a
qqei @ s U d dl mZ d dlmZmZmZmZ ddlmZ ddl m
Z
m Z m Z m
Z
ddlmZ ddlmZmZ dd lmZmZ dd
lmZ dd lmZ eeZee
ed < G d
d deZ e
ee
dddZ G dd deZ dS ) ) defaultdict)
NamedTupleSetOptionalUnion ) MLSDisabled)LevelRangeRoleUser )DiffResultDescriptor)
Difference
SymbolWrapper) LevelWrapper RangeWrapperrole_wrapper_factory) SymbolCache _users_cachec @ s e Zd ZU dZee ed< ee ed< ee ed< eee e
f ed< eee e
f ed< eee e
f ed< eee e
f ed< d S )
ModifiedUserz'Difference details for a modified user. added_roles
removed_roles
matched_roles added_level
removed_level added_range
removed_rangeN) __name__
__module__ __qualname____doc__r r __annotations__r r r strr
r% r% 8/usr/lib64/python3.9/site-packages/setools/diff/users.pyr s
r )userreturnc C sB zt | j | W S ty< t| }|t | j | < | Y S 0 dS )z|
Wrap users from the specified policy.
This caches results to prevent duplicate wrapper
objects in memory.
N)r ZpolicyKeyErrorr )r' rr% r% r& user_wrapper_factory" s r+ c @ sD e Zd ZdZedZedZedZddddZddddZ dS ) UsersDifferencez7Determine the difference in users between two policies.
diff_usersN)r( c C s | j d| | dd | j D dd | j D \| _| _}t | _
|D ],\}}| dd |j D dd |j D \}}}z$t |j
}t|j}|j
} |j}
W n" ty d}d}d} d}
Y n0 z$t |j
} t|j} |j
}
|j}W n$ ty d} d} d}
d}Y n0 || kr.|
}| }nd}d}|| krJ|}|
}nd}d}|sh|sh|sh|rTt|||||||| j
|< qTdS ) z6Generate the difference in users between the policies.zDGenerating user differences from {0.left_policy} to {0.right_policy}c s s | ]}t |V qd S Nr+ .0r* r% r% r& @ z-UsersDifference.diff_users..c s s | ]}t |V qd S r. r/ r0 r% r% r& r2 A r3 c s s | ]}t |V qd S r. r r0 r% r% r& r2 K r3 c s s | ]}t |V qd S r. r r0 r% r% r& r2 L r3 NzNone (MLS Disabled))loginfoformatZ _set_diffZ left_policyZusersZ right_policy added_users
removed_usersdictmodified_usersrolesr Z mls_levelr Z mls_ranger r )selfZ
matched_usersZ left_userZ
right_userr r r Zleft_level_wrapZleft_range_wrapZ
left_levelZ
left_rangeZright_level_wrapZright_range_wrapZ right_levelZ right_ranger r r r r% r% r& r- 9 sh
zUsersDifference.diff_usersc C s" | j d d| _d| _d| _dS )z%Reset diff results on policy changes.zResetting user differencesN)r4 debugr7 r8 r: )r< r% r% r& _reset_diff s zUsersDifference._reset_diff)
r r r! r" r r7 r8 r: r- r> r% r% r% r& r, 1 s Sr, N) collectionsr typingr r r r exceptionr Z policyrepr r
r r Z descriptorsr
differencer r Zmlsr r r; r r r9 r r# r r+ r, r% r% r% r& s