| Server IP : 162.144.4.212 / Your IP : 216.73.216.108 Web Server : Apache System : Linux gator2125.hostgator.com 5.14.0-162.23.1.9991722448259.nf.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jul 31 18:11:45 UTC 2024 x86_64 User : cozeellc ( 2980) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /usr/lib64/python3.9/site-packages/setools/checker/__pycache__/ |
Upload File : |
a
q�qe� � @ s� d dl Z d dlmZmZ ddlmZ ddlmZ ddlm Z ddl
m Z dd l m
Z
mZmZ d
Zd Zd Zd
ZdZdZdZdZG dd� de �ZdS )� N)�List�Union� )�InvalidCheckValue)� AnyTERule)� TERuleQuery� )�
CheckerModule)�ConfigDescriptor�ConfigSetDescriptor� ConfigPermissionSetDescriptor�source�target�tclass�perms�
exempt_source�
exempt_target�
expect_source�
expect_targetc s� e Zd ZdZdZeeeee e
e e e
f�Zed�Zed�Zedddd�Ze� Zedddd�Zedddd�Zedddd�Zedddd�Zdd �� fd
d � Zed �d d
�Z � Z S )�AssertTEzKChecker module for asserting a type enforcement allow rule exists (or not).Z assert_teZlookup_type_or_attrZ lookup_classTF)�strict�expandN)�returnc s t � �|||� t�t�| _|�t�| _|�t �| _
|�t �| _ |�t
�| _|�t�| _|�t�| _|�t�| _|�t�| _t| j| j
| j | jf�s�td��| j| j@ }|r�| j�d�d�dd� |D ���� | j| j@ }|�r| j�d�d�dd� |D ���� d S )NzEAt least one of source, target, tclass, or perms options must be set.z.Overlap in expect_source and exempt_source: {}z, c s s | ] }|j V qd S �N��name��.0�i� r �>/usr/lib64/python3.9/site-packages/setools/checker/assertte.py� <genexpr>A � z$AssertTE.__init__.<locals>.<genexpr>z.Overlap in expect_target and exempt_target: {}c s s | ] }|j V qd S r r r r r r r! F r" ) �super�__init__�loggingZ getLogger�__name__�log�get�
SOURCE_OPTr
�
TARGET_OPTr � CLASS_OPTr � PERMS_OPTr �EXEMPT_SRC_OPTr �EXEMPT_TGT_OPTr �EXPECT_SRC_OPTr �EXPECT_TGT_OPTr �anyr �info�format�join)�self�policyZ checknameZconfigZ source_exempt_expect_overlapZ target_exempt_expect_overlap�� __class__r r r$ , s0 �
�
�zAssertTE.__init__c
C sP t | j| j| j| jf�s J d��| j�d� t| j| j| j| j| jdd�}t | j
�}t | j �}g }t |�
� �D ]x}t |j�� �}t |j�� �}||8 }||8 }|| j
| j r�|| j | j r�| �t|�� |�|� qn| �t|�� qn|D ]"}d�|�} | �| � |�| � q�|D ]$}d�|�} | �| � |�| � �q| j�d�|�� |S )Nz'AssertTe no options set, this is a bug.z!Checking TE allow rule assertion.)Zallow)r
r r r Zruletypez)Expected rule with source "{}" not found.z)Expected rule with target "{}" not found.z
{} failure(s))r1 r
r r r r' r2 r r6 �setr r �sorted�resultsr r r Zlog_fail�str�appendZlog_okr3 �debug)
r5 �queryZunseen_sourcesZunseen_targetsZfailuresZruleZsrcsZtgts�itemZfailurer r r �runH sF � �
�
z AssertTE.run) r& �
__module__� __qualname__�__doc__Z
check_type� frozensetr) r* r+ r, r- r. r/ r0 Z check_configr
r
r r r r r r r r r r$ r rA �
__classcell__r r r7 r r s � r )r% �typingr r � exceptionr Z policyrepr Z terulequeryr Z
checkermoduler Z descriptorsr
r r r) r* r+ r, r- r. r/ r0 r r r r r �<module> s