shell bypass 403
a
q�qe� � @ s� d dl mZ d dlmZ ddlmZmZmZmZm Z ddl
m Z ddl m
Z
mZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
� d
e�ZG dd� de
�ZG dd� dee �ZG dd� dee �ZdS )� )� defaultdict)�
NamedTuple� )� AnyRBACRule� RBACRuletype�Role� RoleAllow�RoleTransition� )�DiffResultDescriptor)�
Difference�Wrapper)�class_wrapper_factory)�role_wrapper_factory)� type_or_attr_wrapper_factory)�RuleListc @ s* e Zd ZU dZeed< eed< eed< dS )�ModifiedRBACRulez,Difference details for a modified RBAC rule.�ruleZ
added_defaultZremoved_defaultN)�__name__�
__module__� __qualname__�__doc__r �__annotations__r � r r �</usr/lib64/python3.9/site-packages/setools/diff/rbacrules.pyr s
r c @ s� e Zd ZU dZed�Zed�Zed�Zed�Zed�Z dZ
e e e
f ed< dZe e e
f ed< dd�dd �Zdd�d
d �Zdd�d d
�Zdd�dd�ZdS )�RBACRulesDifferencez<Determine the difference in RBAC rules between two policies.�diff_role_allows�diff_role_transitionsN�_left_rbac_rules�_right_rbac_rules)�returnc C sh | j �d�| �� | jdu s&| jdu r.| �� | �| �| jtj t
�| �| jtj t
��\| _ | _ }dS )zAGenerate the difference in role allow rules between the policies.zJGenerating role allow differences from {0.left_policy} to {0.right_policy}N)
�log�info�formatr r �_create_rbac_rule_lists� _set_diff�_expand_generatorr Zallow�RoleAllowWrapper�added_role_allows�removed_role_allows)�self�_r r r r , s ���z$RBACRulesDifference.diff_role_allowsc C s� | j �d�| �� | jdu s&| jdu r.| �� | �| �| jtj t
�| �| jtj t
��\}}}g }|D ]2\}}t |j �t |j �krh|�
t||j |j �� qh|| _|| _|| _dS )zFGenerate the difference in role_transition rules between the policies.zOGenerating role_transition differences from {0.left_policy} to {0.right_policy}N)r! r" r# r r r$ r% r& r Zrole_transition�RoleTransitionWrapperr �default�appendr �added_role_transitions�removed_role_transitions�modified_role_transitions)r* ZaddedZremovedZmatchedZmodifiedZ left_ruleZ
right_ruler r r r = s2 �����
�z)RBACRulesDifference.diff_role_transitionsc C s� t t�| _| j�d�| �� | j�� D ]}| j|j � |� q&t t�| _
| j�d�| �� | j �� D ]}| j
|j � |� qd| j�d� dS )z$Create rule lists for both policies.z-Building RBAC rule lists from {0.left_policy}z.Building RBAC rule lists from {0.right_policy}z#Completed building RBAC rule lists.N) r �listr r! �debugr# Z left_policyZ rbacrulesZruletyper. r Z right_policy�r* r r r r r$ ` s
z+RBACRulesDifference._create_rbac_rule_listsc C s: | j �d� d| _d| _d| _d| _d| _d| _d| _dS )z%Reset diff results on policy changes.z Resetting RBAC rule differencesN) r! r3 r( r) r/ r0 r1 r r �r* r r r � _reset_diffp s z RBACRulesDifference._reset_diff)r r r r r r( r) r/ r0 r1 r r r r r r r r r$ r6 r r r r r s
#r c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d
� Zd d � Z dS )
r' z.Wrap role allow rules to allow set operations.��source�targetN�r r c C s, || _ t|j�| _t|j�| _t|�| _d S �N)�originr r8 r9 �hash�keyr4 r r r �__init__� s zRoleAllowWrapper.__init__c C s | j S r; �r> r5 r r r �__hash__� s zRoleAllowWrapper.__hash__c C s | j |j k S r; r@ �r* �otherr r r �__lt__� s zRoleAllowWrapper.__lt__c C s | j |j ko| j|jkS r; r7 rB r r r �__eq__� s zRoleAllowWrapper.__eq__)
r r r r � __slots__r r? rA rD rE r r r r r' ~ s r' c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d
� Zd d � Z dS )
r, z3Wrap role_transition rules to allow set operations.�r8 r9 �tclassNr: c C s8 || _ t|j�| _t|j�| _t|j�| _t|�| _d S r; ) r< r r8 r r9 r rH r= r> r4 r r r r? � s
z RoleTransitionWrapper.__init__c C s | j S r; r@ r5 r r r rA � s z RoleTransitionWrapper.__hash__c C s | j |j k S r; r@ rB r r r rD � s z RoleTransitionWrapper.__lt__c C s$ | j |j ko"| j|jko"| j|jkS r; rG rB r r r rE � s
�
�z RoleTransitionWrapper.__eq__)
r r r r rF r r? rA rD rE r r r r r, � s r, N)� collectionsr �typingr Z policyrepr r r r r Z descriptorsr �
differencer r
Zobjclassr Zrolesr �typesr r r r r' r, r r r r �<module> s b