|
Server : Apache System : Linux server.mata-lashes.com 3.10.0-1160.90.1.el7.x86_64 #1 SMP Thu May 4 15:21:22 UTC 2023 x86_64 User : matalashes ( 1004) PHP Version : 8.1.29 Disable Function : NONE Directory : /proc/17567/root/usr/lib64/python2.7/site-packages/sepolicy/ |
Upload File : |
�
4��]c @ s� d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z m Z m Z d d l Z d d l m
Z
d d l m Z d d l m Z d d l m
Z
d d l m Z d d l m Z d d
l m Z d d l m Z d d l m Z d d
l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l j Z d d l j Z d d l m Z d Z d d l Z e j! e d � e j" e � y e j# e d e$ d d �WnM e% k
r�e j# e d d �n* e& k
r d d l' Z' e( e' j) d <n Xd � Z* d � Z+ d � Z, d � Z- d Z. d Z/ d Z0 d Z1 d! Z2 d" Z3 d Z4 d Z5 d Z6 d Z7 d# Z8 d$ Z9 d% Z: d& Z; d' Z< d( Z= d) Z> d* Z? d+ Z@ i ZA eB d, � eA e4 <eB d- � eA e5 <eB d. � eA e6 <eB d/ � eA e7 <eB d0 � eA e8 <eB d1 � eA e9 <eB d2 � eA e: <eB d3 � eA e; <eB d4 � eA e< <eB d5 � eA e= <eB d6 � eA e> <eB d7 � eA e? <eB d8 � eA e@ <d9 � ZC e4 e5 e6 e9 e7 g ZD e< e; e= e> e? g ZE d: � ZF d; d= d< � � YZG d S(> i����N( t
get_all_typest get_all_attributest
get_all_rolesi ( t
executable( t boolean( t etc_rw( t unit_file( t var_cache( t var_spool( t var_lib( t var_log( t var_run( t tmp( t rw( t network( t script( t spec( t user( t utilt policycoreutilss /usr/share/localet unicodet codesets utf-8t _c C s� | d } | d } | d } t j rW t j | � } t j | � } t j | � } n | d | j d � d } | j d � d } | | | g S( s6 Given an RPM header return the package NVR as a stringt namet versiont releaset -t .i i ( R t PY3t decode_inputt split( t hdrR R R t release_versiont
os_version( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt get_rpm_nvr_from_headerH s
c C sr yU d d l } d } | j � } | j | j | � } x | D] } t | � } Pq= WWn d | GHd } n X| S( Ni����s" Failed to retrieve rpm info for %s( t rpmt Nonet tst dbMatcht RPMTAG_NAMER" ( t packageR# t nvrR% t mit h( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt get_rpm_nvr_listX s
c C s� i } x} t j t j � D]i } | d d k s | d d k s | d d k rU q n | d | d f | | d | d | d f <q W| S( Nt typet reserved_port_tt port_tt hi_reserved_port_tt ranget lowt hight protocol( t sepolicyt infot PORT( t dictt p( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
get_all_portsh s 1c C sQ g t j t j � D] } | d ^ q } | j d � | j d � | j � | S( NR t system_ut root( R5 R6 t USERt removet sort( t xt users( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
get_all_userss s
)
i i i s _admin$s _role$i i i i i i i
i i s Standard Init Daemons DBUS System Daemons Internet Services Daemons Web Application/Script (CGI)t Sandboxs User Applications Existing Domain Types Minimal Terminal Login User Roles! Minimal X Windows Login User Roles Desktop Login User Roles Administrator Login User Roles Confined Root Administrator Roles! Module information for a new typec C sU t t j � � } | j � t d � } x& | D] } | d | t | f 7} q/ W| S( Ns
Valid Types:
s %2s: %s
( t listt poltypet keysR? R ( RF t msgt k( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt get_poltype_desc� s
c C sL | d k r g Sd } yg } x� | j d � D]� } | j d � } t | � d k r_ t � n t | � d k r� t | d � } t | d � } n5 t | d � } t | d � } | | k r� t � n xI t | | d � D]4 } | d k s� | | k rt � n | j | � q� Wq/ W| SWn' t k
rGt t d | � � � n Xd S(
Nt i i t ,R i i s8 Ports must be numbers or ranges of numbers from 1 to %d i ( R t lent
ValueErrort intR1 t appendR ( t portst max_portt tempt at rt begint endR9 ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt verify_ports� s.
t policyc B s e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z
d � Z d
� Z d � Z
d � Z d
� Z d d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z! d! � Z" d" � Z# d# � Z$ d$ � Z% d% � Z& d& � Z' d' � Z( d( � Z) d) � Z* d* � Z+ d+ � Z, d, � Z- d- � Z. d. � Z/ d/ � Z0 d0 � Z1 d1 � Z2 d2 � Z3 d3 � Z4 d4 � Z5 d5 � Z6 d6 � Z7 d7 � Z8 d8 � Z9 d9 � Z: d: � Z; d; � Z< d< � Z= d= � Z> d> � Z? d? � Z@ d@ � ZA dA � ZB dB � ZC dC � ZD dD � ZE dE � ZF dF � ZG dG � ZH dH � ZI dI � ZJ dJ � ZK dK � ZL dL � ZM dM � ZN dN � ZO dO � ZP dP � ZQ dQ � ZR dR � ZS dS � ZT dT � ZU dU � ZV dV � ZW dW � ZX dX � ZY dY � ZZ dZ � Z[ d[ � Z\ d\ � Z] d] � Z^ d^ � Z_ d_ � Z` d` � Za da � Zb db � Zc dc � Zd dd � Ze de � Zf df � Zg dg � Zh dh � Zi di � Zj dj � Zk dk � Zl dl � Zm dm � Zn dn � Zo do � Zp dp � Zq dq � Zr es jt � dr � Zu RS(s c C sz g | _ g | _ t � | _ g | _ | t k rH t t d � � � n | sk t t d � t | � � n y t � | _ Wn5 t k
r� } d GHn t k
r� } d | f GHn Xi | _
d | j
d <d | j
d <d | j
d <d | j
d
<d | j
d <d | j
d <d | j
d
<d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d | j
d <d! | j
d" <d# | j
d$ <d% | j
d& <d' | j
d( <d) | j
d* <d+ | j
d, <d- | j
d. <d/ | j
d0 <d1 | j
d2 <d3 | j
d4 <d5 | j
d6 <d7 | j
d8 <d9 | j
d: <d; | j
d< <d= | j
d> <d? | j
d@ <dA | j
dB <dC | j
dD <dE | j
dF <dG | j
dH <dI | j
dJ <dK | j
dL <dM | j
dN <dO | j
dP <dQ | j
dR <dS | j
dT <dU | j
dV <dW | j
dX <dY | j
dZ <d[ | j
d\ <d] | j
d^ <d_ | j
d` <da | j
db <da | j
dc <da | j
dd <da | j
de <df | j
dg <df | j
dh <df | j
di <df | j
dj <df | j
dg <dk | j
dl <dm | j
dn <do | j
dp <dq | j
dr <ds | j
dt <du | j
dv <dw | j
dx <dy | j
dz <d{ | j
d| <d} | j
d~ <d | j
d� <d | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <d� | j
d� <i | _ d� g t g | j d� <d� g t
g | j d� <d� g t g | j d� <d� g t g | j d� <d� g t g | j d� <d� g t g | j d� <d� g t g | j d� <d� g t g | j d� <d� g t g | j d� <d� g t g | j d� <d� g t g | j d� <i | _ t
| j d� <t | j d� <t | j d� <t | j d� <t | j d� <t | j d� <t | j d� <t | j d� <d� d� d� d� d� d� d� d� d� d� d� g | _ | j | j f | j | j f | j | j f | j | j f | j | j! f | j" | j# f | j$ | j% f | j& | j' f | j( | j) f | j* | j' f | j+ | j' f | j, | j- f | j. | j/ f f
| _0 t1 j2 d� | � s�t t d� � � � n | t3 k r�d� | | _4 n | | _4 | | _5 g | _6 g | _7 | | _8 d� | _9 d | _; t< t< t< g g | _= t< t< t< g g | _> t< t< t< g g | _? t< t< t< g g | _@ t< | _A t< | _B t< | _C t< | _D t< | _E t< | _F t< | _G t< | _H t< | _I | j8 tJ tK g k | _L | j8 tJ tK g k | _M | j8 tJ tK g k | _N t< | _O t< | _P i | _Q i | _R i | _S g | _T g | _U t< | _V t< | _W g | _X g | _Y g | _Z g | _[ g | _\ d S(� Ns" You must enter a valid policy types; You must enter a name for your policy module for your '%s'.s9 Can not get port types, must be root for this informations Can not get port typess set_use_kerberos(True)t openlogs set_use_kerb_rcache(True)s set_use_syslog(True)s set_use_resolve(True)t gethostbyt getaddrinfot getnameinfot krbs set_manage_krb5_rcache(True)t gss_accept_sec_contextt krb5_verify_init_credst krb5_rd_reqt __syslog_chks set_use_uid(True)t getpwnamt getpwuids set_use_dbus(True)t dbus_s set_use_pam(True)t pam_s set_use_audit(True)s add_process('fork')t forks add_process('transition')t
transitions add_process('sigchld')t sigchlds add_process('sigkill')t sigkills add_process('sigstop')t sigstops add_process('signull')t signulls add_process('ptrace')t ptraces add_process('getsched')t getscheds add_process('setsched')t setscheds add_process('getsession')t
getsessions add_process('getpgid')t getpgids add_process('setpgid')t setpgids add_process('getcap')t getcaps add_process('setcap')t setcaps add_process('share')t shares add_process('getattr')t getattrs add_process('setexec')t setexecs add_process('setfscreate')t setfscreates add_process('noatsecure')t
noatsecures add_process('siginh')t siginhs add_process('signal_perms')t kills add_process('setrlimit')t setrlimits add_process('rlimitinh')t rlimitinhs add_process('dyntransition')t
dyntransitions add_process('setcurrent')t
setcurrents add_process('execmem')t execmems add_process('execstack')t execstacks add_process('execheap')t execheaps add_process('setkeycreate')t setkeycreates add_process('setsockcreate')t
setsockcreates add_capability('chown')t chowns add_capability('dac_override')t dac_overrides! add_capability('dac_read_search')t dac_read_searchs add_capability('fowner')t fowners add_capability('fsetid')t fsetids add_capability('setgid')t setgidt setegidt setresgidt setregids add_capability('setuid')t setresuidt setuidt seteuidt setreuids add_capability('setpcap')t setpcaps! add_capability('linux_immutable')t linux_immutables" add_capability('net_bind_service')t net_bind_services add_capability('net_broadcast')t
net_broadcasts add_capability('net_admin')t net_admins add_capability('net_raw')t net_raws add_capability('ipc_lock')t ipc_locks add_capability('ipc_owner')t ipc_owners add_capability('sys_module')t
sys_modules add_capability('sys_rawio')t sys_rawios add_capability('sys_chroot')t chroott
sys_chroots add_capability('sys_ptrace')t
sys_ptraces add_capability('sys_pacct')t sys_paccts add_capability('sys_admin')t mountt unsharet sys_admins add_capability('sys_boot')t sys_boots add_capability('sys_nice')t sys_nices add_capability('sys_resource')t sys_resources add_capability('sys_time')t sys_times add_capability('sys_tty_config')t sys_tty_configs add_capability('mknod')t mknods add_capability('lease')t leases add_capability('audit_write')t audit_writes add_capability('audit_control')t
audit_controls add_capability('setfcap')t setfcapR s /etcR s /tmpR
R s /usr/lib/systemd/systems /lib/systemd/systems /etc/systemd/systemR s
/var/cacheR s /var/libR
s /var/logR s /var/runR s
/var/spoolt _tmp_tt _unit_file_tt _var_cache_tt
_var_lib_tt
_var_log_tt
_var_run_tt _var_spool_tt _port_ts ^[a-zA-Z0-9-_]+$sQ Name must be alpha numberic with no spaces. Consider using option "-n MODULENAME"s httpd_%s_scriptRJ (] t rpmsRP R t all_rolest typesRE RM R R: t RuntimeErrort symbolst DEFAULT_DIRSR R R
R R R R
R R t DEFAULT_EXTR t DEFAULT_KEYSt generate_daemon_typest generate_daemon_rulest generate_dbusd_typest generate_dbusd_rulest generate_inetd_typest generate_inetd_rulest generate_cgi_typest generate_cgi_rulest generate_sandbox_typest generate_sandbox_rulest generate_userapp_typest generate_userapp_rulest generate_existing_user_typest generate_existing_user_rulest generate_min_login_user_typest generate_login_user_rulest generate_x_login_user_typest generate_x_login_user_rulest generate_login_user_typest generate_admin_user_typest generate_root_user_typest generate_root_user_rulest generate_new_typest generate_new_rulest
DEFAULT_TYPESt ret matcht CGIR t file_namet capabilitiest processesR- t
initscriptR$ t programt Falset in_tcpt in_udpt out_tcpt out_udpt use_resolvet use_tmpt use_uidt
use_syslogt use_kerberost manage_krb5_rcachet use_pamt use_dbust use_auditt EUSERt NEWTYPEt use_etct use_localizationt use_fdt use_terminalt use_mailt booleanst filest dirst found_tcp_portst found_udp_portst
need_tcp_typet
need_udp_typet
admin_domainst existing_domainst transition_domainst transition_userst roles( t selfR R- t e( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt __init__� sd
* c C s2 | t p1 | t p1 | t p1 t | t � d k S( Ni ( t ALLt RESERVEDt
UNRESERVEDRL t PORTS( R� t l( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
__isnetset� s c C s
| | _ d S( N( R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_admin_domains� s c C s
| | _ d S( N( R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_existing_domains� s c C s
| | _ d S( N( R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_admin_roles� s c C s
| | _ d S( N( R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_transition_domains� s c C s
| | _ d S( N( R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_transition_users� s c C s | j | j � S( N( t _policy__isnetsetR� ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
use_in_udp� s c C s | j | j � S( N( R R� ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt use_out_udp� s c C s | j � p | j � S( N( R
R ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt use_udp� s c C s | j | j � S( N( R R� ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
use_in_tcp� s c C s | j | j � S( N( R R� ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt use_out_tcp� s c C s | j � p | j � S( N( R R ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt use_tcp� s c C s | j � p | j � S( N( R R ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt use_network� s t tcpc C se x^ t | j j � � D]G \ } } } | | k r | | k r | | k r | j | | | f Sq Wd S( N( RD RP RF R$ ( R� t portR4 RU RV R9 ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt find_port� s %$c C s1 | j t k r$ t t d � � � n | | _ d S( Ns0 User Role types can not be assigned executables.( R- t APPLICATIONSRM R R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_program� s c C s1 | j t k r$ t t d � � � n | | _ d S( Ns) Only Daemon apps can use an init script..( R- t DAEMONRM R R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_init_script� s c C s | | | t | � g | _ d S( N( RW R� ( R� t allt reservedt
unreservedRP ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
set_in_tcp� s c C s | | | t | � g | _ d S( N( RW R� ( R� R R R RP ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
set_in_udp� s c C s | t t t | � g | _ d S( N( R� RW R� ( R� R RP ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_out_tcp� s c C s | t t t | � g | _ d S( N( R� RW R� ( R� R RP ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_out_udp� s c C s: | t k r- | t k r- t t d � � � n | | _ d S( Ns$ use_resolve must be a boolean value ( t TrueR� RM R R� ( R� t val( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_resolve� s c C s: | t k r- | t k r- t t d � � � n | | _ d S( Ns# use_syslog must be a boolean value ( R" R� RM R R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_syslog� s c C s: | t k r- | t k r- t t d � � � n | | _ d S( Ns% use_kerberos must be a boolean value ( R" R� RM R R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_kerberos� s c C s: | t k r- | t k r- t t d � � � n | | _ d S( Ns+ manage_krb5_rcache must be a boolean value ( R" R� RM R R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_manage_krb5_rcache� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_pam� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_dbus� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
set_use_audit� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_etc� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_localization� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
set_use_fd� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_terminal� s c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_mail� s c C sZ | j t k r$ t t d � � � n | rE | j d d j d � n g | j d d <d S( Ns' USER Types automatically get a tmp types /tmpi ( R- t USERSRM R R� RO ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_tmp s
c C s | t k | _ d S( N( R" R� ( R� R# ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_use_uid s c C s* | j r" t j d | j t j � Sd Sd S( Nt TEMPLATETYPERJ ( R� R� t subR R t te_uid_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_uid_rules s c C s* | j r" t j d | j t j � Sd Sd S( NR3 RJ ( R� R� R4 R R t te_syslog_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_syslog_rules s c C s* | j r" t j d | j t j � Sd Sd S( NR3 RJ ( R� R� R4 R R t te_resolve_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_resolve_rules s c C s* | j r" t j d | j t j � Sd Sd S( NR3 RJ ( R� R� R4 R R t te_kerberos_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_kerberos_rules s c C s* | j r" t j d | j t j � Sd Sd S( NR3 RJ ( R� R� R4 R R t te_manage_krb5_rcache_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt! generate_manage_krb5_rcache_rules$ s c C s1 d } | j r- t j d | j t j � } n | S( NRJ R3 ( R� R� R4 R R t te_pam_rules( R� t newte( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_pam_rules* s c C s1 d } | j r- t j d | j t j � } n | S( NRJ R3 ( R� R� R4 R R t te_audit_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_audit_rules0 s c C s1 d } | j r- t j d | j t j � } n | S( NRJ R3 ( R� R� R4 R R t te_etc_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_etc_rules6 s c C s1 d } | j r- t j d | j t j � } n | S( NRJ R3 ( R� R� R4 R R t te_fd_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_fd_rules< s c C s1 d } | j r- t j d | j t j � } n | S( NRJ R3 ( R� R� R4 R R t te_localization_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_localization_rulesB s c C s@ d } | j t k r< | j r< t j d | j t j � } n | S( NRJ R3 ( R- t DBUSR� R� R4 R R t
te_dbus_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_dbus_rulesH s c C s1 d } | j r- t j d | j t j � } n | S( NRJ R3 ( R� R� R4 R R t
te_mail_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_mail_rulesN s c C sa d } d | | | f } | t j � k rA d | | j f } n d | | j | | | f } | S( NRJ s corenet_%s_%s_%ss %s(%s_t)
sD
gen_require(`
type %s_t;
')
allow %s_t %s_t:%s_socket name_%s;
( R5 t get_methodsR ( R� R4 t actiont port_namet linet method( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_network_actionT s c C s� x� | j t D]{ } | j t | � d � } | d k rD t | _ q | d d } | j d d | � } | | j k r | j j | � q q Wx� | j
t D]{ } | j t | � d � } | d k r� t | _ q� | d d } | j d d | � } | | j k r� | j j | � q� q� Wx� | j t D]{ } | j t | � d � } | d k r^t | _ q(| d d } | j d d | � } | | j
k r(| j
j | � q(q(W| j t k s�| j t k r�t j d | j t j � Sd S( NR i i����t bindt connectt udpR3 RJ ( R� R R RN R$ R" R� RT R� RO R� R� R� R� R� R4 R R t te_types( R� t it recRQ RR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_network_typesb s6 c C so xI | j D]> } | j | � d k r
| j | d j | � | j | Sq
W| j d d j | � | j d S( Ni i R
( R� t findRO ( R� t filet d( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt __find_path� s c C s& | | j k r" | j j | � n d S( N( R� RO ( R� t
capability( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt add_capability� s c C s
| | _ d S( N( R� ( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt set_types� s c C s& | | j k r" | j j | � n d S( N( R� RO ( R� t process( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt add_process� s c C s | | j | <d S( N( R� ( R� R t description( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt add_boolean� s c C s | j | � | j | <d S( N( t _policy__find_pathR� ( R� R] ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt add_file� s c C s | j | � | j | <d S( N( Rg R� ( R� R] ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt add_dir� s c C sN d } | j j � t | j � d k rJ d | j d j | j � f } n | S( NRJ i s# allow %s_t self:capability { %s };
t ( R� R? RL R t join( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_capabilities� s
"c C sN d } | j j � t | j � d k rJ d | j d j | j � f } n | S( NRJ i s allow %s_t self:process { %s };
Rj ( R� R? RL R Rk ( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_process� s
"c C s� d } | j � r�d } | t j d | j t j � 7} | j � r]| d 7} | t j d | j t j � 7} | j � r� | t j d | j t j � 7} | j
r� t | j t
� d k r� | t j d | j t j � 7} q� n | j
r"t | j t
� d k r"| t j d | j t j � 7} n | j t rQ| t j d | j t j � 7} n | j t r�| t j d | j t j � 7} n | j t r�| t j d | j t j � 7} n | j t r�| t j d | j t j � 7} n | j t r
| t j d | j t j � 7} n | j t r<| t j d | j t j � 7} n x | j D] } | | 7} qFWn | j � r�| d 7} | t j d | j t j � 7} | j r�| t j d | j t j � 7} n | j � r�| t j d | j t j � 7} n | j! t r| t j d | j t j" � 7} n | j! t rI| t j d | j t j# � 7} n | j! t rx| t j d | j t j$ � 7} n x | j% D] } | | 7} q�Wq�n | S( NRJ s
R3 i (& R R� R4 R R t
te_networkR t te_tcpR t te_in_tcpR� RL R� R t te_in_need_port_tcpR� t te_out_need_port_tcpR t te_in_all_ports_tcpR t te_in_reserved_ports_tcpR t te_in_unreserved_ports_tcpt te_out_all_ports_tcpt te_out_reserved_ports_tcpt te_out_unreserved_ports_tcpR� R t te_udpR� t te_in_need_port_udpR
t te_in_udpR� t te_in_all_ports_udpt te_in_reserved_ports_udpt te_in_unreserved_ports_udpR� ( R� R@ RY ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_network_rules� sV
"%""
"
"
"
"
"
"
" "
"
"
"c C s� d } xE | j D]: } t j d | j t j � } | t j d | | � 7} q W| j t k r� xU | j D]G } t j d | j t j
� } | t j d | j d � d | � 7} qg Wn | S( NRJ R3 t APPLICATIONR= t _ui ( R� R� R4 R R t te_transition_rulesR- R= R� R t te_run_rulesR ( R� R@ t appR t uRR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_transition_rules� s -c C s� d } | j t k r� x� | j D]� } | j d � d } | d } xi | j D]^ } t j d | t j � } | | j k r� t j | d | � } n | t j d | | � 7} qL Wq W| S| j t
k r�| t j d | j t j � 7} xE | j D]: } t j d | j t j � } | t j d | | � 7} q� Wxq | j
D]c } | j d � d } | d | j k r6t j d | j t j � } | t j d | | � 7} q6q6Wn | S(
NRJ t _ti t _rR3 t system_rR� R� R= ( R- R� R� R R� R� R4 R t te_admin_domain_rulesR� t RUSERR t te_admin_rulesR� t te_admin_trans_rules( R� R@ R^ R t roleR� R R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_admin_rules� s,
! #c C s1 d } | j r- t j d | j t j � } n | S( NRJ R3 ( R� R� R4 R R t
if_dbus_rules( R� t newif( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_dbus_if s c C s8 d } | j t k r | St j d | j t j � } | S( NRJ R3 ( R- t SANDBOXR� R4 R R t if_sandbox_rules( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_sandbox_if s
c C se d } d } | j d k r\ | t j d | j t j � 7} | t j d | j t j � 7} n x� | j D]z } t | j | d � d k rf | t j d | j | j | d j
� 7} | t j d | j | j | d j � 7} qf qf W| d k rat j d | j t j � } | | 7} | t j d | j t j
� 7} | | 7} | t j d | j t j � 7} | Sd S( NRJ R3 i i i ( R� R� R4 R R t if_initscript_admin_typest if_initscript_adminR� RL R� t if_admin_typest if_admin_rulest if_begin_admint if_middle_admint if_end_admin( R� R� t newtypesR^ t ret( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_admin_if# s" " *1
c C s t j d | j t j � S( NR3 ( R� R4 R� R t te_cgi_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� 9 s c C s t j d | j t j � S( NR3 ( R� R4 R� R t te_sandbox_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� < s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_userapp_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� ? s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_inetd_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� B s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_dbusd_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� E s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_min_login_user_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� H s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_login_user_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� K s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_admin_user_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� N s c C s� t | j � d k r5 t t d � t | j � � n t j d | j t j
� } | d 7} xV | j D]K } | d | 7} | j d � d d } | | j k rd | d | 7} qd qd W| d 7} | S(
Ni s, '%s' policy modules require existing domainsR3 s
gen_require(`s
type %s;R� R� s
role %s;s
')
(
RL R� RM R RE R- R� R4 R R t te_existing_user_typesR R� ( R� R@ R^ R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� Q s
c C s t j d | j t j � S( NR3 ( R� R4 R R t te_x_login_user_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� c s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_root_user_types( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� f s c C s d } t | j � d k r0 t t d � � � n x| | j D]q } xh | j D]] } | j | � rJ | | t | � f GH| t j d | t | � | j | j � 7} PqJ qJ Wq: Wt r
| d k r
g } x | j D] } | j
| � q� Wt t d � d j | � � � n | S( NRJ i s Type field requiredR3 s3 You need to define a new type which ends with:
%ss
( RL R� RM R R� t endswithR� R4 RX R� RO Rk ( R� R@ t tRY t default_ext( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� i s . "c C s d S( NRJ ( ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� } s c C sP t j d | j t j � } | j d k rL | t j d | j t j � 7} n | S( NR3 RJ ( R� R4 R R t te_daemon_typesR� t te_initscript_types( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s "c C s* | j r" t j d | j t j � Sd Sd S( NR3 RJ ( R� R� R4 R R RX ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_tmp_types� s c C sV d } xI | j D]> } t j d | t j � } | t j d | j | | � 7} q W| S( NRJ t BOOLEANt DESCRIPTION( R� R� R4 R t
te_boolean( R� R@ t bR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_booleans� s
$c C s: d } x- | j D]" } | t j d | t j � 7} q W| S( NRJ R� ( R� R� R4 R t te_rules( R� R@ R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_boolean_rules� s c C s t j d | j t j � S( NR3 ( R� R4 R R R� ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_sandbox_te� s c C s t j d | j t j � S( NR3 ( R� R4 R R R� ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_cgi_te� s c C s t j d | j t j � } | S( NR3 ( R� R4 R R t te_daemon_rules( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s� d } x{ | j D]p } xg | j D]\ } | j | � r | t | � d } | t j d | t | � | j | j � 7} Pq q Wq W| S( NRJ R� R3 ( R� R� R� RL R� R4 t if_rules( R� R� R� RY t reqtype( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_new_type_if� s . c C s t j d | j t j � S( NR3 ( R� R4 R R t te_login_user_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s t j d | j t j � } | S( NR3 ( R� R4 R R t te_existing_user_rules( R� t nerules( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_x_login_user_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s t j d | j t j � } | S( NR3 ( R� R4 R R t te_root_user_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_userapp_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_inetd_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s t j d | j t j � S( NR3 ( R� R4 R R t te_dbusd_rules( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s* | j r" t j d | j t j � Sd Sd S( NR3 RJ ( R� R� R4 R R R� ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_tmp_rules� s c C s) d } | t j d | j t j � 7} | S( NRJ R3 ( R� R4 R R t te_cgi_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s) d } | t j d | j t j � 7} | S( NRJ R3 ( R� R4 R R t te_sandbox_rules( R� R@ ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyR� � s c C s} d } | j s | j t k r< t j d | j t j � } n | j t t t
t f k ry | t j d | j t j � 7} n | S( NRJ R3 (
R� R- R= R� R4 R R t if_user_program_rulest TUSERt XUSERt AUSERt LUSERt if_role_change_rules( R� R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_user_if� s "c C s� d } | t j d | j t j � 7} | j rP | t j d | j t j � 7} n | j d k r� | t j d | j t j � 7} n x� | j D]� } t
| j | d � d k r� | t j d | j | j | d j � 7} x{ | j | d D]e } t
j j | � r� t j t
j | � t j � r� | t j d | j | j | d j � 7} Pq� q� Wq� q� W| | j � 7} | | j � 7} | | j � 7} | | j � 7} | | j � 7} | | j � 7} | S( NRJ R3 i i i ( R� R4 R R t if_heading_rulesR� t if_program_rulesR� t if_initscript_rulesR� RL R� R� t ost patht existst statt S_ISSOCKt ST_MODEt if_stream_rulesR� R� R� R� R� R� ( R� R� R^ RY ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_if� s( "" *1*c C s | j | j d � S( Ni ( R� R- ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_default_types� s c C s- | j | j d r) | j | j d � Sd S( Ni RJ ( R� R- ( R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_default_rules� s c C s� d } | j t t t t f k r� d } t | j � d k r� | t j d | j t
j � 7} | t j d | j t
j � 7} xH | j D]: } t j d | j t
j
� } | t j d | | � 7} q� Wq� n | S( NRJ i R3 t ROLE( R- R� R� R� R� RL R� R� R4 R R t
te_sudo_rulest te_newrole_rulest te_roles_rules( R� R@ R� R� R ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_roles_rules� s #c
C s� | j � } xy | j D]n } t | j | d � d k r | j t k sT | d k r� | t j d | j | j | d j � 7} q� q q W| j t
k r� | d | j 7} n | | j � 7} | | j � 7} | | j
� 7} | | j � 7} | | j � 7} | | j � 7} | | j � 7} x�| j D]�} t | j | d � d k r%| j t
k r�d } x� | j D]U } | t j d | d d
| j | d j � 7} | t j d | j d | � 7} qgWn* | t j d | j | j | d j � 7} x� | j | d D]� } t j j | � r�t j t j | � t j � r�| j t
k r�xi | j D]1 } | t j d | d | j | d j � 7} qOWn* | t j d | j | j | d j � 7} Pq�q�Wq%q%W| | j � 7} | | j � 7} | | j � 7} | | j � 7} | | j � 7} | | j � 7} | | j! � 7} | | j" � 7} | | j# � 7} | | j$ � 7} | | j% � 7} | | j& � 7} | | j' � 7} | | j( � 7} | | j) � 7} | | j* � 7} | | j+ � 7} | S(
Ni i R
R3 i s@
########################################
#
# %s local policy
#
RJ t TEMPLATETYPE_ti����R� t TEMPLATETYPE_rw_tt _rw_t(, R� R� RL R� R- R� R� R4 R RX R� Rl Rm R[ R� R� R� R� R� R� R� R� R� R� R� R� t te_stream_rulesR� R RG RE RA R6 RC R8 RI R: R� RN R� R� RL R< R> ( R� R@ R^ t newte_tmpt domainRY ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_te
s` 4 /'*12*c C s� d } g } x� t | j j � � D]� } t j j | � r� t j t j | � t j � r� t j
d | j | j | d j � } n& t j
d | j | j | d j
� } t j
d | | � } | j t j
d | j | d | � � q" Wx t | j j � � D]h } t j
d | j | j | d j � } t j
d | | � } | j t j
d | j | d | � � q� W| j t t g k r�t | � d k r�t j Sn | j t t t t g k r�| j r�t t d � � � n | j r t j
d | j t j � } | j t j
d | j | � � n | j d k rit j
d | j t j � } | j t j
d | j | � � n | j � d j | � } | S(
NRJ R3 i t FILENAMEt FILETYPEi s< You must enter the executable path for your confined processt
EXECUTABLEs
(! RD R� RF R� R� R� R� R� R� R� R4 R t fc_sock_filet fc_fileRO R� t fc_dirR- R0 R� RL R t fc_userR� R� R� RM R t
fc_programR� t
fc_initscriptR? Rk ( R� t newfct fclistRY t t1t t2( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_fcH s4 1)&+ &+
& ""
c C sZ d } | j t t t t t f k r( | Sd } x | j D] } | d | 7} q8 W| d k ri | d 7} n t j d | j t
j � } | t j d | | � 7} | j t k s� | j t k rxH | j D]: } t j d | j t
j
� } | t j d | | � 7} q� Wn | j t k r7| t j d | j t
j � 7} n | t j d | j t
j � 7} | S( NRJ s %s_rs system_rR3 t ROLESR= ( R- R� R� R� R� R� R� R� R4 R R RA R� t admin_transt min_login_user_default_contextt x_login_user_default_context( R� t newshR� R� R R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_user_shk s$
" c C s� t j d | j t j � } t j d | j | � } | j t k ra t j d d | j | � } n7 t j d | j | � } | t j d | j t j � 7} | j r� | t j d | j t j
� 7} n | j d k r� | t j d | j t j
� 7} n x9 t | j
j � � D]" } | t j d | t j
� 7} q
Wx9 t | j j � � D]" } | t j d | t j
� 7} qFWxs | j t | j t D]Y } | j | d � d k r�t j d d | t j � } | t j d | j | � 7} q�q�Wxh | j t D]Y } | j | d
� d k r�t j d d | t j � } | t j d | j | � 7} q�q�W| | j � 7} | t j d | j t j � 7} | S( NR3 t
DOMAINTYPEt TEMPLATEFILEs %sR� RJ R t PORTNUMs %dRW ( R� R4 R� R t compileR R- R� t manpageR� t
restoreconR� RD R� RF R� R� R R� R R$ t tcp_portsR� t udp_portsR� R# ( R� RR R� RY R� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generate_sh� s2 "" # # c C s� d } t d � } | d k r' d } n
| d } | t j 7} | j t k r1| t j 7} | j r1| t j d | j t j
� 7} | j d k r� | t j d | j t j
� 7} n x9 t | j
j � � D]" } | t j d | t j
� 7} q� Wx< t | j j � � D]" } | t j d | t j
� 7} qWq1n | t j d | t j � 7} t j d | j | � } t j d | j | � } t | j � d k r�| d
d j | j � 7} n | t j d | j t j � 7} t j d | j | � } t j d t j d
� | � } | j t k r+t j d d | � } n | j t k rYt j d | j d | � } n | j t t t t t f k r�t j d | j d | � } n | S( NRJ s selinux-policys 0.0.0i R� t VERSIONt
MODULENAMEt
DOMAINNAMEi s Requires(post): %s
s , t
TODAYSDATEs %a %b %e %Ys %relabel_filess .*%s_selinux.8.*s .*%s_u.*( R, R$ R t header_comment_sectionR- R t define_relabel_files_beginR� R� R4 t define_relabel_files_endR� RD R� RF R� t base_sectionR� R RL R� Rk t mid_sectiont timet strftimeR� R� R� R� R� R� ( R� t newspect selinux_policynvrt selinux_policyverRY ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
generate_spec� s>
" & c C sC d | | j f } t | d � } | j | j � � | j � | S( Ns %s/%s_selinux.spect w( R� t opent writeR t close( R� t out_dirt specfilet fd( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
write_spec� s
c C sC d | | j f } t | d � } | j | j � � | j � | S( Ns %s/%s.teR ( R� R R R� R ( R� R t tefileR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt write_te� s
c C sS d | | j f } t | d � } | j | j � � | j � t j | d � | S( Ns %s/%s.shR i� ( R� R R R R R� t chmod( R� R t shfileR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt write_sh� s
c C sC d | | j f } t | d � } | j | j � � | j � | S( Ns %s/%s.ifR ( R� R R R� R ( R� R t iffileR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt write_if� s
c C sC d | | j f } t | d � } | j | j � � | j � | S( Ns %s/%s.fcR ( R� R R R� R ( R� R t fcfileR ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt write_fc� s
c C sQ d d l } | j � } | j � xe| j j | j � D]N} | j j | j � x� | j | j
| j D]m } xd | j D]Y } | d k r� qy n | j
| � ry t j j | � r� | j | � q� | j | � qy qy Wqi Wx� | j j | j g � D]� } x� | j | j
| j D]m } xd | j D]Y } | d k r9q!n | j
| � r!t j j | � rj| j | � qz| j | � q!q!WqWq� Wq8 W| j j d � d } x� | j j d | g � D]� } x� | j
| j | j D]m } xd | j D]Y } | d k r q�n | j
| � r�t j j | � r1| j | � qA| j | � q�q�Wq�Wq�Wd S( Ni����s /etct /s
%s-systemd( t yumt YumBaset setCacheDirt rpmdbt searchProvidesR� R� RO R t dirlistt filelistt ghostlistR� t
startswithR� R� t isfileRh Ri t searchNamest base_package_nameR ( R� R' t ybt pkgt fnameR� t bpkgt binary_name( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt __extract_rpms� s@
c C s� y | j � Wn t k
r! n Xt j j d | j � rR | j d | j � n t j j d | j � r� | j d | j � n t j j d | j � r� | j d | j � n t j j d | j � r� | j d | j � n t j j d | j � r| j d | j � n t j j d | j � rB| j d | j � n g } x@t
| j j � � D])} g } y | j | d d d
} Wn t
k
r�q^n Xx; | j | d D]( } | j | � r�| j | � q�q�q�Wt | � d k r^xa | D]Y } | t
| j j � � k r#| j | =q�| t
| j j � � k r�| j | =q�q�q�Wt
t | j | d � t | � � | j | d <q^q^Wd S( Ns /var/run/%s.pids /var/run/%ss /var/log/%ss /var/log/%s.logs /var/lib/%ss /etc/rc.d/init.d/%ss /etc/rc\.d/init\.d/%si i R& ( t _policy__extract_rpmst ImportErrorR� R� R0 R Rh t isdirRi R RD R� RF t
IndexErrorR/ RO RL R� R� t set( R� t
temp_basepathR9 t temp_dirsRY ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt
gen_writeable sF
c B s� | j e k r d Se j j | j � sC e j j d | j � d Se j d | j � } xS | j
� j � D]? } x6 | j D]+ } | j
| � r| d | j | d Uq| q| Wql W| j � d S( Nsl
***************************************
Warning %s does not exist
***************************************
s nm -D %s | grep Us self.%s( R- R R� R� R� R� t syst stderrR t popent readR R� R/ R ( R� R t sR� ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt gen_symbolsS s c C s� d } | d | j | � t d � f 7} | d | j | � t d � f 7} | d | j | � t d � f 7} | j t k r� | d | j | � t d � f 7} | d | j | � t d � f 7} n | S( Ns Created the following files:
s %s # %s
s Type Enforcement files Interface files File Contexts files Spec files Setup Script( R R R# R% R- R� R R! ( R� R t out( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt generatee s ####&(v t __name__t
__module__R R R R R R
R R
R R R R R R R R R R R R R! R$ R% R& R' R( R) R* R+ R, R- R. R/ R1 R2 R6 R8 R: R< R> RA RC RE RG RI RL RN RT R[ Rg Ra Rb Rd Rf Rh Ri Rl Rm R R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R R R R R! R# R% R9 R@ RF R� t getcwdRH ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyRX � s� � & 8
> # # * * 3 ( (H R� RA R� R� R5 R R R R t templatesR R R R R R R R
R R R
R R R R t sepolgen.interfacest
interfacest sepolgen.defaultst defaultst sepolgenR t PROGNAMEt gettextt bindtextdomaint
textdomaint installR" t TypeErrort IOErrort builtinst strt __dict__R" R, R: RB R R R R t ADMIN_TRANSITION_INTERFACEt USER_TRANSITION_INTERFACER RJ t INETDR� R� R= R� R� R� R� R� R� R� RE R RI R R0 RW RX ( ( ( s7 /usr/lib64/python2.7/site-packages/sepolicy/generate.pyt <module> s�