|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /usr/lib64/python2.4/site-packages/sepolgen/ |
Upload File : |
mò
d&KRc @ s“ d Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Z d „ Z
d f d „ ƒ YZ d „ Z d f d „ ƒ YZ
d S( sU
Utilities for dealing with the compilation of modules and creation
of module tress.
Nc C s5 t i d | ƒ } t | ƒ d j o t Sn t Sd S( s' Check that a module name is valid.
s [^a-zA-Z0-9]i N( t ret findallt modnamet mt lent Truet False( R R ( ( t5 /usr/lib64/python2.4/site-packages/sepolgen/module.pyt
is_valid_name% s
t
ModuleTreec B sS t Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d d „ Z
RS( Nc C s | | _ d | _ d S( N( R t selft Nonet dirname( R
R ( ( R t __init__/ s c C s | i S( N( R
R ( R
( ( R t dir_name3 s c C s | i d | i d S( Nt /s .te( R
R R ( R
( ( R t te_name6 s c C s | i d | i d S( NR s .fc( R
R R ( R
( ( R t fc_name9 s c C s | i d | i d S( NR s .if( R
R R ( R
( ( R t if_name< s c C s | i d | i d S( NR s .pp( R
R R ( R
( ( R t package_name? s c C s | i d S( Ns /Makefile( R
R ( R
( ( R t
makefile_nameB s c C sÅ | d | i | _ t i | i ƒ t | i ƒ d ƒ } | o | i
d | ƒ n | i
d t i ƒ ƒ | i
ƒ t | i ƒ d ƒ i
ƒ t | i ƒ d ƒ i
ƒ t | i ƒ d ƒ i
ƒ d S( NR t ws include ( t parent_dirnameR
R R t ost mkdirt openR t fdt makefile_includet writet defaultst refpolicy_makefilet closeR R R ( R
R R R ( ( R t createE s
( t __name__t
__module__R
R R R R R R R R ( ( ( R R . s c C s$ t i i t i i | ƒ d ƒ d S( Ni i ( R t patht splitextt splitt
sourcename( R& ( ( R t modname_from_sourcenameU s t ModuleCompilerc B s\ t Z d Z e d „ Z d „ Z d „ Z d „ Z e d „ Z d „ Z
d „ Z d „ Z RS( st ModuleCompiler eases running of the module compiler.
The ModuleCompiler class encapsulates running the commandline
module compiler (checkmodule) and module packager (semodule_package).
You are likely interested in the create_module_package method.
Several options are controlled via paramaters (only effects the
non-refpol builds):
.mls [boolean] Generate an MLS module (by passed -M to
checkmodule). True to generate an MLS module, false
otherwise.
.module [boolean] Generate a module instead of a base module.
True to generate a module, false to generate a base.
.checkmodule [string] Fully qualified path to the module compiler.
Default is /usr/bin/checkmodule.
.semodule_package [string] Fully qualified path to the module
packager. Defaults to /usr/bin/semodule_package.
.output [file object] File object used to write verbose
output of the compililation and packaging process.
c C sR t i ƒ | _ t | _ d | _ d | _ | | _ d | _ d | _
d | _ d S( s‡ Create a ModuleCompiler instance, optionally with an
output file object for verbose output of the compilation process.
s /usr/bin/checkmodules /usr/bin/semodule_packaget s! /usr/share/selinux/devel/Makefiles
/usr/bin/makeN( t selinuxt is_selinux_mls_enabledR
t mlsR t modulet checkmodulet semodule_packaget outputt last_outputt refpol_makefilet make( R
R0 ( ( R R
q s c C s/ | i o | i i | d ƒ n | | _ d S( Ns
( R
R0 R t strR1 ( R
R4 ( ( R t o~ s
c C s3 | i | ƒ t i | ƒ \ } } | i | ƒ | S( N( R
R5 t commandt commandst getstatusoutputt rcR0 ( R
R6 R0 R9 ( ( R t runƒ s
c C si | i d ƒ } t | ƒ d j o t d | ƒ ‚ n d i | d d !ƒ } | d } | d } | | f S( sþ Generate the module and policy package filenames from
a source file name. The source file must be in the form
of "foo.te". This will generate "foo.mod" and "foo.pp".
Returns a tuple with (modname, policypackage).
t .i s, invalid sourcefile name %s (must end in .te)i iÿÿÿÿs .mods .ppN( R& R% t splitnameR t RuntimeErrort joint basenameR t packagename( R
R& R? R@ R R< ( ( R t
gen_filenamesŠ s
c C s^ | o | i | ƒ nC | i | ƒ \ } } | i | | ƒ | i | | ƒ t i
| ƒ d S( sŒ Create a module package saved in a packagename from a
sourcename.
The create_module_package creates a module package saved in a
file named sourcename (.pp is the standard extension) from a
source file (.te is the standard extension). The source file
should contain SELinux policy statements appropriate for a
base or non-base module (depending on the setting of .module).
Only file names are accepted, not open file objects or
descriptors because the command line SELinux tools are used.
On error a RuntimeError will be raised with a descriptive
error message.
N( t refpolicyR
t refpol_buildR& RA R R@ t compilet packageR t unlink( R
R& RB R R@ ( ( R t create_module_package› s c C sK | i d | i } | i | ƒ } | d j o t d | i ƒ ‚ n d S( Ns -f i s compilation failed:
%s( R
R3 R2 R6 R: R9 R= R1 ( R
R& R6 R9 ( ( R RC ³ s
c C s© | i g } | i o | i d ƒ n | i o | i d ƒ n | i d ƒ | i | ƒ | i | ƒ | i d i | ƒ ƒ } | d j o t d | i ƒ ‚ n d S( Ns -Ms -ms -ot i s compilation failed:
%s(
R
R. t sR, t appendR- R R& R: R> R9 R= R1 ( R
R& R RI R9 ( ( R RD ¼ s
c C s€ | i g } | i d ƒ | i | ƒ | i d ƒ | i | ƒ | i d i | ƒ ƒ } | d j o t d | i
ƒ ‚ n d S( Ns -os -mRH i s packaging failed [%s]( R
R/ RI RJ R@ R R: R> R9 R= R1 ( R
R R@ RI R9 ( ( R RE Ê s
(
R! R" t __doc__R R
R5 R: RA R RG RC RD RE ( ( ( R R( X s
( RK R R* R t tempfileR7 R t os.patht
subprocesst shutilR R R' R( ( R7 R R' R( RL R* RN R R R RO R ( ( R t ? s '