a
qéqeá ã @ s‚ d dl Z d dlZd dlZd dlmZmZ d dlmZ ddlmZm Z ddl
m Z ddl m
Z
mZ dd lmZ d
ZG d d „ d ƒZdS )
é N)ÚdatetimeÚtimezone)ÚListé )ÚInvalidCheckerConfigÚInvalidCheckerModule)Ú
SELinuxPolicyé )ÚCHECKER_REGISTRYÚ
CheckerModule)ÚCHECK_TYPE_KEYz;---------------------------------------------------------
c @ sV e Zd ZdZeeddœdd„Zedd„ ƒZej edœd d„ƒZe
j fe d
œd d „Z
dS )
Ú
PolicyCheckerz;Configuration file-driven automated policy analysis checks.N)ÚpolicyÚ
configpathÚreturnc C s" t t¡| _|| _g | _|| _d S ©N)ÚloggingZ getLoggerÚ__name__Úlogr ÚchecksÚconfig)Úselfr r © r ú=/usr/lib64/python3.9/site-packages/setools/checker/checker.pyÚ__init__ s zPolicyChecker.__init__c C s | j S r )Ú _configpath)r r r r r " s zPolicyChecker.config)r c
C sª | j d |¡¡ zDt|dƒ&}t ¡ }|j||d W d ƒ n1 sJ0 Y W n6 tyŒ } z td ||¡ƒ|‚W Y d }~n
d }~0 0 | j d¡ g }| ¡ D ]®\}}|dkr¸q¦z |t
}W n4 t yø } z t d |t
¡ƒ‚W Y d }~n
d }~0 0 zt
| | j||ƒ} W n8 t yH } z t d ||¡ƒ|‚W Y d }~n
d }~0 0 | | ¡ q¦|sjtd |¡ƒ‚| j d
t| jƒ¡¡ | j d |¡¡ || _|| _|| _d S ) Nz!Opening policy checker config {}.Úr)Úsourcez%Unable to parse checker config {}: {}z"Validating configuration settings.ZDEFAULTz{}: Missing {} option.z!{}: Unknown policy check type: {}zNo checks found in {}.zValidated {} checks.z-Successfully opened policy checker config {}.)r ÚinfoÚformatÚopenÚ configparserZ ConfigParserZ read_fileÚ Exceptionr Úitemsr ÚKeyErrorr r
r ÚappendÚdebugÚlenr r Z_config)
r r Úfdr Úer Ú checknameZ checkconfigÚ
check_typeZnewcheckr r r r & sL 0ÿÿ ÿ ÿÿ )r c C sV d}| t¡ | d | j¡¡ | d | j¡¡ | d t tj¡¡¡ g }| j D ]^}d}z¼| t¡ | d |j
¡¡ |j r”| d |j ¡¡ |j rà| d |j ¡¡ |
|j
d |j ¡f¡ | j d |j
|j ¡¡ W qT| j d
|j
|j¡¡ ||_|t| ¡ ƒ7 }| d ¡ W nN tyh } z4| d |¡¡ | jjd
|d |d7 }W Y d}~n
d}~0 0 |r’| d¡ |
|j
d |¡f¡ n| d¡ |
|j
df¡ ||7 }qT| t¡ | d¡ |D ] \}}| d ||¡¡ qÎ| d |¡¡ | d | j¡¡ | d | j¡¡ | d t tj¡¡¡ | j d |t| j ƒ¡¡ |S )zCRun all configured checks and print report to the file-like output.r z Policy check configuration: {}
zPolicy being checked: {}
zStart time: {}
zCheck name: {}
zDescription: {}
z Check DISABLED. Reason: {}
z
DISABLED ({})z Skipping disabled check {!r}: {}z Running check {0!r}, type {1}.Ú
z'Unexpected error: {}. Failing check.
zException info)Úexc_infor NzCheck FAILED
zFAILED ({} failures)zCheck PASSED
ZPASSEDzResult Summary:
z
{:<39} {}
z
{} failure(s) found.
z
End time: {}
z {} failures found in {} checks.)ÚwriteÚSECTION_SEPARATORr r r r Znowr Zutcr r* ZdescÚdisabler% r r& r+ Úoutputr' Úrunr" r ) r r1 ZfailuresZresult_summaryÚcheckZcheck_failuresr) r* Úresultr r r r2 P s`
ÿ
ÿ
ÿ
zPolicyChecker.run)r Ú
__module__Ú __qualname__Ú__doc__r Ústrr Úpropertyr ÚsetterÚsysÚstdoutÚintr2 r r r r r
s
)r
)r; r! r r r Útypingr Ú exceptionr r Z policyrepr Z
checkermoduler
r Z
globalkeysr r/ r
r r r r Ú s