3
Kl�fv � @ sp d Z ddddddddd g Zd
Zd Zd ZeeB Zeeeed
�ZedededediZG dd� d�ZG dd� d�Z dS )z�
This module provides knowledge object classes and permissions. It should
be used to keep this knowledge from leaking into the more generic parts of
the policy generation.
Zsocket�fdZprocess�fileZlnk_fileZ fifo_fileZdbusZ
capabilityZunix_stream_socket� � � )�n�r�w�br r r r c @ s e Zd ZdZdd� Zdd� ZdS )�PermMapa A mapping between a permission and its information flow properties.
PermMap represents the information flow properties of a single permission
including the direction (read, write, etc.) and an abstract representation
of the bandwidth of the flow (weight).
c C s || _ || _|| _d S )N)�perm�dir�weight)�selfr r r
� r �!/usr/lib/python3.6/objectmodel.py�__init__T s zPermMap.__init__c C s d| j t| j | jf S )Nz'<sepolgen.objectmodel.PermMap %s %s %d>)r �
dir_to_strr r
)r r r r �__repr__Y s zPermMap.__repr__N)�__name__�
__module__� __qualname__�__doc__r r r r r r r
M s r
c @ s@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dS )� PermMappingsz�The information flow properties of a set of object classes and permissions.
PermMappings maps one or more classes and permissions to their PermMap objects
describing their information flow charecteristics.
c C s i | _ d| _t| _d S )N� )�classes�default_weight� FLOW_BOTH� default_dir)r r r r r d s zPermMappings.__init__c C s� d}x�|D ]�}|j � }t|�dks
t|�dks
|d dkr<q
|d dkrx|d }|| jkrbtd��i | j|< | j| }q
t|�dkr�td��|dkr�td ��t|d t|d t|d
��}|||j< q
W dS ) zsRead the permission mappings from a file. This reads the format used
by Apol in the setools suite.
Nr r �#�classzduplicate class in perm map� z"error in object classs permissionszpermission outside of classr )�split�lenr �
ValueErrorr
�
str_to_dir�intr )r r Zcur�lineZfields�c�pmr r r � from_filei s"
$
zPermMappings.from_filec C s | j | | S )z�Get the permission map for the object permission.
Returns:
PermMap representing the permission
Raises:
KeyError if the object or permission is not defined
)r )r �objr r r r �get� s zPermMappings.getc C s8 y| j | | }W n tk
r2 t|| j| j�S X |S )a Get the permission map for the object permission or a default.
getdefault is the same as get except that a default PermMap is
returned if the object class or permission is not defined. The
default is FLOW_BOTH with a weight of 5.
)r �KeyErrorr
r r )r r* r r( r r r �
getdefault� s
zPermMappings.getdefaultc C s, t }x"|D ]}| j||�}||jB }q
W |S )N)� FLOW_NONEr- r )r r* �permsr r r( r r r �getdefault_direction� s
z!PermMappings.getdefault_directionc C s, d}x"|D ]}| j ||�}||j7 }q
W |S )Nr )r- r
)r r* r/ Ztotalr r( r r r �getdefault_distance� s
z PermMappings.getdefault_distanceN)
r r r r r r) r+ r- r0 r1 r r r r r ^ s
r N)
r Zimplicitly_typed_objectsr. Z FLOW_READZ
FLOW_WRITEr r$ r r
r r r r r �<module> s