Beta Shell v2.0

File Manager

~ /usr/lib64/python3.6/site-packages/setools

Name	Size	Perms	Modified	Actions
[ .. / .. ]
__init__.py	2.79 KB	-rw-r--r--	2023-08-22 08:06:58	Edit Del
__pycache__	-	drwxr-xr-x	2024-02-01 12:13:44	Del
boolquery.py	2.19 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
boundsquery.py	2.35 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
categoryquery.py	1.88 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
commonquery.py	2.11 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
constraintquery.py	5.5 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
defaultquery.py	2.8 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
descriptors.py	7.47 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
devicetreeconquery.py	2.72 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
diff	-	drwxr-xr-x	2024-02-01 12:13:44	Del
dta.py	21.4 KB	-rw-r--r--	2023-08-22 08:06:58	Edit Del
exception.py	5.97 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
fsusequery.py	3.36 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
genfsconquery.py	3.68 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
ibendportconquery.py	3.52 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
ibpkeyconquery.py	5.22 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
infoflow.py	14.59 KB	-rw-r--r--	2023-08-22 08:06:58	Edit Del
initsidquery.py	2.79 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
iomemconquery.py	4.44 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
ioportconquery.py	4.46 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
mixins.py	7.14 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
mlsrulequery.py	4.59 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
netifconquery.py	2.93 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
nodeconquery.py	4.16 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
objclassquery.py	3.78 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
pcideviceconquery.py	3.04 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
perm_map	87.16 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
permmap.py	16.1 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
pirqconquery.py	2.95 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
polcapquery.py	1.64 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
policyrep.cpython-36m-x86_64-linux-gnu.so	1.87 MB	-rwxr-xr-x	2023-08-22 08:07:43	Edit Del
portconquery.py	5.04 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
query.py	1.69 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
rbacrulequery.py	5.61 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
rolequery.py	2.48 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
sensitivityquery.py	2.65 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
terulequery.py	9.11 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
typeattrquery.py	2.62 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
typequery.py	3.43 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
userquery.py	4.68 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del
util.py	5.32 KB	-rw-r--r--	2020-04-01 14:57:49	Edit Del

Editing: descriptors.py (7.47 KB)

# Copyright 2015, Tresys Technology, LLC
# Copyright 2016, 2018, Chris PeBenito <pebenito@ieee.org>
#
# This file is part of SETools.
#
# SETools is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as
# published by the Free Software Foundation, either version 2.1 of
# the License, or (at your option) any later version.
#
# SETools is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with SETools.  If not, see
# <http://www.gnu.org/licenses/>.
#
"""
SETools descriptors.

These classes override how a class's attributes are get/set/deleted.
This is how the @property decorator works.

See https://docs.python.org/3/howto/descriptor.html
for more details.
"""

import re
from abc import ABC, abstractmethod
from collections import defaultdict
from weakref import WeakKeyDictionary

#
# Query criteria descriptors
#
# Implementation note: if the name_regex attribute value
# is changed the criteria must be reset.
#


class CriteriaDescriptor:

    """
    Single item criteria descriptor.

    Keyword Parameters:
    name_regex      The name of instance's regex setting attribute;
                    used as name_regex below.  If unset,
                    regular expressions will never be used.
    lookup_function The name of the SELinuxPolicy lookup function,
                    e.g. lookup_type or lookup_boolean.
    default_value   The default value of the criteria.  The default
                    is None.
    enum_class      The class of enumeration which supports a
                    lookup class method.

    Read-only instance attribute use (obj parameter):
    policy          The instance of SELinuxPolicy
    name_regex      This attribute is read to determine if
                    the criteria should be looked up or
                    compiled into a regex.  If the attribute
                    does not exist, False is assumed.
    """

    def __init__(self, name_regex=None, lookup_function=None, default_value=None, enum_class=None):
        assert name_regex or lookup_function or enum_class, \
            "A simple attribute should be used if there is no regex, lookup function, or enum."
        assert not (lookup_function and enum_class), \
            "Lookup functions and enum classes are mutually exclusive."
        self.regex = name_regex
        self.default_value = default_value
        self.lookup_function = lookup_function
        self.enum_class = enum_class

        # use weak references so instances can be
        # garbage collected, rather than unnecessarily
        # kept around due to this descriptor.
        self.instances = WeakKeyDictionary()

    def __get__(self, obj, objtype=None):
        if obj is None:
            return self

        return self.instances.setdefault(obj, self.default_value)

    def __set__(self, obj, value):
        if not value:
            self.instances[obj] = None
        elif self.regex and getattr(obj, self.regex, False):
            self.instances[obj] = re.compile(value)
        elif self.lookup_function:
            lookup = getattr(obj.policy, self.lookup_function)
            self.instances[obj] = lookup(value)
        elif self.enum_class:
            self.instances[obj] = self.enum_class.lookup(value)
        else:
            self.instances[obj] = value


class CriteriaSetDescriptor(CriteriaDescriptor):

    """Descriptor for a set of criteria."""

    def __set__(self, obj, value):
        if not value:
            self.instances[obj] = None
        elif self.regex and getattr(obj, self.regex, False):
            self.instances[obj] = re.compile(value)
        elif self.lookup_function:
            lookup = getattr(obj.policy, self.lookup_function)
            self.instances[obj] = set(lookup(v) for v in value)
        elif self.enum_class:
            self.instances[obj] = set(self.enum_class.lookup(v) for v in value)
        else:
            self.instances[obj] = set(value)


#
# NetworkX Graph Descriptors
#
# These descriptors are used to simplify all
# of the dictionary use in the NetworkX graph.
#


class NetworkXGraphEdgeDescriptor(ABC):

    """
    Descriptor abstract base class for NetworkX graph edge attributes.

    Parameter:
    name        The edge property name

    Instance class attribute use (obj parameter):
    G           The NetworkX graph
    source      The edge's source node
    target      The edge's target node
    """

    def __init__(self, propname):
        self.name = propname

    def __get__(self, obj, objtype=None):
        if obj is None:
            return self

        try:
            return obj.G[obj.source][obj.target][self.name]
        except KeyError:
            raise AttributeError(self.name)

    @abstractmethod
    def __set__(self, obj, value):
        pass

    @abstractmethod
    def __delete__(self, obj):
        pass


class EdgeAttrDict(NetworkXGraphEdgeDescriptor):

    """A descriptor for edge attributes that are dictionaries."""

    def __set__(self, obj, value):
        # None is a special value to initialize the attribute
        if value is None:
            obj.G[obj.source][obj.target][self.name] = defaultdict(list)
        else:
            raise AttributeError("{0} dictionaries should not be assigned directly".
                                 format(self.name))

    def __delete__(self, obj):
        obj.G[obj.source][obj.target][self.name].clear()


class EdgeAttrIntMax(NetworkXGraphEdgeDescriptor):

    """
    A descriptor for edge attributes that are non-negative integers that always
    keep the max assigned value until re-initialized.
    """

    def __set__(self, obj, value):
        # None is a special value to initialize
        if value is None:
            obj.G[obj.source][obj.target][self.name] = 0
        else:
            current_value = obj.G[obj.source][obj.target][self.name]
            obj.G[obj.source][obj.target][self.name] = max(current_value, value)

    def __delete__(self, obj):
        obj.G[obj.source][obj.target][self.name] = 0


class EdgeAttrList(NetworkXGraphEdgeDescriptor):

    """A descriptor for edge attributes that are lists."""

    def __set__(self, obj, value):
        # None is a special value to initialize
        if value is None:
            obj.G[obj.source][obj.target][self.name] = []
        else:
            raise ValueError("{0} lists should not be assigned directly".format(self.name))

    def __delete__(self, obj):
        obj.G[obj.source][obj.target][self.name].clear()


#
# Permission map descriptors
#
class PermissionMapDescriptor:

    """
    Descriptor for Permission Map mappings.

    Parameter:
    name        The map setting name.
    validator   A callable for validating the setting.

    Instance class attribute use (obj parameter):
    perm_map    The full permission map.
    class_      The mapping's object class
    perm        The mapping's permission
    """

    def __init__(self, propname, validator):
        self.name = propname
        self.validator = validator

    def __get__(self, obj, objtype=None):
        if obj is None:
            return self

        return obj.perm_map[obj.class_][obj.perm][self.name]

    def __set__(self, obj, value):
        obj.perm_map[obj.class_][obj.perm][self.name] = self.validator(value)

    def __delete__(self, obj):
        raise AttributeError