3
El�f� � @ s& d dl Z d dlZd dlZdZdZdddddd d
d d g Zd
Zy:d dlZi Zej d#k rZded< ej
efddd�e�� W nJ yd dl Z e e j
d< W n& ek
r� d dlZeej
d< Y nX Y nX dd� Zd$dd�Zd%dd�Zd&dd�Zdad'dd�Zd(d d �Zd d
� Zd)d d �Zd!d � Zd*d"d �ZdS )+� Nz_admin$z_role$�get_all_interfaces�get_interfaces_from_xml� get_admin�get_user�get_interface_dict�get_interface_format_text�!get_interface_compile_format_text� get_xml_file�interface_compile_testzselinux-python� T�unicodez/usr/share/localezutf-8)Z localedirZcodeset�_c C s, g }t | �}x|j� D ]}|j|� qW |S )z' Get all interfaces from given xml file)r �keys�append)�pathZinterfaces_list�idict�k� r � /usr/lib/python3.6/interface.pyr 4 s
� c C s0 ddl m} g }| s |� }nt| �}t|�}|S )Nr )� get_methods)�sepolicyr r r )r r Zall_interfaces�xml_pathr r r r = s c C s� g }| r�y:t | �}t|�}x$|j� D ]}|jd�r$|j|� q$W W q� tk
r� } z,tjjd|j j
t |�f � tj d� W Y dd}~X q�X n0x.t
j� D ]"}|jd�r�|j|jd�d � q�W |S )z? Get all domains with an admin interface from installed policy.Z_adminz%s: %s
� Nr )r r r �endswithr �IOError�sys�stderr�write� __class__�__name__�str�exitr r �split)r Z
admin_listr r r �e�ir r r r I s
c C s� g }| r�yRt | �}t|�}x<|j� D ]0}|jd�r$d|dd � tj� kr$|j|� q$W W q� tk
r� } z,tj j
d|j j t
|�f � tjd� W Y dd}~X q�X nPxNtj� D ]B}tjdt |�}t|�dkr�d|d tj� kr�|j|d � q�W |S )
z1 Get all domains with SELinux user role interfaceZ_rolez %s_exec_tN� z%s: %s
r z(.*)%sr ���)r r r r r Z
get_all_typesr r r r r r r r! r" r �re�findall�USER_TRANSITION_INTERFACE�len)r Z
trans_listr r r r$ r% �mr r r r _ s$
�#/usr/share/selinux/devel/policy.xmlc
C sX dd l }dd l}trtS i ag }d}|| 7 }|d7 }�y|jj| �rT|jjj| �}n|jjj|�}x�|j d�D ]�}x�|j d�D ]�}xV|j
d�D ]H}x"|j d�D ]} |j | j d�� q�W ||j
d �jdgt|j d�< g }q�W xV|j
d
�D ]H}x"|j d�D ]} |j | j d�� q�W ||j
d �jd
gt|j d�< g }q�W q~W qnW W n tk
�rR Y nX tS ) Nr zZ<?xml version="1.0" encoding="ISO-8859-1" standalone="no"?>
<policy>
<layer name="admin">
z
</layer>
</policy>
Zlayer�module� interfaceZparam�nameZsummary�template)�osZxml.etree.ElementTree�interface_dictr �isfileZetreeZ ElementTree�parseZ
fromstringr) Z getiteratorr �get�find�textr )
r r2 ZxmlZ
param_listr Ztree�lr, r% r$ r r r r z s: c C s< t |�}d| dj|| d �dj|| d jd��f }|S )Nz %s(%s) %sz, r � r �
)r �joinr# )r/ r r �interface_textr r r r � s 0c C sL ddl m} g }x6| | d D ]&}|j|j| � d|dj|�f }q W |S )Nr )� test_moduler z%s(%s)
z, )� templatesr> r � dict_valuesr< )Zinterfaces_dictr/ r> Z param_tmpr% r= r r r r � s � compiletestc C s6 ddl m} d}|tjd||j�7 }|t|| �7 }|S )Nr )r> r Z TEMPLATETYPE)r? r> r( �subZte_test_moduler )r/ r r0 r> �ter r r �generate_compile_te� s
rD c C s� ddl }yddlm} W n tk
r8 ddlm} Y nX |jj| �d }|jj| �jd�d }|d| | �\}}|dkr�t j
j d� t j
j d| � t j d � n|S dS )
z; Returns xml format of interfaces for given .if policy filer N)�getstatusoutput�/�.zDpython /usr/share/selinux/devel/include/support/segenxml.py -w -m %sz-
Could not proceed selected interface file.
z
%sr )
r2 �commandsrE � ImportError�
subprocessr �dirname�basenamer# r r r r" )Zif_filer2 rE Zbasedir�filename�rc�outputr r r r � s c
C s� dddddg}dg}yddl m} W n tk
rD ddlm} Y nX dd l}d d
d d d
�}t|�}| jd�d |kp�|| d |k�sjttd�| � yft |d d�}|j
t | |�� |j � |d|d �\} }
| dkr�t
jj
|
� t
jj
td�| � W n< tk
�r: } z t
jj
td�| | f � W Y d d } ~ X nX x@|j� D ] } |jj| ��rF|j| � �qFW nt
jj
td�| � d S )NZuserdomZkernelZcorenet�filesZdevr1 r )rE zcompiletest.ppzcompiletest.tezcompiletest.fczcompiletest.if)�pprC Zfc�ifr
� zCompiling %s interfacerC �wz,make -f /usr/share/selinux/devel/Makefile %srQ z
Compile test for %s failed.
z%
Compile test for %s has not run. %s
z,
Compiling of %s interface is not supported.)rH rE rI rJ r2 r r# �printr
�openr rD �closer r �EnvironmentError�valuesr �exists�remove)
r/ r Zexclude_interfacesZexclude_interface_typerE r2 Z policy_filesr �fdrN rO r$ �vr r r r
� s2 $ *)r )r )r )r )r- )r- )rA )r- ) r( r r ZADMIN_TRANSITION_INTERFACEr* �__all__ZPROGNAME�gettext�kwargs� version_infoZinstall�builtinsr! �__dict__rI Z __builtin__r r r r r r3 r r r rD r r
r r r r �<module> sB
*
|