|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21571/root/usr/lib64/python2.4/site-packages/ |
Upload File : |
mò
b&KRc @ sJ d k Z d k Z d k Z d k Z d k Z d k Z d Z d e e e e f Z d Z d f d „ ƒ YZ d f d „ ƒ YZ
d f d „ ƒ YZ d k Z d k
Z
d
Z e e i j o e i i e ƒ n d f d „ ƒ YZ d
f d „ ƒ YZ d „ Z d f d „ ƒ YZ d Z d Z d Z d Z d Z d Z d f d „ ƒ YZ d S( Ns (\{[^\}]*\}|[^ :]*)s3 (allow|dontaudit)[ ]+%s[ ]*%s[ ]*:[ ]*%s[ ]*%ssÆ /^[[:blank:]]*interface[[:blank:]]*\(/ {
IFACEFILE=FILENAME
IFACENAME = gensub("^[[:blank:]]*interface[[:blank:]]*\\(\`?","","g",$0);
IFACENAME = gensub("'?,.*$","","g",IFACENAME);
}
/^[[:blank:]]*(allow|dontaudit)[[:blank:]]+.*;[[:blank:]]*$/ {
if ((length(IFACENAME) > 0) && (IFACEFILE == FILENAME)){
ALLOW = gensub("^[[:blank:]]*","","g",$0)
ALLOW = gensub(";[[:blank:]]*$","","g",$0)
print FILENAME "\t" IFACENAME "\t" ALLOW;
}
}t contextc B s t Z d „ Z d „ Z RS( Nc C sp | | _ | i d ƒ } | d | _ | d | _ | d | _ t | ƒ d j o | d | _ n
d | _ d S( Nt :i i i i t s0( t scontextt selft splitt cont usert rolet typet lent mls( R R R ( ( t) /usr/lib64/python2.4/site-packages/avc.pyt __init__1 s
c C s | i S( N( R R ( R ( ( R t __str__< s ( t __name__t
__module__R
R ( ( ( R R 0 s t accessTransc B s t Z d „ Z d „ Z RS( Nc C sÅ h | _ y t d ƒ } Wn% t j
o } t d | ƒ ‚ n X| i ƒ i d ƒ } d } xX | D]P } t i | | ƒ } | d j o+ | i ƒ d i ƒ | i | i ƒ d <qc qc W| i ƒ d S( Ns: /usr/share/selinux/devel/include/support/obj_perm_sets.spts\ Reference policy generation requires the policy development package selinux-policy-devel.
%ss
s' ^define *\(`([^']*)' *, *` *\{([^}]*)}'i i ( R t dictt opent fdt IOErrort errort readR t recordst regexpt rt ret matcht mt Nonet groupst close( R R R R R R R ( ( R R
@ s
/c C sd g } xW | D]O } | | i i ƒ j o | | i | 7} q
| d j o | i | ƒ q
q
W| S( Nt {t }( R! R" ( t lt vart vR R t keyst append( R R$ R# R% ( ( R t getM s
( R R R
R( ( ( ( R R ? s
t
interfacesc B s# t Z d „ Z d „ Z d „ Z RS( Nc C sÍ h | _ t ƒ } t i d ƒ \ } } | i t ƒ | i
ƒ | i ƒ i d ƒ } | i
ƒ t | ƒ d j oYd t }
xL| D]@} t i |
| ƒ } | d j o q n | i ƒ } t i i | d ƒ i d ƒ d } | d } | d i ƒ } | d i ƒ } | d i ƒ } | i | d
i ƒ ƒ } x | D]‡ }
x~ | D]v } xm | D]e } |
| | f | i i$ ƒ j o g | i |
| | f <n | i |
| | f i% | | | f ƒ qPWqCWq6Wq Wn d S( Ns= awk -f - /usr/share/selinux/devel/include/*/*.if 2> /dev/nulls
i s ([^ ]*)[ ]+([^ ]*)[ ]+%st .i i i i i (& R R R t transt ost popen2t inputt outputt writet
awk_scriptR R R R R
t allow_regexpR R R R R R R t valt patht basenamet filet ifacet Scont Tcont ClassR( t Accesst st tt cR& R' ( R R8 R; R6 R7 R3 R. R9 R: R R R> R R< R R= R/ R+ ( ( R R
X s<
#
c C sT | i i ƒ } | i ƒ x4 | D], } | GHx | i | D] } d G| GHq9 Wq Wd S( Ns ( R R R& t sortt kt i( R R& RA R@ ( ( R t outs s
c C sÊ | i i ƒ } g } | | | f | j oy xn | i | | | f D]V } | | d j o? | d i | ƒ d j o | i
d | ƒ q˜ | i | ƒ qB qB W| Sn d | | f | j oy xn | i d | | f D]V } | | d j o? | d i | ƒ d j o | i
d | ƒ q'| i | ƒ qÑ qÑ W| Sn | d | f | j oy xn | i | d | f D]V } | | d j o? | d i | ƒ d j o | i
d | ƒ q¶| i | ƒ q`q`W| Sn | Sd S( Ni i s $1( R R R& t retR8 R9 R: RA R; t findt insertR' ( R R8 R9 R: R; R& RC RA ( ( R R { s6 ( R R R
RB R ( ( ( R R) W s s /usr/share/selinux/pluginst Analyzec B s t Z d „ Z d „ Z RS( Nc C sb g | _ xR t i d ƒ D]A } t i i | ƒ d } | i i t i
| t i | ƒ Œ ƒ q Wd S( Ns /usr/share/selinux/plugins/*.pyiýÿÿÿ( R t pluginst globt pR, R4 R5 t pluginR' t impt load_modulet find_module( R RJ RI ( ( R R
Ÿ s
c C s• g } | } x‚ | i D]w } | d j o Pn | i | ƒ } t | ƒ d j o q n | d } t | d ƒ d j o | i
| d ƒ q q W| S( Ni i ( RC t AVCSt avcsR RG RI R t analyzeR R
R' ( R RN RC RI RO R ( ( R t process¥ s
( R R R
RQ ( ( ( R RF ž s t serulec B sJ t Z d „ Z d „ Z d „ Z d „ Z d d „ Z d „ Z d „ Z RS( Nc C sS | d | _ | d | _ | d | _ | d | _ g | _ h | _ d | _ d S( Ni i i i (
t keyR R t sourcet targett seclasst accesst avcinfoR R7 ( R RS ( ( R R
´ s
c C sh xa | d D]U } | | i i ƒ j o! g | i | <| i i | ƒ n | i | i | d ƒ q Wd S( Ni i ( t avct aR RX R& RW R' ( R RY RZ ( ( R t add½ s
c C sN t | i ƒ d j o | i d Sn& | i i ƒ d t i | i ƒ d Sd S( Ni i s { s }( R
R RW R? t stringt join( R ( ( R t getAccessÄ s
c C s | i GHd S( N( R RX ( R ( ( R t getNameË s i c C s÷ d } | d | i | i | i ƒ | i | i ƒ f } | o´ | i i ƒ } | i
ƒ x˜ | D]Œ } xƒ | i | D]t } | d | d } t
| d ƒ o | d | d } n t
| d ƒ o | d | d } n | d | } qs Wq_ Wn | S(
Nt s %s %s %s:%s %s;s
#TYPE=AVC MSG=%s i i s COMM=%s i s NAME=%s s : ( RC R R RT t gettargetRV R^ t verboseRX R& R? RA t xR
( R Rb R& RC RA Rc ( ( R RB Î s 2
c C s. d } | i } | i ƒ } | i } | i ƒ } | i | | | | ƒ } t
| ƒ d j o | i ƒ Sn | d d } d | i ƒ } | d 7} t }
x† | D]~ } | | d j o& | d | d 7} | d } t }
n |
o" | d | d | f 7} t }
qž | d | d | f 7} qž W| d
7} | S( NR` i i s
#%s
s optional_policy(`
s ')
gen_require(`%s', `
s %s(%s)
i s # %s(%s)
s ');( RC R RT R8 Ra R9 RV R: R^ R; R7 R R R
RB R6 t Truet firstRA t False( R R7 RA R8 R RC R; R6 R9 R: Re ( ( R t gen_reference_policyÞ s0
c C s& | i | i j o d Sn | i Sd S( NR ( R RT RU ( R ( ( R Ra ù s ( R R R
R[ R^ R_ RB Rg Ra ( ( ( R RR ³ s c C s@ t i i d t i d ƒ t i i d | ƒ t i i ƒ d S( Ns %s: i s %s
( t syst stderrR0 t argvR t flush( R ( ( R t warningÿ s t TERulesc B s5 t Z d „ Z d „ Z d „ Z d „ Z d „ Z RS( Nc C s d | _ | | _ d S( Nt allowt dontauditt
auditallow( Rn Ro Rp ( R t
VALID_CMDSt serules( R Rr ( ( R R
s c C si | i ƒ } xV | oN | i ƒ } t | ƒ o% | d | i j o | i | ƒ n | i ƒ } q Wd S( Ni ( R. t readlinet lineR t recR
R Rq t
add_terule( R R. Rt Ru ( ( R t load
s !c C sº | i d ƒ } | d i ƒ } | d }
| i | d ƒ \ } } | d i ƒ } | i | ƒ \ } } xL | D]D } x; | D]3 } x* | D]" } | i i |
| | | | ƒ qˆ Wq{ Wqn Wd S( NR i i ( t ruleR t rct rulesR R t rules_splitt sourcest targetst classesRW t scont tconRV Rr t add_rule( R Rx RV R€ Rz R RW R| R~ Ry R R} ( ( R Rv s
c C s: | i d | ƒ \ } } | i | | ƒ \ } } | | f S( Ni ( R t
get_targetRz t idxRU t subject( R Rz RU Rƒ R„ ( ( R R{ s c C sv g } | | d d j oÜ x9 | | i d ƒ D]$ } t | ƒ o | i | ƒ q/ q/ W| d } xþ | | D]ƒ } | i d ƒ d j oP xM | i d ƒ D]8 } t | ƒ o | i | ƒ n | d } | | f Sq˜ Wn | i | ƒ | d } ql Wnl | | i d ƒ d j o@ xN | | i d ƒ D]$ } t | ƒ o | i | ƒ q%q%Wn | i | | ƒ | d } | | f S( Ni R! i R" t ;(
RU Rx RA R R= R
R' R< RD t s1( R RA Rx RU R< R† R= ( ( R R‚ # s4
( R R R
Rw Rv R{ R‚ ( ( ( R Rm s
i i i i t SERulesc B s t Z d d d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d d d d „ Z d
„ Z d „ Z
d „ Z d
„ Z d „ Z
d „ Z d „ Z d „ Z d d d „ Z RS( Ni c C s; | | _ | i ƒ t | _ | | _ g | _ h | _ d S( N( t last_reloadR t
initializeRf t gen_ref_policyRb RN t INVALID_SIDS( R Rˆ Rb ( ( R R
H s
c C s( h | _ h | _ g | _ g | _ d S( N( R t seRulesR~ t typest roles( R ( ( R R‰ P s c C sT g } d } | i ƒ } x5| o-| i ƒ } x– | D]Ž } | d j p | d j p
| d j o
d } q5 | d j o | i | ƒ d } q5 | d j o | i
o | i ƒ Pq5 | i | ƒ q5 W| pM d } t i | | ƒ } | d j o$ d } | i d ƒ | i d
ƒ qn | o | i | ƒ d } g } n | i ƒ } q Wd S( Ni s avc:s message=avc:s msg='avc:i s security_compute_sid:s type=MAC_POLICY_LOADs$ audit\(\d+\.\d+:\d+\): policy loadedt load_policyt granted( R t foundR. Rs Rt R Ru RA R t security_compute_sidRˆ R‰ R' R R R R R t translate( R R. R R‘ RA R R Ru Rt ( ( R Rw V s: '
c C s h } g | d <d | j o | i o | i ƒ n d | j o d Sn yxÉ t d t | ƒ ƒ D]² } | | d j o\ | d } xH | t | ƒ j o4 | | d j o# | d i | | ƒ | d } q‡ Wqc n | | i d ƒ } t | ƒ d j o qc n | d | | d <qc Wx) d D]! } | | i ƒ j o d Sq q Wt | d ƒ d j o d Sn Wn' t j
o } t d
t ƒ d Sn X| i | ƒ d S( NRW R R i R! i R" t =i R t tcontextt tclasss Bad AVC Line: %s( s scontexts tcontexts tclass( t AVCR R Rˆ R‰ t rangeR
RA R' R R= R& t
IndexErrort eRl RY t add_allow( R R Rš RA R= R— ( ( R R“ x s<
$ c C s» h } xI | D]A } | i d ƒ } t | ƒ d j o q
n | d | | d <q
WyW t | d ƒ i } t | d ƒ i } | i | ƒ | i | ƒ | | i
| | f <Wn d Sn Xd S( NR” i i i R R• ( R Ru RA R R= R
R R R R R t add_typet add_roleR‹ ( R Ru RA R R R= ( ( R R’ š s
c C s® x— | i D]Œ } | d | d j oq | d | d j o\ | d | d j oG | d | d j o2 | d | d j o | d | d j o d Sq
q
W| i i | ƒ d S( NR– RW R• R t commt name( R RN RZ R— R' ( R R— RZ ( ( R t add_avcª s
~ R` c C sÜ h }
| |
d <| |
d <| |
d <| |
d <| |
d <| |
d <| i |
ƒ | i | | ƒ | i
| ƒ | i
| ƒ | | | t f } | | i i ƒ j o t | ƒ | i | <n | i | i | | | | f ƒ d S( NR– RW R€ R Rž RŸ ( R— R– RW R€ R Rž RŸ R R t add_classRœ t rule_typeRV RS RŒ R& RR R[ t msg( R R¢ R R€ R– RW R£ Rž RŸ RS R— ( ( R R ° s
c C s* | i | d | d ƒ t | d ƒ } t | d ƒ } | i | i ƒ | i | i ƒ | i | i ƒ d | i | i | d f } | | i i ƒ j o t
| ƒ | i | <n | i ƒ } x) d
D]! } | | j o d | | <qÄ qÄ W| i | ƒ | i | i | d | d | d | d f ƒ d S( NR– RW R• R Rn RŸ Rž R£ R` ( s names comms msg( R R¡ R— R R• R Rœ R R R RS RŒ R& RR t avckeysRA R R[ ( R R— R¤ RA RS R R• ( ( R R›  s
c C sh | | i i ƒ j o g | i | <n x: | D]2 } | | i | j o | i | i | ƒ q. q. Wd S( N( RV R R~ R& RW RZ R' ( R RV RW RZ ( ( R R¡ Ø s c C s( | | i j o | i i | ƒ n d S( N( R R RŽ R' ( R R ( ( R R ß s c C s( | | i j o | i i | ƒ n d S( N( R R R R' ( R R ( ( R Rœ ã s c C s t | _ t ƒ | _ d S( N( Rd R RŠ R) R7 ( R ( ( R Rg ç s c C s" | i o d | Sn d | Sd S( Ns policy_module(%s, 1.0);s module %s 1.0;( R RŠ t module( R R¥ ( ( R t
gen_moduleë s
c C s5 | i i ƒ | i i ƒ | i i ƒ } | i ƒ d } | i p’ x | D]ƒ } | i | } t
| ƒ d j oE | i ƒ | d | 7} x | D] } | d | 7} q W| d 7} qJ | d | | d f 7} qJ Wn x | i D] } | d | 7} qß W| i p& x# | i D] } | d | 7} q Wn | d
7} | S( Ns
require {
i s class %s {s %ss };
s class %s %s;
i s type %s;
s role %s;
s };
( R RŽ R? R R~ R& Ru RŠ RA RW R
RZ ( R RZ R& RW RA Ru ( ( R t gen_requiresñ s4
c C s< t ƒ } x, | i | i ƒ D] } | d d GHd GHq Wd S( Ni R` ( RF RZ RQ R RN RA ( R RZ RA ( ( R RP
s
c C s= d } t | i i ƒ ƒ d j o& t | i ƒ d j o t d ƒ ‚ n | d j o' | | i | ƒ 7} | | i ƒ 7} n | o | | i ƒ 7} n x% | i i ƒ D] } | d | 7} q§ W| i i ƒ } | i ƒ x^ | D]V } | i
o% | | i | i | i ƒ d 7} qß | | i | i | i ƒ d 7} qß W| S( NR` i s No AVC messages found.s role %s types %s;
s
( Ru R
R RŒ R& R‹ t
ValueErrorR¥ R¦ R§ t requireRA R? RŠ Rg R7 RB Rb ( R R© R¥ RA R& Ru ( ( R RB s& 2
%%( R R R
R‰ Rw R“ R’ R R R› R¡ R Rœ Rg R¦ R§ RP RB ( ( ( R R‡ G s " " ( Rh R, t pwdR\ R t selinuxt objR2 R1 R R R) RH RK t
pluginPathR4 R' RF RR Rl Rm t ALLOWt STYPEt TTYPEt CLASSt COMMt NAMER‡ ( R« Rl R1 RF R¯ R R RK RH R\ R) Rh Rª R² R® R° R‡ Rm R¬ R³ RR R± R2 R R, R ( ( R t ? s* 6BL ;