← Back
Editing: descriptors.cpython-312.pyc
� ���i� � �� � d dl Z d dlZddlmZ ddlmZmZmZ ej d� Z ej r d dl m Z ddl mZ G d � d ee � Z G d � d ee � Z G d � de� Zy)� N� )�InvalidCheckValue)�CriteriaDescriptor�CriteriaSetDescriptor� CriteriaPermissionSetDescriptor�T)�Callable� )� CheckerModulec �B � � e Zd ZdZd � fd� Zdddedz ddf� fd� Z� xZS ) �ConfigDescriptoraU Single item configuration option descriptor. Parameter: lookup_function The name of the SELinuxPolicy lookup function, e.g. lookup_type or lookup_boolean. Read-only instance attribute use (obj parameter): checkname The name of the check. policy The instance of SELinuxPolicy �returnNc �& �� t �| � |�� y )N)�lookup_function)�super�__init__)�selfr � __class__s ��B/usr/lib64/python3.12/site-packages/setools/checker/descriptors.pyr zConfigDescriptor.__init__! s �� � ��� ��9� �objr �valuec �� �� |st || j d � y t �| � ||j � � y # t $ r-}t |j � d| j � d|� �� |�d }~ww xY w)N� : Invalid � setting: )�setattr�namer �__set__�strip� ValueErrorr � checkname�r r r �exr s �r r zConfigDescriptor.__set__$ sp �� �� �C����D� )� S�����U�[�[�]�3�� � S�'��}�}�o�Z�� � �{�*�R�D�I�K�PR�S�� S�s � < � A2�(A-�-A2)r �Callable | strr N��__name__� __module__� __qualname__�__doc__r �strr � __classcell__�r s @r r r s5 �� � �:�S�?� S�3��:� S�$� S� Sr r c �T � � e Zd ZdZ d dddededdf� fd� Zd d d edz ddfd �Z� xZS )�ConfigSetDescriptora Descriptor for a configuration option set. Parameter: lookup_function The name of the SELinuxPolicy lookup function, e.g. lookup_type or lookup_boolean. Keyword Parameters: strict (Bool) If True, all objects must exist in the policy when setting the value. If False, any objects that fail the policy lookup will be dropped instead of raising an exception. The default is True. expand (Bool) If True, each object will be expanded. Default is False. Read-only instance attribute use (obj parameter): checkname The name of the check. log A logger instance. policy The instance of SELinuxPolicy r r$ �strict�expandr Nc �b �� t �| � |t t � �� || _ || _ y )N)r � default_value)r r � frozensetr r/ r0 )r r r/ r0 r s �r r z ConfigSetDescriptor.__init__F s, �� � ��� � �RS� ���W� �� � �� r r r r c � � |s't || j t t � � y |j }t | j � r | j }n3| j sJ d� �t |j | j � }t � }d� t j d|� D � D ]^ } ||� }| j r6t |d� s J |� d�� �|j |j � � n|j |� �` t || j t |� � y # t $ r�}| j" r\|j% d| j � d|� �� |j' dd � � t) |j* � d | j � d|� �� |�|j- |j* � d | j � d|� �� Y d }~��&d }~ww xY w) Nz/lookup_function not set, this is an SETools bugc 3 �& K � | ] }|s�|�� � y �w�N� )�.0�is r � <genexpr>z.ConfigSetDescriptor.__set__.<locals>.<genexpr>Y s � �� �@�$:�q�a��$:�� ��z\sr0 z5 does not have expand method, this is an SETools bug.zInvalid z item: z Traceback:T)�exc_infor )r r r3 r �log�callabler �getattr�policy�set�re�splitr0 �hasattr�update�addr r/ �error�debugr r! �info) r r r r= �lookup�ret�item�o�es r r zConfigSetDescriptor.__set__M s� � �� �C����I�a�L�N� 3��'�'�C���,�,�-� �-�-���+�+�^�-^�^�+� ����T�-A�-A�B�� �%�C�@�B�H�H�U�E�$:�@��P�!�$�<�A��{�{� &�q�(� 3� X� �c�!V� W�X� 3�� � �1�8�8�:�.����� �� A�$ �C����I�c�N� 3�� "� P��{�{�� � �H�T�Y�Y�K�w�q�c�"B�C�� � �,�� �>� /� "�}�}�o�Z�� � �{�'�!�� M� O�TU�V� �H�H�� � ��j���� �7�1�#� N�O�O��P�s �6AD4�4 G �=BG�G )TF) r& r' r( r) �boolr r* r r+ r, s @r r. r. / sT �� ��* JN� %� �(8� �$� � � �*.� � 4�?� 4�3��:� 4�$� 4r r. c �B � � e Zd ZdZd � fd� Zdddedz ddf� fd� Z� xZS ) � ConfigPermissionSetDescriptoraJ Descriptor for a configuration permissions set. Read-only instance attribute use (obj parameter): checkname The name of the check. policy The instance of SELinuxPolicy tclass If it exists, it will be used to validate the permissions. See validate_perms_any() r Nc �6 �� t �| � t � �� y )N)r2 )r r r3 )r r s �r r z&ConfigPermissionSetDescriptor.__init__z s �� � ���y�{��3r r r r c � �� |s t || j t � � y t �| � |d� |j d� D � � y # t $ r-}t |j � d| j � d|� �� |�d }~ww xY w)Nc 3 �& K � | ] }|s�|�� � y �wr6 r7 )r8 �vs r r: z8ConfigPermissionSetDescriptor.__set__.<locals>.<genexpr>� s � �� �%G�1A�A�Q�a�1A�r; � r r ) r r r3 r r rC r r r! r" s �r r z%ConfigPermissionSetDescriptor.__set__} s{ �� �� �C����I�K� 0� S�����%G����S�1A�%G�H�� � S�'��}�}�o�Z�� � �{�*�R�D�I�K�PR�S�� S�s �&A � B�(A=�=B)r Nr% r, s @r rQ rQ n s5 �� ��4�S�?� S�3��:� S�$� S� Sr rQ )rB �typing� exceptionr � descriptorsr r r �TypeVarr � TYPE_CHECKING�collections.abcr � checkermoduler r r. rQ r7 r r �<module>r^ sq �� � � )�<� <� �F�N�N�3��� ���(�,�S�)�!�,� S�8<4�/��2� <4�~S�$C� Sr
Save File
Cancel