Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
lib
/
python2.4
/
site-packages
/
Upload File :
New :
File
Dir
//usr/lib/python2.4/site-packages/avc.pyo
mò õ"žQc @ sJ d k Z d k Z d k Z d k Z d k Z d k Z d Z d e e e e f Z d Z d f d „ ƒ YZ d f d „ ƒ YZ d f d „ ƒ YZ d k Z d k Z d Z e e i j o e i i e ƒ n d f d „ ƒ YZ d f d „ ƒ YZ d „ Z d f d „ ƒ YZ d Z d Z d Z d Z d Z d Z d f d „ ƒ YZ d S( Ns (\{[^\}]*\}|[^ :]*)s3 (allow|dontaudit)[ ]+%s[ ]*%s[ ]*:[ ]*%s[ ]*%ssÆ /^[[:blank:]]*interface[[:blank:]]*\(/ { IFACEFILE=FILENAME IFACENAME = gensub("^[[:blank:]]*interface[[:blank:]]*\\(\`?","","g",$0); IFACENAME = gensub("'?,.*$","","g",IFACENAME); } /^[[:blank:]]*(allow|dontaudit)[[:blank:]]+.*;[[:blank:]]*$/ { if ((length(IFACENAME) > 0) && (IFACEFILE == FILENAME)){ ALLOW = gensub("^[[:blank:]]*","","g",$0) ALLOW = gensub(";[[:blank:]]*$","","g",$0) print FILENAME "\t" IFACENAME "\t" ALLOW; } }t contextc B s t Z d „ Z d „ Z RS( Nc C sp | | _ | i d ƒ } | d | _ | d | _ | d | _ t | ƒ d j o | d | _ n d | _ d S( Nt :i i i i t s0( t scontextt selft splitt cont usert rolet typet lent mls( R R R ( ( t' /usr/lib/python2.4/site-packages/avc.pyt __init__1 s c C s | i S( N( R R ( R ( ( R t __str__< s ( t __name__t __module__R R ( ( ( R R 0 s t accessTransc B s t Z d „ Z d „ Z RS( Nc C sÅ h | _ y t d ƒ } Wn% t j o } t d | ƒ ‚ n X| i ƒ i d ƒ } d } xX | D]P } t i | | ƒ } | d j o+ | i ƒ d i ƒ | i | i ƒ d <qc qc W| i ƒ d S( Ns: /usr/share/selinux/devel/include/support/obj_perm_sets.spts\ Reference policy generation requires the policy development package selinux-policy-devel. %ss s' ^define *\(`([^']*)' *, *` *\{([^}]*)}'i i ( R t dictt opent fdt IOErrort errort readR t recordst regexpt rt ret matcht mt Nonet groupst close( R R R R R R R ( ( R R @ s /c C sd g } xW | D]O } | | i i ƒ j o | | i | 7} q | d j o | i | ƒ q q W| S( Nt {t }( R! R" ( t lt vart vR R t keyst append( R R$ R# R% ( ( R t getM s ( R R R R( ( ( ( R R ? s t interfacesc B s# t Z d „ Z d „ Z d „ Z RS( Nc C sÍ h | _ t ƒ } t i d ƒ \ } } | i t ƒ | i ƒ | i ƒ i d ƒ } | i ƒ t | ƒ d j oYd t } xL| D]@} t i | | ƒ } | d j o q n | i ƒ } t i i | d ƒ i d ƒ d } | d } | d i ƒ } | d i ƒ } | d i ƒ } | i | d i ƒ ƒ } x | D]‡ } x~ | D]v } xm | D]e } | | | f | i i$ ƒ j o g | i | | | f <n | i | | | f i% | | | f ƒ qPWqCWq6Wq Wn d S( Ns= awk -f - /usr/share/selinux/devel/include/*/*.if 2> /dev/nulls i s ([^ ]*)[ ]+([^ ]*)[ ]+%st .i i i i i (& R R R t transt ost popen2t inputt outputt writet awk_scriptR R R R R t allow_regexpR R R R R R R t valt patht basenamet filet ifacet Scont Tcont ClassR( t Accesst st tt cR& R' ( R R8 R; R6 R7 R3 R. R9 R: R R R> R R< R R= R/ R+ ( ( R R X s< # c C sT | i i ƒ } | i ƒ x4 | D], } | GHx | i | D] } d G| GHq9 Wq Wd S( Ns ( R R R& t sortt kt i( R R& RA R@ ( ( R t outs s c C sÊ | i i ƒ } g } | | | f | j oy xn | i | | | f D]V } | | d j o? | d i | ƒ d j o | i d | ƒ q˜ | i | ƒ qB qB W| Sn d | | f | j oy xn | i d | | f D]V } | | d j o? | d i | ƒ d j o | i d | ƒ q'| i | ƒ qÑ qÑ W| Sn | d | f | j oy xn | i | d | f D]V } | | d j o? | d i | ƒ d j o | i d | ƒ q¶| i | ƒ q`q`W| Sn | Sd S( Ni i s $1( R R R& t retR8 R9 R: RA R; t findt insertR' ( R R8 R9 R: R; R& RC RA ( ( R R { s6 ( R R R RB R ( ( ( R R) W s s /usr/share/selinux/pluginst Analyzec B s t Z d „ Z d „ Z RS( Nc C sb g | _ xR t i d ƒ D]A } t i i | ƒ d } | i i t i | t i | ƒ Œ ƒ q Wd S( Ns /usr/share/selinux/plugins/*.pyiýÿÿÿ( R t pluginst globt pR, R4 R5 t pluginR' t impt load_modulet find_module( R RJ RI ( ( R R Ÿ s c C s• g } | } x‚ | i D]w } | d j o Pn | i | ƒ } t | ƒ d j o q n | d } t | d ƒ d j o | i | d ƒ q q W| S( Ni i ( RC t AVCSt avcsR RG RI R t analyzeR R R' ( R RN RC RI RO R ( ( R t process¥ s ( R R R RQ ( ( ( R RF ž s t serulec B sJ t Z d „ Z d „ Z d „ Z d „ Z d d „ Z d „ Z d „ Z RS( Nc C sS | d | _ | d | _ | d | _ | d | _ g | _ h | _ d | _ d S( Ni i i i ( t keyR R t sourcet targett seclasst accesst avcinfoR R7 ( R RS ( ( R R ´ s c C sh xa | d D]U } | | i i ƒ j o! g | i | <| i i | ƒ n | i | i | d ƒ q Wd S( Ni i ( t avct aR RX R& RW R' ( R RY RZ ( ( R t add½ s c C sN t | i ƒ d j o | i d Sn& | i i ƒ d t i | i ƒ d Sd S( Ni i s { s }( R R RW R? t stringt join( R ( ( R t getAccessÄ s c C s | i GHd S( N( R RX ( R ( ( R t getNameË s i c C s÷ d } | d | i | i | i ƒ | i | i ƒ f } | o´ | i i ƒ } | i ƒ x˜ | D]Œ } xƒ | i | D]t } | d | d } t | d ƒ o | d | d } n t | d ƒ o | d | d } n | d | } qs Wq_ Wn | S( Nt s %s %s %s:%s %s;s #TYPE=AVC MSG=%s i i s COMM=%s i s NAME=%s s : ( RC R R RT t gettargetRV R^ t verboseRX R& R? RA t xR ( R Rb R& RC RA Rc ( ( R RB Î s 2 c C s. d } | i } | i ƒ } | i } | i ƒ } | i | | | | ƒ } t | ƒ d j o | i ƒ Sn | d d } d | i ƒ } | d 7} t } x† | D]~ } | | d j o& | d | d 7} | d } t } n | o" | d | d | f 7} t } qž | d | d | f 7} qž W| d 7} | S( NR` i i s #%s s optional_policy(` s ') gen_require(`%s', ` s %s(%s) i s # %s(%s) s ');( RC R RT R8 Ra R9 RV R: R^ R; R7 R R R RB R6 t Truet firstRA t False( R R7 RA R8 R RC R; R6 R9 R: Re ( ( R t gen_reference_policyÞ s0 c C s& | i | i j o d Sn | i Sd S( NR ( R RT RU ( R ( ( R Ra ù s ( R R R R[ R^ R_ RB Rg Ra ( ( ( R RR ³ s c C s@ t i i d t i d ƒ t i i d | ƒ t i i ƒ d S( Ns %s: i s %s ( t syst stderrR0 t argvR t flush( R ( ( R t warningÿ s t TERulesc B s5 t Z d „ Z d „ Z d „ Z d „ Z d „ Z RS( Nc C s d | _ | | _ d S( Nt allowt dontauditt auditallow( Rn Ro Rp ( R t VALID_CMDSt serules( R Rr ( ( R R s c C si | i ƒ } xV | oN | i ƒ } t | ƒ o% | d | i j o | i | ƒ n | i ƒ } q Wd S( Ni ( R. t readlinet lineR t recR R Rq t add_terule( R R. Rt Ru ( ( R t load s !c C sº | i d ƒ } | d i ƒ } | d } | i | d ƒ \ } } | d i ƒ } | i | ƒ \ } } xL | D]D } x; | D]3 } x* | D]" } | i i | | | | | ƒ qˆ Wq{ Wqn Wd S( NR i i ( t ruleR t rct rulesR R t rules_splitt sourcest targetst classesRW t scont tconRV Rr t add_rule( R Rx RV R€ Rz R RW R| R~ Ry R R} ( ( R Rv s c C s: | i d | ƒ \ } } | i | | ƒ \ } } | | f S( Ni ( R t get_targetRz t idxRU t subject( R Rz RU Rƒ R„ ( ( R R{ s c C sv g } | | d d j oÜ x9 | | i d ƒ D]$ } t | ƒ o | i | ƒ q/ q/ W| d } xþ | | D]ƒ } | i d ƒ d j oP xM | i d ƒ D]8 } t | ƒ o | i | ƒ n | d } | | f Sq˜ Wn | i | ƒ | d } ql Wnl | | i d ƒ d j o@ xN | | i d ƒ D]$ } t | ƒ o | i | ƒ q%q%Wn | i | | ƒ | d } | | f S( Ni R! i R" t ;( RU Rx RA R R= R R' R< RD t s1( R RA Rx RU R< R† R= ( ( R R‚ # s4 ( R R R Rw Rv R{ R‚ ( ( ( R Rm s i i i i t SERulesc B s t Z d d d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d d d d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d d d „ Z RS( Ni c C s; | | _ | i ƒ t | _ | | _ g | _ h | _ d S( N( t last_reloadR t initializeRf t gen_ref_policyRb RN t INVALID_SIDS( R Rˆ Rb ( ( R R H s c C s( h | _ h | _ g | _ g | _ d S( N( R t seRulesR~ t typest roles( R ( ( R R‰ P s c C sT g } d } | i ƒ } x5| o-| i ƒ } x– | D]Ž } | d j p | d j p | d j o d } q5 | d j o | i | ƒ d } q5 | d j o | i o | i ƒ Pq5 | i | ƒ q5 W| pM d } t i | | ƒ } | d j o$ d } | i d ƒ | i d ƒ qn | o | i | ƒ d } g } n | i ƒ } q Wd S( Ni s avc:s message=avc:s msg='avc:i s security_compute_sid:s type=MAC_POLICY_LOADs$ audit\(\d+\.\d+:\d+\): policy loadedt load_policyt granted( R t foundR. Rs Rt R Ru RA R t security_compute_sidRˆ R‰ R' R R R R R t translate( R R. R R‘ RA R R Ru Rt ( ( R Rw V s: ' c C s h } g | d <d | j o | i o | i ƒ n d | j o d Sn yxÉ t d t | ƒ ƒ D]² } | | d j o\ | d } xH | t | ƒ j o4 | | d j o# | d i | | ƒ | d } q‡ Wqc n | | i d ƒ } t | ƒ d j o qc n | d | | d <qc Wx) d D]! } | | i ƒ j o d Sq q Wt | d ƒ d j o d Sn Wn' t j o } t d t ƒ d Sn X| i | ƒ d S( NRW R R i R! i R" t =i R t tcontextt tclasss Bad AVC Line: %s( s scontexts tcontexts tclass( t AVCR R Rˆ R‰ t rangeR RA R' R R= R& t IndexErrort eRl RY t add_allow( R R Rš RA R= R— ( ( R R“ x s< $ c C s» h } xI | D]A } | i d ƒ } t | ƒ d j o q n | d | | d <q WyW t | d ƒ i } t | d ƒ i } | i | ƒ | i | ƒ | | i | | f <Wn d Sn Xd S( NR” i i i R R• ( R Ru RA R R= R R R R R R t add_typet add_roleR‹ ( R Ru RA R R R= ( ( R R’ š s c C s® x— | i D]Œ } | d | d j oq | d | d j o\ | d | d j oG | d | d j o2 | d | d j o | d | d j o d Sq q W| i i | ƒ d S( NR– RW R• R t commt name( R RN RZ R— R' ( R R— RZ ( ( R t add_avcª s ~ R` c C sÜ h } | | d <| | d <| | d <| | d <| | d <| | d <| i | ƒ | i | | ƒ | i | ƒ | i | ƒ | | | t f } | | i i ƒ j o t | ƒ | i | <n | i | i | | | | f ƒ d S( NR– RW R€ R Rž RŸ ( R— R– RW R€ R Rž RŸ R R t add_classRœ t rule_typeRV RS RŒ R& RR R[ t msg( R R¢ R R€ R– RW R£ Rž RŸ RS R— ( ( R R ° s c C s* | i | d | d ƒ t | d ƒ } t | d ƒ } | i | i ƒ | i | i ƒ | i | i ƒ d | i | i | d f } | | i i ƒ j o t | ƒ | i | <n | i ƒ } x) d D]! } | | j o d | | <qÄ qÄ W| i | ƒ | i | i | d | d | d | d f ƒ d S( NR– RW R• R Rn RŸ Rž R£ R` ( s names comms msg( R R¡ R— R R• R Rœ R R R RS RŒ R& RR t avckeysRA R R[ ( R R— R¤ RA RS R R• ( ( R R›  s c C sh | | i i ƒ j o g | i | <n x: | D]2 } | | i | j o | i | i | ƒ q. q. Wd S( N( RV R R~ R& RW RZ R' ( R RV RW RZ ( ( R R¡ Ø s c C s( | | i j o | i i | ƒ n d S( N( R R RŽ R' ( R R ( ( R R ß s c C s( | | i j o | i i | ƒ n d S( N( R R R R' ( R R ( ( R Rœ ã s c C s t | _ t ƒ | _ d S( N( Rd R RŠ R) R7 ( R ( ( R Rg ç s c C s" | i o d | Sn d | Sd S( Ns policy_module(%s, 1.0);s module %s 1.0;( R RŠ t module( R R¥ ( ( R t gen_moduleë s c C s5 | i i ƒ | i i ƒ | i i ƒ } | i ƒ d } | i p’ x | D]ƒ } | i | } t | ƒ d j oE | i ƒ | d | 7} x | D] } | d | 7} q W| d 7} qJ | d | | d f 7} qJ Wn x | i D] } | d | 7} qß W| i p& x# | i D] } | d | 7} q Wn | d 7} | S( Ns require { i s class %s {s %ss }; s class %s %s; i s type %s; s role %s; s }; ( R RŽ R? R R~ R& Ru RŠ RA RW R RZ ( R RZ R& RW RA Ru ( ( R t gen_requiresñ s4 c C s< t ƒ } x, | i | i ƒ D] } | d d GHd GHq Wd S( Ni R` ( RF RZ RQ R RN RA ( R RZ RA ( ( R RP s c C s= d } t | i i ƒ ƒ d j o& t | i ƒ d j o t d ƒ ‚ n | d j o' | | i | ƒ 7} | | i ƒ 7} n | o | | i ƒ 7} n x% | i i ƒ D] } | d | 7} q§ W| i i ƒ } | i ƒ x^ | D]V } | i o% | | i | i | i ƒ d 7} qß | | i | i | i ƒ d 7} qß W| S( NR` i s No AVC messages found.s role %s types %s; s ( Ru R R RŒ R& R‹ t ValueErrorR¥ R¦ R§ t requireRA R? RŠ Rg R7 RB Rb ( R R© R¥ RA R& Ru ( ( R RB s& 2 %%( R R R R‰ Rw R“ R’ R R R› R¡ R Rœ Rg R¦ R§ RP RB ( ( ( R R‡ G s " " ( Rh R, t pwdR\ R t selinuxt objR2 R1 R R R) RH RK t pluginPathR4 R' RF RR Rl Rm t ALLOWt STYPEt TTYPEt CLASSt COMMt NAMER‡ ( R« Rl R1 RF R¯ R R RK RH R\ R) Rh Rª R² R® R° R‡ Rm R¬ R³ RR R± R2 R R, R ( ( R t ? s* 6BL ;