| Server IP : 3.96.16.70 / Your IP : 216.73.216.15 Web Server : Apache System : Linux ip-172-31-26-103.ca-central-1.compute.internal 6.1.163-186.299.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Feb 24 16:35:42 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.18 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /usr/lib/python3.9/site-packages/sepolicy/__pycache__/ |
Upload File : |
a
���c � @ s" d dl Z d dlZd dlZdZdZg d�ZdZzFd dlZi Zej dk rLded< ej
efd d
ie�d di��Z e jZ W nH zd dl
Z
ee
jd < W n$ ey� d dlZeejd < Y n0 Y n0 d
d� Zd$dd�Zd%dd�Zd&dd�Zdad'dd�Zd(dd�Zdd � Zd)d d �Zd d!� Z d*d"d#�Z dS )+� Nz_admin$z_role$) �get_all_interfaces�get_interfaces_from_xml� get_admin�get_user�get_interface_dict�get_interface_format_text�!get_interface_compile_format_text� get_xml_file�interface_compile_testzselinux-python)� T�unicodeZ localedirz/usr/share/localeZfallback�_c C s( g }t | �}|�� D ]}|�|� q|S )z' Get all interfaces from given xml file)r �keys�append)�pathZinterfaces_list�idict�k� r �6/usr/lib/python3.9/site-packages/sepolicy/interface.pyr 5 s
r � c C s0 ddl m} g }| s |� }nt| �}t|�}|S )Nr )� get_methods)�sepolicyr r r )r r Zall_interfaces�xml_pathr r r r > s r c
C s� g }| r�z6t | �}t|�}|�� D ]}|�d�r"|�|� q"W q� ty� } z2tj�d|j j
t |�f � t� d� W Y d}~q�d}~0 0 n,t
�� D ]"}|�d�r�|�|�d�d � q�|S )z? Get all domains with an admin interface from installed policy.Z_admin�%s: %s
� Nr )r r r �endswithr �IOError�sys�stderr�write� __class__�__name__�str�exitr r �split)r Z
admin_listr r r �e�ir r r r J s
"
r c
C s� g }| r�zNt | �}t|�}|�� D ]0}|�d�r"d|dd� t�� v r"|�|� q"W q� ty� } z2tj �
d|j j t
|�f � t�d� W Y d}~q�d}~0 0 nLt�� D ]B}t�dt |�}t|�dkr�d|d t�� v r�|�|d � q�|S ) z1 Get all domains with SELinux user role interfaceZ_rolez %s_exec_tN���r r z(.*)%sr )r r r r r Z
get_all_typesr r r r r r r! r" r# r �re�findall�USER_TRANSITION_INTERFACE�len)r Z
trans_listr r r r% r& �mr r r r ` s$
" r �#/usr/share/selinux/devel/policy.xmlc
C s< dd l }dd l}trtS i ag }d}|| 7 }|d7 }z�|j�| �rR|jj�| �}n|jj�|�}|� d�D ]�}|� d�D ]�}|�
d�D ]D}|� d�D ]} |� | � d�� q�||�
d �jdgt|� d�< g }q�|�
d
�D ]D}|� d�D ]} |� | � d�� q�||�
d �jd
gt|� d�< g }q�qxqjW n t�y6 Y n0 tS ) Nr zZ<?xml version="1.0" encoding="ISO-8859-1" standalone="no"?>
<policy>
<layer name="admin">
z
</layer>
</policy>
Zlayer�module� interfaceZparam�nameZsummary�template)�osZxml.etree.ElementTree�interface_dictr �isfileZetreeZ ElementTree�parseZ
fromstringr) �iterr �get�find�textr )
r r2 ZxmlZ
param_listr Ztree�lr, r& r% r r r r { s8 r c C s< t |�}d| d�|| d �d�|| d �d��f }|S )Nz %s(%s) %s�, r � r �
)r �joinr$ )r/ r r �interface_textr r r r � s 0r c C sH ddl m} g }| | d D ]&}|�|j| � d|d�|�f }q |S )Nr �� test_moduler z%s(%s)
r; )� templatesrA r � dict_valuesr> )Zinterfaces_dictr/ rA Z param_tmpr& r? r r r r � s r � compiletestc C s6 ddl m} d}|t�d||j�7 }|t|| �7 }|S )Nr r@ r Z TEMPLATETYPE)rB rA r( �subZte_test_moduler )r/ r r0 rA �ter r r �generate_compile_te� s
rG c C s� ddl }zddlm} W n ty6 ddlm} Y n0 |j�| �d }|j�| ��d�d }|d|| �\}}|dkr�t j
� d� t j
� d| � t � d � n|S dS )
z; Returns xml format of interfaces for given .if policy filer N��getstatusoutput�/�.zN/usr/bin/python3 /usr/share/selinux/devel/include/support/segenxml.py -w -m %sz-
Could not process selected interface file.
z
%sr )
r2 �commandsrI � ImportError�
subprocessr �dirname�basenamer$ r r r r# )Zif_filer2 rI Zbasedir�filename�rc�outputr r r r � s r c
C sz g d�}dg}zddl m} W n ty< ddlm} Y n0 dd l}ddddd �}t|�}| �d
�d |v �sb|| d |v �sbttd �| � zft |d
d�}|�
t | |�� |� � |d|d �\} }
| dkr�t
j�
|
� t
j�
td�| � W n> t�y6 } z$t
j�
td�| | f � W Y d } ~ n
d } ~ 0 0 |�� D ] } |j�| ��r@|�| � �q@nt
j�
td�| � d S )N)ZuserdomZkernelZcorenet�files�devr1 r rH zcompiletest.ppzcompiletest.tezcompiletest.fczcompiletest.if)�pprF Zfc�ifr
� zCompiling %s interfacerF �wz,make -f /usr/share/selinux/devel/Makefile %srV z
Compile test for %s failed.
z%
Compile test for %s has not run. %s
z,
Compiling of %s interface is not supported.)rL rI rM rN r2 r r$ �printr
�openr rG �closer r �EnvironmentError�valuesr �exists�remove)
r/ r Zexclude_interfacesZexclude_interface_typerI r2 Z policy_filesr �fdrR rS r% �vr r r r
� s2 & . r
)r )r )r )r- )r- )rD )r- ) r( r r ZADMIN_TRANSITION_INTERFACEr* �__all__ZPROGNAME�gettext�kwargs� version_infoZ translation�tr
�builtinsr" �__dict__rM Z __builtin__r r r r r r3 r r r rG r r
r r r r �<module> sJ
���
*