← Back
Editing: objectmodel.cpython-312.pyc
� �jw � �p � d Z g d�ZdZdZdZeez Zeeeed�Zedededed iZ G d � d � Z G d � d � Z y)z� This module provides knowledge object classes and permissions. It should be used to keep this knowledge from leaking into the more generic parts of the policy generation. ) �socket�fd�process�file�lnk_file� fifo_file�dbus� capability�unix_stream_socket� � � )�n�r�w�br r r r c � � e Zd ZdZd� Zd� Zy)�PermMapa A mapping between a permission and its information flow properties. PermMap represents the information flow properties of a single permission including the direction (read, write, etc.) and an abstract representation of the bandwidth of the flow (weight). c �. � || _ || _ || _ y �N)�perm�dir�weight)�selfr r r s �9/usr/lib/python3.12/site-packages/sepolgen/objectmodel.py�__init__zPermMap.__init__T s � ��� ���� �� � c �\ � d| j t | j | j fz S )Nz'<sepolgen.objectmodel.PermMap %s %s %d>)r � dir_to_strr r �r s r �__repr__zPermMap.__repr__Y s0 � �8�D�I�I�;E�d�h�h�;O�;?�;�;�<H� H� Hr N)�__name__� __module__� __qualname__�__doc__r r � r r r r M s � �� � Hr r c �4 � e Zd ZdZd� Zd� Zd� Zd� Zd� Zd� Z y) � PermMappingsz�The information flow properties of a set of object classes and permissions. PermMappings maps one or more classes and permissions to their PermMap objects describing their information flow characteristics. c �6 � i | _ d| _ t | _ y )N� )�classes�default_weight� FLOW_BOTH� default_dirr s r r zPermMappings.__init__d s � ��� � ���$��r c � � d}|D ]� }|j � }t |� dk( st |� dk( s|d dk( r�8|d dk( r=|d }|| j v r t d� �i | j |< | j | }�}t |� dk7 r t d� �|� t d � �t |d t |d t |d � � }|||j < �� y) zsRead the permission mappings from a file. This reads the format used by Apol in the setools suite. Nr r �#�classzduplicate class in perm map� z!error in object class permissionszpermission outside of classr )�split�lenr* � ValueErrorr � str_to_dir�intr )r r �cur�line�fields�c�pms r � from_filezPermMappings.from_filei s� � � ���D��Z�Z�\�F��6�{�a� �3�v�;�!�#3�v�a�y�C�7G���a�y�G�#��1�I���� � �$�$�%B�C�C�"%�� � �Q���l�l�1�o���v�;�!�#�$�%H�I�I��;�$�%B�C�C� �V�A�Y� �6�!�9�(=�s�6�!�9�~�N�� !��B�G�G� �! r c �& � | j | | S )z�Get the permission map for the object permission. Returns: PermMap representing the permission Raises: KeyError if the object or permission is not defined )r* )r �objr s r �getzPermMappings.get� s � � �|�|�C� ��&�&r c � � | j | | }|S # t $ r$ t || j | j � cY S w xY w)a Get the permission map for the object permission or a default. getdefault is the same as get except that a default PermMap is returned if the object class or permission is not defined. The default is FLOW_BOTH with a weight of 5. )r* �KeyErrorr r- r+ )r r> r r; s r � getdefaultzPermMappings.getdefault� sP � � H�� � �c�"�4�(�B� � �� � H��4��!1�!1�4�3F�3F�G� G� H�s � �*A�Ac �b � t }|D ]# }| j ||� }||j z }�% |S r )� FLOW_NONErB r )r r> �permsr r r; s r �getdefault_directionz!PermMappings.getdefault_direction� s5 � ����D�� � ��d�+�B�����,�C� � � r c �Z � d}|D ]# }| j ||� }||j z }�% |S )Nr )rB r )r r> rE �totalr r; s r �getdefault_distancez PermMappings.getdefault_distance� s6 � ����D�� � ��d�+�B� �R�Y�Y� �E� � � r N) r! r" r# r$ r r< r? rB rF rI r% r r r' r' ^ s% � �� %� "�8'� ��r r' N) r$ �implicitly_typed_objectsrD � FLOW_READ� FLOW_WRITEr, r5 r r r' r% r r �<module>rM sl ��(�( H� �8 � � � � � � �� #� � �i�z�� T� ��3� �C��c�9�s� T� �H� H�"K� Kr
Save File
Cancel