3
�Qf4� � @ s2 d dl mZ dddddgZd dlmZmZ d dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl Z d dl
Z
d dlZd dlZd d lmZmZ ed
d �Zed
d �Zi Ze
jdBk r�ded< e jf eed�e�� e jeedd�Zy
ejZW n e k
�r ej ZY nX d dl m Z d dl m Z m!Z!m"Z"m#Z# d dl$T d dlmZ d dl$m%Z% d dl&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z- d dl.m/Z/m0Z0m1Z1m2Z2 d dl3m4Z4m5Z5m6Z6 d dl7m8Z8m9Z9m:Z:m;Z;m<Z<m=Z=m>Z> e<d� d d � Z?d d � Z@d d!� ZAd"d� ZBed#d$�ZCed#d%�ZDed#d&�ZEejF� ZGeGjHeC� d'd� ZIdaJdaKdaLed(d)�ZMed
d*�aNed
d+�ZOed
d,�ZPeA� ZQG d-d� deR�ZSeS� ZTG d.d/� d/e �ZUG d0d� de/�ZVG d1d2� d2eVe4e5e6�ZWG d3d4� d4eR�ZXd dlYT d dl7ZZG d5d6� d6ej[j\�Z]d7d8� Z^G d9d:� d:�Z_d dl`Z`d dlajbZbd;d<� Zcejd� Zed=d>� ZfdCd@d�ZgehdAk�r.eg� dS )D� )�absolute_import�RunFaultServer�ClientConnectionHandler�get_host_database�send_alert_notification�ConnectionPool)�GObject�GLibN)�parse_config_setting�
get_configZgeneralZi18n_text_domainZi18n_locale_dir� TZunicode)�domain� localedir)r
r Zfallback)� ServerAccess)�PluginReportReceiver�SETroubleshootDatabase�TestPluginReportReceiver�
AnalyzeThread)�*)r )�AuditRecordReceiver)� ProgramError�ERR_NOT_AUTHENTICATED�ERR_USER_LOOKUP�ERR_USER_PROHIBITED�ERR_USER_PERMISSION�
ERR_FILE_OPEN�ERR_DATABASE_NOT_FOUND)�
RpcChannel�ConnectionState�get_socket_list_from_config�ListeningServer)� SETroubleshootServerInterface�%SETroubleshootDatabaseNotifyInterface�SEAlertInterface)� get_hostname�make_database_filepath�!assure_file_ownership_permissions� get_identity�log_init� log_debug� syslog_trace�setroubleshootd_logc C s8 t d| � dd lj}| tjkr4t d� |j� d S d S )Nzreceived signal=%sr z reloading configuration file)r) �setroubleshoot.config�config�signal�SIGHUPZ config_init)�signum�framer- � r2 � /usr/lib/python3.6/server.py�
sighandlerm s
r4 c C s( t d| � tjtjd� tjd� d S )Nzreceived signal=%sz=/sys/fs/selinux/policy is in use by another process. Exiting!� )r) �syslog�LOG_ERR�os�_exit)r0 r1 r2 r2 r3 �polling_failed_handlerv s r: c C s0 dd l } t� }tj� }t| j � �}d|||f S )Nr z%s:%s:%s)�timer$ r8 �getpid�str)r; Zhostname�pidZstampr2 r2 r3 �make_instance_id} s
r? c C s t S )N)�
host_databaser2 r2 r2 r3 r � s Z system_dbusZbus_name� object_pathZ interfacec C sT t jjttd�}|j| j� |j| j� tj |� x t
j d�D ]}|j | � q>W d S )N�alert�sealert)
�dbusZlowlevelZ
SignalMessage�dbus_system_object_path�dbus_system_interface�append�level�local_id�
system_busZ send_message�connection_pool�clientsrB )�siginforB �clientr2 r2 r3 r � s
ZemailZrecipients_filepath�pkg_name� pkg_version� rpc_versionc @ s8 e Zd Zdd� Zdd� Zdd� Zd dd �Zd
d
d �ZdS )r c C s
i | _ d S )N)� client_pool)�selfr2 r2 r3 �__init__� s zConnectionPool.__init__c C s( || j krtd| � d S d | j |< d S )Nz.add_client: client (%s) already in client pool)rR r) )rS �handlerr2 r2 r3 �
add_client� s
zConnectionPool.add_clientc C s& || j krtd| � d S | j |= d S )Nz-remove_client: client (%s) not in client pool)rR r) )rS rU r2 r2 r3 �
remove_client� s
z ConnectionPool.remove_clientNc c s4 x.| j D ]$}|d kr |V q|j|kr|V qW d S )N)rR � channel_type)rS rX rN r2 r2 r3 rL � s
zConnectionPool.clientsc C s& x | j D ]}|j|kr|j� qW d S )N)rR rX Zclose_connection)rS rX rN r2 r2 r3 � close_all� s
zConnectionPool.close_all)N)N)�__name__�
__module__� __qualname__rT rV rW rL rY r2 r2 r2 r3 r � s
c s( e Zd Z� fdd�Z� fdd�Z� ZS )�AlertPluginReportReceiverc s t t| �j|� d S )N)�superr] rT )rS �database)� __class__r2 r3 rT � s z"AlertPluginReportReceiver.__init__c s^ t t| �j|�}td k r�g }xHtjD ]>}d|j }|j||j�}|dkr$td|j � |j
|j� q$W t |�r�ddl m
} |||� | jj� td� ddlm} tjtj|j� td�|j � x&|jjD ]}|jd kr�|jd
} P q�W td d t ��rt j j |j � | t!d
� xB|j"D ]8}
|
j#dd� dk�r2�q|j|
j#�}|dk�r|S �qW t$|� |S )Nzemail:%s�ignorezEmail: siginfo.sig=%sr )� email_alertz sending alert to all clients)� html_to_textz1 For complete SELinux messages run: sealert -l %s�AVCr> r+ Zlog_full_report)Z
OBJECT_PIDZSYSLOG_IDENTIFIER� zemail:)%r^ r] �report_problem�email_recipientsZrecipient_listZaddress�evaluate_filter_for_user� filter_typer) �sigrG �lenZsetroubleshoot.email_alertrb r_ Z
mark_modifiedZsetroubleshoot.html_utilrc r6 r7 �summary�_rI � audit_event�records� record_type�fieldsr �bool�systemdZjournal�sendZ format_textrO Zusers�usernamer ) rS rM Zto_addrsZ recipientru �actionrb rc � audit_recordr> �u)r` r2 r3 rf � s<
z(AlertPluginReportReceiver.report_problem)rZ r[ r\ rT rf �
__classcell__r2 r2 )r` r3 r] � s r] c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )r c C s* t j| d� |j� | _| jjd| j� d S )NrC Zchanged)r rT �copy�socket_address�connection_stateZconnect�on_connection_state_change)rS r{ r2 r2 r3 rT � s
z ClientConnectionHandler.__init__c C sT t d| jj||j|�|j|�| jf � |tj@ r<tj| � |tj@ rPtj | � d S )Nz]%s.on_connection_state_change: connection_state=%s flags_added=%s flags_removed=%s address=%s)
r) r` rZ �flags_to_stringr{ r �OPENrK rW rV )rS r| �flags� flags_added�
flags_removedr2 r2 r3 r} s
(
z2ClientConnectionHandler.on_connection_state_changec C s8 | j jtj@ rdS || j_| j jtj� | j| j� d S )NT) r| r� r r r{ �socket�update� io_watch_add�handle_client_io)rS r� r{ r2 r2 r3 �open s
z ClientConnectionHandler.openN)rZ r[ r\ rT r} r� r2 r2 r2 r3 r � s c @ s~ e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zd dd�Zd d � Zd S ) �&SetroubleshootdClientConnectionHandlerc C sJ t j| |� t� | _| jd| � | jd| � t� | _d | _d | _d | _ d S )NZSETroubleshootServerr )
r rT r r_ Zconnect_rpc_interfacer �accessru �uid�gid)rS r{ r2 r2 r3 rT s z/SetroubleshootdClientConnectionHandler.__init__c C s� t d| jj||j|�|j|�| jf � |tj@ r<tj| � |tj@ r�| j j
| jj �\| _ | _
t d| jj| j | j
f � tj| � d S )Nz]%s.on_connection_state_change: connection_state=%s flags_added=%s flags_removed=%s address=%szF%s.on_connection_state_change: open, socket credentials: uid=%s gid=%s)r) r` rZ r~ r{ r r rK rW r� Zget_credentialsr� r� r� rV )rS r| r� r� r� r2 r2 r3 r} ( s (
zASetroubleshootdClientConnectionHandler.on_connection_state_changec C s8 | j jtj@ rdS || j_| j jtj� | j| j� d S )NT) r| r� r r r{ r� r� r� r� )rS r� r{ r2 r2 r3 r� 3 s
z+SetroubleshootdClientConnectionHandler.openc C sB | j jtj@ stt��t� }|jj|kr0|jgS tt d| ��d S )Nzdatabase (%s) not found)
r| r� r �
AUTHENTICATEDr r r �
properties�namer )rS Z
database_namer@ r2 r2 r3 �
database_bind< s z4SetroubleshootdClientConnectionHandler.database_bindc C s� t d| ||f � |t| j�kr6ttd| j|f d��|dkrDd}nd }| jj||�s^tt��|| _|| _ || _
| j j |�| _
| j
d kr�| j j|� | jjtj� ttgS )Nz logon(%s) type=%s username=%sz)uid=%s does not match logon username (%s))�detailrC rN )r) r' r� r r r� Z user_allowedr rX Z channel_nameru r_ Zget_user�userZadd_userr| r� r r� rP rQ )rS �typeru ZpasswordZ privileger2 r2 r3 �logonE s
z,SetroubleshootdClientConnectionHandler.logonc C s | j jtj@ stt��tgS )N)r| r� r r� r r rg )rS r2 r2 r3 �query_email_recipients] s z=SetroubleshootdClientConnectionHandler.query_email_recipientsc C s4 t d| � | jjtj@ s"tt��|atjt � d S )Nzset_email_recipients: %s)
r) r| r� r r� r r rg Zwrite_recipient_file�email_recipients_filepath)rS Z
recipientsr2 r2 r3 �set_email_recipientsc s
z;SetroubleshootdClientConnectionHandler.set_email_recipientsc C s2 t d| � | jjtj@ s"tt��| jj|�}d S )Nzdelete_signature: sig=%s) r) r| r� r r� r r r_ �delete_signature)rS rj rM r2 r2 r3 r� p s
z7SetroubleshootdClientConnectionHandler.delete_signaturec C s. t d� | jjtj@ s tt��| jj� }|gS )N�get_properties) r) r| r� r r� r r r_ r� )rS r� r2 r2 r3 r� y s
z5SetroubleshootdClientConnectionHandler.get_propertiesc C s: t d||f � | jjtj@ s&tt��| jj||�}|gS )Nz)evaluate_alert_filter: username=%s sig=%s) r) r| r� r r� r r r_ �evaluate_alert_filter)rS rj ru rv r2 r2 r3 r� � s
z<SetroubleshootdClientConnectionHandler.evaluate_alert_filterc C s4 t d| � | jjtj@ s"tt��| jj|�}|gS )Nzlookup_local_id: %s) r) r| r� r r� r r r_ �lookup_local_id)rS rI rM r2 r2 r3 r� � s
z6SetroubleshootdClientConnectionHandler.lookup_local_idc C s4 t d| � | jjtj@ s"tt��| jj|�}|gS )Nzquery_alerts: criteria=%s) r) r| r� r r� r r r_ � query_alerts)rS Zcriteria�sigsr2 r2 r3 r� � s
z3SetroubleshootdClientConnectionHandler.query_alerts� c C sb t d|||f � | jjtj@ s(tt��|| jkrLttt d�| j|f d��| j
j ||||� d S )Nz.set_filter: username=%s filter_type=%s sig=
%sz)The user (%s) cannot modify data for (%s))r� ) r) r| r� r r� r r ru r rm r_ �
set_filter)rS rj ru ri �datar2 r2 r3 r� � s
z1SetroubleshootdClientConnectionHandler.set_filterc C s@ t d||||f � | jjtj@ s*tt��| jj||||� d S )Nz2set_user_data: username=%s item=%s data=%s sig=
%s) r) r| r� r r� r r r_ �
set_user_data)rS rj ru �itemr� r2 r2 r3 r� � s
z4SetroubleshootdClientConnectionHandler.set_user_dataN)r� )rZ r[ r\ rT r} r� r� r� r� r� r� r� r� r� r� r� r� r2 r2 r2 r3 r� s
r� c @ s e Zd Zdd� Zdd� ZdS )�ClientNotifierc C s
|| _ d S )N)rK )rS rK r2 r2 r3 rT � s zClientNotifier.__init__c C s& x | j jd�D ]}|j||� qW d S )NrC )rK rL �signatures_updated)rS r� r� rN r2 r2 r3 r� � s z!ClientNotifier.signatures_updatedN)rZ r[ r\ rT r� r2 r2 r2 r3 r� � s r� c @ sl e Zd Zd2dd�Zdd� Zejje�dd� �Z ejjedd �d
d � �Z
ejj e�d d
� �Z ejj edddd�dd� �Z
d3dd�Zejj edddd�dd� �Zejj edddd�d d � �Zejj edddd�d d � �Zd d!� Zejj eddd"d�d#d$� �Zejj eddd%d�d&d'� �Zejj eddd%d�d(d)� �Zejj eddd*�d+d,� �Zejj e�d-d.� �Zd4d/d0�Zd1S )5�SetroubleshootdDBusObject�
c C s^ t jjj| t j� |� d| _|| _| j| j� td| � || _ || _
t t j �| _
t� | _d S )Nr zdbus __init__ %s called)rD �service�ObjectrT � SystemBus�conn_ctr�timeout�alarmr) �queue�receiverZAuditRecordReaderZ TEXT_FORMAT�
record_readerr �record_receiver)rS rA �analysis_queue�alert_receiverr� r2 r2 r3 rT � s z"SetroubleshootdDBusObject.__init__c C s� y`t j� d }x4dt j� |f d| gD ]}tjj|�r(td��q(W t|�r^| jj || j
f� W n4 tk
r� } zt j t j t
|�� W Y d d }~X nX d S )Nr5 z%%s%s/modules/active/disable_dontauditz,/var/lib/selinux/%s/active/disable_dontauditzsSetroubleshoot can not analyze AVCs while dontaudit rules are disabled, 'semodule -B' will turn on dontaudit rules.)�selinuxZselinux_getpolicytypeZ selinux_pathr8 �path�exists�
ValueErrorZ
verify_avcr� Zputr� r6 r7 r= )rS �avcZ policy_typeZ
store_path�er2 r2 r3 �add� s z SetroubleshootdDBusObject.addc C s d S )Nr2 )rS �reasonr2 r2 r3 �restart� s z!SetroubleshootdDBusObject.restartZss)Z signaturec C s d S )Nr2 )rS rH rI r2 r2 r3 rB � s z SetroubleshootdDBusObject.alertc C s. | j d� | jd7 _td| j � td�S )Nr r5 z)dbus iface start() called: %d ConnectionsZStarted)r� r� r) rm )rS r2 r2 r3 �start� s
z SetroubleshootdDBusObject.start�sender�sZii)Zsender_keyword� in_signature�
out_signaturec C s� t | jj|��}t� }d}g }x2|jd�j� D ] }|j|�}|dkr.|j|� q.W |jt d� d} d}
x8|D ]0}| d7 } |j
dkr�|
d7 }
|j |krld}
d} qlW | |
fS )Nr� r ra )�keyr r5 �red) r' �
connection�
get_unix_userr r� �siginfosrh rG �sort� compare_sigrH rI ) rS Z last_seen_idr� ru r_ r� Z
signaturesrj rv �countr� r2 r2 r3 �
check_for_new� s&
z'SetroubleshootdDBusObject.check_for_new�displayc
C s~ t | jj|��}t� }tjjt|d ��}|jd�j }g }x>|D ]6} | j
|k rPq@| j |�|kr@|j | j
| j� | jf� q@W |S )Ni@B r )r' r� r� r �setroubleshoot�utilZ TimeStamp�floatr� �signature_list�last_seen_daterh rG rI rl � report_count)
rS �sincer� � alert_actionru r_ Z since_alerts�database_alertsZalertsrB r2 r2 r3 �_get_all_alerts_since s
z/SetroubleshootdDBusObject._get_all_alerts_since�tza(ssi)c C s | j ||�S )N)r� )rS r� r� r2 r2 r3 �get_all_alerts_since s z.SetroubleshootdDBusObject.get_all_alerts_sincer� c C s | j d|�S )a�
Return array of *local_id*'s, *summary*'s, and *report_count*'s of all current alerts in a setroubleshoot database
returns list of:
* `local_id(s)`: a report id in a setroubleshoot database
* `summary(s)`: a brief description of an alert. E.g. `"SELinux is preventing /usr/bin/bash from ioctl access on the unix_stream_socket unix_stream_socket."`
* `report_count(i)`: count of reports of this alert
r )r� )rS r� r2 r2 r3 �get_all_alerts s
z(SetroubleshootdDBusObject.get_all_alertsc C s | j d|dd�S )a�
Return array of *local_id*'s, *summary*'s, and *report_count*'s of all alerts which a user set to be ignored by a user
returns list of:
* `local_id(s)`: a report id in a setroubleshoot database
* `summary(s)`: a brief description of an alert. E.g. `"SELinux is preventing /usr/bin/bash from ioctl access on the unix_stream_socket unix_stream_socket."`
* `report_count(i)`: count of reports of this alert
r ra )r� )r� )rS r� r2 r2 r3 �get_all_alerts_ignored( s
z0SetroubleshootdDBusObject.get_all_alerts_ignoredc C sF y|j |�}W n& tk
r4 } z
|�W Y d d }~X nX |j� j� }|S )N)r� r r� �__next__)rS rI r_ r� r� rB r2 r2 r3 �
_get_alert4 s z$SetroubleshootdDBusObject._get_alertzssiasa(ssssbbi)ttsc
C s� t | jj|��}t� }| j||�}|j� |jj}dd� |D �}|j� \}} g }
xZ| D ]R\} } |
j |j
| j || ��|j
| j || ��|j
| j
|| ��| j| j| j| jf� qVW |j|j� |j||
t|jjd��d t|jjd��d |jp�dfS )ar
Return an alert with summary, audit events, fix suggestions
##### arguments
* `local_id(s)`: an alert id
##### return values
* `local_id(s)`: an alert id
* `summary(s)`: a brief description of an alert. E.g. `"SELinux is preventing /usr/bin/bash from
ioctl access on the unix_stream_socket unix_stream_socket."`
* `report_count(i)`: count of reports of this alert
* `audit_event(as)`: an array of audit events (AVC, SYSCALL) connected to the alert
* `plugin_analysis(a(ssssbb)`: an array of plugin analysis structure
* `if_text(s)`:
* `then_text(s)`
* `do_text(s)`
* `analysis_id(s)`: plugin id. It can be used in `org.fedoraproject.SetroubleshootFixit.run_fix()`
* `fixable(b)`: True when an alert is fixable by a plugin
* `report_bug(b)`: True when an alert should be reported to bugzilla
* `priority(i)`: An analysis priority. Typically the value is between 1 - 100.
* `first_seen_date(t)`: when the alert was seen for the first time, number of microseconds since the Epoch
* `last_seen_date(t)`: when the alert was seen for the last time, number of microseconds since the Epoch
* `level(s)`: "green", "yellow" or "red"
c S s g | ] }|j � �qS r2 )Zto_text)�.0Zeventr2 r2 r3 �
<listcomp>^ s z7SetroubleshootdDBusObject.get_alert.<locals>.<listcomp>z%si@B r� )r' r� r� r r� Z%update_derived_template_substitutionsrn ro Z get_pluginsrG Z
substituteZ get_if_textZ
get_then_textZ get_do_textZ analysis_idZfixableZ
report_bugZpriorityrI rl r� �intZfirst_seen_date�formatr� rH )
rS rI r� ru r_ rB r� Z audit_eventsZtotal_priorityZ
alert_pluginsZpluginsZplugin�argsr2 r2 r3 � get_alert< s, z#SetroubleshootdDBusObject.get_alert�bc C sX yHt | jj|��}t� }| j||�}ddlm} |j|j||| d� dS dS dS )z�
Sets a filter on an alert. The alert can be "always" filtered, "never" filtered or "after_first" filtered.
##### arguments
* `local_id(s)`: an alert id
* `filter_type(s)`: "always", "never", "after_first"
##### return values
* `success(b)`:
r )�map_filter_name_to_valueNTF) r' r� r� r r� �setroubleshoot.signaturer� r� rj )rS rI ri r� ru r_ rB r� r2 r2 r3 r� t s z$SetroubleshootdDBusObject.set_filterc C s2 y"t � }| j||�}|j|j� dS dS dS )zz
Deletes an alert from the database.
##### arguments
* `local_id(s)`: an alert id
##### return values
* `success(b)`:
TFN)r r� r� rj )rS rI r� r_ rB r2 r2 r3 � delete_alert� s
z&SetroubleshootdDBusObject.delete_alert)r� r� c
C s t |�}| jd� | jd7 _td|| jf � x^| jjt |��D ]J\}}}}}t|||||�}|j� x"| jj|�D ]}| j t
|�� qxW qDW x\| jj d�D ]L}y| j t
|�� W q� t k
r� } zt
j
t
jd| � W Y d d } ~ X q�X q�W | jd8 _| j| j� td�S )Nr r5 z#dbus avc(%s) called: %d Connectionsz Unable to add audit event: %srd )r= r� r� r) r� ZfeedZ AuditRecordZaudispd_rectifyr� r� rd �flushr� r6 r7 r� rm )
rS r� rp Zevent_idZ body_textrq Z line_numberrw rn r� r2 r2 r3 r� � s"
( z SetroubleshootdDBusObject.avcc C s, | j d8 _ td| j � | j| j� dS )Nr5 z*dbus iface finish() called: %d Connectionsr� )r� r) r� r� )rS r2 r2 r3 �finish� s z SetroubleshootdDBusObject.finishc C s | j dkrtj|� d S )Nr )r� r. r� )rS r� r2 r2 r3 r� � s
z SetroubleshootdDBusObject.alarmN)r� )r� )r� )rZ r[ r\ rT r� rD r� r. rF r� rB �methodr� r� r� r� r� r� r� r� r� r� r� r� r� r2 r2 r2 r3 r� � s"
8 r� c C s | j S )N)r� )�ar2 r2 r3 r� � s r� c @ s e Zd Zdd� Zdd� ZdS )�SetroubleshootdDBusc C sd y&t dtttf � tt|||�| _W n8 tk
r^ } z tjtjd| � |�W Y d d }~X nX d S )Nz=creating system dbus: bus_name=%s object_path=%s interface=%sz$cannot start system DBus service: %s) r) �dbus_system_bus_namerE rF r� �dbus_obj� Exceptionr6 r7 )rS r� r� r� r� r2 r2 r3 rT � s z SetroubleshootdDBus.__init__c C s | j jd� dS )Nzdaemon requestT)r� r� )rS r2 r2 r3 �
do_restart� s z SetroubleshootdDBus.do_restartN)rZ r[ r\ rT r� r2 r2 r2 r3 r� � s r� c C s | j � tj� d S )N)�save� audit2whyr� )r_ r2 r2 r3 �goodbye� s r� c C s t d� tj� d S )Nz SIGALRM raised in RunFaultServer)r) � main_loop�quit)r0 r1 r2 r2 r3 �
alarm_handler� s r� r� c C s� t j| � t j t jt� x�ytj� t jd� P W q tk
rf } zdt|�krRw|�W Y d d }~X q tk
r� } z dtt |dd��kr�w|�W Y d d }~X qX qW t j t jt
� t j t j t � �yt
jt� tt�}tdd�}t|�}t|dd� t||td �d
�atj|� tjtt� d }x�tj j D ]�}tj t|j j �t|j j!�t|j j"�|j j#�\}}|tj$k�sx|tj%k�r,|tj$k�r�d } nd
} t
j
t
j&d|j'| f � d}tj(|j � �q,W |�r�tj)dd� tddt*��s�t+t�}
nt,t�}
dd l-} | j.j/j0d�a1t2t1| �} | j3d� | j4� ddl5m6}
|
� a7tt8dd� yt7j9t8� W n@ t:k
�r� } z"|j;t<k�rxt=|j>� n|�W Y d d }~X nX t?d�}x |D ]}t@|tA�}|jB� �q�W tCjDjE� tFt1|
| �}tGjH� W n� tIk
�r } zt=d� W Y d d }~X n� tJk
�r. } zt=d� W Y d d }~X nV tKk
�r� } z8dd lL}tM|jN� � t
j
t
j&d|jOjPt|�f � W Y d d }~X nX d S )Nr z%unable to open /sys/fs/selinux/policy� __context__r� r_ �filenamei� r� zAudit Listener)Z
friendly_nameFZallowedz dontaudit'dz-Deleting alert %s, it is %s in current policyT)ZpruneZtest�analyze)�SEEmailRecipientSetZlisten_for_clientz#KeyboardInterrupt in RunFaultServerz$raising SystemExit in RunFaultServerzexception %s: %s)Qr. r� �SIGALRMr: r� Zinitr� r= � SystemError�getattrr� r/ r4 r6 ZopenlogrO r� rK r r% r& r rm r@ Z
set_notify�atexit�registerr� r� r� r� rj ZscontextZtcontextZtclassr� ZALLOWZ DONTAUDITr7 rI r� r� rr r] r Zsix.moves.queueZmovesr� ZQueuer� r Z setDaemonr� r� r� rg r� Zparse_recipient_filer �errnor r) �strerrorr r r� r� rD ZglibZ init_threadsr� r� Zrun�KeyboardInterrupt�
SystemExitr� � tracebackr* �
format_excr` rZ )r� r� Zclient_notifierZdatabase_filenameZdatabase_filepathZdeleted�iZwhyZboolsr� r� ZsixZanalyze_threadr� Zlisten_addressesZlisten_addressZlistening_serverZsetroubleshootd_dbusr r2 r2 r3 r � s�
0
�__main__)r )r� )iZ
__future__r �__all__Z
gi.repositoryr r rD Z dbus.serviceZ dbus.glib�gettextr8 r. r� �sysr6 Zsystemd.journalrs r, r
r r
r �kwargs� version_infoZinstallZ translationZugettextrm �AttributeErrorZ setroubleshoot.access_controlr Zsetroubleshoot.analyzer r r r Zsetroubleshoot.avc_auditr Zsetroubleshoot.errcoder r r r r r r Zsetroubleshoot.rpcr r r r Z setroubleshoot.rpc_interfacesr! r" r# Zsetroubleshoot.utilr$ r% r& r' r( r) r* r4 r: r? r r� rE rF r� rJ Z request_namer r@ r� rg r� rO rP rQ Z instance_id�objectr rK r] r r� r� Zsetroubleshoot.audit_datar� r� r� r� r� r� r� Zselinux.audit2whyr� r� ZMainLoopr� r� r rZ r2 r2 r2 r3 �<module> s�
$ $
0