File: //lib/python3.12/site-packages/sepolgen/__pycache__/objectmodel.cpython-312.pyc
�
�jw � �p � d Z g d�ZdZdZdZeez Zeeeed�Zedededed iZ G d
� d � Z G d � d
� Z y)z�
This module provides knowledge object classes and permissions. It should
be used to keep this knowledge from leaking into the more generic parts of
the policy generation.
) �socket�fd�process�file�lnk_file� fifo_file�dbus�
capability�unix_stream_socket� � � )�n�r�w�br r r r c � � e Zd ZdZd� Zd� Zy)�PermMapa A mapping between a permission and its information flow properties.
PermMap represents the information flow properties of a single permission
including the direction (read, write, etc.) and an abstract representation
of the bandwidth of the flow (weight).
c �. � || _ || _ || _ y �N)�perm�dir�weight)�selfr r r s �9/usr/lib/python3.12/site-packages/sepolgen/objectmodel.py�__init__zPermMap.__init__T s � ��� ���� �� � c �\ � d| j t | j | j fz S )Nz'<sepolgen.objectmodel.PermMap %s %s %d>)r �
dir_to_strr r �r s r �__repr__zPermMap.__repr__Y s0 � �8�D�I�I�;E�d�h�h�;O�;?�;�;�<H� H� Hr N)�__name__�
__module__� __qualname__�__doc__r r � r r r r M s � �� �
Hr r c �4 � e Zd ZdZd� Zd� Zd� Zd� Zd� Zd� Z y) � PermMappingsz�The information flow properties of a set of object classes and permissions.
PermMappings maps one or more classes and permissions to their PermMap objects
describing their information flow characteristics.
c �6 � i | _ d| _ t | _ y )N� )�classes�default_weight� FLOW_BOTH� default_dirr s r r zPermMappings.__init__d s � ��� � ���$��r c � � d}|D ]� }|j � }t |� dk( st |� dk( s|d dk( r�8|d dk( r=|d }|| j v r t d� �i | j |< | j | }�}t |� dk7 r t d� �|� t d � �t |d t
|d t
|d
� � }|||j < �� y) zsRead the permission mappings from a file. This reads the format used
by Apol in the setools suite.
Nr r �#�classzduplicate class in perm map� z!error in object class permissionszpermission outside of classr
)�split�lenr* �
ValueErrorr �
str_to_dir�intr )r r �cur�line�fields�c�pms r � from_filezPermMappings.from_filei s� � � ���D��Z�Z�\�F��6�{�a� �3�v�;�!�#3�v�a�y�C�7G���a�y�G�#��1�I���� � �$�$�%B�C�C�"%�� � �Q���l�l�1�o���v�;�!�#�$�%H�I�I��;�$�%B�C�C� �V�A�Y�
�6�!�9�(=�s�6�!�9�~�N�� !��B�G�G� �! r c �& � | j | | S )z�Get the permission map for the object permission.
Returns:
PermMap representing the permission
Raises:
KeyError if the object or permission is not defined
)r* )r �objr s r �getzPermMappings.get� s � � �|�|�C� ��&�&r c � � | j | | }|S # t $ r$ t || j | j � cY S w xY w)a Get the permission map for the object permission or a default.
getdefault is the same as get except that a default PermMap is
returned if the object class or permission is not defined. The
default is FLOW_BOTH with a weight of 5.
)r* �KeyErrorr r- r+ )r r> r r; s r �
getdefaultzPermMappings.getdefault� sP � � H�� � �c�"�4�(�B� � �� � H��4��!1�!1�4�3F�3F�G� G� H�s � �*A�Ac �b � t }|D ]# }| j ||� }||j z }�% |S r )� FLOW_NONErB r )r r> �permsr r r; s r �getdefault_directionz!PermMappings.getdefault_direction� s5 � ����D�� � ��d�+�B�����,�C� � �
r c �Z � d}|D ]# }| j ||� }||j z
}�% |S )Nr )rB r )r r> rE �totalr r; s r �getdefault_distancez PermMappings.getdefault_distance� s6 � ����D�� � ��d�+�B� �R�Y�Y� �E� � � r N)
r! r" r# r$ r r< r? rB rF rI r% r r r' r' ^ s% � ��
%�
"�8'� ��r r' N)
r$ �implicitly_typed_objectsrD � FLOW_READ�
FLOW_WRITEr, r5 r r r' r% r r �<module>rM sl ��(�( H� �8 � �
� �
�
�
��
#� � �i�z��
T�
��3� �C��c�9�s�
T�
�H� H�"K� Kr