| Server IP : 162.144.4.212 / Your IP : 216.73.216.108 Web Server : Apache System : Linux gator2125.hostgator.com 5.14.0-162.23.1.9991722448259.nf.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 31 18:11:45 UTC 2024 x86_64 User : cozeellc ( 2980) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3.9/site-packages/sepolgen/__pycache__/ |
Upload File : |
a
B�iw � @ sb d Z g d�ZdZdZdZeeB Zeeeed�Zedededed iZG d
d � d �ZG d d
� d
�Z dS )z�
This module provides knowledge object classes and permissions. It should
be used to keep this knowledge from leaking into the more generic parts of
the policy generation.
) Zsocket�fdZprocess�fileZlnk_fileZ fifo_fileZdbusZ
capabilityZunix_stream_socket� � � )�n�r�w�br r r r c @ s e Zd ZdZdd� Zdd� ZdS )�PermMapa A mapping between a permission and its information flow properties.
PermMap represents the information flow properties of a single permission
including the direction (read, write, etc.) and an abstract representation
of the bandwidth of the flow (weight).
c C s || _ || _|| _d S �N)�perm�dir�weight)�selfr r
r � r �8/usr/lib/python3.9/site-packages/sepolgen/objectmodel.py�__init__T s zPermMap.__init__c C s d| j t| j | jf S )Nz'<sepolgen.objectmodel.PermMap %s %s %d>)r �
dir_to_strr
r �r r r r �__repr__Y s �zPermMap.__repr__N)�__name__�
__module__� __qualname__�__doc__r r r r r r r
M s r
c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dS )� PermMappingsz�The information flow properties of a set of object classes and permissions.
PermMappings maps one or more classes and permissions to their PermMap objects
describing their information flow characteristics.
c C s i | _ d| _t| _d S )N� )�classes�default_weight� FLOW_BOTH� default_dirr r r r r d s zPermMappings.__init__c C s� d}|D ]�}|� � }t|�dkst|�dks|d dkr:q|d dkrv|d }|| jv r`td��i | j|< | j| }qt|�dkr�td��|du r�td ��t|d t|d t|d
��}|||j< qdS ) zsRead the permission mappings from a file. This reads the format used
by Apol in the setools suite.
Nr r �#�classzduplicate class in perm map� z!error in object class permissionszpermission outside of classr )�split�lenr �
ValueErrorr
�
str_to_dir�intr )r r Zcur�line�fields�c�pmr r r � from_filei s" $
zPermMappings.from_filec C s | j | | S )z�Get the permission map for the object permission.
Returns:
PermMap representing the permission
Raises:
KeyError if the object or permission is not defined
)r )r �objr r r r �get� s zPermMappings.getc C s: z| j | | }W n" ty4 t|| j| j� Y S 0 |S )a Get the permission map for the object permission or a default.
getdefault is the same as get except that a default PermMap is
returned if the object class or permission is not defined. The
default is FLOW_BOTH with a weight of 5.
)r �KeyErrorr
r r )r r- r r+ r r r �
getdefault� s
zPermMappings.getdefaultc C s( t }|D ]}| �||�}||jB }q|S r )� FLOW_NONEr0 r
)r r- �permsr
r r+ r r r �getdefault_direction� s
z!PermMappings.getdefault_directionc C s( d}|D ]}| � ||�}||j7 }q|S )Nr )r0 r )r r- r2 �totalr r+ r r r �getdefault_distance� s
z PermMappings.getdefault_distanceN)
r r r r r r, r. r0 r3 r5 r r r r r ^ s
r N)
r Zimplicitly_typed_objectsr1 Z FLOW_READZ
FLOW_WRITEr r& r r
r r r r r �<module> s