�
4��]c @ s� d d l m Z d d l Z d d l Z d d l Z d Z d d l Z d d l j Z d d l
j Z d d l m
Z
d d l Z d d l Z e j e d � e j e � y e j e d e d d �WnM e k
r� e j e d d �n* e k
rd d l Z e e j d
<n Xe j Z e j Z e j Z e j Z e j Z e j Z e j Z e j! Z! e j" Z" d Z# d Z$ d
Z% d Z& d Z' d Z( d Z) d Z d Z* d Z+ d d � Z- d d � Z. d � Z/ d � Z0 d � Z1 d � Z2 d � Z3 d � Z4 d � Z5 d � Z2 d � Z4 d � Z5 i Z6 e7 d! � e6 d" <e7 d# � e6 d$ <e7 d% � e6 d& <e7 d' � e6 d( <e7 d) � e6 d* <e7 d+ � e6 d, <e7 d- � e6 d. <e7 d/ � e6 d0 <i Z8 d" e8 d1 <d$ e8 d2 <d& e8 d3 <d( e8 d4 <d* e8 d5 <d, e8 d6 <d. e8 d7 <d0 e8 d8 <d9 � Z9 d: � Z: d; � Z; d< � Z< d d l= Z= d d l> Z> d d l Z d= � Z? g d> � Z@ g d? � ZA d@ � ZB d aC e jD � dA � ZE d aF e jD � dB � ZG d aH e jD � dC � ZI d aJ e jD � dD � ZK dE � ZL dF � ZM dG � ZN dH � ZO dI � ZP dJ � ZQ dK � ZR dL � ZS dM � ZT dN � ZU dO � ZV dP dQ � ZW dR � ZX g aY dS � ZZ d a[ dT � Z\ d a] dU � Z^ d a_ dV � Z` dW � Za d ab d ac dX � Zd dY � Ze d af dZ � Zg d[ � Zh d ai d\ � Zj d ak d] � Zl d am d^ � Zn d ao d_ � Zp d` � Zq d ar da � Zs d at db � Zu d av dc � Zw dd � Zx de � Zy i Zz df ez dg <dh ez di <dj ez dk <dj ez dl <dj ez dm <dn ez do <dp ez dq <dr ez ds <dt ez du <dt ez dv <dw ez dx <dw ez dy <dz ez d{ <d| ez d} <ey d~ � Z{ d a| d � Z} d� � Z d� � Z~ y eW � Z e e � Wn. e� k
r@Z� e j� � d k rAe� � qAn Xd� � Z� d� � Z� d� � Z� d a� d� � Z� d a� d d l� Z� d� d� � Z� d� d� � Z� d� � Z� d� � Z� d� � Z� d� � Z� d S(� i ( t policyi����Nt policycoreutils( t utils /usr/share/localet unicodet codesets utf-8t _t allowt
auditallowt
neverallowt dontauditt sourcet targett permlistt classt
transitiont
role_allowc C s t j | | � } | S( N( t _policyt info( t setypet namet dict_list( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR 5 s c C s� | r | } n i } t t t t t t g } x7 | D]/ } | | k rY t d | � � n t | | <q4 Wg } t | k r� | t } d j | t � | t <n t
j | � } | r� t | � d k r� g | D] } t
| | � r� | ^ q� } n | S( Ns Type has to be in %st ,i ( t ALLOWt
AUDITALLOWt
NEVERALLOWt DONTAUDITt
TRANSITIONt
ROLE_ALLOWt
ValueErrort Truet PERMSt joinR t searcht lent _dict_has_perms( t typesR t seinfot valid_typesR t permsR t x( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR : s
+c
C sf i } g } | j d � rL t t g i | t 6| t 6| t 6| t 6� } n^ t t g i | t 6| t 6| t 6� } x4 | D], } | d | k rz g } | j | � qz qz Wy� x� g g | D]/ } t | � j | t � r� | d r� | ^ q� D] } | ^ q� D]K } | j
i | d d 6| d d 6� | | k r� | j | � i } q� q� WWn t k
ra| SX| S( Nt _tR t booleanR
( t endswithR R t SOURCEt TARGETt CLASSR t appendt sett issubsett updatet KeyError(
t srct destt tclasst permt tdictt tlistt allowst iR' t y( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_conditionalsQ s$ 1'
V#
c
C s� t g | D] } | d d d r
| ^ q
� d k } t d � | d j t g | D]. } d | d d d | d d d f ^ qS � � f S( NR) i i s -- Allowed %s [ %s ]s || s %s=%d( R! R R R/ ( t condR' t enabled( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_conditionals_format_texti s 7c C s t t | � d d S( Ni R# ( R t ATTRIBUTE( t attribute( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_types_from_attributen s c C s t t | � d d S( Ni t
attributes( R t TYPE( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_attributes_from_typer s c C s2 y t t | � d d SWn t k
r- d SXd S( Ni R ( R RD t RuntimeErrort None( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_real_type_namex s
c C s d t | � k r t St Sd S( Nt exec_type( RE R t False( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt file_type_is_executable s c C s d t | � k r t St Sd S( Nt
entry_type( RE R RJ ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt file_type_is_entrypoint� s c C s t t | � d d S( Ni RC ( R RD ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRE � s c C s d t | � k r t St Sd S( NRI ( RE R RJ ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRK � s c C s d t | � k r t St Sd S( NRL ( RE R RJ ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRM � s s all filest as regular filet ft directoryt ds character devicet cs block devicet bs socket filet ss
symbolic linkt ls
named pipet pt s --s -ds -cs -bs -ss -ls -pc C s� g } d } y1 t j | d t j d t �} | j d � } Wn> t j k
r} } d d l m } | � j � j d � } n Xx4 | D], } t | � r� | j
| j � d � q� q� W| S( Ns semodule --list=full 2>/dev/nullt stderrt shells
i ( t SELinuxDBus( t
subprocesst check_outputt STDOUTR t splitt CalledProcessErrort sedbusRZ t
semodule_listR! R. ( t all_modulest cmdt outputRU t eRZ R: ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_modules� s
c C s� d d d g } g } g } x� | D]� } yq t | d � } | j � } | j � | d j d � d } x | D] } | j | � qn W| j | � g } Wq" g } q" Xq" W| S( Ns$ /usr/share/selinux/targeted/base.lsts, /usr/share/selinux/targeted/modules-base.lsts/ /usr/share/selinux/targeted/modules-contrib.lstt ri t i����( t opent readlinest closeR^ R. t extend( t mod_lst_pathRb t mod_tempR: t fdt modulest m( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_modules_from_mod_lst� s
c C s� g } i } x6 t � D]+ } | j t | � � r | j | � q q Wt � } xT | D]L } y( | | d t | | d f | | <WqU t k
r� g | | <qU XqU W| S( Nt regext ftype( t get_all_file_typest
startswitht gen_short_nameR. t
get_fcdictt
file_type_strR2 ( R t flistt mpathsRO t fcdict( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_types� s
(
c C s� t � } t � } g } i } t t g i | d 6d d g d 6d d 6� } | d k si t | � d k rm | St � } d d g } x� | D]� } | d
| k r� q� n d | k r� | d s� q� q� n | d
j d � r'| d
| k r� q� n | d
| k r^| d
| k r$| j | d
� q$q^q� x4 t | d
� D]" } | | k r8| j | � q8q8Wq� WxT | D]L }
y( | |
d
t
| |
d f | |
<Wqit k
r�g | |
<qiXqiW| S( NR
Ri t writeR t fileR
i t proc_typet sysctl_typeR R> R( Rs Rt ( t get_all_attributesRu R R RG R! Rx R* R. RB Ry R2 ( R t all_attributest
file_typest
all_writesR{ R R| RC R: t tRO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_writable_files� s< -
(
c C s t j j | � r | g Sy t j d | � } Wn d | f GHg SX| } | j d � rl | d d } n t j j | � } y! | d d k r� | d 7} n Wn t k
r� d GHn XyM t j d | � } t t | j
g t j | � D] } | | ^ q� � � SWn g SXd S( Ns %s$s bad reg:s (/.*)?i����t /i����s try failed got an IndexError( t ost patht existst ret compileR* t dirnamet
IndexErrort listt filtert matcht listdir( t regt patRV R� R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt find_file s,
:c C s~ g } t | � } xe t | j � � D]Q } | j d � r% | | k r% x- | | D] } x t | � D] } | SWqQ Wq% q% Wd S( Nt _exec_t( t get_entrypointsR� t keysR* R� RG ( t domaint exclude_listt all_entrypointst executable_filest exeR� RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt find_all_files/ s c C st t � } yS | j d � r[ | | k r[ x1 | | d D] } x t | � D] } | SWq6 Wn Wn t k
ro n Xd S( NR� Rs ( Rx R* R� R2 RG ( R� R� R| R� RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt find_entrypoint_path= s
c C s� ye t | d � �P } | j � } x: | D]2 } | j � } i | d d 6| d 6| | d <q( WWd QXWn+ t k
r� } | j t j k r� � q� n X| S( NRg i t equivt modifyi ( Ri Rj R^ t IOErrort errnot ENOENT( t edictt fc_pathR� Ro t fcRe RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt read_file_equivI s
.
c C s- t r
t Si a t t | d d t �a t S( Ns .subsR� ( t file_equiv_modifiedR� R ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_equiv_modifiedX s
c C s3 t r
t St | � a t t | d d t �a t S( Ns
.subs_distR� ( t
file_equivR� R� RJ ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_equivc s
c C s� t r
t Sg a y, t | d d � � } | j � } Wd QXWn, t k
rj } | j t j k rf � n g SXx� | D]� } | j � } t | � d k r� qr n yD t | � d k r� t | d } n d } t j | d | f � Wqr t
k
r� qr Xqr Wt S( Ns .localRg i i i RN ( t local_filesRi Rj R� R� R� R^ R! t trans_file_type_strR. R2 ( R� Ro R� Re R: t recRt ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_local_file_pathsn s,
c C s[ t r
t St | d � } | j � } | j � y0 t | d d � � } | | j � 7} Wd QXWn+ t k
r� } | j t j k r� � q� n Xi a y0 t | d d � � } | | j � 7} Wd QXWn+ t k
r� } | j t j k r� � q� n Xx� | D]� } | j � } y� t | � d k r0t | d } n d } | d j d � d } | t k rut | d j
| d
� n i | d
g d 6| d 6t | <Wq� q� Xq� Wi d g d 6t d
<i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <i d g d 6t d <t S( NRg s .homedirss .locali i RN i����t :Rs i Rt s
all log filest logfiles all user tmp filest
user_tmp_types all user home filest user_home_types all virtual image filest virt_image_typesB all files on file systems which do not support extended attributest noxattrfss) all sandbox content in tmpfs file systemst sandbox_tmpfs_types& all user content in tmpfs file systemst user_tmpfs_types all files on the systemt file_typesA use this label for random content that will be shared using sambat
samba_share_t( R| Ri Rj Rk R� R� R� R^ R! R� R. ( R� Ro R� Re R: R� Rt R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRx � sP
#c C sV y> g t t g i d d 6� D] } | d | k r | ^ q SWn t k
rQ n Xd S( Nt processR
t transtype( R R t TypeErrorRG ( R R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_transitions_into� s
>
c C s: y" t t g i | d 6d d 6� SWn t k
r5 n Xd S( NR
R� R
( R R R� RG ( R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_transitions� s
"
c C sV y> g t t g i | d 6� D] } | d d k r | ^ q SWn t k
rQ n Xd S( NR
R
R� ( R R R� RG ( R R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_file_transitions� s
>
c C s� g } t t g i | d 6� } x\ | D]T } d | k r& y5 x. | d D]" } | | k rF | j | � qF qF WWqz qz Xq& q& W| S( NR
R) ( R R R. ( R R) t boollistR RV RS ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_boolean_rules� s
c C s
t d � S( NRL ( RB ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_entrypoints� s c C s� g } yh g g t t g i | d 6d g d 6d d 6� D] } | d | k r7 | ^ q7 D] } | d ^ qW } Wn t k
r� n X| S( NR
t
entrypointR R R
R ( R R R� ( R t entrypointsR' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_entrypoint_types� s h
c C s� t j | � d j d � d } yi g t t g i d d 6d d 6� D] } | d | k rD | ^ qD } t | � d k r| d S| d d
SWn t k
r� n Xd S( Ni R� i t init_tR
R� R
R i R� ( t selinuxt
getfileconR^ R R R! RG R� ( R� R� R' R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_init_transtype� s C
c C s� yi g t t g i d d 6d d 6� D] } | d | k r$ | ^ q$ } t | � d k r\ d S| d d SWn t k
r| n Xd S( NR� R
R� R
R� i R ( R R R! RG R� ( R� R' R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_init_entrypoint� s C
c C sb yJ g t t g i d d 6| d 6d d 6� D] } | d ^ q+ } | d SWn t k
r] n Xd S( NR� R
R R� R
R� i ( R R R� RG ( R� R' R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_init_entrypoint_target s >
c C sp t � } i } xZ t | � D]L } y( | | d t | | d f | | <Wq t k
rg g | | <q Xq W| S( NRs Rt ( Rx R� Ry R2 ( R R| R{ RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR� s (
c C sI | j d d � d } y t | � | f SWn t k
rD d | f SXd S( Ns /policy.i i ( t rsplitt intR ( t policy_patht extension( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt policy_sortkey s
R� c C s_ y? | t j � } t j d | � } | j d t � | d SWn n Xt t d � � � d S( Ns %s.*t keyi����s No SELinux Policy installed( R� t selinux_binary_policy_patht globt sortR� R R ( t rootR� t policies( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_installed_policy% s c C sA t j d t j � | f � } | s) d S| j d t � | d S( s? Get the path to the policy file located in the given store names %s%s/policy/policy.*R� i����N( R� R� t selinux_pathRG R� R� ( t storeR� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_store_policy0 s c C s� t t � d k r t St � t j � } yH t | � } t j � } | j | � t | j j
� � a | j � Wn( t j
j d | � t j d � n Xt j � t S( Ni s# could not open interface info [%s]
i ( R! t methodst gen_interfacest defaultst interface_infoRi t
interfacest InterfaceSett from_fileR� R� Rk t sysRX R~ t exitR� ( t fnRo t ifs( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_methods> s
c C s6 t d k r2 g t t � D] } | d ^ q a n t S( NR ( t all_typesRG R RD ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_typesU s &c C s* t d k r& t t d � d d a n t S( Nt
userdomaini R# ( t
user_typesRG R R@ ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_user_types^ s c C s� t r
t Si a x~ t t g � D]m } | d d k s | d d k rL q n | d t k rx t | d j | d � q | d g t | d <q Wt S( NR
t system_rR ( t role_allowsR R R. ( Rg ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_role_allowsg s c C s� d d l } g } t � } | j � x{ | D]s } | j d | � } t | � d k r, t | j d | d � � d k r� | d | k r� | j | d � q� q, q, W| S( Ni����s (.*)%ss _exec_t$i s _initrc$s (.*)_exec_t$s (.*)_initrc$( R� R� R� t findallR! R. ( R� t all_domainsR# R: Rq ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_entrypoint_domainsw s
2c C s� t j � } t j � } t } y, t j | � j t j | � j k rI d SWn t k
r] n Xt j � d k r� t t
d � � � n t j d d t j
d t �GHd S( Ni sE You must regenerate interface info by running /usr/bin/sepolgen-ifgens /usr/bin/sepolgen-ifgenRX RY ( R� R� t headersRJ R� t statt st_mtimet OSErrort getuidR R R[ R\ R] R ( t ifileR� t rebuild( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR� � s $
c C s> t r t t f Si a i a xt t � D]} | d | d k rV t | d � } n$ d t | d � t | d � f } | d | d f t k r� t | d | d f j | � n | g t | d | d f <d | k r
| d | d f t | d | d | d f <q) | d t | d | d | d f <q) Wt t f S( Nt lowt highs %s-%st typet protocolt range( t portrecst
portrecsbynumR t PORTt strR. ( R: t port( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
gen_port_dict� s
$" 0'c C s$ t s t t d � d d a n t S( NR� i R# ( R� R R@ ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_domains� s c C s< t | d � t | d � k t | d � t | d � k S( Ni ( R� ( R' R; ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt mls_cmp� s c C s[ t r
t St t � } | j � } | j d t j t � � d | d | | d f a t S( NR� s %s-%si i����( t mls_ranget mls_rangerolesR t SENSR� R� R t
cmp_to_keyR ( t
range_dictR� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_mls_range� s c C sH t r
t Sg t t � D] } | d ^ q a t j d � t j � t S( NR t object_r( t rolesR t ROLEt removeR� ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_roles� s #
c C sJ t sF t t � a x1 t D]& } d j | d j d � � | d <q Wn t S( NRW R� Rh ( t selinux_user_listR t USERR R^ ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_selinux_users� s
'c C s� t r
t St t j � d � } | j � } | j � g a x� | j d � D] } | j � } t | � d k sK | j d � r� qK n | j d � } t j
i | d d 6| d d 6d j | d � d
6� qK Wt S( NRg s
i t #R� R i t seuseri t mls( t login_mappingsRi R� t selinux_usersconf_patht readRk R^ t stripR! Rv R. R ( Ro t bufRS R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_login_mappings� s
!;c C s. g t � D] } | d ^ q
} | j � | S( NR ( R R� ( R' t users( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_users� s
c C s/ t r
t St t d � d d a t j � t S( NR� i R# ( R� R R@ R� ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRu � s
c C s/ t r
t St t d � d d a t j � t S( Nt port_typei R# ( t
port_typesR R@ R� ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_port_types
s
c C s t s t t � a n t S( N( t boolsR t BOOLEAN( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
get_all_bools s c C s! d j | t | � j d � � S( NRh R ( R R! R^ ( RO t trim( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt prettyprint s c C s | S( N( ( RO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt markup s t etc_ts /etct tmp_ts /tmpt unit_file_ts /usr/lib/systemd/systems /lib/systemd/systems /etc/systemd/systemt var_cache_ts
/var/cachet var_lib_ts /var/libt log_ts /var/logt var_run_ts /var/runs /runt
var_lock_ts /run/locks
/var/run/lockt var_spool_ts
/var/spoolt content_ts /var/wwwc C sC d | | � } | j d � r4 | d t | d � S| j d � rX | d t | d � S| j d � r| | d t | d � S| j d � r� | d t | d � S| j d
� r� | d t | d � S| j d � r� | d t | d � S| j d
� s| j d � r| d S| j d � r%| d S| j d � rI| d t | d � S| j d � rm| d t | d � S| j d � r�| d t | d � S| j d � r�| d t | d � S| j d � r�| d | t d � S| j d � r�| d t | d � S| j d � r#| d t | d � S| j d � rG| d t | d � S| j d � rk| d t | d � S| j d! � r�| d" t | d! � S| j d# � r�| d$ t | d% � S| j d& � r�| d' t | d& � S| j d( � r�| d) t | d( � S| j d* � r | d+ t | d( � S| j d, � rC| d$ t | d, � S| j d- � rg| d. t | d- � S| j d/ � r�| d0 t | d/ � S| j d1 � r�| d2 t | d1 � S| j d3 � r�| d4 t | d3 � S| j d5 � r�| d2 t | d5 � S| j d6 � r| d2 t | d6 � S| j d7 � r?| d2 t | d7 � S| j d6 � rc| d8 t | d6 � S| j d9 � r�| d: t | d9 � S| j d; � r�| d< t | d9 � S| j d= � r�| d> t | d= � S| j d? � r�| d@ t | d? � S| j dA � r
| dB S| j dC � r.| dD t | dC � S| dE t | dF � S(G Ns+ Set files with the %s type, if you want to t
_var_run_ts8 store the %s files under the /run or /var/run directory.t _pid_ts, store the %s files under the /run directory.t
_var_lib_ts0 store the %s files under the /var/lib directory.t _var_ts, store the %s files under the /var directory.t _var_spool_ts2 store the %s files under the /var/spool directory.t _spool_tt _cache_tt _var_cache_ts/ store the files under the /var/cache directory.t _keytab_ts) treat the files as kerberos keytab files.t _lock_tsE treat the files as %s lock data, stored under the /var/lock directoryt _log_tsK treat the data as %s log data, usually stored under the /var/log directory.t _config_tsR treat the files as %s configuration data, usually stored under the /etc directory.t _conf_tR� s, transition an executable to the %s_t domain.t _cgi_content_ts" treat the files as %s cgi content.t
_rw_content_ts) treat the files as %s read/write content.t _rw_tt _write_tt _db_ts' treat the files as %s database content.t
_ra_content_ts* treat the files as %s read/append content.t _ra_conten_tt _cert_ts' treat the files as %s certificate data.t _key_ts treat the files as %s key data.t _secret_ts" treat the files as %s secret data.t _ra_tt _ro_ts( treat the files as %s read/only content.t
_modules_ts treat the files as %s modules.t
_content_ts treat the files as %s content.t _state_ts! treat the files as %s state data.t _files_tt _file_tt _data_ts treat the data as %s content.t _tmp_ts1 store %s temporary files in the /tmp directories.t _etc_ts' store %s files in the /etc directories.t _home_ts+ store %s files in the users home directory.t _tmpfs_ts& store %s files on a tmpfs file system.t _unit_file_ts# treat files as a systemd unit file.t _htaccess_ts# treat the file as a %s access file.s treat the files as %s data.R( ( R* R( R! ( RO R) t txt( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_description5 s� c C s0 t s, g t t � D] } | d ^ q a n t S( NR ( R� R R@ ( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR� � s &c C sk d a d a d a d a d a d a d a d a d a y t
j | � Wn t t
d � | � � n Xd S( Ns Failed to read %s policy file( RG R� R� R$ R� R� R R R� R" R R R R ( t policy_file( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR � s
c C s$ t | � } | s d St | � d S( N( R� RG R ( R� R[ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt load_store_policy� s c C s) x" | D] } | | t k r t Sq Wt S( N( R RJ R ( t dictR& R6 ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyR" � s
c C s� t � } | j d � r% | d } n | } t | d � | k rT t d | � � n | d d k ru | d d } n
| d } | | f S( NR( i����s domain %s_t does not existi����RQ R ( R R* RH R ( R R� t
domainnamet
short_name( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyRw � s
c C s� g } g } t | � \ } } xig g t t g i | d 6� D] } d | k r> | ^ q> D] } | d ^ qZ D]} x| D]} t | t � s� q{ n y t j | d � } Wn t k
r� | d } n X| d j | � s� | d j | � r;| d | f | k r�| d | f | k r�| j | d | f � q�q{ | d | f | k r{ | d | f | k r{ | j | d | f � q{ q{ Wqn W| | f S( NR
R) i i (
Rw R R t
isinstancet tupleR� t security_get_boolean_activeR� Rv R. ( R R$ t domainboolsR^ R_ R' R: RS R> ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_bools� s" V
&- -"c C sK t sG t j � d a t j rG g t D] } t j | � ^ q& a qG n t S( Ni ( t booleansR� t security_get_boolean_namesR t PY3t decode_input( R' ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_all_booleans� s
(s# /usr/share/selinux/devel/policy.xmlc C sc y) t j | � } | j � } | j � Wn3 t k
r^ t | � } | j � } | j � n X| S( N( t gzipRi R Rk R� ( R� Ro R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
policy_xml� s
c
C s� t r
t Sd d l } d d l } i a yE| j j j t | � � } x�| j d � D]�} x| j d � D]} x~ | j d � D]m } | j d � j d � j j
d � } | j d d | � } | j d � | j d
� | f t | j d � <q� Wx~ | j d � D]m } | j d � j d � j j
d � } | j d d | � } | j d � | j d
� | f t | j d � <qWql Wxu | j d � D]d } | j d � j d � j j
d � } | j d d | � } d | j d
� | f t | j d � <q�WqV Wxu | j d � D]d } | j d � j d � j j
d � } | j d d | � } d | j d
� | f t | j d � <qWWn t
k
r�} n Xt S(
Ni����t layert modulet tunablet descRV s
Rh R t dftvalt boolt global( t
booleans_dictt xml.etree.ElementTreeR� t etreet ElementTreet
fromstringRk R� t findt textR t subt getR� (
R� t xmlR� t treeRU Rq RS Ro R: Re ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt
gen_bool_dict s8 $2$6$-$-c C s5 t � } | | k r' t | | d � St d � Sd S( Ni t unknown( R~ R ( R) Rs ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt boolean_category' s c C sY t � } | | k r' t | | d � S| j d � } d | d d j | d � f Sd S( Ni R s Allow %s to %si Rh i ( R~ R R^ R ( R) Rs Ro ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt boolean_desc/ s
c C sO d } y+ t d � � } | j � j � } Wd QXWn t k
rJ d } n X| S( NRW s /etc/system-releaset Misc( Ri t readlinet rstripR� ( t system_releaseRO ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt get_os_version8 s
c C sv d a d a d a d a d a d a d a d a d a d a
d a
d a d a d a
d a d a d a d a d a d S( N( RG R� R� R� Re Rs R$ R| R� R� R� R R R" R� R R� R R ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt reinitC s& (� RW R R R� R� R� t PROGNAMEt gettextt sepolgen.defaultsR� t sepolgen.interfacesR� t sepolgenR R� R[ t bindtextdomaint
textdomaint installR R� R� t builtinsR t __dict__RD R R@ R R R% R- t TCLASSR
t CATSR R R R R+ R, R R R RG R R R< R? RB RE RH RK RM Ry R R� Rf Rr R} R� R� R� R� R� R� R� R� t selinux_file_context_pathR� R� R� R� R� R| Rx R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R R R� R R� R R R R
R R R R R R R R� Ru R" R# R$ R& R( R) t DEFAULT_DIRSRZ R� R� R\ R[ R Re t is_selinux_enabledR" Rw Rd Re Ri Rs Rj Rk R~ R� R� R� R� ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/__init__.pyt <module> s^
$ 1
\