|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21573/root/usr/lib/python2.4/site-packages/setroubleshoot/ |
Upload File : |
m
3Uc @ s d d d d d d d d d d d
d d d
d d d g Z d k Z d k l Z l Z e i d e d d d e d d d e d e d d d k l Z e d h d e <d d < d k Td! k l Z d k
Td k Td k Td k Td k
Td k i Z d k Td k Z d k Z d k Td" Z d# Z d$ Z h e e d% <e e d& <e e d' <Z h e d( <e d) <e d* <Z h d( e <d) e <d* e <Z d e f d+ YZ d e f d, YZ d e f d- YZ d e f d. YZ d e f d/ YZ! d0 e f d1 YZ" d e f d2 YZ# d e f d3 YZ$ d e f d4 YZ% d
e f d5 YZ& d e f d6 YZ' d e f d7 YZ( d e f d8 YZ) d e f d9 YZ* e+ d: j o d k, Z, e, i- d; d< Z. e' Z/ e/ i0 e. d= e/ i1 d" Z2 e2 i3 i4 d" Z5 e5 i6 GHd> e2 i3 GHe/ GHe, i7 e, i- d; d" j o d? GHn d@ e, i- d; GHe, i8 n d S(A t SignatureMatcht SEFiltert SEFaultSignaturet SEFaultSignatureInfot SEFaultSignatureSett SEFaultSolutiont SEFaultSignatureUsert
SEEnvironmentt SEDatabasePropertiest SEFaultUserInfot SEFaultUserSett SEEmailRecipientt SEEmailRecipientSett FILTER_NEVERt
FILTER_ALWAYSt FILTER_AFTER_FIRSTt filter_textN( s parse_config_settings
get_configt domaint generalt i18n_text_domaint localedirt i18n_locale_dirt unicodet codesett
i18n_encoding( s log_initt testt consolet levelt debug( t *( s
get_configi i i s Never Ignores
Ignore Alwayss Ignore After First Alertt nevert alwayst after_firstc B s t Z d Z RS( Nc C s | | _ | | _ d S( N( t siginfot selft score( R" R! R# ( ( t< /usr/lib/python2.4/site-packages/setroubleshoot/signature.pyt __init__^ s ( t __name__t
__module__R% ( ( ( R$ R ] s c B s t Z h d h d d <d d <<d h d d <<d h d d <<d h d d <<d
h d d <<d h d d <<d h d d <d
e <<d h d d <d
e <<d h d d <<d h d d <<d h d d <<Z d Z d Z d Z d Z RS( Nt versiont XMLFormt attributet defaultc C s d S( Ns 1.0( ( ( ( R$ t <lambda>e s t platformt elementt kernelt policy_typet
policy_rpmt enforcet selinux_enabledt import_typecastt selinux_mls_enabledt
policyverst hostnamet unamec C s t t | i d S( N( t superR R" R% ( R" ( ( R$ R% r s c C s d k } t \ | _ | _ t i d | _ t d | _ t t i
| _ t i } | d j o
d | _
n
d | _
t t i | _ t t i | _ | i | _ d i | i | _ d S( Ni s selinux-policyi t
Permissivet Enforcingt ( R- t get_os_environmentR" R/ t selinuxt selinux_getpolicytypeR0 t get_rpm_nvr_by_name_temporaryR1 t strt security_policyversR6 t security_getenforceR2 t boolt is_selinux_enabledR3 t is_selinux_mls_enabledR5 t nodeR7 t joinR8 ( R" R2 R- ( ( R$ t updateu s
c C s | i | S( N( R" t __eq__t other( R" RK ( ( R$ t __ne__ s c C sE x> | i i D]- } t | | t | | j o t Sq q Wt S( N( R" t _xml_infot keyst namet getattrRK t Falset True( R" RK RO ( ( R$ RJ s
( R& R' t booleanRM R% RI RL RJ ( ( ( R$ R c s
c B s t Z h d h d d <d d <<d h d d <d e <<d h d d <d e <<d
h d d <d e <<d h d d <<d h d d <d
d <<d h d d <<d h d d <<Z d Z RS( NR( R) R* R+ c C s d S( Ns 1.0( ( ( ( R$ R, s t summaryR. t export_typecastt problem_descriptiont fix_descriptiont fix_cmdt rpm_listt listt rpmt rpm_versiont policy_versionc C s; t t | i | | _ | | _ | | _ | | _ d S( N( R9 R R" R% RT RV RW RX ( R" RT RV RW RX ( ( R$ R% s
( R& R' t string_to_cdata_xmlnodeRM R% ( ( ( R$ R s
c B sh t Z h d h d d <d e <d d <<d h d d <d e <d d <<Z e d Z RS(
Nt filter_typeR) R. R4 R+ c C s t S( N( R
( ( ( R$ R, s t countc C s d S( Ni ( ( ( ( R$ R, s c C s t t | i | | _ d S( N( R9 R R" R% R_ ( R" R_ ( ( R$ R% s ( R& R' t intRM R
R% ( ( ( R$ R s Tc B s t Z h d h d d <<d h d d <d e <d d <<d h d d <d e <d d <<d
h d d <d e <d d <<Z d
Z d Z d d Z RS( Nt usernameR) R* t seen_flagR4 R+ c C s t S( N( RQ ( ( ( R$ R, s t delete_flagc C s t S( N( RQ ( ( ( R$ R, s t filterR. c C s t S( N( R ( ( ( R$ R, s c C s t t | i | | _ d S( N( R9 R R" R% Rb ( R" Rb ( ( R$ R% s c C s[ | | i j o t t d | n | d j o t t d n t | | | d S( Ns! item (%s) is not a defined memberRb s changing the username is illegal( t itemR" t _namest ProgramErrort ERR_NOT_MEMBERt ERR_ILLEGAL_USER_CHANGEt setattrt data( R" Rf Rl ( ( R$ t update_item s
c C s t o# t i d t i | d | n | t j p | t j p
| t j o2 t o t i d n t d | | _ t Sn t
d | d S( Ns% update_filter: filter_type=%s data=%st unknowns update_filter: !!!R_ s Bad filter_type (%s)( R t log_sigt map_filter_value_to_namet getR_ Rl R
R R R R" Re RR t
ValueError( R" R_ Rl ( ( R$ t
update_filter s #'( R& R' RS R RM R% Rm t NoneRs ( ( ( R$ R s t AttributeValueDictionaryc B s t Z d Z d Z RS( Nt unstructuredc C s t t | i d S( N( R9 Ru R" R% ( R" ( ( R$ R% s ( R& R' RM R% ( ( ( R$ Ru s c B s t Z h d h d d <d d <<d h d d <<d h d d <<d h d d <d
d <<d h d d <d
e <<d h d d <d
e <<d h d d <<d h d d <<d h d d <d
e <<Z d Z RS( NR( R) R* R+ c C s d S( Ns 3.0( ( ( ( R$ R, s t analysis_idR. t hostt accessRZ t operationt scontextR4 t tcontextt tclasst tpatht portc K sD t t | i x* | i D] \ } } t | | | q Wd S( N( R9 R R" R% t kwdst itemst kt vRk ( R" R R R ( ( R$ R% s
( R& R' t
AvcContextRa RM R% ( ( ( R$ R s c B s t Z h d h d d <<d h d d <d e <<d h d d <<d h d d <<d h d d <<d h d d <d
d <<d h d d <d
d <<d
h d d <d e <<d h d d <d e <<d h d d <<d h d d <d e <<d h d d <<d h d d <d e <<d h d d <d e <<d h d d <<d h d d <d e <<d h d d <d
d <d e <<d h d d <d e <<d h d d <d e <<d h d d <d e <d d <<d h d d <<d h d d <d
d <d e <<Z
d d d d d
d d d d d d d g Z d Z d! Z
d" Z d# Z e d$ Z e d% Z d& Z d' Z d( Z d) Z d* d+ d, Z d- Z RS(. NRw R) R. t audit_eventR4 t sourcet spathR~ t src_rpm_listRZ R[ t tgt_rpm_listR{ R| R} R Rx t sigt solutiont categoryt environmentt line_numberst linet first_seen_datet last_seen_datet report_countR+ c C s d S( Ni ( ( ( ( R$ R, s t local_idt userst userc K sD t t | i x* | i D] \ } } t | | | q Wd S( N( R9 R R" R% R R R R Rk ( R" R R R ( ( R$ R% s
c C sI x* | i D] } t | | t | | q
Wt | i | i | _ d S( N( R" t
merge_includeRO Rk RP R! t merge_listsR ( R" R! RO ( ( R$ t update_merge s
c C sg x) | i D] } | i | j o | Sq
q
Wt o t i d | n t | } | i i | | S( Ns new SEFaultSignatureUser for %s( R" R R Rb R Ro R t append( R" Rb R ( ( R$ t
get_user_data s
c C sN t o t i d | n d } | i | } | d j o
| i } n | S( Ns find_filter_by_username %s( R Ro Rb Rt Re R" R t user_data( R" Rb R Re ( ( R$ t find_filter_by_username# s
c C s# | i | } | i | | d S( N( R" R Rb R Rs R_ Rl ( R" Rb R_ Rl R ( ( R$ t update_user_filter- s c C s d } | i | } t o t i d | | n | d j oN | d j o
| | _ n | i | } t o t
i d | | | q n | S( Nt displays5 evaluate_filter_for_user: found %s user's filter = %ss4 evaluate_filter_for_user: found filter for %s: %s
%s( t actionR" R Rb t fR t log_rpcRt R_ t evaluate_filtert log_alert( R" Rb R_ R R ( ( R$ t evaluate_filter_for_user1 s
c C s | i } d } | t j o
d } nY | t j o$ | i d j o
d } q~ d } n( | t j o
d } n t d | | i d 7_ | S( NR i t ignores unknown filter_type (%s)i ( Re R_ R R
R R` R Rr ( R" Re R_ R ( ( R$ R ? s
c C sJ t | t o, t | d j o d i | SqF d Sn t d Sd S( Ni R< t ( t
isinstanceRY RZ t lenRH t default_textRt ( R" RY ( ( R$ t format_rpm_listR s
c C s d | i | i f S( Ns %s [ %s ]( R" R~ R} ( R" ( ( R$ t format_target_object[ s c C sE t d } | i i d j o d | | i i f Sn | i i Sd S( Nsm SELinux is in permissive mode, the operation would have been denied but was permitted due to permissive mode.R: s% <font color="FF0000">[%s]</font><p>%s( t _t permissive_msgR" R R2 R RV ( R" R ( ( R$ t# description_adjusted_for_permissive^ s t 000000s #FFFFFFc C s | i } | i i } | i } | i i } | i i } | i d j o
d }
nA | i i
d i g }
| i D] } |
t | qt ~
}
d | | f } d | } d } | o | d t d | f 7} n d } | d | 7} | d 7} | | t d
7} | | | 7} | | t d 7} | | | 7} | | t d 7} | | | 7} | | t d
7} | | d 7} | d 7} d | } | d 7} | | t d t | i i f 7} | | t d t | i i f 7} | | t d t | i f 7} | | t d t t | i f 7} | | t d t t | i f 7} | | t d t t | i! f 7} | | t d t t | i" f 7} | | t d t t | i# | i$ f 7} | | t d t t | i# | i% f 7} | | t d t t | i& f 7} | | t d t t | i' f 7} | | t d t t | i( f 7} | | t d t t | i) f 7} | | t d t t | i* f 7} | | t d t t | i+ i, f 7} | | t d t t | i- f 7} | | t d! t t | i. f 7} | | t d" t t | i/ f 7} | | t d# t t0 | i1 f 7} | | t d$ t t0 | i2 f 7} | | t d% t t | i3 f 7} | | t d& t t |
f 7} | d' 7} | | t d( d) 7} | d* 7} x4 | i4 i5 D]& } | t t | 7} | d* 7} qjW| d+ 7} | S(, Ns , s; <tr bgcolor="%s"><td><font color="%s">%%s</font></td></tr>
s. <tr><td><font color="%s">%%s</font></td></tr>
s <p>%s
s <br><br>%s<pre>%s</pre>s- The following command will allow this access:R s <table bgcolor=%s><tr><td>
s5 <table width="100%" cellspacing="1" cellpadding="1">
t Summarys Detailed Descriptions Allowing Accesss Additional Informations </table>
sG <tr><td><font color="%s">%%s: </td><td>%%s</font></td></tr>
s3 <table border="0" cellspacing="1" cellpadding="1">
s Source Contexts Target Contexts Target Objectst Sources Source Patht Portt Hosts Source RPM Packagess Target RPM Packagess
Policy RPMs Selinux Enableds Policy Types MLS Enableds Enforcing Modes Plugin Names Host Namet Platforms Alert Counts
First Seens Last Seens Local IDs Line Numberss </table>s Raw Audit Messagess :<br>s <br>s </td></tr></table>
(7 R" R t envR RT R t descriptionRW t fixRX t fixcmdR Rt t sortRH t _[1]t xRA t foreground_colort background_colort tr1_fmtt tr2_fmtt p_fmtR t htmlt escape_htmlR{ t formatR| R R R R R Rx R R R R1 R3 R0 R5 R2 R Rw R7 R8 R t default_date_textR R R R t recordst audit_record( R" R R R R R R R R R R R RT R R R ( ( R$ t format_htmle sv
3
))&))))22))))),))))))&
c C s | i } | i i } | i } | i i }
| i i } | i d j o
d } nM | i i
d i g } | i D] } | t | qt ~ } t | } d } | t d t d d | 7} | t d 7} | t d t d d | 7} | t d 7} | t d t d d |
7} | o< | t d 7} | t d t d d
7} | | 7} n | t d 7} | t d t d d 7} | t t d | i i 7} | t t d
| i i 7} | t t d | i 7} | t t d t | i 7} | t t d t | i 7} | t t d t | i 7} | t t d t | i 7} | t t d t | i | i 7} | t t d t | i | i! 7} | t t d t | i" 7} | t t d t | i# 7} | t t d t | i$ 7} | t t d t | i% 7} | t t d t | i& 7} | t t d t | i' i( 7} | t t d t | i) 7} | t t d t | i* 7} | t t d t | i+ 7} | t t d t, | i- 7} | t t d t, | i. 7} | t t d t | i/ 7} | t t d! t | 7} | d" 7} | t t d# d" 7} x. | i0 i1 D] } | t | 7} | d" 7} qW| d" 7} | S($ Ns , R s <h1>R s :</h1>s <p>s Detailed Descriptions Allowing Accesss- The following command will allow this access:s </h1><p>s Additional Informations Source Contexts Target Contexts Target ObjectsR s Source PathR R s Source RPM Packagess Target RPM Packagess
Policy RPMs Selinux Enableds Policy Types MLS Enableds Enforcing Modes Plugin Names Host NameR s Alert Counts
First Seens Last Seens Local IDs Line Numberss
s Raw Audit Messages(3 R" R R R RT R R RW R RX R R Rt R RH R R RA t html_to_textt textR t format_2_column_name_valueR{ R R| R R R R R Rx R R R R1 R3 R0 R5 R2 R Rw R7 R8 R R R R R R R R ( R" R R R R R RT R R R R ( ( R$ t format_text sh
3 """ "" """"++"""""%""""""
( R& R' t
AuditEventR Ra R R R t TimeStampR RM R R% R R R Rt R R R R R R R R ( ( ( R$ R s 0*
\c B s t Z h d h d d <d d <<d h d d <<d h d d <d e <d d
<<d h d d <d d
<<Z d Z d Z RS( NR( R) R* R+ c C s d S( Ns 1.0( ( ( ( R$ R, s Rb t email_alertR. R4 c C s t S( N( RQ ( ( ( R$ R, s t email_address_listRZ t
email_addressc C s t t | i | | _ d S( N( R9 R R" R% Rb ( R" Rb ( ( R$ R% s c C s( | | i j o | i i | n d S( N( R R" R R ( R" R ( ( R$ t add_email_address
s ( R& R' RS RM R% R ( ( ( R$ R s x c B sk t Z h d h d d <d d <<d h d d <d d <d
e <<Z d Z d Z d
Z RS( NR( R) R* R+ c C s d S( Ns 1.0( ( ( ( R$ R, s t user_listR. RZ R R4 c C s t t | i d S( N( R9 R
R" R% ( R" ( ( R$ R% s c C s0 x) | i D] } | | i j o | Sq
q
Wd S( N( R" R R Rb Rt ( R" Rb R ( ( R$ t get_user s
c C s> | i | d j o d Sn t | } | i i | | S( N( R" R Rb Rt R R R R ( R" Rb R ( ( R$ t add_user s
( R& R' R RM R% R R ( ( ( R$ R
s H c B s t Z h d h d d <d d <<d h d d <d e <d d <<d
h d d <d d <d e <<Z d
Z d Z d Z d Z d Z d Z
d Z d e i d Z
RS( NR( R) R* R+ c C s d t t f S( Ns %d.%d( t DATABASE_MAJOR_VERSIONt DATABASE_MINOR_VERSION( ( ( R$ R, ) s R R. R4 c C s t S( N( R
( ( ( R$ R, * s t signature_listRZ R! c C s t t | i d S( N( R9 R R" R% ( R" ( ( R$ R% - s c c s x | i D]
} | Vq
Wd S( N( R" R R! ( R" R! ( ( R$ t siginfos0 s
c C s | i i | | S( N( R" R R R! ( R" R! ( ( R$ t add_siginfo4 s c C s | i i | d S( N( R" R t removeR! ( R" R! ( ( R$ t remove_siginfo8 s c C s
g | _ d S( N( R" R ( R" ( ( R$ t clear; s c C s t t i S( N( RA t uuidt uuid4( R" ( ( R$ t generate_local_id? s c C sE | d j o d Sn x) | i D] } | i | j o | Sq q Wd S( N( R Rt R" R R! ( R" R R! ( ( R$ t lookup_local_idB s
t exactc
C s] | i } t } | d j o
t } n> t | t j o t | }
d |
} n t d | g } x | i D] } d } | i } x^ | D]V } t | | t | | j o | o
d } q | | 7} q | o d } Pq q W| o+ | d j o | i t | | qEqv | | j o | i t | | qv qv W| i d | S( NR f1.0s unknown criteria = %sf0.0c C s t | i | i S( N( t cmpt bR# t a( R R ( ( R$ R, k s ( t xml_infoRN t
match_targetsRQ R t criteriaRR t typet FloatTypeR t num_match_targetst score_per_match_targetRr t matchesR" R R! R# R RO RP t patR R R (
R" R R R R! RO R R R R# R R R ( ( R$ t match_signaturesL s:
( R& R' R
R RM R% R R R R R R R R ( ( ( R$ R ' s o
c B sV t Z h d h d d <<d h d d <<d h d d <<Z d d d d Z RS( NRO R) R. t
friendly_namet filepathc C se t t | i | d j o
| | _ n | d j o
| | _ n | d j o
| | _ n d S( N( R9 R R" R% RO Rt R R ( R" RO R R ( ( R$ R% w s
( R& R' RM Rt R% ( ( ( R$ R q s <c B s\ t Z h d h d d <<d h d d <d e <d d <<Z d d Z d Z RS(
Nt addressR) R. R_ R4 R+ c C s t S( N( R ( ( ( R$ R, s c C s: t t | i | | _ | d j o
| | _ n d S( N( R9 R R" R% R R_ Rt ( R" R R_ ( ( R$ R% s
c C s d | i t i | i d f S( Ns %s:%sRn ( R" R Rp Rq R_ ( R" ( ( R$ t __str__ s ( R& R' Ra RM Rt R% R ( ( ( R$ R s ? c B s t Z h d h d d <d d <<d h d d <d d <d
e <<Z d d Z d Z d
Z e d Z d Z
d Z d Z RS( NR( R) R* R+ c C s d S( Nt 1( ( ( ( R$ R, s t recipient_listR. RZ t recipientR4 c C s1 t t | i | d j o
| | _ n d S( N( R9 R R" R% R Rt ( R" R ( ( R$ R% s
c C s1 d i g } | i D] } | t | q ~ S( Nt ,( RH R R" R R RA ( R" R R ( ( R$ R s c C s< | i } x) | i D] } | | i j o | Sq q Wd S( N( R t stripR" R R Rt ( R" R R ( ( R$ t find_address s
c C sx | i } t | p t t d d | d Sn | i | } | d j o d Sn | i i
t | | d S( Nt details address='%s'(
R R t valid_email_addressRh t ERR_INVALID_EMAIL_ADDRR" R R Rt R R R R_ ( R" R R_ R ( ( R$ t add_address s
c C s
g | _ d S( N( R" R ( R" ( ( R$ t clear_recipient_list s c C sQ t i d } t i d } t i d }
h d t <d t <d t <d t <d t <d t <d
t <d t <} y t | }
Wn4 t j
o( } t
t d d
| | i f n X| i xt|
i D]f} | i d | } | i } | o;| i | } | o!| i d } | i d } d } | o x |
i | D] } | i d } | i d } | d j o@ t i! | i" d } | d j o t# i$ d | | qqUt# i$ d | | qUWn y | i% | | Wq;t
j
o3 } | i& t' j o t# i$ | i q7| q;Xq?q q W|
i( d S( Ns #.*s (\S+)(\s+(.+))?s (\w+)\s*=\s*(\S+)t enabledt truet yest ont disabledt falset not offR s %s, %sR i i i R_ s( unknown email filter (%s) for address %ss( unknown email option (%s) for address %s() t ret compilet
comment_ret entry_ret key_value_reRR RQ t map_booleant openR R t IOErrort eRh t
ERR_FILE_OPENt strerrorR" R t readlinesR t subR t searcht matcht groupR t optionsRt R_ t finditert optiont valuet map_filter_name_to_valueRq t lowert log_emailt warnR t errnoR t close( R" R R R R R R_ R R R R R R R
R ( ( R$ t parse_recipient_file sH N $
c C s y t | d } Wn4 t j
o( } t t d d | | i f n Xx8 | i D]- } t | i } | i
d | i | f qT W| i d S( Nt wR s %s, %ss %-40s filter_type=%s
( R R R R
R Rh R R R" R R Rp R_ t writeR R ( R" R R R R R_ ( ( R$ t write_recipient_file s $
(
R& R' R RM Rt R% R R R R R R R# ( ( ( R$ R s H :t __main__i s audit_listener_database.xmlt sigss siginfo.audit_event=%ss Memory OKs Memory leak %d bytes(9 t __all__t gettextt setroubleshoot.configt parse_config_settingt
get_configt installRQ t setroubleshoot.logt log_initRR t setroubleshoot.errcodet setroubleshoot.utilt setroubleshoot.xml_serializet setroubleshoot.html_utilt setroubleshoot.uuidR t setroubleshoot.audit_dataR> R t typesR
R R R R Rp R t objectR t XmlSerializeR R R R Ru R R R R
R R R R R& t libxml2t debugMemoryt xml_fileR% t
read_xml_fileR R! R R t recordt record_typet
cleanupParsert
dumpMemory(! R R> R R R R R9 R R& R R R Rp R' R R
R7 R R! Ru R) R R* R R R% R
R; R R- R R R ( ( R$ t ? sr 9
3!!2
$ Jl