| Current File : //lib64/python3.9/site-packages/setools/checker/__pycache__/checker.cpython-39.opt-1.pyc |
a
q�qe� � @ s� d dl Z d dlZd dlZd dlmZmZ d dlmZ ddlmZm Z ddl
m Z ddl m
Z
mZ dd lmZ d
ZG d d � d �ZdS )
� N)�datetime�timezone)�List� )�InvalidCheckerConfig�InvalidCheckerModule)�
SELinuxPolicy� )�CHECKER_REGISTRY�
CheckerModule)�CHECK_TYPE_KEYz;---------------------------------------------------------
c @ sV e Zd ZdZeedd�dd�Zedd� �Zej ed�d d��Ze
j fe d
�d d �Z
dS )
�
PolicyCheckerz;Configuration file-driven automated policy analysis checks.N)�policy�
configpath�returnc C s" t �t�| _|| _g | _|| _d S �N)�loggingZ getLogger�__name__�logr �checks�config)�selfr r � r �=/usr/lib64/python3.9/site-packages/setools/checker/checker.py�__init__ s zPolicyChecker.__init__c C s | j S r )� _configpath)r r r r r " s zPolicyChecker.config)r c
C s� | j �d�|�� zDt|d��&}t�� }|j||d� W d � n1 sJ0 Y W n6 ty� } z td�||��|�W Y d }~n
d }~0 0 | j �d� g }|� � D ]�\}}|dkr�q�z |t
}W n4 t y� } z t d�|t
���W Y d }~n
d }~0 0 zt
| | j||�} W n8 t �yH } z t d�||��|�W Y d }~n
d }~0 0 |�| � q�|�sjtd �|���| j �d
�t| j��� | j �d �|�� || _|| _|| _d S ) Nz!Opening policy checker config {}.�r)�sourcez%Unable to parse checker config {}: {}z"Validating configuration settings.ZDEFAULTz{}: Missing {} option.z!{}: Unknown policy check type: {}zNo checks found in {}.zValidated {} checks.z-Successfully opened policy checker config {}.)r �info�format�open� configparserZ ConfigParserZ read_file� Exceptionr �itemsr �KeyErrorr r
r �append�debug�lenr r Z_config)
r r �fdr �er � checknameZ checkconfig�
check_typeZnewcheckr r r r & sL 0�� � �� )r c C sV d}|� t� |� d�| j�� |� d�| j�� |� d�t�tj��� g }| j D �]^}d}z�|� t� |� d�|j
�� |j r�|� d�|j �� |j r�|� d�|j �� |�
|j
d�|j �f� | j�d �|j
|j �� W qT| j�d
�|j
|j�� ||_|t|�� �7 }|� d � W nN t�yh } z4|� d �|�� | jjd
|d� |d7 }W Y d}~n
d}~0 0 |�r�|� d� |�
|j
d�|�f� n|� d� |�
|j
df� ||7 }qT|� t� |� d� |D ] \}}|� d�||�� �q�|� d�|�� |� d�| j�� |� d�| j�� |� d�t�tj��� | j�d�|t| j ��� |S )zCRun all configured checks and print report to the file-like output.r z Policy check configuration: {}
zPolicy being checked: {}
zStart time: {}
zCheck name: {}
zDescription: {}
z Check DISABLED. Reason: {}
z
DISABLED ({})z Skipping disabled check {!r}: {}z Running check {0!r}, type {1}.�
z'Unexpected error: {}. Failing check.
zException info)�exc_infor NzCheck FAILED
zFAILED ({} failures)zCheck PASSED
ZPASSEDzResult Summary:
z
{:<39} {}
z
{} failure(s) found.
z
End time: {}
z {} failures found in {} checks.)�write�SECTION_SEPARATORr r r r Znowr Zutcr r* Zdesc�disabler% r r& r+ �outputr' �runr" r ) r r1 ZfailuresZresult_summary�checkZcheck_failuresr) r* �resultr r r r2 P s`
�
�
�
zPolicyChecker.run)r �
__module__� __qualname__�__doc__r �strr �propertyr �setter�sys�stdout�intr2 r r r r r
s
)r
)r; r! r r r �typingr � exceptionr r Z policyrepr Z
checkermoduler
r Z
globalkeysr r/ r
r r r r �<module> s