FM / sepolgen

/usr/lib64/python2.6/site-packages/sepolgen/

/usr/lib64/python2.6/site-packages/sepolgen

Name	Size	Mode	Actions
access.py	11639	0644	edit dl rm
access.pyc	12695	0644	edit dl rm
access.pyo	12695	0644	edit dl rm
audit.py	20706	0644	edit dl rm
audit.pyc	20514	0644	edit dl rm
audit.pyo	20514	0644	edit dl rm
classperms.py	2801	0644	edit dl rm
classperms.pyc	3200	0644	edit dl rm
classperms.pyo	3200	0644	edit dl rm
defaults.py	1287	0644	edit dl rm
defaults.pyc	1516	0644	edit dl rm
defaults.pyo	1516	0644	edit dl rm
interfaces.py	16509	0644	edit dl rm
interfaces.pyc	16051	0644	edit dl rm
interfaces.pyo	16051	0644	edit dl rm
lex.py	33586	0644	edit dl rm
lex.pyc	20103	0644	edit dl rm
lex.pyo	20103	0644	edit dl rm
matching.py	8629	0644	edit dl rm
matching.pyc	7486	0644	edit dl rm
matching.pyo	7486	0644	edit dl rm
module.py	7218	0644	edit dl rm
module.pyc	8565	0644	edit dl rm
module.pyo	8565	0644	edit dl rm
objectmodel.py	6524	0644	edit dl rm
objectmodel.pyc	4790	0644	edit dl rm
objectmodel.pyo	4790	0644	edit dl rm
output.py	5031	0644	edit dl rm
output.pyc	4524	0644	edit dl rm
output.pyo	4524	0644	edit dl rm
policygen.py	14427	0644	edit dl rm
policygen.pyc	14095	0644	edit dl rm
policygen.pyo	14026	0644	edit dl rm
refparser.py	29030	0644	edit dl rm
refparser.pyc	34463	0644	edit dl rm
refparser.pyo	34463	0644	edit dl rm
refpolicy.py	26448	0644	edit dl rm
refpolicy.pyc	44231	0644	edit dl rm
refpolicy.pyo	44231	0644	edit dl rm
sepolgeni18n.py	912	0644	edit dl rm
sepolgeni18n.pyc	410	0644	edit dl rm
sepolgeni18n.pyo	410	0644	edit dl rm
util.py	2573	0644	edit dl rm
util.pyc	2722	0644	edit dl rm
util.pyo	2722	0644	edit dl rm
yacc.py	82075	0644	edit dl rm
yacc.pyc	43220	0644	edit dl rm
yacc.pyo	43220	0644	edit dl rm
__init__.py	0	0644	edit dl rm
__init__.pyc	142	0644	edit dl rm
__init__.pyo	142	0644	edit dl rm

Edit: /usr/lib64/python2.6/site-packages/sepolgen/output.py (5031B)

# Authors: Karl MacMillan <kmacmillan@mentalrootkit.com>
#
# Copyright (C) 2006 Red Hat
# see file 'COPYING' for use and warranty information
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation; version 2 only
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#

"""
Classes and functions for the output of reference policy modules.

This module takes a refpolicy.Module object and formats it for
output using the ModuleWriter object. By separating the output
in this way the other parts of Madison can focus solely on
generating policy. This keeps the semantic / syntactic issues
cleanly separated from the formatting issues.
"""

import refpolicy
import util

class ModuleWriter:
    def __init__(self):
        self.fd = None
        self.module = None
        self.sort = True
        self.requires = True

def write(self, module, fd):
        self.module = module

if self.sort:
            sort_filter(self.module)

# FIXME - make this handle nesting
        for node, depth in refpolicy.walktree(self.module, showdepth=True):
            fd.write("%s\n" % str(node))

# Helper functions for sort_filter - this is all done old school
# C style rather than with polymorphic methods because this sorting
# is specific to output. It is not necessarily the comparison you
# want generally.

# Compare two IdSets - we could probably do something clever
# with different here, but this works.
def id_set_cmp(x, y):
    xl = util.set_to_list(x)
    xl.sort()
    yl = util.set_to_list(y)
    yl.sort()

if len(xl) != len(yl):
        return cmp(xl[0], yl[0])
    for v in zip(xl, yl):
        if v[0] != v[1]:
            return cmp(v[0], v[1])
    return 0

# Compare two avrules
def avrule_cmp(a, b):
    ret = id_set_cmp(a.src_types, b.src_types)
    if ret is not 0:
        return ret
    ret = id_set_cmp(a.tgt_types, b.tgt_types)
    if ret is not 0:
        return ret
    ret = id_set_cmp(a.obj_classes, b.obj_classes)
    if ret is not 0:
        return ret

# At this point, who cares - just return something
    return cmp(len(a.perms), len(b.perms))

# Compare two interface calls
def ifcall_cmp(a, b):
    if a.args[0] != b.args[0]:
        return cmp(a.args[0], b.args[0])
    return cmp(a.ifname, b.ifname)

# Compare an two avrules or interface calls
def rule_cmp(a, b):
    if isinstance(a, refpolicy.InterfaceCall):
        if isinstance(b, refpolicy.InterfaceCall):
            return ifcall_cmp(a, b)
        else:
            return id_set_cmp([a.args[0]], b.src_types)
    else:
        if isinstance(b, refpolicy.AVRule):
            return avrule_cmp(a,b)
        else:
            return id_set_cmp(a.src_types, [b.args[0]])
                
def role_type_cmp(a, b):
    return cmp(a.role, b.role)

def sort_filter(module):
    """Sort and group the output for readability.
    """
    def sort_node(node):
        c = []

# Module statement
        for mod in node.module_declarations():
            c.append(mod)
            c.append(refpolicy.Comment())

# Requires
        for require in node.requires():
            c.append(require)
        c.append(refpolicy.Comment())

# Rules
        #
        # We are going to group output by source type (which
        # we assume is the first argument for interfaces).
        rules = []
        rules.extend(node.avrules())
        rules.extend(node.interface_calls())
        rules.sort(rule_cmp)

cur = None
        sep_rules = []
        for rule in rules:
            if isinstance(rule, refpolicy.InterfaceCall):
                x = rule.args[0]
            else:
                x = util.first(rule.src_types)

if cur != x:
                if cur:
                    sep_rules.append(refpolicy.Comment())
                cur = x
                comment = refpolicy.Comment()
                comment.lines.append("============= %s ==============" % cur)
                sep_rules.append(comment)
            sep_rules.append(rule)

c.extend(sep_rules)

ras = []
        ras.extend(node.role_types())
        ras.sort(role_type_cmp)
        if len(ras):
            comment = refpolicy.Comment()
            comment.lines.append("============= ROLES ==============")
            c.append(comment)

c.extend(ras)

# Everything else
        for child in node.children:
            if child not in c:
                c.append(child)

node.children = c

for node in module.nodes():
        sort_node(node)

cmd: