Þ Á $ ,, à: á: % ÿ: , %; , R; % ; ¥; , Ÿ; ë; I < I J< I < 3 Þ< = E 3= : y= ( Ž= Ý= ù= d > ^ q> è Ð> ) ¹? ã@ ê@ M î@ W ! [W }W W ' ŽW ÜW ùW X 4X NX lX X šX œX ÕX 1 òX $Y >Y UY " oY Y °Y ÅY æY Z %Z @Z YZ zZ Z $ ¯Z 3 ÔZ . [ 7[ % U[ $ {[ [ ž[ # Ø[ 2 ü[ - /\ ]\ # z\ \ Œ\ * Ø\ 5 ] 9] X] ! w] ( ] ! Â] ! ä] 7 ^ 7 >^ & v^ ^ $ ·^ / Ü^ / _ E <_ E _ 4 È_ ; ý_ 9` W` ? q` - ±` ) ß` ) a ? 3a ? sa . ³a 5 âa ) b ) Bb ? lb ? ¬b . ìb 5 c ) Qc ) {c ? ¥c ? åc . %d 5 Td $ d ! ¯d Ñd ïd e e
&e J 4e e 3 e ºe Øe îe %
f 3f Of kf - f * ®f . Ùf V g _g sg g g £g µg œg Îg ( âg h A h N Vh O ¥h \ õh ; Ri H i A ×i N j 1 hj ! j ) Œj æj íj ýj k k > "k 6 ak ^ k E ÷k : =l - xl ; Šl ( âl 0 m + v 4 Pv )
v / ¯v ßv æv w w ? 0w ' pw w + ³w ßw üw x ,x & Hx ox x ' x Œx Ôx åx & øx & y & Fy my y y ±y O »y z z + .z Zz
bz mz z 4 §z Üz øz { { -{ :{ N{ 3 i{ { Š{ ¯{ Í{ ê{ | " &| I| X R|
«|
¹| Ä| ' Ô| < ü| # 9}
]} h} |} } } ¢} Š} °}
µ} Ã} ¯ Õ}
~ D ~ Þ~ 3 ü~ ' 0 + X ) D ® ) ó $ $ B $ g ! Î ð # + 2 P Â P d L y Æ J á , U L ¢ % · Ý ù M * x 3
7 T
€
! ¿
á
î
ù
+ O 2 6 ° 5 ç C B a € ¶ Ë Î ê ( @ R [ g O
ß ê $ ö , 6 ' G # o ; " Ï 8 ò + 2
; I O t X 0 Í ( þ 3 ' [ * k µ & Î õ " C ^ d k l z ž ç b ª
& < U l ª ¿ 2 Ñ
o $ ° É Ö è ú
* : K a r : " Ë 7 î & E W _ n } J J Ï ' ¶ 2 Þ
m U _ ã E C s 4 ý T 2 E . Í 5 ü T 2 ( $ º ß ç ô ( "
K Y X c h Π_ %
V $ { 3 °
ä E ò ë 8 $ + ? W p =
È A Ö U : n 9 © , ã 1 ! ) S ' } ' ¥ - Í û % 6 ' < d ¢ ¶ Ë ã ) + & F ' m 0 Š ×
Ý ë ] f u 0 y % ª¡ ; С " ¢ < /¢ E l¢ 0 ²¢ 3 㢠E £ ]£ g£ s£ £ £ ££ 4 Ž£ # é£
€ € € ' (€
P€ [€ q€ € J € 1 ä€ - ¥ - D¥ E r¥ , ž¥ å¥ ô¥ Š /Š + HŠ tŠ Š
¬Š ·Š ŒŠ ÀŠ < Ê 7 § 7 8§ p§ § 3 § c ȧ F ,š sš š š
š E © = e© % £© < É© 7 ª >ª Jª
`ª nª ª ª ª ª % ª $ ¿ª # äª « ! « 3« Q« 8 î¬ D ' U l ?  * ® -® J L® ® r ¬® r ¯ r ¯ M ° + S° j ° V ê° ; A± }± ± { Ž± u 0² D Š² ë³ µ µ u µ $
¶ r 2¶ $ ¥¶ o ʶ x :· * ³· i Þ· , Hž } už óž u ¹ ¹ £¹ 9 Œ¹ x ö¹ 6 oº $ Šº $ ˺ V ðº 9 G» B » N Ä» n Œ Œ Œ , ±Œ U ÞŒ . 4œ - cœ œ œ ¥œ žœ Ëœ 0 äœ A Ÿ 5 WŸ 0 Ÿ , ŸŸ ëÀ * Á , 2Á ? _Á ) Á < ÉÁ  *  J 1 Q  "  M µÂ ) à -à =à W Dà à - µÃ A ãà ! %Ä P GÄ Ä . ¥Ä ÔÄ çÅ È É B É Z [É 6 ¶É ' íÉ Ê 9 (Ê 1 bÊ E Ê ? ÚÊ C Ë = ^Ë B Ë : ßË K Ì = fÌ Q €Ì I öÌ D @Í ]
Í \ ãÍ W @Î W Î U ðÎ Z FÏ ^ ¡Ï H Ð < IÐ - Ð M ŽÐ H Ñ 9 KÑ A
Ñ 3 ÇÑ 9 ûÑ I 5Ò E Ò M ÅÒ E Ó C YÓ I Ó ? çÓ - 'Ô B UÔ 6 Ô < ÏÔ 6 Õ 9 CÕ 1 }Õ W ¯Õ , Ö E 4Ö D zÖ ? ¿Ö = ÿÖ B =× : × C »× ? ÿ× 1 ?Ø . qØ < Ø 7 ÝØ 7 Ù 0 MÙ - ~Ù 3 ¬Ù : àÙ 3 Ú < OÚ A Ú > ÎÚ 6
Û 2 DÛ H wÛ f ÀÛ 5 'Ü / ]Ü B Ü T ÐÜ E %Ý 3 kÝ C Ý E ãÝ 5 )Þ 2 _Þ 0 Þ 9 ÃÞ 1 ýÞ , /ß E \ß D ¢ß ? çß = 'à B eà : šà 7 ãà I á K eá J ±á E üá C Bâ F â 5 Íâ 9 ã C =ã L ã 5 Îã 2 ä < 7ä D tä E ¹ä E ÿä U Eå U å Q ñå 0 Cæ H tæ \ œæ \ ç l wç l äç h Qè e ºè ? é - `é g é N öé Q Eê Q ê a éê a Kë ] ë Z ì Q fì Q žì a
í a lí ] Îí Z ,î T î T Üî d 1ï d ï ` ûï ] \ð B ºð @ ýð / >ñ nñ ñ ¥ñ ¯ñ Èñ Tò M [ò 0 ©ò ! Úò ? üò 9 <ó 6 vó $ ó $ Òó ? ÷ó E 7ô Q }ô n Ïô >õ Wõ mõ 3 tõ šõ »õ Ëõ ! çõ 9 ö Cö J Jö ] ö h óö { \÷ S Ø÷ W ,ø Y ø l Þø ` Kù 9 ¬ù / æù ú &ú ! Bú dú nú uú N úú Iû N æû Q 5ü 9 ü T Áü T ý M ký D ¹ý k þý < jþ W §þ ÿþ - ÿ * :ÿ
eÿ sÿ ÿ ¥ÿ e & ~ ¢ Ÿ ? Ñ l ? ~ * Ÿ é % 3 F z Á 5 H N ~ Í H ç g 0 B Û { J W Ý 5
C L
v
? G T < m 8 ª E ã ) H 9 o ¹ G )
/ q
M ¡
8 ï
( / H , x 5 ¥ & Û 5 # + Y
Š A Ç ; 8 E 5 ~ Ž ! Ç é i ð Z 0 j B Þ å @ ø 4 9 _ n : Î $ - . \ k ~ I ³ ý
1 1 F < x > µ ? ô 4 u G œ Ù é E ý c C ? § ç ÷
$ $ / T
X c h w ' ² m Î 5 < B r H µ A þ 6 @ u w N í ? < ? | 6 Œ ó 6 : B ? } 6 œ ô é û x å r ^ $ Ñ x ö * o l , } 4 ² 9 Ð 6
! $ A! $ f! k ! ÷! ê " Q û" ] M# «# Á# ) Ô# * þ# )$ 0$ C$ M$ 9 T$ $ $% 7% $ S% > x% D ·% T ü% Z Q& ¬& % Ì& ò& H ü& $ E' $ j' Z ' ê' ( ( ' !( I( P( k Y( Å( Ì( 3 Ø( ) ) &) 9) = R) = ) ^ Î) 7 -* b e* È* Þ* è* þ* + + Z ¹+ ; , c P, Ž, R Í, 0 - 0 Q- W - Ú- " ñ- B . ( W. . . . °. & >/
e0 s0 ) ÷0 !1 01 & K1 r1 1 & ®1 Õ1 ì1 =
2 K2 f2 ¢ x2 * 3 F3 g3 |3 3 ®3 Ç3 ß3 ô3 4 ! 4 74 & G4 ] n4 < Ì4 Z 5 6 d5 5 ³5 »5 Ñ5 ç5 d î5 a S6 ù µ6 6 ¯7 B æ7 )8 ?8 x Ð8 ¢ I9 ` ì9 œ M: Q ; ~ ]; Q Ü; B .< H q< º< ?= ? I= < = Æ= ! Ó= õ= E > B N> > §> À> £ C? ç? Ï y@ Q IA A ºA 6 ÁA L øA ( EB Z nB f ÉB 0D % =D % cD & D ' °D _ ØD 8E k TE o ÀE M 0F M ~F ` ÌF -G 4G a >G G G I èG I 2H J |H ÇH ãH I I = %I 0 cI I I ±I ÁI áI # J ) &J 5 PJ & J 2 J P àJ $ 1K c VK ºK ÇK 7 ÙK ± L ! ÃL åL ª ìL I N M áN ? /O i oO l ÙO 7 FP W ~P ~ ÖP UQ nQ Q Q Q ËQ 4 êQ # R CR PR WR A mR ¯R ! ŒR 3 ÞR S h S A
S B ÇS B
T c MT < ±T îT ) ýT 'U CU G \U ! €U ( ÆU ïU V V V D V ? bV ? ¢V âV ôV > W EW c ßW CX VX iX ® vX F %Y C lY < °Y ` íY ^ NZ Z ! ÆZ èZ ' [ ,[ 0[ :[ >[ A E[ @ [ ? È[ \ 3 \ - O\ ¢ \ + C × ù c í + O Q 7 K ¹ Ù z ý ' a ¡ à 6 i s Ù M ) e x _ Ñ ž µ Æ ³ ] È } , V Þ = á I § Ë € Ž Z ò D N
S " ± ° ª W ' E . Ã Û R í Œ 9 » w é v  D l  w T Œ ) ¶ 0 : | u
è z k 2 Ê × L Ÿ ¥ ô J } G [ · è h $ Ã P L o t |
A f ¿ E Ö > P ` n 3 à Á " T 8 ú * « Q W P Ç 4 d â û U b l ï ¬ Ø 7 É a Q 8 ü 3 q ¯ K Ð ~ Ý ý ç > § Î š 9 _ 6 e £ r ² t - ¯ ³ \ œ ! ) T Ú ö L á m p 5 f º y * " æ ' ® @ # Ú I : ¢ 8 \ ^ O ñ O u ¶ j ` W õ Ñ ë & 2 Á m Ð ï x Ö ? I Ÿ Ò 4 R d þ ° ü Ó j j p ¬ V S Ï © ¥ « w 0 b # Ü þ ! s k Ä ¹ ( v : , C ± ê Ž i f p ž o + e U Ë Ï 2 ¡ X n ß œ i µ ~ c q x 9 ì Ê / ã Ø ß Ì å H
À £ g ® î < § Õ · Š ã { ] | ª a
å % ú Ÿ
¬ - · 5 é ? ¥ y Š Y € ÷ S B ± b û 3 4 Î X & X l M s Å Ž ? H ; H Õ M < œ ÷ ª ó r ë Y õ ³ Û U ä , ç / @ À Ä Z Þ ø ð g ñ € - Ü æ ~ [ © o d
ì = Ý > u g º ^ © ž š J ¿ š Ô ° [ ¿ N A ] # µ Ì ² t / { R q Ó Í ð ä 1 Å k ` Z « N ô ( @ v ø ® Y 5 m _ È É ò } & Ò Æ r Ç % B Š ê J ; $ » C ¡ 6 ó . º <
F ¹ E â ö 1 ; y G ù 1 D h Ô » Œ c F ^ G { ¢ Í ( K % ! * V z £ Á 0 ¶ h B ¯ 7 $ F A ² À ÿ = î . n
ÿ
Compile test for %s failed.
Compile test for %s has not run. %s
Compiling of %s interface is not supported.
SELinux Distribution fcontext Equivalence
SELinux Local fcontext Equivalence
%s is not a valid domain '%s' policy modules require existing domains -- Allowed %s [ %s ] -a option can not be used with '%s' domains. Read usage for more details. -d option can not be used with '%s' domains. Read usage for more details. -t option can not be used with '%s' domains. Read usage for more details. -w option can not be used with the --newtype option ...SELECT TO VIEW DATA... Deny all processes from ptracing or debugging other processes? Disable ability to run unconfined system processes? Disable all permissive processes? System Configuration System Mode File Labeling for . File labels will be created when update is applied. Network Port for . Ports will be created when update is applied.
To change from Disabled to Enforcing mode
- Change the system mode from Disabled to Permissive
- Reboot, so that the system can relabel
- Once the system is working as planned
* Change the system mode to Enforcing
A permissive domain is a process label that allows the process to do what it wants, with SELinux only logging the denials, but not enforcing them. Usually permissive domains indicate experimental policy, disabling the module could cause SELinux to deny access to a domain, that should be allowed. Action Add Add File Equivalency Mapping. Mapping will be created when update is applied. Add File Labeling for %s Add File Labeling for %s. File labels will be created when update is applied. Add Login Mapping Add Login Mapping. Login Mapping will be created when update is applied. Add Login Mapping. User Mapping will be created when Update is applied. Add Network Port for %s Add Network Port for %s. Ports will be created when update is applied. Add SELinux File Equivalency Add SELinux User Role. SELinux user roles will be created when update is applied. Add SELinux Users Add User Roles. SELinux User Roles will be created when Update is applied. Add a file Add a module Add a record of the %s object type Add file Equivalence Mapping. Mapping will be created when Update is applied. Add file equiv labeling. Add file labeling for %s Add login mapping Add new %(TYPE)s file path for '%(DOMAIN)s' domains. Add new File Equivalence definition. Add new Login Mapping definition. Add new SELinux User/Role definition. Add new port definition to which the '%(APP)s' domain is allowed to %(PERM)s. Add ports for %s Add user Addr %s already defined Addr %s is defined in policy, cannot be deleted Addr %s is not defined Administrator Login User Role Advanced << Advanced >> Advanced Search << Advanced Search >> All domains Allow {subject} to {rest} Alternate SELinux policy, defaults to /sys/fs/selinux/policy Alternate root directory, defaults to / Alternative root needs to be setup An unconfined domain is a process label that allows the process to do what it wants, without SELinux interfering. Applications started at boot by the init system that SELinux do not have defined SELinux policy will run as unconfined if this module is enabled. Disabling it means all daemons will now be confined. To disable the unconfined_t user you must first remove unconfined_t from the users/login screens. Analyzing Policy... Application File Types Application Transitions From '%s' Application Transitions From 'select domain' Application Transitions Into '%s' Application Transitions Into 'select domain' Applications Applications - Advanced Search Apply Bad format {filename}: Record {record} Boolean
Enabled Boolean %s Allow Rules Boolean %s is defined in policy, cannot be deleted Boolean %s is not defined Booleans Browse Browse to select the file/directory for labeling. Builtin Permissive Types Calling Process Domain Can not combine +/- with other types of categories Can not have multiple sensitivities Can not modify sensitivity levels using '+' on %s Cancel Cannot read policy store. Changing the policy type will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue? Changing to SELinux disabled requires a reboot. It is not recommended. If you later decide to turn SELinux back on, the system will be required to relabel. If you just want to see if SELinux is causing a problem on your system, you can go to permissive mode which will only log errors and not enforce SELinux policy. Permissive mode does not require a reboot. Do you wish to continue? Changing to SELinux enabled will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue? Class Command required for this type of policy Commit all changes in your current transaction to the server. Compiling %s interface Confined Root Administrator Role Context Could not add SELinux user %s Could not add addr %s Could not add file context for %s Could not add ibendport {ibdev_name}/{port} Could not add ibpkey {subnet_prefix}/{pkey} Could not add interface %s Could not add login mapping for %s Could not add port {proto}/{port} Could not add prefix {prefix} for {role} Could not add role {role} for {name} Could not check if SELinux user %s is defined Could not check if addr %s is defined Could not check if boolean %s is defined Could not check if file context for %s is defined Could not check if ibendport {ibdev_name}/{ibendport} is defined Could not check if ibendport {ibdev_name}/{port} is defined Could not check if ibpkey {subnet_prefix}/{pkey} is defined Could not check if interface %s is defined Could not check if login mapping for %s is defined Could not check if port {proto}/{port} is defined Could not commit semanage transaction Could not create SELinux user for %s Could not create a key for %s Could not create a key for ibendport {ibdev_name}/{ibendport} Could not create a key for {ibdev_name}/{port} Could not create a key for {proto}/{port} Could not create a key for {subnet_prefix}/{pkey} Could not create addr for %s Could not create context for %s Could not create context for {ibendport}/{port} Could not create context for {proto}/{port} Could not create context for {subnet_prefix}/{pkey} Could not create file context for %s Could not create ibendport for {ibdev_name}/{port} Could not create ibpkey for {subnet_prefix}/{pkey} Could not create interface for %s Could not create key for %s Could not create login mapping for %s Could not create module key Could not create port for {proto}/{port} Could not create semanage handle Could not delete SELinux user %s Could not delete addr %s Could not delete all interface mappings Could not delete boolean %s Could not delete file context for %s Could not delete ibendport {ibdev_name}/{ibendport} Could not delete ibpkey {subnet_prefix}/{pkey} Could not delete interface %s Could not delete login mapping for %s Could not delete port {proto}/{port} Could not delete the file context %s Could not delete the ibendport {ibdev_name}/{port} Could not delete the ibpkey %s Could not delete the port %s Could not deleteall node mappings Could not disable module %s Could not enable module %s Could not establish semanage connection Could not extract key for %s Could not get module enabled Could not get module lang_ext Could not get module name Could not get module priority Could not list SELinux modules Could not list SELinux users Could not list addrs Could not list booleans Could not list file contexts Could not list file contexts for home directories Could not list ibendports Could not list ibpkeys Could not list interfaces Could not list local file contexts Could not list login mappings Could not list ports Could not list roles for user %s Could not list the file contexts Could not list the ibendports Could not list the ibpkeys Could not list the ports Could not modify SELinux user %s Could not modify addr %s Could not modify boolean %s Could not modify file context for %s Could not modify ibendport {ibdev_name}/{ibendport} Could not modify ibpkey {subnet_prefix}/{pkey} Could not modify interface %s Could not modify login mapping for %s Could not modify port {proto}/{port} Could not query addr %s Could not query file context %s Could not query file context for %s Could not query ibendport {ibdev_name}/{ibendport} Could not query ibpkey {subnet_prefix}/{pkey} Could not query interface %s Could not query port {proto}/{port} Could not query seuser for %s Could not query user for %s Could not remove module %s (remove failed) Could not remove permissive domain %s (remove failed) Could not set MLS level for %s Could not set MLS range for %s Could not set SELinux user for %s Could not set active value of boolean %s Could not set addr context for %s Could not set file context for %s Could not set ibendport context for {ibdev_name}/{port} Could not set ibpkey context for {subnet_prefix}/{pkey} Could not set interface context for %s Could not set mask for %s Could not set message context for %s Could not set mls fields in addr context for %s Could not set mls fields in file context for %s Could not set mls fields in ibendport context for {ibdev_name}/{port} Could not set mls fields in ibpkey context for {subnet_prefix}/{pkey} Could not set mls fields in interface context for %s Could not set mls fields in port context for {proto}/{port} Could not set module key name Could not set name for %s Could not set permissive domain %s (module installation failed) Could not set port context for {proto}/{port} Could not set role in addr context for %s Could not set role in file context for %s Could not set role in ibendport context for {ibdev_name}/{port} Could not set role in ibpkey context for {subnet_prefix}/{pkey} Could not set role in interface context for %s Could not set role in port context for {proto}/{port} Could not set type in addr context for %s Could not set type in file context for %s Could not set type in ibendport context for {ibdev_name}/{port} Could not set type in ibpkey context for {subnet_prefix}/{pkey} Could not set type in interface context for %s Could not set type in port context for {proto}/{port} Could not set user in addr context for %s Could not set user in file context for %s Could not set user in ibendport context for {ibdev_name}/{port} Could not set user in ibpkey context for {subnet_prefix}/{pkey} Could not set user in interface context for %s Could not set user in port context for {proto}/{port} Could not start semanage transaction Could not test MLS enabled status Created the following files:
Customized Permissive Types DBUS System Daemon Default Default Level Default SELinux Level for SELinux user, s0 Default. (MLS/MCS Systems only) Delete Delete %(TYPE)s file paths for '%(DOMAIN)s' domain. Delete Modified File Labeling Delete Modified Ports Delete Modified Users Mapping. Delete a record of the %s object type Delete file equiv labeling. Delete file labeling for %s Delete login mapping Delete modified File Equivalence definitions. Delete modified Login Mapping definitions. Delete modified SELinux User/Role definitions. Delete modified port definitions to which the '%(APP)s' domain is allowed to %(PERM)s. Delete ports for %s Delete user Description Desktop Login User Role Destination Class Disable Disable a module Disable the boolean Disable/Enable dontaudit rules in policy Disabled Display applications that can transition into or out of the '%s'. Display applications that can transition into or out of the 'selected domain'. Display boolean information that can be used to modify the policy for the '%s'. Display boolean information that can be used to modify the policy for the 'selected domain'. Display file type information that can be used by the '%s'. Display file type information that can be used by the 'selected domain'. Display network ports to which the '%s' can connect or listen to. Display network ports to which the 'selected domain' can connect or listen to. Do not print heading when listing %s object types Do not reload policy after commit Domain name(s) of man pages to be created Enable Enable a module Enable the boolean Enabled Enforcing Enter Default Level for SELinux User to login with. Default s0 Enter MLS/MCS Range for this SELinux User.
s0-s0:c1023 Enter MLS/MCS Range for this login User. Defaults to the range for the Selected SELinux User. Enter SELinux role(s) to which the administror domain will transition Enter SELinux user(s) which will transition to this domain Enter domain type which you will be extending Enter domain(s) which this confined admin will administrate Enter interface names, you wish to query Enter the MLS Label to assign to this file path. Enter the MLS Label to assign to this port. Enter the login user name of the user to which you wish to add SELinux User confinement. Enter the path to which you want to setup an equivalence label. Enter the port number or range to which you want to add a port type. Equivalence Path Equivalence class for %s already exists Equivalence class for %s does not exist Equivalence: %s Executable File Executable Files Executables which will transition to '%s', when executing selected domains entrypoint. Executables which will transition to a different domain, when '%s' executes them. Executables which will transition to a different domain, when the 'selected domain' executes them. Executables which will transition to the 'selected domain', when executing a selected domains entrypoint. Existing Domain Type Export Export system settings to a file Extract customizable commands, for use within a transaction Failed to read %s policy file File Contexts file File Equivalence File Name File Path File Transitions From '%s' File Transitions From 'select domain' File Transitions define what happens when the current domain creates the content of a particular class in a directory of the destination type. Optionally a file name could be specified for the transition. File Type. This is used with fcontext. Requires a file type as shown in the mode field by ls, e.g. use d to match only directories or f to match only regular files. The following file type options can be passed: f (regular file), d (directory), c (character device), b (block device), s (socket), l (symbolic link), p (named pipe). If you do not specify a file type, the file type will default to "all files". File Types defined for the '%s'. File Types defined for the 'selected domain'. File class: %s File context for %s already defined File context for %s is defined in policy, cannot be deleted File context for %s is not defined File equivalence cause the system to label content under the new path as if it were under the equivalence path. File path : %s File path used to enter the '%s' domain. File path used to enter the 'selected domain'. File path: %s File spec %s conflicts with equivalency rule '%s %s' File spec %s conflicts with equivalency rule '%s %s'; Try adding '%s' instead File specification can not include spaces Files Files Equivalence Files by '%s' with transitions to a different label. Files to which the '%s' domain can write. Files to which the 'selected domain' can write. Filter Found circular interface class Generate '%s' policy Generate '%s' policy Generate HTML man pages structure for selected SELinux man page Generate SELinux Policy module template Generate SELinux man pages Graphical User Interface for SELinux Policy Help: Application Types Page Help: Booleans Page Help: Executable Files Page Help: File Equivalence Page Help: Inbound Network Connections Page Help: Lockdown Page Help: Login Page Help: Outbound Network Connections Page Help: SELinux User Page Help: Start Page Help: Systems Page Help: Transition application file Page Help: Transition from application Page Help: Transition into application Page Help: Writable Files Page IB Device Name IB device name is required IMPORTANT If-Then-Else rules written in policy that can
allow alternative access control. Import Import local customizations Import system settings from another machine Inbound Input file Interface %s already defined Interface %s does not exist. Interface %s is defined in policy, cannot be deleted Interface %s is not defined Interface file Internet Services Daemon Invalid Pkey Invalid Port Invalid Port Number Invalid file specification Invalid priority %d (needs to be between 1 and 999) Labeling Language Linux Group %s does not exist Linux User %s does not exist List %s local customizations List SELinux Policy interfaces List records of the %s object type Lockdown Lockdown the SELinux System.
This screen can be used to turn up the SELinux Protections. Login Mapping Login Name Login Name : %s Login mapping for %s is already defined Login mapping for %s is defined in policy, cannot be deleted Login mapping for %s is not defined Login name Loss of data Dialog MCS Level MCS Range MISSING FILE PATH MLS MLS Range MLS/ MLS/MCS Range MLS/MCS Range: %s MLS/MCS Security Range (MLS/MCS Systems only) SELinux Range for SELinux login mapping defaults to the SELinux user record range. SELinux Range for SELinux user defaults to s0. Make Path Recursive Manage SELinux confined users (Roles and levels for an SELinux user) Manage SELinux policy modules Manage booleans to selectively enable functionality Manage file context mapping definitions Manage infiniband end port type definitions Manage infiniband ibpkey type definitions Manage login mappings between linux users and SELinux confined users Manage network interface type definitions Manage network node type definitions Manage network port type definitions Manage process type enforcement mode Manage the SELinux configuration Minimal Terminal Login User Role Minimal X Windows Login User Role Mislabeled files exist Missing interface definition for %s Modify Modify %(TYPE)s file path for '%(DOMAIN)s' domain. Only bolded items in the list can be selected, this indicates they were modified previously. Modify File Equivalency Mapping. Mapping will be created when update is applied. Modify File Labeling for %s. File labels will be created when update is applied. Modify Login Mapping Modify Login Mapping. Login Mapping will be modified when Update is applied. Modify Network Port for %s Modify Network Port for %s. Ports will be created when update is applied. Modify SELinux File Equivalency Modify SELinux User Role. SELinux user roles will be modified when update is applied. Modify SELinux Users Modify a record of the %s object type Modify file equiv labeling. Modify file labeling for %s Modify login mapping Modify port definitions to which the '%(APP)s' domain is allowed to %(PERM)s. Modify ports for %s Modify selected modified File Equivalence definitions. Only bolded items in the list can be selected, this indicates they were modified previously. Modify selected modified Login Mapping definitions. Modify selected modified SELinux User/Role definitions. Modify user Module Name Module does not exist: %s Module information for a new type More Details More Types More... Name Name for the specified infiniband end port. Name must be alphanumeric with no spaces. Consider using option "-n MODULENAME" Network Network Mask Network Port Definitions Network Ports to which the '%s' is allowed to connect. Network Ports to which the '%s' is allowed to listen. Network Ports to which the 'selected domain' is allowed to connect. Network Ports to which the 'selected domain' is allowed to listen. Network ports: %s Network protocol: %s No No SELinux Policy installed Node Address is required Not yet implemented Only Daemon apps can use an init script. Options Error %s Outbound Output file Output local customizations Path Path Path to be labeled (may be in the form of a Perl compatible regular expression) Permissive Pkey Number Policy types which require a command Port Port Number Port Type Port is required Port number must be between 1 and 65536 Port {proto}/{port} already defined Port {proto}/{port} is defined in policy, cannot be deleted Port {proto}/{port} is not defined Ports must be numbers or ranges of numbers from 1 to %d Prefix Priority Process Types Proto Protocol Protocol for the specified port (tcp|udp|dccp|sctp) or internet protocol version for the specified node (ipv4|ipv6). Protocol has to be one of udp, tcp, dccp or sctp Query SELinux policy network information Relabel all files back to system defaults on reboot Remove a module Remove all %s objects local customizations Requires at least one category Requires prefix or roles Requires prefix, roles, level or range Requires setype Requires setype or serange Requires setype, serange or seuser Requires seuser or serange Retry Revert Revert Changes Revert button will launch a dialog window which allows you to revert changes within the current transaction. Review the updates you have made before committing them to the system. To reset an item, uncheck the checkbox. All items checked will be updated in the system when you select update. Roles: %s Run restorecon on %(PATH)s to change its type from %(CUR_CONTEXT)s to the default %(DEF_CONTEXT)s? SELinux Application Type SELinux Configuration SELinux Destination Type SELinux Directory Type SELinux File Label SELinux File Type SELinux IB End Port Type SELinux IB Pkey Type SELinux Interface SELinux MLS Label you wish to assign to this path. SELinux Port Type SELinux Roles SELinux Roles. You must enclose multiple roles within quotes, separate by spaces. Or specify -R multiple times. SELinux Type for the object SELinux Type is required SELinux User SELinux User : %s SELinux User Name SELinux User: %s SELinux Username SELinux Users SELinux boolean SELinux fcontext SELinux file type: %s SELinux name: %s SELinux node type is required SELinux policy is not managed or store cannot be accessed. SELinux user %s is already defined SELinux user %s is defined in policy, cannot be deleted SELinux user %s is not defined SELinux user name Sandbox Save to Update Save to update Select Select tcp if the port type should be assigned to tcp port numbers. Select udp if the port type should be assigned to udp port numbers. Select Make Path Recursive if you want to apply this label to all children of the specified directory path. objects under the directory to have this label. Select a priority for module operations Select an alternate SELinux Policy Store to manage Select domain Select file equivalence labeling to delete. File equivalence labeling will be deleted when update is applied. Select file labeling to delete. File labeling will be deleted when update is applied. Select login user mapping to delete. Login user mapping will be deleted when update is applied. Select ports to delete. Ports will be deleted when update is applied. Select the SELinux User to assign to this login user. Login users by default get assigned by the __default__ user. Select the SELinux file type to assign to this path. Select the file class to which this label will be applied. Defaults to all classes. Select the port type you want to assign to the specified port number. Select the system mode for the current session Select the system mode when the system first boots up Select users mapping to delete.Users mapping will be deleted when update is applied. Select... Semanage transaction already in progress Semanage transaction not in progress Service Setup Script Show Modified Only Show mislabeled files only Show ports defined for this SELinux type Source Domain Spec file Specify a new SELinux user name. By convention SELinux User names usually end in an _u. Specify the MLS Range for this user to login in with. Defaults to the selected SELinux Users MLS Range. Specify the default level that you would like this SELinux user to login with. Defaults to s0. Specify the mapping between the new path and the equivalence path. Everything under this new path will be labeled as if they were under the equivalence path. Specify the path using regular expressions that you would like to modify the labeling. Standard Init Daemon State Subnet Prefix is required Subnet prefix for the specified infiniband ibpkey. Subnet_Prefix Substitute %s is not valid. Substitute is not allowed to end with '/' Substitute target path with sourcepath when generating default label. This is used with fcontext. Requires source and target path arguments. The context labeling for the target subtree is made equivalent to that defined for the source. System System Policy Type: System Status: Disabled System Status: Enforcing System Status: Permissive Target %s is not valid. Target is not allowed to end with '/' Target Domain The entry '%s' is not a valid path. Paths must begin with a '/'. The entry that was entered is incorrect. Please try again in the ex:/.../... format. To disable this transition, go to the %sBoolean section%s. To enable this transition, go to the %sBoolean section%s. To make this policy package active, execute: Transitions Type Type %s is invalid, must be a file or device type Type %s is invalid, must be a ibpkey type Type %s is invalid, must be a node type Type %s is invalid, must be a port type Type %s is invalid, must be an ibendport type Type Enforcement file Type field required Type is required Types USER Types automatically get a tmp type Unknown or missing protocol Update Update Changes Usage %s -L Usage %s -L -l user Usage %s -d File ... Usage %s -l -d user ... Usage %s -l CATEGORY user ... Usage %s -l [[+|-]CATEGORY],...] user ... Usage %s CATEGORY File ... Usage %s [[+|-]CATEGORY],...] File ... Use -- to end option list. For example User Application User Role types can not be assigned executables. Users Valid Types:
Web Application/Script (CGI) With this flag, alternative root path needs to include file context files and policy.xml file Writable files Yes You are attempting to close the application without applying your changes.
* To apply changes you have made during this session, click No and click Update.
* To leave the application without applying your changes, click Yes. All changes that you have made during this session will be lost. You must add at least one role for %s You must enter a name for your policy module for your '%s'. You must enter a valid policy type You must enter the executable path for your confined process You must regenerate interface info by running /usr/bin/sepolgen-ifgen You must specify one of the following values: %s You need to define a new type which ends with:
%s You need to install policycoreutils-gui package to use the gui option all files application block device boolean boolean to get description character device chcat -- -CompanyConfidential /docs/businessplan.odt chcat -l +CompanyConfidential juser commands connect directory dontaudit requires either 'on' or 'off' executable executable to confine get all booleans descriptions ibendport ibendport {ibdev_name}/{ibendport} is defined in policy, cannot be deleted ibendport {ibdev_name}/{ibendport} is not defined ibendport {ibdev_name}/{port} already defined ibpkey {subnet_prefix}/{pkey} already defined ibpkey {subnet_prefix}/{pkey} is defined in policy, cannot be deleted ibpkey {subnet_prefix}/{pkey} is not defined interface_spec list all SELinux port types listen for inbound connections login_name | %%groupname manage_krb5_rcache must be a boolean value name of policy to generate name of the OS for man pages named pipe node off on path in which the generated SELinux man pages will be stored path in which the generated policy files will be stored path to which the confined processes will need to write pkey | pkey_range port | port_range query SELinux Policy to see description of booleans query SELinux Policy to see how a source process domain can transition to the target process domain query SELinux policy to see if domains can communicate with each other radiobutton regular file selinux_name semanage is used to configure certain elements of SELinux policy with-out requiring modification or recompilation from policy source. semanage permissive: error: the following argument is required: type
sepolicy generate: error: one of the arguments %s is required show SELinux type related to the port show ports to which this application can bind and/or connect show ports to which this domain can bind and/or connect socket file source process domain symbolic link target process domain tcp type udp unknown use_kerberos must be a boolean value use_resolve must be a boolean value use_syslog must be a boolean value writable {target} is already in {category} {target} is not in {category} Project-Id-Version: PACKAGE VERSION
Report-Msgid-Bugs-To:
PO-Revision-Date: 2023-09-09 11:21+0000
Last-Translator: Hiroshi Yamanaka
Language-Team: Japanese
Language: ja
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=1; plural=0;
X-Generator: Weblate 4.18.2
%s ã®ã³ã³ãã€ã«ãã¹ãã«å€±æããŸããã
%s ã®ã³ã³ãã€ã«ãã¹ãã¯å®è¡ãããŠããŸããã %s
%s ã€ã³ã¿ãŒãã§ãŒã¹ã®ã³ã³ãã€ã«ã¯ãµããŒããããŠããŸããã
SELinux ãã£ã¹ããªãã¥ãŒã·ã§ã³ fcontext ã®ç䟡
SELinux ããŒã«ã« fcontext ã®ç䟡
%s ç¡å¹ãªãã¡ã€ã³ã§ã '%s' ããªã·ãŒã¢ãžã¥ãŒã«ã«ã¯æ¢åã®ãã¡ã€ã³ãå¿
èŠã§ã -- Allowed %s [ %s ] '%s' ãã¡ã€ã³ã«ã¯ -a ãªãã·ã§ã³ã¯äœ¿çšã§ããŸããã詳现ã¯äœ¿ãæ¹ããèªã¿ãã ããã '%s' ãã¡ã€ã³ã«ã¯ -d ãªãã·ã§ã³ã¯äœ¿çšã§ããŸããã詳现ã¯äœ¿ãæ¹ããèªã¿ãã ããã '%s' ãã¡ã€ã³ã«ã¯ -t ãªãã·ã§ã³ã¯äœ¿çšã§ããŸããã詳现ã¯äœ¿ãæ¹ããèªã¿ãã ããã -w ãªãã·ã§ã³ã¯ --newtype ãªãã·ã§ã³ãšã®äœµçšã¯ã§ããŸãã ...ããŒã¿ãéžæããŠè¡šç€º... ããã»ã¹ãå¥ã®ããã»ã¹ã®ãããã°ã ptrace ãè¡ããªãããæåŠããŸãã? å¶éã®ãªãã·ã¹ãã ããã»ã¹ã®å®è¡æ©èœãç¡å¹ã«ããŸãã? 蚱容ããã»ã¹ããã¹ãŠç¡å¹ã«ããŸãã? ã·ã¹ãã èšå® ã·ã¹ãã ã¢ãŒã ã®ãã¡ã€ã«ã©ãã«ãæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãäœæãããŸãã ã®ãããã¯ãŒã¯ããŒããæŽæ°ã®é©çšæã«ããŒããäœæãããŸãã
Disabled ãã Enforcing ã¢ãŒãã«å€æŽããã«ã¯ã
- ã·ã¹ãã ã¢ãŒãã Disabled ãã蚱容ã«å€æŽããŸã
- åèµ·åããŠãã·ã¹ãã ã«ã©ãã«ãä»ãçŽããŸã
- æåŸ
éãã«ã·ã¹ãã ãåäœãå§ãããã
* ã·ã¹ãã ã¢ãŒãã Enforcing ã«å€æŽããŸã
蚱容ãã¡ã€ã³ãšã¯ãããã»ã¹ãè¡ãããåäœãè¡ããããèš±å¯ããSELinux ã§ã¯æåŠã®ãã°ãèšé²ããã ãã§åŒ·å¶ã¯ããªãããã»ã¹ã©ãã«ã§ããéåžžã蚱容ãã¡ã€ã³ã¯è©Šéšçãªããªã·ãŒã瀺ããèš±å¯ãããã¹ããã¡ã€ã³ãžã®ã¢ã¯ã»ã¹ã SELinux ã«ããæåŠãããåå ãšããŠèããããã¢ãžã¥ãŒã«ãç¡å¹ã«ããŸãã åäœ è¿œå ãã¡ã€ã«ç䟡æ§ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãè¿œå %s ã®ãã¡ã€ã«ã©ãã«ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãäœæãããŸãã ãã°ã€ã³ãããã³ã°ã®è¿œå ãã°ã€ã³ã®ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã ãã°ã€ã³ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãŠãŒã¶ãŒãããã³ã°ãäœæãããŸãã %s ã®ãããã¯ãŒã¯ããŒããè¿œå %s ãããã¯ãŒã¯ããŒããè¿œå ããŸããæŽæ°ã®é©çšæã«ããŒããäœæãããŸãã SELinux ã®ãã¡ã€ã«ã®ç䟡æ§ãè¿œå SELinux ãŠãŒã¶ãŒããŒã«ãè¿œå ããŸããæŽæ°ã®é©çšæã« SELinux ãŠãŒã¶ãŒããŒã«ãäœæãããŸãã SELinux ãŠãŒã¶ãŒã®è¿œå ãŠãŒã¶ãŒããŒã«ãè¿œå ããŸããæŽæ°ã®é©çšæã« SELinux ãŠãŒã¶ãŒããŒã«ãäœæãããŸãã ãã¡ã€ã«ãè¿œå ãã ã¢ãžã¥ãŒã«ã®è¿œå %s ãªããžã§ã¯ãã¿ã€ãã®èšé²ãè¿œå ããŸã ãã¡ã€ã«ã®ç䟡æ§ãããã³ã°ãè¿œå ããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãè¿œå ããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãè¿œå ãã°ã€ã³ãããã³ã°ã®è¿œå '%(DOMAIN)s' ãã¡ã€ã³ã®æ°ãã %(TYPE)s ãã¡ã€ã«ãã¹ãè¿œå ããŸãã æ°èŠã®ãã¡ã€ã«ç䟡æ§å®çŸ©ãè¿œå ããŸãã æ°èŠã®ãã°ã€ã³ãããã³ã°ã®å®çŸ©ãè¿œå ããŸãã æ°èŠã® SELinux ãŠãŒã¶ãŒãŸãã¯ããŒã«ã®å®çŸ©ãè¿œå ããŸãã %(PERM)s ãèš±å¯ãããŠãã '%(APP)s' ãã¡ã€ã³ã«ãæ°ããããŒãã®å®çŸ©ãè¿œå ããŸãã %s ã®ããŒããè¿œå ãŠãŒã¶ãŒã®è¿œå Addr %s ã¯ãã§ã«å®çŸ©ãããŠããŸã ã¢ãã¬ã¹ %s ã¯ããªã·ãŒå
ã§å®çŸ©ãããŠããŸããåé€ã§ããŸãã ã¢ãã¬ã¹ %s ã¯å®çŸ©ãããŠããŸãã 管çè
ã®ãã°ã€ã³ãŠãŒã¶ãŒããŒã« é«åºŠ << é«åºŠ >> é«åºŠãªæ€çŽ¢ << é«åºŠãªæ€çŽ¢ >> ãã¹ãŠã®ãã¡ã€ã³ {subject} ã {rest} ã§ããããã«ããŸã 代æ¿ã® SELinux ããªã·ãŒãæšæºã¯ /sys/fs/selinux/policy 代æ¿ã«ãŒããã£ã¬ã¯ããªã/ ãæšæºã§ã ä»£æ¿ root ã®ã»ããã¢ãããå¿
èŠã§ã å¶éã®ãªããã¡ã€ã³ãšã¯ãSELinux ã«åŠšå®³ãããããã»ã¹ãè¡ãããåäœãè¡ããããèš±å¯ããããã»ã¹ã©ãã«ã§ãããã®ã¢ãžã¥ãŒã«ãæå¹ã«ãªã£ãŠããå ŽåãSELinux ã«ããªã·ãŒãå®çŸ©ãããŠããªãåæã·ã¹ãã ã§èµ·åæã«éå§ãããã¢ããªã±ãŒã·ã§ã³ã¯ãå¶éã®ãªãããã»ã¹ãšããŠå®è¡ãããŸããunconfined_t ãŠãŒã¶ãŒãç¡å¹ã«ããã«ã¯ããŸã unconfined_t ããŠãŒã¶ãŒãŸãã¯ãã°ã€ã³ã®ç»é¢ããåé€ããå¿
èŠããããŸãã ããªã·ãŒã®åæäž... ã¢ããªã±ãŒã·ã§ã³ãã¡ã€ã«åœ¢åŒ '%s' ããã®ã¢ããªã±ãŒã·ã§ã³é·ç§» ãéžæãã¡ã€ã³ãããã®ã¢ããªã±ãŒã·ã§ã³é·ç§» '%s' ãžã®ã¢ããªã±ãŒã·ã§ã³é·ç§» ãéžæãã¡ã€ã³ããžã®ã¢ããªã±ãŒã·ã§ã³é·ç§» ã¢ããªã±ãŒã·ã§ã³ ã¢ããªã±ãŒã·ã§ã³ - é«åºŠãªæ€çŽ¢ é©çš äžæ£ãªåœ¢åŒ {filename}: ã¬ã³ãŒã {record} Boolean
æå¹ ããŒãªã¢ã³ %s èš±å¯ã«ãŒã« boolean %s ã¯ããªã·ãŒã§å®çŸ©ãããŠããŸããåé€ã§ããŸãã boolean %s ã¯å®çŸ©ãããŠããŸãã ããŒãªã¢ã³ é²èŠ§ ã©ãã«ä»ããããã¡ã€ã«ããã£ã¬ã¯ããªã衚瀺ããŠéžæããŸãã çµã¿èŸŒã¿èš±å®¹åœ¢åŒ ããã»ã¹ã®ãã¡ã€ã³ã®åŒã³åºãäž ä»ã®ã¿ã€ãã®ã«ããŽãªãŒã§ +/- ãçµåã§ããŸãã è€æ°ã®æ床ãæãŠãŸãã %s 㧠'+' ã䜿ã£ãŠãæ床ã¬ãã«ãä¿®æ£ããããšãã§ããŸãã åãæ¶ã ããªã·ãŒ store ãèªã¿èŸŒããŸããã ããªã·ãŒã¿ã€ããå€æŽãããšã次åã·ã¹ãã ãåèµ·åãããšãæã«ããã¡ã€ã«ã·ã¹ãã å
šäœã®ã©ãã«ãå€æŽããŸããã©ãã«å€æŽã¯ããã¡ã€ã«ã·ã¹ãã ã®ãµã€ãºã«ãã£ãŠã¯æéãããããŸããç¶è¡ããŸãã? SELinux ãç¡å¹ã«å€æŽããå Žåã¯ãåèµ·åãå¿
èŠã§ãããã®å€æŽã¯æšå¥šãããŸãããåŸã§ SELinux ãæå¹ã«æ»ããšãã«ãã·ã¹ãã ã®ã©ãã«å€æŽãå¿
èŠã«ãªããŸããSELinux ãåé¡ã®åå ã«ãªã£ãŠãããã©ããã確èªãããå Žåã¯ã蚱容ã¢ãŒãã«ãããš SELinux ããªã·ãŒãé©çš (enforce) ãããããšã©ãŒããã°ã«åºåãããããã«ãªããŸãããŸãã蚱容ã¢ãŒããžã®å€æŽã«ã¯ãåèµ·åã¯èŠæ±ãããŸãããç¶è¡ããŸãã? SELinux ãæå¹ã«ãããšã次åã·ã¹ãã ãåèµ·åãããšãã«ããã¡ã€ã«ã·ã¹ãã å
šäœã®ã©ãã«ãå€æŽã«ãªããŸããã©ãã«å€æŽã¯ããã¡ã€ã«ã·ã¹ãã ã®ãµã€ãºã«ãã£ãŠã¯æéãããããŸããç¶è¡ããŸãã? ã¯ã©ã¹ ãã®çš®é¡ã®ããªã·ãŒã«å¯ŸããŠèŠæ±ãããã³ãã³ã çŸåšã®ãã©ã³ã¶ã¯ã·ã§ã³å
ã®å€æŽããã¹ãŠãµãŒããŒã«éä¿¡ããŸãã %s ã€ã³ã¿ãŒãã§ãŒã¹ãã³ã³ãã€ã«ããŸã å¶éããã root 管çè
ããŒã« ã³ã³ããã¹ã SELinux ãŠãŒã¶ãŒ %s ãè¿œå ã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãè¿œå ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããè¿œå ã§ããŸããã§ãã ibendport {ibdev_name}/{port} ãè¿œå ã§ããŸããã§ãã {subnet_prefix}/{pkey} ã« ibpkey ãè¿œå ã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãè¿œå ã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãè¿œå ã§ããŸããã§ãã ããŒã {proto}/{port} ãè¿œå ã§ããŸããã§ãã ãã¬ãã£ãã¯ã¹ {prefix} ã {role} ã«è¿œå ã§ããŸããã§ãã ããŒã« {role} ã {name} ã«è¿œå ã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒ %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã boolean %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ibendport {ibdev_name}/{ibendport} ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ibendport {ibdev_name}/{port} ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ibpkey {subnet_prefix}/{pkey} ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãå®çŸ©ãããŠããã確èªã§ããŸããã§ãã ããŒã {proto}/{port} ãå®çŸ©ãããŠãããã©ããã確èªã§ããŸããã§ãã semanage ãã©ã³ã¶ã¯ã·ã§ã³ãã³ãããã§ããŸããã§ãã %s ã® SELinux ãŠãŒã¶ãŒãäœæã§ããŸããã§ãã %s ã®ããŒãäœæã§ããŸããã§ãã ibendport {ibdev_name}/{ibendport} ã«ããŒãäœæã§ããŸããã§ãã ibendport {ibdev_name}/{port} ã«ããŒãäœæã§ããŸããã§ãã {proto}/{port} ã®ããŒãäœæã§ããŸããã§ãã {subnet_prefix}/{pkey} ã®ããŒãäœæã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ãäœæã§ããŸããã§ãã %s ã®ã³ã³ããã¹ããäœæã§ããŸããã§ãã {ibendport}/{port} ã®ã³ã³ããã¹ããäœæã§ããŸããã§ãã {proto}/{port} ã®ã³ã³ããã¹ããäœæã§ããŸããã§ãã {subnet_prefix}/{pkey} ã®ã³ã³ããã¹ããäœæã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããäœæã§ããŸããã§ãã {ibdev_name}/{port} ã« ibendport ãäœæã§ããŸããã§ãã {subnet_prefix}/{pkey} ã® ibpkey ããŒãäœæã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ãäœæã§ããŸããã§ãã %s ã®ããŒãäœæã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãäœæã§ããŸããã§ãã ã¢ãžã¥ãŒã«ããŒãäœæã§ããŸããã§ãã {proto}/{port} ã®ããŒããäœæã§ããŸããã§ãã semanage ãã³ãã«ãäœæã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒ %s ãåé€ã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãåé€ã§ããŸããã§ãã ãã¹ãŠã®ã€ã³ã¿ãŒãã§ã€ã¹ã®ãããã³ã°ãåé€ã§ããŸããã§ãã boolean %s ãåé€ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããåé€ã§ããŸããã§ãã ibendport {ibdev_name}/{ibendport} ãåé€ã§ããŸããã§ãã ibpkey {subnet_prefix}/{pkey} ãåé€ã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãåé€ã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãåé€ã§ããŸããã§ãã ããŒã {proto}/{port} ãåé€ã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ã %s ãåé€ã§ããŸããã§ãã ibendport {ibdev_name}/{port} ãåé€ã§ããŸããã§ãã ibpkey %s ããŒãåé€ã§ããŸããã§ãã ããŒã %s ãåé€ã§ããŸããã§ãã ãã¹ãŠã®ããŒããããã³ã°ãåé€ã§ããŸãã ã¢ãžã¥ãŒã« %s ãç¡å¹ã«ã§ããŸããã§ãã ã¢ãžã¥ãŒã« %s ãæå¹ã«ã§ããŸããã§ãã semanage æ¥ç¶ã確ç«ã§ããŸããã§ãã %s ã®ããŒãæœåºã§ããŸããã§ãã ã¢ãžã¥ãŒã«ãæå¹ã«ã§ããŸããã§ãã ã¢ãžã¥ãŒã« lang_ext ãååŸã§ããŸããã§ãã ã¢ãžã¥ãŒã«åãååŸã§ããŸããã§ãã ã¢ãžã¥ãŒã«ã®åªå
床ãååŸã§ããŸããã§ãã SELinux ã®ã¢ãžã¥ãŒã«äžèŠ§ã衚瀺ã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ã¢ãã¬ã¹ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã boolean ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ãã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒã ãã£ã¬ã¯ããªãŒã®ãã¡ã€ã«ã³ã³ããã¹ãäžèŠ§ã衚瀺ã§ããŸããã§ãã ibendports ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ibpkeys ãäžèŠ§è¡šç€ºã§ããŸããïœãã ã€ã³ã¿ãŒãã§ãŒã¹ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒã«ã«ãã¡ã€ã«ã®ã³ã³ããã¹ãäžèŠ§ã衚瀺ã§ããŸããã§ãã ãã°ã€ã³ãããã³ã°ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒãã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ãŠãŒã¶ãŒ %s ã®ããŒã«äžèŠ§ã衚瀺ã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ããäžèŠ§è¡šç€ºã§ããŸããã§ãã ibendports ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ibpkeys ã®äžèŠ§ã衚瀺ã§ããŸããã§ãã ããŒããäžèŠ§è¡šç€ºã§ããŸããã§ãã SELinux ãŠãŒã¶ãŒ %s ãä¿®æ£ã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãä¿®æ£ã§ããŸããã§ãã boolean %s ãä¿®æ£ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããä¿®æ£ã§ããŸããã§ãã ibendport {ibdev_name}/{ibendport} ãå€æŽã§ããŸããã§ãã ibpkey {subnet_prefix}/{pkey} ãå€æŽã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãä¿®æ£ã§ããŸããã§ãã %s ã®ãã°ã€ã³ãããã³ã°ãä¿®æ£ã§ããŸããã§ãã ããŒã {proto}/{port} ãä¿®æ£ã§ããŸããã§ãã ã¢ãã¬ã¹ %s ãã¯ãšãªãŒã§ããŸããã§ãã ãã¡ã€ã«ã³ã³ããã¹ã %s ãã¯ãšãªãŒã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããã¯ãšãªãŒã§ããŸããã§ãã ibendport {ibdev_name}/{ibendport} ãã¯ãšãªãŒã§ããŸããã§ãã ibpkey {subnet_prefix}/{pkey} ãã¯ãšãªãŒã§ããŸããã§ãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãã¯ãšãªãŒã§ããŸããã§ãã ããŒã {proto}/{port} ã®åãåãããã§ããŸããã§ãã %s ã® seuser ãã¯ãšãªãŒã§ããŸããã§ãã %s ã®ãŠãŒã¶ãŒãã¯ãšãªãŒã§ããŸããã§ãã ã¢ãžã¥ãŒã« %s ãåé€ã§ããŸããã§ãã (åé€å€±æ) 蚱容ãã¡ã€ã³ %s ã®åé€ãã§ããŸããã§ãã (åé€ã«å€±æ) MLS ã¬ãã«ã %s ã«èšå®ã§ããŸããã§ãã %s ã® MLS ç¯å²ãèšå®ã§ããŸããã§ãã %s ã® SELinux ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã boolean %s ã®ã¢ã¯ãã£ããªå€ãèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã {ibdev_name}/{port} ã« ibendport ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã {subnet_prefix}/{pkey} ã« ibpkey ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ãã¹ã¯ãèšå®ã§ããŸããã§ãã %s ã®ã¡ãã»ãŒãžã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã {ibdev_name}/{port} ã® ibendport ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã {subnet_prefix}/{pkey} ã® ibpkey ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã {proto}/{port} ã®ããŒãã³ã³ããã¹ãã« mls ãã£ãŒã«ããèšå®ã§ããŸããã§ãã ã¢ãžã¥ãŒã«ããŒã®ååãèšå®ã§ããŸããã§ãã %s ã®ååãèšå®ã§ããŸããã§ãã 蚱容ãã¡ã€ã³ %s ãèšå®ã§ããŸããã§ãã (ã¢ãžã¥ãŒã«ã®ã€ã³ã¹ããŒã«ã«å€±æ) {proto}/{port} ã®ããŒãã³ã³ããã¹ããèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã {ibdev_name}/{port} ã® ibendport ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã {subnet_prefix}/{pkey} ã® ibpkey ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã {proto}/{port} ã®ããŒãã³ã³ããã¹ãã«ããŒã«ãèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã {ibdev_name}/{port} ã® ibendport ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã {subnet_prefix}/{pkey} ã® ibpkey ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã {proto}/{port} ã®ããŒãã³ã³ããã¹ãã«ã¿ã€ããèšå®ã§ããŸããã§ãã %s ã®ã¢ãã¬ã¹ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã {ibdev_name}/{port} ã® ibendport ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã {subnet_prefix}/{pkey} ã® ibpkey ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹ã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã {proto}/{port} ã®ããŒãã³ã³ããã¹ãã«ãŠãŒã¶ãŒãèšå®ã§ããŸããã§ãã semanage ãã©ã³ã¶ã¯ã·ã§ã³ãèµ·åã§ããŸããã§ãã MLS ãæå¹ã«ããç¶æ
ããã¹ãã§ããŸããã§ãã 以äžã®ãã¡ã€ã«ãäœæãããŸãã:
ã«ã¹ã¿ã èš±å®¹åœ¢åŒ DBUS ã·ã¹ãã ããŒã¢ã³ åæå€ ããã©ã«ãã¬ãã« SELinux ãŠãŒã¶ãŒã®ããã©ã«ãã® SELinux ã¬ãã«ã§ãããã©ã«ã㯠s0 ã«èšå®ãããŸãã(MLS/MCS ã·ã¹ãã ã®ã¿) åé€ '%(DOMAIN)s' ãã¡ã€ã³ã® %(TYPE)s ãã¡ã€ã«ãã¹ãåé€ããŸãã å€æŽããããã¡ã€ã«ã®ã©ãã«ãåé€ å€æŽãããããŒããåé€ å€æŽããããŠãŒã¶ãŒãããã³ã°ãåé€ããŸãã %s ãªããžã§ã¯ãã¿ã€ãã®èšé²ãåé€ããŸã ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãåé€ããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãåé€ ãã°ã€ã³ãããã³ã°ã®åé€ å€æŽæžã¿ãã¡ã€ã«ã®ç䟡æ§å®çŸ©ãåé€ããŸãã å€æŽæžã¿ãã°ã€ã³ãããã³ã°ã®å®çŸ©ãåé€ããŸãã å€æŽæžã¿ SELinux ãŠãŒã¶ãŒãŸãã¯ããŒã«ã®å®çŸ©ãåé€ããŸãã %(PERM)s ãèš±å¯ãããŠãã '%(APP)s' ãã¡ã€ã³ã«å€æŽããããŒãã®å®çŸ©ãåé€ããŸãã %s ã®ããŒããåé€ ãŠãŒã¶ãŒã®åé€ èª¬æ ãã¹ã¯ããããã°ã€ã³ãŠãŒã¶ãŒããŒã« 移è¡å
ã¯ã©ã¹ ç¡å¹ã«ãã ã¢ãžã¥ãŒã«ã®ç¡å¹å ããŒã«å€ãç¡å¹ã«ããŸã ããªã·ãŒã® dontaudit ã«ãŒã«ãç¡å¹å/æå¹å ç¡å¹ '%s' ãšç¶æ
é·ç§»ã§ããã¢ããªã±ãŒã·ã§ã³ã衚瀺ããŸãã ãéžæãããã¡ã€ã³ããšé·ç§»ã§ããã¢ããªã±ãŒã·ã§ã³ã衚瀺ããŸãã ã%sãã®ããªã·ãŒãå€æŽããããã«äœ¿çšã§ããããŒãªã¢ã³æ
å ±ã衚瀺ããŸãã ãéžæãããã¡ã€ã³ãã®ããªã·ãŒãå€æŽããã®ã«äœ¿çšã§ããããŒãªã¢ã³æ
å ±ã衚瀺ããŸãã ã%sãã«ãã䜿çšã§ãããã¡ã€ã«ã¿ã€ãã®æ
å ±ã衚瀺ããŸãã ãéžæãããã¡ã€ã³ãã䜿çšã§ããã¿ã€ãã®æ
å ±ã衚瀺ããŸãã ã%sãããªãã¹ã³ãèš±å¯ããããããã¯ãŒã¯ããŒãã衚瀺ããŸãã ãéžæãããã¡ã€ã³ãããªãã¹ã³ãèš±å¯ãããããã¯ãŒã¯ããŒãã衚瀺ããŸãã %s ãªããžã§ã¯ãã¿ã€ããäžèŠ§è¡šç€ºããéã¯ãããã£ã³ã°ãå°å·ããŸãã ã³ãããåŸã«ããªã·ãŒããªããŒãããŸãã äœæããã man ããŒãžã®ãã¡ã€ã³å æå¹ã«ãã ã¢ãžã¥ãŒã«ã®æå¹å ããŒã«å€ãæå¹ã«ããŸã æå¹å åŒ·å¶ SELinux ãŠãŒã¶ãŒããã°ã€ã³ããããã©ã«ãã®ã¬ãã«ãå
¥åããŸããããã©ã«ã㯠s0 ã«èšå®ãããŸã ãã® SELinux ãŠãŒã¶ãŒã® MLS/MCS ç¯å²ãå
¥åããŸãã
s0-s0:c1023 ãã®ãã°ã€ã³ãŠãŒã¶ãŒã® MLS/MCS ç¯å²ãå
¥åããŸããããã©ã«ãã§ã¯éžæãã SELinux ãŠãŒã¶ãŒã®ç¯å²ãèšå®ãããŸãã 管çãã¡ã€ã³ãé·ç§»ãã SELinux ããŒã«ãå
¥åããŠãã ãã ãã®ãã¡ã€ã³ã«é·ç§»ãã SELinux ãŠãŒã¶ãŒãå
¥åããŠãã ãã æ¡åŒµãããã¡ã€ã³åœ¢åŒãå
¥åããŠãã ãã ãã®å¶éããã管çè
ã管çãããã¡ã€ã³ãå
¥åããŠãã ãã åãåãããå®è¡ããã€ã³ã¿ãŒãã§ãŒã¹åãå
¥åããŠãã ãã ãã®ãã¡ã€ã«ãã¹ã«å²ãåœãŠã MLS ã©ãã«ãå
¥åããŸãã ãã®ããŒãã«å²ãåœãŠã MLS ã©ãã«ãå
¥åããŸãã SELinux ãŠãŒã¶ãŒå¶éãè¿œå ããããŠãŒã¶ãŒã®ãã°ã€ã³ãŠãŒã¶ãŒåãå
¥åããŸãã ç䟡ã©ãã«ã®èšå®ãè¡ããã¹ãå
¥åããŸãã ããŒãã¿ã€ããè¿œå ãããããŒãçªå·ãŸãã¯ç¯å²ãå
¥åããŸãã ç䟡ãã¹ %s ã®ç䟡ã¯ã©ã¹ã¯æ¢ã«ååšããŸã %s ã®ç䟡ã¯ã©ã¹ã¯ååšããŸãã ç䟡æ§: %s å®è¡å¯èœãã¡ã€ã« å®è¡å¯èœãã¡ã€ã« éžæãããã¡ã€ã³ã®ãšã³ããªãŒãã€ã³ããå®è¡ãããšãã«ãã%sãã«é·ç§»ããå®è¡å¯èœãªãã®ã '%s' ãããããå®è¡ãããšãã«ãä»ã®ãã¡ã€ã³ã«é·ç§»ããå®è¡å¯èœãªãã®ã ãéžæãããã¡ã€ã³ããããããå®è¡ãããšãã«ãä»ã®ãã¡ã€ã³ã«é·ç§»ããå®è¡å¯èœãªãã®ã éžæãããã¡ã€ã³ã®ãšã³ããªãŒãã€ã³ããå®è¡ãããšãã«ããéžæãããã¡ã€ã³ãã«é·ç§»ããå®è¡å¯èœãªãã®ã æ¢åã®ãã¡ã€ã³åœ¢åŒ ãšã¯ã¹ããŒã ã·ã¹ãã èšå®ããã¡ã€ã«ã«ãšã¯ã¹ããŒãããŸã ãã©ã³ã¶ã¯ã·ã£ã³å
ã§ã®äœ¿çšç®çã§ãã«ã¹ã¿ãã€ãºå¯èœãªã³ãã³ããå±éããŸã %s ããªã·ãŒãã¡ã€ã«ã®èªã¿èŸŒã¿ã«å€±æããŸãã ãã¡ã€ã«ã³ã³ããã¹ããã¡ã€ã« ãã¡ã€ã«ã®çäŸ¡æ§ ãã¡ã€ã«å ãã¡ã€ã«ãã¹ '%s' ããã®ãã¡ã€ã«é·ç§» ãéžæãã¡ã€ã³ãããã®ãã¡ã€ã«é·ç§» ãã¡ã€ã«é·ç§»ã§ã¯ãçŸåšã®ãã¡ã€ã³ã«ãã£ãŠãé·ç§»å
ã¿ã€ãã®ãã£ã¬ã¯ããªãŒå
ã«ç¹å®ã¯ã©ã¹ã®ã³ã³ãã³ããäœæããããšãã®åäœãå®çŸ©ããŸããé·ç§»ã«ã¯ãªãã·ã§ã³ã§ãã¡ã€ã«åãæå®ã§ããŸãã ãã¡ã€ã«ã¿ã€ãããã㯠fcontext ãšãšãã«äœ¿ãããŸããls ã® mode ãã£ãŒã«ãã«ç€ºããããã¡ã€ã«ã¿ã€ããå¿
èŠã§ããäŸãã°ããã£ã¬ã¯ããªãŒã«ã®ã¿ãããããå Žå㯠d ããéåžžã®ãã¡ã€ã«ã«ã®ã¿ãããããå Žå㯠f ã䜿ããŸããæž¡ãããšãå¯èœãªãã¡ã€ã«ã¿ã€ãã¯ãf (éåžžãã¡ã€ã«)ã d (ãã£ã¬ã¯ããª)ã c (ãã£ã©ã¯ã¿ããã€ã¹)ã b (ãããã¯ããã€ã¹)ã s (ãœã±ãã)ã l (ã·ã³ããªãã¯ãªã³ã¯)ã p (ååä»ããã€ã) ã§ãããã¡ã€ã«ã¿ã€ããæå®ããªãå Žåã¯ããã¡ã€ã«ã¿ã€ãã®ããã©ã«ããããã¹ãŠã®ãã¡ã€ã«ãã«ãªããŸãã '%s' çšã«å®çŸ©ããããã¡ã€ã«ã®ã¿ã€ãã ãéžæãããã¡ã€ã³ãçšã«å®çŸ©ããããã¡ã€ã«ã®ã¿ã€ãã ãã¡ã€ã«ã¯ã©ã¹: %s %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã¯ãã§ã«å®çŸ©ãããŠããŸã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã¯ããªã·ãŒã§å®çŸ©ãããŠããŸãã åé€ã§ããŸãã %s ã®ãã¡ã€ã«ã³ã³ããã¹ãã¯å®çŸ©ãããŠããŸãã ãã¡ã€ã«ã®ç䟡æ§ã«ãããã·ã¹ãã ã¯æ°ãããã¹é
äžã®ã³ã³ãã³ãããç䟡ãã¹é
äžã«ããããã«ã©ãã«ä»ãããŸãã ãã¡ã€ã«ãã¹: %s '%s' ãã¡ã€ã³ã«å
¥ãããã«äœ¿çšããããã¡ã€ã«ã®ãã¹ã ãéžæãããã¡ã€ã³ãã«å
¥ãããã«äœ¿çšããããã¡ã€ã«ã®ãã¹ã ãã¡ã€ã«ãã¹: %s ãã¡ã€ã«ã®ä»æ§ %s ã¯ç䟡èŠå '%s %s' ãšç«¶åããŸã ãã¡ã€ã«ä»æ§ %s ã¯ç䟡èŠå '%s %s' ãšç«¶åããŸãã代ããã« '%s' ãè¿œå ããŠã¿ãŠãã ãã ãã¡ã€ã«ã®æå®ã«ã¯ã¹ããŒã¹ã䜿çšã§ããŸãã ãã¡ã€ã« ãã¡ã€ã«ã®çäŸ¡æ§ å¥ã®ã©ãã«ã«é·ç§»ãã '%s' ã«ãããã¡ã€ã«ã '%s' ãã¡ã€ã³ãæžã蟌ã¿å¯èœãªãã¡ã€ã«ã ãéžæãããã¡ã€ã³ããæžã蟌ã¿å¯èœãªãã¡ã€ã«ã ãã£ã«ã¿ãŒ ãµãŒãã¥ã©ãŒã€ã³ã¿ãŒãã§ãŒã¹ã¯ã©ã¹ãèŠã€ããŸãã '%s' ããªã·ãŒã®çæ '%s' ããªã·ãŒã®çæ éžæããã SELinux ããã¥ã¢ã«ããŒãžåãã® HTML ããã¥ã¢ã«ããŒãžã®æ§æãçæãã SELinux ããªã·ãŒã¢ãžã¥ãŒã«ã®ãã³ãã¬ãŒããçæãã SELinux ããã¥ã¢ã«ããŒãžãçæãã SELinux ããªã·ãŒã®ã°ã©ãã£ã«ã«ãŠãŒã¶ãŒã€ã³ã¿ãŒãã§ãŒã¹ ãã«ã: ã¢ããªã±ãŒã·ã§ã³ã¿ã€ãã®ããŒãž ãã«ã: Boolean ã®ããŒãž ãã«ã: å®è¡å¯èœãã¡ã€ã«ã®ããŒãž ãã«ã: ãã¡ã€ã«ç䟡æ§ã®ããŒãž ãã«ã: çä¿¡ãããã¯ãŒã¯æ¥ç¶ã®ããŒãž ãã«ã: ããã¯ããŠã³ããŒãž ãã«ã: ãã°ã€ã³ããŒãž ãã«ã: çºä¿¡ãããã¯ãŒã¯æ¥ç¶ã®ããŒãž ãã«ã: SELinux ãŠãŒã¶ãŒã®ããŒãž ãã«ã: ã¹ã¿ãŒãããŒãž ãã«ã: ã·ã¹ãã ããŒãž ãã«ã: é·ç§»ã¢ããªã±ãŒã·ã§ã³ãã¡ã€ã«ã®ããŒãž ãã«ã: ã¢ããªã±ãŒã·ã§ã³ããã®é·ç§»ããŒãž ãã«ã: ã¢ããªã±ãŒã·ã§ã³ãžã®é·ç§»ããŒãž ãã«ã: æžã蟌ã¿å¯èœãã¡ã€ã«ã®ããŒãž IB ããã€ã¹å IB ããã€ã¹åãå¿
èŠã§ã éèŠ ä»£æ¿ã¢ã¯ã»ã¹å¶åŸ¡ãèš±å¯ããããªã·ãŒã«
èšè¿°ããã If-Then-Else ã®ã«ãŒã«ã§ãã ã€ã³ããŒã ããŒã«ã«ã«ã¹ã¿ãã€ãºã®ã€ã³ããŒã å¥ã®ãã·ã³ããã·ã¹ãã èšå®ãã€ã³ããŒãããŸã å
¥å å
¥åãã¡ã€ã« ã€ã³ã¿ãŒãã§ãŒã¹ %s ã¯ãã§ã«å®çŸ©ãããŠããŸã ã€ã³ã¿ãŒãã§ãŒã¹ %s ãååšããŸããã ã€ã³ã¿ãŒãã§ãŒã¹ %s ã¯ããªã·ãŒã§å®çŸ©ãããŠããŸãã åé€ã§ããŸãã ã€ã³ã¿ãŒãã§ãŒã¹ %s ã¯å®çŸ©ãããŠããŸãã ã€ã³ã¿ãŒãã§ã€ã¹ãã¡ã€ã« ã€ã³ã¿ãŒããããµãŒãã¹ããŒã¢ã³ ç¡å¹ãª Pkey ç¡å¹ãªããŒã ç¡å¹ãªããŒãçªå· ç¡å¹ãªãã¡ã€ã«æå® ç¡å¹ãªåªå
床 %d (1 ãã 999 ãŸã§ã®éã«ããããšãå¿
èŠ) ã©ããªã³ã° èšèª Linux ã°ã«ãŒã %s ã¯ååšããŠããŸãã Linux ãŠãŒã¶ãŒ %s ã¯ååšããŠããŸãã %s ããŒã«ã«ã®ã«ã¹ã¿ãã€ãºãäžèŠ§è¡šç€ºããŸã SELinux ããªã·ãŒã®ã€ã³ã¿ãŒãã§ãŒã¹äžèŠ§ã衚瀺 %s ãªããžã§ã¯ãã¿ã€ãã®èšé²ãäžèŠ§è¡šç€ºããŸã ããã¯ããŠã³ SELinux ã·ã¹ãã ãããã¯ããŠã³ããŸãã
ãã®ç»é¢ã䜿çšã㊠SELinux ä¿è·ã匷åããŸãã ãã°ã€ã³ãããã³ã° ãã°ã€ã³å ãã°ã€ã³å: %s %s ã®ãã°ã€ã³ãããã³ã°ã¯ãã§ã«å®çŸ©ãããŠããŸã %s ã®ãã°ã€ã³ãããã³ã°ã¯ããªã·ãŒã«å®çŸ©ãããŠããŸããåé€ã§ããŸãã %s ã®ãã°ã€ã³ãããã³ã°ã¯å®çŸ©ãããŠããŸãã ãã°ã€ã³å ããŒã¿æ倱ãã€ã¢ãã° MCS ã¬ãã« MCS ç¯å² ãã¡ã€ã«ãã¹ããããŸãã MLS MLS ç¯å² MLS/ MLS/MCS ç¯å² MLS/MCS ç¯å²: %s MLS/MCS ã®ã»ãã¥ãªãã£ãŒç¯å² (MLS/MCS ã·ã¹ãã ã®ã¿) SELinux ãã°ã€ã³ãããã³ã°ã® SELinux ç¯å²ã¯ãããã©ã«ãã§ã¯ SELinux ãŠãŒã¶ãŒã®èšé²ç¯å²ã«èšå®ãããŸããSELinux ãŠãŒã¶ãŒã® SELinux ç¯å²ã¯ããã©ã«ã㧠s0 ã«èšå®ãããŸãã ãã¹ãååž°çã«ãã SELinux ã®å¶éããããŠãŒã¶ãŒã管çããŸã (SELinux ãŠãŒã¶ãŒã®ããŒã«ããã³ã¬ãã«) SELinux ããªã·ãŒã¢ãžã¥ãŒã«ã管çããŸã ããŒã«å€ã管çããŠéžæçã«æ©èœãæå¹ã«ããŸã ãã¡ã€ã«ã³ã³ããã¹ããããã³ã°ã®å®çŸ©ã管çããŸã infiniband ãšã³ãããŒãã¿ã€ãã®å®çŸ©ã管çããŸã infiniband ibpkey ã¿ã€ãã®å®çŸ©ã管çããŸã Linux ãŠãŒã¶ãŒãš SELinux ã®å¶éããããŠãŒã¶ãŒãšã®éã®ãã°ã€ã³ãããã³ã°ã管çããŸã ãããã¯ãŒã¯ã€ã³ã¿ãŒãã§ãŒã¹ã¿ã€ãã®å®çŸ©ã管çããŸã ãããã¯ãŒã¯ããŒãã¿ã€ãã®å®çŸ©ã管çããŸã ãããã¯ãŒã¯ããŒãã¿ã€ãã®å®çŸ©ã管çããŸã ããã»ã¹ã¿ã€ã匷å¶ã¢ãŒãã管çããŸã SELinux èšå®ã®ç®¡ç æå°æš©éã®ç«¯æ«ãã°ã€ã³ãŠãŒã¶ãŒããŒã« æå°æš©éã® X Window ãã°ã€ã³ãŠãŒã¶ãŒããŒã« ã©ãã«ä»ããééã£ãŠãããã¡ã€ã«ããããŸã %s ã®ã€ã³ã¿ãŒãã§ãŒã¹å®çŸ©ããããŸãã ä¿®æ£ '%(DOMAIN)s' ãã¡ã€ã³ã® %(TYPE)s ãã¡ã€ã«ãã¹ãå€æŽããŸããéžæã§ããã®ã¯äžèŠ§å
ã®å€ªåã¢ã€ãã ã®ã¿ã§ããã€ãŸãã倪åã¢ã€ãã ã¯ä»¥åã«å€æŽããããšããããšã«ãªããŸãã ãã¡ã€ã«ã®ç䟡æ§ãããã³ã°ãå€æŽããŸããæŽæ°ã®é©çšæã«ãããã³ã°ãäœæãããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãå€æŽããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãäœæãããŸãã ãã°ã€ã³ãããã³ã°ã®å€æŽ ãã°ã€ã³ãããã³ã°ãå€æŽããŸããæŽæ°ã®é©çšæã«ãã°ã€ã³ãããã³ã°ãå€æŽãããŸãã %s ã®ãããã¯ãŒã¯ããŒããå€æŽ %s ã®ãããã¯ãŒã¯ããŒããå€æŽããŸããæŽæ°ã®é©çšæã«ããŒããäœæãããŸãã SELinux ã®ãã¡ã€ã«ã®ç䟡æ§ãå€æŽ SELinux ãŠãŒã¶ãŒããŒã«ãå€æŽããŸããæŽæ°ã®é©çšæã« SELinux ãŠãŒã¶ãŒããŒã«ãå€æŽãããŸãã SELinux ãŠãŒã¶ãŒã®å€æŽ %s ãªããžã§ã¯ãã¿ã€ãã®èšé²ãå€æŽããŸã ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãå€æŽããŸãã %s ã®ãã¡ã€ã«ã©ãã«ãå€æŽ ãã°ã€ã³ãããã³ã°ã®å€æŽ %(PERM)s ãèš±å¯ãããŠãã '%(APP)s' ãã¡ã€ã³ã«å¯ŸããããŒãã®å®çŸ©ãå€æŽããŸãã %s ã®ããŒããç·šé éžæããå€æŽæžã¿ãã¡ã€ã«ç䟡æ§ã®å®çŸ©ãä¿®æ£ããŸããéžæã§ããã®ã¯äžèŠ§å
ã®å€ªåã¢ã€ãã ã®ã¿ã§ããã€ãŸãã倪åã¢ã€ãã ã¯ä»¥åã«å€æŽãããã¢ã€ãã ãšããããšã§ãã éžæããå€æŽæžã¿ãã°ã€ã³ãããã³ã°ã®å®çŸ©ãä¿®æ£ããŸãã éžæããå€æŽæžã¿ SELinux ãŠãŒã¶ãŒãŸãã¯ããŒã«ã®å®çŸ©ãä¿®æ£ããŸãã ãŠãŒã¶ãŒã®å€æŽ ã¢ãžã¥ãŒã«å ã¢ãžã¥ãŒã«ãååšããŸãã: %s æ°ããã¿ã€ãã®ã¢ãžã¥ãŒã«æ
å ± 詳现 ãã®ä»ã¿ã€ã 詳现... åå æå®ãã infiniband ã®ãšã³ãããŒãã®ååã ååã¯è±æ°å (ã¹ããŒã¹ãªã) ã§ãªããã°ãªããŸããããªãã·ã§ã³ "-n ã¢ãžã¥ãŒã«å" ã®äœ¿çšãæ€èšããŠãã ãã ãããã¯ãŒã¯ ãããã¯ãŒã¯ãã¹ã¯ ãããã¯ãŒã¯ããŒãã®å®çŸ© '%s' ãæ¥ç¶ãèš±å¯ããããããã¯ãŒã¯ããŒãã '%s' ããªãã¹ã³ãèš±å¯ããããããã¯ãŒã¯ããŒãã ãéžæãããã¡ã€ã³ããæ¥ç¶ãèš±å¯ãããããã¯ãŒã¯ããŒãã ãéžæãããã¡ã€ã³ãããªãã¹ã³ãèš±å¯ãããããã¯ãŒã¯ããŒãã ãããã¯ãŒã¯ããŒã: %s ãããã¯ãŒã¯ãããã³ã«: %s ããã ã€ã³ã¹ããŒã«ãããŠãã SELinux ããªã·ãŒããããŸãã ããŒãã¢ãã¬ã¹ãå¿
èŠã§ã ãŸã ãå®è£
ãããŠããŸãã ããŒã¢ã³ã¢ããªã±ãŒã·ã§ã³ã®ã¿ã init ã¹ã¯ãªããã䜿çšã§ããŸãã ãªãã·ã§ã³ãšã©ãŒ %s åºå åºåãã¡ã€ã« ããŒã«ã«ã«ã¹ã¿ãã€ãºã®åºå ãã¹ ãã¹ ã©ãã«ä»ããããã¹ (Perl ãšäºææ§ã®ããæ£èŠè¡šçŸã®åœ¢åŒã§ããå ŽåããããŸã) 蚱容 Pkey çªå· ã³ãã³ããå¿
èŠãšããããªã·ãŒã¿ã€ã ããŒã ããŒãçªå· ããŒãã¿ã€ã ããŒããå¿
èŠã§ã ããŒãçªå·ã¯ 1 ãã 65536 ã®éã«ããŠãã ãã ããŒã {proto}/{port} ã¯ãã§ã«å®çŸ©ãããŠããŸã ããŒã {proto}/{port} ã¯ããªã·ãŒå
ã§å®çŸ©ãããŠããããåé€ã§ããŸãã ããŒã {proto}/{port} ã¯å®çŸ©ãããŠããŸãã ããŒãã¯æ°åããŸã㯠1 ãã %d ãŸã§ã®æ°åã®ç¯å²ã§ãªããã°ãªããŸãã ãã¬ãã£ãã¯ã¹ åªå
床 ããã»ã¹ã¿ã€ã ããã ãããã³ã« æå®ããããŒãã®ãããã³ã« (tcp|udp|dccp|sctp) ãŸãã¯æå®ããããŒã ã®ã€ã³ã¿ãŒããããããã³ã«ããŒãžã§ã³ (ipv4|ipv6)ã ãããã³ã«ã¯ãudpãtcpãdccpãsctp ã®ããããã§ãªããã°ãªããŸãã SELinux ããªã·ãŒãããã¯ãŒã¯æ
å ±ã®ã¯ãšãªãŒ åèµ·åæã«ãå
šãã¡ã€ã«ãã·ã¹ãã ã®ããã©ã«ãã«ã©ãã«ãä»ãçŽããŸã ã¢ãžã¥ãŒã«ã®åé€ ãã¹ãŠã® %s ãªããžã§ã¯ãããŒã«ã«ã«ã¹ã¿ãã€ãºãåé€ããŸã å°ããšãã«ããŽãªãŒã 1 ã€å¿
èŠã§ã ãã¬ãã£ãã¯ã¹ãããŒã«ãå¿
èŠã§ã ãã¬ãã£ãã¯ã¹ããããŒã«ãã¬ãã«ãç¯å²ã®ãããããå¿
èŠã§ã setype ãå¿
èŠã§ã setype ã serange ãå¿
èŠã§ã setypeãserangeããŸã㯠seuser ã®ãããããå¿
èŠã§ã seuser ãŸã㯠serange ãå¿
èŠã§ã ããçŽã å
ã«æ»ã å€æŽãå
ã«æ»ã å
ã«æ»ããã¿ã³ãããçŸåšã®ãã©ã³ã¶ã¯ã·ã§ã³å
ã®å€æŽãå
ã«æ»ããã€ã¢ãã°ãŠã£ã³ããŠãèµ·åããŸãã å ããæŽæ°ãã·ã¹ãã ã«éä¿¡ããåã«ç¢ºèªããŸããã¢ã€ãã ããªã»ããããã«ã¯ããã§ãã¯ããã¯ã¹ã®ãã§ãã¯ããŒã¯ãå€ããŸããæŽæ°ãéžæãããšããã§ãã¯ãä»ãããã¹ãŠã®ã¢ã€ãã ãã·ã¹ãã å
ã§æŽæ°ãããŸãã ããŒã«: %s %(PATH)s 㧠restorecon ãå®è¡ããã¿ã€ãã %(CUR_CONTEXT)s ããããã©ã«ãã® %(DEF_CONTEXT)s ã«å€æŽããŸãã? SELinux ã¢ããªã±ãŒã·ã§ã³ã¿ã€ã SELinux èšå® SELinux 移è¡å
ã¿ã€ã SELinux ãã£ã¬ã¯ããªãŒã¿ã€ã SELinux ãã¡ã€ã«ã©ãã« SELinux ãã¡ã€ã«ã¿ã€ã SELinux IB ãšã³ãããŒãã¿ã€ã SELinux IB Pkey åœ¢åŒ SELinux ã€ã³ã¿ãŒãã§ãŒã¹ ãã®ãã¹ã«å²ãåœãŠã SELinux MLS ã©ãã«ã§ãã SELinux ããŒãã¿ã€ã SELinux ããŒã« SELinux ããŒã«ã ã¹ããŒã¹ã§åºåã£ãè€æ°ã®ããŒã«ãã¯ã©ãŒãå
ã«å«ãå¿
èŠããããŸãããŸãã¯ã-R ãè€æ°åæå®ããŸãã ãªããžã§ã¯ãåã SELinux ã¿ã€ã SELinux ã¿ã€ããå¿
èŠã§ã SELinux ãŠãŒã¶ãŒ SELinux ãŠãŒã¶ãŒ : %s SELinux ãŠãŒã¶ãŒå SELinux ãŠãŒã¶ãŒ: %s SELinux ãŠãŒã¶ãŒå SELinux ãŠãŒã¶ãŒ SELinux boolean SELinux fcontext SELinux ãã¡ã€ã«ã¿ã€ã: %s SELinux å: %s SELinux ããŒã圢åŒãå¿
èŠã§ã SELinux ããªã·ãŒã管çãããŠããªããã store ã«ã¢ã¯ã»ã¹ã§ããŸããã SELinux ãŠãŒã¶ãŒ %s ã¯ãã§ã«å®çŸ©ãããŠããŸã SELinux ãŠãŒã¶ãŒ %s ã¯ããªã·ãŒã§å®çŸ©ãããŠããŸããåé€ã§ããŸãã SELinux ãŠãŒã¶ãŒ %s ã¯å®çŸ©ãããŠããŸãã SELinux ãŠãŒã¶ãŒå Sandbox æŽæ°ã®ããä¿å æŽæ°ã®ããä¿å éžæ tcp ããŒãçªå·ã«å²ãåœãŠãããŒãã¿ã€ãã®å Žå㯠tcp ãéžæããŸãã udp ããŒãçªå·ã«å²ãåœãŠãããŒãã¿ã€ãã®å Žå udp ãéžæããŸãã ãã®ã©ãã«ããæå®ãã£ã¬ã¯ããªãŒãã¹ã®ãã¹ãŠã®åã«é©çšãããå Žåã¯ããã¹ãååž°çã«ããããéžæããŸãããã®ãã£ã¬ã¯ããªãŒé
äžã®ãªããžã§ã¯ãã«ãã®ã©ãã«ãä»ããããŸãã ã¢ãžã¥ãŒã«æäœã®åªå
é äœãéžæããŸã 管çããå¥ã® SELinux ããªã·ãŒã¹ãã¢ãéžæããŸã ãã¡ã€ã³ã®éžæ åé€ãããã¡ã€ã«ã®ç䟡æ§ã©ãã«ãéžæããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã®ç䟡æ§ã©ãã«ãåé€ãããŸãã åé€ãããã¡ã€ã«ã©ãã«ãéžæããŸããæŽæ°ã®é©çšæã«ãã¡ã€ã«ã©ãã«ãåé€ãããŸãã åé€ãããã°ã€ã³ãŠãŒã¶ãŒã®ãããã³ã°ãéžæããŸããæŽæ°ã®é©çšæã«ãã°ã€ã³ãŠãŒã¶ãŒã®ãããã³ã°ãåé€ãããŸãã åé€ããããŒããéžæããŸããæŽæ°ã®é©çšæã«ããŒããåé€ãããŸãã ãã®ãã°ã€ã³ãŠãŒã¶ãŒã«å²ãåœãŠã SELinux ãŠãŒã¶ãŒãéžæããŸããããã©ã«ãã§ã¯ãã°ã€ã³ãŠãŒã¶ãŒã«ã¯ __default__ user ãå²ãåœãŠãããŸãã ãã®ãã¹ã«å²ãåœãŠã SELinux ãã¡ã€ã«ã¿ã€ããéžæããŸãã ãã®ã©ãã«ãé©çšããã¯ã©ã¹ãéžæããŸããããã©ã«ãã§ã¯ãã¹ãŠã®ã¯ã©ã¹ã«èšå®ãããŸãã æå®ããŒãçªå·ã«å²ãåœãŠããããŒãã¿ã€ããéžæããŸãã çŸåšã®ã»ãã·ã§ã³ã«ã·ã¹ãã ã¢ãŒããéžæããŸã ã·ã¹ãã ã®ååèµ·åæã«ã·ã¹ãã ã¢ãŒããéžæããŸã åé€ãããŠãŒã¶ãŒãããã³ã°ãéžæããŸããæŽæ°ã®é©çšæã«ãŠãŒã¶ãŒãããã³ã°ãåé€ãããŸãã éžæ... Semanage ãã©ã³ã¶ã¯ã·ã§ã³ã¯æ¢ã«é²è¡ããŠããŸã Semanage ãã©ã³ã¶ã¯ã·ã§ã³ã¯é²è¡ããŠããŸãã ãµãŒãã¹ ã»ããã¢ããã¹ã¯ãªãã å€æŽã®ã¿è¡šç€º ã©ãã«ä»ããééã£ãŠãããã¡ã€ã«ã®ã¿è¡šç€ºããŸã ãã® SELinux ã¿ã€ãã«å®çŸ©ãããŠããããŒãã衚瀺 ãœãŒã¹ãã¡ã€ã³ ã¹ããã¯ãã¡ã€ã« æ°ãã SELinux ãŠãŒã¶ãŒåãå
¥åããŸããæ
£äŸçã« SELinux ã®ãŠãŒã¶ãŒåã®æ«å°Ÿã¯ an _u ã«ãªããŸãã ãã®ãŠãŒã¶ãŒããã°ã€ã³ãã MLS ç¯å²ãæå®ããŸããããã©ã«ãã§ã¯éžæãã SELinux ãŠãŒã¶ãŒã® MLS ç¯å²ãèšå®ãããŸãã ãã® SELinux ãŠãŒã¶ãŒããã°ã€ã³ããããã©ã«ãã®ã¬ãã«ãæå®ããŸããããã©ã«ãã§ã¯ s0 ã«èšå®ãããŸãã æ°ãããã¹ãšç䟡ãã¹éã®ãããã³ã°ãæå®ããŸãããã®æ°ãããã¹ã®é
äžã«ãããã®ã¯ãã¹ãŠãç䟡ãã¹ã®é
äžã«ããããã«ã©ãã«ä»ããè¡ãããŸãã ã©ãã«ãå€æŽãããã¹ããæ£èŠè¡šçŸã䜿çšããŠæå®ããŸãã æšæºç㪠Init ããŒã¢ã³ ç¶æ
ãµããããã®ãã¬ãã£ãã¯ã¹ãå¿
èŠã§ã æå®ãã infiniband ibpkey ã®ãµããããã®ãã¬ãã£ãã¯ã¹ã ãµãããããã¬ãã£ãã¯ã¹(_P) 代æ¿ã® %s ã¯ç¡å¹ã§ãã代æ¿ã®æ«å°Ÿã« '/' ãä»ããããšã¯ã§ããŸãã ããã©ã«ãã®ã©ãã«ãçæããéã«ãã¿ãŒã²ãããã¹ã sourcepath ã«çœ®ãæããŸãããã㯠fcontext ãšãšãã«äœ¿çšãããŸãããœãŒã¹ããã³ã¿ãŒã²ããã®ãã¹åŒæ°ãå¿
èŠã§ããã¿ãŒã²ãããµãããªãŒã®ã³ã³ããã¹ãã©ããªã³ã°ã¯ããœãŒã¹çšã«å®çŸ©ããããã®ã«çžåœããŸãã ã·ã¹ãã ã·ã¹ãã ã®ããªã·ãŒã¿ã€ã: ã·ã¹ãã ç¶æ
: ç¡å¹ (Disabled) ã·ã¹ãã ç¶æ
: åŒ·å¶ (Enforcing) ã·ã¹ãã ç¶æ
: 蚱容 (Permissive) ã¿ãŒã²ãã %s ã¯ç¡å¹ã§ããã¿ãŒã²ããã®æ«å°Ÿã«ã/ãã¯ä»ããããŸãã ã¿ãŒã²ãããã¡ã€ã³ ãšã³ã㪠'%s' ã¯ç¡å¹ãªãã¹ã§ãããã¹ã®å
é 㯠'/' ã§éå§ããå¿
èŠããããŸãã å
¥åããããšã³ããªãŒã«èª€ãããããŸããex:/.../... ã®åœ¢åŒã§ããçŽããŠãã ããã ãã®é·ç§»ãç¡å¹ã«ããã«ã¯ã%sBoolean section%s ãžè¡ããŸãã ãã®é·ç§»ãæå¹ã«ããã«ã¯ã%sBoolean section%s ãžè¡ããŸãã ãã®ããªã·ãŒããã±ãŒãžãæå¹ã«ããã«ã¯ã以äžãå®è¡ããŠãã ããã é·ç§» ã¿ã€ã åœ¢åŒ %s ãç¡å¹ã§ãããã¡ã€ã«ãŸãã¯ããã€ã¹åœ¢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããibpkey 圢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããããŒã圢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããããŒã圢åŒã§ããå¿
èŠããããŸã åœ¢åŒ %s ãç¡å¹ã§ããibendport 圢åŒã§ããå¿
èŠããããŸã 匷å¶ãã¡ã€ã«ã®èšå
¥ ã¿ã€ãé
ç®ãå¿
èŠã§ã ã¿ã€ããå¿
èŠã§ã ã¿ã€ã USER ã¿ã€ãã¯ãèªåçã« tmp ã¿ã€ããåããŸã äžæãŸãã¯æ¬ åŠããŠãããããã³ã« æŽæ° å€æŽãæŽæ°ãã 䜿ãæ¹ %s -L 䜿ãæ¹ %s -L -l ãŠãŒã¶ãŒ 䜿ãæ¹ %s -d ãã¡ã€ã« ... 䜿ãæ¹ %s -l -d ãŠãŒã¶ãŒ ... 䜿ãæ¹ %s -l CATEGORY ãŠãŒã¶ãŒ ... 䜿ãæ¹ %s -l [[+|-]CATEGORY],...] ãŠãŒã¶ãŒ ... 䜿ãæ¹ %s CATEGORY ãã¡ã€ã« ... 䜿ãæ¹ %s [[+|-]CATEGORY],...] ãã¡ã€ã« ... ãªãã·ã§ã³ãªã¹ããçµäºããã«ã¯ -- ã䜿ããŸãã äŸãã°ã ãŠãŒã¶ãŒã¢ããªã±ãŒã·ã§ã³ ãŠãŒã¶ãŒããŒã«ã¿ã€ãã¯ãå²ãåœãŠæžã¿ã®å®è¡ãã¡ã€ã«ã§ã¯ãããŸããã ãŠãŒã¶ãŒ æå¹ãªåœ¢åŒ:
ãŠã§ãã¢ããªã±ãŒã·ã§ã³/ã¹ã¯ãªãã (CGI) ãã®ãã©ã°ã䜿çšããå Žåã¯ãä»£æ¿ root ãã¹ã«ãã¡ã€ã«ã³ã³ããã¹ãã®ãã¡ã€ã«ããã³ policy.xml ãã¡ã€ã«ãå«ãŸããå¿
èŠããããŸã æžã蟌ã¿å¯èœãªãã¡ã€ã« ã¯ã å€æŽãé©çšããã«ã¢ããªã±ãŒã·ã§ã³ãéããããšããŠããŸãã
* ãã®ã»ãã·ã§ã³äžã«å ããå€æŽãé©çšããã«ã¯ãããããããã¯ãªãã¯ããŠãããæŽæ°ããã¯ãªãã¯ããŸãã
* å€æŽãé©çšããªããŸãŸã¢ããªã±ãŒã·ã§ã³ãçµäºããã«ã¯ããã¯ãããã¯ãªãã¯ããŸãããã®ã»ãã·ã§ã³äžã«å ããå€æŽã¯ãã¹ãŠå€±ãããŸãã å°ãªããšã %s ã®ããŒã«ã 1 ã€è¿œå ããå¿
èŠããããŸã '%s' çšã®ããªã·ãŒã¢ãžã¥ãŒã«ã®ååãå
¥åããŠãã ããã æå¹ãªããªã·ãŒçš®å¥ãå
¥åããå¿
èŠããããŸã ã䜿çšã®ãå¶éãããããã»ã¹çšå®è¡ãã¡ã€ã«ãã¹ãèšå
¥ããå¿
èŠããããŸã /usr/bin/sepolgen-ifgen ãå®è¡ããã€ã³ã¿ãŒãã§ãŒã¹æ
å ±ãåçæããå¿
èŠããããŸã 次ã®äžããå€ã 1 ã€æå®ããŠãã ãã: %s 次ã®æååã§çµããæ°ããã¿ã€ããå®çŸ©ããå¿
èŠããããŸã:
%s GUI ãªãã·ã§ã³ã䜿çšããã«ã¯ãpolicycoreutils-gui ããã±ãŒãžãã€ã³ã¹ããŒã«ããå¿
èŠããããŸã ãã¹ãŠã®ãã¡ã€ã« ã¢ããªã±ãŒã·ã§ã³ ãããã¯ããã€ã¹ ããŒã«å€ 詳现ãååŸãã boolean ãã£ã©ã¯ã¿ãŒããã€ã¹ chcat -- -CompanyConfidential /docs/businessplan.odt chcat -l +CompanyConfidential juser ã³ãã³ã æ¥ç¶ ãã£ã¬ã¯ããªãŒ dontaudit 㯠'on' ãŸã㯠'off' ã«ããå¿
èŠããããŸã å®è¡å¯èœ å¶éã課ãå®è¡ãã¡ã€ã« ãã¹ãŠã®ããŒãªã¢ã³ã®èª¬æãååŸãã ibendport ibendport {ibdev_name}/{ibendport} ã¯ããªã·ãŒã«å®çŸ©ãããŠãããããåé€ã§ããŸãã ibendport {ibdev_name}/{ibendport} ã¯å®çŸ©ãããŠããŸãã ibendport {ibdev_name}/{port} ã¯ãã§ã«å®çŸ©ãããŠããŸã ibpkey {subnet_prefix}/{pkey} ã¯ãã§ã«å®çŸ©ãããŠããŸã ibpkey {subnet_prefix}/{pkey} ã¯ããªã·ãŒã«å®çŸ©ãããŠãããããåé€ã§ããŸãã ibpkey {subnet_prefix}/{pkey} ãå®çŸ©ãããŠããŸãã interface_spec SELinux ããŒãã®å
šã¿ã€ãã衚瀺 çä¿¡æ¥ç¶ã®ãªãã¹ã³ login_name | %%groupname manage_krb5_rcache ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã çæããããªã·ãŒã®åå ããã¥ã¢ã«ããŒãžåã OS å称 ååä»ããã€ã ããŒã ãªã ãªã³ çæããã SELinux ã® man ããŒãžã®æ ŒçŽå
ãšãªããã¹ çæãããããªã·ãŒãã¡ã€ã«ãä¿åããããã¹ å¶éãããããã»ã¹ãæžã蟌ãå¿
èŠããããã¹ pkey | pkey_range port | port_range SELinux ã«åãåãã㊠boolean ã®è©³çŽ°ã衚瀺ãã ãœãŒã¹ã®ããã»ã¹ãã¡ã€ã³ãç®çã®ããã»ã¹ãã¡ã€ã³ã«ã©ã®ããã«é·ç§»ã§ãããã SELinux ããªã·ãŒã«åãåããã ãã¡ã€ã³ãäºãã«éä¿¡ãè¡ãããã©ããã SELinux ããªã·ãŒã«åãåããã ã©ãžãªãã¿ã³ éåžžãã¡ã€ã« selinux_name semanage ã¯ãããªã·ãŒãœãŒã¹ããã®ä¿®æ£ãåã³ã³ãã€ã«ãå¿
èŠãšããã« SELinux ããªã·ãŒã®ç¹å®èŠçŽ ãèšå®ããããã«äœ¿çšãããŸãã semanage 蚱容: ãšã©ãŒ: 以äžã®åŒæ°ãå¿
èŠã§ã: ã¿ã€ã
sepolicy generate: ãšã©ãŒ: åŒæ° %s ã®ã©ãããå¿
èŠã§ã ãã®ããŒãã«é¢é£ãã SELinux ã®ã¿ã€ãã衚瀺 ãã®ã¢ããªã±ãŒã·ã§ã³ããã€ã³ããŸãã¯æ¥ç¶ã§ããããŒãã衚瀺ããŸã ãã®ãã¡ã€ã³ãçµåãæ¥ç¶ã ãŸãã¯çµåããŠæ¥ç¶ã§ããããŒãã衚瀺 ãœã±ãããã¡ã€ã« ãœãŒã¹ããã»ã¹ãã¡ã€ã³ ã·ã³ããªãã¯ãªã³ã¯ ã¿ãŒã²ããããã»ã¹ãã¡ã€ã³ tcp ã¿ã€ã udp äžæ use_kerberos ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã use_resolve ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã use_syslog ã¯ããŒãªã¢ã³å€ã§ãªããã°ãªããŸãã æžã蟌ã¿å¯èœ {target} ã¯ãã§ã« {category} ã«ååšããŸã {target} 㯠{category} ã«ååšããŸãã