| Server IP : 172.67.201.108 / Your IP : 216.73.217.39 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3.9/site-packages/sepolgen/__pycache__/ |
Upload File : |
a
ӌ�iP@ � @ s� d Z ddlZddlZddlmZ ddlmZ ddlmZ ddlmZ ddlm Z G d d
� d
�Z
d d � Z d
d� Z dd� Z
dd� Zdd� ZG dd� d�ZG dd� d�ZG dd� d�ZG dd � d �ZdS ) z7
Classes for representing and manipulating interfaces.
� N� )�access)� refpolicy)� objectmodel)�matching)�_c @ sH e Zd ZdZdd� Zdd� Zdd� Zeee�Zedd � d
�Z d d � Z
d
S )�Paramz;
Object representing a parameter for an interface.
c C s" d| _ tj| _t�� | _d| _d S )N� T)� _Param__namer �SRC_TYPE�type�IdSet� obj_classesZrequired��self� r �7/usr/lib/python3.9/site-packages/sepolgen/interfaces.py�__init__& s
zParam.__init__c C s t �|�std| ��|| _d S )NzName [%s] is not a param)r �
is_idparam�
ValueErrorr
)r �namer r r �set_name, s
zParam.set_namec C s | j S �N)r
r r r r �get_name1 s zParam.get_namec C s t | jdd � �S �Nr )�intr r r r r �<lambda>6 � zParam.<lambda>)�fgetc C s d| j tj| j d�| j�f S )Nz0<sepolgen.policygen.Param instance [%s, %s, %s]>� )r r � field_to_strr �joinr r r r r �__repr__8 s �zParam.__repr__N) �__name__�
__module__� __qualname__�__doc__r r r �propertyr �numr" r r r r r " s
r c C s� d}| |v r�|| }||j kr"d S |tjks6|tjkr�|j tjksN|j tjkr�d}|r`|jg}ng }t�|j|�D ]}|tj v rrd} q�qrtj|_ q�d}n t
� }| |_ ||_ |||j < |r�|j� |j� |S �Nr r )
r r r �TGT_TYPE� obj_class� itertools�chainr r Zimplicitly_typed_objectsr r �add)r r �av�params�ret�pZavobjs�objr r r �__param_insert> s6
�
�
r4 c C s~ d}d}t �| j�r.t| jtj| |�dkr.d}t �| j�rTt| jtj| |�dkrTd}t �| j�rzt| jtj | |�dkrzd}|S )aj Extract the parameters from an access vector.
Extract the parameters (in the form $N) from an access
vector, storing them as Param objects in a dictionary.
Some attempt is made at resolving conflicts with other
entries in the dict, but if an unresolvable conflict is
found it is reported to the caller.
The goal here is to figure out how interface parameters are
actually used in the interface - e.g., that $1 is a domain used as
a SRC_TYPE. In general an interface will look like this:
interface(`foo', `
allow $1 foo : file read;
')
This is simple to figure out - $1 is a SRC_TYPE. A few interfaces
are more complex, for example:
interface(`foo_trans',`
domain_auto_trans($1,fingerd_exec_t,fingerd_t)
allow $1 fingerd_t:fd use;
allow fingerd_t $1:fd use;
allow fingerd_t $1:fifo_file rw_file_perms;
allow fingerd_t $1:process sigchld;
')
Here the usage seems ambiguous, but it is not. $1 is still domain
and therefore should be returned as a SRC_TYPE.
Returns:
0 - success
1 - conflict found
r Fr )
r r �src_typer4 r r �tgt_typer* r+ � OBJ_CLASS)r/ r0 r1 Z found_srcr r r �av_extract_paramsj s $ r8 c C s" t �| j�r t| jtjd |�S d S r )r r �roler4 r ZROLE)r9 r0 r r r �role_extract_params� s r: c sl � fdd�}d}|| j tj�r"d}|| jtj�r4d}|| jtj�rFd}t�| j �rht
| j tj d � �rhd}|S )Nc s. d}| D ] }t �|�rt||d � �rd}q|S r) )r r r4 )�setr r1 �x�r0 r r �extract_from_set� s
z2type_rule_extract_params.<locals>.extract_from_setr r ) � src_typesr r � tgt_typesr* r r7 r r Z dest_typer4 Z DEST_TYPE)�ruler0 r> r1 r r= r �type_rule_extract_params� s rB c C s2 d}| j D ]"}t�|�r
t|tjd |�r
d}q
|S r) )�argsr r r4 r r )�ifcallr0 r1 �argr r r �ifcall_extract_params� s
rF c @ s e Zd Zdd� Zdd� ZdS )�AttributeVectorc C s d| _ t�� | _d S )Nr )r r �AccessVectorSetr r r r r � s zAttributeVector.__init__c C s | j �|� d S r )r �add_av�r r/ r r r rI � s zAttributeVector.add_avN)r# r$ r% r rI r r r r rG � s rG c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )� AttributeSetc C s
i | _ d S r )�
attributesr r r r r � s zAttributeSet.__init__c C s || j |j< d S r )rL r )r �attrr r r �add_attr� s zAttributeSet.add_attrc C sz dd� }d }|D ]V}|d d� }|d dkrD|r:| � |� ||�}q|r|�d�}t�|�}|�|� q|rv| � |� d S )Nc S sH | dd� � � }t|�dks(|d dkr4td| ��t� }|d |_|S )Nr ���� r Z Attributez#Syntax error Attribute statement %s)�split�len� SyntaxErrorrG r )�line�fields�ar r r �
parse_attr� s
z*AttributeSet.from_file.<locals>.parse_attrrO r �[�,)rN rQ r � AccessVectorrI )r �fdrW rV rT �lr/ r r r � from_file� s
zAttributeSet.from_fileN)r# r$ r% r rN r] r r r r rK � s rK c @ sF e Zd Zdi fdd�Zi fdd�Zdd� Zdd � Zd
d � Zd d
� ZdS )�InterfaceVectorNc C s6 d| _ d| _t�� | _i | _|r,| �||� d| _d S )NTr F)�enabledr r rH r0 �from_interface�expanded)r � interfacerL r r r r � s
zInterfaceVector.__init__c
C s" |j | _ |�� D ]>}|jtjjkr$qd|j v r0qt�|�}|D ]}| �|� q>q|r�|� � D ]n}|j
D ]b}||j
vrvqf|j
| }|jD ]@} t � | �}|j |j kr�|j
|_ |j|j kr�|j
|_| �|� q�qfq\|�� D ]}
t|
| j�r�q�|�� D ]} t| | j�r�q�|�� D ]} t| | j��r�qd S )NZ dontaudit)r ZavrulesZ rule_typer ZAVRuleZALLOWr Zavrule_to_access_vectorsrI ZtypeattributesrL �copyr5 r r6 Zrolesr: r0 Z typerulesrB �interface_callsrF )
r rb rL ZavruleZavsr/ Z
typeattributerM Zattr_vecrV r9 rA rD r r r r` � s>
z InterfaceVector.from_interfacec C s t || j�dkr| j�|� d S r )r8 r0 r rI rJ r r r rI 3 s zInterfaceVector.add_avc C s8 g }|� d| j � | jD ]}|� t|�� qd�|�S )Nz[InterfaceVector %s]�
)�appendr r �strr! )r �sr/ r r r � to_string9 s
zInterfaceVector.to_stringc C s | � � S r )r" r r r r �__str__@ s zInterfaceVector.__str__c C s d| j | jf S )Nz<InterfaceVector %s:%s>)r r_ r r r r r" C s zInterfaceVector.__repr__) r# r$ r% r r` rI ri rj r" r r r r r^ � s 4r^ c @ sx e Zd Zddd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Zi fdd�Z di fdd�Z
dd� Z dd� Z dd� Z
dd� ZdS )� InterfaceSetNc C s i | _ i | _g | _|| _d S r )�
interfaces� tgt_type_map� tgt_type_all�output)r ro r r r r H s zInterfaceSet.__init__c C s | j r| j �|d � d S )Nre )ro �write)r rg r r r �oN s zInterfaceSet.oc C s� t | j�� dd� d�D ]�}|�d|j � t |j�� dd� d�D ] }|�d|jtj|j f � q@|�d� t |j �
� �}|D ] }|�d� |�� |�d � q~qd S )
Nc S s | j S r �r �r< r r r r S r z&InterfaceSet.to_file.<locals>.<lambda>)�keyz[InterfaceVector %s c S s | j S r rr rs r r r r U r z%s:%s z]
rY re ) �sortedrl �valuesrp r r0 r r r r Zto_listr! )r r[ Ziv�paramZavlr/ r r r �to_fileR s
zInterfaceSet.to_filec C s� dd� }d }|D ]V}|d d� }|d dkrD|r:| � |� ||�}q|r|�d�}t�|�}|�|� q|rv| � |� | �� d S )Nc S s� | dd� � � }t|�dk s(|d dkr4td| ��t� }|d |_t|�dkrTd S |dd � D ]R}|� d�}t|�dkr�td| ��t� }|d |_tj|d |_||j |j< q`|S ) Nr rO rP r r^ z)Syntax error InterfaceVector statement %s�:z-Invalid param in InterfaceVector statement %s)
rQ rR rS r^ r r r Z str_to_fieldr r0 )rT rU �ifvZfieldr2 rw r r r � parse_ifv^ s
z)InterfaceSet.from_file.<locals>.parse_ifvrO r rX rY )�add_ifvrQ r rZ rI �index)r r[ r{ rz rT r\ r/ r r r r] ] s
zInterfaceSet.from_filec C s || j |j< d S r )rl r )r rz r r r r| � s zInterfaceSet.add_ifvc C sv | j �� D ]f}t� }|jD ]2}t�|j�r@| j�|� t� } qN|�|j� q|D ] }| j �
|g �}|�|� qRq
d S r ) rl rv r; r r r6 rn rf r. rm �
setdefault)r rz r@ r/ r r\ r r r r} � s
zInterfaceSet.indexc C s t ||�}| �|� d S r )r^ r| )r rb rL rz r r r r. � s
zInterfaceSet.addc C s< t �|�� |�� �D ]}| �||� q| �|� | �� d S r )r, r- rl � templatesr. �expand_ifcallsr} )r �headersro rL �ir r r � add_headers� s
zInterfaceSet.add_headersc C sZ t �|�rPt|dd � �}|t|j�kr,d S |j|d }t|t�rH|S |gS n|gS d S r )r r r rR rC �
isinstance�list)r �idrD r( rE r r r � map_param� s
zInterfaceSet.map_paramc
C s� | � |j|�}|d u rd S | � |j|�}|d u r4d S | � |j|�}|d u rNd S t�� }|jD ]&}| � ||�} | d u rxq\q\|�| � q\t|�dkr�d S |D ]*}
|D ] } |D ]} |j �
|
| | |� q�q�q�d S )Nr ) r� r5 r6 r+ r r
Zperms�updaterR r r. )
r rz r/ rD r? r@ r Z new_permsZpermr2 r5 r6 r+ r r r �
map_add_av� s*
zInterfaceSet.map_add_avc C s� |d fg}| j |j }d|_t|�dkr�|�d�\}}| j |j }||krl|jD ]}| �|||� qP|jrlq |�� D ]l} | j|jkr�| � t
d�� d S z|| j }
W n* t y� | � t
d| j �� Y qtY n0 |� |
| f� qtq d S )NTr rO z Found circular interface classz#Missing interface definition for %s)
rl r ra rR �popr r� rd Zifnamerq r �KeyErrorrf ) r rb �
if_by_name�stackrz ZcurZ
cur_ifcallZcur_ifvr/ rD Znewifr r r �do_expand_ifcalls� s*
z InterfaceSet.do_expand_ifcallsc C sR i }t �|�� |�� �D ]}|||j< qt �|�� |�� �D ]}| �||� q<d S r )r, r- rl r r r� )r r� r� r� rb r r r r� � s
zInterfaceSet.expand_ifcalls)N)r# r$ r% r rq rx r] r| r} r. r� r� r� r� r� r r r r rk G s
# $rk )r& rc r, r r r r r Z sepolgeni18nr r r4 r8 r: rB rF rG rK r^ rk r r r r �<module> s" ,4 Z