| Server IP : 80.87.202.40 / Your IP : 216.73.216.169 Web Server : Apache System : Linux rospirotorg.ru 5.14.0-539.el9.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Dec 5 22:26:13 UTC 2024 x86_64 User : bitrix ( 600) PHP Version : 8.2.27 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3.9/site-packages/sepolgen/__pycache__/ |
Upload File : |
a
���ev � @ s� d Z ddlZddlZzddlmZ W n eyB ddlmZ Y n0 ddlZddlZddl Z ddl
Z
ddl m Z dd� Z
G dd � d �Zd
d � ZG d d
� d
�ZdS )zU
Utilities for dealing with the compilation of modules and creation
of module tress.
� N)�getstatusoutput� )�defaultsc C s0 t �d| �}t|�dkr(| d �� r(dS dS dS )z'Check that a module name is valid.
z[^a-zA-Z0-9_\-\.]r TFN)�re�findall�len�isalpha)�modname�m� r �3/usr/lib/python3.9/site-packages/sepolgen/module.py�
is_valid_name( s r
c @ sN e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z ddd�Z
dS )�
ModuleTreec C s || _ d | _d S �N)r �dirname)�selfr r r r �__init__2 s zModuleTree.__init__c C s | j S r �r �r r r r �dir_name6 s zModuleTree.dir_namec C s | j d | j d S )N�/z.te�r r r r r r �te_name9 s zModuleTree.te_namec C s | j d | j d S )Nr z.fcr r r r r �fc_name< s zModuleTree.fc_namec C s | j d | j d S )Nr z.ifr r r r r �if_name? s zModuleTree.if_namec C s | j d | j d S )Nr �.ppr r r r r � package_nameB s zModuleTree.package_namec C s
| j d S )Nz /Makefiler r r r r �
makefile_nameE s zModuleTree.makefile_nameNc C s� |d | j | _t�| j� t| �� d�}|r>|�d| � n|�dt�� � |� � t| �
� d�� � t| � � d�� � t| � � d�� � d S )Nr �wzinclude )
r r �os�mkdir�openr �writer �refpolicy_makefile�closer r r )r Zparent_dirnameZmakefile_include�fdr r r �createH s zModuleTree.create)N) �__name__�
__module__� __qualname__r r r r r r r r& r r r r r 1 s r c C s t j�t j�| �d �d S )Nr r )r �path�splitext�split)�
sourcenamer r r �modname_from_sourcenameX s r. c @ sT e Zd ZdZddd�Zdd� Zdd� Zd d
� Zdd d
�Zdd� Z dd� Z
dd� Z dS )�ModuleCompileras ModuleCompiler eases running of the module compiler.
The ModuleCompiler class encapsulates running the commandline
module compiler (checkmodule) and module packager (semodule_package).
You are likely interested in the create_module_package method.
Several options are controlled via parameters (only effects the
non-refpol builds):
.mls [boolean] Generate an MLS module (by passed -M to
checkmodule). True to generate an MLS module, false
otherwise.
.module [boolean] Generate a module instead of a base module.
True to generate a module, false to generate a base.
.checkmodule [string] Fully qualified path to the module compiler.
Default is /usr/bin/checkmodule.
.semodule_package [string] Fully qualified path to the module
packager. Defaults to /usr/bin/semodule_package.
.output [file object] File object used to write verbose
output of the compililation and packaging process.
Nc C s< t �� | _d| _d| _d| _|| _d| _t� � | _
d| _ dS )z�Create a ModuleCompiler instance, optionally with an
output file object for verbose output of the compilation process.
Tz/usr/bin/checkmodulez/usr/bin/semodule_package� z
/usr/bin/makeN) �selinuxZis_selinux_mls_enabled�mls�module� checkmodule�semodule_package�output� last_outputr r# �refpol_makefile�make)r r6 r r r r t s
zModuleCompiler.__init__c C s | j r| j �|d � || _d S )N�
)r6 r" r7 )r �strr r r �o� s zModuleCompiler.oc C s$ | � |� t|�\}}| � |� |S r )r< r )r �command�rcr6 r r r �run� s
zModuleCompiler.runc C sJ |� d�}t|�dk r td|��d�|dd� �}|d }|d }||fS )z�Generate the module and policy package filenames from
a source file name. The source file must be in the form
of "foo.te". This will generate "foo.mod" and "foo.pp".
Returns a tuple with (modname, policypackage).
�.� z,invalid sourcefile name %s (must end in .te)r ���z.modr )r, r � RuntimeError�join)r r- Z splitname�basenamer � packagenamer r r �
gen_filenames� s
z ModuleCompiler.gen_filenamesTc C sD |r| � |� n0| �|�\}}| �||� | �||� t�|� dS )a� Create a module package saved in a packagename from a
sourcename.
The create_module_package creates a module package saved in a
file named sourcename (.pp is the standard extension) from a
source file (.te is the standard extension). The source file
should contain SELinux policy statements appropriate for a
base or non-base module (depending on the setting of .module).
Only file names are accepted, not open file objects or
descriptors because the command line SELinux tools are used.
On error a RuntimeError will be raised with a descriptive
error message.
N)� refpol_buildrG �compile�packager �unlink)r r- Z refpolicyr rF r r r �create_module_package� s z$ModuleCompiler.create_module_packagec C s4 | j d | j }| �|�}|dkr0td| j ��d S )Nz -f r �compilation failed:
%s)r9 r8 r? rC r7 )r r- r= r> r r r rH � s
zModuleCompiler.refpol_buildc C sp | j g}| jr|�d� | jr(|�d� |�d� |�|� |�|� | �d�|��}|dkrltd| j ��d S )Nz-M�-m�-o� r rM )r4 r2 �appendr3 r? rD rC r7 )r r- r �sr> r r r rI � s
zModuleCompiler.compilec C sZ | j g}|�d� |�|� |�d� |�|� | �d�|��}|dkrVtd| j ��d S )NrO rN rP r zpackaging failed [%s])r5 rQ r? rD rC r7 )r r rF rR r> r r r rJ � s
zModuleCompiler.package)N)T) r' r( r) �__doc__r r< r? rG rL rH rI rJ r r r r r/ [ s
r/ )rS r Ztempfile�
subprocessr � ImportErrorZcommandsr Zos.path�shutilr1 r0 r r
r r. r/ r r r r �<module> s '