MINI MINI MANI MO
vP\c @ s d d l m Z d d l Z d d l Z d d l Z d Z d d l Z d d l j Z d d l
j Z d d l m
Z
d d l Z d d l Z e j e d e j e y e j e d e d d WnM e k
r e j e d d n* e k
rd d l Z e e j d
<n Xe j Z e j Z e j Z e j Z e j Z e j Z e j Z e j! Z! e j" Z" d Z# d Z$ d
Z% d Z& d Z' d Z( d Z) d Z d Z* d Z+ d d Z- d d Z. d Z/ d Z0 d Z1 d Z2 d Z3 d Z4 d Z5 d Z2 d Z4 d Z5 i Z6 e7 d! e6 d" <e7 d# e6 d$ <e7 d% e6 d& <e7 d' e6 d( <e7 d) e6 d* <e7 d+ e6 d, <e7 d- e6 d. <e7 d/ e6 d0 <i Z8 d" e8 d1 <d$ e8 d2 <d& e8 d3 <d( e8 d4 <d* e8 d5 <d, e8 d6 <d. e8 d7 <d0 e8 d8 <d9 Z9 d: Z: d; Z; d< Z< d d l= Z= d d l> Z> d d l Z d= Z? g d> Z@ g d? ZA d@ ZB d aC e jD dA ZE d aF e jD dB ZG d aH e jD dC ZI d aJ e jD dD ZK dE ZL dF ZM dG ZN dH ZO dI ZP dJ ZQ dK ZR dL ZS dM ZT dN ZU dO dP ZV g aW dQ ZX d aY dR ZZ d a[ dS Z\ d a] dT Z^ dU Z_ d a` d aa dV Zb dW Zc d ad dX Ze dY Zf d ag dZ Zh d ai d[ Zj d ak d\ Zl d am d] Zn d^ Zo d ap d_ Zq d ar d` Zs d at da Zu db Zv dc Zw i Zx dd ex de <df ex dg <dh ex di <dh ex dj <dh ex dk <dl ex dm <dn ex do <dp ex dq <dr ex ds <dr ex dt <du ex dv <du ex dw <dx ex dy <dz ex d{ <ew d| Zy d az d} Z{ d~ Z y eV Z| e e| Wn. e} k
r%Z~ e j d k r&e~ q&n Xd Z d Z d Z d a d Z d a d d l Z d d Z d d Z d Z d Z d Z d Z d S( i ( t policyiNt policycoreutils( t utils /usr/share/localet unicodet codesets utf-8t _t allowt
auditallowt
neverallowt dontauditt sourcet targett permlistt classt
transitiont
role_allowc C s t j | | } | S( N( t _policyt info( t setypet namet dict_list( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR 5 s c C s | r | } n i } t t t t t t g } x7 | D]/ } | | k rY t d | n t | | <q4 Wg } t | k r | t } d j | t | t <n t
j | } | r t | d k r g | D] } t
| | r | ^ q } n | S( Ns Type has to be in %st ,i ( t ALLOWt
AUDITALLOWt
NEVERALLOWt DONTAUDITt
TRANSITIONt
ROLE_ALLOWt
ValueErrort Truet PERMSt joinR t searcht lent _dict_has_perms( t typesR t seinfot valid_typesR t permsR t x( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR : s
+c
C sf i } g } | j d rL t t g i | t 6| t 6| t 6| t 6 } n^ t t g i | t 6| t 6| t 6 } x4 | D], } | d | k rz g } | j | qz qz Wy x g g | D]/ } t | j | t r | d r | ^ q D] } | ^ q D]K } | j
i | d d 6| d d 6 | | k r | j | i } q q WWn t k
ra| SX| S( Nt _tR t booleanR
( t endswithR R t SOURCEt TARGETt CLASSR t appendt sett issubsett updatet KeyError(
t srct destt tclasst permt tdictt tlistt allowst iR' t y( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_conditionalsQ s$ 1'
V#
c
C s t g | D] } | d d d r
| ^ q
d k } t d | d j t g | D]. } d | d d d | d d d f ^ qS f S( NR) i i s -- Allowed %s [ %s ]s || s %s=%d( R! R R R/ ( t condR' t enabled( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_conditionals_format_texti s 7c C s t t | d d S( Ni R# ( R t ATTRIBUTE( t attribute( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_types_from_attributen s c C s t t | d d S( Ni t
attributes( R t TYPE( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_attributes_from_typer s c C s2 y t t | d d SWn t k
r- d SXd S( Ni R ( R RD t RuntimeErrort None( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_real_type_namex s
c C s d t | k r t St Sd S( Nt exec_type( RE R t False( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt file_type_is_executable s c C s d t | k r t St Sd S( Nt
entry_type( RE R RJ ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt file_type_is_entrypoint s c C s t t | d d S( Ni RC ( R RD ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRE s c C s d t | k r t St Sd S( NRI ( RE R RJ ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRK s c C s d t | k r t St Sd S( NRL ( RE R RJ ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRM s s all filest as regular filet ft directoryt ds character devicet cs block devicet bs socket filet ss
symbolic linkt ls
named pipet pt s --s -ds -cs -bs -ss -ls -pc C s g } d } y1 t j | d t j d t } | j d } Wn> t j k
r} } d d l m } | j j d } n Xx4 | D], } t | r | j
| j d q q W| S( Ns semodule --list=full 2>/dev/nullt stderrt shells
i ( t SELinuxDBus( t
subprocesst check_outputt STDOUTR t splitt CalledProcessErrort sedbusRZ t
semodule_listR! R. ( t all_modulest cmdt outputRU t eRZ R: ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_modules s
c C s d d d g } g } g } x | D] } yq t | d } | j } | j | d j d d } x | D] } | j | qn W| j | g } Wq" g } q" Xq" W| S( Ns$ /usr/share/selinux/targeted/base.lsts, /usr/share/selinux/targeted/modules-base.lsts/ /usr/share/selinux/targeted/modules-contrib.lstt ri t i( t opent readlinest closeR^ R. t extend( t mod_lst_pathRb t mod_tempR: t fdt modulest m( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_modules_from_mod_lst s
c C s g } i } x6 t D]+ } | j t | r | j | q q Wt } xT | D]L } y( | | d t | | d f | | <WqU t k
r g | | <qU XqU W| S( Nt regext ftype( t get_all_file_typest
startswitht gen_short_nameR. t
get_fcdictt
file_type_strR2 ( R t flistt mpathsRO t fcdict( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_types s
(
c C s t } t } g } i } t t g i | d 6d d g d 6d d 6 } | d k si t | d k rm | St } d d g } x | D] } | d
| k r q n d | k r | d s q q n | d
j d r'| d
| k r q n | d
| k r^| d
| k r$| j | d
q$q^q x4 t | d
D]" } | | k r8| j | q8q8Wq WxT | D]L }
y( | |
d
t
| |
d f | |
<Wqit k
rg | |
<qiXqiW| S( NR
Ri t writeR t fileR
i t proc_typet sysctl_typeR R> R( Rs Rt ( t get_all_attributesRu R R RG R! Rx R* R. RB Ry R2 ( R t all_attributest
file_typest
all_writesR{ R R| RC R: t tRO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_writable_files s< -
(
c C s t j j | r | g Sy t j d | } Wn d | f GHg SX| } | j d rl | d d } n t j j | } y! | d d k r | d 7} n Wn t k
r d GHn XyM t j d | } t t | j
g t j | D] } | | ^ q SWn g SXd S( Ns %s$s bad reg:s (/.*)?it /is try failed got an IndexError( t ost patht existst ret compileR* t dirnamet
IndexErrort listt filtert matcht listdir( t regt patRV R R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt find_file s,
:c C s~ g } t | } xe t | j D]Q } | j d r% | | k r% x- | | D] } x t | D] } | SWqQ Wq% q% Wd S( Nt _exec_t( t get_entrypointsR t keysR* R RG ( t domaint exclude_listt all_entrypointst executable_filest exeR RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt find_all_files/ s c C st t } yS | j d r[ | | k r[ x1 | | d D] } x t | D] } | SWq6 Wn Wn t k
ro n Xd S( NR Rs ( Rx R* R R2 RG ( R R R| R RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt find_entrypoint_path= s
c C s ye t | d P } | j } x: | D]2 } | j } i | d d 6| d 6| | d <q( WWd QXWn+ t k
r } | j t j k r q n X| S( NRg i t equivt modifyi ( Ri Rj R^ t IOErrort errnot ENOENT( t edictt fc_pathR Ro t fcRe RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt read_file_equivI s
.
c C s- t r
t Si a t t | d d t a t S( Ns .subsR ( t file_equiv_modifiedR R ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_equiv_modifiedX s
c C s3 t r
t St | a t t | d d t a t S( Ns
.subs_distR ( t
file_equivR R RJ ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_equivc s
c C s t r
t Sg a y, t | d d } | j } Wd QXWn, t k
rj } | j t j k rf n g SXx | D] } | j } t | d k r qr n yD t | d k r t | d } n d } t j | d | f Wqr t
k
r qr Xqr Wt S( Ns .localRg i i i RN ( t local_filesRi Rj R R R R^ R! t trans_file_type_strR. R2 ( R Ro R Re R: t recRt ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_local_file_pathsn s,
c C s[ t r
t St | d } | j } | j y0 t | d d } | | j 7} Wd QXWn+ t k
r } | j t j k r q n Xi a y0 t | d d } | | j 7} Wd QXWn+ t k
r } | j t j k r q n Xx | D] } | j } y t | d k r0t | d } n d } | d j d d } | t k rut | d j
| d
n i | d
g d 6| d 6t | <Wq q Xq Wi d g d 6t d
<i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <t S( NRg s .homedirss .locali i RN it :Rs i Rt s
all log filest logfiles all user tmp filest
user_tmp_types all user home filest user_home_types all virtual image filest virt_image_typesB all files on file systems which do not support extended attributest noxattrfss) all sandbox content in tmpfs file systemst sandbox_tmpfs_types& all user content in tmpfs file systemst user_tmpfs_types all files on the systemt file_typesA use this label for random content that will be shared using sambat
samba_share_t( R| Ri Rj Rk R R R R^ R! R R. ( R Ro R Re R: R Rt R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRx sP
#c C sV y> g t t g i d d 6 D] } | d | k r | ^ q SWn t k
rQ n Xd S( Nt processR
t transtype( R R t TypeErrorRG ( R R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_transitions_into s
>
c C s: y" t t g i | d 6d d 6 SWn t k
r5 n Xd S( NR
R R
( R R R RG ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_transitions s
"
c C sV y> g t t g i | d 6 D] } | d d k r | ^ q SWn t k
rQ n Xd S( NR
R
R ( R R R RG ( R R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_transitions s
>
c C s g } t t g i | d 6 } x\ | D]T } d | k r& y5 x. | d D]" } | | k rF | j | qF qF WWqz qz Xq& q& W| S( NR
R) ( R R R. ( R R) t boollistR RV RS ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_boolean_rules s
c C s
t d S( NRL ( RB ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_entrypoints s c C s g } yh g g t t g i | d 6d g d 6d d 6 D] } | d | k r7 | ^ q7 D] } | d ^ qW } Wn t k
r n X| S( NR
t
entrypointR R R
R ( R R R ( R t entrypointsR' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_entrypoint_types s h
c C s t j | d j d d } yi g t t g i d d 6d d 6 D] } | d | k rD | ^ qD } t | d k r| d S| d d
SWn t k
r n Xd S( Ni R i t init_tR
R R
R i R ( t selinuxt
getfileconR^ R R R! RG R ( R R R' R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_init_transtype s C
c C s yi g t t g i d d 6d d 6 D] } | d | k r$ | ^ q$ } t | d k r\ d S| d d SWn t k
r| n Xd S( NR R
R R
R i R ( R R R! RG R ( R R' R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_init_entrypoint s C
c C sb yJ g t t g i d d 6| d 6d d 6 D] } | d ^ q+ } | d SWn t k
r] n Xd S( NR R
R R R
R i ( R R R RG ( R R' R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_init_entrypoint_target s >
c C sp t } i } xZ t | D]L } y( | | d t | | d f | | <Wq t k
rg g | | <q Xq W| S( NRs Rt ( Rx R Ry R2 ( R R| R{ RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR s (
R c C sY y9 | t j } t j d | } | j | d SWn n Xt t d d S( Ns %s.*is No SELinux Policy installed( R t selinux_binary_policy_patht globt sortR R ( t rootR t policies( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_installed_policy s
c C s t t d k r t St t j } yH t | } t j } | j | t | j j
a | j Wn( t j
j d | t j d n Xt j t S( Ni s# could not open interface info [%s]
i ( R! t methodst gen_interfacest defaultst interface_infoRi t
interfacest InterfaceSett from_fileR R Rk t sysRX R~ t exitR ( t fnRo t ifs( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_methods( s
c C s6 t d k r2 g t t D] } | d ^ q a n t S( NR ( t all_typesRG R RD ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_types? s &c C s* t d k r& t t d d d a n t S( Nt
userdomaini R# ( t
user_typesRG R R@ ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_user_typesH s c C s t r
t Si a x~ t t g D]m } | d d k s | d d k rL q n | d t k rx t | d j | d q | d g t | d <q Wt S( NR
t system_rR ( t role_allowsR R R. ( Rg ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_role_allowsQ s c C s d d l } g } t } | j x{ | D]s } | j d | } t | d k r, t | j d | d d k r | d | k r | j | d q q, q, W| S( Nis (.*)%ss _exec_t$i s _initrc$s (.*)_exec_t$s (.*)_initrc$( R R R t findallR! R. ( R t all_domainsR# R: Rq ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_entrypoint_domainsa s
2c C s t j } t j } t } y, t j | j t j | j k rI d SWn t k
r] n Xt j d k r t t
d n t j d d t j
d t GHd S( Ni sE You must regenerate interface info by running /usr/bin/sepolgen-ifgens /usr/bin/sepolgen-ifgenRX RY ( R R t headersRJ R t statt st_mtimet OSErrort getuidR R R[ R\ R] R ( t ifileR t rebuild( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR q s $
c C s> t r t t f Si a i a xt t D]} | d | d k rV t | d } n$ d t | d t | d f } | d | d f t k r t | d | d f j | n | g t | d | d f <d | k r
| d | d f t | d | d | d f <q) | d t | d | d | d f <q) Wt t f S( Nt lowt highs %s-%st typet protocolt range( t portrecst
portrecsbynumR t PORTt strR. ( R: t port( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
gen_port_dict s
$" 0'c C s$ t s t t d d d a n t S( NR i R# ( R R R@ ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_domains s c C s< t | d t | d k t | d t | d k S( Ni ( t int( R' R; ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt mls_cmp s c C s[ t r
t St t } | j } | j d t j t d | d | | d f a t S( Nt keys %s-%si i( t mls_ranget mls_rangerolesR t SENSR R R t
cmp_to_keyR ( t
range_dictR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_mls_range s c C sH t r
t Sg t t D] } | d ^ q a t j d t j t S( NR t object_r( t rolesR t ROLEt removeR ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_roles s #
c C sJ t sF t t a x1 t D]& } d j | d j d | d <q Wn t S( NRW R Rh ( t selinux_user_listR t USERR R^ ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_selinux_users s
'c C s t r
t St t j d } | j } | j g a x | j d D] } | j } t | d k sK | j d r qK n | j d } t j
i | d d 6| d d 6d j | d d
6 qK Wt S( NRg s
i t #R R i t seuseri t mls( t login_mappingsRi R t selinux_usersconf_patht readRk R^ t stripR! Rv R. R ( Ro t bufRS R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_login_mappings s
!;c C s. g t D] } | d ^ q
} | j | S( NR ( R R ( R' t users( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_users s
c C s/ t r
t St t d d d a t j t S( NR i R# ( R R R@ R ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRu s
c C s/ t r
t St t d d d a t j t S( Nt port_typei R# ( t
port_typesR R@ R ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_port_types s
c C s t s t t a n t S( N( t boolsR t BOOLEAN( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_bools s c C s! d j | t | j d S( NRh R ( R R! R^ ( RO t trim( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt prettyprint s c C s | S( N( ( RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt markup
s t etc_ts /etct tmp_ts /tmpt unit_file_ts /usr/lib/systemd/systems /lib/systemd/systems /etc/systemd/systemt var_cache_ts
/var/cachet var_lib_ts /var/libt log_ts /var/logt var_run_ts /var/runs /runt
var_lock_ts /run/locks
/var/run/lockt var_spool_ts
/var/spoolt content_ts /var/wwwc C sC d | | } | j d r4 | d t | d S| j d rX | d t | d S| j d r| | d t | d S| j d r | d t | d S| j d
r | d t | d S| j d r | d t | d S| j d
s| j d r| d S| j d r%| d S| j d rI| d t | d S| j d rm| d t | d S| j d r| d t | d S| j d r| d t | d S| j d r| d | t d S| j d r| d t | d S| j d r#| d t | d S| j d rG| d t | d S| j d rk| d t | d S| j d! r| d" t | d! S| j d# r| d$ t | d% S| j d& r| d' t | d& S| j d( r| d) t | d( S| j d* r | d+ t | d( S| j d, rC| d$ t | d, S| j d- rg| d. t | d- S| j d/ r| d0 t | d/ S| j d1 r| d2 t | d1 S| j d3 r| d4 t | d3 S| j d5 r| d2 t | d5 S| j d6 r| d2 t | d6 S| j d7 r?| d2 t | d7 S| j d6 rc| d8 t | d6 S| j d9 r| d: t | d9 S| j d; r| d< t | d9 S| j d= r| d> t | d= S| j d? r| d@ t | d? S| j dA r
| dB S| j dC r.| dD t | dC S| dE t | dF S(G Ns+ Set files with the %s type, if you want to t
_var_run_ts8 store the %s files under the /run or /var/run directory.t _pid_ts, store the %s files under the /run directory.t
_var_lib_ts0 store the %s files under the /var/lib directory.t _var_ts, store the %s files under the /var directory.t _var_spool_ts2 store the %s files under the /var/spool directory.t _spool_tt _cache_tt _var_cache_ts/ store the files under the /var/cache directory.t _keytab_ts) treat the files as kerberos keytab files.t _lock_tsE treat the files as %s lock data, stored under the /var/lock directoryt _log_tsK treat the data as %s log data, usually stored under the /var/log directory.t _config_tsR treat the files as %s configuration data, usually stored under the /etc directory.t _conf_tR s, transition an executable to the %s_t domain.t _cgi_content_ts" treat the files as %s cgi content.t
_rw_content_ts) treat the files as %s read/write content.t _rw_tt _write_tt _db_ts' treat the files as %s database content.t
_ra_content_ts* treat the files as %s read/append content.t _ra_conten_tt _cert_ts' treat the files as %s certificate data.t _key_ts treat the files as %s key data.t _secret_ts" treat the files as %s secret data.t _ra_tt _ro_ts( treat the files as %s read/only content.t
_modules_ts treat the files as %s modules.t
_content_ts treat the files as %s content.t _state_ts! treat the files as %s state data.t _files_tt _file_tt _data_ts treat the data as %s content.t _tmp_ts1 store %s temporary files in the /tmp directories.t _etc_ts' store %s files in the /etc directories.t _home_ts+ store %s files in the users home directory.t _tmpfs_ts& store %s files on a tmpfs file system.t _unit_file_ts# treat files as a systemd unit file.t _htaccess_ts# treat the file as a %s access file.s treat the files as %s data.R( ( R* R! R! ( RO R" t txt( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_description s c C s0 t s, g t t D] } | d ^ q a n t S( NR ( R R R@ ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR ~ s &c C sk d a d a d a d a d a d a d a d a d a y t
j | Wn t t
d | n Xd S( Ns Failed to read %s policy file( RG R R R R R R R R R R R R R ( t policy_file( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR s
c C s) x" | D] } | | t k r t Sq Wt S( N( R RJ R ( t dictR& R6 ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR" s
c C s t } | j d r% | d } n | } t | d | k rT t d | n | d d k ru | d d } n
| d } | | f S( NR( is domain %s_t does not existiRQ R ( R R* RH R ( R R t
domainnamet
short_name( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRw s
c C s g } g } t | \ } } xig g t t g i | d 6 D] } d | k r> | ^ q> D] } | d ^ qZ D]} x| D]} t | t s q{ n y t j | d } Wn t k
r | d } n X| d j | s | d j | r;| d | f | k r| d | f | k r| j | d | f qq{ | d | f | k r{ | d | f | k r{ | j | d | f q{ q{ Wqn W| | f S( NR
R) i i (
Rw R R t
isinstancet tupleR t security_get_boolean_activeR Rv R. ( R R t domainboolsRV RW R' R: RS R> ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_bools s" V
&- -"c C sK t sG t j d a t j rG g t D] } t j | ^ q& a qG n t S( Ni ( t booleansR t security_get_boolean_namesR t PY3t decode_input( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_booleans s
(s# /usr/share/selinux/devel/policy.xmlc C sc y) t j | } | j } | j Wn3 t k
r^ t | } | j } | j n X| S( N( t gzipRi R Rk R ( R Ro R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
policy_xml s
c
C s t r
t Sd d l } d d l } i a yE| j j j t | } x| j d D]} x| j d D]} x~ | j d D]m } | j d j d j j
d } | j d d | } | j d | j d
| f t | j d <q Wx~ | j d D]m } | j d j d j j
d } | j d d | } | j d | j d
| f t | j d <qWql Wxu | j d D]d } | j d j d j j
d } | j d d | } d | j d
| f t | j d <qWqV Wxu | j d D]d } | j d j d j j
d } | j d d | } d | j d
| f t | j d <qWWn t
k
r} n Xt S(
Nit layert modulet tunablet descRV s
Rh R t dftvalt boolt global( t
booleans_dictt xml.etree.ElementTreeR t etreet ElementTreet
fromstringRc R t findt textR t subt getR (
R t xmlR t treeRU Rq RS Rg R: Re ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
gen_bool_dict s8 $2$6$-$-c C s5 t } | | k r' t | | d St d Sd S( Ni t unknown( Rv R ( R) Rk ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt boolean_category
s c C sY t } | | k r' t | | d S| j d } d | d d j | d f Sd S( Ni R s Allow %s to %si Rh i ( Rv R R^ R ( R) Rk Rg ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt boolean_desc s
c C sO d } y+ t d } | j j } Wd QXWn t k
rJ d } n X| S( NRW s /etc/system-releaset Misc( Ri t readlinet rstripR ( t system_releaseRO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_os_version s
c C sv d a d a d a d a d a d a d a d a d a d a
d a
d a d a d a
d a d a d a d a d a d S( N( RG R R R R] Rk R R| R R R R R R R R R R R ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt reinit& s& ( RW R R R R R t PROGNAMEt gettextt sepolgen.defaultsR t sepolgen.interfacesR t sepolgenR R R[ t bindtextdomaint
textdomaint installR R R t builtinsR t __dict__RD R R@ R R
R R- t TCLASSR t CATSR R R R R+ R, R R R RG R R R< R? RB RE RH RK RM Ry R R Rf Rr R} R R R R R R R R t selinux_file_context_pathR R R R R R| Rx R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R Ru R R R R R! R" t DEFAULT_DIRSRS R R RT R Re t is_selinux_enabledR" Rw R\ R] Ra Rk Rb Rc Rv Rx Ry R~ R ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt <module> sX
$ 1
\
OHA YOOOO