a
Biv @ s d Z ddlZddlZzddlmZ W n eyB ddlmZ Y n0 ddlZddlZddl Z ddl
Z
ddl m Z dd Z
G dd d Zd
d ZG d d
d
ZdS )zU
Utilities for dealing with the compilation of modules and creation
of module tress.
N)getstatusoutput )defaultsc C s0 t d| }t|dkr(| d r(dS dS dS )z'Check that a module name is valid.
z[^a-zA-Z0-9_\-\.]r TFN)refindalllenisalpha)modnamem r 3/usr/lib/python3.9/site-packages/sepolgen/module.py
is_valid_name( s r
c @ sN e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dddZ
dS )
ModuleTreec C s || _ d | _d S N)r dirname)selfr r r r __init__2 s zModuleTree.__init__c C s | j S r r r r r r dir_name6 s zModuleTree.dir_namec C s | j d | j d S )N/z.ter r r r r r te_name9 s zModuleTree.te_namec C s | j d | j d S )Nr z.fcr r r r r fc_name< s zModuleTree.fc_namec C s | j d | j d S )Nr z.ifr r r r r if_name? s zModuleTree.if_namec C s | j d | j d S )Nr .ppr r r r r package_nameB s zModuleTree.package_namec C s
| j d S )Nz /Makefiler r r r r
makefile_nameE s zModuleTree.makefile_nameNc C s |d | j | _t| j t| d}|r>|d| n|dt | t|
d t| d t| d d S )Nr wzinclude )
r r osmkdiropenr writer refpolicy_makefilecloser r r )r Zparent_dirnameZmakefile_includefdr r r createH s zModuleTree.create)N) __name__
__module__ __qualname__r r r r r r r r& r r r r r 1 s r c C s t jt j| d d S )Nr r )r pathsplitextsplit)
sourcenamer r r modname_from_sourcenameX s r. c @ sT e Zd ZdZdddZdd Zdd Zd d
Zdd d
Zdd Z dd Z
dd Z dS )ModuleCompileras ModuleCompiler eases running of the module compiler.
The ModuleCompiler class encapsulates running the commandline
module compiler (checkmodule) and module packager (semodule_package).
You are likely interested in the create_module_package method.
Several options are controlled via parameters (only effects the
non-refpol builds):
.mls [boolean] Generate an MLS module (by passed -M to
checkmodule). True to generate an MLS module, false
otherwise.
.module [boolean] Generate a module instead of a base module.
True to generate a module, false to generate a base.
.checkmodule [string] Fully qualified path to the module compiler.
Default is /usr/bin/checkmodule.
.semodule_package [string] Fully qualified path to the module
packager. Defaults to /usr/bin/semodule_package.
.output [file object] File object used to write verbose
output of the compililation and packaging process.
Nc C s< t | _d| _d| _d| _|| _d| _t | _
d| _ dS )zCreate a ModuleCompiler instance, optionally with an
output file object for verbose output of the compilation process.
Tz/usr/bin/checkmodulez/usr/bin/semodule_package z
/usr/bin/makeN) selinuxZis_selinux_mls_enabledmlsmodule checkmodulesemodule_packageoutput last_outputr r# refpol_makefilemake)r r6 r r r r t s
zModuleCompiler.__init__c C s | j r| j |d || _d S )N
)r6 r" r7 )r strr r r o s zModuleCompiler.oc C s$ | | t|\}}| | |S r )r< r )r commandrcr6 r r r run s
zModuleCompiler.runc C sJ | d}t|dk r td|d|dd }|d }|d }||fS )zGenerate the module and policy package filenames from
a source file name. The source file must be in the form
of "foo.te". This will generate "foo.mod" and "foo.pp".
Returns a tuple with (modname, policypackage).
. z,invalid sourcefile name %s (must end in .te)r z.modr )r, r RuntimeErrorjoin)r r- Z splitnamebasenamer packagenamer r r
gen_filenames s
z ModuleCompiler.gen_filenamesTc C sD |r| | n0| |\}}| || | || t| dS )a Create a module package saved in a packagename from a
sourcename.
The create_module_package creates a module package saved in a
file named sourcename (.pp is the standard extension) from a
source file (.te is the standard extension). The source file
should contain SELinux policy statements appropriate for a
base or non-base module (depending on the setting of .module).
Only file names are accepted, not open file objects or
descriptors because the command line SELinux tools are used.
On error a RuntimeError will be raised with a descriptive
error message.
N) refpol_buildrG compilepackager unlink)r r- Z refpolicyr rF r r r create_module_package s z$ModuleCompiler.create_module_packagec C s4 | j d | j }| |}|dkr0td| j d S )Nz -f r compilation failed:
%s)r9 r8 r? rC r7 )r r- r= r> r r r rH s
zModuleCompiler.refpol_buildc C sp | j g}| jr|d | jr(|d |d || || | d|}|dkrltd| j d S )Nz-M-m-o r rM )r4 r2 appendr3 r? rD rC r7 )r r- r sr> r r r rI s
zModuleCompiler.compilec C sZ | j g}|d || |d || | d|}|dkrVtd| j d S )NrO rN rP r zpackaging failed [%s])r5 rQ r? rD rC r7 )r r rF rR r> r r r rJ s
zModuleCompiler.package)N)T) r' r( r) __doc__r r< r? rG rL rH rI rJ r r r r r/ [ s
r/ )rS r Ztempfile
subprocessr ImportErrorZcommandsr Zos.pathshutilr1 r0 r r
r r. r/ r r r r s '