a
¾Ãye–
ã @ s d dl Z e dd¡ d dlmZ d dlmZ d dlmZ d dlmZ d dlZd dl Z d dl
Z
d dl
m Z m Z m
Z
d dlZ d dlZ d dlZd dlZd dlZd dlZd ZzFd dlZi Zejd
k rÄd ed < ejefd
die¤dd i¤ŽZejZW nJ zd dlZe ej d< W n& e y. d dl Z e e j d< Y n0 Y n0 i Z!e j"D ]Z#e#e!e j"e# < q@edƒedƒgZ$edƒedƒgZ%dd„ Z&d dl'Z'edƒedƒfZ(edƒedƒfZ)d Z*dZ+d Z,dZ-d Z.d Z/dZ0d Z1d Z2dZ3d Z4d Z5d Z6d Z7d Z8d!Z9d"Z:d#Z;g d$¢Ze?d(kr e>ƒ Z@dS ))é NÚGtkz3.0)r )ÚGdk)ÚGLib)Ú SELinuxDBus)ÚDISABLEDÚ
PERMISSIVEÚ ENFORCINGzselinux-python)é TÚunicodeÚ localedirz/usr/share/localeÚfallbackÚ_ZNoZYesZDisableZEnablec C s< | d u r|d u rdS | d u r dS |d u r,dS | |k| |k S )Nr éÿÿÿÿé © )ÚaÚbr r ú0/usr/lib/python3.9/site-packages/sepolicy/gui.pyÚcmpG s r z Advanced >>z Advanced <>zAdvanced Search <
To change from Disabled to Enforcing mode
- Change the system mode from Disabled to Permissive
- Reboot, so that the system can relabel
- Once the system is working as planned
* Change the system mode to Enforcing
c @ sÔ e Zd Zd#dd„Zdd„ Zdd„ Zd d
„ Zd d „ Zd
d„ Zdd„ Z dd„ Z
dd„ Z dd„ Z dd„ Z
dd„ Zdd „ Zd d „ Zd d „ Zd!d"„ Zd#d$„ Zd%d&„ Zd'd(„ Zd)d*„ Zd+d,„ Zd-d.„ Zd/d0„ Zd1d2„ Zd3d4„ Zd5d6„ Z d7d8„ Z d9d:„ Z d;d<„ Z d=d>„ Z d?d@„ Z!dAdB„ Z"dCdD„ Z#dEdF„ Z$dGdH„ Z%dIdJ„ Z&dKdL„ Z'dMdN„ Z(dOdP„ Z)dQdR„ Z*dSdT„ Z+dUdV„ Z,dWdX„ Z-dYdZ„ Z.d[d\„ Z/d]d^„ Z0d_d`„ Z1dadb„ Z2dcdd„ Z3dedf„ Z4dgdh„ Z5didj„ Z6dkdl„ Z7dmdn„ Z8dodp„ Z9dqdr„ Z:dsdt„ Z;dudv„ Zd{d|„ Z?d}d~„ Z@dd€„ ZAdd‚„ ZBdƒd„„ ZCd…d†„ ZDd‡dˆ„ ZEd‰dŠ„ ZFd‹dŒ„ ZGddŽ„ ZHdd„ ZId‘d’„ ZJd“d”„ ZKd•d–„ ZLd—d˜„ ZMd™dš„ ZNd›dœ„ ZOddž„ ZPdŸd „ ZQd¡d¢„ ZRd£d¤„ ZSd¥d¦„ ZTd§d¨„ ZUd©dª„ ZVd«d¬„ ZWdd®„ ZXd¯d°„ ZYd±d²„ ZZd³d´„ Z[dµd¶„ Z\d·d¸„ Z]d¹dº„ Z^d»d¼„ Z_d½d¾„ Z`d$dÀdÁ„ZadÂdÄ ZbdÄdÅ„ ZcdÆdÇ„ ZddÈdÉ„ ZedÊdË„ ZfdÌdÍ„ ZgdÎdÏ„ ZhdÐdÑ„ ZidÒdÓ„ ZjdÔdÕ„ ZkdÖdׄ ZldØdÙ„ ZmdÚdÛ„ ZndÜdÝ„ ZodÞdß„ Zpdàdá„ Zqdâdã„ Zrdädå„ Zsdædç„ Ztdèdé„ Zudêdë„ Zvdìdí„ Zwdîdï„ Zxdðdñ„ Zydòdó„ Zzdôdõ„ Z{död÷„ Z|dødù„ Z}dúdû„ Z~düdý„ Zdþdÿ„ Z€d d„ Zdd„ Z‚dd„ Zƒdd„ Z„dd „ Z…d
d „ Z†d d
„ Z‡dd„ Zˆdd„ Z‰d%dd„ZŠdd„ Z‹dd„ ZŒdd„ Zdd „ ZŽd d „ Zd d „ Zd!d"„ Z‘dS (& Ú
SELinuxGuiNFc B C sò d| _ d| _t| _tƒ | _z| j ¡ }W n8 tjjy` } z t |ƒ |
¡ W Y d }~n
d }~0 0 | ¡ || _ d| _
t ¡ }tjdddidd | _| jd }| |¡ | d
¡| _| d ¡| _| d ¡| _| d
¡| _| d¡| _| d¡| _t tj j ¡| _ t tj j ¡| _!t" #¡ d | _$d | _%d | _&d| _'d| _(d| _)d| _*g | _+g | _,i | _-| d¡| _.| d¡| _/| d¡| _0d| _1| d¡| _2| d¡| _3| j3 4| j5¡ | d¡| _6| d¡| _7| d¡| _8d| _9| d¡| _:| d¡| _;| d¡| _<| d ¡| _=| d ¡| _>| d ¡| _?| d ¡| _@| d ¡| _A| d!¡| _B| jB Cd"tjDjE¡ | d#¡| _F| jF 4| j5¡ | d$¡| _G| d%¡| _H| d&¡| _I| d'¡| _J| d(¡| _K| d)¡| _L| jL Cd"tjDjE¡ | d*¡| _M| jM 4| j5¡ | d+¡| _N| d,¡| _O| d-¡| _P| d.¡| _Q| d/¡| _R| d0¡| _S| d1¡| _T| d2¡| _U| d3¡| _V| d4¡| _W| d5¡| _X| d6¡| _Y| d7¡| _Z| d8¡| _[| d9¡| _\| d:¡| _]| d;¡| _^| j^ Cd"tjDjE¡ | d<¡| __| d=¡| _`| j` 4| j5¡ | d>¡| _a| d?¡| _b| d@¡| _c| dA¡| _d| dB¡| _e| dC¡| _f| dD¡| _g| dE¡| _h| dF¡| _i| dG¡| _j| dH¡| _k| dI¡| _l| dJ¡| _m| dK¡| _n| dL¡| _o| dM¡| _p| dN¡| _q| dO¡| _rg | _s| t¡ dPk rð| ji ud¡ | jk ud¡ | jr ud¡ | dQ¡| _v| dR¡| _w| dS¡| _x| y¡ | dT¡| _z| dU¡| _{| dV¡| _|| dW¡| _}| dX¡| _~| dY¡| _| dZ¡| _€| d[¡| _| d\¡| _‚| d]¡| _ƒ| d^¡| _„| d_¡| _…| d`¡| _†| da¡| _‡| db¡| _ˆ| dc¡| _‰| dd¡| _Š| de¡| _‹| df¡| _Œ| dg¡| _| dh¡| _Ž| di¡| _| dj¡| _| dk¡| _‘| dl¡| _’| dm¡| _“| dn¡| _”| do¡| _•| dp¡| _–| dq¡| _—| dr¡| _˜| ds¡| _™| dt¡| _š| du¡| _›| dv¡| _œ| dw¡| _| dx¡| _ž| dy¡| _Ÿ| dz¡| _ | d{¡| _¡| d|¡| _¢| d}¡| _£| d~¡| _¤| d¡| _¥| d€¡| _¦| d¡| _§| j§ ¨d¡ | d‚¡| _©| dƒ¡| _ª| d„¡| _«| d…¡| _¬| d†¡| _| d‡¡| _®| dˆ¡| _¯| d‰¡| _°| dŠ¡| _±| d‹¡| _²| dŒ¡| _³| d¡| _´| j´ 4| j5¡ | dŽ¡| _µ| jµ ¶¡ | _·| d¡| _¸| j¸ Cd"tjDjE¡ | d¡| _¹| j¹ ¶¡ | _º| d‘¡| _»| d’¡| _¼| j¼ Cd"tjDjE¡ | d“¡| _½| j½ 4| j5¡ | d”¡| _¾| j¾ ¶¡ | _¿| d•¡| _À| d–¡| _Á| jÁ 4| j5¡ | d—¡| _Â| j¾ ¶¡ | _Ã| d˜¡| _Ä| jÄ Cd"tjDjE¡ | d—¡| _Â| j ¶¡ | _Ã| d™¡| _Å| jÅ ¶¡ | _Æ| dš¡| _Ç| d›¡| _È| jÈ Cd"tjDjE¡ | dœ¡| _É| jÉ 4| j5¡ | d¡| _Ê| jÊ ¶¡ | _Ë| dž¡| _Ì| dŸ¡| _Í| jÍ Cd"tjDjE¡ | d ¡| _Î| jÎ 4| j5¡ | d¡¡| _Ï| jÏ ¶¡ | _Ð| d¢¡| _Ñ| d£¡| _Ò| jÒ CdPtjDjE¡ | d¤¡| _Ó| jÓ 4| j5¡ | d¥¡| _Ô| d¦¡| _Õ| d§¡| _Ö| d¨¡| _×| j×| _Ø| j× ¶¡ | _Ù| d©¡| _Ú| dª¡| _Û| jÛ CdtjDjE¡ | d«¡| _Ü| jÜ 4| j5¡ | d¬¡| _Ý| jÝ ¶¡ | _Þ| d¡| _ß| jß ¶¡ | _à| d®¡| _á| d¯¡| _â| jâ CdPtjDjE¡ | d°¡| _ã| jã 4| j5¡ | d±¡| _ä| jä ¶¡ | _å| d²¡| _æ| d³¡| _ç| jç Cd"tjDjE¡ | d´¡| _è| jè 4| j5¡ | dµ¡| _é| jä ¶¡ | _ê| d¶¡| _ë| d·¡| _ì| d¸¡| _í| d¹¡| _î| jî ïd"¡ | jî ðd"¡ | jî ñ| jòd ¡ | jí ó| jî¡ | jí ôd"tjõ¡ | dº¡| _ö| d»¡| _÷| d¼¡| _ø| d½¡| _ù| d¾¡| _ú| jú ûd¿¡| _ü| dÀ¡| _ý| dÁ¡| _þ| d¡| _ÿ| dá| _ | dÄ¡| _| j dÅ| j| j®¡ | dÆ¡| _| j dÅ| j| ja¡ | dÇ¡| _| j dÅ| j| jW¡ | dÈ¡| _| j dÅ| j| jH¡ | dÉ¡| _| j dÅ| j| j±¡ | dÊ¡| _| d
¡| _| dË¡| _ | dÌ¡| _
| dÍ¡| _ | dΡ}| j dÅ| j| jˆ¡ g | _ | j dÅ| j
| jÒ¡ d| _d }|rdÏdÐg| _+|r || j+vr | j+ |¡ nt ¡ | _+| j+jtjdÑ |rf|| j+vrf| tdÒƒ| ¡ |
¡ | ¡ t| j+ƒ} t ¡ }
| j+D ]¼} | | | ¡ tt| jƒt| ƒ ƒ| _ | j² | j ¡ | j² | j ¡ | ¡ |
| g ¡D ]6} t !| ¡}|rþ| || ¡ | j, |¡ qþ| jd7 _qŽ| "¡ | jî #| jì¡ | j8 #| j6¡ | j$| j%| j&| j'| j(| j)| j*| j+| j,| j-| j.| j/| j0| j1| j2| j3| j4| j5| j6| j7| j8| j9| j:| j;| j<| j=| j>| j?| j@| jA| jB| j.| jC| jD| jE| jF| jG| jG| jH| jI| jJ| jK| jL| jM| jN| jO| jP| jQ| jR| jS| jE| jT| jU| jV| jW| jX| jY| jY| jY| jZ| j[| j\| j5| j]| j^dÓœA}
| _|¡ | `|
¡ | j ¡ ta bdÔ| jc¡ | c¡ d| _d| jÿ "¡ | jþ "¡ | jetfkr~| g¡ nV| j r¼| j h| j ¡ | jí i| j ¡ | j¡ | ]¡ n| k¡ | j lt¡ | m¡ d| _ t n¡ d S )ÕNFTÚ ZpurelibÚbasez/usr)Úvarsz
/sepolicy/zsepolicy.gladeÚouter_notebookZSELinux_windowZMain_selection_menuÚmain_advanced_labelÚ applications_selection_buttonZ
Revert_buttonr Zadd_path_dialogÚerror_check_windowÚerror_check_labelÚadvanced_search_windowZadvanced_filterZ
advanced_sortÚadvanced_filter_entryÚadvanced_search_treeviewZ Login_labelÚlogin_seuser_comboboxZlogin_seuser_liststoreÚlogin_name_entryÚlogin_mls_labelÚlogin_mls_entryZ Login_buttonÚlogin_treeviewÚlogin_liststorer Ú login_filterÚlogin_popup_windowÚlogin_delete_liststoreÚlogin_delete_windowÚuser_popup_windowZ User_buttonÚuser_liststoreÚ user_filterÚ
user_treeviewÚuser_roles_comboboxZuser_roles_liststoreZ
User_labelÚuser_name_entryÚuser_mls_labelÚuser_mls_level_entryÚuser_mls_entryZselinux_user_comboboxÚuser_delete_liststoreÚuser_delete_windowÚfile_equiv_labelÚfile_equiv_source_entryÚfile_equiv_dest_entryZfile_equiv_buttonÚfile_equiv_treeviewÚfile_equiv_liststoreÚfile_equiv_popup_windowZfile_equiv_filterÚfile_equiv_delete_liststoreÚfile_equiv_delete_windowÚapp_system_buttonZ
System_buttonZLockdown_buttonZ Systems_boxZRelabel_buttonZRelabel_button_noÚadvanced_systemÚouter_notebook_frameZsystem_policy_type_labelÚselect_button_browseÚcancel_button_browseÚmoreTypes_window_filesZmore_types_file_liststoreZmoreTypes_treeview_filesÚ system_policy_type_liststoreÚsystem_policy_type_comboboxr ZEnforcing_button_defaultZPermissive_button_defaultZDisabled_button_defaultZenable_unconfinedZdisable_unconfinedZenable_permissiveZdisable_permissiveZ
enable_ptraceZdisable_ptraceÚ help_windowZ
help_textvÚ info_textÚ
help_imageÚforward_buttonÚ back_buttonÚ
update_windowÚupdate_treeviewZUpdate_treestoreÚ apply_buttonZ
Update_buttonZ
Add_buttonZ
Delete_buttonÚfiles_path_entryÚnetwork_ports_entryÚfiles_popup_windowÚnetwork_popup_windowZ
Network_labelZ files_labelZmake_path_recursiveZfiles_type_combo_storeZfiles_class_combo_storeÚfiles_type_comboboxÚfiles_class_comboboxÚfiles_mls_labelÚfiles_mls_entryZAdvanced_text_filesZcancel_delete_filesZ
tcp_buttonZ
udp_buttonZnetwork_type_combo_storeZnetwork_type_comboboxÚnetwork_mls_labelÚnetwork_mls_entryZAdvanced_text_networkZcancel_network_deleteZShow_mislabeled_filesÚmislabeled_files_labelÚ
warning_filesZ
Modify_buttonÚfix_label_windowÚfixlabel_labelÚfix_label_cancelÚfiles_delete_windowÚfiles_delete_treeviewÚfiles_delete_liststoreÚnetwork_delete_windowÚnetwork_delete_treeviewÚnetwork_delete_liststoreÚ progress_barZExecutable_files_treeviewÚexecutable_files_filterZExecutable_files_tabZexecutable_files_treestoreZ files_buttonZWritable_files_treeviewZwritable_files_treestoreÚwritable_files_filterZWritable_files_tabZApplication_files_treeviewÚapplication_files_filterZApplication_files_tabZapplication_files_treestoreZnetwork_buttonZoutbound_treeviewÚnetwork_out_liststoreÚnetwork_out_filterÚnetwork_out_tabZinbound_treeviewÚnetwork_in_liststoreÚnetwork_in_filterÚnetwork_in_tabZBoolean_treeviewÚboolean_liststoreÚboolean_filterZbooleans_more_detail_windowZ booleans_more_detail_treeviewZ booleans_more_detail_liststoreZBooleans_buttonÚtransitions_into_treeviewÚtransitions_into_liststoreÚtransitions_into_filterZTransitions_into_tabZTransitions_buttonÚtransitions_from_treeviewÚtransitions_from_treestoreÚtransitions_from_filterZTransitions_from_tabZfile_transitions_treeviewZfile_transitions_liststoreZfile_transitions_filterZfile_transitionsZ combobox_orgÚapplication_liststoreÚcompletion_entryÚentrycompletion_objZShow_modified_only_toggleZEnforcing_labelZEnforcing_buttonZPermissive_buttonÚ
status_barzSELinux statusÚ filter_entryÚ
filter_boxÚadd_modify_delete_boxZactivateZfiles_toggle_deleteZtoggledZfile_equiv_toggle_delete1Zuser_toggle_deleteZlogin_toggle_deleteZnetwork_toggle_deleteZ
toggle_updateZfiles_inner_notebookZnetwork_inner_notebookZtransitions_inner_notebookÚ loading_guiZhttpd_tZabrt_t)Úkeyz%s is not a valid domain)AZon_combo_button_clickedZon_disable_ptrace_toggledZ%on_entrycompletion_obj_match_selectedZon_filter_changedZ"on_save_changes_file_equiv_clickedZ on_save_changes_login_clickedZ on_save_changes_user_clickedZ on_save_changes_files_clickedZ on_save_changes_network_clickedZ)on_Advanced_text_files_button_press_eventZitem_in_tree_selectedZ2on_Application_file_types_treeview_configure_eventÚon_save_delete_clickedZ)on_moreTypes_treeview_files_row_activatedZ on_retry_button_files_clickedZ on_make_path_recursive_toggledZ&on_files_path_entry_button_press_eventZon_files_path_entry_changedZ on_select_type_files_clickedZon_choose_fileZon_Enforcing_button_toggledZon_confirmation_closeZon_column_clickedZ
on_tab_switchZ on_file_equiv_button_clickedz on_app/system_button_clickedzon_app/users_button_clickedÚ on_show_advanced_search_windowZ on_Show_mislabeled_files_toggledZ on_Browse_button_files_clickedZon_cancel_popup_clickedZon_treeview_cursor_changedZ on_login_seuser_combobox_changedZ on_user_roles_combobox_changedZ on_cancel_button_browse_clickedZon_apply_button_clickedZon_Revert_button_clickedZon_Update_button_clickedZ on_advanced_filter_entry_changedZ)on_advanced_search_treeview_row_activatedZ!on_Select_advanced_search_clickedZ!on_info_button_button_press_eventZon_back_button_clickedZon_forward_button_clickedZ#on_Boolean_treeview_columns_changedZon_completion_entry_changedZon_Add_button_clickedZon_Delete_button_clickedZon_Modify_button_clickedZ on_Show_modified_only_toggledZ on_cancel_button_config_clickedZon_Import_button_clickedZon_Export_button_clickedZ on_enable_unconfined_toggledZ on_enable_permissive_toggledZ&on_system_policy_type_combobox_changedZ#on_Enforcing_button_default_toggledZ$on_Permissive_button_default_toggledZ"on_Disabled_button_default_toggledZ on_Relabel_button_toggled_cbZ%on_advanced_system_button_press_eventZ on_files_type_combobox_changedZon_filter_row_changedZon_button_toggledZ
gtk_main_quitr (o Ú finish_initZ
advanced_initÚ
START_PAGEÚopager ÚdbusÚ
customizedÚ
exceptionsÚ
DBusExceptionÚprintÚquitÚinit_curÚ applicationÚ
filter_txtr ZBuilderÚ sysconfigZget_pathÚ code_pathZ
add_from_fileZ
get_objectr) ÚwindowÚmain_selection_popoverr* r+ Ú
revert_buttonr ZCursorZ
CursorTypeZWATCHÚ busy_cursorZLEFT_PTRÚ ready_cursorÚselinuxÚselinux_getpolicytypeÚ initialtypeÚ
current_popupÚ
import_exportÚ clear_entryÚ files_addÚ network_addÚmislabeled_filesZ all_domainsZinstalled_listZpreviously_modifiedÚ file_dialogr, r- Z
invalid_entryr. Úadvanced_search_filterZset_visible_funcÚfilter_the_dataZadvanced_search_sortr/ r0 Zadvanced_searchÚ login_labelr1 Úlogin_seuser_combolistr2 r3 r4 Úlogin_radio_buttonr5 r6 Zset_sort_column_idZSortTypeZ ASCENDINGr7 r8 r9 r: r; Úuser_radio_buttonr< r= r> r? Úuser_roles_combolistÚ
user_labelr@ rA rB rC Z
user_comboboxrD rE rF rG rH Úfile_equiv_radio_buttonrI rJ rK Zfile_equiv_treefilterrL rM rN Úsystem_radio_buttonÚlockdown_radio_buttonZ systems_boxÚrelabel_buttonÚrelabel_button_norO rP Úsystem_policy_labelrQ rR rS Úmore_types_files_liststoreÚmoreTypes_treeviewrT rU Z policy_listÚpopulate_system_policyÚ set_visibleÚenforcing_button_defaultÚpermissive_button_defaultÚdisabled_button_defaultÚ initialize_system_default_modeÚenable_unconfined_buttonÚdisable_unconfined_buttonÚenable_permissive_buttonÚdisable_permissive_buttonZenable_ptrace_buttonÚdisable_ptrace_buttonrV Ú help_textrW rX rY rZ r[ r\ Úupdate_treestorer] Ú
update_buttonÚ
add_buttonÚ
delete_buttonr^ r_ r` ra Úpopup_network_labelÚpopup_files_labelÚrecursive_path_toggleÚfiles_type_combolistÚfiles_class_combolistrb rc rd re Úadvanced_text_filesZfiles_cancel_buttonÚnetwork_tcp_buttonÚnetwork_udp_buttonÚnetwork_port_type_combolistÚnetwork_port_type_comboboxrf rg Úadvanced_text_networkZnetwork_cancel_buttonÚshow_mislabeled_files_onlyrh ri Ú
modify_buttonÚ
set_sensitiverj rk rl rm rn ro rp rq rr rs Úexecutable_files_treeviewrt Úexecutable_files_tabZget_tooltip_textZ executable_files_tab_tooltip_txtÚexecutable_files_liststoreÚfiles_radio_buttonZfiles_button_tooltip_txtÚwritable_files_treeviewÚwritable_files_liststoreru Úwritable_files_tabZ writable_files_tab_tooltip_txtÚapplication_files_treeviewrv Úapplication_files_tabZ!application_files_tab_tooltip_txtÚapplication_files_liststoreÚnetwork_radio_buttonZnetwork_button_tooltip_txtÚnetwork_out_treeviewrw rx ry Znetwork_out_tab_tooltip_txtÚnetwork_in_treeviewrz r{ r| Znetwork_in_tab_tooltip_txtÚboolean_treeviewr} r~ Úboolean_more_detail_windowZ boolean_more_detail_treeviewÚ!boolean_more_detail_tree_data_setÚboolean_radio_buttonÚ
active_buttonZboolean_button_tooltip_txtr r€ r Útransitions_into_tabZ transitions_into_tab_tooltip_txtÚtransitions_radio_buttonZ transitions_button_tooltip_txtr‚ rƒ r„ Útransitions_from_tabZ transitions_from_tab_tooltip_txtÚtransitions_file_treeviewÚtransitions_file_liststoreZtransitions_file_filterÚtransitions_file_tabZ transitions_file_tab_tooltip_txtZ
combobox_menur… r† r‡ Zset_minimum_key_lengthZset_text_columnZset_match_funcÚ
match_funcZset_completionZset_icon_from_stockZ
STOCK_FINDÚshow_modified_onlyÚcurrent_status_labelÚcurrent_status_enforcingÚcurrent_status_permissiverˆ Zget_context_idÚ
context_idr‰ rŠ r‹ ÚcellZdel_cell_filesÚconnectÚon_toggle_updateZdel_cell_files_equivZ
del_cell_userZdel_cell_loginZdel_cell_networkZ update_cellÚinner_notebook_filesÚinner_notebook_networkÚinner_notebook_transitionsZ all_entriesÚ on_toggleZloadingÚappendÚsepolicyZget_all_domainsÚsortÚstrÚlowerÚerrorr
ÚshowÚlenZget_init_entrypoints_strÚ
combo_box_addÚfloatZ
percentageZ set_fractionZset_pulse_stepÚ idle_funcÚgetZfind_entrypoint_pathÚhideZ set_modelÚopen_combo_menuÚon_disable_ptraceÚset_application_labelÚget_filter_dataÚupdate_to_file_equivÚupdate_to_loginÚupdate_to_userÚupdate_to_filesÚupdate_to_networkÚreveal_advancedÚcursor_changedÚ resize_wraprŽ Úpopulate_type_comboÚinvalid_entry_retryÚrecursive_pathÚhighlight_entry_textÚautofill_add_files_entryÚselect_type_moreÚon_browse_selectÚ set_enforceÚconfirmation_closeÚcolumn_clickedÚ
clear_filtersÚshow_file_equiv_pageÚsystem_interfaceÚusers_interfacer Úshow_mislabeled_filesÚbrowse_for_filesÚ close_popupÚ login_seuser_combobox_changeÚuser_roles_combobox_changeÚclose_config_windowÚapply_changes_button_pressÚupdate_or_revert_changesÚget_advanced_filter_dataÚadvanced_item_selectedÚadvanced_item_button_pushÚon_help_buttonÚon_help_back_clickedÚon_help_forward_clickedÚresize_columnsÚapplication_selectedÚadd_button_clickedÚdelete_button_clickedÚmodify_button_clickedÚon_show_modified_onlyÚimport_config_showÚexport_config_showÚunconfined_toggleÚpermissive_toggleÚchange_default_policyÚchange_default_modeÚrelabel_on_rebootÚreveal_advanced_systemÚshow_more_typesÚ
tab_changeÚ closewindowÚ previously_modified_initializeZconnect_signalsr Ztimeout_add_secondsÚselinux_statusÚlockdown_initedÚstatusr Úshow_system_pageÚ set_labelÚset_textÚshow_applications_pageÚ clearbuttonsÚset_current_pageÚreinitÚmain)ÚselfÚappÚtestr” ÚeZbuilderZ
glade_filerŒ ÚpathÚlengthZentrypoint_dictÚdomainZ
entrypointÚdicr r r Ú__init__v s
"
»H
zSELinuxGui.__init__c C s i | _ tD ]}i | j |< q
d S ©N)Úcur_dictÚkeys)rR Úkr r r r™ r s zSELinuxGui.init_curc C sH d}| j D ]8}| j | D ](}||kr8| j | |= d S |d7 }qq
d S ©Nr r )r\ )rR ÚctrÚir^ Újr r r Ú
remove_curw s
zSELinuxGui.remove_curc C s zt ¡ | _W n ty& t| _Y n0 | jtkr„| j d¡ | j d¡ | j d¡ | j d¡ | j
| j t
dƒ¡ | j t¡ n | | j¡ tj d¡rª| j d¡ n | j d¡ t ¡ d }t ¡ d }|tkrâ| j d¡ |tkrö| j d¡ |tkr | j d¡ dS )NFzSystem Status: Disabledú
/.autorelabelTr ) r£ Zsecurity_getenforcerI ÚOSErrorr rõ rÚ rö r÷ r¿ rˆ Úpushrø r
rW rK Ú
DISABLED_TEXTÚset_enforce_textÚosrV Úexistsr¸ Ú
set_activer¹ r¤ Úselinux_getenforcemoder r rÀ rÁ )rR Z
policytypeÚmoder r r rG € s0
zSELinuxGui.selinux_statusc C s¸ | j r
d S | ¡ d| _ | j t d¡¡ i | _| j ¡ d¡D ]:}| ¡ }t
|ƒdk rZq@|d t
|ƒdkdœ| j|d < q@| j | jd d ¡ | j | jd
d ¡ |
¡ d S ) NTZ deny_ptraceÚ
r r )ÚpriorityÚDisabledr Ú
unconfinedrp Úpermissivedomains)rH Ú
wait_mouserÇ rk r£ Zsecurity_get_boolean_activeZ module_dictr“ Z
semodule_listÚsplitr rà rÅ Ú ready_mouse)rR ÚmÚmodr r r Ú
lockdown_initŸ s "zSELinuxGui.lockdown_initc G s¦ | ¡ }|sd S | jtkr4| ¡ dkr4| | j|¡ | jtkrp| j |d¡}| ¡ dkrp|rp| | j |d¡¡ | jt
kr¢| j |d¡}|r¢| j ¡ | j
|¡ d S )NZmore_detail_colr Zrestorecon_colr r )Úget_selected_iterr’ Ú
BOOLEANS_PAGEZget_nameÚdisplay_more_detailrž Ú
FILES_PAGEÚ liststoreÚ get_valueÚfix_mislabeledÚTRANSITIONS_PAGErë Zclickedr‰ rL )rR ÚtreeviewZtreepathZtreecolÚargsÚiterZvisibleZ bool_namer r r r" ° s
zSELinuxGui.column_clickedc C s t ¡ rt ¡ q d S r[ )r Zevents_pendingZmain_iteration©rR r r r r
Å s zSELinuxGui.idle_funcc C s< z$| j |d¡ |¡dkr W dS W dS ty6 Y n0 d S )Nr r TF)r… r~ ÚfindÚAttributeError)rR Z
completionZ
key_stringrƒ Z func_datar r r ró É s zSELinuxGui.match_funcc C sÎ | j | jdk¡ | j | jt| jƒd k ¡ z0td| j| j| j f dƒ}| ¡ }| ¡ W n t
yt d}Y n0 | j ¡ }|
|d| ji ¡ | j |¡ | j d| j| j| j f ¡ | | j¡ d S )Nr r z
%shelp/%s.txtÚrr& ÚAPPz
%shelp/%s.png)rZ rÚ Ú help_pagerY r Ú help_listÚopenr ÚreadÚcloseÚIOErrorrÈ Z
get_bufferrL rš Z
set_bufferrX Z
set_from_fileÚ
show_popuprV )rR ÚfdÚbufrÈ r r r Úhelp_show_pageÑ s
zSELinuxGui.help_show_pagec G s | j d8 _ | ¡ d S ©Nr ©r‰ r’ ©rR r‚ r r r r3 à s z SELinuxGui.on_help_back_clickedc G s | j d7 _ | ¡ d S r“ r” r• r r r r4 ä s z"SELinuxGui.on_help_forward_clickedc G s^ d| _ g | _| jtkr.| j tdƒ¡ dg| _| jtkrR| j tdƒ¡ g d¢| _| jtkrÆ| j
¡ }|t kr†| j tdƒ¡ dg| _|t kr¦| j tdƒ¡ d g| _|t
krÆ| j td
ƒ¡ d g| _| jtkr | j
¡ }|tkrü| j td ƒ¡ d
g| _|tkr | j tdƒ¡ dg| _| jtkrœ| j
¡ }|tkrX| j tdƒ¡ g d¢| _|tkrz| j tdƒ¡ dg| _|tkrœ| j tdƒ¡ dg| _| jtkrÂ| j tdƒ¡ g d¢| _| jtkrè| j tdƒ¡ g d¢| _| jtkr| j tdƒ¡ dd g| _| jtkr2| j td ƒ¡ d g| _| jtkrV| j td ƒ¡ d g| _| ¡ S )!Nr zHelp: Start PageÚstartzHelp: Booleans Page)ZbooleansZbooleans_toggledZ
booleans_moreZbooleans_more_showzHelp: Executable Files PageZ
files_execzHelp: Writable Files PageZ files_writez Help: Application Types PageZ files_appz'Help: Outbound Network Connections PageZports_outboundz&Help: Inbound Network Connections PageZ
ports_inboundz&Help: Transition from application Page)Ztransition_fromZtransition_from_booleanZtransition_from_boolean_1Ztransition_from_boolean_2z&Help: Transition into application PageZ
transition_toz&Help: Transition application file PageZtransition_filezHelp: Systems Page)ÚsystemZsystem_boot_modeZsystem_current_modeZ
system_exportZsystem_policy_typeZsystem_relabelzHelp: Lockdown Page)ZlockdownZlockdown_unconfinedZlockdown_permissiveZlockdown_ptracezHelp: Login Pager Z
login_defaultzHelp: SELinux User PageÚuserszHelp: File Equivalence PageZ
file_equiv) r‰ rŠ r’ r‘ rV Ú set_titler
rz r| rü Úget_current_pageÚEXE_PAGEÚ
WRITABLE_PAGEÚAPP_PAGEÚ NETWORK_PAGErý Ú
OUTBOUND_PAGEÚ INBOUND_PAGEr€ rþ ÚTRANSITIONS_FROM_PAGEÚTRANSITIONS_TO_PAGEÚTRANSITIONS_FILE_PAGEÚ SYSTEM_PAGEÚ
LOCKDOWN_PAGEÚ
LOGIN_PAGEÚ USER_PAGEÚFILE_EQUIV_PAGEr’ ©rR r‚ Úipager r r r2 è sl
zSELinuxGui.on_help_buttonc G s | j | j¡ | j ¡ d S r[ )rŸ Zset_relative_tor+ Zpopupr• r r r r
( s zSELinuxGui.open_combo_menuc G s
d| _ d S ©NT)r r• r r r r , s z SELinuxGui.set_application_labelc G s t |ƒ d S r[ ©r— r• r r r r / s zSELinuxGui.resize_wrapc C sH t ¡ d | _| jtkr | j| _| jtkr2| j| _| jtkrD| j | _d S r“ )
r£ rl Ú enforce_moder r¿ Úenforce_buttonr rÀ r rÁ r„ r r r r 2 s
z)SELinuxGui.initialize_system_default_modec C sr t tjt ¡ ddƒd }| ¡ d}|D ]B}| j ¡ }| j |d|¡ || j krd| j
|¡ || _ |d7 }q*|S )NT)Útopdownr r )
Únextri Úwalkr£ Z selinux_pathr rT r Ú set_valuer¥ rU rk Ú typeHistory)rR Útypesr` Úitemrƒ r r r r½ ; s
z!SELinuxGui.populate_system_policyc
G sª | j dkrdS zŠtd| ¡ ƒD ]v}zZ| ||¡}|du sH|du sH|d u rLW q | | j ¡dksp| ¡ | j ¡dkrzW W dS W q ttfy’ Y q 0 q W n Y n0 dS )Nr& Tr Fr )r› ÚrangeÚ
get_n_columnsr~ r… r r† Ú TypeError)rR Úlistrƒ r‚ ÚxÚvalr r r r® H s
$ zSELinuxGui.filter_the_datac
C s† | ¡ D ]x}|| D ]j\}}d |¡|f} | | jd v rh| jd | d dkrPq|| jd | d krhq| |d |¡||¡ qqd S )Nú,r Úactionú-dÚtypeú, )r] Újoinr\ Únetwork_initial_data_insert)
rR rS ÚnetdÚprotocolÚ directionÚmodelr^ ÚtÚportsZpkeyr r r Ú
net_update[ s zSELinuxGui.net_updatec C s¬ | ¡ t ¡ }| j ¡ |D ]€}| j ¡ }|| d rV| |¡}| || d ¡}n|}|| d }| j |d|¡ | j |d|¡ | j |d|| d ¡ q | ¡ d S )NÚmodifyÚequivr r r ) rs r Zget_file_equivrJ Úclearr Úmarkupr² ru )rR ZedictÚfrƒ ÚnamerË r r r Úfile_equiv_initializef s
z SELinuxGui.file_equiv_initializec C s¾ | ¡ | j ¡ t ¡ D ]–}| j ¡ }| j |dt|d ƒ¡ |d }d|v rZ| d¡ | j |dd |¡¡ | j |d|
dd ¡¡ | j |d
|
d d ¡¡ | j |d d
¡ q| ¡ d S )Nr rÏ ÚrolesZobject_rr rÀ r Úlevelr& r r¶ r T) rs r< rÌ r Úget_selinux_usersr r² r ÚremoverÁ r ru )rR Úurƒ rÑ r r r Úuser_initializex s
zSELinuxGui.user_initializec C s‚ | ¡ | j ¡ t ¡ D ]Z}| j ¡ }| j |d|d ¡ | j |d|d ¡ | j |d|d ¡ | j |dd¡ q| ¡ d S ) Nr rÏ r Úseuserr Úmlsr T)rs r6 rÌ r Zget_login_mappingsr r² ru )rR rÕ rƒ r r r Úlogin_initialize‡ s
zSELinuxGui.login_initializec C s| t jj|dddd}| ||dt| j¡ t jj|dddd}| ||dt| j¡ t jj|dddd}| ||dt| j¡ d S )NÚtcpÚ name_connectT©Z check_boolsÚ name_bindÚudp)r ÚnetworkÚget_network_connectrÉ rŸ rw r rz )rR rS rà r r r Únetwork_initialize’ s z SELinuxGui.network_initializec C sD | ¡ }| |d|¡ | |d|¡ | |d|¡ | |dd¡ d S )Nr r r r T©r r² )rR rÆ rÈ ZportTyperÄ rƒ r r r r š s
z&SELinuxGui.network_initial_data_insertc C s” d}| ¡ }|D ](}|d |kr0| |¡ d S |d7 }q| |d ¡}| |d¡tdƒkrp| |¡}|d }n| ¡ }| |d|¡ | |¡ d S )Nr r úMore...)Ú get_modelrk Úget_iterr~ r
Z
insert_beforer r² )rR Úcomboboxr» r` r} ra Úniterrƒ r r r Úcombo_set_active_text¡ s
z SELinuxGui.combo_set_active_textc C s2 | ¡ }| ¡ }|dk r d S | |¡}| |d¡S ©Nr )rä Ú
get_activerå r~ )rR ræ r} Úindexrƒ r r r Úcombo_get_active_text³ s
z SELinuxGui.combo_get_active_textc C s: |d u r d S | j ¡ }| j |d|¡ | j |d|¡ d S r_ )r… r r² )rR r» Úval1rƒ r r r r » s
zSELinuxGui.combo_box_addc G sN | j ¡ }| ¡ d }|d u r"d S | j |d¡}| | j|¡ | | j¡ d S ©Nr r ) r¼ Ú
get_selectionÚ get_selectedr» r~ rè rb rE rS )rR r‚ rS rƒ r r r r  s
zSELinuxGui.select_type_morec G sx | j ¡ }| ¡ \}}| |¡}| j |¡}| j |d¡}|d u rFd S | j d¡ | j
¡ | | j ¡ | j
|¡ d S ©Nr r& )r0 rï rð Úconvert_iter_to_child_iterr r… r~ r/ rL r. r r r* r† )rR r‚ ÚrowrÆ rƒ rS r r r r1 Ë s
z$SELinuxGui.advanced_item_button_pushc G s` | j |¡}| j |¡}| j |d¡}| j d¡ | j ¡ | | j
¡ | j |¡ | ¡ d S rñ )
r rå rò r… r~ r/ rL r. r r r* r† r6 )rR r rV r‚ rƒ rS r r r r0 Ø s
z!SELinuxGui.advanced_item_selectedc C s2 |r.t |ƒdkr.| jD ]}||d kr dS qdS ©Nr TF)r r… )rR rS Úitemsr r r Úfind_applicationâ s
zSELinuxGui.find_applicationc G s | j d¡ | j d¡ | j d¡ | j d¡ | j ¡ }| |¡sHd S | ¡ | j
d¡ | j d¡ | j
¡ | j ¡ | j ¡ | j ¡ | j ¡ | j ¡ | j ¡ | j ¡ | j ¡ z*|d dkrêt |¡}|säW d S || _W n tyþ Y n0 | ¡ | | j ¡ ¡ | ¡ | |¡ d| _!| "|¡ | #|¡ | $|¡ | %|¡ | &|¡ | '|¡ | (|¡ | j) *t+dƒ| ¡ | j, *t+dƒ| ¡ | j- *t+dƒ| ¡ | j. *t+d ƒ| ¡ | j/ *t+d
ƒ| ¡ | j0 *t+d ƒ| ¡ | j1 *t+d ƒ| ¡ | j2 *t+d
ƒ| ¡ | j3 4t+dƒ| ¡ | j5 4t+dƒ| ¡ | j6 4t+dƒ| ¡ | j3 *t+dƒ| ¡ | j5 *t+dƒ| ¡ | j6 *t+dƒ| ¡ | j7 *t+dƒ| ¡ || _| j8 4| j¡ | 9¡ d S )NFr& Tr ú/z(File path used to enter the '%s' domain.z)Files to which the '%s' domain can write.z6Network Ports to which the '%s' is allowed to connect.z5Network Ports to which the '%s' is allowed to listen.z File Types defined for the '%s'.zODisplay boolean information that can be used to modify the policy for the '%s'.z;Display file type information that can be used by the '%s'.zADisplay network ports to which the '%s' can connect or listen to.z!Application Transitions Into '%s'z!Application Transitions From '%s'zFile Transitions From '%s'zVExecutables which will transition to '%s', when executing selected domains entrypoint.zQExecutables which will transition to a different domain, when '%s' executes them.z4Files by '%s' with transitions to a different label.zADisplay applications that can transition into or out of the '%s'.):rØ r¾ rh ri r‰ rL r† Úget_textrö rM rË rÚ rÌ rÝ rÌ rz rw r} r€ rƒ rä rà rñ r Zget_init_transtyperš Ú
IndexErrorrs rF r“ r” rP Úboolean_initializer« Úexecutable_files_initializerá Úwritable_files_initializeÚtransitions_into_initializeÚtransitions_from_initializeÚ application_files_initializeÚ transitions_files_initializerÜ Úset_tooltip_textr
rá ry r| rã rë rÞ rå rí rK rï rò rî r+ ru )rR r‚ rS r r r r6 é sr
z SELinuxGui.application_selectedc C s t ¡ t ¡ | _t ¡ | _d S r[ )r rP Z
get_fcdictÚfcdictZget_local_file_pathsÚlocal_file_pathsr„ r r r rP + s
zSELinuxGui.reinitc C s† i | _ | d¡D ]î}| ¡ }t|ƒdkr,q|d dkr:q|d | j vrVi | j |d < |d dkr€d|d dki| j d |d < |d d
kr¬|d |d d
œ| j d
|d < |d dkrÒd|d i| j d |d < |d dkrd|d |d dœ| j d |d < |d dkr2d|d i| j d |d |d f< |d dkrf|d |d |d dœ| j d |d < |d dkrÖ|d dkr´d| j vr˜i | j d< d|d i| j d |d < n"d|d i| j d |d |d f< |d d krd |d d ki| j d |d < qd | j vrd S d | jfd | jffD ]2\}}|| j d v r&| | j d | d ¡ q&tD ]"}|| j vr^| j |i i¡ q^d S )!Nrn r r z-Dr Úactiver z-1r r r r )r× r¶ r$ r¿ r! Ús0)rÒ r¶ Úroler éþÿÿÿr# r )ÚmaskrÄ r¿ r z-er rË r" Úenabledr¾ rq rr )Ú cust_dictrt r rÄ rÆ rk r] Úupdate)rR r‘ ra ZrecZsemoduleÚbuttonr r r rF 0 sJ ""&
" z)SELinuxGui.previously_modified_initializec C s² t |¡| _| j ¡ D ]–}t| j| ƒdkr.q| j| d }| j| d D ]`}||f| jd v r˜| jd ||f d dkr|qJ|| jd ||f d kr˜qJ| | j|||¡ qJqd S )Nr r r r½ r¾ r¿ )r Zget_entrypointsÚ entrypointsr] r r\ Úfiles_initial_data_insertrÝ )rR rš ÚexeÚ
file_classrV r r r rû Z s z&SELinuxGui.executable_files_initializec C sB z(t |d¡d }t |¡d }||kW S ty< Y dS 0 d S )Nr r F)r£ Ú matchpathconÚ
getfileconre )rR rV ÚconÚcurr r r Ú
mislabeledh s
zSELinuxGui.mislabeledc C s | |¡sd S t |d¡d }t |¡d }d| _| |dd¡ | |dd¡ | |dd¡ | |d| d¡d ¡ | |d | d¡d ¡ d S )
Nr r Tr r r ú:r r )r r£ r r r« r² rt )rR ÚtreerV rƒ rç r r r r r Úset_mislabeledp s
zSELinuxGui.set_mislabeledc C sÈ t |¡| _| j ¡ D ]¬}t| j| ƒdk rD| | jd |tdƒ¡ q| j| d }| j| d D ]`}||f| jd v r®| jd ||f d dkr’q`|| jd ||f d kr®q`| | j|||¡ q`qd S ) Nr z all filesr r r r½ r¾ r¿ ) r Zget_writable_filesÚwritable_filesr] r r rà r
r\ )rR rš Úwriter rV r r r rü ~ s z$SELinuxGui.writable_files_initializec C sÄ | d ¡}|d u r tdƒ}d}nh||f| jv }t |¡D ],}| |¡}| |d|¡ | ||||¡ q8|rˆ| |¡}| |¡}| |¡}| |d|¡ | |d|¡ | |d|¡ | |d|¡ d S )NzMISSING FILE PATHFr r r r )r r
r r Z find_filer² r rÍ ) rR r} rV Z
selinux_labelr rƒ rÊ Úprç r r r r Ž s"
z$SELinuxGui.files_initial_data_insertc C s d| S )Nz %sr ©rR rÎ r r r rÍ ¢ s zSELinuxGui.markupc C s |r t ddt dd|¡¡S d S )Nz$r& z^)ÚreÚsubr r r r Úunmarkup¥ s zSELinuxGui.unmarkupc C s t |¡| _| j ¡ D ]¦}t| j| ƒdkr.q| j| d }| j| d D ]p}t j|| jd}||f| jd v r¨| jd ||f d dkrŒqJ|| jd ||f d kr¨qJ| | j |||¡ qJqd S )Nr r )rÍ r r½ r¾ r¿ )
r Zget_file_typesÚ
file_typesr] r Zget_descriptionrÍ r\ r rä )rR rš rS r rV Údescr r r rÿ ª s z'SELinuxGui.application_files_initializec C s, d}| j D ] }t| j | ƒdkr
dS q
dS rô )r\ r )rR ra r^ r r r Úmodified¹ s
zSELinuxGui.modifiedc C sZ t |¡D ]J}|D ]@\}}|| jd v r:| jd | d }t |¡}| |||¡ qq
d S )Nr r )r Z get_boolsr\ Ú boolean_descÚboolean_initial_data_insert)rR rš Úblistr r r! r r r rú À s
z SELinuxGui.boolean_initializec C sR | j ¡ }| j |d|¡ | j |d|¡ | j |d|¡ | j |dtdƒ¡ d S )Nr r r r rã )r} r r² r
)rR r» r! r rƒ r r r r$ È s
z&SELinuxGui.boolean_initial_data_insertc C s^ t |¡D ]N}d }d }d }d|v r*|d }d|v r:|d }d|v rJ|d }| |||¡ q
d S )Nr ÚtargetÚsource)r Zget_transitions_intoÚ$transitions_into_initial_data_insert)rR rš rº r Ú
executabler' r r r rý Ð s z&SELinuxGui.transitions_into_initializec C sd | j ¡ }|d kr0| j |dt|d d ¡ n| j |dd¡ | j |d|¡ | j |d|¡ d S )Nr r ÚDefaultr )r€ r r² r )rR r r) r' rƒ r r r r( Ý s
z/SELinuxGui.transitions_into_initial_data_insertc C s˜ t |¡D ]ˆ}d }d }d }d|v r*|d }d|v r:|d }d|v rJ|d }| |||¡ z&| j| d D ]}| |||¡ qhW q
ty Y q
0 q
d S )Nr r& Ú transtypeZregex)r Zget_transitionsÚ$transitions_from_initial_data_insertr ÚKeyError)rR rš rº r r) r+ Zexecutable_typer r r rþ ç s z&SELinuxGui.transitions_from_initializec C sì | j d ¡}|d kr6| j |dd¡ | j |dd¡ n’| j |¡}| j |dt|d d ¡ d}|d d rˆ| j |dtdƒ| ¡ n| j |dtd ƒ| ¡ | j |d|d d ¡ | j |dd
¡ | j |d|¡ | j |d |¡ d S ) Nr r* r Fr )zz r z:To disable this transition, go to the %sBoolean section%s.z9To enable this transition, go to the %sBoolean section%s.Tr )rƒ r r² r r
)rR r r) r+ rƒ rç rÍ r r r r, ù s z/SELinuxGui.transitions_from_initial_data_insertc C sF t |¡D ]6}d|v r |d }nd }| |d |d |d |¡ q
d S )NÚfilenamer& Úclassr+ )r Zget_file_transitionsÚ%transitions_files_initial_data_insert)rR rš ra r. r r r r s
z'SELinuxGui.transitions_files_initializec C sZ | j ¡ }| j |d|¡ | j |d|¡ | j |d|¡ |d krFd}| j |d|¡ d S )Nr r r Ú*r )rñ r r² )rR rV ÚtclassÚdestrÏ rƒ r r r r0 s
z0SELinuxGui.transitions_files_initial_data_insertc G s4 | ¡ d | _d | _d | _d | _| j d¡ | j ¡ | j
d¡ | j
d¡ | j
d¡ | j
d¡ | j ¡ r| j t¡ | j| _| j
d¡ | j ¡ r´| | j¡ | j
d¡ | j
| j¡ | j
| j¡ | j
| j¡ | j t¡ |d | jkr|d }n
| j ¡ }|tkr*| j| _t dƒ}n6|t krF| j | _t dƒ}n|t kr`| j | _t dƒ}| j! "t dƒ|| j#d œ ¡ | j$ "t d
ƒ|| j#d œ ¡ | j "t d ƒ|| j#d œ ¡ | j% ¡ rŽ| j &¡ | j
d¡ | j t'¡ |d | j(krü|d }n
| j( ¡ }|t)kr | j*| _t d ƒ}|t+kr:| j,| _t d
ƒ}| j! "t dƒ| j#|dœ ¡ | j$ "t dƒ| j#|dœ ¡ | j "t dƒ| j#|dœ ¡ | j- ¡ r | j t.¡ |d | j/krÀ|d }n
| j/ ¡ }|t0krÜ| j1| _|t2krî| j3| _|t4kr | j5| _| j6 ¡ r"| j t7¡ | j8 ¡ | j9 ¡ rL| :¡ | j t;¡ | j8 ¡ | j< ¡ r²| j t=¡ | j &¡ | j
d¡ | j>| _| j! "t dƒ¡ | j$ "t dƒ¡ | j "t dƒ¡ | j? ¡ r| j t@¡ | j &¡ | j
d¡ | jA| _| j! "t dƒ¡ | j$ "t dƒ¡ | j "t dƒ¡ | jB ¡ r~| j tC¡ | j &¡ | j
d¡ | jD| _| j! "t dƒ¡ | j$ "t dƒ¡ | j "t dƒ¡ | j ¡ | _E| jr$| j8 &¡ | j F¡ | _| j F¡ | _| j F¡ | _tGd| j H¡ ƒD ]D}| j I|¡}|rÐ| J¡ d }tK|tLjMƒrÐ| j N|| jOd ¡ qÐ| j P¡ Q¡ | j d¡ d S )NFTr r r) Úwritablerš z4Add new %(TYPE)s file path for '%(DOMAIN)s' domains.)ZTYPEZDOMAINz3Delete %(TYPE)s file paths for '%(DOMAIN)s' domain.zModify %(TYPE)s file path for '%(DOMAIN)s' domain. Only bolded items in the list can be selected, this indicates they were modified previously.rú z listen for inbound connectionszMAdd new port definition to which the '%(APP)s' domain is allowed to %(PERM)s.)rˆ ZPERMzVDelete modified port definitions to which the '%(APP)s' domain is allowed to %(PERM)s.zMModify port definitions to which the '%(APP)s' domain is allowed to %(PERM)s.z%Add new SELinux User/Role definition.z.Delete modified SELinux User/Role definitions.z7Modify selected modified SELinux User/Role definitions.z!Add new Login Mapping definition.z*Delete modified Login Mapping definitions.z3Modify selected modified Login Mapping definitions.z$Add new File Equivalence definition.z-Delete modified File Equivalence definitions.z“Modify selected modified File Equivalence definitions. Only bolded items in the list can be selected, this indicates they were modified previously.)Rr# r ÚtreesortÚ
treefilterr} rÙ rÚ r‹ r rô r¾ rØ rh ri rë rê r) rO rz rè rÞ r r« r| rü rš r› rÛ r
rœ rß r râ rË r rš rÌ rå r rž rý rŸ ræ r rç rî r€ rþ r¡ r‚ r¢ r r£ rð r¶ r¤ rŠ r· rx r¥ r² r§ r> r± r¦ r5 rµ r¨ rI r’ rä r¶ r· Z
get_columnZ get_cellsÚ
isinstancer ZCellRendererTextZ
set_sort_funcÚ stripsortrï Z unselect_all)rR r‚ rª Úcategoryrº Úcolrù r r r rD sÚ
zSELinuxGui.tab_changec C s: | ¡ \}}| | ||¡¡}| | ||¡¡}t||ƒS r[ )Zget_sort_column_idr r~ r ) rR rÆ Zrow1Zrow2Z user_dataZ sort_columnr
rí Zval2r r r r8 s zSELinuxGui.stripsortc C s’ | j |¡}| j |¡}| j ¡ | j tdƒ| j |d¡ ¡ t
| j | j |d¡¡}|D ]$}|
|d |d |d |d ¡ q\| | j¡ d S )NzBoolean %s Allow Rulesr r' r& r/ Zpermlist)r~ rå rò rê rÌ ré r™ r
r} r~ r Zget_boolean_rulesrš Údisplay_more_detail_initr )rR ÚwindowsrV Úitr% r r r r r{ £ s
"z SELinuxGui.display_more_detailc C s0 | j ¡ }| j |dd|||d |¡f ¡ d S )Nr zallow %s %s:%s { %s };ú )rê r r² rÁ )rR r' r& Z
class_typeZ
permissionrƒ r r r r; ® s
z#SELinuxGui.display_more_detail_initc G s” d| _ | jtkrJ| j tdƒ| j ¡ | j tdƒ| j ¡ | |¡ d S | jt
kr¼| j tdƒ| j ¡ | j tdƒ| j ¡ |
|¡ | j ¡ }|tkrª| j d¡ n | j d¡ d| _| jtkrö| j td ƒ¡ | j td
ƒ¡ | |¡ d| _| jtkr2| j td ƒ¡ | j td ƒ¡ | |¡ d| _| jtkrˆ| j d
¡ | j d
¡ | j tdƒ¡ | j tdƒ¡ d| _| | j ¡ | !¡ d S )NFzGAdd Network Port for %s. Ports will be created when update is applied.zAdd Network Port for %szMAdd File Labeling for %s. File labels will be created when update is applied.úAdd File Labeling for %szex: /usr/sbin/Foobarzex: /var/lib/FoobarTzGAdd Login Mapping. User Mapping will be created when Update is applied.zAdd Login MappingzQAdd SELinux User Role. SELinux user roles will be created when update is applied.zAdd SELinux Usersr& zMAdd File Equivalency Mapping. Mapping will be created when update is applied.z Add SELinux File Equivalency)"rÊ r’ rž rÍ rL r
rš ra r™ Úinit_network_dialogr| rÎ r` Úinit_files_dialogrü rš r› r^ r¨ r¦ r¯ r8 Úlogin_init_dialogr§ r´ r; Úuser_init_dialogr¨ rG rH rF rK r Ú new_updatesr© r r r r7 ² sB
z SELinuxGui.add_button_clickedc C s || _ | ¡ d S r[ )r¦ r )rR rž r r r r Û s zSELinuxGui.show_popupc G s | j ¡ | j d¡ dS r« )r¦ r rž rÚ r• r r r r) ß s
zSELinuxGui.close_popupc G sö d }| j r&| ¡ }|s&| j d¡ d S d| _| jtkr@| |¡ | jtkrZ| j
t dƒ| j ¡ | j
t dƒ| j ¡ d | _| |¡ d| _d}d}| j ¡ }|tkr | j |¡}|| _| j |d¡}| j
|¡ | j |d¡}|d krú| | j|¡ | j |d¡}|d kr | | j|¡ |t kr¢| j |¡}|| _| j |d¡}| j
|¡ | j |d¡} | d kr|| | j| ¡ | j |d¡}|d kr¢| | j|¡ |t krZ| j |¡}|| _| j! |d¡}| j
|¡ z&| j! |d¡}
|
"d ¡d "d
¡}
W n t#y Y n0 | j! |d¡} | d kr:| | j| ¡ |
d }|d krZ| | j|¡ | jt$krö| %|¡ | j&
| j' |d¡¡ | j(
| j' |d¡¡ | j)
| j' |d ¡¡ | | j*| j' |d¡¡ | j+
t d ƒ¡ | j, t d
ƒ¡ | -| j,¡ | jt.kr|| /|¡ | j0
| j1 |d¡¡ | j2
| j1 |d¡¡ | | j3| j1 |d¡¡ | j4
t dƒ¡ | j5 t dƒ¡ | -| j5¡ | jt6krò| j7
| 8| j9 |d¡¡¡ | j:
| 8| j9 |d¡¡¡ | j;
t dƒ¡ | j< t dƒ¡ d| _=| -| j<¡ d S )NFTzPModify File Labeling for %s. File labels will be created when update is applied.r? ÚModifyr r r zzr zUModify SELinux User Role. SELinux user roles will be modified when update is applied.zModify SELinux UserszLModify Login Mapping. Login Mapping will be modified when Update is applied.zModify Login MappingzPModify File Equivalency Mapping. Mapping will be created when update is applied.z Modify SELinux File Equivalency)>r ry rÙ rÚ rÊ r’ rž Ú modify_button_network_clickedr| rÎ rL r
rš r` r™ Údelete_old_itemrA rü rš r› rt rò rÝ r~ r^ rè rb rc rœ ru rà r rv rä rt r† r§ rC r@ r< rB rC r? r´ r; r r¦ rB r2 r6 r4 r1 r¯ r8 r¨ rG r rJ rH rF rK r¨ ) rR r‚ rƒ Ú operationrØ rª rV Úftyper2 r¿ Zget_typer r r r9 ä s
z SELinuxGui.modify_button_clickedc G sB | j |¡}| j |d¡}| | j|¡ | | j¡ | j ¡ d S ré ) r» rå r~ rè rb r r` rS r )rR r Úlocr‚ rƒ rI r r r r = s
z SELinuxGui.populate_type_comboc C s. |d kr d S | d¡r d}nd}| |¡d S )NZ _script_tZ_tr )Úendswithrt )rR rX Z
split_charr r r Ú strip_domainD s
zSELinuxGui.strip_domainc C s |D ]}| |¡r dS qdS )NTF)Ú
startswith)rR r¿ Ú exclude_listrU r r r Ú exclude_typeM s
zSELinuxGui.exclude_typec G s g }| j d¡ | | j¡ | j ¡ }| j ¡ | j ¡ | | j
¡}| j D ]B}|d |¡rL|d | j
krL|d d¡sL|
| |d ¡¡ qL| j ¡ zÎtjD ]$}| j
¡ }| j |dtj| ¡ q¤|tkrL| jd krL| j ¡ D ]D}| |¡r| j
¡ }| j |d|¡ | j
¡ }| j |d|¡ qê| j d¡ | j d¡ n |tkrÜ| jd krÜ| j ¡ D ]`} | |¡r°| | |¡s°| | jv r°| j
¡ }| j |d| ¡ | j
¡ }| j |d| ¡ ql| j d¡ nŒ|tkrh| jd krht ¡ D ]`}
|
|¡rú|
|¡r>| |
|¡s>| j
¡ }| j |d|
¡ | j
¡ }| j |d|
¡ qú| j d¡ W n t y† t dƒ Y n0 | j d¡ | j d¡ | j
¡ }| j |dt!dƒ¡ d S ) NTr Z httpd_sysr Fr r rã )"rc rÚ r r` rü rš rÐ rÌ rÑ rL rš r… rM r r» r Ú
file_type_strr² r› r
r] rk rœ r rO r r Zget_all_file_typesr† r— rb re rL r
) rR r‚ rN rª ZcompareÚdÚfilesrƒ r r rS r r r rA S s`
*
&
z SELinuxGui.init_files_dialogc G sî | ¡ }|s | j d¡ d S | j tdƒ| j ¡ | j tdƒ| j ¡ d | _ |
|¡ d}d}d| _ | ¡ }| j
|d¡}| j |¡ | j
|d¡}|dkr¬| j d¡ n|d krÀ| j d¡ | j
|d
¡}|d krä| | j|¡ || _ d S ) NFzJModify Network Port for %s. Ports will be created when update is applied.zModify Network Port for %srE r Tr rÚ rÞ r )ry rÙ rÚ rÍ rL r
rš ra r™ rG r@ rÊ r} r~ r_ rÓ rk rÔ rè rÖ )rR r‚ rƒ rH rØ r rÄ r¿ r r r rF ˆ s.
z(SELinuxGui.modify_button_network_clickedc G sŒ | | j¡ | j ¡ }| j ¡ | j d¡ z,|tkrPt j
j | j dddd}n8|t
krˆt j
j | j dddd}|t j
j | j dddd7 }g }| ¡ D ]<}|| D ].\}}||dd g vr | d
¡rÄq | |¡ q q”| ¡ | | j ¡}|d d krþ|d d … }|d
}d} d}
|D ]8}| |¡r&| }
| j ¡ } | j | d|¡ | d7 } q| j |
¡ W n tyn Y n0 | j d¡ | j d¡ d S )Nr& rÚ rÛ TrÜ rÝ rÞ Zport_tZunreserved_port_tZ_typer rQ r
r r r )r ra rý rš rÕ rÌ r_ rL rŸ r rß rà rš r r] rK r r rL rM r² rÖ rk r† rÓ rg ) rR r‚ rª rà Z
port_typesr^ rÇ rÈ Z short_domainr` Úfoundrƒ r r r r@ ¢ sF
z SELinuxGui.init_network_dialogc G sJ | |¡}| j ¡ dkrFt ¡ D ]$}||d kr | j | dd¡¡ q d S ©Nr& rÏ r¶ )rì r4 rø r rÓ rL r )rR Úcombor‚ r× rÕ r r r r* Í s
z'SELinuxGui.login_seuser_combobox_changec G sJ | |¡}| j ¡ dkrFt ¡ D ]$}||d kr | j | dd¡¡ q d S rT )rì rC rø r Ú
get_all_rolesrL r )rR rU r‚ ZserolerÕ r r r r+ Ô s
z%SELinuxGui.user_roles_combobox_changec C sN d }| j sd S | j ¡ }|s d S | ¡ \}}|rJ| |¡}|rJ| j |¡}|S r[ )r rï rð rò r6 )rR rƒ ró r5 r r r ry Û s
z SELinuxGui.get_selected_iterc G sb | j d¡ | ¡ }|d kr,| j d¡ d S | j| rD| j| d sHd S | j | j| d ¡ d S )NFr )rÙ rÚ ry r} )rR r‚ rƒ r r r r é s zSELinuxGui.cursor_changedc G sj | | j¡ | j ¡ t ¡ }| ¡ |D ]"}| j ¡ }| j |dt |ƒ¡ q*| j
d¡ | j d¡ d S ©Nr r& )
r r8 r° rÌ r Z
get_all_usersr r r² r r2 rL r4 )rR r‚ r˜ rÕ rƒ r r r rB ó s
z SELinuxGui.login_init_dialogc G sj | | j¡ | j ¡ t ¡ }| ¡ |D ]"}| j ¡ }| j |dt |ƒ¡ q*| j
d¡ | j d¡ d S rW )
r r; r³ rÌ r rV r r r² r r@ rL rC )rR r‚ rÑ r‡ rƒ r r r rC þ s
zSELinuxGui.user_init_dialogc
C sj | j rfd| ¡ }| ¡ z| j |¡ W n2 tjjy\ } z| |¡ W Y d }~n
d }~0 0 | ¡ d S )Nzboolean -m -%d deny_ptrace) r rê rs r“ Úsemanager• r– r ru )rR Ú checkbuttonÚ
update_bufferrU r r r r s z SELinuxGui.on_disable_ptracec s‚ | j ¡ ‰ ‡ fdd„}g }| jtkrd| ¡ s8| | j¡S | j D ]$}|d | jd v r>| ||ƒ¡ q>| jt krì| j
¡ }| ¡ s¼|t kr”|
| j¡S |tkr¨| | j¡S |tkr¼| | j¡S | j D ](}|d |d f| jd v rÂ| |¡ qÂ| jtkrF| ¡ s| | j¡S | j D ]0}|d |d f| jd v r| ||ƒ¡ q| jtkr˜| ¡ d ksh| ¡ S | j D ](}|d | jd
v rn| ||ƒ¡ qn| jtkræ| ¡ s¶| ¡ S | j D ](}|d | jd v r¼| ||ƒ¡ q¼| jtkr8| ¡ d ks| ¡ S | j D ](}|d | jd v r| ||ƒ¡ q| j ¡ |D ]6}| j ¡ }tdˆ ƒD ]}| j |||| ¡ q^qFd S )
Nc s& g }t dˆ ƒD ]}| | | ¡ q|S ré )r¶ r )ró Úlra ©rW r r Údup_row s z1SELinuxGui.on_show_modified_only..dup_rowr r r r r r Tr r! r ) r} r· r’ rz rê rú rš r
r r| rü rš r› rû rœ rü r rÿ rž rá r¨ rÐ r§ rÖ r¦ rÙ rÌ r¶ r² )rR rY r] Z append_listró rª rƒ ra r r\ r r: sd
z SELinuxGui.on_show_modified_onlyc C s8 | d ¡}| |d|¡ | |d|¡ | |d|¡ d S ©Nr r r râ ) rR r rS rª rH rV ZfclassrI rƒ r r r Ú init_modified_files_liststoreW s
z(SELinuxGui.init_modified_files_liststorec G s t dƒ d S )Nz restore to default clicked...r¬ r• r r r Úrestore_to_default] s z SELinuxGui.restore_to_defaultc G s( | | j¡ | j d¡ | j d¡ d S r« )rE r, r` rÚ ra r• r r r r ` s z SELinuxGui.invalid_entry_retryc C sV t |ƒdks|d dkrR| j ¡ | j d¡ | j d¡ | j tdƒ| ¡ dS dS )Nr r÷ FzAThe entry '%s' is not a valid path. Paths must begin with a '/'.T) r r, r r` rÚ ra r- rL r
)rR Z
insert_txtr r r Úerror_check_filese s
z SELinuxGui.error_check_filesc C sl z t |ƒ}|dk s|dkr t‚W nF tyf | j ¡ | j d¡ | j d¡ | j t dƒ¡ Y dS 0 dS )Nr i Fz'Port number must be between 1 and 65536T)
ÚintÚ
ValueErrorr, r r` rÚ ra r- rL r
)rR r Zpnumr r r Úerror_check_networkn s
z SELinuxGui.error_check_networkc G s2 | j r.| | j¡tdƒkr.| j ¡ | j ¡ d S )Nrã )r rì rb r
r` r rS r r• r r r rC { s
zSELinuxGui.show_more_typesc G s | ¡ | | j¡}| j ¡ }| j ¡ }| jr®| ¡ }| j |d¡}| j |d¡}| j |d¡}| j
|d|¡ | j
|d|¡ | j
|d|¡ d|||||dœ| j d |< n"| j
d ¡}d||dœ| j d |< | j
|d|¡ | j
|d|¡ | j
|d|¡ | ¡ d S ) Nr r r ú-m)r½ r¶ r× ÚoldrangeÚ oldseuserÚoldnamer ú-a)r½ r¶ r× )r) rì r1 r4 rø r2 rÊ ry r6 r~ r} r² r\ r rD ) rR r‚ r× Ú mls_rangerÏ rƒ rh rg rf r r r r s&
zSELinuxGui.update_to_loginc G sj | ¡ | | j¡}| j ¡ }| j ¡ }| j ¡ }| jrÚ| ¡ }| j
|d¡}| j
|d¡}| j
|d¡} | j
|d¡}
| j |d|¡ | j |d|¡ | j |d| ¡ | j |d|
¡ d||||
| ||dœ| j
d |< nD| j d ¡}|sð|r
d|||d œ| j
d |< nd|d
œ| j
d |< | j |d|¡ | j |d|¡ | j |d|¡ | j |d|¡ | ¡ d S ) Nr r r r re )r½ r¶ rÒ r rf ÚoldlevelÚoldrolesrh r! ri )r½ r¶ rÒ r )r½ r )r) rì r? rB rø rC r@ rÊ ry r< r~ r} r² r\ r rD ) rR r‚ rÑ rÒ rj rÏ rƒ rh rl rk rf r r r r ™ s2
"
zSELinuxGui.update_to_userc G s¼ | ¡ | j ¡ }| j ¡ }| jrl| ¡ }| | j |d¡¡}| | j |d¡¡}d|||dœ| j d |< n | j
d ¡}d|dœ| j d |< | j |d| |¡¡ | j |d| |¡¡ d S )Nr r re )r½ ÚsrcÚoldsrcÚolddestr ri ©r½ rm ) r) rH rø rG rÊ ry r r} r² r\ r rÍ )rR r‚ r3 rm rƒ ro rn r r r r ¸ s
z SELinuxGui.update_to_file_equivc
G s0 | ¡ d| _| j ¡ }| |¡r&d S | | j¡}| j ¡ }| | j¡}| j r¬|
¡ }| | j
|d¡¡}| | j |d¡¡}| j
|d¡} d|||| dœ| jd ||f< n$| j d ¡}d|d œ| jd ||f< | j |d| |¡¡ | j |d| |¡¡ | j |d| |¡¡ d
| _| j d
¡ | ¡ d S ) NTr r r re )r½ r¿ ÚoldtypeÚoldpathZoldclassr ri ©r½ r¿ F)r) r© r^ rø ra rì rb re rc rÊ ry Úunmarkr} r~ r² r\ r rÍ rÏ rk rD )
rR r‚ rV ÚsetyperØ r2 rƒ rr Ú oldsetypeZ oldtclassr r r r Ç s,
zSELinuxGui.update_to_filesc
G s2 d| _ | j ¡ }| |¡r d S | j ¡ r.d}nd}| | j¡}| j ¡ }| j r´|
¡ }| | j
|d¡¡}| | j
|d¡¡}| | j |d¡¡} d||| ||dœ| jd ||f< n&| j d ¡}d
||d œ| jd ||f< | j |d|¡ | j |d|¡ | j |d|¡ d | _ | j ¡ | j d¡ | ¡ d S )
NTrÚ rÞ r r r re )r½ r¿ rØ rq Ú oldprotocolÚoldportsr ri )r½ r¿ rØ F)rª r_ rø rd rÓ rê rì rÖ rg rÊ ry rt r} r~ r² r\ r ra r rž rÚ rD )
rR r‚ rÈ rÄ ru rØ rƒ rx rw rv r r r r ä s0
"
z SELinuxGui.update_to_networkc G sè d}| j d¡ | jtkr–| j ¡ | jd }|D ]R\}}|||f d }| j ¡ }| j |d|¡ | j |d|¡ | j |d|¡ q2| | j
¡ d S | jt kr$| j ¡ | jd }|D ]X\} }
|| |
f d }| j ¡ }| j |d| ¡ | j |d|¡ | j |dt
j|
¡ qº| | j¡ d S | jtkrÖ| j ¡ | jd } | D ]|} | | d
}
| | d d ¡}| | d
d ¡}| j ¡ }| j |d| ¡ | j |d|
¡ | j |d|¡ | j |d|¡ qH| | j¡ d S | jtkrh| j ¡ | jd }|D ]\}|| d }|| d d ¡}| j ¡ }| j |d|¡ | j |d|¡ | j |d|¡ qú| | j¡ d S | jtkrä| j ¡ | jD ]N}|d r„| j ¡ }| j |d| |d ¡¡ | j |d| |d ¡¡ q„| | j¡ d S d S )NZAddFr r¿ r r r r r! r r¶ r& rÒ r r r× r ) rž rÚ r’ rž rr rÌ r
r r² r rp r| ro r rP rm r§ rD r rE r¦ r9 r: r¨ rL rJ r rM )rR r‚ rH Z port_dictrÈ rÄ ru rƒ Z
fcontext_dictrV r2 Z user_dictr! rÑ rØ rÒ Z
login_dictr r× rõ r r r r8 sv
z SELinuxGui.delete_button_clickedc G sd | ¡ | jtkrJ| jD ]0}|d rd|d dœ| jd |d |d f< q| jtkr| jD ]4}|d rZd|d dœ| jd |d t|d f< qZ| jtkrÐ| j D ].}|d r d|d |d d
œ| jd |d < q | jt
kr| j D ]4}|d râd|d |d |d d œ| jd
|d < qâ| jt krX| j
D ],}|d r*d|d dœ| jd |d < q*| ¡ d S )Nr r¾ r rs r r r r r )r½ r r¶ r! )r½ r r× r¶ r rp r )r) r’ rž rr r\ r| ro Úreverse_file_type_strr§ rD r¦ r9 r¨ rL rD ©rR r‚ Údeleter r r rŽ D s,
&
*
$
*
z!SELinuxGui.on_save_delete_clickedc G s( | j D ] }t|d |d |d ƒ qd S r^ )ro r— rz r r r Ú!on_save_delete_file_equiv_clicked\ s
z,SELinuxGui.on_save_delete_file_equiv_clickedc C s || d || d< d S ré r )rR rù rV rÆ r r r rû ` s zSELinuxGui.on_toggle_updatec C sT d}|D ]F}|d |d krF|d |d krF| |¡}| |¡ d S |d7 }qd S )Nr r r )rå rÔ )rR r} r r` rõ rƒ r r r Ú ipage_deletec s
zSELinuxGui.ipage_deletec C sŠ |sd S | j |¡}| j |¡}| |d¡}| |d| |d¡ ¡ | |d¡}|| jd v rl| jd |= nd|i| jd |< | ¡ d S )Nr r r r )r~ rå rò r~ r² r\ rD )rR rù rV rÆ rƒ rÏ r r r r rÿ l s zSELinuxGui.on_togglec G s | ¡ | _| j ¡ d S r[ )rø r› r Úrefilter)rR Úentryr‚ r r r r/ z s
z#SELinuxGui.get_advanced_filter_datac G s | ¡ | _| j ¡ d S r[ )rø r› r6 r~ )rR r< r‚ r r r r ~ s
zSELinuxGui.get_filter_datac G s$ d| _ | j ¡ | jd D ]®}| jd | d }| j d ¡}| j |dd¡ | j |dt |¡¡ | j |dt| jd | d ¡ | j |dd¡ | j |¡}| j |dt d ƒ| ¡ | j |dd
¡ q| jd D ]~\}}| jd ||f d }| jd ||f d }| j d ¡}| j |dd¡ | j |d|¡ | j |dd¡ |d
krj| j |dt dƒ| j
¡ |dkrŽ| j |dt dƒ| j
¡ |dkr²| j |dt dƒ| j
¡ | j |¡}| j |dd
¡ | j |dt dƒ| ¡ | j |¡}| j |dd
¡ | j |dt dƒtj | ¡ | j |¡}| j |dd
¡ | j |dt dƒ| ¡ qÔ| jd D ]z\} }
| jd | |
f d }| j d ¡}| j |dd¡ | j |d|¡ | j |dd¡ |d
krà| j |dt dƒ| j
¡ |dkr| j |dt dƒ| j
¡ |dkr(| j |dt dƒ| j
¡ | j |¡}| j |dt dƒ| ¡ | j |dd
¡ | j |¡}| j |dt dƒ|
¡ | j |dd
¡ | jd | |
f d }| j |¡}| j |dd
¡ | j |dt dƒ| ¡ q`| jd D ]r} | jd | d }| j d ¡}| j |dd¡ | j |d|¡ | j |dd¡ |d
krZ| j |dt d ƒ¡ |dkrx| j |dt d ƒ¡ |dkr–| j |dt d ƒ¡ | j |¡}| j |dt d ƒ| ¡ | j |dd
¡ | j |¡}| j |dd
¡ | jd | d! } | j |dt d"ƒ| ¡ | jd | d#d$¡}
| j |¡}| j |dd
¡ | j |dt d%ƒ|
¡ qè| jd& D ]r}| jd& | d }| j d ¡}| j |dd¡ | j |d|¡ | j |dd¡ |d
krÚ| j |dt d'ƒ¡ |dkrø| j |dt d(ƒ¡ |dkr| j |dt d)ƒ¡ | j |¡}| j |dd
¡ | j |dt d*ƒ| ¡ | j |¡}| j |dd
¡ | jd& | d+ }| j |dt d,ƒ| ¡ | jd& | d#d$¡}
| j |¡}| j |dd
¡ | j |dt d%ƒ|
¡ qh| jd- D ](}| jd- | d }| j d ¡}| j |dd¡ | j |d|¡ | j |dd¡ |d
krZ| j |dt d.ƒ¡ |dkrx| j |dt d/ƒ¡ |dkr–| j |dt d0ƒ¡ | j |¡}| j |dd
¡ | j |dt d1ƒ| ¡ | j |¡}| j |dd
¡ | jd- | d2 }| j |dt d3ƒ| ¡ qè|
| j¡ d S )4NTr r½ r r r r r zSELinux name: %sFr r¿ ri zAdd file labeling for %sr¾ zDelete file labeling for %sre zModify file labeling for %sz
File path: %szFile class: %szSELinux file type: %sr zAdd ports for %szDelete ports for %szModify ports for %szNetwork ports: %szNetwork protocol: %sr! zAdd userz Delete userz Modify userzSELinux User : %sr z Roles: %sr¶ r& zMLS/MCS Range: %sr zAdd login mappingzDelete login mappingzModify login mappingzLogin Name : %sr× zSELinux User: %sr zAdd file equiv labeling.zDelete file equiv labeling.zModify file equiv labeling.zFile path : %srm zEquivalence: %s)r rÉ rÌ r\ r r² r r# r½ r
rš rP r r r[ )rR r‚ ZboolsrH rƒ rç rV r2 ru r rÄ r! rÑ rØ r r× rm r r r Ú
update_gui„ sô
"
zSELinuxGui.update_guic C sL | j ¡ r| j | _| j ¡ r$| j| _| j ¡ r6| j| _| j ¡ rH| j| _d S r[ )rë rê rì rÞ rî rå r„ r r r Ú set_active_application_button s
z(SELinuxGui.set_active_application_buttonTc C s~ | j ¡ | j d¡ | j d¡ | j d¡ | j d¡ | j d¡ | j d¡ | j d¡ | j
d¡ |rz| j d¡ d S )NFr& )
rŸ r rë r¾ rÞ rå rî r¶ r· r² r± r† rL )rR rÌ r r r rN s
zSELinuxGui.clearbuttonsc C sP | ¡ | j d¡ | j d¡ | j tdƒ¡ | j d¡ | ¡ | ¡ d S )NTZSystem)
rN r¶ r¾ r· r+ rK r
rk rD r
r„ r r r rJ " s zSELinuxGui.show_system_pagec G sX | ¡ | ¡ | j d¡ | j tdƒ¡ | ¡ | ¡ | j
d¡ | j
d¡ d S )NTzFile Equivalence) rN rÐ rµ rk r+ rK r
rD r
rË rÚ rÌ r• r r r r$ + s z SELinuxGui.show_file_equiv_pagec C sx | ¡ | j d¡ | j d¡ | j tdƒ¡ | j d¡ | ¡ | ¡ |
¡ | ¡ | j
d¡ | j
d¡ d S )NTZUsers)rN r± r¾ r² r+ rK r
rk rD rÖ rÙ r
rË rÚ rÌ r„ r r r Úshow_users_page5 s zSELinuxGui.show_users_pagec C sZ | d¡ | j d¡ | j d¡ | j d¡ | j d¡ | j d¡ | ¡ | ¡ d S ©NFT) rN rë r¾ rÞ rå rî rk rD r
r„ r r r rM B s
z!SELinuxGui.show_applications_pagec G s | ¡ d S r[ )rJ r• r r r r% L s zSELinuxGui.system_interfacec G s | ¡ d S r[ )r‚ r• r r r r& O s zSELinuxGui.users_interfacec G sê g }d}| j ¡ }| ¡ dkr’| jD ]T}| j |¡}| j |¡}| j |¡}|d kr$| j |d¡dkrp| |¡ |d7 }q$|D ]}| j
|¡ q~nT| j d kræ| j ¡ |t
kr¼| | j ¡ n*|tkrÒ| | j ¡ n|tkræ| | j ¡ d S )Nr Tr Fr )rü rš rê r} r5 rå rò r6 r~ r rÔ rš rÌ r› rû rœ rü r rÿ ) rR rY r‚ Ziterlistr` rª rõ rƒ Zitersr r r r' R s,
z SELinuxGui.show_mislabeled_filesc C sp t |¡d d¡d }t |d¡d d¡d }| jtdƒ|||dœ ddtjjkrl| j
|¡ | ¡ d S ) Nr r r r zbRun restorecon on %(PATH)s to change its type from %(CUR_CONTEXT)s to the default %(DEF_CONTEXT)s?)ÚPATHZ CUR_CONTEXTZ DEF_CONTEXTzrestorecon dialog)Útitle) r£ r rt r Úverifyr
r Ú ResponseTypeZYESr“ Z
restoreconr6 )rR rV r r r r r r k s
& zSELinuxGui.fix_mislabeledc G s$ | j | ¡ ¡ | j | ¡ ¡ d S r[ )rÊ rÚ r" r r• r r r rD r s zSELinuxGui.new_updatesc G sF | ¡ | ¡ tdƒk| _| jr2| j tdƒ¡ n| j tdƒ¡ d S )NZUpdatezUpdate ChangeszRevert Changes)r€ Ú get_labelr
r r[ r™ ©rR r r‚ r r r r. v s
z#SELinuxGui.update_or_revert_changesc G sb | ¡ | jr| ¡ n| ¡ d| _| | j ¡ ¡ d| _| ¡ | ¡ |
¡ | j ¡ d S rƒ )
r) r Úupdate_the_systemÚ revert_datar rF r“ r” r# r6 rD rÉ rÌ r• r r r r- ~ s
z%SELinuxGui.apply_changes_button_pressc
G sn | ¡ | ¡ }| ¡ z| j |¡ W n0 tjjyX } zt|ƒ W Y d }~n
d }~0 0 | ¡ | ¡ d S r[ )
r) Ú
format_updaters r“ rX r• r– r— ru r™ )rR r‚ rZ rU r r r rŠ Œ s z SELinuxGui.update_the_systemc C s2 ddddddœ}|D ]}||kr|| S qdS )Nr r r )zExecutable FileszWritable FileszApplication File TypeZInboundZOutboundZBooleansr )rR ÚlookupZ ipage_valuesÚvaluer r r Úipage_value_lookup— s
z SELinuxGui.ipage_value_lookupc C s4 | d¡d }| d¡d }|dkr,|| _n|S d S )Nz: r r z SELinux name)rt Z bool_revert)rR Z attributeZbool_idr r r Úget_attributes_updatež s
z SELinuxGui.get_attributes_updatec C sf | ¡ d}| jD ]L}|dv rN| j| D ]"}|d| j| | d |f 7 }q*|dv r | j| D ]¨}| j| | d dkrŠ|d| 7 }qbd | j| | v rÜ|d
| j| | d | j| | d | j| | d |f 7 }qb|d | j| | d | j| | d |f 7 }qb|d
v rô| j| D ]Ò}| j| | d dkrJ|d| 7 }n¦d| j| | v rÂd | j| | v rÂ|d| j| | d | j| | d | j| | d | j| | d |f 7 }n.|d| j| | d | j| | d |f 7 }q |dv rd| j| D ]Z}| j| | d dkr2|d| 7 }n.|d| j| | d | j| | d |f 7 }q|dv rä| j| D ]j}| j| | d dkr¢|d| 7 }n>|d| j| | d | j| | d | j| | d |f 7 }qx|dv r| j| D ]h\}}| j| ||f d dkr,|d ||f 7 }n0|d | j| | d | j| | d ||f 7 }qöq|S ) Nr& r zboolean -m -%d %s
r r r½ r¾ z login -d %s
r¶ zlogin %s -s %s -r %s %s
r× zlogin %s -s %s %s
r! z user -d %s
rÒ z user %s -L %s -r %s -R %s %s
r zuser %s -R %s %s
r zfcontext -d %s
zfcontext %s -e %s %s
rm r zfcontext %s -t %s -f %s %s
r¿ r/ r zport -d -p %s %s
zport %s -t %s -p %s %s
)r‹ r\ ) rR rZ r^ r r[ rÕ rÎ r rÄ r r r rŒ ¦ sH
@0
(P2
2
B 6zSELinuxGui.format_updatec C sX d}g }d}| j D ]$}| j | d s.| |¡ |d7 }q| ¡ |D ]}| |¡ qDd S )Nr r& r )rÉ r Úreverserc )rR r` Z remove_listrZ rõ r r r r‹ Õ s
zSELinuxGui.revert_datac G sN | ¡ td k}|r$| td ¡ n| td ¡ | j |¡ | j |¡ d S r_ )rø ÚADVANCED_LABELrL rº r¾ rU ©rR Úlabelr‚ Zadvancedr r r rB á s z!SELinuxGui.reveal_advanced_systemc G sf | ¡ td k}|r$| td ¡ n| td ¡ | j |¡ | j |¡ | j |¡ | j |¡ d S r_ )rø r’ rL rd r¾ re rf rg r“ r r r r ê s zSELinuxGui.reveal_advancedc G sF | ¡ td kr(| td ¡ | ¡ n| td ¡ | | j¡ d S rî )rø ÚADVANCED_SEARCH_LABELrL r) r r. )rR r” r‚ r r r r õ s
z)SELinuxGui.on_show_advanced_search_windowc C sJ |r&| j | jtdƒ¡ | j d¡ n | j | jtdƒ¡ | j d¡ d S )NzSystem Status: EnforcingTzSystem Status: Permissive)rˆ rf rø r
rö rk r÷ )rR rŽ r r r rh ý s
zSELinuxGui.set_enforce_textc C s, | j s
d S | j | ¡ ¡ | | ¡ ¡ d S r[ )r r“ Z
setenforcerê rh ©rR r r r r r
s zSELinuxGui.set_enforcec G s` | j ¡ }|d krd S d| _| j ¡ | j |¡ | jdkrH| |¡ n| jdkr\| |¡ d S )NFÚImportÚExport) r¬ Ú get_filenamer¨ r r^ rL r§ Ú
import_configÚ
export_config)rR r‚ r. r r r r
s
zSELinuxGui.on_browse_selectc G sX | j ¡ }| j ¡ r0| d¡sT| j |d ¡ n$| d¡rT| d¡d }| j |¡ d S )Nú(/.*)?r )r^ rø rÏ rê rK rL rt )rR r‚ rV r r r r
s
zSELinuxGui.recursive_pathc G s" | ¡ }| jr | d¡ d| _d S ©Nr& F)rø r¨ rL )rR Z entry_objr‚ Ztxtr r r r !
s
z SELinuxGui.highlight_entry_textc C sv | ¡ }|dkrd S | d¡r*| j d¡ tjD ]@}| |¡r0| jD ]*}|d tj| ¡rD| | j |d ¡ qDq0d S )Nr& rœ Tr )
rø rK rÏ rk r Z DEFAULT_DIRSrM rÐ rè rb )rR r ÚtextrQ rÇ r r r r '
s
z#SELinuxGui.autofill_add_files_entryc G s& | j d¡| _| j ¡ }| j ¡ }d S r“ )rè Zget_colZboolean_column_1Z get_widthZget_cell_renderers)rR r‚ ÚwidthZrendererr r r r5 3
s
zSELinuxGui.resize_columnsc G s | j ¡ d S r[ )r¬ r r• r r r r( 8
s zSELinuxGui.browse_for_filesc G s | j ¡ d S r[ )r¬ r r• r r r r, ;
s z SELinuxGui.close_config_windowc G sl | j | j ¡ krd S | tdƒ¡tjjkr<| j | j ¡ d S | j
| | j¡¡ | j d¡ | j ¡ | _ d S )NzºChanging the policy type will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue?T)
r³ rU rê r† r
r r‡ ÚNOrk r“ r? rì Úrelabel_on_bootr• r r r r? >
s z SELinuxGui.change_default_policyc C s4 | j s
d S | |¡ | ¡ r0| j | ¡ ¡ ¡ d S r[ )r Úenabled_changedrê r“ r@ rˆ r r– r r r r@ J
s
z SELinuxGui.change_default_modec G s0 | j tjj¡ | j d¡ | j ¡ d| _d S )NzImport Configurationr— )r¬ Ú
set_actionr ÚFileChooserActionZOPENr™ r r§ r• r r r r; Q
s
z SELinuxGui.import_config_showc G s0 | j tjj¡ | j d¡ | j ¡ d| _d S )NzExport Configurationr˜ )r¬ r£ r r¤ ZSAVEr™ r r§ r• r r r r< X
s
z SELinuxGui.export_config_showc C s: | ¡ | j ¡ }t|dƒ}| |¡ | ¡ | ¡ d S )NÚw)rs r“ r” r‹ r r ru )rR r. r‘ r r r r r› ^
s
zSELinuxGui.export_configc C sR t |dƒ}| ¡ }| ¡ | ¡ z| j |¡ W n tyD Y n0 | ¡ d S )Nr‡ )r‹ rŒ r rs r“ rX re ru )rR r. r r‘ r r r rš f
s
zSELinuxGui.import_configc C sV |||f|vr i ||||f< ||f||||f vrR||| |
dœ||||f ||f< d S )N)r¿ rØ ÚchangedÚoldr ) rR rY rS rª rH r ÚqrI rØ r¦ r§ r r r Úinit_dictionaryq
s zSELinuxGui.init_dictionaryc C s* | d¡d }|dkrdS |dkr&dS d S )Nú-r Ú0FÚ1T)rt )rR r r r r Útranslate_boolw
s
zSELinuxGui.translate_boolc
G sv | j ¡ }tj d¡}|r"|r"d S |s.|s.d S z| j |¡ W n2 tjjyp } z| |¡ W Y d }~n
d }~0 0 d S )Nrd )
r¸ rê ri rV rj r“ r¡ r• r– r )rR r‚ r rj rU r r r rA ~
s
z SELinuxGui.relabel_on_rebootc G s
| ¡ | j d¡ | j d¡ | j|krV| | j¡ | | j ¡t
dƒkrV| j d¡ | j |kr†| j rt| | j¡ n| j
r†| | j¡ | j ¡ sš| j ¡ râ| j d¡ | j d¡ | j d¡ | j d¡ | j d¡ | j d¡ | j ¡ td kr| j td ¡ dS )NFTrã r r )r rÏ rk rž rÚ rS r r` rì rb r
r, r© rª ra rd Z get_visiblerf rÒ r¾ re r× rg r* rø r• rL )rR rž r‚ r r r rE ‹
s,
zSELinuxGui.closewindowc C s | j ¡ | j¡ | ¡ d S r[ )rž Ú
get_windowÚ
set_cursorr¡ r
r„ r r r rs £
s zSELinuxGui.wait_mousec C s | j ¡ | j¡ | ¡ d S r[ )rž r® r¯ r¢ r
r„ r r r ru §
s zSELinuxGui.ready_mouser& c C sN t d dt jjt jj|¡}| |¡ | t jj ¡ |
¡ | ¡ }| ¡ |S ré )
r Ú
MessageDialogÚ MessageTypeÚINFOÚ ButtonsTypeZYES_NOr™ Ú set_positionÚWindowPositionÚMOUSEÚshow_allÚrunÚdestroy)rR Úmessager… ÚdlgÚrcr r r r† «
s þ
zSELinuxGui.verifyc C sD t d dt jjt jj|¡}| t jj¡ | ¡ |
¡ | ¡ d S ré ) r r° r± ZERRORr³ ZCLOSEr´ rµ r¶ r· r¸ r¹ )rR rº r» r r r r ¶
s þzSELinuxGui.errorc C s† | ¡ s d S | ¡ }|dkrH| jtkrH| tdƒ¡tjjkrH| j
d¡ |dkr|| jtkr|| tdƒ¡tjjkr|| j
d¡ || _ d S )Nrp a… Changing to SELinux disabled requires a reboot. It is not recommended. If you later decide to turn SELinux back on, the system will be required to relabel. If you just want to see if SELinux is causing a problem on your system, you can go to permissive mode which will only log errors and not enforce SELinux policy. Permissive mode does not require a reboot. Do you wish to continue?Tz½Changing to SELinux enabled will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue?) rê rˆ r r r† r
r r‡ r r® rk )rR Zradior” r r r r¢ ¿
s zSELinuxGui.enabled_changedc G s | j d¡ | j d¡ d S r )r‰ rL rô rk r• r r r r# Ì
s zSELinuxGui.clear_filtersc G sB | j s
d S | ¡ | j ¡ r*| j d¡ n | j d¡ | ¡ d S )Nzmodule -e unconfinedzmodule -d unconfined)r rs rà rê r“ rX ru r• r r r r= Ð
s
z SELinuxGui.unconfined_togglec G sB | j s
d S | ¡ | j ¡ r*| j d¡ n | j d¡ | ¡ d S )Nzmodule -e permissivedomainszmodule -d permissivedomains)r rs rÅ rê r“ rX ru r• r r r r> Ú
s
z SELinuxGui.permissive_togglec G s: t | jƒdkr.| tdƒtdƒ¡tjjkr.dS | ¡ d S )Nr a0 You are attempting to close the application without applying your changes.
* To apply changes you have made during this session, click No and click Update.
* To leave the application without applying your changes, click Yes. All changes that you have made during this session will be lost.zLoss of data DialogT)r rÉ r† r
r r‡ r r˜ r‰ r r r r! ä
s z SELinuxGui.confirmation_closec G s t d¡ d S ré )ÚsysÚexitr• r r r r˜ ê
s zSELinuxGui.quit)NF)T)r& )’Ú__name__Ú
__module__Ú __qualname__rZ r™ rc rG rx r" r
ró r’ r3 r4 r2 r
r r r r½ r® rÉ rÐ rÖ rÙ rá r rè rì r r r1 r0 rö r6 rP rF rû r r rü r rÍ r rÿ r" rú r$ rý r( rþ r, r r0 rD r8 r{ r; r7 r r) r9 r rL rO rA rF r@ r* r+ ry r rB rC r r: r_ r` r ra rd rC r r r r r r8 rŽ r| rû r} rÿ r/ r r€ r rN rJ r$ r‚ rM r% r& r' r rD r. r- rŠ r r rŒ r‹ rB r r rh r r r r r r5 r( r, r? r@ r; r< r› rš r© r rA rE rs ru r† r r¢ r# r= r> r! r˜ r r r r r% t s( @
B*
} )Y 5+
D
A
/
r% Ú__main__)AZgiZrequire_versionZ
gi.repositoryr r r Zsepolicy.sedbusr r½ r r£ r r r Zsepolicy.networkZsepolicy.manpager“ ri r Ú unicodedataZPROGNAMEÚgettextÚkwargsÚ version_infoÚ translationrÇ r
Úbuiltinsr Ú__dict__Ú ImportErrorZ __builtin__r
ry rP rÎ r r½ r rœ r’ r• rŸ r r¡ r¢ r£ r› rœ r rz r| rž r€ r¦ r§ r¥ r¤ r¨ r‘ r] rg r% r¿ r– r r r r Ú s²
ÿþý