Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
lib
/
python2.4
/
site-packages
/
sepolgen
/
Upload File :
New :
File
Dir
//usr/lib/python2.4/site-packages/sepolgen/refpolicy.pyo
mò ö"žQc @ s d k Z d k Z d Z d Z d Z d Z d Z d Z d d d d d d g Z h d e <d e <d e <d e <d e <d e <Z d f d „ ƒ YZ d f d „ ƒ YZ e e d d „ Z d d „ Z dL d „ Z d „ Z d e f d „ ƒ YZ d e f d „ ƒ YZ d f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d! e f d" „ ƒ YZ d# e f d$ „ ƒ YZ d% e f d& „ ƒ YZ d' e f d( „ ƒ YZ d) e f d* „ ƒ YZ d+ e f d, „ ƒ YZ d- e f d. „ ƒ YZ d/ „ Z d0 e f d1 „ ƒ YZ! d2 e f d3 „ ƒ YZ" d4 e f d5 „ ƒ YZ# d6 e f d7 „ ƒ YZ$ d8 e f d9 „ ƒ YZ% d: e f d; „ ƒ YZ& d< e f d= „ ƒ YZ' d> e f d? „ ƒ YZ( d@ e f dA „ ƒ YZ) dB e f dC „ ƒ YZ* dD e f dE „ ƒ YZ+ dF f dG „ ƒ YZ, dH f dI „ ƒ YZ- dJ f dK „ ƒ YZ. d S(M Ni i i i i i t sourcet targett objectt permissiont rolet destinationt Nodec B sª t Z d Z e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z RS( sÁ Base class objects produced from parsing the reference policy. The Node class is used as the base class for any non-leaf object produced by parsing the reference policy. This object should contain a reference to its parent (or None for a top-level object) and 0 or more children. The general idea here is to have a very simple tree structure. Children are not separated out by type. Instead the tree structure represents fairly closely the real structure of the policy statements. The object should be iterable - by default over all children but subclasses are free to provide additional iterators over a subset of their childre (see Interface for example). c C s | | _ g | _ d | _ d S( N( t parentt selft childrent Nonet comment( R R ( ( t6 /usr/lib/python2.4/site-packages/sepolgen/refpolicy.pyt __init__E s c C s t | i ƒ S( N( t iterR R ( R ( ( R t __iter__J s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( t isinstancet xR ( R ( ( R t <lambda>S s ( t itertoolst ifiltert walktreeR ( R ( ( R t nodesR s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t Module( R ( ( R R V s ( R R R R ( R ( ( R t modulesU s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t Interface( R ( ( R R Y s ( R R R R ( R ( ( R t interfacesX s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t Template( R ( ( R R \ s ( R R R R ( R ( ( R t templates[ s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t SupportMacros( R ( ( R R _ s ( R R R R ( R ( ( R t support_macros^ s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t ModuleDeclaration( R ( ( R R d s ( R R R R ( R ( ( R t module_declarationsc s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t InterfaceCall( R ( ( R R g s ( R R R R ( R ( ( R t interface_callsf s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t AVRule( R ( ( R R j s ( R R R R ( R ( ( R t avrulesi s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t TypeRule( R ( ( R R m s ( R R R R ( R ( ( R t typerulesl s c C s t i d „ t | ƒ ƒ S( sA Iterate over all of the TypeAttribute children of this Interface.c C s t | t ƒ S( N( R R t TypeAttribute( R ( ( R R q s N( R R R R ( R ( ( R t typeattributeso s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t Require( R ( ( R R t s ( R R R R ( R ( ( R t requiress s c C s t i d „ t | ƒ ƒ S( Nc C s t | t ƒ S( N( R R t Role( R ( ( R R w s ( R R R R ( R ( ( R t rolesv s c C s7 | i o t | i ƒ d | i ƒ Sn | i ƒ Sd S( Ns ( R R t strt to_string( R ( ( R t __str__y s c C s d | i i | i ƒ f S( Ns <%s(%s)>( R t __class__t __name__R. ( R ( ( R t __repr__ s c C s d S( Nt ( ( R ( ( R R. ‚ s ( R1 t __module__t __doc__R R R R R R R R R R" R$ R& R( R* R, R/ R2 R. ( ( ( R R 4 s$ t Leafc B s, t Z d „ Z d „ Z d „ Z d „ Z RS( Nc C s d | _ d S( N( R R R ( R ( ( R R ‡ s c C s7 | i o t | i ƒ d | i ƒ Sn | i ƒ Sd S( Ns ( R R R- R. ( R ( ( R R/ Š s c C s d | i i | i ƒ f S( Ns <%s(%s)>( R R0 R1 R. ( R ( ( R R2 s c C s d S( NR3 ( ( R ( ( R R. “ s ( R1 R4 R R/ R2 R. ( ( ( R R6 † s c c s | o d } n d } | d f g } xå t | ƒ d j oÑ | i | ƒ \ } } | o | | f Vn | Vt | t ƒ o g } t | i ƒ d } xb | d j oT | d j p t | i | | ƒ o" | i | i | | d f ƒ n | d 8} q– W| i | ƒ q) q) Wd S( s™ Iterate over a Node and its Children. The walktree function iterates over a tree containing Nodes and leaf objects. The iteration can perform a depth first or a breadth first traversal of the tree (controlled by the depthfirst paramater. The passed in node will be returned. This function will only work correctly for trees - arbitrary graphs will likely cause infinite looping. iÿÿÿÿi i N( t depthfirstt indext nodet stackt lent popt curt deptht showdepthR R t itemsR t it typeR t appendt extend( R9 R7 R? RB R8 R= RA R@ R> R: ( ( R R š s( $"c c s: x3 | D]+ } | d j p t | | ƒ o | Vq q Wd S( s Iterate over the direct children of a Node. The walktree function iterates over the children of a Node. Unlike walktree it does note return the passed in node or the children of any Node objects (that is, it does not go beyond the current level in the tree). N( R9 R RB R R ( R9 RB R ( ( R t walknodeÀ s t {t }c C ss t | ƒ } d } | d j o t d ƒ ‚ n d i | ƒ } | d j o | Sn | d d | d | d Sd S( sá Convert a set (or any sequence type) into a string representation formatted to match SELinux space separated list conventions. For example the list ['read', 'write'] would be converted into: '{ read write }' R3 i s" cannot convert 0 len set to stringt i N( R; t st lR- t ValueErrort joint cont( RI RM RJ R- ( ( R t list_to_space_strÍ s c C s6 t | ƒ } | d j o t d ƒ ‚ n d i | ƒ S( Ni s' cannot conver 0 len set to comma strings , ( R; RI RJ RK RL ( RI RJ ( ( R t list_to_comma_strÞ s t IdSetc B s& t Z d d „ Z d „ Z d „ Z RS( Nc C s5 | o t i | | ƒ n t i | ƒ t | _ d S( N( t listt setR R t Falset compliment( R RQ ( ( R R è s c C s t | ƒ S( N( RN R ( R ( ( R t to_space_strï s c C s t | ƒ S( N( RO R ( R ( ( R t to_comma_strò s ( R1 R4 R R RU RV ( ( ( R RP ç s t SecurityContextc B s8 t Z d Z e d „ Z d „ Z d „ Z d d „ Z RS( s; An SELinux security context with optional MCS / MLS fields.c C sS t i | ƒ d | _ d | _ d | _ d | _ | d j o | i | ƒ n d S( sß Create a SecurityContext object, optionally from a string. Parameters: [context] - string representing a security context. Same format as a string passed to the from_string method. R3 N( R6 R R t userR RB t levelt contextR t from_string( R RZ ( ( R R ÷ s c C sš | i d ƒ } t | ƒ d j o t d | ƒ ‚ n | d | _ | d | _ | d | _ t | ƒ d j o t i | d d ƒ | _ n d | _ d S( só Parse a string representing a context into a SecurityContext. The string should be in the standard format - e.g., 'user:role:type:level'. Raises ValueError if the string is not parsable as a security context. t :i s) context string [%s] not in a valid formati i i R3 N( RZ t splitt fieldsR; RK R RX R RB t stringRL RY ( R RZ R^ ( ( R R[ s c C sI | i | i j o6 | i | i j o# | i | i j o | i | i j S( s Compare two SecurityContext objects - all fields must be exactly the the same for the comparison to work. It is possible for the level fields to be semantically the same yet syntactically different - in this case this function will return false. N( R RX t otherR RB RY ( R R` ( ( R t __eq__ s t s0c C sg | i | i | i g } | i d j o" | d j o | i | ƒ qZ n | i | i ƒ d i | ƒ S( s½ Return a string representing this security context. By default, the string will contiain a MCS / MLS level potentially from the default which is passed in if none was set. Arguments: default_level - the default level to use if self.level is an empty string. Returns: A string represening the security context in the form 'user:role:type:level'. R3 R\ N( R RX R RB R^ RY t default_levelRC RL ( R Rc R^ ( ( R R. & s ( R1 R4 R5 R R R[ Ra R. ( ( ( R RW õ s t ObjectClassc B s t Z d Z d d „ Z RS( s" SELinux object class and permissions. This class is a basic representation of an SELinux object class - it does not represent separate common permissions - just the union of the common and class specific permissions. It is meant to be convenient for policy generation. R3 c C s | | _ t ƒ | _ d S( N( t nameR RP t perms( R Re ( ( R R E s ( R1 R4 R5 R ( ( ( R Rd = s R' c B s t Z d Z d „ Z d „ Z RS( s[ SElinux typeattribute statement. This class represents a typeattribute statement. c C s& t i | ƒ d | _ t ƒ | _ d S( NR3 ( R6 R R RB RP t attributes( R ( ( R R P s c C s d | i | i i ƒ f S( Ns typeattribute %s %s;( R RB Rg RV ( R ( ( R R. U s ( R1 R4 R5 R R. ( ( ( R R' K s R+ c B s t Z d „ Z d „ Z RS( Nc C s& t i | ƒ d | _ t ƒ | _ d S( NR3 ( R6 R R R RP t types( R ( ( R R Y s c C s d | i | i i ƒ f S( Ns role %s types %s;( R R Rh RV ( R ( ( R R. ^ s ( R1 R4 R R. ( ( ( R R+ X s t Typec B s t Z d d „ Z d „ Z RS( NR3 c C s2 t i | ƒ | | _ t ƒ | _ t ƒ | _ d S( N( R6 R R Re RP Rg t aliases( R Re ( ( R R b s c C sw d | i } t | i ƒ d j o | d | i i ƒ } n t | i ƒ d j o | d | i i ƒ } n | d S( Ns type %si s alias %ss , %st ;( R Re RI R; Rj RU Rg RV ( R RI ( ( R R. h s ( R1 R4 R R. ( ( ( R Ri a s t TypeAliasc B s t Z d „ Z d „ Z RS( Nc C s& t i | ƒ d | _ t ƒ | _ d S( NR3 ( R6 R R RB RP Rj ( R ( ( R R q s c C s d | i | i i ƒ f S( Ns typealias %s alias %s;( R RB Rj RU ( R ( ( R R. v s ( R1 R4 R R. ( ( ( R Rl p s t Attributec B s t Z d d „ Z d „ Z RS( NR3 c C s t i | ƒ | | _ d S( N( R6 R R Re ( R Re ( ( R R z s c C s d | i S( Ns attribute %s;( R Re ( R ( ( R R. ~ s ( R1 R4 R R. ( ( ( R Rm y s R# c B sG t Z d Z d Z d Z d Z e d „ Z d „ Z d „ Z d „ Z RS( s» SELinux access vector (AV) rule. The AVRule class represents all varieties of AV rules including allow, dontaudit, and auditallow (indicated by the flags self.ALLOW, self.DONTAUDIT, and self.AUDITALLOW respectively). The source and target types, object classes, and perms are all represented by sets containing strings. Sets are used to make it simple to add strings repeatedly while avoiding duplicates. No checking is done to make certain that the symbols are valid or consistent (e.g., perms that don't match the object classes). It is even possible to put invalid types like '$1' into the rules to allow storage of the reference policy interfaces. i i i c C se t i | ƒ t ƒ | _ t ƒ | _ t ƒ | _ t ƒ | _ | i | _ | o | i | ƒ n d S( N( R6 R R RP t src_typest tgt_typest obj_classesRf t ALLOWt rule_typet avt from_av( R Rs ( ( R R — s c C s> | i | i j o d Sn | i | i j o d Sn d Sd S( Nt allowt dontauditt auditallow( R Rr Rq t DONTAUDIT( R ( ( R t __rule_type_str¡ s c C sw | i i | i ƒ | i | i j o | i i d ƒ n | i i | i ƒ | i i | i ƒ | i i | i ƒ d S( sI Add the access from an access vector to this allow rule. R N( R Rn t addRs t src_typet tgt_typeRo Rp t obj_classRf t update( R Rs ( ( R Rt © s c C sA d | i ƒ | i i ƒ | i i ƒ | i i ƒ | i i ƒ f S( s« Return a string representation of the rule that is a valid policy language representation (assuming that the types, object class, etc. are valie). s %s %s %s:%s %s;N( R t _AVRule__rule_type_strRn RU Ro Rp Rf ( R ( ( R R. µ s ( R1 R4 R5 Rq Rx t AUDITALLOWR R R Rt R. ( ( ( R R# ƒ s R% c B s; t Z d Z d Z d Z d Z d „ Z d „ Z d „ Z RS( sö SELinux type rules. This class is very similar to the AVRule class, but is for representing the type rules (type_trans, type_change, and type_member). The major difference is the lack of perms and only and sing destination type. i i i c C sJ t i | ƒ t ƒ | _ t ƒ | _ t ƒ | _ d | _ | i | _ d S( NR3 ( R6 R R RP Rn Ro Rp t dest_typet TYPE_TRANSITIONRr ( R ( ( R R Ê s c C s> | i | i j o d Sn | i | i j o d Sn d Sd S( Nt type_transitiont type_changet type_member( R Rr R‚ t TYPE_CHANGE( R ( ( R Ry Ò s c C s; d | i ƒ | i i ƒ | i i ƒ | i i ƒ | i f S( Ns %s %s %s:%s %s;( R t _TypeRule__rule_type_strRn RU Ro Rp R ( R ( ( R R. Ú s ( R1 R4 R5 R‚ R† t TYPE_MEMBERR R‡ R. ( ( ( R R% ¿ s t RoleAllowc B s t Z d „ Z d „ Z RS( Nc C s) t i | ƒ t ƒ | _ t ƒ | _ d S( N( R6 R R RP t src_rolest tgt_roles( R ( ( R R â s c C s d | i i ƒ | i i ƒ f S( Ns allow %s %s;( R RŠ RV R‹ ( R ( ( R R. ç s ( R1 R4 R R. ( ( ( R R‰ á s R c B s t Z d „ Z d „ Z RS( Nc C s, t i | ƒ d | _ d | _ t | _ d S( NR3 ( R6 R R Re t versionRS t refpolicy( R ( ( R R ì s c C s: | i o d | i | i f Sn d | i | i f Sd S( Ns policy_module(%s, %s)s module %s %s;( R R Re RŒ ( R ( ( R R. ò s ( R1 R4 R R. ( ( ( R R ë s c C s] xV t | d t ƒD]B \ } } d } x t | ƒ D] } | d } q2 W| t | ƒ GHq Wd S( NR? R3 s ( R t headt TrueR9 R> RI t rangeRA R- ( RŽ R9 RA R> RI ( ( R t print_treeü s t Headersc B s t Z d d „ Z d „ Z RS( Nc C s t i | | ƒ d S( N( R R R R ( R R ( ( R R s c C s d S( Ns [Headers]( ( R ( ( R R. s ( R1 R4 R R R. ( ( ( R R’ s R c B s t Z d d „ Z d „ Z RS( Nc C s t i | | ƒ d S( N( R R R R ( R R ( ( R R s c C s d S( NR3 ( ( R ( ( R R. s ( R1 R4 R R R. ( ( ( R R s R c B s& t Z d Z d e d „ Z d „ Z RS( sq A reference policy interface definition. This class represents a reference policy interface definition. R3 c C s t i | | ƒ | | _ d S( N( R R R R Re ( R Re R ( ( R R s c C s d | i S( Ns [Interface name: %s]( R Re ( R ( ( R R. s ( R1 R4 R5 R R R. ( ( ( R R s t TunablePolicyc B s t Z d d „ Z d „ Z RS( Nc C s t i | | ƒ g | _ d S( N( R R R R t cond_expr( R R ( ( R R s c C s d t | i d d ƒS( Ns [Tunable Policy %s]RM R3 ( R3 R3 ( RN R R” ( R ( ( R R. $ s ( R1 R4 R R R. ( ( ( R R“ s R c B s t Z d d d „ Z d „ Z RS( NR3 c C s t i | | ƒ | | _ d S( N( R R R R Re ( R Re R ( ( R R ( s c C s d | i S( Ns [Template name: %s]( R Re ( R ( ( R R. , s ( R1 R4 R R R. ( ( ( R R ' s t IfDefc B s t Z d d d „ Z d „ Z RS( NR3 c C s t i | | ƒ | | _ d S( N( R R R R Re ( R Re R ( ( R R 0 s c C s d | i S( Ns [Ifdef name: %s]( R Re ( R ( ( R R. 4 s ( R1 R4 R R R. ( ( ( R R• / s t Conditionalc B s t Z d d „ Z d „ Z RS( Nc C s t i | | ƒ g | _ d S( N( R R R R R” ( R R ( ( R R 8 s c C s d t | i d d ƒS( Ns [If %s]RM R3 ( R3 R3 ( RN R R” ( R ( ( R R. < s ( R1 R4 R R R. ( ( ( R R– 7 s R! c B s& t Z d d „ Z d „ Z d „ Z RS( NR3 c C s, t i | ƒ | | _ g | _ g | _ d S( N( R6 R R t ifnamet argst comments( R R— ( ( R R @ s c C s | i | i j o t Sn t | i ƒ t | i ƒ j o t Sn x8 t | i | i ƒ D]! \ } } | | j o t SqX qX Wt S( N( R R— R` RS R; R˜ t zipt at bR ( R R` R› Rœ ( ( R t matchesF s c C sˆ d | i } d } xj | i D]_ } t | t ƒ o t | ƒ } n | } | d j o | d | } n | | } | d 7} q W| d S( Ns %s(i s , %si t )( R R— RI RA R˜ R› R RQ RN R- ( R R› RA RI R- ( ( R R. P s ( R1 R4 R R R. ( ( ( R R! ? s t OptionalPolicyc B s t Z d d „ Z d „ Z RS( Nc C s t i | | ƒ d S( N( R R R R ( R R ( ( R R a s c C s d S( Ns [Optional Policy]( ( R ( ( R R. d s ( R1 R4 R R R. ( ( ( R RŸ ` s R c B sA t Z d d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z RS( Nc C s t i | | ƒ d | _ d S( N( R R R R R t map( R R ( ( R R h s c C s d S( Ns [Support Macros]( ( R ( ( R R. l s c C sa t ƒ } | i i | ƒ o4 x> | i | ƒ D] } | i | i | ƒ ƒ q, Wn | i | ƒ | S( N( RR RI R R t has_keyt permt by_namet pR~ t _SupportMacros__expand_permRz ( R R¢ R¤ RI ( ( R t __expand_permo s c C sa h | _ xQ | D]I } t ƒ } x' | i D] } | i | i | ƒ ƒ q) W| | i | i <q Wd S( N( R R R RR t exp_permsRf R¢ R~ R¥ Re ( R R R§ R¢ ( ( R t __gen_map{ s c C s# | i p | i ƒ n | i | S( N( R R t _SupportMacros__gen_mapRe ( R Re ( ( R R£ ƒ s c C s( | i p | i ƒ n | i i | ƒ S( N( R R R© R¡ Re ( R Re ( ( R R¡ ˆ s ( R1 R4 R R R. R¥ R© R£ R¡ ( ( ( R R g s R) c B s# t Z d „ Z d „ Z d „ Z RS( Nc C sJ t i | ƒ t ƒ | _ h | _ t ƒ | _ t ƒ | _ t ƒ | _ d S( N( R6 R R RP Rh Rp R, t boolst users( R ( ( R R Ž s c C s) | i i | t ƒ ƒ } | i | ƒ d S( N( R Rp t setdefaultR} RP R¤ R~ Rf ( R R} Rf R¤ ( ( R t add_obj_class– s c C s g } | i d ƒ x" | i D] } | i d | ƒ q Wx: | i i ƒ D]) \ } } | i d | | i ƒ f ƒ qH Wx" | i D] } | i d | ƒ q Wx" | i D] } | i d | ƒ q¤ Wx" | i D] } | i d | ƒ qÉ W| i d ƒ t | ƒ d j o d Sn d i | ƒ S( Ns require {s type %s;s class %s %s;s role %s;s bool %s;s user %s;RG i R3 s ( RI RC R Rh RB Rp R@ R} Rf RU R, R Rª t boolR« RX R; RL ( R Rf RI R} R RX R® RB ( ( R R. › s* ! ( R1 R4 R R R. ( ( ( R R) s t ObjPermSetc B s t Z d „ Z d „ Z RS( Nc C s | | _ t ƒ | _ d S( N( Re R RR Rf ( R Re ( ( R R ² s c C s d | i | i i ƒ f S( Ns define(`%s', `%s')( R Re Rf RU ( R ( ( R R. ¶ s ( R1 R4 R R. ( ( ( R R¯ ± s t ClassMapc B s t Z d „ Z d „ Z RS( Nc C s | | _ | | _ d S( N( R} R Rf ( R R} Rf ( ( R R º s c C s | i d | i S( Ns : ( R R} Rf ( R ( ( R R. ¾ s ( R1 R4 R R. ( ( ( R R° ¹ s t Commentc B s/ t Z d d „ Z d „ Z d „ Z d „ Z RS( Nc C s! | o | | _ n g | _ d S( N( RJ R t lines( R RJ ( ( R R  s c C sZ t | i ƒ d j o d Sn9 g } x" | i D] } | i d | ƒ q. Wd i | ƒ Sd S( Ni R3 t #s ( R; R R² t outt lineRC RL ( R Rµ R´ ( ( R R. È s c C sM t | i ƒ o9 x6 | i D]' } | d j o | i i | ƒ q q Wn d S( NR3 ( R; R` R² Rµ R RC ( R R` Rµ ( ( R t mergeÓ s c C s | i ƒ S( N( R R. ( R ( ( R R/ Ù s ( R1 R4 R R R. R¶ R/ ( ( ( R R± Á s ( RF RG (/ R_ R t SRC_TYPEt TGT_TYPEt OBJ_CLASSt PERMSt ROLEt DEST_TYPEt field_to_strt str_to_fieldR R6 R RS R R RE RN RO RR RP RW Rd R' R+ Ri Rl Rm R# R% R‰ R R‘ R’ R R R“ R R• R– R! RŸ R R) R¯ R° R± (+ R“ R6 R– R+ R R R• R‘ Ri R RO Rº R¹ R RP RN Rl R¸ RW R_ R¯ R) RE R# R’ R° R· R¼ R R R± R‰ R RŸ R¾ Rd R R» R' Rm R% R! R½ ( ( R t ? sT <R& H <" !&$