← Back
Editing: rbacrules.cpython-312.opt-1.pyc
� ���i� � � � d dl mZ d dlmZ ddlmZmZmZmZm Z ddl m Z ddl m Z mZmZ ddlmZ dd lmZ dd lmZ dd lmZ ed d � � G d� de� � Z G d� de � Z G d� dee � Z G d� dee � Zy)� )� defaultdict)� dataclass� )� AnyRBACRule� RBACRuletype�Role� RoleAllow�RoleTransition� )�DiffResultDescriptor)� Difference�DifferenceResult�Wrapper)�class_wrapper_factory)�role_wrapper_factory)� type_or_attr_wrapper_factory)�RuleListT)�frozen�orderc �0 � e Zd ZU dZeed< eed< eed< y)�ModifiedRBACRulez,Difference details for a modified RBAC rule.�rule� added_default�removed_defaultN)�__name__� __module__� __qualname__�__doc__r �__annotations__r � � �=/usr/lib64/python3.12/site-packages/setools/diff/rbacrules.pyr r s � � 7� �����r! r c �� � e Zd ZU dZd d�Zd d�Z ee e� Z ee e� Z ee e� Z ee e� Z ee e� ZdZeeef ed< dZeeef ed< d d�Zd d�Zy) �RBACRulesDifferencez<Determine the difference in RBAC rules between two policies.Nc � � | j j d| j � d| j � �� | j � | j �| j � | j | j | j t j t � | j | j t j t � � \ | _ | _ }y)zAGenerate the difference in role allow rules between the policies.z'Generating role allow differences from � to N)�log�info� left_policy� right_policy�_left_rbac_rules�_right_rbac_rules�_create_rbac_rule_lists� _set_diff�_expand_generatorr �allow�RoleAllowWrapper�added_role_allows�removed_role_allows)�self�_s r" �diff_role_allowsz$RBACRulesDifference.diff_role_allows! s� � � ��� � �5�d�6F�6F�5G�t�D�L]�L]�K^� _� a� � � � (�D�,B�,B�,J� � (� (� *� ?C�n�n� � "� "�4�#8�#8� �9K�9K�#L�N^� _� � "� "�4�#9�#9�,�:L�:L�#M�O_� `�?b�;�� �� 8�!r! c � � | j j d| j � d| j � �� | j � | j �| j � | j | j | j t j t � | j | j t j t � � \ }}}t t � }|D ]a \ }}t |j � t |j � k7 s�2|j! t ||j |j � � �c || _ || _ || _ y)zFGenerate the difference in role_transition rules between the policies.z,Generating role_transition differences from r& N)r' r( r) r* r+ r, r- r. r/ r �role_transition�RoleTransitionWrapper�listr r �default�append�added_role_transitions�removed_role_transitions�modified_role_transitions)r4 �added�removed�matched�modified� left_rule� right_rules r" �diff_role_transitionsz)RBACRulesDifference.diff_role_transitions1 sA � � ��� � �:�4�;K�;K�:L� M��#�#�$� &� '� � � � (�D�,B�,B�,J� � (� (� *� #'�.�.� � "� "�4�#8�#8� �9U�9U�#V�#8� :� � "� "�4�#9�#9�,�:V�:V�#W�#8� :�#;� ��w�� �(�)�+��%,� !�I�z� $�I�$5�$5�6�:N�z�Oa�Oa�:b�b���� 0��1;�1C�1C�1:�1B�1B�!D� E� &-� ',��#�(/��%�)1��&r! r+ r, c �F � t t � | _ | j j d| j � �� | j j � D ]* }| j |j j |� �, t t � | _ | j j d| j � �� | j j � D ]* }| j |j j |� �, | j j d� y)z$Create rule lists for both policies.z Building RBAC rule lists from z#Completed building RBAC rule lists.N) r r: r+ r' �debugr) � rbacrules�ruletyper< r, r* �r4 r s r" r- z+RBACRulesDifference._create_rbac_rule_lists` s� � � !,�D� 1�� � �����7��8H�8H�7I�J�K��$�$�.�.�0�D� � !� !�$�-�-� 0� 7� 7�� =� 1� "-�T�!2�� � �����7��8I�8I�7J�K�L��%�%�/�/�1�D� � "� "�4�=�=� 1� 8� 8�� >� 2� �����<�=r! c �j � | j j d� | `| `| `| `| `d| _ d| _ y)z%Reset diff results on policy changes.z Resetting RBAC rule differencesN) r' rH r2 r3 r= r> r? r+ r, �r4 s r" � _reset_diffz RBACRulesDifference._reset_diffp sC � � �����8�9� � "� � $� � '� � )� � *� !%�� �!%�� r! )�returnN)r r r r r6 rF r r r2 r3 r r= r> r r? r+ r r r r r, r- rN r r! r" r$ r$ s� � �F�b� 2�@ 8�,�Y�7�8H�I��9�.�y�9�:J�K�� B� 1�.� A�BW� X�� C� 3�N� C�DY� Z� � F� 4�5E� F�G\� ]� � =A��h�|�[� 8�9�@�=A��x� �k� 9�:�A� >� &r! r$ c �6 � e Zd ZdZdZdeddfd�Zd� Zd� Zd � Z y) r1 z.Wrap role allow rules to allow set operations.��source�targetr rO Nc � � || _ t |j � | _ t |j � | _ t |� | _ y �N)�originr rR rS �hash�keyrK s r" �__init__zRoleAllowWrapper.__init__� s4 � ��� �*�4�;�;�7�� �*�4�;�;�7�� ���:��r! c � � | j S rU �rX rM s r" �__hash__zRoleAllowWrapper.__hash__� � � ��x�x�r! c �4 � | j |j k S rU r[ �r4 �others r" �__lt__zRoleAllowWrapper.__lt__� � � ��x�x�%�)�)�#�#r! c �j � | j |j k( xr | j |j k( S rU rQ r_ s r" �__eq__zRoleAllowWrapper.__eq__� s) � � �{�{�e�l�l�*�J�t�{�{�e�l�l�/J�Jr! ) r r r r � __slots__r rY r\ ra rd r r! r" r1 r1 ~ s- � �8�$�I� �Y� �4� � �$�Kr! r1 c �6 � e Zd ZdZdZdeddfd�Zd� Zd� Zd � Z y) r9 z3Wrap role_transition rules to allow set operations.�rR rS �tclassr rO Nc �� � || _ t |j � | _ t |j � | _ t |j � | _ t |� | _ y rU ) rV r rR r rS r rh rW rX rK s r" rY z RoleTransitionWrapper.__init__� sD � ��� �*�4�;�;�7�� �2�4�;�;�?�� �+�D�K�K�8�� ���:��r! c � � | j S rU r[ rM s r" r\ z RoleTransitionWrapper.__hash__� r] r! c �4 � | j |j k S rU r[ r_ s r" ra z RoleTransitionWrapper.__lt__� rb r! c � � | j |j k( xr4 | j |j k( xr | j |j k( S rU rg r_ s r" rd z RoleTransitionWrapper.__eq__� sC � � �{�{�e�l�l�*� (� �K�K�5�<�<� '�(� �K�K�5�<�<� '� (r! ) r r r r re r rY r\ ra rd r r! r" r9 r9 � s, � �=�.�I� �^� �� ��$�(r! r9 N) � collectionsr � dataclassesr � policyrepr r r r r � descriptorsr � differencer r r �objclassr �rolesr �typesr �typingr r r$ r1 r9 r r! r" �<module>rv s~ �� $� !� R� R� -� =� =� +� '� /� � �$�d�#��'� � $��^&�*� ^&�BK�w�y�)� K�0(�G�N� 3� (r!
Save File
Cancel