|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21585/root/usr/lib64/python2.4/site-packages/sepolgen/ |
Upload File : |
m
d&KRc , @ s d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d Z h d- d <d. d <d/ d <d0 d <d1 d <d2 d <d3 d <d4 d <d5 d <d6 d <d7 d <d8 d <d9 d <d: d <d; d <d< d! <d= d" <d> d# <d? d$ <d@ d% <dA d& <dB d' <dC d( <dD d) <dE d+ <dF d* <dG d, <Z dH Z
dI Z dJ Z dK Z
dL Z dM Z dN Z dO Z dP Z dQ Z dR Z dS Z dT Z dU Z dV Z dW Z dX Z dY Z dZ Z d[ Z d\ Z d] Z d^ Z d a" d a# d a$ d d_ Z% d` Z& da Z' db Z( dc Z) dd Z* de Z+ df Z, dg Z- dh Z. di Z/ dj Z0 dk Z1 dl Z2 dm Z3 dn Z4 do Z5 dp Z6 dq Z7 dr Z8 ds Z9 dt Z: du Z; dv Z< dw Z= dx Z> dy Z? dz Z@ d{ ZA d| ZB d} ZC d~ ZD d ZE d ZF d ZG d ZH d ZI d ZJ d ZK d ZL d ZM d ZN d ZO d ZP d aQ d aR d ZS d d eT d ZU d ZV d eW eT d ZX d S( Nt TICKt SQUOTEt OBRACEt CBRACEt SEMIt COLONt OPARENt CPARENt COMMAt MINUSt TILDEt ASTERISKt AMPt BARt EXPLt EQUALt
IDENTIFIERt CLASSt
TYPEATTRIBUTEt TYPEt ATTRIBUTEt ALIASt TYPEALIASt BOOLt IFt ELSEt ROLEt TYPESt ALLOWt DONTAUDITt
AUDITALLOWt TYPE_TRANSITIONt TYPE_CHANGEt TYPE_MEMBERt RANGE_TRANSITIONt ROLE_TRANSITIONt
OPT_POLICYt INTERFACEt TUNABLE_POLICYt GEN_REQt TEMPLATEt IFDEFt IFNDEFt DEFINEt classt
typeattributet typet attributet aliast typealiast boolt ift elset rolet typest allowt dontauditt
auditallowt type_transitiont type_changet type_membert range_transitiont role_transitiont optional_policyt interfacet tunable_policyt gen_requiret templatet ifndeft ifdeft defines \`s \'s \{s \}s \;+s \:s \(s \)s \,s \-s \~s \*s \&s \|s \!s \=s c C s | i d 7_ d S( s dnl.*\ni N( t tt lineno( RG ( ( t8 /usr/lib64/python2.4/site-packages/sepolgen/refparser.pyt t_m4comment s c C s | i d 7_ d S( s refpolicywarn\(.*\ni N( RG RH ( RG ( ( RI t t_refpolicywarn s c C s t i | i d | _ | S( s [a-zA-Z_\$][a-zA-Z0-9_\.\$\*]*R N( t reservedt getRG t valueR. ( RG ( ( RI t t_IDENTIFIER s c C s | i d 7_ d S( s \#.*\ni N( RG RH ( RG ( ( RI t t_comment s c C s! d | i d GH| i d d S( Ns Illegal character '%s'i i ( RG RN t skip( RG ( ( RI t t_error s c C s | i t | i 7_ d S( s \n+N( RG RH t lenRN ( RG ( ( RI t t_newline s c C s | d j o d Sn xh | D]` } | d j o q n | | _ | d j o | i i d | | f q | i i d | q Wd S( Ni ( t stmtst Nonet st parentt valt childrent insert( RU RX RY RW ( ( RI t collect s
c C sL xE | D]= } t i | o | i t i | q | i | q Wd S( N( t idst idt sptt has_keyRW t updatet by_namet add( R] RW R^ ( ( RI t expand s
c C sZ t | d j o t i i | d n, t | d j o t i i | d n d S( s^ statements : statement
| statements statement
| empty
i i N( RS t pt mRZ t append( Re ( ( RI t p_statements s
c C s | d | d <d S( sV statement : interface
| template
| obj_perm_set
i i N( Re ( Re ( ( RI t p_statement s c C s t i } t | d j o t | d | nX t | d j o t | d | t | _ n' t | d g | i d | d | | d <d S( s names : identifier
| nested_id_set
| asterisk
| TILDE identifier
| TILDE nested_id_set
| IDENTIFIER MINUS IDENTIFIER
i i i t -i N( t refpolicyt IdSetRW RS Re Rd t Truet
complimentRc ( Re RW ( ( RI t p_names
s
c C s | d g | d <d S( s identifier : IDENTIFIERi i N( Re ( Re ( ( RI t p_identifier s c C s | d g | d <d S( s asterisk : ASTERISKi i N( Re ( Re ( ( RI t
p_asterisk! s c C s | d | d <d S( s1 nested_id_set : OBRACE nested_id_list CBRACE
i i N( Re ( Re ( ( RI t p_nested_id_set% s c C s? t | d j o | d | d <n | d | d | d <d S( s` nested_id_list : nested_id_element
| nested_id_list nested_id_element
i i i N( RS Re ( Re ( ( RI t p_nested_id_list* s c C sD t | d j o | d | d <n d | d } | g | d <d S( sx nested_id_element : identifier
| MINUS IDENTIFIER
| nested_id_set
i i i Rj N( RS Re t str( Re Rt ( ( RI t p_nested_id_element3 s
c C sE t | d j o | d | d <n | d d | d g | d <d S( s interface_call_param : IDENTIFIER
| IDENTIFIER MINUS IDENTIFIER
| nested_id_set
i i i Rj i N( RS Re ( Re ( ( RI t p_interface_call_param? s c C sE t | d j o | d g | d <n | d | d g | d <d S( s interface_call_param_list : interface_call_param
| interface_call_param_list COMMA interface_call_param
i i i i N( RS Re ( Re ( ( RI t p_interface_call_param_listK s c C s? t | d j o | d | d | d <n | d | d <d S( sT comma_list : nested_id_list
| comma_list COMMA nested_id_list
i i i i N( RS Re ( Re ( ( RI t p_comma_listU s c C s d S( s/ optional_semi : SEMI
| emptyN( ( Re ( ( RI t p_optional_semi] s c C s t | } | d j o | d g | d <nT | d j o | d g | d | d <n* | d | d | d g | d | d <d S( s cond_expr : IDENTIFIER
| EXPL cond_expr
| cond_expr AMP AMP cond_expr
| cond_expr BAR BAR cond_expr
| cond_expr EQUAL EQUAL cond_expr
| cond_expr EXPL EQUAL cond_expr
i i i i i N( RS Re t l( Re Rz ( ( RI t p_cond_exprb s
c C s d S( s empty :N( ( Re ( ( RI t p_emptys s c C s2 t i | d } t | d | | | d <d S( sa interface : INTERFACE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
i i i N( Rk t InterfaceRe t xR\ ( Re R~ ( ( RI t p_interfacey s c C s2 t i | d } t | d | | | d <d S( s template : TEMPLATE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
| DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
i i i N( Rk t TemplateRe R~ R\ ( Re R~ ( ( RI t
p_template s c C sV t | d j o | d | d <n. t | d j o | d | d | d <n d S( sl interface_stmts : policy
| interface_stmts policy
| empty
i i i N( RS Re ( Re ( ( RI t p_interface_stmts s
c C s* t i } | d | _ | g | d <d S( sP
optional_policy : OPT_POLICY OPAREN TICK interface_stmts SQUOTE CPAREN
i i N( Rk t OptionalPolicyt oRe RZ ( Re R ( ( RI t p_optional_policy s
c C so t i } | d | _ t | d | d t t | d j o t | d | d t n | g | d <d S( s tunable_policy : TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
| TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
i i RY i i i N( Rk t
TunablePolicyR~ Re t cond_exprR\ Rm RS t False( Re R~ ( ( RI t p_tunable_policy s
c C s t i | d } | d d j o
t } n t } t | d | d | t | d j o t | d | d t n | g | d <d S( s^ ifdef : IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
| IFNDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
| IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
i i RE i RY i i N( Rk t IfDefRe R~ Rm t vR R\ RS ( Re R~ R ( ( RI t p_ifdef s
c C s8 t i d | d } | i i | d | | d <d S( sC interface_call : IDENTIFIER OPAREN interface_call_param_list CPARENt ifnamei i i N( Rk t
InterfaceCallRe t it argst extend( Re R ( ( RI t p_interface_call s c C s. t i | d } | d | _ | | d <d S( sR obj_perm_set : DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK names SQUOTE CPARENi i i N( Rk t
ObjPermSetRe RW t perms( Re RW ( ( RI t p_obj_perm_set s
c C s | d | d <d S( s policy : policy_stmt
| optional_policy
| tunable_policy
| ifdef
| conditional
i i N( Re ( Re ( ( RI t p_policy s c C s | d g | d <d S( s policy_stmt : gen_require
| avrule_def
| typerule_def
| typeattribute_def
| interface_call
| role_def
| role_allow
| type_def
| typealias_def
| attribute_def
| range_transition_def
| role_transition_def
i i N( Re ( Re ( ( RI t
p_policy_stmt s
c C s d S( s8 gen_require : GEN_REQ OPAREN TICK requires SQUOTE CPARENN( ( Re ( ( RI t
p_gen_require s c C s d S( ss requires : require
| requires require
| ifdef
| requires ifdef
N( ( Re ( ( RI t
p_requires s c C s d S( s require : TYPE comma_list SEMI
| ROLE comma_list SEMI
| ATTRIBUTE comma_list SEMI
| CLASS comma_list SEMI
| BOOL comma_list SEMI
N( ( Re ( ( RI t p_require s c C s t i | d } t | d j o: | d d j o | i i | d q | d | _ nP t | d j o< | d | _ t | d j o | i i | d q n | | d <d S( s type_def : TYPE IDENTIFIER COMMA comma_list SEMI
| TYPE IDENTIFIER SEMI
| TYPE IDENTIFIER ALIAS names SEMI
| TYPE IDENTIFIER ALIAS names COMMA comma_list SEMI
i i i t ,i i i N( Rk t TypeRe RG RS t
attributesRa t aliases( Re RG ( ( RI t
p_type_def s
c C s! t i | d } | | d <d S( s) attribute_def : ATTRIBUTE IDENTIFIER SEMIi i N( Rk t AttributeRe t a( Re R ( ( RI t p_attribute_def s c C s4 t i } | d | _ | d | _ | | d <d S( s5 typealias_def : TYPEALIAS IDENTIFIER ALIAS names SEMIi i i N( Rk t TypeAliasRG Re R. R ( Re RG ( ( RI t p_typealias_def s
c C s; t i } | d | _ | i i | d | | d <d S( s0 role_def : ROLE IDENTIFIER TYPES comma_list SEMIi i i N( Rk t Rolet rRe R5 R6 Ra ( Re R ( ( RI t
p_role_def s
c C s4 t i } | d | _ | d | _ | | d <d S( s# role_allow : ALLOW names names SEMIi i i N( Rk t RoleAllowR Re t src_rolest tgt_roles( Re R ( ( RI t p_role_allow s
c C s t i } | d d j o t i i | _ n% | d d j o t i i | _ n | d | _ | d | _ | d | _ | d | _
| | d <d S(
s avrule_def : ALLOW names names COLON names names SEMI
| DONTAUDIT names names COLON names names SEMI
| AUDITALLOW names names COLON names names SEMI
i R8 R9 i i i i i N( Rk t AVRuleR Re R t rule_typeR t src_typest tgt_typest obj_classesR ( Re R ( ( RI t p_avrule_def s
c C s t i } | d d j o t i i | _ n% | d d j o t i i | _ n | d | _ | d | _ | d | _ | d | _
| | d <d S(
s typerule_def : TYPE_TRANSITION names names COLON names IDENTIFIER SEMI
| TYPE_CHANGE names names COLON names IDENTIFIER SEMI
| TYPE_MEMBER names names COLON names IDENTIFIER SEMI
i R; R< i i i i i N( Rk t TypeRuleRG Re R R R! R R R t dest_type( Re RG ( ( RI t p_typerule_def0 s
c C so t i } | d | _ t | d | d t t | d j o t | d | d t n | g | d <d S( s conditional : IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE
| IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE ELSE OBRACE interface_stmts CBRACE
i i RY i i
i N( Rk t Conditionalt cRe R R\ Rm RS R ( Re R ( ( RI t
p_conditional@ s
c C s; t i } | d | _ | i i | d | | d <d S( s< typeattribute_def : TYPEATTRIBUTE IDENTIFIER comma_list SEMIi i i N( Rk t
TypeAttributeRG Re R. R Ra ( Re RG ( ( RI t p_typeattribute_defK s
c C s d S( sM mls_level_def : IDENTIFIER COLON comma_list
| IDENTIFIERN( ( Re ( ( RI t p_mls_level_defR s c C s d S( s[ mls_range_def : mls_level_def MINUS mls_level_def
| mls_level_def
N( ( Re ( ( RI t p_mls_range_defW s c C s d S( s range_transition_def : RANGE_TRANSITION names names COLON names mls_range_def SEMI
| RANGE_TRANSITION names names names SEMIN( ( Re ( ( RI t p_range_transition_def^ s c C s d S( s< role_transition_def : ROLE_TRANSITION names names names SEMIN( ( Re ( ( RI t p_role_transition_defc s c C s% d | i | i | i f a t GHd S( Ns$ Syntax error on line %d %s [type=%s]( t tokRH RN R. t error( R ( ( RI t p_errorg s c C s7 | p h Sn h } x | D] } | | | i <q Wd S( N( R_ t mapR~ t name( R_ R R~ ( ( RI t prep_sptl s c C sy t p. t i a t i d d d | d d a n | d j o
| a n
t i a | p t i a n | a d S( Nt methodt LALRt debugt write_tablesi (
t parsert lext lexert yaccR t moduleRV Rf Rk t Modulet supportt
SupportMacrosR_ ( R R R ( ( RI t create_globalsw s "
c C s t | | | g t _ d t _ y t i | d | Wn% t
j
o } d t | a
n Xt
d j o d t
} t | n t S( Ni R s internal parser error: %ss could not parse text: "%s"( R R R R R t lexdatat lexposR t parset textt Exceptiont eRt R RV t msgt
ValueErrorRf ( R R R R R R ( ( RI R s
c
C s' g } d } d d d d g } x t i | D] \ } } } x | D] } | | j o qD n t i i | } t i i | | } | d d j oS | d j o
| } qt t i d | d o | i | d | f qqD | d d
j o | i | d | f qD qD Wq. W| | f S( Ns init.ifs inetd.ifs uml.ifs thunderbird.ifi s .spts obj_perm_sets.sptt patternsi s .if( t modulesRV t support_macrost blacklistt ost walkt roott dirpatht dirnamest filenamesR t patht splitextt modnamet joint filenameRS t ret findallRg (
R R R R R R R R R R ( ( RI t list_headers s&
#c
s d k }
t i } g } d } t i i | o| t i i | d } | d j o t
d | n t i i | } | i | d | f t t i \ }
} n t | \ } } | o | o t
d n d d d } d } | o d | t i } | | | | i i | t i d } t i d
d d d
d d d d d g } | i i t i | | i i | d n o7 o/ |
i" t# i$ d t% | } | i' d n g } x | D] } t i* } | d | _ y4 | o | | d | | n | | d | Wn= t
j
o1 } t- | d | i | d qn X| i i | o o | i. qqWt% | o d d i/ | n | S( Ni t s Invalid file name %si s1 could not find support macros (obj_perm_sets.spt)c s o i | n d S( N( t outputt writeR ( R ( R ( RI R s c s o d | n y9 t | } | i } | i t | | | WnI t j
o
} d Sn2 t
j
o% } t
d | t | f n Xd S( Ns parsing file %s
s error parsing file %s: %s( R R t ft opent fdt readt txtt closeR R R_ t IOErrorR R Rt ( R R R_ R R R ( R R ( RI t
parse_file s
s Parsing support macros (%s): t can_execs $1s $2t filet execute_no_transR t getattrt lockt executet ioctls done.
t stepss Parsing interface filess
s failed to parse some headers: %ss , (0 t utilRk t Headerst headersR RV R R R t isfileR t splitR R R R Rg R t defaultst all_modulesRd R R R_ R RZ R} R t accesst AccessVectort avR R R t ConsoleProgressBart syst stdoutRS t statust startt failuresR~ R Rf R Rt t stepR ( R R Rd R R R Rf R_ R R~ R R R R R
R R R R R R ( ( R R R RI t
parse_headers sb
*
(, R R R R R R R R R R R
R R R
R R s
IDENTIFIERR R R R R R R R R R R R s DONTAUDITs
AUDITALLOWR s TYPE_CHANGEs TYPE_MEMBERR" R# R$ R% R& R' R( R) R* R+ (Y R R R Rk R R R R t tokensRL t t_TICKt t_SQUOTEt t_OBRACEt t_CBRACEt t_SEMIt t_COLONt t_OPARENt t_CPARENt t_COMMAt t_MINUSt t_TILDEt
t_ASTERISKt t_AMPt t_BARt t_EXPLt t_EQUALt t_ignoreRJ RK RO RP RR RT RV Rf R R_ R\ Rd Rh Ri Ro Rp Rq Rr Rs Ru Rv Rw Rx Ry R{ R| R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R Rm R (Q R RR R Rs R R Rr R R R R R R R\ R R R{ R R RJ R R R Rh R Rp R R R Ri R R RT R R Rv R R R R RO R R RP R R Rw R R R R Rx R RL R Rq R R R R! RK R Ry R R R R Ro R R Rk R R R R| Rd R R Ru R R ( ( RI t ? s :)