_pam; - fcntl(fd, F_SETFL, fcntl(fd, F_GETFL, 0) & ~O_NONBLOCK); @@ -922,26 +1230,14 @@ index 8fbf2d0..4e59a06 100644 /* Handle environment changes */ if (restore_environment(preserve_environment, old_environ, &pw)) { fprintf(stderr, _("Unable to restore the environment, " -diff --git a/policycoreutils/newrole/newrole.pamd b/policycoreutils/newrole/newrole.pamd -index d1b435c..de3582f 100644 ---- a/policycoreutils/newrole/newrole.pamd -+++ b/policycoreutils/newrole/newrole.pamd -@@ -1,4 +1,6 @@ - #%PAM-1.0 -+# Uncomment the next line if you do not want to enter your passwd everytime -+# auth sufficient pam_rootok.so - auth include system-auth - account include system-auth - password include system-auth diff --git a/policycoreutils/po/Makefile b/policycoreutils/po/Makefile -index a377996..1af5501 100644 +index a693823..1af5501 100644 --- a/policycoreutils/po/Makefile +++ b/policycoreutils/po/Makefile -@@ -60,6 +60,37 @@ POTFILES = \ - ../gui/system-config-selinux.py \ +@@ -61,6 +61,36 @@ POTFILES = \ ../gui/usersPage.py \ ../secon/secon.c \ -+ booleans.py \ + booleans.py \ + ../sepolicy/sepolicy/help/booleans_more_show.txt \ + ../sepolicy/sepolicy/help/booleans_more.txt \ + ../sepolicy/sepolicy/help/booleans_toggled.txt \ @@ -975,51 +1271,14 @@ index a377996..1af5501 100644 ../sepolicy/info.c \ ../sepolicy/search.c \ ../sepolicy/sepolicy.py \ -@@ -67,6 +98,8 @@ POTFILES = \ - ../sepolicy/sepolicy/__init__.py \ - ../sepolicy/sepolicy/network.py \ - ../sepolicy/sepolicy/generate.py \ -+ ../sepolicy/sepolicy/sepolicy.glade \ -+ ../sepolicy/sepolicy/gui.py \ - ../sepolicy/sepolicy/manpage.py \ - ../sepolicy/sepolicy/transition.py \ - ../sepolicy/sepolicy/templates/executable.py \ -@@ -80,13 +113,16 @@ POTFILES = \ - ../sepolicy/sepolicy/templates/var_lib.py \ - ../sepolicy/sepolicy/templates/var_log.py \ - ../sepolicy/sepolicy/templates/var_run.py \ -- ../sepolicy/sepolicy/templates/var_spool.py \ -+ ../sepolicy/sepolicy/templates/var_spool.py - - #default:: clean - - all:: $(MOFILES) - --$(POTFILE): $(POTFILES) -+booleans.py: -+ sepolicy booleans -a > booleans.py -+ -+$(POTFILE): $(POTFILES) booleans.py - $(XGETTEXT) --keyword=_ --keyword=N_ $(POTFILES) - @if cmp -s $(NLSPACKAGE).po $(POTFILE); then \ - rm -f $(NLSPACKAGE).po; \ -@@ -95,6 +131,7 @@ $(POTFILE): $(POTFILES) - fi; \ - - update-po: Makefile $(POTFILE) refresh-po -+ @rm -f booleans.py - - refresh-po: Makefile - for cat in $(POFILES); do \ diff --git a/policycoreutils/po/POTFILES b/policycoreutils/po/POTFILES -index 667e394..25ed15c 100644 +index bcb9e99..25ed15c 100644 --- a/policycoreutils/po/POTFILES +++ b/policycoreutils/po/POTFILES -@@ -47,4 +47,56 @@ +@@ -47,6 +47,36 @@ ../gui/templates/var_log.py ../gui/templates/var_run.py ../gui/templates/var_spool.py -- ../secon/secon.c + ../sepolicy/sepolicy/help/booleans_more_show.txt + ../sepolicy/sepolicy/help/booleans_more.txt + ../sepolicy/sepolicy/help/booleans_toggled.txt @@ -1050,39 +1309,16 @@ index 667e394..25ed15c 100644 + ../sepolicy/sepolicy/help/transition_from.txt + ../sepolicy/sepolicy/help/transition_to.txt + ../sepolicy/sepolicy/help/users.txt -+ ../sepolicy/info.c -+ ../sepolicy/search.c -+ ../sepolicy/sepolicy.py -+ ../sepolicy/sepolicy/communicate.py -+ ../sepolicy/sepolicy/__init__.py -+ ../sepolicy/sepolicy/network.py -+ ../sepolicy/sepolicy/generate.py -+ ../sepolicy/sepolicy/sepolicy.glade -+ ../sepolicy/sepolicy/gui.py -+ ../sepolicy/sepolicy/manpage.py -+ ../sepolicy/sepolicy/transition.py -+ ../sepolicy/sepolicy/templates/executable.py -+ ../sepolicy/sepolicy/templates/__init__.py -+ ../sepolicy/sepolicy/templates/network.py -+ ../sepolicy/sepolicy/templates/rw.py -+ ../sepolicy/sepolicy/templates/script.py -+ ../sepolicy/sepolicy/templates/semodule.py -+ ../sepolicy/sepolicy/templates/tmp.py -+ ../sepolicy/sepolicy/templates/user.py -+ ../sepolicy/sepolicy/templates/var_lib.py -+ ../sepolicy/sepolicy/templates/var_log.py -+ ../sepolicy/sepolicy/templates/var_run.py -+ ../sepolicy/sepolicy/templates/var_spool.py + ../sepolicy/info.c + ../sepolicy/search.c + ../sepolicy/sepolicy.py diff --git a/policycoreutils/po/POTFILES.in b/policycoreutils/po/POTFILES.in -index 75117f4..056fe24 100644 +index aca0474..056fe24 100644 --- a/policycoreutils/po/POTFILES.in +++ b/policycoreutils/po/POTFILES.in -@@ -42,7 +42,39 @@ sepolicy/sepolicy/communicate.py - sepolicy/sepolicy/__init__.py - sepolicy/sepolicy/network.py - sepolicy/sepolicy/generate.py -+sepolicy/sepolicy/sepolicy.glade -+sepolicy/sepolicy/gui.py +@@ -45,6 +45,36 @@ sepolicy/sepolicy/generate.py + sepolicy/sepolicy/sepolicy.glade + sepolicy/sepolicy/gui.py sepolicy/sepolicy/manpage.py +sepolicy/sepolicy/help/booleans_more_show.txt +sepolicy/sepolicy/help/booleans_more.txt @@ -1118,21276 +1354,8001 @@ index 75117f4..056fe24 100644 sepolicy/sepolicy/templates/executable.py sepolicy/sepolicy/templates/__init__.py diff --git a/policycoreutils/po/af.po b/policycoreutils/po/af.po -index 961d921..ae76ff2 100644 +index e4a6e09..ae76ff2 100644 --- a/policycoreutils/po/af.po +++ b/policycoreutils/po/af.po -@@ -1,21 +1,22 @@ - # SOME DESCRIPTIVE TITLE. - # Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER - # This file is distributed under the same license as the PACKAGE package. --# FIRST AUTHOR , YEAR. - # --#, fuzzy -+# Translators: - msgid "" - msgstr "" --"Project-Id-Version: PACKAGE VERSION\n" -+"Project-Id-Version: Policycoreutils\n" - "Report-Msgid-Bugs-To: \n" --"POT-Creation-Date: 2013-01-04 12:01-0500\n" --"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" -+"POT-Creation-Date: 2013-10-15 15:17-0400\n" -+"PO-Revision-Date: 2012-03-30 18:14+0000\n" - "Last-Translator: FULL NAME \n" --"Language-Team: LANGUAGE \n" --"Language: \n" -+"Language-Team: Afrikaans (http://www.transifex.com/projects/p/fedora/" -+"language/af/)\n" -+"Language: af\n" - "MIME-Version: 1.0\n" - "Content-Type: text/plain; charset=UTF-8\n" - "Content-Transfer-Encoding: 8bit\n" -+"Plural-Forms: nplurals=2; plural=(n != 1);\n" - - #: ../run_init/run_init.c:67 - msgid "" -@@ -24,7 +25,7 @@ msgid "" - " are the arguments to that script." - msgstr "" - --#: ../run_init/run_init.c:126 ../newrole/newrole.c:1123 -+#: ../run_init/run_init.c:126 ../newrole/newrole.c:1128 - #, c-format - msgid "failed to initialize PAM\n" - msgstr "" -@@ -73,7 +74,7 @@ msgstr "" - msgid "authentication failed.\n" - msgstr "" - --#: ../run_init/run_init.c:405 ../newrole/newrole.c:1257 -+#: ../run_init/run_init.c:405 ../newrole/newrole.c:1270 - #, c-format - msgid "Could not set exec context to %s.\n" - msgstr "" -@@ -86,870 +87,920 @@ msgstr "" - msgid "To make this policy package active, execute:" - msgstr "" - --#: ../semanage/seobject.py:194 -+#: ../semanage/seobject.py:210 - msgid "Could not create semanage handle" - msgstr "" - --#: ../semanage/seobject.py:202 -+#: ../semanage/seobject.py:218 - msgid "SELinux policy is not managed or store cannot be accessed." - msgstr "" - --#: ../semanage/seobject.py:207 -+#: ../semanage/seobject.py:223 - msgid "Cannot read policy store." - msgstr "" - --#: ../semanage/seobject.py:212 -+#: ../semanage/seobject.py:228 - msgid "Could not establish semanage connection" - msgstr "" - --#: ../semanage/seobject.py:217 -+#: ../semanage/seobject.py:233 - msgid "Could not test MLS enabled status" - msgstr "" - --#: ../semanage/seobject.py:223 ../semanage/seobject.py:238 -+#: ../semanage/seobject.py:239 ../semanage/seobject.py:254 - msgid "Not yet implemented" - msgstr "" - --#: ../semanage/seobject.py:227 -+#: ../semanage/seobject.py:243 - msgid "Semanage transaction already in progress" - msgstr "" - --#: ../semanage/seobject.py:236 -+#: ../semanage/seobject.py:252 - msgid "Could not start semanage transaction" - msgstr "" - --#: ../semanage/seobject.py:248 -+#: ../semanage/seobject.py:264 - msgid "Could not commit semanage transaction" - msgstr "" - --#: ../semanage/seobject.py:253 -+#: ../semanage/seobject.py:269 - msgid "Semanage transaction not in progress" - msgstr "" - --#: ../semanage/seobject.py:265 ../semanage/seobject.py:345 -+#: ../semanage/seobject.py:281 ../semanage/seobject.py:376 - msgid "Could not list SELinux modules" - msgstr "" - --#: ../semanage/seobject.py:278 -+#: ../semanage/seobject.py:300 - msgid "Modules Name" - msgstr "" - --#: ../semanage/seobject.py:278 ../gui/modulesPage.py:63 -+#: ../semanage/seobject.py:300 ../gui/modulesPage.py:63 - msgid "Version" - msgstr "" - --#: ../semanage/seobject.py:281 ../gui/statusPage.py:75 -+#: ../semanage/seobject.py:303 ../gui/statusPage.py:75 -+#: ../sepolicy/sepolicy/sepolicy.glade:3449 - msgid "Disabled" - msgstr "" - --#: ../semanage/seobject.py:296 -+#: ../semanage/seobject.py:312 -+#, python-format -+msgid "Module does not exists %s " -+msgstr "" -+ -+#: ../semanage/seobject.py:322 - #, python-format - msgid "Could not disable module %s (remove failed)" - msgstr "" - --#: ../semanage/seobject.py:307 -+#: ../semanage/seobject.py:333 - #, python-format - msgid "Could not enable module %s (remove failed)" - msgstr "" - --#: ../semanage/seobject.py:322 -+#: ../semanage/seobject.py:348 - #, python-format - msgid "Could not remove module %s (remove failed)" - msgstr "" - --#: ../semanage/seobject.py:332 -+#: ../semanage/seobject.py:363 - msgid "dontaudit requires either 'on' or 'off'" - msgstr "" - --#: ../semanage/seobject.py:360 -+#: ../semanage/seobject.py:391 - msgid "Builtin Permissive Types" - msgstr "" - --#: ../semanage/seobject.py:370 -+#: ../semanage/seobject.py:401 - msgid "Customized Permissive Types" - msgstr "" - --#: ../semanage/seobject.py:412 -+#: ../semanage/seobject.py:410 -+msgid "" -+"The sepolgen python module is required to setup permissive domains.\n" -+"In some distributions it is included in the policycoreutils-devel patckage.\n" -+"# yum install policycoreutils-devel\n" -+"Or similar for your distro." -+msgstr "" -+ -+#: ../semanage/seobject.py:447 - #, python-format - msgid "Could not set permissive domain %s (module installation failed)" - msgstr "" - --#: ../semanage/seobject.py:418 -+#: ../semanage/seobject.py:453 - #, python-format - msgid "Could not remove permissive domain %s (remove failed)" - msgstr "" - --#: ../semanage/seobject.py:453 ../semanage/seobject.py:527 --#: ../semanage/seobject.py:573 ../semanage/seobject.py:695 --#: ../semanage/seobject.py:725 ../semanage/seobject.py:792 --#: ../semanage/seobject.py:849 ../semanage/seobject.py:1104 --#: ../semanage/seobject.py:1820 ../semanage/seobject.py:1883 --#: ../semanage/seobject.py:1902 ../semanage/seobject.py:2025 --#: ../semanage/seobject.py:2076 -+#: ../semanage/seobject.py:488 ../semanage/seobject.py:562 -+#: ../semanage/seobject.py:608 ../semanage/seobject.py:730 -+#: ../semanage/seobject.py:760 ../semanage/seobject.py:827 -+#: ../semanage/seobject.py:884 ../semanage/seobject.py:1144 -+#: ../semanage/seobject.py:1879 ../semanage/seobject.py:1942 -+#: ../semanage/seobject.py:1961 ../semanage/seobject.py:2084 -+#: ../semanage/seobject.py:2135 - #, python-format - msgid "Could not create a key for %s" - msgstr "" - --#: ../semanage/seobject.py:457 ../semanage/seobject.py:531 --#: ../semanage/seobject.py:577 ../semanage/seobject.py:583 -+#: ../semanage/seobject.py:492 ../semanage/seobject.py:566 -+#: ../semanage/seobject.py:612 ../semanage/seobject.py:618 - #, python-format - msgid "Could not check if login mapping for %s is defined" - msgstr "" - --#: ../semanage/seobject.py:466 -+#: ../semanage/seobject.py:501 - #, python-format - msgid "Linux Group %s does not exist" - msgstr "" - --#: ../semanage/seobject.py:471 -+#: ../semanage/seobject.py:506 - #, python-format - msgid "Linux User %s does not exist" - msgstr "" - --#: ../semanage/seobject.py:475 -+#: ../semanage/seobject.py:510 - #, python-format - msgid "Could not create login mapping for %s" - msgstr "" - --#: ../semanage/seobject.py:479 ../semanage/seobject.py:740 -+#: ../semanage/seobject.py:514 ../semanage/seobject.py:775 - #, python-format - msgid "Could not set name for %s" - msgstr "" - --#: ../semanage/seobject.py:484 ../semanage/seobject.py:750 -+#: ../semanage/seobject.py:519 ../semanage/seobject.py:785 - #, python-format - msgid "Could not set MLS range for %s" - msgstr "" - --#: ../semanage/seobject.py:488 -+#: ../semanage/seobject.py:523 - #, python-format - msgid "Could not set SELinux user for %s" - msgstr "" - --#: ../semanage/seobject.py:492 -+#: ../semanage/seobject.py:527 - #, python-format - msgid "Could not add login mapping for %s" - msgstr "" - --#: ../semanage/seobject.py:510 -+#: ../semanage/seobject.py:545 - msgid "Requires seuser or serange" - msgstr "" - --#: ../semanage/seobject.py:533 ../semanage/seobject.py:579 -+#: ../semanage/seobject.py:568 ../semanage/seobject.py:614 - #, python-format - msgid "Login mapping for %s is not defined" - msgstr "" - --#: ../semanage/seobject.py:537 -+#: ../semanage/seobject.py:572 - #, python-format - msgid "Could not query seuser for %s" - msgstr "" - --#: ../semanage/seobject.py:551 -+#: ../semanage/seobject.py:586 - #, python-format - msgid "Could not modify login mapping for %s" - msgstr "" - --#: ../semanage/seobject.py:585 -+#: ../semanage/seobject.py:620 - #, python-format - msgid "Login mapping for %s is defined in policy, cannot be deleted" - msgstr "" - --#: ../semanage/seobject.py:589 -+#: ../semanage/seobject.py:624 - #, python-format - msgid "Could not delete login mapping for %s" - msgstr "" - --#: ../semanage/seobject.py:611 ../semanage/seobject.py:644 --#: ../semanage/seobject.py:892 -+#: ../semanage/seobject.py:646 ../semanage/seobject.py:679 -+#: ../semanage/seobject.py:927 - msgid "Could not list login mappings" - msgstr "" - --#: ../semanage/seobject.py:672 ../semanage/seobject.py:684 -+#: ../semanage/seobject.py:707 ../semanage/seobject.py:719 - #: ../gui/system-config-selinux.glade:100 -+#: ../sepolicy/sepolicy/sepolicy.glade:1180 -+#: ../sepolicy/sepolicy/sepolicy.glade:3174 - msgid "Login Name" - msgstr "" - --#: ../semanage/seobject.py:672 ../semanage/seobject.py:684 --#: ../semanage/seobject.py:942 ../semanage/seobject.py:947 -+#: ../semanage/seobject.py:707 ../semanage/seobject.py:719 -+#: ../semanage/seobject.py:977 ../semanage/seobject.py:982 - #: ../gui/system-config-selinux.glade:128 - #: ../gui/system-config-selinux.glade:915 - #: ../gui/system-config-selinux.glade:2285 ../gui/usersPage.py:44 -+#: ../sepolicy/sepolicy/sepolicy.glade:1206 -+#: ../sepolicy/sepolicy/sepolicy.glade:3192 -+#: ../sepolicy/sepolicy/sepolicy.glade:3278 -+#: ../sepolicy/sepolicy/sepolicy.glade:4973 - msgid "SELinux User" - msgstr "" - --#: ../semanage/seobject.py:672 ../gui/system-config-selinux.glade:156 -+#: ../semanage/seobject.py:707 ../gui/system-config-selinux.glade:156 - #: ../gui/system-config-selinux.glade:943 - msgid "MLS/MCS Range" - msgstr "" - --#: ../semanage/seobject.py:672 -+#: ../semanage/seobject.py:707 - msgid "Service" - msgstr "" - --#: ../semanage/seobject.py:698 ../semanage/seobject.py:729 --#: ../semanage/seobject.py:796 ../semanage/seobject.py:853 --#: ../semanage/seobject.py:859 -+#: ../semanage/seobject.py:733 ../semanage/seobject.py:764 -+#: ../semanage/seobject.py:831 ../semanage/seobject.py:888 -+#: ../semanage/seobject.py:894 - #, python-format - msgid "Could not check if SELinux user %s is defined" - msgstr "" - --#: ../semanage/seobject.py:701 ../semanage/seobject.py:802 --#: ../semanage/seobject.py:865 -+#: ../semanage/seobject.py:736 ../semanage/seobject.py:837 -+#: ../semanage/seobject.py:900 - #, python-format - msgid "Could not query user for %s" - msgstr "" - --#: ../semanage/seobject.py:721 -+#: ../semanage/seobject.py:756 - #, python-format - msgid "You must add at least one role for %s" - msgstr "" - --#: ../semanage/seobject.py:736 -+#: ../semanage/seobject.py:771 - #, python-format - msgid "Could not create SELinux user for %s" - msgstr "" - --#: ../semanage/seobject.py:745 -+#: ../semanage/seobject.py:780 - #, python-format --msgid "Could not add role %s for %s" -+msgid "Could not add role %(ROLE)s for %(NAME)s" - msgstr "" - --#: ../semanage/seobject.py:754 -+#: ../semanage/seobject.py:789 - #, python-format - msgid "Could not set MLS level for %s" - msgstr "" - --#: ../semanage/seobject.py:757 -+#: ../semanage/seobject.py:792 - #, python-format --msgid "Could not add prefix %s for %s" -+msgid "Could not add prefix %(ROLE)s for %(PREFIX)s" - msgstr "" - --#: ../semanage/seobject.py:760 -+#: ../semanage/seobject.py:795 - #, python-format - msgid "Could not extract key for %s" - msgstr "" - --#: ../semanage/seobject.py:764 -+#: ../semanage/seobject.py:799 - #, python-format - msgid "Could not add SELinux user %s" - msgstr "" - --#: ../semanage/seobject.py:786 -+#: ../semanage/seobject.py:821 - msgid "Requires prefix, roles, level or range" - msgstr "" - --#: ../semanage/seobject.py:788 -+#: ../semanage/seobject.py:823 - msgid "Requires prefix or roles" - msgstr "" - --#: ../semanage/seobject.py:798 ../semanage/seobject.py:855 -+#: ../semanage/seobject.py:833 ../semanage/seobject.py:890 - #, python-format - msgid "SELinux user %s is not defined" - msgstr "" - --#: ../semanage/seobject.py:827 -+#: ../semanage/seobject.py:862 - #, python-format - msgid "Could not modify SELinux user %s" - msgstr "" - --#: ../semanage/seobject.py:861 -+#: ../semanage/seobject.py:896 - #, python-format - msgid "SELinux user %s is defined in policy, cannot be deleted" - msgstr "" - --#: ../semanage/seobject.py:872 -+#: ../semanage/seobject.py:907 - #, python-format - msgid "Could not delete SELinux user %s" - msgstr "" - --#: ../semanage/seobject.py:910 -+#: ../semanage/seobject.py:945 - msgid "Could not list SELinux users" - msgstr "" - --#: ../semanage/seobject.py:916 -+#: ../semanage/seobject.py:951 - #, python-format - msgid "Could not list roles for user %s" - msgstr "" - --#: ../semanage/seobject.py:941 -+#: ../semanage/seobject.py:976 - msgid "Labeling" - msgstr "" - --#: ../semanage/seobject.py:941 -+#: ../semanage/seobject.py:976 - msgid "MLS/" - msgstr "" - --#: ../semanage/seobject.py:942 -+#: ../semanage/seobject.py:977 - msgid "Prefix" - msgstr "" - --#: ../semanage/seobject.py:942 -+#: ../semanage/seobject.py:977 - msgid "MCS Level" - msgstr "" - --#: ../semanage/seobject.py:942 -+#: ../semanage/seobject.py:977 - msgid "MCS Range" - msgstr "" - --#: ../semanage/seobject.py:942 ../semanage/seobject.py:947 -+#: ../semanage/seobject.py:977 ../semanage/seobject.py:982 - #: ../gui/system-config-selinux.glade:992 ../gui/usersPage.py:59 -+#: ../sepolicy/sepolicy/sepolicy.glade:3298 -+#: ../sepolicy/sepolicy/sepolicy.glade:5309 -+#: ../sepolicy/sepolicy/sepolicy.glade:5458 - msgid "SELinux Roles" - msgstr "" - --#: ../semanage/seobject.py:964 -+#: ../semanage/seobject.py:1002 - msgid "Protocol udp or tcp is required" - msgstr "" - --#: ../semanage/seobject.py:966 -+#: ../semanage/seobject.py:1004 - msgid "Port is required" - msgstr "" - --#: ../semanage/seobject.py:976 -+#: ../semanage/seobject.py:1014 - msgid "Invalid Port" - msgstr "" - --#: ../semanage/seobject.py:980 -+#: ../semanage/seobject.py:1018 - #, python-format --msgid "Could not create a key for %s/%s" -+msgid "Could not create a key for %(PROTOTYPE)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:991 -+#: ../semanage/seobject.py:1029 - msgid "Type is required" - msgstr "" - --#: ../semanage/seobject.py:994 ../semanage/seobject.py:1056 --#: ../semanage/seobject.py:1814 -+#: ../semanage/seobject.py:1032 ../semanage/seobject.py:1096 -+#: ../semanage/seobject.py:1873 - #, python-format - msgid "Type %s is invalid, must be a port type" - msgstr "" - --#: ../semanage/seobject.py:1000 ../semanage/seobject.py:1062 --#: ../semanage/seobject.py:1117 ../semanage/seobject.py:1123 -+#: ../semanage/seobject.py:1040 ../semanage/seobject.py:1157 -+#: ../semanage/seobject.py:1163 - #, python-format --msgid "Could not check if port %s/%s is defined" -+msgid "Could not check if port %(PROTOCOL)s/%(PORT)s is defined" - msgstr "" - --#: ../semanage/seobject.py:1002 -+#: ../semanage/seobject.py:1042 - #, python-format --msgid "Port %s/%s already defined" -+msgid "Port %(PROTOCOL)s/%(PORT)s already defined" - msgstr "" - --#: ../semanage/seobject.py:1006 -+#: ../semanage/seobject.py:1046 - #, python-format --msgid "Could not create port for %s/%s" -+msgid "Could not create port for %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1012 -+#: ../semanage/seobject.py:1052 - #, python-format --msgid "Could not create context for %s/%s" -+msgid "Could not create context for %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1016 -+#: ../semanage/seobject.py:1056 - #, python-format --msgid "Could not set user in port context for %s/%s" -+msgid "Could not set user in port context for %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1020 -+#: ../semanage/seobject.py:1060 - #, python-format --msgid "Could not set role in port context for %s/%s" -+msgid "Could not set role in port context for %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1024 -+#: ../semanage/seobject.py:1064 - #, python-format --msgid "Could not set type in port context for %s/%s" -+msgid "Could not set type in port context for %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1029 -+#: ../semanage/seobject.py:1069 - #, python-format --msgid "Could not set mls fields in port context for %s/%s" -+msgid "Could not set mls fields in port context for %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1033 -+#: ../semanage/seobject.py:1073 - #, python-format --msgid "Could not set port context for %s/%s" -+msgid "Could not set port context for %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1037 -+#: ../semanage/seobject.py:1077 - #, python-format --msgid "Could not add port %s/%s" -+msgid "Could not add port %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1051 ../semanage/seobject.py:1324 --#: ../semanage/seobject.py:1523 -+#: ../semanage/seobject.py:1091 ../semanage/seobject.py:1367 -+#: ../semanage/seobject.py:1566 - msgid "Requires setype or serange" - msgstr "" - --#: ../semanage/seobject.py:1053 -+#: ../semanage/seobject.py:1093 - msgid "Requires setype" - msgstr "" - --#: ../semanage/seobject.py:1064 ../semanage/seobject.py:1119 -+#: ../semanage/seobject.py:1102 -+#, python-format -+msgid "Could not check if port @%(PROTOCOL)s/%(PORT)s is defined" -+msgstr "" -+ -+#: ../semanage/seobject.py:1104 - #, python-format --msgid "Port %s/%s is not defined" -+msgid "Port @%(PROTOCOL)s/%(PORT)s is not defined" - msgstr "" - --#: ../semanage/seobject.py:1068 -+#: ../semanage/seobject.py:1108 - #, python-format --msgid "Could not query port %s/%s" -+msgid "Could not query port %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1079 -+#: ../semanage/seobject.py:1119 - #, python-format --msgid "Could not modify port %s/%s" -+msgid "Could not modify port %(PROTOCOL)s/%(PORT)s" - msgstr "" - --#: ../semanage/seobject.py:1092 -+#: ../semanage/seobject.py:1132 - msgid "Could not list the ports" - msgstr "" - --#: ../semanage/seobject.py:1108 -+#: ../semanage/seobject.py:1148 - #, python-format - msgid "Could not delete the port %s" - msgstr "" - --#: ../semanage/seobject.py:1125 -+#: ../semanage/seobject.py:1159 - #, python-format --msgid "Port %s/%s is defined in policy, cannot be deleted" -+msgid "Port %(PROTOCOL)s/%(PORT)s is not defined" - msgstr "" - --#: ../semanage/seobject.py:1129 -+#: ../semanage/seobject.py:1165 - #, python-format --msgid "Could not delete port %s/%s" -+msgid "Port %(PROTOCOL)s/%(PORT)s is defined in policy, cannot be deleted" - msgstr "" - --#: ../semanage/seobject.py:1145 ../semanage/seobject.py:1167 -+#: ../semanage/seobject.py:1169 -+#, python-format -+msgid "Could not delete port %(PROTOCOL)s/%(PORT)s" -+msgstr "" -+ -+#: ../semanage/seobject.py:1185 ../semanage/seobject.py:1207 - msgid "Could not list ports" - msgstr "" - --#: ../semanage/seobject.py:1206 -+#: ../semanage/seobject.py:1246 ../sepolicy/sepolicy/sepolicy.glade:2694 -+#: ../sepolicy/sepolicy/sepolicy.glade:2792 -+#: ../sepolicy/sepolicy/sepolicy.glade:4706 - msgid "SELinux Port Type" - msgstr "" - --#: ../semanage/seobject.py:1206 -+#: ../semanage/seobject.py:1246 - msgid "Proto" - msgstr "" - --#: ../semanage/seobject.py:1206 ../gui/system-config-selinux.glade:335 -+#: ../semanage/seobject.py:1246 ../gui/system-config-selinux.glade:335 -+#: ../sepolicy/sepolicy/sepolicy.glade:1431 - msgid "Port Number" - msgstr "" - --#: ../semanage/seobject.py:1227 -+#: ../semanage/seobject.py:1270 - msgid "Node Address is required" - msgstr "" - --#: ../semanage/seobject.py:1242 -+#: ../semanage/seobject.py:1285 - msgid "Unknown or missing protocol" - msgstr "" - --#: ../semanage/seobject.py:1256 -+#: ../semanage/seobject.py:1299 - msgid "SELinux node type is required" - msgstr "" - --#: ../semanage/seobject.py:1259 ../semanage/seobject.py:1327 -+#: ../semanage/seobject.py:1302 ../semanage/seobject.py:1370 - #, python-format - msgid "Type %s is invalid, must be a node type" - msgstr "" - --#: ../semanage/seobject.py:1263 ../semanage/seobject.py:1331 --#: ../semanage/seobject.py:1367 ../semanage/seobject.py:1465 --#: ../semanage/seobject.py:1527 ../semanage/seobject.py:1561 --#: ../semanage/seobject.py:1759 -+#: ../semanage/seobject.py:1306 ../semanage/seobject.py:1374 -+#: ../semanage/seobject.py:1410 ../semanage/seobject.py:1508 -+#: ../semanage/seobject.py:1570 ../semanage/seobject.py:1604 -+#: ../semanage/seobject.py:1818 - #, python-format - msgid "Could not create key for %s" - msgstr "" - --#: ../semanage/seobject.py:1265 ../semanage/seobject.py:1335 --#: ../semanage/seobject.py:1371 ../semanage/seobject.py:1377 -+#: ../semanage/seobject.py:1308 ../semanage/seobject.py:1378 -+#: ../semanage/seobject.py:1414 ../semanage/seobject.py:1420 - #, python-format - msgid "Could not check if addr %s is defined" - msgstr "" - --#: ../semanage/seobject.py:1274 -+#: ../semanage/seobject.py:1317 - #, python-format - msgid "Could not create addr for %s" - msgstr "" - --#: ../semanage/seobject.py:1280 ../semanage/seobject.py:1481 --#: ../semanage/seobject.py:1714 -+#: ../semanage/seobject.py:1323 ../semanage/seobject.py:1524 -+#: ../semanage/seobject.py:1767 - #, python-format - msgid "Could not create context for %s" - msgstr "" - --#: ../semanage/seobject.py:1284 -+#: ../semanage/seobject.py:1327 - #, python-format - msgid "Could not set mask for %s" - msgstr "" - --#: ../semanage/seobject.py:1288 -+#: ../semanage/seobject.py:1331 - #, python-format - msgid "Could not set user in addr context for %s" - msgstr "" - --#: ../semanage/seobject.py:1292 -+#: ../semanage/seobject.py:1335 - #, python-format - msgid "Could not set role in addr context for %s" - msgstr "" - --#: ../semanage/seobject.py:1296 -+#: ../semanage/seobject.py:1339 - #, python-format - msgid "Could not set type in addr context for %s" - msgstr "" - --#: ../semanage/seobject.py:1301 -+#: ../semanage/seobject.py:1344 - #, python-format - msgid "Could not set mls fields in addr context for %s" - msgstr "" - --#: ../semanage/seobject.py:1305 -+#: ../semanage/seobject.py:1348 - #, python-format - msgid "Could not set addr context for %s" - msgstr "" - --#: ../semanage/seobject.py:1309 -+#: ../semanage/seobject.py:1352 - #, python-format - msgid "Could not add addr %s" - msgstr "" - --#: ../semanage/seobject.py:1337 ../semanage/seobject.py:1373 -+#: ../semanage/seobject.py:1380 ../semanage/seobject.py:1416 - #, python-format - msgid "Addr %s is not defined" - msgstr "" - --#: ../semanage/seobject.py:1341 -+#: ../semanage/seobject.py:1384 - #, python-format - msgid "Could not query addr %s" - msgstr "" - --#: ../semanage/seobject.py:1351 -+#: ../semanage/seobject.py:1394 - #, python-format - msgid "Could not modify addr %s" - msgstr "" - --#: ../semanage/seobject.py:1379 -+#: ../semanage/seobject.py:1422 - #, python-format - msgid "Addr %s is defined in policy, cannot be deleted" - msgstr "" - --#: ../semanage/seobject.py:1383 -+#: ../semanage/seobject.py:1426 - #, python-format - msgid "Could not delete addr %s" - msgstr "" - --#: ../semanage/seobject.py:1395 -+#: ../semanage/seobject.py:1438 - msgid "Could not deleteall node mappings" - msgstr "" - --#: ../semanage/seobject.py:1409 -+#: ../semanage/seobject.py:1452 - msgid "Could not list addrs" - msgstr "" - --#: ../semanage/seobject.py:1461 ../semanage/seobject.py:1752 -+#: ../semanage/seobject.py:1504 ../semanage/seobject.py:1811 - msgid "SELinux Type is required" - msgstr "" - --#: ../semanage/seobject.py:1469 ../semanage/seobject.py:1531 --#: ../semanage/seobject.py:1565 ../semanage/seobject.py:1571 -+#: ../semanage/seobject.py:1512 ../semanage/seobject.py:1574 -+#: ../semanage/seobject.py:1608 ../semanage/seobject.py:1614 - #, python-format - msgid "Could not check if interface %s is defined" - msgstr "" - --#: ../semanage/seobject.py:1476 -+#: ../semanage/seobject.py:1519 - #, python-format - msgid "Could not create interface for %s" - msgstr "" - --#: ../semanage/seobject.py:1485 -+#: ../semanage/seobject.py:1528 - #, python-format - msgid "Could not set user in interface context for %s" - msgstr "" - --#: ../semanage/seobject.py:1489 -+#: ../semanage/seobject.py:1532 - #, python-format - msgid "Could not set role in interface context for %s" - msgstr "" - --#: ../semanage/seobject.py:1493 -+#: ../semanage/seobject.py:1536 - #, python-format - msgid "Could not set type in interface context for %s" - msgstr "" - --#: ../semanage/seobject.py:1498 -+#: ../semanage/seobject.py:1541 - #, python-format - msgid "Could not set mls fields in interface context for %s" - msgstr "" - --#: ../semanage/seobject.py:1502 -+#: ../semanage/seobject.py:1545 - #, python-format - msgid "Could not set interface context for %s" - msgstr "" - --#: ../semanage/seobject.py:1506 -+#: ../semanage/seobject.py:1549 - #, python-format - msgid "Could not set message context for %s" - msgstr "" - --#: ../semanage/seobject.py:1510 -+#: ../semanage/seobject.py:1553 - #, python-format - msgid "Could not add interface %s" - msgstr "" - --#: ../semanage/seobject.py:1533 ../semanage/seobject.py:1567 -+#: ../semanage/seobject.py:1576 ../semanage/seobject.py:1610 - #, python-format - msgid "Interface %s is not defined" - msgstr "" - --#: ../semanage/seobject.py:1537 -+#: ../semanage/seobject.py:1580 - #, python-format - msgid "Could not query interface %s" - msgstr "" - --#: ../semanage/seobject.py:1548 -+#: ../semanage/seobject.py:1591 - #, python-format - msgid "Could not modify interface %s" - msgstr "" - --#: ../semanage/seobject.py:1573 -+#: ../semanage/seobject.py:1616 - #, python-format - msgid "Interface %s is defined in policy, cannot be deleted" - msgstr "" - --#: ../semanage/seobject.py:1577 -+#: ../semanage/seobject.py:1620 - #, python-format - msgid "Could not delete interface %s" - msgstr "" - --#: ../semanage/seobject.py:1589 -+#: ../semanage/seobject.py:1632 - msgid "Could not delete all interface mappings" - msgstr "" - --#: ../semanage/seobject.py:1603 -+#: ../semanage/seobject.py:1646 - msgid "Could not list interfaces" - msgstr "" - --#: ../semanage/seobject.py:1628 -+#: ../semanage/seobject.py:1671 - msgid "SELinux Interface" - msgstr "" - --#: ../semanage/seobject.py:1628 ../semanage/seobject.py:1974 -+#: ../semanage/seobject.py:1671 ../semanage/seobject.py:2033 - msgid "Context" - msgstr "" - --#: ../semanage/seobject.py:1691 -+#: ../semanage/seobject.py:1738 -+#, python-format -+msgid "Target %s is not valid. Target is not allowed to end with '/'" -+msgstr "" -+ -+#: ../semanage/seobject.py:1741 -+#, python-format -+msgid "Substiture %s is not valid. Substitute is not allowed to end with '/'" -+msgstr "" -+ -+#: ../semanage/seobject.py:1744 - #, python-format - msgid "Equivalence class for %s already exists" - msgstr "" - --#: ../semanage/seobject.py:1697 -+#: ../semanage/seobject.py:1750 - #, python-format --msgid "File spec %s conflicts with equivalency rule '%s %s'" -+msgid "" -+"File spec %(TARGET)s conflicts with equivalency rule '%(SOURCE)s %(DEST)s'" - msgstr "" - --#: ../semanage/seobject.py:1706 -+#: ../semanage/seobject.py:1759 - #, python-format - msgid "Equivalence class for %s does not exists" - msgstr "" - --#: ../semanage/seobject.py:1720 -+#: ../semanage/seobject.py:1773 - #, python-format - msgid "Could not set user in file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1724 -+#: ../semanage/seobject.py:1777 - #, python-format - msgid "Could not set role in file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1729 ../semanage/seobject.py:1789 -+#: ../semanage/seobject.py:1782 ../semanage/seobject.py:1848 - #, python-format - msgid "Could not set mls fields in file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1735 -+#: ../semanage/seobject.py:1788 - msgid "Invalid file specification" - msgstr "" - --#: ../semanage/seobject.py:1737 -+#: ../semanage/seobject.py:1790 - msgid "File specification can not include spaces" - msgstr "" - --#: ../semanage/seobject.py:1742 -+#: ../semanage/seobject.py:1795 - #, python-format - msgid "" --"File spec %s conflicts with equivalency rule '%s %s'; Try adding '%s' instead" -+"File spec %(TARGET)s conflicts with equivalency rule '%(SOURCE)s %(DEST)s'; " -+"Try adding '%(DEST1)s' instead" - msgstr "" - --#: ../semanage/seobject.py:1755 -+#: ../semanage/seobject.py:1814 - #, python-format - msgid "Type %s is invalid, must be a file or device type" - msgstr "" - --#: ../semanage/seobject.py:1763 ../semanage/seobject.py:1768 --#: ../semanage/seobject.py:1824 ../semanage/seobject.py:1906 --#: ../semanage/seobject.py:1910 -+#: ../semanage/seobject.py:1822 ../semanage/seobject.py:1827 -+#: ../semanage/seobject.py:1883 ../semanage/seobject.py:1965 -+#: ../semanage/seobject.py:1969 - #, python-format - msgid "Could not check if file context for %s is defined" - msgstr "" - --#: ../semanage/seobject.py:1776 -+#: ../semanage/seobject.py:1835 - #, python-format - msgid "Could not create file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1784 -+#: ../semanage/seobject.py:1843 - #, python-format - msgid "Could not set type in file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1792 ../semanage/seobject.py:1852 --#: ../semanage/seobject.py:1856 -+#: ../semanage/seobject.py:1851 ../semanage/seobject.py:1911 -+#: ../semanage/seobject.py:1915 - #, python-format - msgid "Could not set file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1798 -+#: ../semanage/seobject.py:1857 - #, python-format - msgid "Could not add file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1812 -+#: ../semanage/seobject.py:1871 - msgid "Requires setype, serange or seuser" - msgstr "" - --#: ../semanage/seobject.py:1828 ../semanage/seobject.py:1914 -+#: ../semanage/seobject.py:1887 ../semanage/seobject.py:1973 - #, python-format - msgid "File context for %s is not defined" - msgstr "" - --#: ../semanage/seobject.py:1834 -+#: ../semanage/seobject.py:1893 - #, python-format - msgid "Could not query file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1860 -+#: ../semanage/seobject.py:1919 - #, python-format - msgid "Could not modify file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1873 -+#: ../semanage/seobject.py:1932 - msgid "Could not list the file contexts" - msgstr "" - --#: ../semanage/seobject.py:1887 -+#: ../semanage/seobject.py:1946 - #, python-format - msgid "Could not delete the file context %s" - msgstr "" - --#: ../semanage/seobject.py:1912 -+#: ../semanage/seobject.py:1971 - #, python-format - msgid "File context for %s is defined in policy, cannot be deleted" - msgstr "" - --#: ../semanage/seobject.py:1918 -+#: ../semanage/seobject.py:1977 - #, python-format - msgid "Could not delete file context for %s" - msgstr "" - --#: ../semanage/seobject.py:1933 -+#: ../semanage/seobject.py:1992 - msgid "Could not list file contexts" - msgstr "" - --#: ../semanage/seobject.py:1937 -+#: ../semanage/seobject.py:1996 - msgid "Could not list local file contexts" - msgstr "" - --#: ../semanage/seobject.py:1974 -+#: ../semanage/seobject.py:2033 - msgid "SELinux fcontext" - msgstr "" - --#: ../semanage/seobject.py:1974 -+#: ../semanage/seobject.py:2033 - msgid "type" - msgstr "" - --#: ../semanage/seobject.py:1987 -+#: ../semanage/seobject.py:2046 - msgid "" - "\n" - "SELinux Distribution fcontext Equivalence \n" - msgstr "" - --#: ../semanage/seobject.py:1992 -+#: ../semanage/seobject.py:2051 - msgid "" - "\n" - "SELinux Local fcontext Equivalence \n" - msgstr "" - --#: ../semanage/seobject.py:2028 ../semanage/seobject.py:2079 --#: ../semanage/seobject.py:2085 -+#: ../semanage/seobject.py:2087 ../semanage/seobject.py:2138 -+#: ../semanage/seobject.py:2144 - #, python-format - msgid "Could not check if boolean %s is defined" - msgstr "" - --#: ../semanage/seobject.py:2030 ../semanage/seobject.py:2081 -+#: ../semanage/seobject.py:2089 ../semanage/seobject.py:2140 - #, python-format - msgid "Boolean %s is not defined" - msgstr "" - --#: ../semanage/seobject.py:2034 -+#: ../semanage/seobject.py:2093 - #, python-format - msgid "Could not query file context %s" - msgstr "" - --#: ../semanage/seobject.py:2039 -+#: ../semanage/seobject.py:2098 - #, python-format - msgid "You must specify one of the following values: %s" - msgstr "" - --#: ../semanage/seobject.py:2044 -+#: ../semanage/seobject.py:2103 - #, python-format - msgid "Could not set active value of boolean %s" - msgstr "" - --#: ../semanage/seobject.py:2047 -+#: ../semanage/seobject.py:2106 - #, python-format - msgid "Could not modify boolean %s" - msgstr "" - --#: ../semanage/seobject.py:2063 -+#: ../semanage/seobject.py:2122 - #, python-format --msgid "Bad format %s: Record %s" -+msgid "Bad format %(BOOLNAME)s: Record %(VALUE)s" - msgstr "" - --#: ../semanage/seobject.py:2087 -+#: ../semanage/seobject.py:2146 - #, python-format - msgid "Boolean %s is defined in policy, cannot be deleted" - msgstr "" - --#: ../semanage/seobject.py:2091 -+#: ../semanage/seobject.py:2150 - #, python-format - msgid "Could not delete boolean %s" - msgstr "" - --#: ../semanage/seobject.py:2103 ../semanage/seobject.py:2120 -+#: ../semanage/seobject.py:2162 ../semanage/seobject.py:2179 - msgid "Could not list booleans" - msgstr "" - --#: ../semanage/seobject.py:2155 -+#: ../semanage/seobject.py:2214 - msgid "off" - msgstr "" - --#: ../semanage/seobject.py:2155 -+#: ../semanage/seobject.py:2214 - msgid "on" - msgstr "" - --#: ../semanage/seobject.py:2169 -+#: ../semanage/seobject.py:2228 - msgid "SELinux boolean" - msgstr "" - --#: ../semanage/seobject.py:2169 -+#: ../semanage/seobject.py:2228 - msgid "State" - msgstr "" - --#: ../semanage/seobject.py:2169 -+#: ../semanage/seobject.py:2228 - msgid "Default" - msgstr "" - --#: ../semanage/seobject.py:2169 ../gui/polgen.glade:113 --#: ../gui/polgengui.py:269 -+#: ../semanage/seobject.py:2228 ../gui/polgen.glade:113 -+#: ../gui/polgengui.py:274 ../sepolicy/sepolicy/sepolicy.glade:2166 -+#: ../sepolicy/sepolicy/sepolicy.glade:2536 -+#: ../sepolicy/sepolicy/sepolicy.glade:5175 - msgid "Description" - msgstr "" - -@@ -988,206 +1039,226 @@ msgstr "" - msgid "Unable to clear environment\n" - msgstr "" - --#: ../newrole/newrole.c:556 ../newrole/newrole.c:587 ../newrole/newrole.c:617 -+#: ../newrole/newrole.c:554 ../newrole/newrole.c:585 ../newrole/newrole.c:616 - #, c-format - msgid "Error changing uid, aborting.\n" - msgstr "" - --#: ../newrole/newrole.c:612 -+#: ../newrole/newrole.c:611 - #, c-format - msgid "Error resetting KEEPCAPS, aborting\n" - msgstr "" - --#: ../newrole/newrole.c:635 -+#: ../newrole/newrole.c:634 - #, c-format - msgid "Error connecting to audit system.\n" - msgstr "" - --#: ../newrole/newrole.c:641 -+#: ../newrole/newrole.c:640 - #, c-format - msgid "Error allocating memory.\n" - msgstr "" - --#: ../newrole/newrole.c:648 -+#: ../newrole/newrole.c:647 - #, c-format - msgid "Error sending audit message.\n" - msgstr "" - --#: ../newrole/newrole.c:692 ../newrole/newrole.c:1058 -+#: ../newrole/newrole.c:691 ../newrole/newrole.c:1063 - #, c-format - msgid "Could not determine enforcing mode.\n" - msgstr "" - --#: ../newrole/newrole.c:699 -+#: ../newrole/newrole.c:698 - #, c-format - msgid "Error! Could not open %s.\n" - msgstr "" - --#: ../newrole/newrole.c:705 -+#: ../newrole/newrole.c:704 -+#, c-format -+msgid "Error! Could not clear O_NONBLOCK on %s\n" -+msgstr "" -+ -+#: ../newrole/newrole.c:710 - #, c-format - msgid "%s! Could not get current context for %s, not relabeling tty.\n" - msgstr "" - --#: ../newrole/newrole.c:715 -+#: ../newrole/newrole.c:720 - #, c-format - msgid "%s! Could not get new context for %s, not relabeling tty.\n" - msgstr "" - --#: ../newrole/newrole.c:725 -+#: ../newrole/newrole.c:730 - #, c-format - msgid "%s! Could not set new context for %s\n" - msgstr "" - --#: ../newrole/newrole.c:772 -+#: ../newrole/newrole.c:777 - #, c-format - msgid "%s changed labels.\n" - msgstr "" - --#: ../newrole/newrole.c:778 -+#: ../newrole/newrole.c:783 - #, c-format - msgid "Warning! Could not restore context for %s\n" - msgstr "" - --#: ../newrole/newrole.c:835 -+#: ../newrole/newrole.c:840 - #, c-format - msgid "Error: multiple roles specified\n" - msgstr "" - --#: ../newrole/newrole.c:843 -+#: ../newrole/newrole.c:848 - #, c-format - msgid "Error: multiple types specified\n" - msgstr "" - --#: ../newrole/newrole.c:850 -+#: ../newrole/newrole.c:855 - #, c-format - msgid "Sorry, -l may be used with SELinux MLS support.\n" - msgstr "" - --#: ../newrole/newrole.c:855 -+#: ../newrole/newrole.c:860 - #, c-format - msgid "Error: multiple levels specified\n" - msgstr "" - --#: ../newrole/newrole.c:865 -+#: ../newrole/newrole.c:870 - #, c-format - msgid "Error: you are not allowed to change levels on a non secure terminal \n" - msgstr "" - --#: ../newrole/newrole.c:891 -+#: ../newrole/newrole.c:896 - #, c-format - msgid "Couldn't get default type.\n" - msgstr "" - --#: ../newrole/newrole.c:901 -+#: ../newrole/newrole.c:906 - #, c-format - msgid "failed to get new context.\n" - msgstr "" - --#: ../newrole/newrole.c:908 -+#: ../newrole/newrole.c:913 - #, c-format - msgid "failed to set new role %s\n" - msgstr "" - --#: ../newrole/newrole.c:915 -+#: ../newrole/newrole.c:920 - #, c-format - msgid "failed to set new type %s\n" - msgstr "" - --#: ../newrole/newrole.c:925 -+#: ../newrole/newrole.c:930 - #, c-format - msgid "failed to build new range with level %s\n" - msgstr "" - --#: ../newrole/newrole.c:930 -+#: ../newrole/newrole.c:935 - #, c-format - msgid "failed to set new range %s\n" - msgstr "" - --#: ../newrole/newrole.c:938 -+#: ../newrole/newrole.c:943 - #, c-format - msgid "failed to convert new context to string\n" - msgstr "" - --#: ../newrole/newrole.c:943 -+#: ../newrole/newrole.c:948 - #, c-format - msgid "%s is not a valid context\n" - msgstr "" - --#: ../newrole/newrole.c:950 -+#: ../newrole/newrole.c:955 - #, c-format - msgid "Unable to allocate memory for new_context" - msgstr "" - --#: ../newrole/newrole.c:976 -+#: ../newrole/newrole.c:981 - #, c-format - msgid "Unable to obtain empty signal set\n" - msgstr "" - --#: ../newrole/newrole.c:984 -+#: ../newrole/newrole.c:989 - #, c-format - msgid "Unable to set SIGHUP handler\n" - msgstr "" - --#: ../newrole/newrole.c:1036 -+#: ../newrole/newrole.c:1041 - msgid "Sorry, newrole failed to drop capabilities\n" - msgstr "" - --#: ../newrole/newrole.c:1052 -+#: ../newrole/newrole.c:1057 - #, c-format - msgid "Sorry, newrole may be used only on a SELinux kernel.\n" - msgstr "" - --#: ../newrole/newrole.c:1069 -+#: ../newrole/newrole.c:1074 - #, c-format - msgid "failed to get old_context.\n" - msgstr "" - --#: ../newrole/newrole.c:1076 -+#: ../newrole/newrole.c:1081 - #, c-format - msgid "Warning! Could not retrieve tty information.\n" - msgstr "" - --#: ../newrole/newrole.c:1097 -+#: ../newrole/newrole.c:1102 - #, c-format - msgid "error on reading PAM service configuration.\n" - msgstr "" - --#: ../newrole/newrole.c:1132 -+#: ../newrole/newrole.c:1137 - #, c-format - msgid "newrole: incorrect password for %s\n" - msgstr "" - --#: ../newrole/newrole.c:1159 -+#: ../newrole/newrole.c:1164 - #, c-format - msgid "newrole: failure forking: %s" - msgstr "" - --#: ../newrole/newrole.c:1162 ../newrole/newrole.c:1185 -+#: ../newrole/newrole.c:1167 ../newrole/newrole.c:1190 - #, c-format - msgid "Unable to restore tty label...\n" - msgstr "" - --#: ../newrole/newrole.c:1164 ../newrole/newrole.c:1191 -+#: ../newrole/newrole.c:1169 ../newrole/newrole.c:1196 - #, c-format - msgid "Failed to close tty properly\n" - msgstr "" - --#: ../newrole/newrole.c:1223 -+#: ../newrole/newrole.c:1228 - #, c-format - msgid "Could not close descriptors.\n" - msgstr "" - --#: ../newrole/newrole.c:1250 -+#: ../newrole/newrole.c:1263 - #, c-format - msgid "Error allocating shell's argv0.\n" - msgstr "" - --#: ../newrole/newrole.c:1286 -+#: ../newrole/newrole.c:1285 -+#, c-format -+msgid "Failed to send audit message" -+msgstr "" -+ -+#: ../newrole/newrole.c:1293 -+#, c-format -+msgid "Failed to transition to namespace\n" -+msgstr "" -+ -+#: ../newrole/newrole.c:1299 -+#, c-format -+msgid "Failed to drop capabilities %m\n" -+msgstr "" -+ -+#: ../newrole/newrole.c:1304 - #, c-format - msgid "Unable to restore the environment, aborting\n" - msgstr "" - --#: ../newrole/newrole.c:1297 -+#: ../newrole/newrole.c:1315 - msgid "failed to exec shell\n" - msgstr "" - -@@ -1414,7 +1485,7 @@ msgstr "" - msgid "Applications" - msgstr "" - --#: ../gui/polgen.glade:316 ../sepolicy/sepolicy/generate.py:171 -+#: ../gui/polgen.glade:316 ../sepolicy/sepolicy/generate.py:130 - msgid "Standard Init Daemon" - msgstr "" - -@@ -1424,7 +1495,7 @@ msgid "" - "requires a script in /etc/rc.d/init.d" - msgstr "" - --#: ../gui/polgen.glade:332 ../sepolicy/sepolicy/generate.py:172 -+#: ../gui/polgen.glade:332 ../sepolicy/sepolicy/generate.py:131 - msgid "DBUS System Daemon" - msgstr "" - -@@ -1436,7 +1507,7 @@ msgstr "" - msgid "Internet Services Daemon are daemons started by xinetd" - msgstr "" - --#: ../gui/polgen.glade:366 ../sepolicy/sepolicy/generate.py:174 -+#: ../gui/polgen.glade:366 ../sepolicy/sepolicy/generate.py:133 - msgid "Web Application/Script (CGI)" - msgstr "" - -@@ -1445,7 +1516,7 @@ msgid "" - "Web Applications/Script (CGI) CGI scripts started by the web server (apache)" - msgstr "" - --#: ../gui/polgen.glade:383 ../sepolicy/sepolicy/generate.py:176 -+#: ../gui/polgen.glade:383 ../sepolicy/sepolicy/generate.py:135 - msgid "User Application" - msgstr "" - -@@ -1455,7 +1526,7 @@ msgid "" - "started by a user" - msgstr "" - --#: ../gui/polgen.glade:400 ../sepolicy/sepolicy/generate.py:175 -+#: ../gui/polgen.glade:400 ../sepolicy/sepolicy/generate.py:134 - msgid "Sandbox" - msgstr "" - -@@ -1530,7 +1601,8 @@ msgstr "" - msgid "Enter name of application or user role:" - msgstr "" - --#: ../gui/polgen.glade:728 ../gui/polgengui.py:267 -+#: ../gui/polgen.glade:728 ../gui/polgengui.py:272 -+#: ../sepolicy/sepolicy/sepolicy.glade:2201 - msgid "Name" - msgstr "" - -@@ -1614,7 +1686,7 @@ msgid "TCP Ports" - msgstr "" - - #: ../gui/polgen.glade:1223 ../gui/polgen.glade:1390 ../gui/polgen.glade:1589 --#: ../gui/polgen.glade:1698 -+#: ../gui/polgen.glade:1698 ../sepolicy/sepolicy/sepolicy.glade:4333 - msgid "All" - msgstr "" - -@@ -1745,75 +1817,75 @@ msgstr "" - msgid "Policy Directory" - msgstr "" - --#: ../gui/polgengui.py:277 -+#: ../gui/polgengui.py:282 - msgid "Role" - msgstr "" - --#: ../gui/polgengui.py:284 -+#: ../gui/polgengui.py:289 - msgid "Existing_User" - msgstr "" - --#: ../gui/polgengui.py:298 ../gui/polgengui.py:306 ../gui/polgengui.py:320 -+#: ../gui/polgengui.py:303 ../gui/polgengui.py:311 ../gui/polgengui.py:325 - msgid "Application" - msgstr "" - --#: ../gui/polgengui.py:363 -+#: ../gui/polgengui.py:370 - #, python-format - msgid "%s must be a directory" - msgstr "" - --#: ../gui/polgengui.py:423 ../gui/polgengui.py:704 -+#: ../gui/polgengui.py:430 ../gui/polgengui.py:711 - msgid "You must select a user" - msgstr "" - --#: ../gui/polgengui.py:553 -+#: ../gui/polgengui.py:560 - msgid "Select executable file to be confined." - msgstr "" - --#: ../gui/polgengui.py:564 -+#: ../gui/polgengui.py:571 - msgid "Select init script file to be confined." - msgstr "" - --#: ../gui/polgengui.py:574 -+#: ../gui/polgengui.py:581 - msgid "Select file(s) that confined application creates or writes" - msgstr "" - --#: ../gui/polgengui.py:581 -+#: ../gui/polgengui.py:588 - msgid "Select directory(s) that the confined application owns and writes into" - msgstr "" - --#: ../gui/polgengui.py:643 -+#: ../gui/polgengui.py:650 - msgid "Select directory to generate policy files in" - msgstr "" - --#: ../gui/polgengui.py:660 -+#: ../gui/polgengui.py:667 - #, python-format - msgid "" - "Type %s_t already defined in current policy.\n" - "Do you want to continue?" - msgstr "" - --#: ../gui/polgengui.py:660 ../gui/polgengui.py:664 -+#: ../gui/polgengui.py:667 ../gui/polgengui.py:671 - msgid "Verify Name" - msgstr "" - --#: ../gui/polgengui.py:664 -+#: ../gui/polgengui.py:671 - #, python-format - msgid "" - "Module %s.pp already loaded in current policy.\n" - "Do you want to continue?" - msgstr "" - --#: ../gui/polgengui.py:710 -+#: ../gui/polgengui.py:717 - msgid "" - "You must add a name made up of letters and numbers and containing no spaces." - msgstr "" - --#: ../gui/polgengui.py:724 -+#: ../gui/polgengui.py:731 - msgid "You must enter a executable" - msgstr "" - --#: ../gui/polgengui.py:749 ../gui/system-config-selinux.py:180 -+#: ../gui/polgengui.py:756 ../gui/system-config-selinux.py:180 - msgid "Configue SELinux" - msgstr "" - -@@ -1828,6 +1900,10 @@ msgid "" - msgstr "" - - #: ../gui/portsPage.py:91 ../gui/system-config-selinux.glade:363 -+#: ../sepolicy/sepolicy/sepolicy.glade:1457 -+#: ../sepolicy/sepolicy/sepolicy.glade:2676 -+#: ../sepolicy/sepolicy/sepolicy.glade:2774 -+#: ../sepolicy/sepolicy/sepolicy.glade:4691 - msgid "Protocol" - msgstr "" - -@@ -1837,7 +1913,9 @@ msgid "" - "Level" - msgstr "" - --#: ../gui/portsPage.py:101 -+#: ../gui/portsPage.py:101 ../sepolicy/sepolicy/sepolicy.glade:2657 -+#: ../sepolicy/sepolicy/sepolicy.glade:2756 -+#: ../sepolicy/sepolicy/sepolicy.glade:4677 - msgid "Port" - msgstr "" - -@@ -1875,10 +1953,14 @@ msgid "Modify %s" - msgstr "" - - #: ../gui/statusPage.py:69 ../gui/system-config-selinux.glade:2819 -+#: ../sepolicy/sepolicy/sepolicy.glade:3432 -+#: ../sepolicy/sepolicy/sepolicy.glade:3505 - msgid "Permissive" - msgstr "" - - #: ../gui/statusPage.py:70 ../gui/system-config-selinux.glade:2837 -+#: ../sepolicy/sepolicy/sepolicy.glade:3413 -+#: ../sepolicy/sepolicy/sepolicy.glade:3487 - msgid "Enforcing" - msgstr "" - -@@ -1886,7 +1968,7 @@ msgstr "" - msgid "Status" - msgstr "" - --#: ../gui/statusPage.py:133 -+#: ../gui/statusPage.py:133 ../sepolicy/sepolicy/gui.py:2661 - msgid "" - "Changing the policy type will cause a relabel of the entire file system on " - "the next boot. Relabeling takes a long time depending on the size of the " -@@ -1903,7 +1985,7 @@ msgid "" - "wish to continue?" - msgstr "" - --#: ../gui/statusPage.py:152 -+#: ../gui/statusPage.py:152 ../sepolicy/sepolicy/gui.py:2795 - msgid "" - "Changing to SELinux enabled will cause a relabel of the entire file system " - "on the next boot. Relabeling takes a long time depending on the size of the " -@@ -1955,6 +2037,8 @@ msgid "" - msgstr "" - - #: ../gui/system-config-selinux.glade:773 -+#: ../sepolicy/sepolicy/sepolicy.glade:729 -+#: ../sepolicy/sepolicy/sepolicy.glade:1503 - msgid "MLS" - msgstr "" - -@@ -1967,6 +2051,7 @@ msgid "SELinux Administration" - msgstr "" - - #: ../gui/system-config-selinux.glade:1122 -+#: ../sepolicy/sepolicy/sepolicy.glade:4181 - msgid "Add" - msgstr "" - -@@ -2036,6 +2121,7 @@ msgstr "" - #: ../gui/system-config-selinux.glade:2467 - #: ../gui/system-config-selinux.glade:2692 - #: ../gui/system-config-selinux.glade:2867 -+#: ../sepolicy/sepolicy/sepolicy.glade:2011 - msgid "Filter" - msgstr "" - -@@ -2159,1315 +2245,2917 @@ msgstr "" - msgid "SELinux user '%s' is required" - msgstr "" - --#: ../sepolicy/sepolicy.py:202 --msgid "Generate SELinux man pages" -+#: booleans.py:1 -+msgid "" -+"Allow ABRT to modify public files used for public file transfer services." - msgstr "" - --#: ../sepolicy/sepolicy.py:205 --msgid "path in which the generated SELinux man pages will be stored" -+#: booleans.py:2 -+msgid "" -+"Allow ABRT to run in abrt_handle_event_t domain to handle ABRT event scripts" - msgstr "" - --#: ../sepolicy/sepolicy.py:207 --msgid "name of the OS for man pages" -+#: booleans.py:3 -+msgid "" -+"Allow abrt-handle-upload to modify public files used for public file " -+"transfer services in /var/spool/abrt-upload/." - msgstr "" - --#: ../sepolicy/sepolicy.py:209 --msgid "Generate HTML man pages structure for selected SELinux man page" -+#: booleans.py:4 -+msgid "Allow antivirus programs to read non security files on a system" - msgstr "" - --#: ../sepolicy/sepolicy.py:213 --msgid "All domains" -+#: booleans.py:5 -+msgid "Determine whether can antivirus programs use JIT compiler." - msgstr "" - --#: ../sepolicy/sepolicy.py:216 --msgid "Domain name(s) of man pages to be created" -+#: booleans.py:6 -+msgid "Allow auditadm to exec content" - msgstr "" - --#: ../sepolicy/sepolicy.py:221 --msgid "Query SELinux policy network information" -+#: booleans.py:7 -+msgid "" -+"Allow users to resolve user passwd entries directly from ldap rather then " -+"using a sssd server" - msgstr "" - --#: ../sepolicy/sepolicy.py:226 --msgid "list all SELinux port types" -+#: booleans.py:8 -+msgid "Allow users to login using a radius server" - msgstr "" - --#: ../sepolicy/sepolicy.py:229 --msgid "show SELinux type related to the port" -+#: booleans.py:9 -+msgid "Allow users to login using a yubikey server" - msgstr "" - --#: ../sepolicy/sepolicy.py:232 --msgid "Show ports defined for this SELinux type" -+#: booleans.py:10 -+msgid "Determine whether awstats can purge httpd log files." - msgstr "" - --#: ../sepolicy/sepolicy.py:235 --msgid "show ports to which this domain can bind and/or connect" -+#: booleans.py:11 -+msgid "Allow boinc_domain execmem/execstack." - msgstr "" - --#: ../sepolicy/sepolicy.py:250 --msgid "query SELinux policy to see if domains can communicate with each other" -+#: booleans.py:12 -+msgid "" -+"Determine whether cdrecord can read various content. nfs, samba, removable " -+"devices, user temp and untrusted content files" - msgstr "" - --#: ../sepolicy/sepolicy.py:253 --msgid "Source Domain" -+#: booleans.py:13 -+msgid "" -+"Allow cluster administrative domains to connect to the network using TCP." - msgstr "" - --#: ../sepolicy/sepolicy.py:256 --msgid "Target Domain" -+#: booleans.py:14 -+msgid "Allow cluster administrative domains to manage all files on a system." - msgstr "" - --#: ../sepolicy/sepolicy.py:276 --msgid "query SELinux Policy to see description of booleans" -+#: booleans.py:15 -+msgid "" -+"Allow cluster administrative cluster domains memcheck-amd64- to use " -+"executable memory" - msgstr "" - --#: ../sepolicy/sepolicy.py:280 --msgid "get all booleans descriptions" -+#: booleans.py:16 -+msgid "" -+"Determine whether Cobbler can modify public files used for public file " -+"transfer services." - msgstr "" - --#: ../sepolicy/sepolicy.py:282 --msgid "boolean to get description" -+#: booleans.py:17 -+msgid "Determine whether Cobbler can connect to the network using TCP." - msgstr "" - --#: ../sepolicy/sepolicy.py:301 --msgid "" --"query SELinux Policy to see how a source process domain can transition to " --"the target process domain" -+#: booleans.py:18 -+msgid "Determine whether Cobbler can access cifs file systems." - msgstr "" - --#: ../sepolicy/sepolicy.py:304 --msgid "source process domain" -+#: booleans.py:19 -+msgid "Determine whether Cobbler can access nfs file systems." - msgstr "" - --#: ../sepolicy/sepolicy.py:307 --msgid "target process domain" -+#: booleans.py:20 -+msgid "Determine whether collectd can connect to the network using TCP." - msgstr "" - --#: ../sepolicy/sepolicy.py:327 --msgid "Command required for this type of policy" -+#: booleans.py:21 -+msgid "Determine whether Condor can connect to the network using TCP." - msgstr "" - --#: ../sepolicy/sepolicy.py:347 --msgid "List SELinux Policy interfaces" -+#: booleans.py:22 -+msgid "" -+"Allow system cron jobs to relabel filesystem for restoring file contexts." - msgstr "" - --#: ../sepolicy/sepolicy.py:362 --msgid "Generate SELinux Policy module template" -+#: booleans.py:23 -+msgid "Determine whether cvs can read shadow password files." - msgstr "" - --#: ../sepolicy/sepolicy.py:365 --msgid "Enter domain type which you will be extending" -+#: booleans.py:24 -+msgid "Allow all daemons to write corefiles to /" - msgstr "" - --#: ../sepolicy/sepolicy.py:368 --msgid "Enter SELinux user(s) which will transition to this domain" -+#: booleans.py:25 -+msgid "Allow all daemons to use tcp wrappers." - msgstr "" - --#: ../sepolicy/sepolicy.py:371 --msgid "Enter domain(s) that this confined admin will administrate" -+#: booleans.py:26 -+msgid "Allow all daemons the ability to read/write terminals" - msgstr "" - --#: ../sepolicy/sepolicy.py:374 --msgid "name of policy to generate" -+#: booleans.py:27 -+msgid "Determine whether dbadm can manage generic user files." - msgstr "" - --#: ../sepolicy/sepolicy.py:378 --msgid "path in which the generated policy files will be stored" -+#: booleans.py:28 -+msgid "Determine whether dbadm can read generic user files." - msgstr "" - --#: ../sepolicy/sepolicy.py:380 --msgid "executable to confine" -+#: booleans.py:29 -+msgid "" -+"Deny user domains applications to map a memory region as both executable and " -+"writable, this is dangerous and the executable should be reported in bugzilla" - msgstr "" - --#: ../sepolicy/sepolicy.py:384 ../sepolicy/sepolicy.py:387 --#: ../sepolicy/sepolicy.py:390 ../sepolicy/sepolicy.py:393 --#: ../sepolicy/sepolicy.py:396 ../sepolicy/sepolicy.py:399 --#: ../sepolicy/sepolicy.py:402 ../sepolicy/sepolicy.py:405 --#: ../sepolicy/sepolicy.py:408 ../sepolicy/sepolicy.py:411 --#: ../sepolicy/sepolicy.py:414 ../sepolicy/sepolicy.py:417 --#, python-format --msgid "Generate Policy for %s" -+#: booleans.py:30 -+msgid "Deny any process from ptracing or debugging any other processes." - msgstr "" - --#: ../sepolicy/sepolicy.py:422 --msgid "commands" -+#: booleans.py:31 -+msgid "Allow dhcpc client applications to execute iptables commands" - msgstr "" - --#: ../sepolicy/sepolicy.py:425 --msgid "Alternate SELinux policy, defaults to /sys/fs/selinux/policy" -+#: booleans.py:32 -+msgid "Determine whether DHCP daemon can use LDAP backends." - msgstr "" - --#: ../sepolicy/sepolicy/__init__.py:48 --msgid "No SELinux Policy installed" -+#: booleans.py:33 -+msgid "Allow all domains to use other domains file descriptors" - msgstr "" - --#: ../sepolicy/sepolicy/__init__.py:54 --#, python-format --msgid "Failed to read %s policy file" -+#: booleans.py:34 -+msgid "Allow all domains to have the kernel load modules" - msgstr "" - --#: ../sepolicy/sepolicy/__init__.py:127 --msgid "unknown" -+#: booleans.py:35 -+msgid "" -+"Determine whether entropyd can use audio devices as the source for the " -+"entropy feeds." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:173 --msgid "Internet Services Daemon" -+#: booleans.py:36 -+msgid "Determine whether exim can connect to databases." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:177 --msgid "Existing Domain Type" -+#: booleans.py:37 -+msgid "" -+"Determine whether exim can create, read, write, and delete generic user " -+"content files." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:178 --msgid "Minimal Terminal Login User Role" -+#: booleans.py:38 -+msgid "Determine whether exim can read generic user content files." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:179 --msgid "Minimal X Windows Login User Role" -+#: booleans.py:39 -+msgid "Enable extra rules in the cron domain to support fcron." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:180 --msgid "Desktop Login User Role" -+#: booleans.py:40 -+msgid "Determine whether fenced can connect to the TCP network." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:181 --msgid "Administrator Login User Role" -+#: booleans.py:41 -+msgid "Determine whether fenced can use ssh." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:182 --msgid "Confined Root Administrator Role" -+#: booleans.py:42 -+msgid "Allow all domains to execute in fips_mode" - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:187 --msgid "Valid Types:\n" -+#: booleans.py:43 -+msgid "" -+"Determine whether ftpd can read and write files in user home directories." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:221 --#, python-format --msgid "Ports must be numbers or ranges of numbers from 1 to %d " -+#: booleans.py:44 -+msgid "" -+"Determine whether ftpd can modify public files used for public file transfer " -+"services. Directories/Files must be labeled public_content_rw_t." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:231 --msgid "You must enter a valid policy type" -+#: booleans.py:45 -+msgid "Determine whether ftpd can connect to all unreserved ports." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:234 --#, python-format --msgid "You must enter a name for your policy module for your %s." -+#: booleans.py:46 -+msgid "Determine whether ftpd can connect to databases over the TCP network." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:355 -+#: booleans.py:47 - msgid "" --"Name must be alpha numberic with no spaces. Consider using option \"-n " --"MODULENAME\"" -+"Determine whether ftpd can login to local users and can read and write all " -+"files on the system, governed by DAC." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:447 --msgid "User Role types can not be assigned executables." -+#: booleans.py:48 -+msgid "" -+"Determine whether ftpd can use CIFS used for public file transfer services." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:453 --msgid "Only Daemon apps can use an init script.." -+#: booleans.py:49 -+msgid "Allow ftpd to use ntfs/fusefs volumes." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:471 --msgid "use_resolve must be a boolean value " -+#: booleans.py:50 -+msgid "" -+"Determine whether ftpd can use NFS used for public file transfer services." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:477 --msgid "use_syslog must be a boolean value " -+#: booleans.py:51 -+msgid "" -+"Determine whether ftpd can bind to all unreserved ports for passive mode." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:483 --msgid "use_kerberos must be a boolean value " -+#: booleans.py:52 -+msgid "Determine whether Git CGI can search home directories." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:489 --msgid "manage_krb5_rcache must be a boolean value " -+#: booleans.py:53 -+msgid "Determine whether Git CGI can access cifs file systems." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:519 --msgid "USER Types automatically get a tmp type" -+#: booleans.py:54 -+msgid "Determine whether Git CGI can access nfs file systems." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:857 --#, python-format --msgid "%s policy modules require existing domains" -+#: booleans.py:55 -+msgid "" -+"Determine whether Git session daemon can bind TCP sockets to all unreserved " -+"ports." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:1059 --msgid "You must enter the executable path for your confined process" -+#: booleans.py:56 -+msgid "" -+"Determine whether calling user domains can execute Git daemon in the " -+"git_session_t domain." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:1321 --msgid "Type Enforcement file" -+#: booleans.py:57 -+msgid "Determine whether Git system daemon can search home directories." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:1322 --msgid "Interface file" -+#: booleans.py:58 -+msgid "Determine whether Git system daemon can access cifs file systems." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:1323 --msgid "File Contexts file" -+#: booleans.py:59 -+msgid "Determine whether Git system daemon can access nfs file systems." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:1324 --msgid "Spec file" -+#: booleans.py:60 -+msgid "Determine whether Gitosis can send mail." - msgstr "" - --#: ../sepolicy/sepolicy/generate.py:1325 --msgid "Setup Script" -+#: booleans.py:61 -+msgid "Enable reading of urandom for all domains." - msgstr "" - --#: booleans.py:1 -+#: booleans.py:62 - msgid "" --"Allow ABRT to modify public files used for public file transfer services." -+"Allow glusterfsd to modify public files used for public file transfer " -+"services. Files/Directories must be labeled public_content_rw_t." - msgstr "" - --#: booleans.py:2 --msgid "" --"Allow ABRT to run in abrt_handle_event_t domain to handle ABRT event scripts" -+#: booleans.py:63 -+msgid "Allow glusterfsd to share any file/directory read only." - msgstr "" - --#: booleans.py:3 --msgid "Allow amavis to use JIT compiler" -+#: booleans.py:64 -+msgid "Allow glusterfsd to share any file/directory read/write." - msgstr "" - --#: booleans.py:4 --msgid "Allow antivirus programs to read non security files on a system" -+#: booleans.py:65 -+msgid "" -+"Allow usage of the gpg-agent --write-env-file option. This also allows gpg-" -+"agent to manage user files." - msgstr "" - --#: booleans.py:5 --msgid "Allow auditadm to exec content" --msgstr "" -+#: booleans.py:66 -+msgid "" -+"Allow gpg web domain to modify public files used for public file transfer " -+"services." -+msgstr "" -+ -+#: booleans.py:67 -+msgid "" -+"Allow gssd to list tmp directories and read the kerberos credential cache." -+msgstr "" -+ -+#: booleans.py:68 -+msgid "Allow guest to exec content" -+msgstr "" -+ -+#: booleans.py:69 -+msgid "" -+"Allow Apache to modify public files used for public file transfer services. " -+"Directories/Files must be labeled public_content_rw_t." -+msgstr "" -+ -+#: booleans.py:70 -+msgid "Allow httpd to use built in scripting (usually php)" -+msgstr "" -+ -+#: booleans.py:71 -+msgid "Allow http daemon to check spam" -+msgstr "" -+ -+#: booleans.py:72 -+msgid "" -+"Allow httpd to act as a FTP client connecting to the ftp port and ephemeral " -+"ports" -+msgstr "" -+ -+#: booleans.py:73 -+msgid "Allow httpd to connect to the ldap port" -+msgstr "" -+ -+#: booleans.py:74 -+msgid "Allow http daemon to connect to mythtv" -+msgstr "" -+ -+#: booleans.py:75 -+msgid "Allow http daemon to connect to zabbix" -+msgstr "" -+ -+#: booleans.py:76 -+msgid "Allow HTTPD scripts and modules to connect to the network using TCP." -+msgstr "" -+ -+#: booleans.py:77 -+msgid "Allow HTTPD scripts and modules to connect to cobbler over the network." -+msgstr "" -+ -+#: booleans.py:78 -+msgid "" -+"Allow HTTPD scripts and modules to connect to databases over the network." -+msgstr "" -+ -+#: booleans.py:79 -+msgid "Allow httpd to connect to memcache server" -+msgstr "" -+ -+#: booleans.py:80 -+msgid "Allow httpd to act as a relay" -+msgstr "" -+ -+#: booleans.py:81 -+msgid "Allow http daemon to send mail" -+msgstr "" -+ -+#: booleans.py:82 -+msgid "Allow Apache to communicate with avahi service via dbus" -+msgstr "" -+ -+#: booleans.py:83 -+msgid "Allow httpd cgi support" -+msgstr "" -+ -+#: booleans.py:84 -+msgid "Allow httpd to act as a FTP server by listening on the ftp port." -+msgstr "" -+ -+#: booleans.py:85 -+msgid "Allow httpd to read home directories" -+msgstr "" -+ -+#: booleans.py:86 -+msgid "Allow httpd scripts and modules execmem/execstack" -+msgstr "" -+ -+#: booleans.py:87 -+msgid "Allow HTTPD to connect to port 80 for graceful shutdown" -+msgstr "" -+ -+#: booleans.py:88 -+msgid "Allow httpd processes to manage IPA content" -+msgstr "" -+ -+#: booleans.py:89 -+msgid "Allow Apache to use mod_auth_ntlm_winbind" -+msgstr "" -+ -+#: booleans.py:90 -+msgid "Allow Apache to use mod_auth_pam" -+msgstr "" -+ -+#: booleans.py:91 -+msgid "Allow httpd to read user content" -+msgstr "" -+ -+#: booleans.py:92 -+msgid "Allow Apache to run in stickshift mode, not transition to passenger" -+msgstr "" -+ -+#: booleans.py:93 -+msgid "Allow HTTPD scripts and modules to server cobbler files." -+msgstr "" -+ -+#: booleans.py:94 -+msgid "Allow httpd daemon to change its resource limits" -+msgstr "" -+ -+#: booleans.py:95 -+msgid "" -+"Allow HTTPD to run SSI executables in the same domain as system CGI scripts." -+msgstr "" -+ -+#: booleans.py:96 -+msgid "" -+"Allow apache scripts to write to public content, directories/files must be " -+"labeled public_rw_content_t." -+msgstr "" -+ -+#: booleans.py:97 -+msgid "Allow Apache to execute tmp content." -+msgstr "" -+ -+#: booleans.py:98 -+msgid "" -+"Unify HTTPD to communicate with the terminal. Needed for entering the " -+"passphrase for certificates at the terminal." -+msgstr "" -+ -+#: booleans.py:99 -+msgid "Unify HTTPD handling of all content files." -+msgstr "" -+ -+#: booleans.py:100 -+msgid "Allow httpd to access cifs file systems" -+msgstr "" -+ -+#: booleans.py:101 -+msgid "Allow httpd to access FUSE file systems" -+msgstr "" -+ -+#: booleans.py:102 -+msgid "Allow httpd to run gpg" -+msgstr "" -+ -+#: booleans.py:103 -+msgid "Allow httpd to access nfs file systems" -+msgstr "" -+ -+#: booleans.py:104 -+msgid "Allow httpd to access openstack ports" -+msgstr "" -+ -+#: booleans.py:105 -+msgid "Allow httpd to connect to sasl" -+msgstr "" -+ -+#: booleans.py:106 -+msgid "Allow Apache to query NS records" -+msgstr "" -+ -+#: booleans.py:107 -+msgid "Determine whether icecast can listen on and connect to any TCP port." -+msgstr "" -+ -+#: booleans.py:108 -+msgid "" -+"Determine whether irc clients can listen on and connect to any unreserved " -+"TCP ports." -+msgstr "" -+ -+#: booleans.py:109 -+msgid "" -+"Allow the Irssi IRC Client to connect to any port, and to bind to any " -+"unreserved port." -+msgstr "" -+ -+#: booleans.py:110 -+msgid "Allow confined applications to run with kerberos." -+msgstr "" -+ -+#: booleans.py:111 -+msgid "Allow ksmtuned to use cifs/Samba file systems" -+msgstr "" -+ -+#: booleans.py:112 -+msgid "Allow ksmtuned to use nfs file systems" -+msgstr "" -+ -+#: booleans.py:113 -+msgid "Allow syslogd daemon to send mail" -+msgstr "" -+ -+#: booleans.py:114 -+msgid "Allow syslogd the ability to read/write terminals" -+msgstr "" -+ -+#: booleans.py:115 -+msgid "Allow logging in and using the system from /dev/console." -+msgstr "" -+ -+#: booleans.py:116 -+msgid "Allow epylog to send mail" -+msgstr "" -+ -+#: booleans.py:117 -+msgid "Allow mailman to access FUSE file systems" -+msgstr "" -+ -+#: booleans.py:118 -+msgid "Determine whether mcelog supports client mode." -+msgstr "" -+ -+#: booleans.py:119 -+msgid "Determine whether mcelog can execute scripts." -+msgstr "" -+ -+#: booleans.py:120 -+msgid "Determine whether mcelog can use all the user ttys." -+msgstr "" -+ -+#: booleans.py:121 -+msgid "Determine whether mcelog supports server mode." -+msgstr "" -+ -+#: booleans.py:122 -+msgid "" -+"Control the ability to mmap a low area of the address space, as configured " -+"by /proc/sys/kernel/mmap_min_addr." -+msgstr "" -+ -+#: booleans.py:123 -+msgid "Allow mock to read files in home directories." -+msgstr "" -+ -+#: booleans.py:124 -+msgid "Allow the mount commands to mount any directory or file." -+msgstr "" -+ -+#: booleans.py:125 -+msgid "Allow mozilla plugin domain to connect to the network using TCP." -+msgstr "" -+ -+#: booleans.py:126 -+msgid "Allow mozilla plugin to support GPS." -+msgstr "" -+ -+#: booleans.py:127 -+msgid "Allow mozilla plugin to support spice protocols." -+msgstr "" -+ -+#: booleans.py:128 -+msgid "Allow confined web browsers to read home directory content" -+msgstr "" -+ -+#: booleans.py:129 -+msgid "Determine whether mpd can traverse user home directories." -+msgstr "" -+ -+#: booleans.py:130 -+msgid "Determine whether mpd can use cifs file systems." -+msgstr "" -+ -+#: booleans.py:131 -+msgid "Determine whether mpd can use nfs file systems." -+msgstr "" -+ -+#: booleans.py:132 -+msgid "Determine whether mplayer can make its stack executable." -+msgstr "" -+ -+#: booleans.py:133 -+msgid "Allow mysqld to connect to all ports" -+msgstr "" -+ -+#: booleans.py:134 -+msgid "Determine whether Bind can bind tcp socket to http ports." -+msgstr "" -+ -+#: booleans.py:135 -+msgid "" -+"Determine whether Bind can write to master zone files. Generally this is " -+"used for dynamic DNS or zone transfers." -+msgstr "" -+ -+#: booleans.py:136 -+msgid "Allow any files/directories to be exported read/only via NFS." -+msgstr "" -+ -+#: booleans.py:137 -+msgid "Allow any files/directories to be exported read/write via NFS." -+msgstr "" -+ -+#: booleans.py:138 -+msgid "" -+"Allow nfs servers to modify public files used for public file transfer " -+"services. Files/Directories must be labeled public_content_rw_t." -+msgstr "" -+ -+#: booleans.py:139 -+msgid "Allow system to run with NIS" -+msgstr "" -+ -+#: booleans.py:140 -+msgid "Allow confined applications to use nscd shared memory." -+msgstr "" -+ -+#: booleans.py:141 -+msgid "Allow openshift to lockdown app" -+msgstr "" -+ -+#: booleans.py:142 -+msgid "Determine whether openvpn can connect to the TCP network." -+msgstr "" -+ -+#: booleans.py:143 -+msgid "Determine whether openvpn can read generic user home content files." -+msgstr "" -+ -+#: booleans.py:144 -+msgid "Allow openvpn to run unconfined scripts" -+msgstr "" -+ -+#: booleans.py:145 -+msgid "Allow piranha-lvs domain to connect to the network using TCP." -+msgstr "" -+ -+#: booleans.py:146 -+msgid "Allow polipo to connect to all ports > 1023" -+msgstr "" -+ -+#: booleans.py:147 -+msgid "" -+"Determine whether Polipo session daemon can bind tcp sockets to all " -+"unreserved ports." -+msgstr "" -+ -+#: booleans.py:148 -+msgid "" -+"Determine whether calling user domains can execute Polipo daemon in the " -+"polipo_session_t domain." -+msgstr "" -+ -+#: booleans.py:149 -+msgid "Determine whether polipo can access cifs file systems." -+msgstr "" -+ -+#: booleans.py:150 -+msgid "Determine whether Polipo can access nfs file systems." -+msgstr "" -+ -+#: booleans.py:151 -+msgid "Enable polyinstantiated directory support." -+msgstr "" -+ -+#: booleans.py:152 -+msgid "Allow postfix_local domain full write access to mail_spool directories" -+msgstr "" -+ -+#: booleans.py:153 -+msgid "Allow postgresql to use ssh and rsync for point-in-time recovery" -+msgstr "" -+ -+#: booleans.py:154 -+msgid "Allow transmit client label to foreign database" -+msgstr "" -+ -+#: booleans.py:155 -+msgid "Allow database admins to execute DML statement" -+msgstr "" -+ -+#: booleans.py:156 -+msgid "Allow unprivileged users to execute DDL statement" -+msgstr "" -+ -+#: booleans.py:157 -+msgid "Allow pppd to load kernel modules for certain modems" -+msgstr "" -+ -+#: booleans.py:158 -+msgid "Allow pppd to be run for a regular user" -+msgstr "" -+ -+#: booleans.py:159 -+msgid "Determine whether privoxy can connect to all tcp ports." -+msgstr "" -+ -+#: booleans.py:160 -+msgid "" -+"Permit to prosody to bind apache port. Need to be activated to use BOSH." -+msgstr "" -+ -+#: booleans.py:161 -+msgid "Allow Puppet client to manage all file types." -+msgstr "" -+ -+#: booleans.py:162 -+msgid "Allow Puppet master to use connect to MySQL and PostgreSQL database" -+msgstr "" -+ -+#: booleans.py:163 -+msgid "Allow racoon to read shadow" -+msgstr "" -+ -+#: booleans.py:164 -+msgid "" -+"Allow rsync to modify public files used for public file transfer services. " -+"Files/Directories must be labeled public_content_rw_t." -+msgstr "" -+ -+#: booleans.py:165 -+msgid "Allow rsync to run as a client" -+msgstr "" -+ -+#: booleans.py:166 -+msgid "Allow rsync to export any files/directories read only." -+msgstr "" -+ -+#: booleans.py:167 -+msgid "Allow rsync server to manage all files/directories on the system." -+msgstr "" -+ -+#: booleans.py:168 -+msgid "Allow samba to create new home directories (e.g. via PAM)" -+msgstr "" -+ -+#: booleans.py:169 -+msgid "" -+"Allow samba to act as the domain controller, add users, groups and change " -+"passwords." -+msgstr "" -+ -+#: booleans.py:170 -+msgid "Allow samba to share users home directories." -+msgstr "" -+ -+#: booleans.py:171 -+msgid "Allow samba to share any file/directory read only." -+msgstr "" -+ -+#: booleans.py:172 -+msgid "Allow samba to share any file/directory read/write." -+msgstr "" -+ -+#: booleans.py:173 -+msgid "Allow samba to act as a portmapper" -+msgstr "" -+ -+#: booleans.py:174 -+msgid "Allow samba to run unconfined scripts" -+msgstr "" -+ -+#: booleans.py:175 -+msgid "Allow samba to export ntfs/fusefs volumes." -+msgstr "" -+ -+#: booleans.py:176 -+msgid "Allow samba to export NFS volumes." -+msgstr "" -+ -+#: booleans.py:177 -+msgid "Allow sanlock to read/write fuse files" -+msgstr "" -+ -+#: booleans.py:178 -+msgid "Allow sanlock to manage nfs files" -+msgstr "" -+ -+#: booleans.py:179 -+msgid "Allow sanlock to manage cifs files" -+msgstr "" -+ -+#: booleans.py:180 -+msgid "Allow sasl to read shadow" -+msgstr "" -+ -+#: booleans.py:181 -+msgid "Allow secadm to exec content" -+msgstr "" -+ -+#: booleans.py:182 -+msgid "" -+"disallow programs, such as newrole, from transitioning to administrative " -+"user domains." -+msgstr "" -+ -+#: booleans.py:183 -+msgid "Disable kernel module loading." -+msgstr "" -+ -+#: booleans.py:184 -+msgid "" -+"Boolean to determine whether the system permits loading policy, setting " -+"enforcing mode, and changing boolean values. Set this to true and you have " -+"to reboot to set it back." -+msgstr "" -+ -+#: booleans.py:185 -+msgid "Allow regular users direct dri device access" -+msgstr "" -+ -+#: booleans.py:186 -+msgid "" -+"Allow unconfined executables to make their heap memory executable. Doing " -+"this is a really bad idea. Probably indicates a badly coded executable, but " -+"could indicate an attack. This executable should be reported in bugzilla" -+msgstr "" -+ -+#: booleans.py:187 -+msgid "" -+"Allow all unconfined executables to use libraries requiring text relocation " -+"that are not labeled textrel_shlib_t" -+msgstr "" -+ -+#: booleans.py:188 -+msgid "" -+"Allow unconfined executables to make their stack executable. This should " -+"never, ever be necessary. Probably indicates a badly coded executable, but " -+"could indicate an attack. This executable should be reported in bugzilla" -+msgstr "" -+ -+#: booleans.py:189 -+msgid "Allow users to connect to the local mysql server" -+msgstr "" -+ -+#: booleans.py:190 -+msgid "" -+"Allow confined users the ability to execute the ping and traceroute commands." -+msgstr "" -+ -+#: booleans.py:191 -+msgid "Allow users to connect to PostgreSQL" -+msgstr "" -+ -+#: booleans.py:192 -+msgid "" -+"Allow user to r/w files on filesystems that do not have extended attributes " -+"(FAT, CDROM, FLOPPY)" -+msgstr "" -+ -+#: booleans.py:193 -+msgid "Allow user music sharing" -+msgstr "" -+ -+#: booleans.py:194 -+msgid "" -+"Allow users to run TCP servers (bind to ports and accept connection from the " -+"same domain and outside users) disabling this forces FTP passive mode and " -+"may change other protocols." -+msgstr "" -+ -+#: booleans.py:195 -+msgid "Allow user to use ssh chroot environment." -+msgstr "" -+ -+#: booleans.py:196 -+msgid "" -+"Determine whether sftpd can modify public files used for public file " -+"transfer services. Directories/Files must be labeled public_content_rw_t." -+msgstr "" -+ -+#: booleans.py:197 -+msgid "" -+"Determine whether sftpd-can read and write files in user home directories." -+msgstr "" -+ -+#: booleans.py:198 -+msgid "" -+"Determine whether sftpd-can login to local users and read and write all " -+"files on the system, governed by DAC." -+msgstr "" -+ -+#: booleans.py:199 -+msgid "" -+"Determine whether sftpd can read and write files in user ssh home " -+"directories." -+msgstr "" -+ -+#: booleans.py:200 -+msgid "Allow sge to connect to the network using any TCP port" -+msgstr "" -+ -+#: booleans.py:201 -+msgid "Allow sge to access nfs file systems." -+msgstr "" -+ -+#: booleans.py:202 -+msgid "Determine whether smartmon can support devices on 3ware controllers." -+msgstr "" -+ -+#: booleans.py:203 -+msgid "" -+"Allow samba to modify public files used for public file transfer services. " -+"Files/Directories must be labeled public_content_rw_t." -+msgstr "" -+ -+#: booleans.py:204 -+msgid "Allow user spamassassin clients to use the network." -+msgstr "" -+ -+#: booleans.py:205 -+msgid "Allow spamd to read/write user home directories." -+msgstr "" -+ -+#: booleans.py:206 -+msgid "Determine whether squid can connect to all TCP ports." -+msgstr "" -+ -+#: booleans.py:207 -+msgid "Determine whether squid can run as a transparent proxy." -+msgstr "" -+ -+#: booleans.py:208 -+msgid "" -+"Allow ssh with chroot env to read and write files in the user home " -+"directories" -+msgstr "" -+ -+#: booleans.py:209 -+msgid "allow host key based authentication" -+msgstr "" -+ -+#: booleans.py:210 -+msgid "Allow ssh logins as sysadm_r:sysadm_t" -+msgstr "" -+ -+#: booleans.py:211 -+msgid "Allow staff to exec content" -+msgstr "" -+ -+#: booleans.py:212 -+msgid "allow staff user to create and transition to svirt domains." -+msgstr "" -+ -+#: booleans.py:213 -+msgid "Allow sysadm to exec content" -+msgstr "" -+ -+#: booleans.py:214 -+msgid "Allow the Telepathy connection managers to connect to any network port." -+msgstr "" -+ -+#: booleans.py:215 -+msgid "" -+"Allow the Telepathy connection managers to connect to any generic TCP port." -+msgstr "" -+ -+#: booleans.py:216 -+msgid "Allow testpolicy to exec content" -+msgstr "" -+ -+#: booleans.py:217 -+msgid "" -+"Allow tftp to modify public files used for public file transfer services." -+msgstr "" -+ -+#: booleans.py:218 -+msgid "Allow tftp to read and write files in the user home directories" -+msgstr "" -+ -+#: booleans.py:219 -+msgid "Determine whether tor can bind tcp sockets to all unreserved ports." -+msgstr "" -+ -+#: booleans.py:220 -+msgid "Allow tor to act as a relay" -+msgstr "" -+ -+#: booleans.py:221 -+msgid "" -+"allow unconfined users to transition to the chrome sandbox domains when " -+"running chrome-sandbox" -+msgstr "" -+ -+#: booleans.py:222 -+msgid "Allow a user to login as an unconfined domain" -+msgstr "" -+ -+#: booleans.py:223 -+msgid "" -+"Allow unconfined users to transition to the Mozilla plugin domain when " -+"running xulrunner plugin-container." -+msgstr "" -+ -+#: booleans.py:224 -+msgid "Allow unprivledged user to create and transition to svirt domains." -+msgstr "" -+ -+#: booleans.py:225 -+msgid "Support ecryptfs home directories" -+msgstr "" -+ -+#: booleans.py:226 -+msgid "Support fusefs home directories" -+msgstr "" -+ -+#: booleans.py:227 -+msgid "Determine whether to support lpd server." -+msgstr "" -+ -+#: booleans.py:228 -+msgid "Support NFS home directories" -+msgstr "" -+ -+#: booleans.py:229 -+msgid "Support SAMBA home directories" -+msgstr "" -+ -+#: booleans.py:230 -+msgid "Allow user to exec content" -+msgstr "" -+ -+#: booleans.py:231 -+msgid "Determine whether varnishd can use the full TCP network." -+msgstr "" -+ -+#: booleans.py:232 -+msgid "" -+"Determine whether attempts by vbetool to mmap low regions should be silently " -+"blocked." -+msgstr "" -+ -+#: booleans.py:233 -+msgid "Allow virtual processes to run as userdomains" -+msgstr "" -+ -+#: booleans.py:234 -+msgid "" -+"Allow confined virtual guests to use serial/parallel communication ports" -+msgstr "" -+ -+#: booleans.py:235 -+msgid "" -+"Allow confined virtual guests to use executable memory and executable stack" -+msgstr "" -+ -+#: booleans.py:236 -+msgid "Allow confined virtual guests to read fuse files" -+msgstr "" -+ -+#: booleans.py:237 -+msgid "Allow confined virtual guests to manage nfs files" -+msgstr "" -+ -+#: booleans.py:238 -+msgid "Allow confined virtual guests to interact with rawip sockets" -+msgstr "" -+ -+#: booleans.py:239 -+msgid "Allow confined virtual guests to manage cifs files" -+msgstr "" -+ -+#: booleans.py:240 -+msgid "Allow confined virtual guests to interact with the sanlock" -+msgstr "" -+ -+#: booleans.py:241 -+msgid "Allow confined virtual guests to use usb devices" -+msgstr "" -+ -+#: booleans.py:242 -+msgid "Allow confined virtual guests to interact with the xserver" -+msgstr "" -+ -+#: booleans.py:243 -+msgid "Determine whether webadm can manage generic user files." -+msgstr "" -+ -+#: booleans.py:244 -+msgid "Determine whether webadm can read generic user files." -+msgstr "" -+ -+#: booleans.py:245 -+msgid "" -+"Determine whether attempts by wine to mmap low regions should be silently " -+"blocked." -+msgstr "" -+ -+#: booleans.py:246 -+msgid "Allow the graphical login program to execute bootloader" -+msgstr "" -+ -+#: booleans.py:247 -+msgid "" -+"Allow the graphical login program to login directly as sysadm_r:sysadm_t" -+msgstr "" -+ -+#: booleans.py:248 -+msgid "" -+"Allow the graphical login program to create files in HOME dirs as xdm_home_t." -+msgstr "" -+ -+#: booleans.py:249 -+msgid "Allow xen to manage nfs files" -+msgstr "" -+ -+#: booleans.py:250 -+msgid "" -+"Allow xend to run blktapctrl/tapdisk. Not required if using dedicated " -+"logical volumes for disk images." -+msgstr "" -+ -+#: booleans.py:251 -+msgid "Allow xend to run qemu-dm. Not required if using paravirt and no vfb." -+msgstr "" -+ -+#: booleans.py:252 -+msgid "" -+"Allow xguest users to configure Network Manager and connect to apache ports" -+msgstr "" -+ -+#: booleans.py:253 -+msgid "Allow xguest to exec content" -+msgstr "" -+ -+#: booleans.py:254 -+msgid "Allow xguest users to mount removable media" -+msgstr "" -+ -+#: booleans.py:255 -+msgid "Allow xguest to use blue tooth devices" -+msgstr "" -+ -+#: booleans.py:256 -+msgid "Allows clients to write to the X server shared memory segments." -+msgstr "" -+ -+#: booleans.py:257 -+msgid "Allows XServer to execute writable memory" -+msgstr "" -+ -+#: booleans.py:258 -+msgid "Support X userspace object manager" -+msgstr "" -+ -+#: booleans.py:259 -+msgid "Determine whether zabbix can connect to all TCP ports" -+msgstr "" -+ -+#: booleans.py:260 -+msgid "Allow zarafa domains to setrlimit/sys_rouserce." -+msgstr "" -+ -+#: booleans.py:261 -+msgid "Allow zebra daemon to write it configuration files" -+msgstr "" -+ -+#: booleans.py:262 -+msgid "" -+"Allow ZoneMinder to modify public files used for public file transfer " -+"services." -+msgstr "" -+ -+#: booleans.py:263 -+msgid "Allow ZoneMinder to run su/sudo." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/help/booleans_more.txt:4 -+#: ../sepolicy/sepolicy/gui.py:939 ../sepolicy/sepolicy/gui.py:1231 -+#: ../sepolicy/sepolicy/gui.py:1671 ../sepolicy/sepolicy/gui.py:1917 -+#: ../sepolicy/sepolicy/gui.py:2740 -+msgid "More..." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/help/start.txt:1 -+#: ../sepolicy/sepolicy/sepolicy.glade:189 -+#: ../sepolicy/sepolicy/sepolicy.glade:4425 -+#: ../sepolicy/sepolicy/sepolicy.glade:4518 -+#: ../sepolicy/sepolicy/sepolicy.glade:4664 -+#: ../sepolicy/sepolicy/sepolicy.glade:4813 -+#: ../sepolicy/sepolicy/sepolicy.glade:4947 -+#: ../sepolicy/sepolicy/sepolicy.glade:5088 -+#: ../sepolicy/sepolicy/sepolicy.glade:5161 -+#: ../sepolicy/sepolicy/sepolicy.glade:5296 -+msgid "Select" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/help/system.txt:1 -+msgid "" -+"This screen allows you to view modify the way SELinux is running on your " -+"system." -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:194 -+#, python-format -+msgid "Interface %s does not exist." -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:292 -+msgid "You need to install policycoreutils-gui package to use the gui option" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:296 -+msgid "Graphical User Interface for SELinux Policy" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:299 ../sepolicy/sepolicy.py:345 -+msgid "Domain name(s) of man pages to be created" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:311 -+msgid "Alternative root needs to be setup" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:327 -+msgid "Generate SELinux man pages" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:330 -+msgid "path in which the generated SELinux man pages will be stored" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:332 -+msgid "name of the OS for man pages" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:334 -+msgid "Generate HTML man pages structure for selected SELinux man page" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:336 -+msgid "Alternate root directory, defaults to /" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:338 -+msgid "" -+"With this flag, alternative root path needs to include file context files " -+"and policy.xml file" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:342 -+msgid "All domains" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:350 -+msgid "Query SELinux policy network information" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:355 -+msgid "list all SELinux port types" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:358 -+msgid "show SELinux type related to the port" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:361 -+msgid "Show ports defined for this SELinux type" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:364 -+msgid "show ports to which this domain can bind and/or connect" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:367 -+msgid "show ports to which this application can bind and/or connect" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:382 -+msgid "query SELinux policy to see if domains can communicate with each other" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:385 -+msgid "Source Domain" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:388 -+msgid "Target Domain" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:407 -+msgid "query SELinux Policy to see description of booleans" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:411 -+msgid "get all booleans descriptions" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:414 -+msgid "boolean to get description" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:424 -+msgid "" -+"query SELinux Policy to see how a source process domain can transition to " -+"the target process domain" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:427 -+msgid "source process domain" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:430 -+msgid "target process domain" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:472 -+#, python-format -+msgid "sepolicy generate: error: one of the arguments %s is required" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:477 -+msgid "Command required for this type of policy" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:488 -+#, python-format -+msgid "" -+"-t option can not be used with '%s' domains. Read usage for more details." -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:493 -+#, python-format -+msgid "" -+"-d option can not be used with '%s' domains. Read usage for more details." -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:497 -+#, python-format -+msgid "" -+"-a option can not be used with '%s' domains. Read usage for more details." -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:501 -+msgid "-w option can not be used with the --newtype option" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:521 -+msgid "List SELinux Policy interfaces" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:541 -+msgid "Enter interface names, you wish to query" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:550 -+msgid "Generate SELinux Policy module template" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:553 -+msgid "Enter domain type which you will be extending" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:556 -+msgid "Enter SELinux user(s) which will transition to this domain" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:559 -+msgid "Enter SELinux role(s) to which the administror domain will transition" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:562 -+msgid "Enter domain(s) which this confined admin will administrate" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:565 -+msgid "name of policy to generate" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:572 -+msgid "path in which the generated policy files will be stored" -+msgstr "" - --#: booleans.py:6 -+#: ../sepolicy/sepolicy.py:574 -+msgid "path to which the confined processes will need to write" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:575 -+msgid "Policy types which require a command" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:579 ../sepolicy/sepolicy.py:582 -+#: ../sepolicy/sepolicy.py:585 ../sepolicy/sepolicy.py:588 -+#: ../sepolicy/sepolicy.py:591 ../sepolicy/sepolicy.py:597 -+#: ../sepolicy/sepolicy.py:600 ../sepolicy/sepolicy.py:603 -+#: ../sepolicy/sepolicy.py:609 ../sepolicy/sepolicy.py:612 -+#: ../sepolicy/sepolicy.py:615 ../sepolicy/sepolicy.py:618 -+#, python-format -+msgid "Generate '%s' policy" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:606 -+#, python-format -+msgid "Generate '%s' policy " -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:620 -+msgid "executable to confine" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:625 -+msgid "commands" -+msgstr "" -+ -+#: ../sepolicy/sepolicy.py:628 -+msgid "Alternate SELinux policy, defaults to /sys/fs/selinux/policy" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:89 -+#, python-format -+msgid "-- Allowed %s [ %s ]" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:95 ../sepolicy/sepolicy/gui.py:1156 -+msgid "all files" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:96 -+msgid "regular file" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:97 -+msgid "directory" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:98 -+msgid "character device" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:99 -+msgid "block device" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:100 -+msgid "socket file" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:101 -+msgid "symbolic link" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:102 -+msgid "named pipe" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:398 -+msgid "No SELinux Policy installed" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:478 -+msgid "You must regenerate interface info by running /usr/bin/sepolgen-ifgen" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:724 -+#, python-format -+msgid "Failed to read %s policy file" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/__init__.py:829 -+msgid "unknown" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:132 -+msgid "Internet Services Daemon" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:136 -+msgid "Existing Domain Type" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:137 -+msgid "Minimal Terminal Login User Role" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:138 -+msgid "Minimal X Windows Login User Role" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:139 -+msgid "Desktop Login User Role" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:140 -+msgid "Administrator Login User Role" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:141 -+msgid "Confined Root Administrator Role" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:142 -+msgid "Module information for a new type" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:147 -+msgid "Valid Types:\n" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:181 -+#, python-format -+msgid "Ports must be numbers or ranges of numbers from 1 to %d " -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:192 -+msgid "You must enter a valid policy type" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:195 -+#, python-format -+msgid "You must enter a name for your policy module for your '%s'." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:333 - msgid "" --"Allow users to resolve user passwd entries directly from ldap rather then " --"using a sssd server" -+"Name must be alpha numberic with no spaces. Consider using option \"-n " -+"MODULENAME\"" - msgstr "" - --#: booleans.py:7 --msgid "Allow users to login using a radius server" -+#: ../sepolicy/sepolicy/generate.py:425 -+msgid "User Role types can not be assigned executables." - msgstr "" - --#: booleans.py:8 --msgid "Allow users to login using a yubikey server" -+#: ../sepolicy/sepolicy/generate.py:431 -+msgid "Only Daemon apps can use an init script.." - msgstr "" - --#: booleans.py:9 --msgid "Allow awstats to purge Apache logs" -+#: ../sepolicy/sepolicy/generate.py:449 -+msgid "use_resolve must be a boolean value " - msgstr "" - --#: booleans.py:10 -+#: ../sepolicy/sepolicy/generate.py:455 -+msgid "use_syslog must be a boolean value " -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:461 -+msgid "use_kerberos must be a boolean value " -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:467 -+msgid "manage_krb5_rcache must be a boolean value " -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:497 -+msgid "USER Types automatically get a tmp type" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:838 -+#, python-format -+msgid "'%s' policy modules require existing domains" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:863 -+msgid "Type field required" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:876 -+#, python-format - msgid "" --"Allow cdrecord to read various content. nfs, samba, removable devices, user " --"temp and untrusted content files" -+"You need to define a new type which ends with: \n" -+" %s" - msgstr "" - --#: booleans.py:11 --msgid "Allow clamd to use JIT compiler" -+#: ../sepolicy/sepolicy/generate.py:1104 -+msgid "You must enter the executable path for your confined process" - msgstr "" - --#: booleans.py:12 --msgid "Allow clamscan to non security files on a system" -+#: ../sepolicy/sepolicy/generate.py:1363 -+msgid "Type Enforcement file" - msgstr "" - --#: booleans.py:13 --msgid "Allow clamscan to read user content" -+#: ../sepolicy/sepolicy/generate.py:1364 -+msgid "Interface file" - msgstr "" - --#: booleans.py:14 -+#: ../sepolicy/sepolicy/generate.py:1365 -+msgid "File Contexts file" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:1367 -+msgid "Spec file" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/generate.py:1368 -+msgid "Setup Script" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:25 -+#: ../sepolicy/sepolicy/sepolicy.glade:4388 -+msgid "Applications" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:52 -+msgid "Select domain" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:80 ../sepolicy/sepolicy/gui.py:68 -+msgid "Advanced Search >>" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:95 ../sepolicy/sepolicy/gui.py:2348 -+msgid "File Equivalence" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:112 ../sepolicy/sepolicy/gui.py:2358 -+msgid "Users" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:129 -+#: ../sepolicy/sepolicy/sepolicy.glade:1916 -+#: ../sepolicy/sepolicy/sepolicy.glade:3821 ../sepolicy/sepolicy/gui.py:2339 -+msgid "System" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:204 -+#: ../sepolicy/sepolicy/sepolicy.glade:557 -+#: ../sepolicy/sepolicy/sepolicy.glade:702 -+#: ../sepolicy/sepolicy/sepolicy.glade:1257 -+#: ../sepolicy/sepolicy/sepolicy.glade:1553 -+#: ../sepolicy/sepolicy/sepolicy.glade:4598 -+#: ../sepolicy/sepolicy/sepolicy.glade:4748 -+#: ../sepolicy/sepolicy/sepolicy.glade:4879 -+#: ../sepolicy/sepolicy/sepolicy.glade:5013 -+#: ../sepolicy/sepolicy/sepolicy.glade:5231 -+#: ../sepolicy/sepolicy/sepolicy.glade:5362 -+#: ../sepolicy/sepolicy/sepolicy.glade:5522 -+msgid "Cancel" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:350 - msgid "" --"Allow Cobbler to modify public files used for public file transfer services." -+"The entry that was entered is incorrect. Please try again in the " -+"ex:/.../... format." - msgstr "" - --#: booleans.py:15 --msgid "Allow Cobbler to connect to the network using TCP." -+#: ../sepolicy/sepolicy/sepolicy.glade:376 -+msgid "Retry" - msgstr "" - --#: booleans.py:16 --msgid "Allow Cobbler to access cifs file systems." -+#: ../sepolicy/sepolicy/sepolicy.glade:460 -+#: ../sepolicy/sepolicy/sepolicy.glade:1138 -+#: ../sepolicy/sepolicy/sepolicy.glade:1386 -+#: ../sepolicy/sepolicy/sepolicy.glade:5390 -+msgid "Network Port Definitions" - msgstr "" - --#: booleans.py:17 --msgid "Allow Cobbler to access nfs file systems." -+#: ../sepolicy/sepolicy/sepolicy.glade:476 -+msgid "" -+"Add file Equivilence Mapping. Mapping will be created when Update is " -+"applied." - msgstr "" - --#: booleans.py:18 --msgid "Allow collectd to connect to the network using TCP." -+#: ../sepolicy/sepolicy/sepolicy.glade:501 -+#: ../sepolicy/sepolicy/sepolicy.glade:4064 -+msgid "Path" - msgstr "" - --#: booleans.py:19 --msgid "Allow codnor domain to connect to the network using TCP." -+#: ../sepolicy/sepolicy/sepolicy.glade:511 -+#: ../sepolicy/sepolicy/sepolicy.glade:5442 -+msgid "" -+"Specify a new SELinux user name. By convention SELinux User names usually " -+"end in an _u." - msgstr "" - --#: booleans.py:20 -+#: ../sepolicy/sepolicy/sepolicy.glade:515 -+msgid "Enter the path to which you want to setup an equivalence label." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:528 -+#: ../sepolicy/sepolicy/sepolicy.glade:4081 -+#: ../sepolicy/sepolicy/sepolicy.glade:4839 -+msgid "Equivalence Path" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:542 -+#: ../sepolicy/sepolicy/sepolicy.glade:687 -+#: ../sepolicy/sepolicy/sepolicy.glade:1242 -+#: ../sepolicy/sepolicy/sepolicy.glade:1538 -+#: ../sepolicy/sepolicy/sepolicy.glade:5507 -+msgid "Save to update" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:582 - msgid "" --"Allow system cron jobs to relabel filesystem for restoring file contexts." -+"Specify the mapping between the new path and the equivalence path. " -+"Everything under this new path will be labeled as if they were under the " -+"equivalence path." - msgstr "" - --#: booleans.py:21 --msgid "Allow cvs daemon to read shadow" -+#: ../sepolicy/sepolicy/sepolicy.glade:639 -+msgid "Add a file" - msgstr "" - --#: booleans.py:22 --msgid "Allow all daemons to write corefiles to /" -+#: ../sepolicy/sepolicy/sepolicy.glade:656 -+msgid "" -+" File Labeling for . File labels will be created " -+"when update is applied." - msgstr "" - --#: booleans.py:23 --msgid "Allow all daemons to use tcp wrappers." -+#: ../sepolicy/sepolicy/sepolicy.glade:744 -+#: ../sepolicy/sepolicy/sepolicy.glade:1485 -+#: ../sepolicy/sepolicy/sepolicy.glade:3529 ../sepolicy/sepolicy/gui.py:67 -+msgid "Advanced >>" - msgstr "" - --#: booleans.py:24 --msgid "Allow all daemons the ability to read/write terminals" -+#: ../sepolicy/sepolicy/sepolicy.glade:765 -+#: ../sepolicy/sepolicy/sepolicy.glade:2324 -+#: ../sepolicy/sepolicy/sepolicy.glade:2436 -+#: ../sepolicy/sepolicy/sepolicy.glade:2558 -+#: ../sepolicy/sepolicy/sepolicy.glade:4558 -+msgid "Class" - msgstr "" - --#: booleans.py:25 --msgid "Allow dan to manage user files" -+#: ../sepolicy/sepolicy/sepolicy.glade:781 -+msgid "Type" - msgstr "" - --#: booleans.py:26 --msgid "Allow dan to read user files" -+#: ../sepolicy/sepolicy/sepolicy.glade:795 -+msgid "" -+"Select the file class to which this label will be applied. Defaults to all " -+"classes." - msgstr "" - --#: booleans.py:27 --msgid "Allow dbadm to manage files in users home directories" -+#: ../sepolicy/sepolicy/sepolicy.glade:822 -+msgid "Make Path Recursive" - msgstr "" - --#: booleans.py:28 --msgid "Allow dbadm to read files in users home directories" -+#: ../sepolicy/sepolicy/sepolicy.glade:826 -+msgid "" -+"Select Make Path Recursive iff you want to apply this label to all children " -+"of the specified directory path. objects under the directory to have this " -+"label." - msgstr "" - --#: booleans.py:29 -+#: ../sepolicy/sepolicy/sepolicy.glade:839 -+msgid "Browse" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:843 -+msgid "Browse to select the file/directory for labeling." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:887 -+msgid "Path " -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:898 - msgid "" --"Deny user domains applications to map a memory region as both executable and " --"writable, this is dangerous and the executable should be reported in bugzilla" -+"Specify the path using regular expressions that you would like to modify the " -+"labeling." - msgstr "" - --#: booleans.py:30 --msgid "Allow sysadm to debug or ptrace all processes." -+#: ../sepolicy/sepolicy/sepolicy.glade:920 -+msgid "Select the SELinux file type to assign to this path." - msgstr "" - --#: booleans.py:31 --msgid "Allow dhcpc client applications to execute iptables commands" -+#: ../sepolicy/sepolicy/sepolicy.glade:947 -+msgid "Enter the MLS Label to assign to this file path." - msgstr "" - --#: booleans.py:32 --msgid "Allow DHCP daemon to use LDAP backends" -+#: ../sepolicy/sepolicy/sepolicy.glade:951 -+msgid "SELinux MLS Label you wish to assign to this path." - msgstr "" - --#: booleans.py:33 --msgid "Allow all domains to use other domains file descriptors" -+#: ../sepolicy/sepolicy/sepolicy.glade:1088 -+msgid "Analyzing Policy..." - msgstr "" - --#: booleans.py:34 --msgid "Allow all domains to have the kernel load modules" -+#: ../sepolicy/sepolicy/sepolicy.glade:1155 -+msgid "" -+"Add Login Mapping. Login Mapping will be created when update is applied." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1190 -+msgid "" -+"Enter the login user name of the user to which you wish to add SELinux User " -+"confinement." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1219 -+msgid "" -+"Select the SELinux User to assign to this login user. Login users by " -+"default get assigned by the __default__ user." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1282 -+msgid "" -+"Enter MLS/MCS Range for this login User. Defaults to the range for the " -+"Selected SELinux User." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1285 -+#: ../sepolicy/sepolicy/sepolicy.glade:3210 -+#: ../sepolicy/sepolicy/sepolicy.glade:3331 -+#: ../sepolicy/sepolicy/sepolicy.glade:5472 -+msgid "MLS Range" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1297 -+msgid "" -+"Specify the MLS Range for this user to login in with. Defaults to the " -+"selected SELinux Users MLS Range." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1403 -+msgid "" -+" Network Port for . Ports will be created when " -+"update is applied." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1441 -+msgid "Enter the port number or range to which you want to add a port type." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1471 -+msgid "Port Type" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1516 -+msgid "Select the port type you want to assign to the specified port number." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1580 -+msgid "tcp" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1584 -+msgid "" -+"Select tcp if the port type should be assigned to tcp port numbers." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1597 -+msgid "udp" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1601 -+msgid "" -+"Select udp if the port type should be assigned to udp port numbers." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1623 -+msgid "Enter the MLS Label to assign to this port." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1725 -+msgid "SELinux Configuration" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1761 -+msgid "Select..." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1810 -+#: ../sepolicy/sepolicy/sepolicy.glade:2230 -+msgid "Booleans" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1814 -+msgid "" -+"Display boolean information that can be used to modify the policy for the " -+"'selected domain'." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1828 -+#: ../sepolicy/sepolicy/sepolicy.glade:2615 -+msgid "Files" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1832 -+msgid "" -+"Display file type information that can be used by the 'selected domain'." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1846 -+#: ../sepolicy/sepolicy/sepolicy.glade:2848 -+msgid "Network" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1850 -+msgid "" -+"Display network ports to which the 'selected domain' can connect or listen " -+"to." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1864 -+#: ../sepolicy/sepolicy/sepolicy.glade:3139 -+msgid "Transitions" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:1868 -+msgid "" -+"Display applications that can transition into or out of the 'selected " -+"domain'." - msgstr "" - --#: booleans.py:35 --msgid "Allow the use of the audio devices as the source for the entropy feeds" -+#: ../sepolicy/sepolicy/sepolicy.glade:1882 -+#: ../sepolicy/sepolicy/sepolicy.glade:3240 -+msgid "Login Mapping" - msgstr "" - --#: booleans.py:36 --msgid "Allow exim to connect to databases (postgres, mysql)" -+#: ../sepolicy/sepolicy/sepolicy.glade:1885 -+#: ../sepolicy/sepolicy/sepolicy.glade:1902 -+#: ../sepolicy/sepolicy/sepolicy.glade:1919 -+msgid "Manage the SELinux configuration" - msgstr "" - --#: booleans.py:37 --msgid "Allow exim to create, read, write, and delete unprivileged user files." -+#: ../sepolicy/sepolicy/sepolicy.glade:1899 -+#: ../sepolicy/sepolicy/sepolicy.glade:3362 -+msgid "SELinux Users" - msgstr "" - --#: booleans.py:38 --msgid "Allow exim to read unprivileged user files." -+#: ../sepolicy/sepolicy/sepolicy.glade:1933 -+#: ../sepolicy/sepolicy/sepolicy.glade:4034 -+msgid "Lockdown" - msgstr "" - --#: booleans.py:39 --msgid "Enable extra rules in the cron domain to support fcron." -+#: ../sepolicy/sepolicy/sepolicy.glade:1936 -+msgid "" -+"Lockdown the SELinux System.\n" -+"This screen can be used to turn up the SELinux Protections." - msgstr "" - --#: booleans.py:40 --msgid "Allow fenced domain to connect to the network using TCP." -+#: ../sepolicy/sepolicy/sepolicy.glade:1951 -+msgid "radiobutton" - msgstr "" - --#: booleans.py:41 --msgid "Allow fenced domain to execute ssh." -+#: ../sepolicy/sepolicy/sepolicy.glade:2039 -+msgid "Show Modified Only" - msgstr "" - --#: booleans.py:42 --msgid "Allow all domains to execute in fips_mode" -+#: ../sepolicy/sepolicy/sepolicy.glade:2078 -+msgid "Mislabeled files exist" - msgstr "" - --#: booleans.py:43 --msgid "Allow ftp to read and write files in the user home directories" -+#: ../sepolicy/sepolicy/sepolicy.glade:2098 -+msgid "Show mislabeled files only" - msgstr "" - --#: booleans.py:44 -+#: ../sepolicy/sepolicy/sepolicy.glade:2138 -+#: ../sepolicy/sepolicy/sepolicy.glade:3262 - msgid "" --"Allow ftp servers to upload files, used for public file transfer services. " --"Directories must be labeled public_content_rw_t." -+"If-Then-Else rules written in policy that can \n" -+"allow alternative access control." - msgstr "" - --#: booleans.py:45 --msgid "Allow ftp servers to connect to all ports > 1023" -+#: ../sepolicy/sepolicy/sepolicy.glade:2150 -+msgid "Enabled" - msgstr "" - --#: booleans.py:46 --msgid "Allow ftp servers to connect to mysql database ports" -+#: ../sepolicy/sepolicy/sepolicy.glade:2270 -+#: ../sepolicy/sepolicy/sepolicy.glade:2382 -+#: ../sepolicy/sepolicy/sepolicy.glade:2500 -+#: ../sepolicy/sepolicy/sepolicy.glade:4531 -+#: ../sepolicy/sepolicy/sepolicy.glade:4826 -+msgid "File Path" - msgstr "" - --#: booleans.py:47 --msgid "" --"Allow ftp servers to login to local users and read/write all files on the " --"system, governed by DAC." -+#: ../sepolicy/sepolicy/sepolicy.glade:2306 -+#: ../sepolicy/sepolicy/sepolicy.glade:2417 -+msgid "SELinux File Type" - msgstr "" - --#: booleans.py:48 --msgid "Allow ftp servers to use cifs used for public file transfer services." -+#: ../sepolicy/sepolicy/sepolicy.glade:2350 -+msgid "File path used to enter the 'selected domain'." - msgstr "" - --#: booleans.py:49 --msgid "Allow ftp servers to use nfs used for public file transfer services." -+#: ../sepolicy/sepolicy/sepolicy.glade:2351 -+msgid "Executable Files" - msgstr "" - --#: booleans.py:50 --msgid "Allow ftp servers to use bind to all unreserved ports for passive mode" -+#: ../sepolicy/sepolicy/sepolicy.glade:2466 -+msgid "Files to which the 'selected domain' can write." - msgstr "" - --#: booleans.py:51 --msgid "Determine whether Git CGI can search home directories." -+#: ../sepolicy/sepolicy/sepolicy.glade:2467 -+msgid "Writable files" - msgstr "" - --#: booleans.py:52 --msgid "Determine whether Git CGI can access cifs file systems." -+#: ../sepolicy/sepolicy/sepolicy.glade:2589 -+msgid "File Types defined for the 'selected domain'." - msgstr "" - --#: booleans.py:53 --msgid "Determine whether Git CGI can access nfs file systems." -+#: ../sepolicy/sepolicy/sepolicy.glade:2590 -+msgid "Application File Types" - msgstr "" - --#: booleans.py:54 --msgid "" --"Determine whether Git session daemon can bind TCP sockets to all unreserved " --"ports." -+#: ../sepolicy/sepolicy/sepolicy.glade:2722 -+msgid "Network Ports to which the 'selected domain' is allowed to connect." - msgstr "" - --#: booleans.py:55 --msgid "" --"Determine whether calling user domains can execute Git daemon in the " --"git_session_t domain." -+#: ../sepolicy/sepolicy/sepolicy.glade:2723 -+msgid "Outbound" - msgstr "" - --#: booleans.py:56 --msgid "Determine whether Git system daemon can search home directories." -+#: ../sepolicy/sepolicy/sepolicy.glade:2822 -+msgid "Network Ports to which the 'selected domain' is allowed to listen." - msgstr "" - --#: booleans.py:57 --msgid "Determine whether Git system daemon can access cifs file systems." -+#: ../sepolicy/sepolicy/sepolicy.glade:2823 -+msgid "Inbound" - msgstr "" - --#: booleans.py:58 --msgid "Determine whether Git system daemon can access nfs file systems." -+#: ../sepolicy/sepolicy/sepolicy.glade:2884 -+msgid "" -+"Boolean \n" -+"Enabled" - msgstr "" - --#: booleans.py:59 --msgid "Allow gitisis daemon to send mail" -+#: ../sepolicy/sepolicy/sepolicy.glade:2910 -+msgid "Boolean name" - msgstr "" - --#: booleans.py:60 --msgid "Enable reading of urandom for all domains." -+#: ../sepolicy/sepolicy/sepolicy.glade:2927 -+msgid "SELinux Application Type" - msgstr "" - --#: booleans.py:61 -+#: ../sepolicy/sepolicy/sepolicy.glade:2948 - msgid "" --"Allow usage of the gpg-agent --write-env-file option. This also allows gpg-" --"agent to manage user files." -+"Executables which will transition to a different domain, when the 'selected " -+"domain' executes them." - msgstr "" - --#: booleans.py:62 --msgid "" --"Allow gpg web domain to modify public files used for public file transfer " --"services." -+#: ../sepolicy/sepolicy/sepolicy.glade:2951 -+msgid "Applicaton Transitions From 'select domain'" - msgstr "" - --#: booleans.py:63 --msgid "Allow gssd to read temp directory. For access to kerberos tgt." -+#: ../sepolicy/sepolicy/sepolicy.glade:2974 -+msgid "" -+"Boolean\n" -+"Enabled" - msgstr "" - --#: booleans.py:64 --msgid "Allow guest to exec content" -+#: ../sepolicy/sepolicy/sepolicy.glade:2990 -+msgid "Calling Process Domain" - msgstr "" - --#: booleans.py:65 --msgid "" --"Allow Apache to modify public files used for public file transfer services. " --"Directories/Files must be labeled public_content_rw_t." -+#: ../sepolicy/sepolicy/sepolicy.glade:3006 -+msgid "Executable File" - msgstr "" - --#: booleans.py:66 --msgid "Allow httpd to use built in scripting (usually php)" -+#: ../sepolicy/sepolicy/sepolicy.glade:3030 -+msgid "" -+"Executables which will transition to the 'selected domain', when executing a " -+"selected domains entrypoint." - msgstr "" - --#: booleans.py:67 --msgid "Allow http daemon to check spam" -+#: ../sepolicy/sepolicy/sepolicy.glade:3031 -+msgid "Application Transitions Into 'select domain'" - msgstr "" - --#: booleans.py:68 -+#: ../sepolicy/sepolicy/sepolicy.glade:3046 - msgid "" --"Allow httpd to act as a FTP client connecting to the ftp port and ephemeral " --"ports" -+"File Transitions define what happens when the current domain creates the " -+"content of a particular class in a directory of the destination type. " -+"Optionally a file name could be specified for the transition." - msgstr "" - --#: booleans.py:69 --msgid "Allow httpd to connect to the ldap port" -+#: ../sepolicy/sepolicy/sepolicy.glade:3054 -+msgid "SELinux Directory Type" - msgstr "" - --#: booleans.py:70 --msgid "Allow http daemon to connect to zabbix" -+#: ../sepolicy/sepolicy/sepolicy.glade:3067 -+msgid "Destination Class" - msgstr "" - --#: booleans.py:71 --msgid "Allow HTTPD scripts and modules to connect to the network using TCP." -+#: ../sepolicy/sepolicy/sepolicy.glade:3081 -+msgid "SELinux Destination Type" - msgstr "" - --#: booleans.py:72 --msgid "Allow HTTPD scripts and modules to connect to cobbler over the network." -+#: ../sepolicy/sepolicy/sepolicy.glade:3094 -+msgid "File Name" - msgstr "" - --#: booleans.py:73 --msgid "" --"Allow HTTPD scripts and modules to connect to databases over the network." -+#: ../sepolicy/sepolicy/sepolicy.glade:3116 -+msgid "File Transitions From 'select domain'" - msgstr "" - --#: booleans.py:74 --msgid "Allow httpd to connect to memcache server" -+#: ../sepolicy/sepolicy/sepolicy.glade:3315 -+#: ../sepolicy/sepolicy/sepolicy.glade:5566 -+msgid "Default Level" - msgstr "" - --#: booleans.py:75 --msgid "Allow httpd to act as a relay" -+#: ../sepolicy/sepolicy/sepolicy.glade:3401 -+msgid "Select the system mode when the system first boots up" - msgstr "" - --#: booleans.py:76 --msgid "Allow http daemon to send mail" -+#: ../sepolicy/sepolicy/sepolicy.glade:3474 -+msgid "Select the system mode for the current session" - msgstr "" - --#: booleans.py:77 --msgid "Allow Apache to communicate with avahi service via dbus" -+#: ../sepolicy/sepolicy/sepolicy.glade:3551 -+msgid "System Policy Type:" - msgstr "" - --#: booleans.py:78 --msgid "Allow httpd cgi support" -+#: ../sepolicy/sepolicy/sepolicy.glade:3612 -+msgid "System Mode" - msgstr "" - --#: booleans.py:79 --msgid "Allow httpd to act as a FTP server by listening on the ftp port." -+#: ../sepolicy/sepolicy/sepolicy.glade:3650 -+msgid "Import system settings from another machine" - msgstr "" - --#: booleans.py:80 --msgid "Allow httpd to read home directories" -+#: ../sepolicy/sepolicy/sepolicy.glade:3658 -+msgid "Import" - msgstr "" - --#: booleans.py:81 --msgid "Allow httpd scripts and modules execmem/execstack" -+#: ../sepolicy/sepolicy/sepolicy.glade:3677 -+msgid "Export system settings to a file" - msgstr "" - --#: booleans.py:82 --msgid "Allow HTTPD to connect to port 80 for graceful shutdown" -+#: ../sepolicy/sepolicy/sepolicy.glade:3687 -+msgid "Export" - msgstr "" - --#: booleans.py:83 --msgid "Allow httpd processes to manage IPA content" -+#: ../sepolicy/sepolicy/sepolicy.glade:3706 -+msgid "Relabel all files back to system defaults on reboot" - msgstr "" - --#: booleans.py:84 --msgid "Allow Apache to use mod_auth_ntlm_winbind" -+#: ../sepolicy/sepolicy/sepolicy.glade:3743 -+#: ../sepolicy/sepolicy/sepolicy.glade:3844 -+#: ../sepolicy/sepolicy/sepolicy.glade:3908 -+#: ../sepolicy/sepolicy/sepolicy.glade:3971 ../sepolicy/sepolicy/gui.py:61 -+msgid "Yes" - msgstr "" - --#: booleans.py:85 --msgid "Allow Apache to use mod_auth_pam" -+#: ../sepolicy/sepolicy/sepolicy.glade:3760 -+#: ../sepolicy/sepolicy/sepolicy.glade:3862 -+#: ../sepolicy/sepolicy/sepolicy.glade:3925 -+#: ../sepolicy/sepolicy/sepolicy.glade:3988 ../sepolicy/sepolicy/gui.py:61 -+msgid "No" - msgstr "" - --#: booleans.py:86 --msgid "Allow httpd to read user content" -+#: ../sepolicy/sepolicy/sepolicy.glade:3801 -+msgid "System Configuration" - msgstr "" - --#: booleans.py:87 --msgid "Allow Apache to run in stickshift mode, not transition to passenger" -+#: ../sepolicy/sepolicy/sepolicy.glade:3848 -+#: ../sepolicy/sepolicy/sepolicy.glade:3866 -+msgid "" -+"An unconfined domain is a process label that allows the process to do what " -+"it wants, without SELinux interfering. Applications started at boot by the " -+"init system that SELinux do not have defined SELinux policy will run as " -+"unconfined if this module is enabled. Disabling it means all daemons will " -+"now be confined. To disable the unconfined_t user you must first remove " -+"unconfined_t from the users/login screens." - msgstr "" - --#: booleans.py:88 --msgid "Allow httpd daemon to change its resource limits" -+#: ../sepolicy/sepolicy/sepolicy.glade:3884 -+msgid "Disable ability to run unconfined system processes?" - msgstr "" - --#: booleans.py:89 -+#: ../sepolicy/sepolicy/sepolicy.glade:3912 -+#: ../sepolicy/sepolicy/sepolicy.glade:3929 -+#: ../sepolicy/sepolicy/sepolicy.glade:3992 - msgid "" --"Allow HTTPD to run SSI executables in the same domain as system CGI scripts." -+"An permissive domain is a process label that allows the process to do what " -+"it wants, with SELinux only logging the denials, but not enforcing them. " -+"Usually permissive domains indicate experimental policy, disabling the " -+"module could cause SELinux to deny access to a domain, that should be " -+"allowed." - msgstr "" - --#: booleans.py:90 -+#: ../sepolicy/sepolicy/sepolicy.glade:3947 -+msgid "Disable all permissive processes?" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:3975 - msgid "" --"Allow apache scripts to write to public content, directories/files must be " --"labeled public_rw_content_t." -+"A permissive domain is a process label that allows the process to do what it " -+"wants, with SELinux only logging the denials, but not enforcing them. " -+"Usually permissive domains indicate experimental policy, disabling the " -+"module could cause SELinux to deny access to a domain, that should be " -+"allowed." - msgstr "" - --#: booleans.py:91 --msgid "Allow Apache to execute tmp content." -+#: ../sepolicy/sepolicy/sepolicy.glade:4013 -+msgid "Deny all processes from ptracing or debugging other processes?" - msgstr "" - --#: booleans.py:92 -+#: ../sepolicy/sepolicy/sepolicy.glade:4050 - msgid "" --"Unify HTTPD to communicate with the terminal. Needed for entering the " --"passphrase for certificates at the terminal." -+"File equivalence cause the system to label content under the new path as if " -+"it were under the equivalence path." - msgstr "" - --#: booleans.py:93 --msgid "Unify HTTPD handling of all content files." -+#: ../sepolicy/sepolicy/sepolicy.glade:4106 -+msgid "Files Equivalence" - msgstr "" - --#: booleans.py:94 --msgid "Allow httpd to access cifs file systems" -+#: ../sepolicy/sepolicy/sepolicy.glade:4119 -+msgid "...SELECT TO VIEW DATA..." - msgstr "" - --#: booleans.py:95 --msgid "Allow httpd to access FUSE file systems" -+#: ../sepolicy/sepolicy/sepolicy.glade:4150 -+msgid "Delete" - msgstr "" - --#: booleans.py:96 --msgid "Allow httpd to run gpg" -+#: ../sepolicy/sepolicy/sepolicy.glade:4166 -+msgid "Modify" - msgstr "" - --#: booleans.py:97 --msgid "Allow httpd to access nfs file systems" -+#: ../sepolicy/sepolicy/sepolicy.glade:4227 -+msgid "Revert" - msgstr "" - --#: booleans.py:98 --msgid "Allow httpd to communicate with oddjob to start up a service" -+#: ../sepolicy/sepolicy/sepolicy.glade:4232 -+msgid "" -+"Revert button will launch a dialog window which allows you to revert changes " -+"within the current transaction." - msgstr "" - --#: booleans.py:99 --msgid "Allow httpd to access openstack ports" -+#: ../sepolicy/sepolicy/sepolicy.glade:4244 ../sepolicy/sepolicy/gui.py:2421 -+msgid "Update" - msgstr "" - --#: booleans.py:100 --msgid "Allow Apache to query NS records" -+#: ../sepolicy/sepolicy/sepolicy.glade:4249 -+msgid "Commit all changes in your current transaction to the server." - msgstr "" - --#: booleans.py:101 --msgid "Allow icecast to connect to all ports, not just sound ports." -+#: ../sepolicy/sepolicy/sepolicy.glade:4297 -+msgid "Applications - Advanced Search" - msgstr "" - --#: booleans.py:102 -+#: ../sepolicy/sepolicy/sepolicy.glade:4350 -+msgid "Installed" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:4402 -+msgid "Process Types" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:4443 -+msgid "More Details" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:4479 -+#: ../sepolicy/sepolicy/sepolicy.glade:4773 -+msgid "Delete Modified File Labeling" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:4497 - msgid "" --"Allow the Irssi IRC Client to connect to any port, and to bind to any " --"unreserved port." -+"Select file labeling to delete. File labeling will be deleted when update is " -+"applied." - msgstr "" - --#: booleans.py:103 --msgid "Allow confined applications to run with kerberos." -+#: ../sepolicy/sepolicy/sepolicy.glade:4544 -+msgid "SELinux File Label" - msgstr "" - --#: booleans.py:104 --msgid "Allow syslogd daemon to send mail" -+#: ../sepolicy/sepolicy/sepolicy.glade:4583 -+#: ../sepolicy/sepolicy/sepolicy.glade:4733 -+#: ../sepolicy/sepolicy/sepolicy.glade:4864 -+#: ../sepolicy/sepolicy/sepolicy.glade:4998 -+#: ../sepolicy/sepolicy/sepolicy.glade:5347 -+msgid "Save to Update" - msgstr "" - --#: booleans.py:105 --msgid "Allow syslogd the ability to read/write terminals" -+#: ../sepolicy/sepolicy/sepolicy.glade:4623 -+msgid "Delete Modified Ports" - msgstr "" - --#: booleans.py:106 --msgid "Allow logging in and using the system from /dev/console." -+#: ../sepolicy/sepolicy/sepolicy.glade:4641 -+msgid "Select ports to delete. Ports will be deleted when update is applied." - msgstr "" - --#: booleans.py:107 -+#: ../sepolicy/sepolicy/sepolicy.glade:4791 - msgid "" --"Control the ability to mmap a low area of the address space, as configured " --"by /proc/sys/kernel/mmap_min_addr." -+"Select file equivalence labeling to delete.File equivalence labeling will be " -+"deleted when update is applied." - msgstr "" - --#: booleans.py:108 --msgid "Allow mock to read files in home directories." -+#: ../sepolicy/sepolicy/sepolicy.glade:4907 -+#: ../sepolicy/sepolicy/sepolicy.glade:5256 -+msgid "Delete Modified Users Mapping." - msgstr "" - --#: booleans.py:109 --msgid "Allow the mount command to mount any directory or file." -+#: ../sepolicy/sepolicy/sepolicy.glade:4925 -+msgid "" -+"Select login user mapping to delete. Login user mapping will be deleted when " -+"update is applied." - msgstr "" - --#: booleans.py:110 --msgid "Allow mozilla plugin domain to connect to the network using TCP." -+#: ../sepolicy/sepolicy/sepolicy.glade:4960 -+msgid "Login name" - msgstr "" - --#: booleans.py:111 --msgid "" --"Allow mozilla_plugins to create random content in the users home directory" -+#: ../sepolicy/sepolicy/sepolicy.glade:5041 -+msgid "More Types" - msgstr "" - --#: booleans.py:112 --msgid "Allow confined web browsers to read home directory content" -+#: ../sepolicy/sepolicy/sepolicy.glade:5068 -+msgid "Types" - msgstr "" - --#: booleans.py:113 --msgid "Allow mplayer executable stack" -+#: ../sepolicy/sepolicy/sepolicy.glade:5127 -+msgid "" -+"Review the updates you have made before committing them to the system. To " -+"reset an item, uncheck the checkbox. All items checked will be updated in " -+"the system when you select update." - msgstr "" - --#: booleans.py:114 --msgid "Allow mysqld to connect to all ports" -+#: ../sepolicy/sepolicy/sepolicy.glade:5190 -+msgid "Action" - msgstr "" - --#: booleans.py:115 --msgid "Allow BIND to bind apache port." -+#: ../sepolicy/sepolicy/sepolicy.glade:5216 -+msgid "Apply" - msgstr "" - --#: booleans.py:116 -+#: ../sepolicy/sepolicy/sepolicy.glade:5274 - msgid "" --"Allow BIND to write the master zone files. Generally this is used for " --"dynamic DNS or zone transfers." -+"Select users mapping to delete.Users mapping will be deleted when update is " -+"applied." - msgstr "" - --#: booleans.py:117 --msgid "Allow any files/directories to be exported read/only via NFS." -+#: ../sepolicy/sepolicy/sepolicy.glade:5322 -+msgid "SELinux Username" - msgstr "" - --#: booleans.py:118 --msgid "Allow any files/directories to be exported read/write via NFS." -+#: ../sepolicy/sepolicy/sepolicy.glade:5407 -+msgid "" -+"Add User Roles. SELinux User Roles will be created when Update is applied." - msgstr "" - --#: booleans.py:119 -+#: ../sepolicy/sepolicy/sepolicy.glade:5432 -+msgid "SELinux User Name" -+msgstr "" -+ -+#: ../sepolicy/sepolicy/sepolicy.glade:5547 - msgid "" --"Allow nfs servers to modify public files used for public file transfer " --"services. Files/Directories must be labeled public_content_rw_t." -+"Enter MLS/MCS Range for this SELinux User.\n" -+"s0-s0:c1023" - msgstr "" - --#: booleans.py:120 --msgid "Allow system to run with NIS" -+#: ../sepolicy/sepolicy/sepolicy.glade:5578 -+msgid "" -+"Specify the default level that you would like this SELinux user to login " -+"with. Defaults to s0." - msgstr "" - --#: booleans.py:121 --msgid "Allow confined applications to use nscd shared memory." -+#: ../sepolicy/sepolicy/sepolicy.glade:5582 -+msgid "Enter Default Level for SELinux User to login with. Default s0" - msgstr "" - --#: booleans.py:122 --msgid "Allow openshift to lockdown app" -+#: ../sepolicy/sepolicy/gui.py:62 -+msgid "Disable" - msgstr "" - --#: booleans.py:123 --msgid "Allow openvpn to read home directories" -+#: ../sepolicy/sepolicy/gui.py:62 -+msgid "Enable" - msgstr "" - --#: booleans.py:124 --msgid "Allow piranha-lvs domain to connect to the network using TCP." -+#: ../sepolicy/sepolicy/gui.py:67 -+msgid "Advanced <<" - msgstr "" - --#: booleans.py:125 --msgid "Allow polipo to connect to all ports > 1023" -+#: ../sepolicy/sepolicy/gui.py:68 -+msgid "Advanced Search <<" - msgstr "" - --#: booleans.py:126 -+#: ../sepolicy/sepolicy/gui.py:93 - msgid "" --"Determine whether Polipo session daemon can bind tcp sockets to all " --"unreserved ports." -+"\n" -+"To change from Disabled to Enforcing mode\n" -+"- Change the system mode from Disabled to Permissive\n" -+"- Reboot, so that the system can relabel\n" -+"- Once the system is working as planned\n" -+" * Change the system mode to Enforcing\n" - msgstr "" - --#: booleans.py:127 --msgid "" --"Determine whether calling user domains can execute Polipo daemon in the " --"polipo_session_t domain." -+#: ../sepolicy/sepolicy/gui.py:116 -+#, python-format -+msgid "%s is not a valid domain" - msgstr "" - --#: booleans.py:128 --msgid "Determine whether polipo can access cifs file systems." -+#: ../sepolicy/sepolicy/gui.py:639 -+msgid "System Status: Disabled" - msgstr "" - --#: booleans.py:129 --msgid "Determine whether Polipo can access nfs file systems." -+#: ../sepolicy/sepolicy/gui.py:737 -+msgid "Help: Start Page" - msgstr "" - --#: booleans.py:130 --msgid "Enable polyinstantiated directory support." -+#: ../sepolicy/sepolicy/gui.py:741 -+msgid "Help: Booleans Page" - msgstr "" - --#: booleans.py:131 --msgid "Allow postfix_local domain full write access to mail_spool directories" -+#: ../sepolicy/sepolicy/gui.py:747 -+msgid "Help: Executable Files Page" - msgstr "" - --#: booleans.py:132 --msgid "Allow postgresql to use ssh and rsync for point-in-time recovery" -+#: ../sepolicy/sepolicy/gui.py:750 -+msgid "Help: Writable Files Page" - msgstr "" - --#: booleans.py:133 --msgid "Allow transmit client label to foreign database" -+#: ../sepolicy/sepolicy/gui.py:753 -+msgid "Help: Application Types Page" - msgstr "" - --#: booleans.py:134 --msgid "Allow database admins to execute DML statement" -+#: ../sepolicy/sepolicy/gui.py:758 -+msgid "Help: Outbound Network Connections Page" - msgstr "" - --#: booleans.py:135 --msgid "Allow unprivileged users to execute DDL statement" -+#: ../sepolicy/sepolicy/gui.py:761 -+msgid "Help: Inbound Network Connections Page" - msgstr "" - --#: booleans.py:136 --msgid "Allow pppd to load kernel modules for certain modems" -+#: ../sepolicy/sepolicy/gui.py:767 -+msgid "Help: Transition from application Page" - msgstr "" - --#: booleans.py:137 --msgid "Allow pppd to be run for a regular user" -+#: ../sepolicy/sepolicy/gui.py:770 -+msgid "Help: Transition into application Page" - msgstr "" - --#: booleans.py:138 --msgid "" --"Allow privoxy to connect to all ports, not just HTTP, FTP, and Gopher ports." -+#: ../sepolicy/sepolicy/gui.py:773 -+msgid "Help: Transition application file Page" - msgstr "" - --#: booleans.py:139 --msgid "Allow Puppet client to manage all file types." -+#: ../sepolicy/sepolicy/gui.py:777 -+msgid "Help: Systems Page" - msgstr "" - --#: booleans.py:140 --msgid "Allow Puppet master to use connect to MySQL and PostgreSQL database" -+#: ../sepolicy/sepolicy/gui.py:781 -+msgid "Help: Lockdown Page" - msgstr "" - --#: booleans.py:141 --msgid "Allow racoon to read shadow" -+#: ../sepolicy/sepolicy/gui.py:785 -+msgid "Help: Login Page" - msgstr "" - --#: booleans.py:142 --msgid "Allow rgmanager domain to connect to the network using TCP." -+#: ../sepolicy/sepolicy/gui.py:789 -+msgid "Help: SELinux User Page" - msgstr "" - --#: booleans.py:143 --msgid "" --"Allow rsync to modify public files used for public file transfer services. " --"Files/Directories must be labeled public_content_rw_t." -+#: ../sepolicy/sepolicy/gui.py:793 -+msgid "Help: File Equivalence Page" - msgstr "" - --#: booleans.py:144 --msgid "Allow rsync to run as a client" -+#: ../sepolicy/sepolicy/gui.py:1048 -+#, python-format -+msgid "File path used to enter the '%s' domain." - msgstr "" - --#: booleans.py:145 --msgid "Allow rsync to export any files/directories read only." -+#: ../sepolicy/sepolicy/gui.py:1049 -+#, python-format -+msgid "Files to which the '%s' domain can write." - msgstr "" - --#: booleans.py:146 --msgid "Allow rsync servers to share cifs files systems" -+#: ../sepolicy/sepolicy/gui.py:1050 -+#, python-format -+msgid "Network Ports to which the '%s' is allowed to connect." - msgstr "" - --#: booleans.py:147 --msgid "Allow rsync servers to share nfs files systems" -+#: ../sepolicy/sepolicy/gui.py:1051 -+#, python-format -+msgid "Network Ports to which the '%s' is allowed to listen." - msgstr "" - --#: booleans.py:148 --msgid "Allow samba to create new home directories (e.g. via PAM)" -+#: ../sepolicy/sepolicy/gui.py:1052 -+#, python-format -+msgid "File Types defined for the '%s'." - msgstr "" - --#: booleans.py:149 -+#: ../sepolicy/sepolicy/gui.py:1053 -+#, python-format - msgid "" --"Allow samba to act as the domain controller, add users, groups and change " --"passwords." -+"Display boolean information that can be used to modify the policy for the " -+"'%s'." - msgstr "" - --#: booleans.py:150 --msgid "Allow samba to share users home directories." -+#: ../sepolicy/sepolicy/gui.py:1054 -+#, python-format -+msgid "Display file type information that can be used by the '%s'." - msgstr "" - --#: booleans.py:151 --msgid "Allow samba to share any file/directory read only." -+#: ../sepolicy/sepolicy/gui.py:1055 -+#, python-format -+msgid "Display network ports to which the '%s' can connect or listen to." - msgstr "" - --#: booleans.py:152 --msgid "Allow samba to share any file/directory read/write." -+#: ../sepolicy/sepolicy/gui.py:1056 -+#, python-format -+msgid "Application Transitions Into '%s'" - msgstr "" - --#: booleans.py:153 --msgid "Allow samba to act as a portmapper" -+#: ../sepolicy/sepolicy/gui.py:1057 -+#, python-format -+msgid "Application Transitions From '%s'" - msgstr "" - --#: booleans.py:154 --msgid "Allow samba to run unconfined scripts" -+#: ../sepolicy/sepolicy/gui.py:1058 -+#, python-format -+msgid "File Transitions From '%s'" - msgstr "" - --#: booleans.py:155 --msgid "Allow samba to export ntfs/fusefs volumes." -+#: ../sepolicy/sepolicy/gui.py:1059 -+#, python-format -+msgid "" -+"Executables which will transition to the '%s', when executing a selected " -+"domains entrypoint." - msgstr "" - --#: booleans.py:156 --msgid "Allow samba to export NFS volumes." -+#: ../sepolicy/sepolicy/gui.py:1060 -+#, python-format -+msgid "" -+"Executables which will transition to a different domain, when the '%s' " -+"executes them." - msgstr "" - --#: booleans.py:157 --msgid "Allow sanlock to read/write fuse files" -+#: ../sepolicy/sepolicy/gui.py:1061 -+#, python-format -+msgid "Files by '%s' will transitions to a different label." - msgstr "" - --#: booleans.py:158 --msgid "Allow sanlock to manage nfs files" -+#: ../sepolicy/sepolicy/gui.py:1062 -+#, python-format -+msgid "Display applications that can transition into or out of the '%s'." - msgstr "" - --#: booleans.py:159 --msgid "Allow sanlock to manage cifs files" -+#: ../sepolicy/sepolicy/gui.py:1170 -+msgid "MISSING FILE PATH" - msgstr "" - --#: booleans.py:160 --msgid "Allow sasl to read shadow" -+#: ../sepolicy/sepolicy/gui.py:1285 ../sepolicy/sepolicy/gui.py:1287 -+msgid "Boolean section." - msgstr "" - --#: booleans.py:161 --msgid "Allow secadm to exec content" -+#: ../sepolicy/sepolicy/gui.py:1285 -+msgid "To disable this transition, go to the " - msgstr "" - --#: booleans.py:162 --msgid "" --"disallow programs, such as newrole, from transitioning to administrative " --"user domains." -+#: ../sepolicy/sepolicy/gui.py:1287 -+msgid "To enable this transition, go to the " - msgstr "" - --#: booleans.py:163 --msgid "Disable kernel module loading." -+#: ../sepolicy/sepolicy/gui.py:1344 -+msgid "executable" - msgstr "" - --#: booleans.py:164 --msgid "" --"Boolean to determine whether the system permits loading policy, setting " --"enforcing mode, and changing boolean values. Set this to true and you have " --"to reboot to set it back." -+#: ../sepolicy/sepolicy/gui.py:1347 -+msgid "writable" - msgstr "" - --#: booleans.py:165 --msgid "Allow regular users direct dri device access" -+#: ../sepolicy/sepolicy/gui.py:1350 -+msgid "application" - msgstr "" - --#: booleans.py:166 --msgid "" --"Allow unconfined executables to make their heap memory executable. Doing " --"this is a really bad idea. Probably indicates a badly coded executable, but " --"could indicate an attack. This executable should be reported in bugzilla" -+#: ../sepolicy/sepolicy/gui.py:1351 -+#, python-format -+msgid "Add new %(TYPE)s file path for '%(DOMAIN)s' domains." - msgstr "" - --#: booleans.py:167 --msgid "" --"Allow all unconfined executables to use libraries requiring text relocation " --"that are not labeled textrel_shlib_t" -+#: ../sepolicy/sepolicy/gui.py:1352 -+#, python-format -+msgid "Delete %(TYPE)s file paths for '%(DOMAIN)s' domain." - msgstr "" - --#: booleans.py:168 -+#: ../sepolicy/sepolicy/gui.py:1353 -+#, python-format - msgid "" --"Allow unconfined executables to make their stack executable. This should " --"never, ever be necessary. Probably indicates a badly coded executable, but " --"could indicate an attack. This executable should be reported in bugzilla" -+"Modify %(TYPE)s file path for '%(DOMAIN)s' domain. Only bolded items in the " -+"list can be selected, this indicates they were modified previously." - msgstr "" - --#: booleans.py:169 --msgid "Allow users to connect to the local mysql server" -+#: ../sepolicy/sepolicy/gui.py:1365 -+msgid "connect" - msgstr "" - --#: booleans.py:170 --msgid "" --"Allow confined users the ability to execute the ping and traceroute commands." -+#: ../sepolicy/sepolicy/gui.py:1368 -+msgid "listen for inbound connections" - msgstr "" - --#: booleans.py:171 --msgid "Allow users to connect to PostgreSQL" -+#: ../sepolicy/sepolicy/gui.py:1370 -+msgid "Add new port definition to which the '%(APP)s' domain is allowed to %s." - msgstr "" - --#: booleans.py:172 -+#: ../sepolicy/sepolicy/gui.py:1371 - msgid "" --"Allow user to r/w files on filesystems that do not have extended attributes " --"(FAT, CDROM, FLOPPY)" -+"Delete modified port definitions to which the '%(APP)s' domain is allowed to " -+"%s." - msgstr "" - --#: booleans.py:173 -+#: ../sepolicy/sepolicy/gui.py:1372 -+#, python-format - msgid "" --"Allow users to run TCP servers (bind to ports and accept connection from the " --"same domain and outside users) disabling this forces FTP passive mode and " --"may change other protocols." -+"Modify port definitions to which the '%(APP)s' domain is allowed to %(PERM)s." - msgstr "" - --#: booleans.py:174 --msgid "Allow user to use ssh chroot environment." -+#: ../sepolicy/sepolicy/gui.py:1401 -+msgid "Add new SELinux User/Role definition." - msgstr "" - --#: booleans.py:175 --msgid "Allow user music sharing" -+#: ../sepolicy/sepolicy/gui.py:1402 -+msgid "Delete modified SELinux User/Role definitions." - msgstr "" - --#: booleans.py:176 --msgid "" --"Allow anon internal-sftp to upload files, used for public file transfer " --"services. Directories must be labeled public_content_rw_t." -+#: ../sepolicy/sepolicy/gui.py:1403 -+msgid "Modify selected modified SELinux User/Role definitions." - msgstr "" - --#: booleans.py:177 --msgid "" --"Allow sftp-internal to read and write files in the user home directories" -+#: ../sepolicy/sepolicy/gui.py:1410 -+msgid "Add new Login Mapping definition." - msgstr "" - --#: booleans.py:178 --msgid "" --"Allow sftp-internal to login to local users and read/write all files on the " --"system, governed by DAC." -+#: ../sepolicy/sepolicy/gui.py:1411 -+msgid "Delete modified Login Mapping definitions." - msgstr "" - --#: booleans.py:179 --msgid "" --"Allow internal-sftp to read and write files in the user ssh home directories." -+#: ../sepolicy/sepolicy/gui.py:1412 -+msgid "Modify selected modified Login Mapping definitions." - msgstr "" - --#: booleans.py:180 --msgid "Allow sge to connect to the network using any TCP port" -+#: ../sepolicy/sepolicy/gui.py:1419 -+msgid "Add new File Equivalence definition." - msgstr "" - --#: booleans.py:181 --msgid "Allow sge to access nfs file systems." -+#: ../sepolicy/sepolicy/gui.py:1420 -+msgid "Delete modified File Equivalence definitions." - msgstr "" - --#: booleans.py:182 -+#: ../sepolicy/sepolicy/gui.py:1421 - msgid "" --"Enable additional permissions needed to support devices on 3ware controllers." -+"Modify selected modified File Equivalence definitions. Only bolded items in " -+"the list can be selected, this indicates they were modified previously." - msgstr "" - --#: booleans.py:183 --msgid "" --"Allow samba to modify public files used for public file transfer services. " --"Files/Directories must be labeled public_content_rw_t." -+#: ../sepolicy/sepolicy/gui.py:1449 -+#, python-format -+msgid "Boolean %s Allow Rules" - msgstr "" - --#: booleans.py:184 --msgid "Allow user spamassassin clients to use the network." -+#: ../sepolicy/sepolicy/gui.py:1462 -+#, python-format -+msgid "Add Network Port for %s. Ports will be created when update is applied." - msgstr "" - --#: booleans.py:185 --msgid "Allow spamd to read/write user home directories." -+#: ../sepolicy/sepolicy/gui.py:1463 -+#, python-format -+msgid "Add Network Port for %s" - msgstr "" - --#: booleans.py:186 -+#: ../sepolicy/sepolicy/gui.py:1468 -+#, python-format - msgid "" --"Allow squid to connect to all ports, not just HTTP, FTP, and Gopher ports." --msgstr "" -- --#: booleans.py:187 --msgid "Allow squid to run as a transparent proxy (TPROXY)" -+"Add File Labeling for %s. File labels will be created when update is applied." - msgstr "" - --#: booleans.py:188 --msgid "" --"Allow ssh with chroot env to read and write files in the user home " --"directories" -+#: ../sepolicy/sepolicy/gui.py:1469 ../sepolicy/sepolicy/gui.py:1522 -+#, python-format -+msgid "Add File Labeling for %s" - msgstr "" - --#: booleans.py:189 --msgid "allow host key based authentication" -+#: ../sepolicy/sepolicy/gui.py:1479 -+msgid "Add Login Mapping. User Mapping will be created when Update is applied." - msgstr "" - --#: booleans.py:190 --msgid "Allow ssh logins as sysadm_r:sysadm_t" -+#: ../sepolicy/sepolicy/gui.py:1480 -+msgid "Add Login Mapping" - msgstr "" - --#: booleans.py:191 --msgid "Allow staff to exec content" -+#: ../sepolicy/sepolicy/gui.py:1485 -+msgid "" -+"Add SELinux User Role. SELinux user roles will be created when update is " -+"applied." - msgstr "" - --#: booleans.py:192 --msgid "allow staff user to create and transition to svirt domains." -+#: ../sepolicy/sepolicy/gui.py:1486 -+msgid "Add SELinux Users" - msgstr "" - --#: booleans.py:193 --msgid "Allow sysadm to exec content" -+#: ../sepolicy/sepolicy/gui.py:1493 -+msgid "" -+"Add File Equivalency Mapping. Mapping will be created when update is applied." - msgstr "" - --#: booleans.py:194 --msgid "Allow the Telepathy connection managers to connect to any network port." -+#: ../sepolicy/sepolicy/gui.py:1494 -+msgid "Add SELinux File Equivalency" - msgstr "" - --#: booleans.py:195 -+#: ../sepolicy/sepolicy/gui.py:1521 -+#, python-format - msgid "" --"Allow the Telepathy connection managers to connect to any generic TCP port." -+"Modify File Labeling for %s. File labels will be created when update is " -+"applied." - msgstr "" - --#: booleans.py:196 -+#: ../sepolicy/sepolicy/gui.py:1577 - msgid "" --"Allow tftp to modify public files used for public file transfer services." -+"Modify SELinux User Role. SELinux user roles will be modified when update is " -+"applied." - msgstr "" - --#: booleans.py:197 --msgid "Allow tftp to read and write files in the user home directories" -+#: ../sepolicy/sepolicy/gui.py:1578 -+msgid "Modify SELinux Users" - msgstr "" - --#: booleans.py:198 --msgid "Allow tor daemon to bind tcp sockets to all unreserved ports." -+#: ../sepolicy/sepolicy/gui.py:1586 -+msgid "" -+"Modify Login Mapping. Login Mapping will be modified when Update is applied." - msgstr "" - --#: booleans.py:199 --msgid "Allow tor to act as a relay" -+#: ../sepolicy/sepolicy/gui.py:1587 -+msgid "Modify Login Mapping" - msgstr "" - --#: booleans.py:200 -+#: ../sepolicy/sepolicy/gui.py:1593 - msgid "" --"allow unconfined users to transition to the chrome sandbox domains when " --"running chrome-sandbox" -+"Modify File Equivalency Mapping. Mapping will be created when update is " -+"applied." - msgstr "" - --#: booleans.py:201 --msgid "Allow a user to login as an unconfined domain" -+#: ../sepolicy/sepolicy/gui.py:1594 -+msgid "Modify SELinux File Equivalency" - msgstr "" - --#: booleans.py:202 -+#: ../sepolicy/sepolicy/gui.py:1679 -+#, python-format - msgid "" --"Allow unconfined users to transition to the Mozilla plugin domain when " --"running xulrunner plugin-container." -+"Modify Network Port for %s. Ports will be created when update is applied." - msgstr "" - --#: booleans.py:203 --msgid "Allow video playing tools to run unconfined" -+#: ../sepolicy/sepolicy/gui.py:1680 -+#, python-format -+msgid "Modify Network Port for %s" - msgstr "" - --#: booleans.py:204 --msgid "Allow unprivledged user to create and transition to svirt domains." -+#: ../sepolicy/sepolicy/gui.py:1898 -+#, python-format -+msgid "The entry '%s' is not a valid path. Paths must begin with a '/'." - msgstr "" - --#: booleans.py:205 --msgid "Support ecryptfs home directories" -+#: ../sepolicy/sepolicy/gui.py:1911 -+msgid "Port number must be between 1 and 65536" - msgstr "" - --#: booleans.py:206 --msgid "Support fusefs home directories" -+#: ../sepolicy/sepolicy/gui.py:2188 -+#, python-format -+msgid "SELinux name: %s" - msgstr "" - --#: booleans.py:207 --msgid "Use lpd server instead of cups" -+#: ../sepolicy/sepolicy/gui.py:2199 -+#, python-format -+msgid "Add file labeling for %s" - msgstr "" - --#: booleans.py:208 --msgid "Support NFS home directories" -+#: ../sepolicy/sepolicy/gui.py:2201 -+#, python-format -+msgid "Delete file labeling for %s" - msgstr "" - --#: booleans.py:209 --msgid "Support SAMBA home directories" -+#: ../sepolicy/sepolicy/gui.py:2203 -+#, python-format -+msgid "Modify file labeling for %s" - msgstr "" - --#: booleans.py:210 --msgid "Allow user to exec content" -+#: ../sepolicy/sepolicy/gui.py:2207 -+#, python-format -+msgid "File path: %s" - msgstr "" - --#: booleans.py:211 --msgid "Allow varnishd to connect to all ports, not just HTTP." -+#: ../sepolicy/sepolicy/gui.py:2210 -+#, python-format -+msgid "File class: %s" - msgstr "" - --#: booleans.py:212 --msgid "Ignore vbetool mmap_zero errors." -+#: ../sepolicy/sepolicy/gui.py:2213 ../sepolicy/sepolicy/gui.py:2237 -+#, python-format -+msgid "SELinux file type: %s" - msgstr "" - --#: booleans.py:213 --msgid "" --"Allow confined virtual guests to use serial/parallel communication ports" -+#: ../sepolicy/sepolicy/gui.py:2222 -+#, python-format -+msgid "Add ports for %s" - msgstr "" - --#: booleans.py:214 --msgid "" --"Allow confined virtual guests to use executable memory and executable stack" -+#: ../sepolicy/sepolicy/gui.py:2224 -+#, python-format -+msgid "Delete ports for %s" - msgstr "" - --#: booleans.py:215 --msgid "Allow confined virtual guests to read fuse files" -+#: ../sepolicy/sepolicy/gui.py:2226 -+#, python-format -+msgid "Modify ports for %s" - msgstr "" - --#: booleans.py:216 --msgid "Allow confined virtual guests to manage nfs files" -+#: ../sepolicy/sepolicy/gui.py:2229 -+#, python-format -+msgid "Network ports: %s" - msgstr "" - --#: booleans.py:217 --msgid "Allow confined virtual guests to interact with rawip sockets" -+#: ../sepolicy/sepolicy/gui.py:2232 -+#, python-format -+msgid "Network protocol: %s" - msgstr "" - --#: booleans.py:218 --msgid "Allow confined virtual guests to manage cifs files" -+#: ../sepolicy/sepolicy/gui.py:2246 -+msgid "Add user" - msgstr "" - --#: booleans.py:219 --msgid "Allow confined virtual guests to interact with the sanlock" -+#: ../sepolicy/sepolicy/gui.py:2248 -+msgid "Delete user" - msgstr "" - --#: booleans.py:220 --msgid "Allow confined virtual guests to manage device configuration, (pci)" -+#: ../sepolicy/sepolicy/gui.py:2250 -+msgid "Modify user" - msgstr "" - --#: booleans.py:221 --msgid "Allow confined virtual guests to use usb devices" -+#: ../sepolicy/sepolicy/gui.py:2253 -+#, python-format -+msgid "SELinux User : %s" - msgstr "" - --#: booleans.py:222 --msgid "Allow confined virtual guests to interact with the xserver" -+#: ../sepolicy/sepolicy/gui.py:2258 -+#, python-format -+msgid "Roles: %s" - msgstr "" - --#: booleans.py:223 --msgid "Allow webadm to manage files in users home directories" -+#: ../sepolicy/sepolicy/gui.py:2262 ../sepolicy/sepolicy/gui.py:2287 -+#, python-format -+msgid "MLS/MCS Range: %s" - msgstr "" - --#: booleans.py:224 --msgid "Allow webadm to read files in users home directories" -+#: ../sepolicy/sepolicy/gui.py:2271 -+msgid "Add login mapping" - msgstr "" - --#: booleans.py:225 --msgid "Ignore wine mmap_zero errors." -+#: ../sepolicy/sepolicy/gui.py:2273 -+msgid "Delete login mapping" - msgstr "" - --#: booleans.py:226 --msgid "Allow the graphical login program to execute bootloader" -+#: ../sepolicy/sepolicy/gui.py:2275 -+msgid "Modify login mapping" - msgstr "" - --#: booleans.py:227 --msgid "" --"Allow the graphical login program to login directly as sysadm_r:sysadm_t" -+#: ../sepolicy/sepolicy/gui.py:2279 -+#, python-format -+msgid "Login Name : %s" - msgstr "" - --#: booleans.py:228 --msgid "Allow xen to manage nfs files" -+#: ../sepolicy/sepolicy/gui.py:2283 -+#, python-format -+msgid "SELinux User: %s" - msgstr "" - --#: booleans.py:229 --msgid "" --"Allow xend to run blktapctrl/tapdisk. Not required if using dedicated " --"logical volumes for disk images." -+#: ../sepolicy/sepolicy/gui.py:2296 -+msgid "Add file equiv labeling." - msgstr "" - --#: booleans.py:230 --msgid "Allow xend to run qemu-dm. Not required if using paravirt and no vfb." -+#: ../sepolicy/sepolicy/gui.py:2298 -+msgid "Delete file equiv labeling." - msgstr "" - --#: booleans.py:231 --msgid "" --"Allow xguest users to configure Network Manager and connect to apache ports" -+#: ../sepolicy/sepolicy/gui.py:2300 -+msgid "Modify file equiv labeling." - msgstr "" - --#: booleans.py:232 --msgid "Allow xguest to exec content" -+#: ../sepolicy/sepolicy/gui.py:2304 -+#, python-format -+msgid "File path : %s" - msgstr "" - --#: booleans.py:233 --msgid "Allow xguest users to mount removable media" -+#: ../sepolicy/sepolicy/gui.py:2308 -+#, python-format -+msgid "Equivalence: %s" - msgstr "" - --#: booleans.py:234 --msgid "Allow xguest to use blue tooth devices" -+#: ../sepolicy/sepolicy/gui.py:2411 -+#, python-format -+msgid "" -+"Run restorecon on %(PATH)s to change its type from %(CUR_CONTEXT)s to the " -+"default %(DEF_CONTEXT)s?" - msgstr "" - --#: booleans.py:235 --msgid "Allows clients to write to the X server shared memory segments." -+#: ../sepolicy/sepolicy/gui.py:2423 -+msgid "Update Changes" - msgstr "" - --#: booleans.py:236 --msgid "Allows XServer to execute writable memory" -+#: ../sepolicy/sepolicy/gui.py:2425 -+msgid "Revert Changes" - msgstr "" - --#: booleans.py:237 --msgid "Support X userspace object manager" -+#: ../sepolicy/sepolicy/gui.py:2598 -+msgid "System Status: Enforcing" - msgstr "" - --#: booleans.py:238 --msgid "Allow zabbix to connect to unreserved ports" -+#: ../sepolicy/sepolicy/gui.py:2600 -+msgid "System Status: Permissive" - msgstr "" - --#: booleans.py:239 --msgid "Allow zebra daemon to write it configuration files" -+#: ../sepolicy/sepolicy/gui.py:2791 -+msgid "" -+"Changing to SELinux disabled requires a reboot. It is not recommended. If " -+"you later decide to turn SELinux back on, the system will be required to " -+"relabel. If you just want to see if SELinux is causing a problem on your " -+"system, you can go to permissive mode which will only log errors and not " -+"enforce SELinux policy. Permissive mode does not require a reboot. Do you " -+"wish to continue?" - msgstr "" - --#: booleans.py:240 -+#: ../sepolicy/sepolicy/gui.py:2825 - msgid "" --"Allow ZoneMinder to modify public files used for public file transfer " --"services." -+"You are attempting to close the application without applying your changes.\n" -+" * To apply changes you have made during this session, click No and " -+"click Update.\n" -+" * To leave the application without applying your changes, click Yes. " -+"All changes that you have made during this session will be lost." -+msgstr "" -+ -+#: ../sepolicy/sepolicy/gui.py:2825 -+msgid "Loss of data Dialog" - msgstr "" -diff --git a/policycoreutils/po/af_ZA.po b/policycoreutils/po/af_ZA.po -new file mode 100644 -index 0000000..8e73e5d ---- /dev/null -+++ b/policycoreutils/po/af_ZA.po -@@ -0,0 +1,5161 @@ -+# SOME DESCRIPTIVE TITLE. -+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER -+# This file is distributed under the same license as the PACKAGE package. -+# -+# Translators: -+msgid "" -+msgstr "" -+"Project-Id-Version: Policycoreutils\n" -+"Report-Msgid-Bugs-To: \n" -+"POT-Creation-Date: 2013-10-15 15:17-0400\n" -+"PO-Revision-Date: 2012-03-30 18:14+0000\n" -+"Last-Translator: FULL NAME \n" -+"Language-Team: Afrikaans (South Africa) (http://www.transifex.com/projects/p/" -+"fedora/language/af_ZA/)\n" -+"Language: af_ZA\n" -+"MIME-Version: 1.0\n" -+"Content-Type: text/plain; charset=UTF-8\n" -+"Content-Transfer-Encoding: 8bit\n" -+"Plural-Forms: nplurals=2; plural=(n != 1);\n" -+ -+#: ../run_init/run_init.c:67 -+msgid "" -+"USAGE: run_init