| Current File : //lib/python3.9/site-packages/sepolgen/__pycache__/objectmodel.cpython-39.pyc |
a
z
fw � @ sb d Z g d�ZdZdZdZeeB Zeeeed�Zedededed iZG d
d � d �ZG d d
� d
�Z dS )z�
This module provides knowledge object classes and permissions. It should
be used to keep this knowledge from leaking into the more generic parts of
the policy generation.
) Zsocket�fdZprocess�fileZlnk_fileZ fifo_fileZdbusZ
capabilityZunix_stream_socket� � � )�n�r�w�br r r r c @ s e Zd ZdZdd� Zdd� ZdS )�PermMapa A mapping between a permission and its information flow properties.
PermMap represents the information flow properties of a single permission
including the direction (read, write, etc.) and an abstract representation
of the bandwidth of the flow (weight).
c C s || _ || _|| _d S �N)�perm�dir�weight)�selfr r
r � r �8/usr/lib/python3.9/site-packages/sepolgen/objectmodel.py�__init__T s zPermMap.__init__c C s d| j t| j | jf S )Nz'<sepolgen.objectmodel.PermMap %s %s %d>)r �
dir_to_strr
r �r r r r �__repr__Y s �zPermMap.__repr__N)�__name__�
__module__� __qualname__�__doc__r r r r r r r
M s r
c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dS )� PermMappingsz�The information flow properties of a set of object classes and permissions.
PermMappings maps one or more classes and permissions to their PermMap objects
describing their information flow characteristics.
c C s i | _ d| _t| _d S )N� )�classes�default_weight� FLOW_BOTH� default_dirr r r r r d s zPermMappings.__init__c C s� d}|D ]�}|� � }t|�dkst|�dks|d dkr:q|d dkrv|d }|| jv r`td��i | j|< | j| }qt|�dkr�td��|du r�td ��t|d t|d t|d
��}|||j< qdS ) zsRead the permission mappings from a file. This reads the format used
by Apol in the setools suite.
Nr r �#�classzduplicate class in perm map� z!error in object class permissionszpermission outside of classr )�split�lenr �
ValueErrorr
�
str_to_dir�intr )r r Zcur�line�fields�c�pmr r r � from_filei s" $
zPermMappings.from_filec C s | j | | S )z�Get the permission map for the object permission.
Returns:
PermMap representing the permission
Raises:
KeyError if the object or permission is not defined
)r )r �objr r r r �get� s zPermMappings.getc C s: z| j | | }W n" ty4 t|| j| j� Y S 0 |S )a Get the permission map for the object permission or a default.
getdefault is the same as get except that a default PermMap is
returned if the object class or permission is not defined. The
default is FLOW_BOTH with a weight of 5.
)r �KeyErrorr
r r )r r- r r+ r r r �
getdefault� s
zPermMappings.getdefaultc C s( t }|D ]}| �||�}||jB }q|S r )� FLOW_NONEr0 r
)r r- �permsr
r r+ r r r �getdefault_direction� s
z!PermMappings.getdefault_directionc C s( d}|D ]}| � ||�}||j7 }q|S )Nr )r0 r )r r- r2 �totalr r+ r r r �getdefault_distance� s
z PermMappings.getdefault_distanceN)
r r r r r r, r. r0 r3 r5 r r r r r ^ s
r N)
r Zimplicitly_typed_objectsr1 Z FLOW_READZ
FLOW_WRITEr r& r r
r r r r r �<module> s