JFIF $
d d 7
Viewing File: /usr/lib64/python3.9/site-packages/setools/checker/__pycache__/assertte.cpython-39.opt-1.pyc
a
q�qe� � @ s� d dl Z d dlmZmZ ddlmZ ddlmZ ddlm Z ddl
m Z dd l m
Z
mZmZ d
Zd Zd Zd
ZdZdZdZdZG dd� de �ZdS )� N)�List�Union� )�InvalidCheckValue)� AnyTERule)� TERuleQuery� )�
CheckerModule)�ConfigDescriptor�ConfigSetDescriptor� ConfigPermissionSetDescriptor�source�target�tclass�perms�
exempt_source�
exempt_target�
expect_source�
expect_targetc s� e Zd ZdZdZeeeee e
e e e
f�Zed�Zed�Zedddd�Ze� Zedddd�Zedddd�Zedddd�Zedddd�Zdd �� fd
d � Zed �d d
�Z � Z S )�AssertTEzKChecker module for asserting a type enforcement allow rule exists (or not).Z assert_teZlookup_type_or_attrZ lookup_classTF)�strict�expandN)�returnc s t � �|||� t�t�| _|�t�| _|�t �| _
|�t �| _ |�t
�| _|�t�| _|�t�| _|�t�| _|�t�| _t| j| j
| j | jf�s�td��| j| j@ }|r�| j�d�d�dd� |D ���� | j| j@ }|�r| j�d�d�dd� |D ���� d S )NzEAt least one of source, target, tclass, or perms options must be set.z.Overlap in expect_source and exempt_source: {}z, c s s | ] }|j V qd S �N��name��.0�i� r �>/usr/lib64/python3.9/site-packages/setools/checker/assertte.py� <genexpr>A � z$AssertTE.__init__.<locals>.<genexpr>z.Overlap in expect_target and exempt_target: {}c s s | ] }|j V qd S r r r r r r r! F r" ) �super�__init__�loggingZ getLogger�__name__�log�get�
SOURCE_OPTr
�
TARGET_OPTr � CLASS_OPTr � PERMS_OPTr �EXEMPT_SRC_OPTr �EXEMPT_TGT_OPTr �EXPECT_SRC_OPTr �EXPECT_TGT_OPTr �anyr �info�format�join)�self�policyZ checknameZconfigZ source_exempt_expect_overlapZ target_exempt_expect_overlap�� __class__r r r$ , s0 �
�
�zAssertTE.__init__c
C s. | j �d� t| j| j| j| j| jdd�}t| j �}t| j
�}g }t |� � �D ]x}t|j�
� �}t|j�
� �}||8 }||8 }|| j | j r�|| j
| j r�| �t|�� |�|� qN| �t|�� qN|D ]"}d�|�} | �| � |�| � q�|D ]"}d�|�} | �| � |�| � q�| j �d�|�� |S )Nz!Checking TE allow rule assertion.)Zallow)r
r r r Zruletypez)Expected rule with source "{}" not found.z)Expected rule with target "{}" not found.z
{} failure(s))r' r2 r r6 r
r r r �setr r �sorted�resultsr r r Zlog_fail�str�appendZlog_okr3 �debug)
r5 �queryZunseen_sourcesZunseen_targetsZfailuresZruleZsrcsZtgts�itemZfailurer r r �runH s@ �
�
z AssertTE.run) r& �
__module__� __qualname__�__doc__Z
check_type� frozensetr) r* r+ r, r- r. r/ r0 Z check_configr
r
r r r r r r r r r r$ r rA �
__classcell__r r r7 r r s � r )r% �typingr r � exceptionr Z policyrepr Z terulequeryr Z
checkermoduler Z descriptorsr
r r r) r* r+ r, r- r. r/ r0 r r r r r �<module> s Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg