a
qqe' @ sV U d dl mZ d dlmZmZ ddlmZmZmZm Z m
Z
ddl m Z ddl
mZmZmZ ddlmZ eeZee ed < eeZee
ed
< G d d d eZG d
d deZG dd deZeee dddZe
ee
dddZG dd deZG dd deZ G dd d eZ G d d d ee Z G d d d ee Z G d!d" d"ee Z d#S )$ ) defaultdict)
NamedTupleSet )CategoryLevel LevelDeclRange Sensitivity )DiffResultDescriptor)
Difference
SymbolWrapperWrapper) SymbolCache _cats_cache _sens_cachec @ s6 e Zd ZU dZee ed< ee ed< ee ed< dS )ModifiedCategoryz+Difference details for a modified category.
added_aliasesremoved_aliasesmatched_aliasesN__name__
__module__ __qualname____doc__r str__annotations__ r r 6/usr/lib64/python3.9/site-packages/setools/diff/mls.pyr s
r c @ s6 e Zd ZU dZee ed< ee ed< ee ed< dS )ModifiedSensitivityz.Difference details for a modified sensitivity.r r r Nr r r r r r s
r c @ s> e Zd ZU dZeed< ee ed< ee ed< ee ed< dS )ModifiedLevelDeclz4Difference details for a modified level declaration.leveladded_categoriesremoved_categoriesmatched_categoriesN)r r r r r r r r r r r r r! % s
r! )categoryreturnc C sB zt | j | W S ty< t| }|t | j | < | Y S 0 dS )z
Wrap category from the specified policy.
This caches results to prevent duplicate wrapper
objects in memory.
N)r policyKeyErrorr )r& cr r r category_wrapper_factory/ s r+ ) sensitivityr' c C sB zt | j | W S ty< t| }|t | j | < | Y S 0 dS )z
Wrap sensitivity from the specified policy.
This caches results to prevent duplicate wrapper
objects in memory.
N)r r( r) r )r, r* r r r sensitivity_wrapper_factory> s r- c @ sD e Zd ZdZedZedZedZddddZddddZ dS ) CategoriesDifferencez\ z7CategoriesDifference.diff_categories..c s s | ]}t |V qd S r1 r2 r3 r r r r5 ] r6 FunwrapN)
loginfoformat _set_diff left_policy
categories right_policyr# r$ dictmodified_categoriesaliasesr )selfr% Z
left_categoryZright_categoryr r r r r r r/ U s" z$CategoriesDifference.diff_categoriesc C s" | j d d| _d| _d| _dS )%Reset diff results on policy changes.z Resetting category differencesN)r9 debugr# r$ rA rC r r r _reset_diffo s z CategoriesDifference._reset_diff)
r r r r r r# r$ rA r/ rG r r r r r. M s r. c @ sD e Zd ZdZedZedZedZddddZddddZ dS ) SensitivitiesDifferencez?Determine the difference in sensitivities between two policies.diff_sensitivitiesNr0 c C s | j d| | dd | j D dd | j D \| _| _}t | _
|D ]@\}}| j| | dd\}}}|s|rTt |||| j
|< qTdS )z>Generate the difference in sensitivities between the policies.zKGenerating sensitivity differences from {0.left_policy} to {0.right_policy}c s s | ]}t |V qd S r1 r- r4 sr r r r5 r6 z=SensitivitiesDifference.diff_sensitivities..c s s | ]}t |V qd S r1 rJ rK r r r r5 r6 Fr7 N)
r9 r: r; r< r= Z
sensitivitiesr? added_sensitivitiesremoved_sensitivitiesr@ modified_sensitivitiesrB r )rC Zmatched_sensitivitiesZ left_sensZ
right_sensr r r r r r rI s( z*SensitivitiesDifference.diff_sensitivitiesc C s" | j d d| _d| _d| _dS rD z!Resetting sensitivity differencesN)r9 rE rM rN rO rF r r r rG s z#SensitivitiesDifference._reset_diff)
r r r r r rM rN rO rI rG r r r r rH w s rH c @ sD e Zd ZdZedZedZedZddddZddddZ dS ) LevelDeclsDifferencez8Determine the difference in levels between two policies. diff_levelsNr0 c C s | j d| | dd | j D dd | j D \| _| _}g | _ |D ]T\}}| dd |
D dd |
D \}}}|s|rR| j t |||| qRdS )z7Generate the difference in levels between the policies.zJGenerating level decl differences from {0.left_policy} to {0.right_policy}c s s | ]}t |V qd S r1 LevelDeclWrapperrK r r r r5 r6 z3LevelDeclsDifference.diff_levels..c s s | ]}t |V qd S r1 rS rK r r r r5 r6 c s s | ]}t |V qd S r1 r2 r3 r r r r5 r6 c s s | ]}t |V qd S r1 r2 r3 r r r r5 r6 N)
r9 r: r; r< r= Zlevelsr? added_levelsremoved_levelsmodified_levelsr> appendr! )rC Zmatched_levelsZ
left_levelZ right_levelr# r$ r% r r r rR s(
z LevelDeclsDifference.diff_levelsc C s" | j d d| _d| _d| _dS rP )r9 rE rU rV rW rF r r r rG s z LevelDeclsDifference._reset_diff)
r r r r r rU rV rW rR rG r r r r rQ s rQ c @ s< e Zd ZdZdZeddddZdd Zd d
Zd d Z dS )
rT z-Wrap level declarations to allow comparisons.r, Nr" r' c C s || _ t|j| _t|| _d S r1 )originr- r, hashkeyrC r" r r r __init__ s zLevelDeclWrapper.__init__c C s | j S r1 )r] rF r r r __hash__ s zLevelDeclWrapper.__hash__c C s | j |j kS r1 rY rC otherr r r __eq__ s zLevelDeclWrapper.__eq__c C s | j |j k S r1 rY ra r r r __lt__ s zLevelDeclWrapper.__lt__)
r r r r __slots__r r_ r` rc rd r r r r rT s rT c @ s< e Zd ZdZdZeddddZdd Zd d
Zd d Z dS )
LevelWrapperz!Wrap levels to allow comparisons.)r, r> NrZ c C s. || _ t|j| _tdd | D | _d S )Nc s s | ]}t |V qd S r1 r2 r3 r r r r5 r6 z(LevelWrapper.__init__..)r[ r- r, setr> r^ r r r r_ s zLevelWrapper.__init__c C s
t | jS r1 r\ r[ rF r r r r` s zLevelWrapper.__hash__c C s4 z| j |j ko| j|jkW S ty. Y dS 0 d S NFr, r> AttributeErrorra r r r rc s
zLevelWrapper.__eq__c C s4 z| j |j k o| j|jk W S ty. Y dS 0 d S ri rj ra r r r rd s
zLevelWrapper.__lt__)
r r r r re r r_ r` rc rd r r r r rf s rf c @ s< e Zd ZdZdZeddddZdd Zd d
Zd d Z dS )
RangeWrapperz
Wrap ranges to allow comparisons.
This only compares the low and high levels of the range.
It does not detect additions/removals/modifications
to levels between the low and high levels of the range.
)lowhighN)range_r' c C s" || _ t|j| _t|j| _d S r1 )r[ rf rm rn )rC ro r r r r_ s zRangeWrapper.__init__c C s
t | jS r1 rh rF r r r r` s zRangeWrapper.__hash__c C s4 z| j |j ko| j|jkW S ty. Y dS 0 d S ri rm rn rk ra r r r rc s
zRangeWrapper.__eq__c C s4 z| j |j k o| j|jk W S ty. Y dS 0 d S ri rp ra r r r rd $ s
zRangeWrapper.__lt__)
r r r r re r r_ r` rc rd r r r r rl s rl N)! collectionsr typingr r Z policyrepr r r r r
Z descriptorsr
differencer
r r r r@ r r r r r r! r+ r- r. rH rQ rT rf rl r r r r s$
*,,!