D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
proc
/
3023067
/
root
/
lib64
/
python3.9
/
site-packages
/
setools
/
diff
/
__pycache__
/
Filename :
rbacrules.cpython-39.pyc
back
Copy
a q�qe� � @ s� d dl mZ d dlmZ ddlmZmZmZmZm Z ddl m Z ddl m Z mZ ddlmZ dd lmZ dd lmZ dd lmZ G d d � d e�ZG dd� de �ZG dd� dee �ZG dd� dee �ZdS )� )� defaultdict)� NamedTuple� )� AnyRBACRule� RBACRuletype�Role� RoleAllow�RoleTransition� )�DiffResultDescriptor)� Difference�Wrapper)�class_wrapper_factory)�role_wrapper_factory)� type_or_attr_wrapper_factory)�RuleListc @ s* e Zd ZU dZeed< eed< eed< dS )�ModifiedRBACRulez,Difference details for a modified RBAC rule.�ruleZ added_defaultZremoved_defaultN)�__name__� __module__� __qualname__�__doc__r �__annotations__r � r r �</usr/lib64/python3.9/site-packages/setools/diff/rbacrules.pyr s r c @ s� e Zd ZU dZed�Zed�Zed�Zed�Zed�Z dZ e e e f ed< dZe e e f ed< dd�dd �Zdd�d d �Zdd�d d �Zdd�dd�ZdS )�RBACRulesDifferencez<Determine the difference in RBAC rules between two policies.�diff_role_allows�diff_role_transitionsN�_left_rbac_rules�_right_rbac_rules)�returnc C s� | j �d�| �� | jdu s&| jdu r.| �� | jdus@J d��| jdusRJ d��| �| �| jtj t �| �| jtj t ��\| _ | _ }dS )zAGenerate the difference in role allow rules between the policies.zJGenerating role allow differences from {0.left_policy} to {0.right_policy}N�(Left RBAC rules didn't load, this a bug.�)Right RBAC rules didn't load, this a bug.) �log�info�formatr r �_create_rbac_rule_lists� _set_diff�_expand_generatorr Zallow�RoleAllowWrapper�added_role_allows�removed_role_allows)�self�_r r r r , s ���z$RBACRulesDifference.diff_role_allowsc C s� | j �d�| �� | jdu s&| jdu r.| �� | jdus@J d��| jdusRJ d��| �| �| jtj t �| �| jtj t ��\}}}g }|D ]2\}}t |j �t |j �kr�|� t||j |j �� q�|| _|| _|| _dS )zFGenerate the difference in role_transition rules between the policies.zOGenerating role_transition differences from {0.left_policy} to {0.right_policy}Nr! r" )r# r$ r% r r r& r' r( r Zrole_transition�RoleTransitionWrapperr �default�appendr �added_role_transitions�removed_role_transitions�modified_role_transitions)r, ZaddedZremovedZmatchedZmodifiedZ left_ruleZ right_ruler r r r = s6 ����� �z)RBACRulesDifference.diff_role_transitionsc C s� t t�| _| j�d�| �� | j�� D ]}| j|j � |� q&t t�| _ | j�d�| �� | j �� D ]}| j |j � |� qd| j�d� dS )z$Create rule lists for both policies.z-Building RBAC rule lists from {0.left_policy}z.Building RBAC rule lists from {0.right_policy}z#Completed building RBAC rule lists.N) r �listr r# �debugr% Z left_policyZ rbacrulesZruletyper0 r Z right_policy�r, r r r r r& ` s z+RBACRulesDifference._create_rbac_rule_listsc C s: | j �d� d| _d| _d| _d| _d| _d| _d| _dS )z%Reset diff results on policy changes.z Resetting RBAC rule differencesN) r# r5 r* r+ r1 r2 r3 r r �r, r r r � _reset_diffp s z RBACRulesDifference._reset_diff)r r r r r r* r+ r1 r2 r3 r r r r r r r r r& r8 r r r r r s #r c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d � Zd d � Z dS ) r) z.Wrap role allow rules to allow set operations.��source�targetN�r r c C s, || _ t|j�| _t|j�| _t|�| _d S �N)�originr r: r; �hash�keyr6 r r r �__init__� s zRoleAllowWrapper.__init__c C s | j S r= �r@ r7 r r r �__hash__� s zRoleAllowWrapper.__hash__c C s | j |j k S r= rB �r, �otherr r r �__lt__� s zRoleAllowWrapper.__lt__c C s | j |j ko| j|jkS r= r9 rD r r r �__eq__� s zRoleAllowWrapper.__eq__) r r r r � __slots__r rA rC rF rG r r r r r) ~ s r) c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d � Zd d � Z dS ) r. z3Wrap role_transition rules to allow set operations.�r: r; �tclassNr< c C s8 || _ t|j�| _t|j�| _t|j�| _t|�| _d S r= ) r> r r: r r; r rJ r? r@ r6 r r r rA � s z RoleTransitionWrapper.__init__c C s | j S r= rB r7 r r r rC � s z RoleTransitionWrapper.__hash__c C s | j |j k S r= rB rD r r r rF � s z RoleTransitionWrapper.__lt__c C s$ | j |j ko"| j|jko"| j|jkS r= rI rD r r r rG � s � �z RoleTransitionWrapper.__eq__) r r r r rH r rA rC rF rG r r r r r. � s r. N)� collectionsr �typingr Z policyrepr r r r r Z descriptorsr � differencer r Zobjclassr Zrolesr �typesr r r r r) r. r r r r �<module> s b