setroubleshoot/rhel9/plugins — Chinese (Simplified) (zh

Zen

	English	Chinese (Simplified) (zh_CN)	Actions
	If you do not think $SOURCE_PATH should need to map heap memory that is both writable and executable.	如果你不思考 $SOURCE_PATH应该映射既可写又可执行的堆内存。
	you need to report a bug. This is a potentially dangerous access.	应该报告 bug。此访问可能有危险。
	Contact your security administrator and report this issue.	联络安全管理员并报告此问题。
	SELinux is preventing $SOURCE_PATH from loading $TARGET_PATH which requires text relocation.	SELinux 将阻止 $SOURCE 加载需要重新定位文本的 $TARGET_PATH。
	The $SOURCE application attempted to load $TARGET_PATH which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a> web page explains how to remove this requirement. You can configure SELinux temporarily to allow $TARGET_PATH to use relocation as a workaround, until the library is fixed. Please file a bug report.	$SOURCE 应用程序试图读取需要文本重定位的 $TARGET_PATH。这是潜在的安全问题。多数程序库不需要这样做。有时候不正确编码的程序库会有这样的请求。 <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux 内存保护测试</a> 页面说明如何移除这个请求。请你提交此bug。在程序库修复前，您可暂时设置 SELinux 允许 $TARGET_PATH做文本重定向。
	The $SOURCE application attempted to load $TARGET_PATH which requires text relocation. This is a potential security problem. Most libraries should not need this permission. The <a href="http://people.redhat.com/drepper/selinux-mem.html"> SELinux Memory Protection Tests</a> web page explains this check. This tool examined the library and it looks like it was built correctly. So setroubleshoot can not determine if this application is compromised or not. This could be a serious issue. Your system may very well be compromised. Contact your security administrator and report this issue.	该 $SOURCE 应用程序试图加载 $TARGET_PATH需要文本重定位。这是一个潜在的安全问题。大多数图书馆不需要此权限。该 <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux内存保护测试</a>网页解释了这个检查。该工具检查了库，看起来它是正确构建的。因此，setroubleshoot无法确定此应用程序是否已被泄露。这可能是一个严重的问题。您的系统可能会受到损害。请与您的安全管理员联系并报告此问题。
	If you trust $TARGET_PATH to run correctly, you can change the file context to textrel_shlib_t. "chcon -t textrel_shlib_t '$TARGET_PATH'" You must also change the default file context files on the system in order to preserve them even on a full relabel. "semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH'"	如果您确信 $TARGET_PATH 可正常运行，则可将文件环境 (context) 改为 textrel_shlib_t。"chcon -t textrel_shlib_t '$TARGET_PATH'" 您还必须修改系统中的默认文件环境文件，以便即使在完全重新标记 (relabel) 后也能保留它们。"semanage fcontext -a -t textrel_shlib_t '$FIX_TARGET_PATH'"
	Change label on the library.	更改库上的标签。
	SELinux is preventing $SOURCE_PATH from making the program stack executable.	SELinux 将阻止 $SOURCE_PATH 使程序栈可执行。
	The $SOURCE application attempted to make its stack executable. This is a potential security problem. This should never ever be necessary. Stack memory is not executable on most OSes these days and this will not change. Executable stack memory is one of the biggest security problems. An execstack error might in fact be most likely raised by malicious code. Applications are sometimes coded incorrectly and request this permission. The <a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux Memory Protection Tests</a> web page explains how to remove this requirement. If $SOURCE does not work and you need it to work, you can configure SELinux temporarily to allow this access until the application is fixed. Please file a bug report.	$SOURCE 应用尝试将其栈变成可执行。这是个潜在的安全问题。此行为没有任何必要。在当今多数操作系统中，栈内存都是不可执行的，并且在将来也不会有变化。栈内存可执行是最严重的安全问题之一。而造成此问题的最可能原因就是恶意代码。有时不正确的应用程序代码会请求此项权限。<a href="http://people.redhat.com/drepper/selinux-mem.html">SELinux 内存保护测试</a>解释了如何移除此种请求。如果 $SOURCE 无法正常运行，但您需要让它正常运行，那么在此应用程序修正之前，可临时配置 SELinux 以允许此请求。欢迎提交 bug 报告。
	Sometimes a library is accidentally marked with the execstack flag, if you find a library with this flag you can clear it with the execstack -c LIBRARY_PATH. Then retry your application. If the app continues to not work, you can turn the flag back on with execstack -s LIBRARY_PATH.	有时库文件会意外被标上 execstack 标记。如果您发现有库带有此标记，您可以使用命令 execstack -c LIBRARY_PATH 将其清除。然后尝试重新应用程序。如果程序仍然无法运行，您可用 execstack -s LIBRARY_PATH 命令重新为库加上此标记。
	If you do not think $SOURCE_PATH should need to map stack memory that is both writable and executable.	如果你不思考 $SOURCE_PATH应该需要映射既可写又可执行的堆栈内存。
	you need to report a bug. This is a potentially dangerous access.	需要报告这个 bug。这可能是个潜在的危险访问。
	If you believe that %s should not require execstack	如果你相信%s不应该要求execstack
	you should clear the execstack flag and see if $SOURCE_PATH works correctly. Report this as a bug on %s. You can clear the exestack flag by executing:	应该清除 execstack 标记，然后看 $SOURCE_PATH 是否可以正常工作。将其作为 %s 中的 bug 报告。可以执行以下命令清除 execstack 标记：
	execstack -c %s	execstack -c %s
	SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem.	SELinux 已阻止 ftp 守护进程 $ACCESS 保存在 CIFS 文件系统中的文件。
	SELinux prevented the ftp daemon from $ACCESS files stored on a CIFS filesystem. CIFS (Comment Internet File System) is a network filesystem similar to SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>) The ftp daemon attempted to read one or more files or directories from a mounted filesystem of this type. As CIFS filesystems do not support fine-grained SELinux labeling, all files and directories in the filesystem will have the same security context. If you have not configured the ftp daemon to read files from a CIFS filesystem this access attempt could signal an intrusion attempt.	SELinux 阻止了 ftp 守护进程 $ACCESS 保存在 CIFS 文件系统中的文件。 CIFS (Comment Internet File System) 是类似于 SMB (<a href="http://www.microsoft.com/mind/1196/cifs.asp">http://www.microsoft.com/mind/1196/cifs.asp</a>) 的文件系统。 ftp 守护进程尝试从已挂载的此类文件系统中读取一个或多个文件或目录。因 CIFS 文件系统不支持精细的 SELinux 标签，因此文件系统中的所有文件和目录拥有相同的安全环境 (security context)。如果并未将让 ftp 守护进程配置为读取位于 CIFS 文件系统的文件，那么这样的尝试很有可能是入侵的信号。
	Changing the "$BOOLEAN" boolean to true will allow this access: "setsebool -P $BOOLEAN=1."	将 "$BOOLEAN" 布尔值修改为“true”即可允许本访问： "setsebool -P $BOOLEAN=1."
	Changing the "$BOOLEAN" and "$WRITE_BOOLEAN" booleans to true will allow this access: "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1". warning: setting the "$WRITE_BOOLEAN" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on CIFS filesystems.	修改 "$BOOLEAN" 和 "$WRITE_BOOLEAN" 布尔值为“true”将允许这个访问： "setsebool -P $BOOLEAN=1 $WRITE_BOOLEAN=1"。警告：设置 "$WRITE_BOOLEAN"布尔值为“true”以后，除允许 ftp守护进程向 CIFS 文件系统上的文件和目录写入外，还将允许其向所有的公共内容 (类型为 public_content_t 的文件和目录) 写入。
	If you want to allow ftpd to write to cifs file systems	如果要允许ftpd写入cifs文件系统
	you must tell SELinux about this	必须告知 SELinux 这一情况
	Enable booleans	启用布尔值
	SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem.	SELinux 阻止了 ftp 守护进程 $ACCESS 保存在 NFS 文件系统中的文件。
	SELinux prevented the ftp daemon from $ACCESS files stored on a NFS filesystem. NFS (Network Filesystem) is a network filesystem commonly used on Unix / Linux systems. The ftp daemon attempted to read one or more files or directories from a mounted filesystem of this type. As NFS filesystems do not support fine-grained SELinux labeling, all files and directories in the filesystem will have the same security context. If you have not configured the ftp daemon to read files from a NFS filesystem this access attempt could signal an intrusion attempt.	SELinux 阻止了 ftp 守护进程 $ACCESS 保存在 NFS 文件系统中的文件。 NFS (Network Filesystem) 是广泛用于 Unix 及 Linux 的网络文件系统。 ftp 守护进程尝试从已挂载的此类文件系统中读取一个或多个文件或目录。因 NFS 文件系统不支持精细的 SELinux 标记，因此文件系统中的所有文件和目录拥有相同的安全环境 (security context)。如果并未将 ftp 守护进程配置为读取位于 NFS 文件系统中的文件，那么这样的尝试很有可能是入侵的信号。
	Changing the "allow_ftpd_use_nfs" boolean to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1."	将 "allow_ftpd_use_nfs" 的布尔值改为“true”可允许此访问： "setsebool -P allow_ftpd_use_nfs=1."
	Changing the "allow_ftpd_use_nfs" and "ftpd_anon_write" booleans to true will allow this access: "setsebool -P allow_ftpd_use_nfs=1 ftpd_anon_write=1". warning: setting the "ftpd_anon_write" boolean to true will allow the ftp daemon to write to all public content (files and directories with type public_content_t) in addition to writing to files and directories on NFS filesystems.	将“allow_ftpd_use_nfs”和“ftpd_anon_write”布尔值更改为true将允许此访问：“setsebool -P allow_ftpd_use_nfs = 1 ftpd_anon_write = 1”。警告：将“ftpd_anon_write”布尔值设置为true将允许ftp守护程序除了写入NFS文件系统上的文件和目录外，还可以写入所有公共内容（类型为public_content_t的文件和目录）。
	If you want to allow ftpd to write to nfs file systems	如果要允许ftpd写入nfs文件系统
	Enable booleans.	启用布尔值。
	SELinux is preventing $SOURCE_PATH "$ACCESS" access to $TARGET_PATH.	SELinux 将阻止 $SOURCE_PATH "$ACCESS" 访问设备 $TARGET_PATH。
	You tried to place a type on a %s that is not a file type. This is not allowed, you must assigne a file type. You can list all file types using the seinfo command. seinfo -afile_type -x	尝试在 %s 设定的类型不是文件类型。这是不允许的，必须指定文件类型。可以使用 seinfo 命令列出所有文件类型。 seinfo -afile_type -x

Loading…

None

String updated in the repository

English

Chinese (Simplified) (zh_CN) 15 characters edited Current translation Translated

a year ago

Browse all string changes

Things to check

Unchanged translation

Source and translation are identical

Reset

Glossary

English	Chinese (Simplified) (zh_CN)
No related strings found in the glossary.

String information

Flags

python-format

Source string location

../src/allow_execstack.py:118

String age

a year ago

Last updated

a year ago

Source string age

a year ago

Translation file

setroubleshoot/plugins/plugins/po/zh_CN.po, string 24