JFIF $
d d 7
Viewing File: /usr/lib64/python3.9/site-packages/setools/checker/__pycache__/roexec.cpython-39.pyc
a
q�qe � @ s| d dl Z d dlmZ d dlmZmZmZ ddlmZm Z ddl
m Z ddl m
Z
dd lmZ d
Zd Zd ZG d
d� de
�ZdS )� N)� defaultdict)�Dict�List�Set� )� AnyTERule�Type)� TERuleQuery� )�
CheckerModule)�ConfigSetDescriptor�exempt_write_domain�exempt_exec_domain� exempt_filec s� e Zd ZdZdZeeeef�Z e
dddd�Z e
dddd�Z e
dddd�Z
dd�� fd d
� Zeeee f d�d d �Zed�d
d�Z� ZS )�ReadOnlyExecutablesz@Checker module for asserting all executable files are read-only.Zro_execsZlookup_type_or_attrFT)�strict�expandN)�returnc sD t � �|||� t�t�| _|�t�| _|�t �| _
|�t �| _ d S )N)
�super�__init__�loggingZ getLogger�__name__�log�get� EXEMPT_WRITEr
� EXEMPT_FILEr � EXEMPT_EXECr )�self�policyZ checknameZconfig�� __class__� �</usr/lib64/python3.9/site-packages/setools/checker/roexec.pyr ! s
z ReadOnlyExecutables.__init__c C s� | j �d� | j �d�| j�� t| jdddd�}tt�}|�� D ]t}t|j �
� �| j }t|j �
� �| j }|rv|s�| j �d�|�� qB|D ]&}| j �d�||�� || �
|� q�qB|S ) Nz)Collecting list of executable file types.zIgnore exec domains: {!r}�Zallow��file)ZexecuteZexecute_no_trans�ZruletypeZtclassZpermszIgnoring execute rule: {}z"Determined {} is executable by: {})r �debug�formatr r r r �set�results�sourcer �targetr �add)r �queryZ collected�ruleZsources�targets�tr! r! r" �_collect_executables) s$ � z(ReadOnlyExecutables._collect_executablesc C s6 | j �d� t| jdddd�}| �� }tt�}|�� D ]P}| j �d� |�� ||_
t |� � �D ]&}t|j
�� �| j r^|| �|� q^q6t |�� �D ]~}| j�d� | j�d� |�� | j�d � t || �D ]}| j�d
� |�� q�| j�d � t || �D ]}| �t|�� q�q�| j �d � t|��� t |�� �S )
Nz#Checking executables are read-only.r# r$ )�write�appendr& z+Checking if executable type {} is writable.z
------------
z!Executable type {} is writable.
zExecute rules:
z * {}
z
Write rules:
z
{} failure(s))r �infor r r2 r r) �keysr' r( r, �sortedr* r+ r r
r- �outputr3 Zlog_fail�str�len)r r. Z executablesZfailuresZ exec_typer/ r! r! r" �runA s2 � zReadOnlyExecutables.run)r �
__module__� __qualname__�__doc__Z
check_type� frozensetr r r Z check_configr r
r r r r r r r r2 r r; �
__classcell__r! r! r r" r s r )r � collectionsr �typingr r r Z policyrepr r Z terulequeryr Z
checkermoduler Z descriptorsr r r r r r! r! r! r" �<module> s Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg