← Back
Editing: assertte.cpython-312.pyc
� ���ih � �� � U d dl Z ddlmZmZ ddlmZ ddlmZ ddlm Z m Z m Z dZ e j e ed < d Ze j e ed < d Ze j e ed < dZe j e ed< dZe j e ed< dZe j e ed< dZe j e ed< dZe j e ed< dZe j eedf ed< G d� d e� Zy) � N� )� exception� policyrep)� TERuleQuery� )� CheckerModule)�ConfigDescriptor�ConfigSetDescriptor� ConfigPermissionSetDescriptor�source� SOURCE_OPT�target� TARGET_OPT�tclass� CLASS_OPT�perms� PERMS_OPT� exempt_source�EXEMPT_SRC_OPT� exempt_target�EXEMPT_TGT_OPT� expect_source�EXPECT_SRC_OPT� expect_target�EXPECT_TGT_OPT)�AssertTE.�__all__c �� � � e Zd ZdZdZ eeeee e e e e f� Z eej" d� Z eej" d� Z eej* ddd�� Z e� Z eej2 ddd�� Z eej2 ddd�� Z eej2 ddd�� Z eej2 ddd�� Z dej< d e d e e e f d d f� fd � Z!d e"ejF e z fd�Z$� xZ%S )r zKChecker module for asserting a type enforcement allow rule exists (or not).� assert_te�lookup_type_or_attr� lookup_classTF)�strict�expand�policy� checkname�config�returnNc � �� t �| � |||� |j t � | _ |j t � | _ |j t � | _ |j t � | _ |j t � | _ |j t � | _ |j t � | _ |j t" � | _ t' | j | j | j | j f� st) j* d� �| j | j z }|r4| j, j/ ddj1 d� |D � � � �� | j | j$ z }|r5| j, j/ ddj1 d� |D � � � �� y y )NzEAt least one of source, target, tclass, or perms options must be set.z,Overlap in expect_source and exempt_source: z, c 3 �4 K � | ] }|j �� � y �w�N��name��.0�is �?/usr/lib64/python3.12/site-packages/setools/checker/assertte.py� <genexpr>z$AssertTE.__init__.<locals>.<genexpr>I � � �� �&T�7S�!�q�v�v�7S�� �z,Overlap in expect_target and exempt_target: c 3 �4 K � | ] }|j �� � y �wr* r+ r- s r0 r1 z$AssertTE.__init__.<locals>.<genexpr>N r2 r3 )�super�__init__�getr r r r r r r r r r r r r r r r �anyr �InvalidCheckValue�log�info�join)�selfr$ r% r& � source_exempt_expect_overlap� target_exempt_expect_overlap� __class__s �r0 r6 zAssertTE.__init__4 sp �� � �����F�3� �j�j��,�� � �j�j��,�� � �j�j��+�� ��Z�Z� �*�� � #�Z�Z�� 7��� #�Z�Z�� 7��� #�Z�Z�� 7��� #�Z�Z�� 7����D�K�K����d�k�k�4�:�:�F�G��-�-�W�Y� Y� (,�'9�'9�D�<N�<N�'N�$� '� �H�H�M�M�H� !�Y�Y�&T�7S�&T� T� U�W� X� (,�'9�'9�D�<N�<N�'N�$� '� �H�H�M�M�H� !�Y�Y�&T�7S�&T� T� U�W� X� (� c �f � t | j | j | j | j f� sJ d� �| j j d� t | j | j | j | j | j d�� }t | j � }t | j � }g }t |j � � D ]� }t |j j � � }t |j j � � }||z }||z }|| j z | j z rH|| j z | j z r,| j# t% |� � |j' |� ��| j) t% |� � �� |D ]* }d|� d�} | j# | � |j' | � �, |D ]* }d|� d�} | j# | � |j' | � �, | j j+ |� d�� |S ) Nz'AssertTe no options set, this is a bug.z!Checking TE allow rule assertion.)�allow)r r r r �ruletypezExpected rule with source "z " not found.zExpected rule with target "z failure(s))r8 r r r r r: r; r r$ �setr r �sorted�resultsr# r r �log_fail�str�append�log_ok�debug) r= �query�unseen_sources�unseen_targets�failures�rule�srcs�tgts�item�failures r0 �runz AssertTE.runP s� � ��D�K�K����d�k�k�4�:�:�F�G� 6� 5� 6�G� ��� � �9�:��D�K�K�#'�;�;�#'�;�;�#'�;�;�"&�*�*�%/� 1�� �T� /� /�0�� �T� /� /�0��46���5�=�=�?�+�D��t�{�{�)�)�+�,�D��t�{�{�)�)�+�,�D� �d� "�N� �d� "�N��t�)�)�)�D�,>�,>�>��D� .� .�.��1C�1C�C�� � �c�$�i�(�����%�� � �C��I�&� ,� #�D�4�T�F�-�H�G� �M�M�'� "� �O�O�G� $� #� #�D�4�T�F�-�H�G� �M�M�'� "� �O�O�G� $� #� �����(��;�/�0��rA )&�__name__� __module__� __qualname__�__doc__� check_type� frozensetr r r r r r r r � check_configr r � TypeOrAttrr r r �ObjClassr r r �Typer r r r � SELinuxPolicyrI �dictr6 �list� AnyTERulerV � __classcell__)r@ s @r0 r r s^ �� �U� �J� �j�*�i��N� ,�n�n� N� O�L� 4� �i� 2� 2� 3�4I� J�F� 3� �i� 2� 2� 3�4I� J�F� 4� ��!3�!3� 4�^�D�Y^� _�F� )� +�E�7�'� ���7�8M�?D�?C�E�M� 8�'� ���7�8M�?D�?C�E�M� 8�'� ���7�8M�?C�?C�E�M� 8�'� ���7�8M�?C�?C�E�M�X�y� 6� 6� X�3� X� �c�3�h� �X�,0�X�8)�T�)�-�-��3�4� )rA r )�typing� r r � terulequeryr � checkermoduler � descriptorsr r r r �FinalrI �__annotations__r r r r r r r r �tupler � rA r0 �<module>ro s� �� � #� %� (� ]� ]� (� �F�L�L�� � (� (� �F�L�L�� � (� '� �6�<�<�� � '� &� �6�<�<�� � &�$3��� � �S�!� 3�$3��� � �S�!� 3�$3��� � �S�!� 3�$3��� � �S�!� 3�)6��� � �e�C��H�o� &� 6�_�}� _rA
Save File
Cancel