shell bypass 403
a
q�qe� � @ sh d dl Z d dlmZmZ ddlmZ ddlmZmZ G dd� de�Z G dd � d e�Z
G d
d � d e�Z dS ) � N)�Callable�Union� )�InvalidCheckValue)�CriteriaDescriptor� CriteriaPermissionSetDescriptorc s< e Zd ZdZeeef dd�� fdd� Z� fdd�Z� Z S )�ConfigDescriptoraU
Single item configuration option descriptor.
Parameter:
lookup_function The name of the SELinuxPolicy lookup function,
e.g. lookup_type or lookup_boolean.
Read-only instance attribute use (obj parameter):
checkname The name of the check.
policy The instance of SELinuxPolicy
N)�lookup_function�returnc s t � j|d� d S )N)r )�super�__init__)�selfr �� __class__� �A/usr/lib64/python3.9/site-packages/setools/checker/descriptors.pyr s zConfigDescriptor.__init__c
sh |sd | j |< nTzt� �||�� � W n< tyb } z$td�|j| j|��|�W Y d }~n
d }~0 0 d S )N�{}: Invalid {} setting: {}) � instancesr �__set__�strip�
ValueErrorr �format� checkname�name�r
�obj�value�exr r r r s
��zConfigDescriptor.__set__)
�__name__�
__module__� __qualname__�__doc__r r �strr r �
__classcell__r r r r r s r c s> e Zd ZdZd
eeef eedd�� fdd�
Zdd � Z � Z
S ) �ConfigSetDescriptora
Descriptor for a configuration option set.
Parameter:
lookup_function The name of the SELinuxPolicy lookup function,
e.g. lookup_type or lookup_boolean.
Keyword Parameters:
strict (Bool) If True, all objects must exist in the policy
when setting the value. If False, any objects that
fail the policy lookup will be dropped instead of raising
an exception. The default is True.
expand (Bool) If True, each object will be expanded. Default
is False.
Read-only instance attribute use (obj parameter):
checkname The name of the check.
log A logger instance.
policy The instance of SELinuxPolicy
TFN)r �strict�expandr
c s" t � j|t� d� || _|| _d S )N)r �
default_value)r r � frozensetr% r& )r
r r% r& r r r r ? s z ConfigSetDescriptor.__init__c C s |st � | j|< �n|j}t| j�r,| j}nt|j| j�}t� }dd� t� d|�D �D ]�}z,||�}| j
rz|� |�
� � n
|� |� W qV t
�y } zd| jr�|�d�| j|�� |jd|d� td�|j| j|��|�|�d�|j| j|�� W Y d }~qVd }~0 0 qVt |�| j|< d S )Nc s s | ]}|r|V qd S �Nr )�.0�ir r r � <genexpr>P � z.ConfigSetDescriptor.__set__.<locals>.<genexpr>z\szInvalid {} item: {}z
Traceback:)�exc_infoz{}: Invalid {} item: {})r( r �log�callabler �getattrZpolicy�set�re�splitr& �update�addr r% �errorr r �debugr r �info) r
r r r/ �lookup�ret�item�o�er r r r F s4
��
� zConfigSetDescriptor.__set__)TF) r r r r! r r r" �boolr r r# r r r r r$ ( s ��r$ c s2 e Zd ZdZdd�� fdd� Z� fdd�Z� ZS )� ConfigPermissionSetDescriptoraJ
Descriptor for a configuration permissions set.
Read-only instance attribute use (obj parameter):
checkname The name of the check.
policy The instance of SELinuxPolicy
tclass If it exists, it will be used to validate the
permissions. See validate_perms_any()
N)r
c s t � jt� d� d S )N)r' )r r r( )r
r r r r p s z&ConfigPermissionSetDescriptor.__init__c
sv |st � | j|< n`z"t� �|dd� |�d�D �� W n< typ } z$td�|j| j |��|�W Y d }~n
d }~0 0 d S )Nc s s | ]}|r|V qd S r) r )r* �vr r r r, x r- z8ConfigPermissionSetDescriptor.__set__.<locals>.<genexpr>� r )
r( r r r r4 r r r r r r r r r r s s "
��z%ConfigPermissionSetDescriptor.__set__)r r r r! r r r# r r r r r@ d s
r@ ) r3 �typingr r � exceptionr Z descriptorsr r r r$ r@ r r r r �<module> s <