shell bypass 403
a
q�qe� � @ s� U d dl Z d dlZd dlmZmZ d dlmZmZmZm Z ddl
m Z ddl m
Z
ddlmZmZmZmZ i Zeeef ed < d
gZG d d � d e�ZG d
d
� d
ed�ZdS )� N)�ABCMeta�abstractmethod)�Dict� FrozenSet�List�Mapping� )�InvalidCheckOption)�
SELinuxPolicy� )�CHECK_TYPE_KEY�CHECK_DESC_KEY�
CHECK_DISABLE�GLOBAL_CONFIG_KEYS�CHECKER_REGISTRY�
CheckerModulec s e Zd ZdZ� fdd�Z� ZS )�
CheckRegistryzQChecker module registry metaclass. This registers modules in the check registry.c s� |� d�}|� d�}|dkrnt|t�s4td�|���t|t�sLtd�|���|tv rnt| j}td�||���t� � | |||�}|r�|t|< |S )N�
check_type� check_configr z,Checker module {} does not set a check_type.z4Checker module {} does not set a valid check_config.z4Checker module {} conflicts with registered check {})
�get�
isinstance�str� TypeError�format� frozensetr �__name__�super�__new__)�clsZclsnameZ superclassesZ
attributedictr r Zexisting_check_moduleZclassdef�� __class__� �C/usr/lib64/python3.9/site-packages/setools/checker/checkermodule.pyr s$
�
�zCheckRegistry.__new__)r �
__module__� __qualname__�__doc__r �
__classcell__r! r! r r" r s r c @ s� e Zd ZU dZeed< ee ed< dZeed< e j
Z e ed< e ee
eef dd�d d
�Zedd �d d
�Zedd �dd�Zedd �dd�Zeed�dd��ZdS )r z/Abstract base class for policy checker modules.r r F� log_passing�policyN)r( � checkname�config�returnc C sb || _ || _t�t�| _t| jB }|D ] }||vr&td� | j|���q&|�
t �| _ |�
t
�| _d S )Nz{}: Invalid option: {})r( r) �loggingZ getLoggerr �logr r r r r r
Zdescr �disable)�selfr( r) r* Z
valid_options�kr! r! r" �__init__J s
� zCheckerModule.__init__)�msgr+ c C s( | j �|� | j �d� | j�|� dS )z Output an informational message.�
N)�output�writer- �debug�r/ r2 r! r! r" �log_info] s zCheckerModule.log_infoc C s. | j r| j�d�|�� | j�d�|�� dS )z�
Log findings that pass the check. By default these messages are
surpressed unless self.log_passing is True.
z P * {}
zP * {}N)r' r4 r5 r r- r6 r7 r! r! r" �log_okc s zCheckerModule.log_okc C s4 | j �d�| jrdnd|�� | j�d�|�� dS )z!Log findings that fail the check.z
{} * {}
�F� zF * {}N)r4 r5 r r' r- r6 r7 r! r! r" �log_faill s zCheckerModule.log_fail)r+ c C s dS )z�
Run the configured check on the policy.
Return: List of failed items in the check. If the check passes, list is empty.
Nr! )r/ r! r! r" �runq s zCheckerModule.run)r r# r$ r% r �__annotations__r r' �bool�sys�stdoutr4 r
r r1 r8 r9 r< r r r= r! r! r! r" r 3 s
)� metaclass)r@ r, �abcr r �typingr r r r � exceptionr Z policyrepr
Z
globalkeysr r
r r r r �typer> �__all__r r r! r! r! r" �<module> s