| Server IP : 172.67.201.108 / Your IP : 216.73.217.93 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib64/python3.9/site-packages/setools/checker/__pycache__/ |
Upload File : |
a
��c� � @ s� U d dl Z d dlZd dlmZmZ d dlmZmZmZm Z ddl
m Z ddl m
Z
ddlmZmZmZmZ i Zeeef ed < d
gZG d d � d e�ZG d
d
� d
ed�ZdS )� N)�ABCMeta�abstractmethod)�Dict� FrozenSet�List�Mapping� )�InvalidCheckOption)�
SELinuxPolicy� )�CHECK_TYPE_KEY�CHECK_DESC_KEY�
CHECK_DISABLE�GLOBAL_CONFIG_KEYS�CHECKER_REGISTRY�
CheckerModulec s e Zd ZdZ� fdd�Z� ZS )�
CheckRegistryzQChecker module registry metaclass. This registers modules in the check registry.c s� |� d�}|� d�}|dkrnt|t�s4td�|���t|t�sLtd�|���|tv rnt| j}td�||���t� � | |||�}|r�|t|< |S )N�
check_type� check_configr z,Checker module {} does not set a check_type.z4Checker module {} does not set a valid check_config.z4Checker module {} conflicts with registered check {})
�get�
isinstance�str� TypeError�format� frozensetr �__name__�super�__new__)�clsZclsnameZ superclassesZ
attributedictr r Zexisting_check_moduleZclassdef�� __class__� �C/usr/lib64/python3.9/site-packages/setools/checker/checkermodule.pyr s$
�
�zCheckRegistry.__new__)r �
__module__� __qualname__�__doc__r �
__classcell__r! r! r r" r s r c @ s� e Zd ZU dZeed< ee ed< dZeed< e j
Z e ed< e ee
eef dd�d d
�Zedd �d d
�Zedd �dd�Zedd �dd�Zeed�dd��ZdS )r z/Abstract base class for policy checker modules.r r F� log_passing�policyN)r( � checkname�config�returnc C sb || _ || _t�t�| _t| jB }|D ] }||vr&td� | j|���q&|�
t �| _ |�
t
�| _d S )Nz{}: Invalid option: {})r( r) �loggingZ getLoggerr �logr r r r r r
Zdescr Zdisable)�selfr( r) r* Z
valid_options�kr! r! r" �__init__J s
� zCheckerModule.__init__)�msgr+ c C s( | j �|� | j �d� | j�|� dS )z Output an informational message.�
N)�output�writer- �debug�r. r1 r! r! r" �log_info] s zCheckerModule.log_infoc C s. | j r| j�d�|�� | j�d�|�� dS )z�
Log findings that pass the check. By default these messages are
surpressed unless self.log_passing is True.
z P * {}
zP * {}N)r' r3 r4 r r- r5 r6 r! r! r" �log_okc s zCheckerModule.log_okc C s4 | j �d�| jrdnd|�� | j�d�|�� dS )z!Log findings that fail the check.z
{} * {}
�F� zF * {}N)r3 r4 r r' r- r5 r6 r! r! r" �log_faill s zCheckerModule.log_fail)r+ c C s dS )z�
Run the configured check on the policy.
Return: List of failed items in the check. If the check passes, list is empty.
Nr! )r. r! r! r" �runq s zCheckerModule.run)r r# r$ r% r �__annotations__r r' �bool�sys�stdoutr3 r
r r0 r7 r8 r; r r r< r! r! r! r" r 3 s
)� metaclass)r? r, �abcr r �typingr r r r � exceptionr Z policyrepr
Z
globalkeysr r
r r r r �typer= �__all__r r r! r! r! r" �<module> s