Current File : //proc/thread-self/root/proc/self/root/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyo
�
��^c @ s� d d l Z d d l Z d Z d Z d Z d Z d Z d Z d d d
d d d
g Z i e d 6e d 6e d
6e d 6e d 6e d
6Z d do d � � YZ
d e
f d � � YZ d e
f d � � YZ e
e d d � Z d d � Z dp d � Z d � Z d e f d � � YZ d e f d � � YZ d e f d � � YZ d e f d! � � YZ d" e f d# � � YZ d$ e f d% � � YZ d& e f d' � � YZ d( e f d) � � YZ d* e f d+ � � YZ d, e f d- � � YZ d. e f d/ � � YZ d0 e f d1 � � YZ d2 e f d3 � � YZ! d4 e f d5 � � YZ" d6 e f d7 � � YZ# d8 e f d9 � � YZ$ d: e f d; � � YZ% d< e f d= � � YZ& d> e f d? � � YZ' d@ e f dA � � YZ( dB e f dC � � YZ) dD e f dE � � YZ* dF e f dG � � YZ+ dH e f dI � � YZ, dJ e f dK � � YZ- dL e f dM � � YZ. dN e f dO � � YZ/ dP e f dQ � � YZ0 dR e f dS � � YZ1 dT � Z2 dU e f dV � � YZ3 dW e f dX � � YZ4 dY e f dZ � � YZ5 d[ e f d\ � � YZ6 d] e f d^ � � YZ7 d_ e f d` � � YZ8 da e f db � � YZ9 dc e f dd � � YZ: de e f df � � YZ; dg e f dh � � YZ< di dq dj � � YZ= dk dr dl � � YZ> dm ds dn � � YZ? d S(t i����Ni i i i i i t sourcet targett objectt
permissiont rolet destinationt
PolicyBasec B s e Z d d � Z RS( c C s d | _ d | _ d S( N( t Nonet parentt comment( t selfR ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __init__5 s N( t __name__t
__module__R R ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR 4 s t Nodec B s� e Z d Z d d � Z d � Z d � Z d � Z d � Z d � Z d � Z
d � Z d � Z d
� Z
d � Z d � Z d
� Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( s� Base class objects produced from parsing the reference policy.
The Node class is used as the base class for any non-leaf
object produced by parsing the reference policy. This object
should contain a reference to its parent (or None for a top-level
object) and 0 or more children.
The general idea here is to have a very simple tree structure. Children
are not separated out by type. Instead the tree structure represents
fairly closely the real structure of the policy statements.
The object should be iterable - by default over all children but
subclasses are free to provide additional iterators over a subset
of their childre (see Interface for example).
c C s t j | | � g | _ d S( N( R R t children( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR J s c C s
t | j � S( N( t iterR ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __iter__N s c C s t d � t | � � S( Nc S s
t | t � S( N( t
isinstanceR ( t x( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt <lambda>W s ( t filtert walktree( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt nodesV s c C s t d � t | � � S( Nc S s
t | t � S( N( R t Module( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR Z s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt modulesY s c C s t d � t | � � S( Nc S s
t | t � S( N( R t Interface( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR ] s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
interfaces\ s c C s t d � t | � � S( Nc S s
t | t � S( N( R t Template( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR ` s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt templates_ s c C s t d � t | � � S( Nc S s
t | t � S( N( R t
SupportMacros( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR c s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt support_macrosb s c C s t d � t | � � S( Nc S s
t | t � S( N( R t ModuleDeclaration( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR h s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt module_declarationsg s c C s t d � t | � � S( Nc S s
t | t � S( N( R t
InterfaceCall( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR k s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt interface_callsj s c C s t d � t | � � S( Nc S s
t | t � S( N( R t AVRule( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR n s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt avrulesm s c C s t d � t | � � S( Nc S s
t | t � S( N( R t TypeRule( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR q s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt typerulesp s c C s t d � t | � � S( Nc S s
t | t � S( N( R t TypeBound( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR t s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
typeboundss s c C s t d � t | � � S( sA Iterate over all of the TypeAttribute children of this Interface.c S s
t | t � S( N( R t
TypeAttribute( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR x s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt typeattributesv s c C s t d � t | � � S( sA Iterate over all of the RoleAttribute children of this Interface.c S s
t | t � S( N( R t
RoleAttribute( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR | s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt roleattributesz s c C s t d � t | � � S( Nc S s
t | t � S( N( R t Require( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt requires~ s c C s t d � t | � � S( Nc S s
t | t � S( N( R t Role( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt roles� s c C s t d � t | � � S( Nc S s
t | t � S( N( R t RoleAllow( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt role_allows� s c C s t d � t | � � S( Nc S s
t | t � S( N( R t RoleType( R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s ( R R ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
role_types� s c C s2 | j r$ t | j � d | j � S| j � Sd S( Ns
( R t strt to_string( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __str__� s c C s d | j j | j � f S( Ns <%s(%s)>( t __class__R R7 ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __repr__� s c C s d S( Nt ( ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
t __doc__R R R R R R R R R! R# R% R' R) R+ R- R/ R1 R3 R5 R8 R: R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR 9 s, t Leafc B s/ e Z d d � Z d � Z d � Z d � Z RS( c C s t j | | � d S( N( R R ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s2 | j r$ t | j � d | j � S| j � Sd S( Ns
( R R6 R7 ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR8 � s c C s d | j j | j � f S( Ns <%s(%s)>( R9 R R7 ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR: � s c C s d S( NR; ( ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R8 R: R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR= � s c
c s | r d } n d } | d f g } x� t | � d k r| j | � \ } } | rb | | f Vn | Vt | t � r' g } t | j � d } x] | d k r� | d k s� t | j | | � r� | j | j | | d f � n | d 8} q� W| j | � q' q' Wd S( s� Iterate over a Node and its Children.
The walktree function iterates over a tree containing Nodes and
leaf objects. The iteration can perform a depth first or a breadth
first traversal of the tree (controlled by the depthfirst
paramater. The passed in node will be returned.
This function will only work correctly for trees - arbitrary graphs
will likely cause infinite looping.
i����i i N( t lent popR R R R t appendt extend(
t nodet
depthfirstt showdeptht typet indext stackt curt deptht itemst i( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s"
"!c c s8 x1 | D]) } | d k s( t | | � r | Vq q Wd S( s Iterate over the direct children of a Node.
The walktree function iterates over the children of a Node.
Unlike walktree it does note return the passed in node or
the children of any Node objects (that is, it does not go
beyond the current level in the tree).
N( R R ( RB RE R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt walknode� s
t {t }c C sl t | � } d } | d k r- t d � � n d j | � } | d k rL | S| d d | d | d Sd S( s� Convert a set (or any sequence type) into a string representation
formatted to match SELinux space separated list conventions.
For example the list ['read', 'write'] would be converted into:
'{ read write }'
R; i s" cannot convert 0 len set to stringt i N( R> t
ValueErrort join( t st contt lR6 ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt list_to_space_str� s c C s4 t | � } | d k r' t d � � n d j | � S( Ni s' cannot conver 0 len set to comma strings , ( R> RP RQ ( RR RT ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt list_to_comma_str� s t IdSetc B s& e Z d d � Z d � Z d � Z RS( c C s3 | r t j | | � n
t j | � t | _ d S( N( t setR t Falset
compliment( R
t list( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s
c C s t t | � � S( N( RU t sorted( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt to_space_str s c C s t t | � � S( N( RV R\ ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt to_comma_str s N( R R
R R R] R^ ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRW � s t SecurityContextc B s; e Z d Z d d d � Z d � Z d � Z d d � Z RS( s; An SELinux security context with optional MCS / MLS fields.c C sT t j | | � d | _ d | _ d | _ d | _ | d k rP | j | � n d S( s� Create a SecurityContext object, optionally from a string.
Parameters:
[context] - string representing a security context. Same format
as a string passed to the from_string method.
R; N( R= R t userR RE R t levelt from_string( R
t contextR ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR s c C s� t j | � } | d d k r, | d } n | j d � } t | � d k r` t d | � � n | d | _ | d | _ | d | _ t | � d k r� d j | d � | _ n d | _ d S( s� Parse a string representing a context into a SecurityContext.
The string should be in the standard format - e.g.,
'user:role:type:level'.
Raises ValueError if the string is not parsable as a security context.
i i t :i s) context string [%s] not in a valid formati N( t selinuxt selinux_trans_to_raw_contextt splitR> RP R` R RE RQ Ra R ( R
Rc t rawt fields( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRb s
c C sF | j | j k oE | j | j k oE | j | j k oE | j | j k S( s Compare two SecurityContext objects - all fields must be exactly the
the same for the comparison to work. It is possible for the level fields
to be semantically the same yet syntactically different - in this case
this function will return false.
( R` R RE Ra ( R
t other( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __eq__1 s c C s� | j | j | j g } | j d k rh | d k rX t j � d k re | j d � qe qx | j | � n | j | j � d j | � S( s� Return a string representing this security context.
By default, the string will contiain a MCS / MLS level
potentially from the default which is passed in if none was
set.
Arguments:
default_level - the default level to use if self.level is an
empty string.
Returns:
A string represening the security context in the form
'user:role:type:level'.
i t s0Rd N( R` R RE Ra R Re t is_selinux_mls_enabledR@ RQ ( R
t
default_levelRi ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 < s N( R R
R< R R Rb Rk R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR_ s
t ObjectClassc B s e Z d Z d d d � Z RS( s" SELinux object class and permissions.
This class is a basic representation of an SELinux object
class - it does not represent separate common permissions -
just the union of the common and class specific permissions.
It is meant to be convenient for policy generation.
R; c C s) t j | | � | | _ t � | _ d S( N( R= R t nameRW t perms( R
Rp R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR ^ s N( R R
R< R R ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRo V s R* c B s# e Z d Z d d � Z d � Z RS( s[ SElinux typeattribute statement.
This class represents a typeattribute statement.
c C s) t j | | � d | _ t � | _ d S( NR; ( R= R RE RW t
attributes( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR j s c C s d | j | j j � f S( Ns typeattribute %s %s;( RE Rr R^ ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 o s N( R R
R< R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR* e s R, c B s# e Z d Z d d � Z d � Z RS( s[ SElinux roleattribute statement.
This class represents a roleattribute statement.
c C s) t j | | � d | _ t � | _ d S( NR; ( R= R R RW R- ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR w s c C s d | j | j j � f S( Ns roleattribute %s %s;( R R- R^ ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 | s N( R R
R< R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR, r s R0 c B s e Z d d � Z d � Z RS( c C s) t j | | � d | _ t � | _ d S( NR; ( R= R R RW t types( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s5 d } x( | j D] } | d | j | f 7} q W| S( NR; s role %s types %s;
( Rs R ( R
RR t t( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR0 � s t Typec B s e Z d d d � Z d � Z RS( R; c C s5 t j | | � | | _ t � | _ t � | _ d S( N( R= R Rp RW Rr t aliases( R
Rp R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C ss d | j } t | j � d k r< | d | j j � } n t | j � d k rk | d | j j � } n | d S( Ns type %si s alias %ss , %st ;( Rp R> Rv R] Rr R^ ( R
RR ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s
N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRu � s t TypeAliasc B s e Z d d � Z d � Z RS( c C s) t j | | � d | _ t � | _ d S( NR; ( R= R RE RW Rv ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j | j j � f S( Ns typealias %s alias %s;( RE Rv R] ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRx � s t Attributec B s e Z d d d � Z d � Z RS( R; c C s t j | | � | | _ d S( N( R= R Rp ( R
Rp R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j S( Ns
attribute %s;( Rp ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRy � s t Attribute_Rolec B s e Z d d d � Z d � Z RS( R; c C s t j | | � | | _ d S( N( R= R Rp ( R
Rp R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j S( Ns attribute_role %s;( Rp ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRz � s R$ c B sP e Z d Z d Z d Z d Z d Z d d d � Z d � Z d � Z
d � Z RS(
s� SELinux access vector (AV) rule.
The AVRule class represents all varieties of AV rules including
allow, dontaudit, and auditallow (indicated by the flags self.ALLOW,
self.DONTAUDIT, and self.AUDITALLOW respectively).
The source and target types, object classes, and perms are all represented
by sets containing strings. Sets are used to make it simple to add
strings repeatedly while avoiding duplicates.
No checking is done to make certain that the symbols are valid or
consistent (e.g., perms that don't match the object classes). It is
even possible to put invalid types like '$1' into the rules to allow
storage of the reference policy interfaces.
i i i i c C sf t j | | � t � | _ t � | _ t � | _ t � | _ | j | _ | rb | j | � n d S( N(
R= R RW t src_typest tgt_typest obj_classesRq t ALLOWt rule_typet from_av( R
t avR ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s4 | j | j k r d S| j | j k r, d Sd Sd S( Nt allowt dontauditt
auditallow( R R~ t DONTAUDIT( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __rule_type_str� s
c C su | j j | j � | j | j k r8 | j j d � n | j j | j � | j j | j � | j j | j � d S( sI Add the access from an access vector to this allow
rule.
R
N( R{ t addt src_typet tgt_typeR| R} t obj_classRq t update( R
R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s c C sA d | j � | j j � | j j � | j j � | j j � f S( s� Return a string representation of the rule
that is a valid policy language representation (assuming
that the types, object class, etc. are valie).
s %s %s %s:%s %s;( t _AVRule__rule_type_strR{ R] R| R} Rq ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s
N( R R
R< R~ R� t
AUDITALLOWt
NEVERALLOWR R R� R� R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR$ � s
R& c B s> e Z d Z d Z d Z d Z d d � Z d � Z d � Z RS( s� SELinux type rules.
This class is very similar to the AVRule class, but is for representing
the type rules (type_trans, type_change, and type_member). The major
difference is the lack of perms and only and sing destination type.
i i i c C sM t j | | � t � | _ t � | _ t � | _ d | _ | j | _ d S( NR; ( R= R RW R{ R| R} t dest_typet TYPE_TRANSITIONR ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s4 | j | j k r d S| j | j k r, d Sd Sd S( Nt type_transitiont type_changet type_member( R R� t TYPE_CHANGE( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� s
c C s; d | j � | j j � | j j � | j j � | j f S( Ns %s %s %s:%s %s;( t _TypeRule__rule_type_strR{ R] R| R} R� ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 s
N(
R R
R< R� R� t TYPE_MEMBERR R R� R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR& � s R( c B s# e Z d Z d d � Z d � Z RS( sS SElinux typebound statement.
This class represents a typebound statement.
c C s) t j | | � d | _ t � | _ d S( NR; ( R= R RE RW R| ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR s c C s d | j | j j � f S( Ns typebounds %s %s;( RE R| R^ ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 s N( R R
R< R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR( s R2 c B s e Z d d � Z d � Z RS( c C s, t j | | � t � | _ t � | _ d S( N( R= R RW t src_rolest tgt_roles( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR $ s c C s d | j j � | j j � f S( Ns allow %s %s;( R� R^ R� ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 ) s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR2 # s R4 c B s e Z d d � Z d � Z RS( c C s) t j | | � d | _ t � | _ d S( NR; ( R= R R RW Rs ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR . s c C s5 d } x( | j D] } | d | j | f 7} q W| S( NR; s role %s types %s;
( Rs R ( R
RR Rt ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 3 s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR4 - s R c B s e Z d d � Z d � Z RS( c C s/ t j | | � d | _ d | _ t | _ d S( NR; ( R= R Rp t versionRY t refpolicy( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR : s c C s5 | j r d | j | j f Sd | j | j f Sd S( Ns policy_module(%s, %s)s
module %s %s;( R� Rp R� ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 @ s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR 9 s t Conditionalc B s e Z d d � Z d � Z RS( c C s t j | | � g | _ d S( N( R R t cond_expr( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR G s c C s d t | j d d �S( Ns [If %s]RS R; ( R; R; ( RU R� ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 K s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� F s t Boolc B s e Z d d � Z d � Z RS( c C s& t j | | � d | _ t | _ d S( NR; ( R= R Rp RY t state( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR O s c C s* d | j } | j r | d S| d Sd S( Ns bool %s t truet false( Rp R� ( R
RR ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 T s
N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� N s t
InitialSidc B s e Z d d � Z d � Z RS( c C s& t j | | � d | _ d | _ d S( NR; ( R= R Rp R Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __init\ s c C s d | j t | j � f S( Ns sid %s %s( Rp R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 a s N( R R
R t _InitialSid__initR7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� [ s t GenfsConc B s e Z d d � Z d � Z RS( c C s/ t j | | � d | _ d | _ d | _ d S( NR; ( R= R t
filesystemt pathR Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR e s c C s d | j | j t | j � f S( Ns genfscon %s %s %s( R� R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 k s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� d s t
FilesystemUsec B s/ e Z d Z d Z d Z d d � Z d � Z RS( i i i c C s2 t j | | � | j | _ d | _ d | _ d S( NR; ( R= R t XATTRRE R� R Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR s s c C sk d } | j t k r d } n0 | j t k r6 d } n | j t k rN d } n d | | j t | j � f S( NR; s
fs_use_xattr s
fs_use_trans s fs_use_task s %s %s %s;( RE R� t TRANSt TASKR� R6 Rc ( R
RR ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 y s N( R R
R� R� R� R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� n s
t PortConc B s e Z d d � Z d � Z RS( c C s/ t j | | � d | _ d | _ d | _ d S( NR; ( R= R t port_typet port_numberR Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j | j t | j � f S( Ns portcon %s %s %s( R� R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t NodeConc B s e Z d d � Z d � Z RS( c C s/ t j | | � d | _ d | _ d | _ d S( NR; ( R= R t startt endR Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j | j t | j � f S( Ns nodecon %s %s %s( R� R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t NetifConc B s e Z d d � Z d � Z RS( c C s/ t j | | � d | _ d | _ d | _ d S( NR; ( R= R t interfaceR t interface_contextt packet_context( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s& d | j t | j � t | j � f S( Ns netifcon %s %s %s( R� R6 R� R� ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t PirqConc B s e Z d d � Z d � Z RS( c C s& t j | | � d | _ d | _ d S( NR; ( R= R t pirq_numberR Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j t | j � f S( Ns
pirqcon %s %s( R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t IomemConc B s e Z d d � Z d � Z RS( c C s& t j | | � d | _ d | _ d S( NR; ( R= R t
device_memR Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j t | j � f S( Ns iomemcon %s %s( R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t IoportConc B s e Z d d � Z d � Z RS( c C s& t j | | � d | _ d | _ d S( NR; ( R= R t ioportR Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j t | j � f S( Ns ioportcon %s %s( R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t PciDeviceConc B s e Z d d � Z d � Z RS( c C s& t j | | � d | _ d | _ d S( NR; ( R= R t deviceR Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j t | j � f S( Ns pcidevicecon %s %s( R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t
DeviceTreeConc B s e Z d d � Z d � Z RS( c C s& t j | | � d | _ d | _ d S( NR; ( R= R R� R Rc ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j t | j � f S( Ns devicetreecon %s %s( R� R6 Rc ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s c C s] xV t | d t �D]B \ } } d } x t | � D] } | d } q2 W| t | � GHq Wd S( NRD R; s ( R t Truet rangeR6 ( t headRB RI RR RK ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
print_tree� s
t Headersc B s e Z d d � Z d � Z RS( c C s t j | | � d S( N( R R ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d S( Ns [Headers]( ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s R c B s e Z d d � Z d � Z RS( c C s t j | | � d S( N( R R ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d S( NR; ( ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s R c B s& e Z d Z d d d � Z d � Z RS( sq A reference policy interface definition.
This class represents a reference policy interface definition.
R; c C s t j | | � | | _ d S( N( R R Rp ( R
Rp R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j S( Ns [Interface name: %s]( Rp ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R< R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s t
TunablePolicyc B s e Z d d � Z d � Z RS( c C s t j | | � g | _ d S( N( R R R� ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d t | j d d �S( Ns [Tunable Policy %s]RS R; ( R; R; ( RU R� ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s R c B s e Z d d d � Z d � Z RS( R; c C s t j | | � | | _ d S( N( R R Rp ( R
Rp R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s d | j S( Ns [Template name: %s]( Rp ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s t IfDefc B s e Z d d d � Z d � Z RS( R; c C s t j | | � | | _ d S( N( R R Rp ( R
Rp R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR s c C s d | j S( Ns [Ifdef name: %s]( Rp ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� s R" c B s) e Z d d d � Z d � Z d � Z RS( R; c C s/ t j | | � | | _ g | _ g | _ d S( N( R= R t ifnamet argst comments( R
R� R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR
s c C sr | j | j k r t St | j � t | j � k r8 t Sx3 t | j | j � D] \ } } | | k rN t SqN Wt S( N( R� RY R> R� t zipR� ( R
Rj t at b( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt matches s " c C s� d | j } d } xf | j D][ } t | t � rA t | � } n | } | d k rd | d | } n
| | } | d 7} q W| d S( Ns %s(i s , %si t )( R� R� R R[ RU ( R
RR RK R� R6 ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 s
N( R R
R R R� R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR" s
t OptionalPolicyc B s e Z d d � Z d � Z RS( c C s t j | | � d S( N( R R ( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR . s c C s d S( Ns [Optional Policy]( ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 1 s N( R R
R R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� - s R c B sA e Z d d � Z d � Z d � Z d � Z d � Z d � Z RS( c C s t j | | � d | _ d S( N( R R R t map( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR 5 s c C s d S( Ns [Support Macros]( ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 9 s c C s\ t � } | | j k rK x= | j | � D] } | j | j | � � q( Wn
| j | � | S( N( RX R� t by_nameR� t _SupportMacros__expand_permR� ( R
t permRR t p( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
__expand_perm< s
c C sa i | _ xQ | D]I } t � } x' | j D] } | j | j | � � q) W| | j | j <q Wd S( N( R� RX Rq R� R� Rp ( R
R t exp_permsR� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt __gen_mapH s
c C s! | j s | j � n | j | S( N( R� t _SupportMacros__gen_map( R
Rp ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� P s
c C s# | j s | j � n | | j k S( N( R� R� ( R
Rp ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt has_keyU s
N( R R
R R R7 R� R� R� R� ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR 4 s R. c B s& e Z d d � Z d � Z d � Z RS( c C sM t j | | � t � | _ i | _ t � | _ t � | _ t � | _ d S( N( R= R RW Rs R} R1 t datat users( R
R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR [ s c C s) | j j | t � � } | j | � d S( N( R} t
setdefaultRW R� ( R
R� Rq R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
add_obj_classc s c C s g } | j d � x" | j D] } | j d | � q Wx: | j j � D]) \ } } | j d | | j � f � qH Wx" | j D] } | j d | � q Wx" | j D] } | j d | � q� Wx" | j D] } | j d | � q� W| j d � t | � d k rd Sd
j | � S( Ns require {s type %s;s
class %s %s;s role %s;s bool %s;s user %s;RN i R; s
(
R@ Rs R} RJ R] R1 R� R� R> RQ ( R
RR RE R� Rq R t boolR` ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 h s
!
N( R R
R R R� R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR. Z s t
ObjPermSetc B s e Z d � Z d � Z RS( c C s | | _ t � | _ d S( N( Rp RX Rq ( R
Rp ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR s c C s d | j | j j � f S( Ns define(`%s', `%s')( Rp Rq R] ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s ( R R
R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� ~ s t ClassMapc B s e Z d � Z d � Z RS( c C s | | _ | | _ d S( N( R� Rq ( R
R� Rq ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C s | j d | j S( Ns : ( R� Rq ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s ( R R
R R7 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s t Commentc B s/ e Z d d � Z d � Z d � Z d � Z RS( c C s | r | | _ n g | _ d S( N( t lines( R
RT ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR � s c C sU t | j � d k r d Sg } x" | j D] } | j d | � q) Wd j | � Sd S( Ni R; t #s
( R> R� R@ RQ ( R
t outt line( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7 � s c C sI t | j � rE x3 | j D]% } | d k r | j j | � q q Wn d S( NR; ( R> R� R@ ( R
Rj R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt merge� s c C s
| j � S( N( R7 ( R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR8 � s N( R R
R R R7 R� R8 ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR� � s ( ( RM RN ( ( ( (@ t stringRe t SRC_TYPEt TGT_TYPEt OBJ_CLASSt PERMSt ROLEt DEST_TYPEt field_to_strt str_to_fieldR R R= R� RY R R RL RU RV RX RW R_ Ro R* R, R0 Ru Rx Ry Rz R$ R& R( R2 R4 R R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R R R� R R� R" R� R R. R� R� R� ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt <module> sx ^&
P
=!
!&$
Mini Shell