shell bypass 403
a
��ye � @ s" d dl Z d dlZd dlZdZdZg d�ZdZzFd dlZi Zej dk rLded< ej
efd d
ie�d di��Z e jZ W nH zd dl
Z
ee
jd < W n$ ey� d dlZeejd < Y n0 Y n0 d
d� Zd$dd�Zd%dd�Zd&dd�Zdad'dd�Zd(dd�Zdd � Zd)d d �Zd d!� Z d*d"d#�Z dS )+� Nz_admin$z_role$) �get_all_interfaces�get_interfaces_from_xml� get_admin�get_user�get_interface_dict�get_interface_format_text�!get_interface_compile_format_text� get_xml_file�interface_compile_testzselinux-python)� T�unicode� localedirz/usr/share/locale�fallback�_c C s( g }t | �}|�� D ]}|�|� q|S )z' Get all interfaces from given xml file)r �keys�append)�pathZinterfaces_list�idict�k� r �6/usr/lib/python3.9/site-packages/sepolicy/interface.pyr 5 s
r � c C s0 ddl m} g }| s |� }nt| �}t|�}|S )Nr )� get_methods)�sepolicyr r r )r r Zall_interfaces�xml_pathr r r r > s r c
C s� g }| r�z6t | �}t|�}|�� D ]}|�d�r"|�|� q"W q� ty� } z2tj�d|j j
t |�f � t� d� W Y d}~q�d}~0 0 n,t
�� D ]"}|�d�r�|�|�d�d � q�|S )z? Get all domains with an admin interface from installed policy.Z_admin�%s: %s
� Nr )r r r �endswithr �IOError�sys�stderr�write� __class__�__name__�str�exitr r �split)r Z
admin_listr r r �e�ir r r r J s
"
r c
C s� g }| r�zNt | �}t|�}|�� D ]0}|�d�r"d|dd� t�� v r"|�|� q"W q� ty� } z2tj �
d|j j t
|�f � t�d� W Y d}~q�d}~0 0 nLt�� D ]B}t�dt |�}t|�dkr�d|d t�� v r�|�|d � q�|S ) z1 Get all domains with SELinux user role interfaceZ_rolez %s_exec_tN���r r z(.*)%sr )r r r r r Z
get_all_typesr r r r r! r" r# r$ r% r �re�findall�USER_TRANSITION_INTERFACE�len)r Z
trans_listr r r r' r( �mr r r r ` s$
" r �#/usr/share/selinux/devel/policy.xmlc
C s< dd l }dd l}trtS i ag }d}|| 7 }|d7 }z�|j�| �rR|jj�| �}n|jj�|�}|� d�D ]�}|� d�D ]�}|�
d�D ]D}|� d�D ]} |� | � d�� q�||�
d �jdgt|� d�< g }q�|�
d
�D ]D}|� d�D ]} |� | � d�� q�||�
d �jd
gt|� d�< g }q�qxqjW n t�y6 Y n0 tS ) Nr zZ<?xml version="1.0" encoding="ISO-8859-1" standalone="no"?>
<policy>
<layer name="admin">
z
</layer>
</policy>
Zlayer�module� interfaceZparam�nameZsummary�template)�osZxml.etree.ElementTree�interface_dictr �isfileZetreeZ ElementTree�parseZ
fromstringr+ �iterr �get�find�textr )
r r4 ZxmlZ
param_listr Ztree�lr. r( r' r r r r { s8 r c C s< t |�}d| d�|| d �d�|| d �d��f }|S )Nz %s(%s) %s�, r � r �
)r �joinr& )r1 r r �interface_textr r r r � s 0r c C sH ddl m} g }| | d D ]&}|�|j| � d|d�|�f }q |S )Nr �� test_moduler z%s(%s)
r= )� templatesrC r � dict_valuesr@ )Zinterfaces_dictr1 rC Z param_tmpr( rA r r r r � s r � compiletestc C s6 ddl m} d}|t�d||j�7 }|t|| �7 }|S )Nr rB r Z TEMPLATETYPE)rD rC r* �subZte_test_moduler )r1 r r2 rC �ter r r �generate_compile_te� s
rI c C s� ddl }zddlm} W n ty6 ddlm} Y n0 |j�| �d }|j�| ��d�d }|d|| �\}}|dkr�t j
� d� t j
� d| � t � d � n|S dS )
z; Returns xml format of interfaces for given .if policy filer N��getstatusoutput�/�.zN/usr/bin/python3 /usr/share/selinux/devel/include/support/segenxml.py -w -m %sz-
Could not process selected interface file.
z
%sr )
r4 �commandsrK � ImportError�
subprocessr �dirname�basenamer& r r r! r% )Zif_filer4 rK Zbasedir�filename�rc�outputr r r r � s r c
C sz g d�}dg}zddl m} W n ty< ddlm} Y n0 dd l}ddddd �}t|�}| �d
�d |v �sb|| d |v �sbttd �| � zft |d
d�}|�
t | |�� |� � |d|d �\} }
| dkr�t
j�
|
� t
j�
td�| � W n> t�y6 } z$t
j�
td�| | f � W Y d } ~ n
d } ~ 0 0 |�� D ] } |j�| ��r@|�| � �q@nt
j�
td�| � d S )N)ZuserdomZkernelZcorenet�files�devr3 r rJ zcompiletest.ppzcompiletest.tezcompiletest.fczcompiletest.if)�pprH Zfc�ifr � zCompiling %s interfacerH �wz,make -f /usr/share/selinux/devel/Makefile %srX z
Compile test for %s failed.
z%
Compile test for %s has not run. %s
z,
Compiling of %s interface is not supported.)rN rK rO rP r4 r r& �printr �openr! rI �closer r �EnvironmentError�valuesr �exists�remove)
r1 r Zexclude_interfacesZexclude_interface_typerK r4 Z policy_filesr �fdrT rU r' �vr r r r
� s2 & . r
)r )r )r )r/ )r/ )rF )r/ ) r* r r ZADMIN_TRANSITION_INTERFACEr, �__all__ZPROGNAME�gettext�kwargs� version_info� translation�tr �builtinsr$ �__dict__rO Z __builtin__r r r r r r5 r r r rI r r
r r r r �<module> sJ
���
*