a
qéqe— ã @ sª U d dl Z d dlZd dlmZmZ d dlmZmZmZm Z ddl
m Z ddl m
Z
ddlmZmZmZmZ i Zeeef ed < d
gZG d d „ d eƒZG d
d
„ d
edZdS )é N)ÚABCMetaÚabstractmethod)ÚDictÚ FrozenSetÚListÚMappingé )ÚInvalidCheckOption)Ú
SELinuxPolicyé )ÚCHECK_TYPE_KEYÚCHECK_DESC_KEYÚ
CHECK_DISABLEÚGLOBAL_CONFIG_KEYSÚCHECKER_REGISTRYÚ
CheckerModulec s e Zd ZdZ‡ fdd„Z‡ ZS )Ú
CheckRegistryzQChecker module registry metaclass. This registers modules in the check registry.c s | d¡}| d¡}|dkrnt|tƒs4td |¡ƒ‚t|tƒsLtd |¡ƒ‚|tv rnt| j}td ||¡ƒ‚tƒ | |||¡}|rŒ|t|< |S )NÚ
check_typeÚ check_configr z,Checker module {} does not set a check_type.z4Checker module {} does not set a valid check_config.z4Checker module {} conflicts with registered check {})
ÚgetÚ
isinstanceÚstrÚ TypeErrorÚformatÚ frozensetr Ú__name__ÚsuperÚ__new__)ÚclsZclsnameZ superclassesZ
attributedictr r Zexisting_check_moduleZclassdef©Ú __class__© úC/usr/lib64/python3.9/site-packages/setools/checker/checkermodule.pyr s$
ÿ
ÿzCheckRegistry.__new__)r Ú
__module__Ú __qualname__Ú__doc__r Ú
__classcell__r! r! r r" r s r c @ sž e Zd ZU dZeed< ee ed< dZeed< e j
Z e ed< e ee
eef ddœd d
„Zedd œd d
„Zedd œdd„Zedd œdd„Zeedœdd„ƒZdS )r z/Abstract base class for policy checker modules.r r FÚ log_passingÚpolicyN)r( Ú checknameÚconfigÚreturnc C sb || _ || _t t¡| _t| jB }|D ] }||vr&td | j|¡ƒ‚q&|
t ¡| _ |
t
¡| _d S )Nz{}: Invalid option: {})r( r) ÚloggingZ getLoggerr Úlogr r r r r r
Zdescr Údisable)Úselfr( r) r* Z
valid_optionsÚkr! r! r" Ú__init__J s
ÿ zCheckerModule.__init__)Úmsgr+ c C s( | j |¡ | j d¡ | j |¡ dS )z Output an informational message.Ú
N)ÚoutputÚwriter- Údebug©r/ r2 r! r! r" Úlog_info] s zCheckerModule.log_infoc C s. | j r| j d |¡¡ | j d |¡¡ dS )z†
Log findings that pass the check. By default these messages are
surpressed unless self.log_passing is True.
z P * {}
zP * {}N)r' r4 r5 r r- r6 r7 r! r! r" Úlog_okc s zCheckerModule.log_okc C s4 | j d | jrdnd|¡¡ | j d |¡¡ dS )z!Log findings that fail the check.z
{} * {}
ÚFú zF * {}N)r4 r5 r r' r- r6 r7 r! r! r" Úlog_faill s zCheckerModule.log_fail)r+ c C s dS )z”
Run the configured check on the policy.
Return: List of failed items in the check. If the check passes, list is empty.
Nr! )r/ r! r! r" Úrunq s zCheckerModule.run)r r# r$ r% r Ú__annotations__r r' ÚboolÚsysÚstdoutr4 r
r r1 r8 r9 r< r r r= r! r! r! r" r 3 s
)Ú metaclass)r@ r, Úabcr r Útypingr r r r Ú exceptionr Z policyrepr
Z
globalkeysr r
r r r r Útyper> Ú__all__r r r! r! r! r" Ú s