Google
Edit File: objectmodel.cpython-39.pyc
a B�iw � @ sb d Z g d�ZdZdZdZeeB Zeeeed�Zedededed iZG d d � d �ZG d d � d �Z dS )z� This module provides knowledge object classes and permissions. It should be used to keep this knowledge from leaking into the more generic parts of the policy generation. ) Zsocket�fdZprocess�fileZlnk_fileZ fifo_fileZdbusZ capabilityZunix_stream_socket� � � )�n�r�w�br r r r c @ s e Zd ZdZdd� Zdd� ZdS )�PermMapa A mapping between a permission and its information flow properties. PermMap represents the information flow properties of a single permission including the direction (read, write, etc.) and an abstract representation of the bandwidth of the flow (weight). c C s || _ || _|| _d S �N)�perm�dir�weight)�selfr r r � r �8/usr/lib/python3.9/site-packages/sepolgen/objectmodel.py�__init__T s zPermMap.__init__c C s d| j t| j | jf S )Nz'<sepolgen.objectmodel.PermMap %s %s %d>)r � dir_to_strr r �r r r r �__repr__Y s �zPermMap.__repr__N)�__name__� __module__� __qualname__�__doc__r r r r r r r M s r c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )� PermMappingsz�The information flow properties of a set of object classes and permissions. PermMappings maps one or more classes and permissions to their PermMap objects describing their information flow characteristics. c C s i | _ d| _t| _d S )N� )�classes�default_weight� FLOW_BOTH� default_dirr r r r r d s zPermMappings.__init__c C s� d}|D ]�}|� � }t|�dkst|�dks|d dkr:q|d dkrv|d }|| jv r`td��i | j|< | j| }qt|�dkr�td��|du r�td ��t|d t|d t|d ��}|||j< qdS ) zsRead the permission mappings from a file. This reads the format used by Apol in the setools suite. Nr r �#�classzduplicate class in perm map� z!error in object class permissionszpermission outside of classr )�split�lenr � ValueErrorr � str_to_dir�intr )r r Zcur�line�fields�c�pmr r r � from_filei s" $ zPermMappings.from_filec C s | j | | S )z�Get the permission map for the object permission. Returns: PermMap representing the permission Raises: KeyError if the object or permission is not defined )r )r �objr r r r �get� s zPermMappings.getc C s: z| j | | }W n" ty4 t|| j| j� Y S 0 |S )a Get the permission map for the object permission or a default. getdefault is the same as get except that a default PermMap is returned if the object class or permission is not defined. The default is FLOW_BOTH with a weight of 5. )r �KeyErrorr r r )r r- r r+ r r r � getdefault� s zPermMappings.getdefaultc C s( t }|D ]}| �||�}||jB }q|S r )� FLOW_NONEr0 r )r r- �permsr r r+ r r r �getdefault_direction� s z!PermMappings.getdefault_directionc C s( d}|D ]}| � ||�}||j7 }q|S )Nr )r0 r )r r- r2 �totalr r+ r r r �getdefault_distance� s z PermMappings.getdefault_distanceN) r r r r r r, r. r0 r3 r5 r r r r r ^ s r N) r Zimplicitly_typed_objectsr1 Z FLOW_READZ FLOW_WRITEr r& r r r r r r r �<module> s