|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /usr/lib64/python2.4/site-packages/sepolgen/ |
Upload File : |
m
d&KRc @ s d Z d d d d d d d d d g Z d
Z d Z d Z e e BZ h d
e <d e <d e <d e <Z h e d
<e d <e d <e d <Z d f d YZ d f d YZ d S( s
This module provides knowledge object classes and permissions. It should
be used to keep this knowledge from leaking into the more generic parts of
the policy generation.
t sockett fdt processt filet lnk_filet fifo_filet dbust
capabilityt unix_stream_socketi i i t nt rt wt bt PermMapc B s t Z d Z d Z d Z RS( s A mapping between a permission and its information flow properties.
PermMap represents the information flow properties of a single permission
including the direction (read, write, etc.) and an abstract representation
of the bandwidth of the flow (weight).
c C s | | _ | | _ | | _ d S( N( t permt selft dirt weight( R R R R ( ( t: /usr/lib64/python2.4/site-packages/sepolgen/objectmodel.pyt __init__T s c C s d | i t | i | i f S( Ns' <sepolgen.objectmodel.PermMap %s %s %d>( R R t
dir_to_strR R ( R ( ( R t __repr__Y s ( t __name__t
__module__t __doc__R R ( ( ( R R
M s t PermMappingsc B sD t Z d Z d Z d Z d Z d Z d Z d Z RS( s The information flow properties of a set of object classes and permissions.
PermMappings maps one or more classes and permissions to their PermMap objects
describing their information flow charecteristics.
c C s h | _ d | _ t | _ d S( Ni ( R t classest default_weightt FLOW_BOTHt default_dir( R ( ( R R d s c C s6 d
} x)| D]!} | i } t | d j p$ t | d j p | d d j o q
n | d d j oK | d } | i i
| o t d n h | i | <| i | } q
t | d j o t d n | d
j o t d n t | d t
| d t | d } | | | i <q
Wd
S( ss Read the permission mappings from a file. This reads the format used
by Apol in the setools suite.
i i t #t classs duplicate class in perm mapi s" error in object classs permissionss permission outside of classi N( t Nonet curR t linet splitt fieldst lent cR R t has_keyt
ValueErrorR
t
str_to_dirt intt pmR ( R R R! R$ R& R" R+ ( ( R t from_filei s& 7
(c C s | i | | S( s Get the permission map for the object permission.
Returns:
PermMap representing the permission
Raises:
KeyError if the object or permission is not defined
N( R R t objR ( R R- R ( ( R t get s c C sE y | i | | } Wn) t j
o t | | i | i Sn X| S( s Get the permission map for the object permission or a default.
getdefault is the same as get except that a default PermMap is
returned if the object class or permission is not defined. The
default is FLOW_BOTH with a weight of 5.
N( R R R- R R+ t KeyErrorR
R R ( R R- R R+ ( ( R t
getdefault s c C s: t } x- | D]% } | i | | } | | i B} q
W| S( N( t FLOW_NONER t permsR R R0 R- R+ ( R R- R2 R R R+ ( ( R t getdefault_direction s c C s: d } x- | D]% } | i | | } | | i 7} q
W| S( Ni ( t totalR2 R R R0 R- R+ R ( R R- R2 R R4 R+ ( ( R t getdefault_distance s ( R R R R R, R. R0 R3 R5 ( ( ( R R ^ s
N(
R t implicitly_typed_objectsR1 t FLOW_READt
FLOW_WRITER R) R R
R ( R6 R R8 R1 R R) R
R7 R ( ( R t ? s !
**