a
Biw @ sb d Z g dZdZdZdZeeB ZeeeedZedededed iZG d
d d ZG d d
d
Z dS )z
This module provides knowledge object classes and permissions. It should
be used to keep this knowledge from leaking into the more generic parts of
the policy generation.
) ZsocketfdZprocessfileZlnk_fileZ fifo_fileZdbusZ
capabilityZunix_stream_socket )nrwbr r r r c @ s e Zd ZdZdd Zdd ZdS )PermMapa A mapping between a permission and its information flow properties.
PermMap represents the information flow properties of a single permission
including the direction (read, write, etc.) and an abstract representation
of the bandwidth of the flow (weight).
c C s || _ || _|| _d S N)permdirweight)selfr r
r r 8/usr/lib/python3.9/site-packages/sepolgen/objectmodel.py__init__T s zPermMap.__init__c C s d| j t| j | jf S )Nz')r
dir_to_strr
r r r r r __repr__Y s zPermMap.__repr__N)__name__
__module__ __qualname____doc__r r r r r r r
M s r
c @ s@ e Zd ZdZdd Zdd Zdd Zdd Zd
d Zd d
Z dS ) PermMappingszThe information flow properties of a set of object classes and permissions.
PermMappings maps one or more classes and permissions to their PermMap objects
describing their information flow characteristics.
c C s i | _ d| _t| _d S )N )classesdefault_weight FLOW_BOTH default_dirr r r r r d s zPermMappings.__init__c C s d}|D ]}| }t|dkst|dks|d dkr:q|d dkrv|d }|| jv r`tdi | j|< | j| }qt|dkrtd|du rtd t|d t|d t|d
}|||j< qdS ) zsRead the permission mappings from a file. This reads the format used
by Apol in the setools suite.
Nr r #classzduplicate class in perm map z!error in object class permissionszpermission outside of classr )splitlenr
ValueErrorr
str_to_dirintr )r r Zcurlinefieldscpmr r r from_filei s" $
zPermMappings.from_filec C s | j | | S )zGet the permission map for the object permission.
Returns:
PermMap representing the permission
Raises:
KeyError if the object or permission is not defined
)r )r objr r r r get s zPermMappings.getc C s: z| j | | }W n" ty4 t|| j| j Y S 0 |S )a Get the permission map for the object permission or a default.
getdefault is the same as get except that a default PermMap is
returned if the object class or permission is not defined. The
default is FLOW_BOTH with a weight of 5.
)r KeyErrorr
r r )r r- r r+ r r r
getdefault s
zPermMappings.getdefaultc C s( t }|D ]}| ||}||jB }q|S r ) FLOW_NONEr0 r
)r r- permsr
r r+ r r r getdefault_direction s
z!PermMappings.getdefault_directionc C s( d}|D ]}| ||}||j7 }q|S )Nr )r0 r )r r- r2 totalr r+ r r r getdefault_distance s
z PermMappings.getdefault_distanceN)
r r r r r r, r. r0 r3 r5 r r r r r ^ s
r N)
r Zimplicitly_typed_objectsr1 Z FLOW_READZ
FLOW_WRITEr r& r r
r r r r r s