JFIF $
d d 7
Viewing File: /usr/lib64/python3.9/site-packages/setools/diff/__pycache__/rbacrules.cpython-39.pyc
a
q�qe� � @ s� d dl mZ d dlmZ ddlmZmZmZmZm Z ddl
m Z ddl m
Z
mZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
� d
e�ZG dd� de
�ZG dd� dee �ZG dd� dee �ZdS )� )� defaultdict)�
NamedTuple� )� AnyRBACRule� RBACRuletype�Role� RoleAllow�RoleTransition� )�DiffResultDescriptor)�
Difference�Wrapper)�class_wrapper_factory)�role_wrapper_factory)� type_or_attr_wrapper_factory)�RuleListc @ s* e Zd ZU dZeed< eed< eed< dS )�ModifiedRBACRulez,Difference details for a modified RBAC rule.�ruleZ
added_defaultZremoved_defaultN)�__name__�
__module__� __qualname__�__doc__r �__annotations__r � r r �</usr/lib64/python3.9/site-packages/setools/diff/rbacrules.pyr s
r c @ s� e Zd ZU dZed�Zed�Zed�Zed�Zed�Z dZ
e e e
f ed< dZe e e
f ed< dd�dd �Zdd�d
d �Zdd�d d
�Zdd�dd�ZdS )�RBACRulesDifferencez<Determine the difference in RBAC rules between two policies.�diff_role_allows�diff_role_transitionsN�_left_rbac_rules�_right_rbac_rules)�returnc C s� | j �d�| �� | jdu s&| jdu r.| �� | jdus@J d��| jdusRJ d��| �| �| jtj t
�| �| jtj t
��\| _ | _ }dS )zAGenerate the difference in role allow rules between the policies.zJGenerating role allow differences from {0.left_policy} to {0.right_policy}N�(Left RBAC rules didn't load, this a bug.�)Right RBAC rules didn't load, this a bug.)
�log�info�formatr r �_create_rbac_rule_lists� _set_diff�_expand_generatorr Zallow�RoleAllowWrapper�added_role_allows�removed_role_allows)�self�_r r r r , s ���z$RBACRulesDifference.diff_role_allowsc C s� | j �d�| �� | jdu s&| jdu r.| �� | jdus@J d��| jdusRJ d��| �| �| jtj t
�| �| jtj t
��\}}}g }|D ]2\}}t |j �t |j �kr�|�
t||j |j �� q�|| _|| _|| _dS )zFGenerate the difference in role_transition rules between the policies.zOGenerating role_transition differences from {0.left_policy} to {0.right_policy}Nr! r" )r# r$ r% r r r& r' r( r Zrole_transition�RoleTransitionWrapperr �default�appendr �added_role_transitions�removed_role_transitions�modified_role_transitions)r, ZaddedZremovedZmatchedZmodifiedZ left_ruleZ
right_ruler r r r = s6 �����
�z)RBACRulesDifference.diff_role_transitionsc C s� t t�| _| j�d�| �� | j�� D ]}| j|j � |� q&t t�| _
| j�d�| �� | j �� D ]}| j
|j � |� qd| j�d� dS )z$Create rule lists for both policies.z-Building RBAC rule lists from {0.left_policy}z.Building RBAC rule lists from {0.right_policy}z#Completed building RBAC rule lists.N) r �listr r# �debugr% Z left_policyZ rbacrulesZruletyper0 r Z right_policy�r, r r r r r& ` s
z+RBACRulesDifference._create_rbac_rule_listsc C s: | j �d� d| _d| _d| _d| _d| _d| _d| _dS )z%Reset diff results on policy changes.z Resetting RBAC rule differencesN) r# r5 r* r+ r1 r2 r3 r r �r, r r r � _reset_diffp s z RBACRulesDifference._reset_diff)r r r r r r* r+ r1 r2 r3 r r r r r r r r r& r8 r r r r r s
#r c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d
� Zd d � Z dS )
r) z.Wrap role allow rules to allow set operations.��source�targetN�r r c C s, || _ t|j�| _t|j�| _t|�| _d S �N)�originr r: r; �hash�keyr6 r r r �__init__� s zRoleAllowWrapper.__init__c C s | j S r= �r@ r7 r r r �__hash__� s zRoleAllowWrapper.__hash__c C s | j |j k S r= rB �r, �otherr r r �__lt__� s zRoleAllowWrapper.__lt__c C s | j |j ko| j|jkS r= r9 rD r r r �__eq__� s zRoleAllowWrapper.__eq__)
r r r r � __slots__r rA rC rF rG r r r r r) ~ s r) c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d
� Zd d � Z dS )
r. z3Wrap role_transition rules to allow set operations.�r: r; �tclassNr< c C s8 || _ t|j�| _t|j�| _t|j�| _t|�| _d S r= ) r> r r: r r; r rJ r? r@ r6 r r r rA � s
z RoleTransitionWrapper.__init__c C s | j S r= rB r7 r r r rC � s z RoleTransitionWrapper.__hash__c C s | j |j k S r= rB rD r r r rF � s z RoleTransitionWrapper.__lt__c C s$ | j |j ko"| j|jko"| j|jkS r= rI rD r r r rG � s
�
�z RoleTransitionWrapper.__eq__)
r r r r rH r rA rC rF rG r r r r r. � s r. N)� collectionsr �typingr Z policyrepr r r r r Z descriptorsr �
differencer r
Zobjclassr Zrolesr �typesr r r r r) r. r r r r �<module> s bBack to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg