WWWWWW

Current Directory: /usr/lib64/python2.7/site-packages/sepolgen
Viewing File: /usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyc
�
��^c@s�ddlZddlZdZdZdZdZdZdZdd	d
ddd
gZied6ed	6ed
6ed6ed6ed
6Z	ddod��YZ
de
fd��YZde
fd��YZe
edd�Zdd�Zdpd�Zd�Zdefd��YZdefd��YZdefd��YZd efd!��YZd"efd#��YZd$efd%��YZd&efd'��YZd(efd)��YZd*efd+��YZd,efd-��YZd.efd/��YZd0efd1��YZ d2efd3��YZ!d4efd5��YZ"d6efd7��YZ#d8efd9��YZ$d:efd;��YZ%d<efd=��YZ&d>efd?��YZ'd@efdA��YZ(dBefdC��YZ)dDefdE��YZ*dFefdG��YZ+dHefdI��YZ,dJefdK��YZ-dLefdM��YZ.dNefdO��YZ/dPefdQ��YZ0dRefdS��YZ1dT�Z2dUefdV��YZ3dWefdX��YZ4dYefdZ��YZ5d[efd\��YZ6d]efd^��YZ7d_efd`��YZ8daefdb��YZ9dcefdd��YZ:deefdf��YZ;dgefdh��YZ<didqdj��YZ=dkdrdl��YZ>dmdsdn��YZ?dS(ti����Niiiiiitsourcettargettobjectt
permissiontroletdestinationt
PolicyBasecBseZdd�ZRS(cCsd|_d|_dS(N(tNonetparenttcomment(tselfR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt__init__5s	N(t__name__t
__module__RR(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR4stNodecBs�eZdZdd�Zd�Zd�Zd�Zd�Zd�Z	d�Z
d�Zd	�Zd
�Z
d�Zd�Zd
�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�ZRS(s�Base class objects produced from parsing the reference policy.

    The Node class is used as the base class for any non-leaf
    object produced by parsing the reference policy. This object
    should contain a reference to its parent (or None for a top-level
    object) and 0 or more children.

    The general idea here is to have a very simple tree structure. Children
    are not separated out by type. Instead the tree structure represents
    fairly closely the real structure of the policy statements.

    The object should be iterable - by default over all children but
    subclasses are free to provide additional iterators over a subset
    of their childre (see Interface for example).
    cCstj||�g|_dS(N(RRtchildren(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRJscCs
t|j�S(N(titerR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt__iter__NscCstd�t|��S(NcSs
t|t�S(N(t
isinstanceR(tx((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt<lambda>Ws(tfiltertwalktree(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytnodesVscCstd�t|��S(NcSs
t|t�S(N(RtModule(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRZs(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytmodulesYscCstd�t|��S(NcSs
t|t�S(N(Rt	Interface(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR]s(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
interfaces\scCstd�t|��S(NcSs
t|t�S(N(RtTemplate(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR`s(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt	templates_scCstd�t|��S(NcSs
t|t�S(N(Rt
SupportMacros(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRcs(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytsupport_macrosbscCstd�t|��S(NcSs
t|t�S(N(RtModuleDeclaration(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRhs(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytmodule_declarationsgscCstd�t|��S(NcSs
t|t�S(N(Rt
InterfaceCall(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRks(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytinterface_callsjscCstd�t|��S(NcSs
t|t�S(N(RtAVRule(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRns(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytavrulesmscCstd�t|��S(NcSs
t|t�S(N(RtTypeRule(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRqs(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt	typerulespscCstd�t|��S(NcSs
t|t�S(N(Rt	TypeBound(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRts(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
typeboundssscCstd�t|��S(sAIterate over all of the TypeAttribute children of this Interface.cSs
t|t�S(N(Rt
TypeAttribute(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRxs(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyttypeattributesvscCstd�t|��S(sAIterate over all of the RoleAttribute children of this Interface.cSs
t|t�S(N(Rt
RoleAttribute(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR|s(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytroleattributeszscCstd�t|��S(NcSs
t|t�S(N(RtRequire(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRs(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytrequires~scCstd�t|��S(NcSs
t|t�S(N(RtRole(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytroles�scCstd�t|��S(NcSs
t|t�S(N(Rt	RoleAllow(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytrole_allows�scCstd�t|��S(NcSs
t|t�S(N(RtRoleType(R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s(RR(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
role_types�scCs2|jr$t|j�d|j�S|j�SdS(Ns
(R	tstrt	to_string(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt__str__�s	cCsd|jj|j�fS(Ns<%s(%s)>(t	__class__RR7(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt__repr__�scCsdS(Nt((R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
t__doc__RRRRRRRRR!R#R%R'R)R+R-R/R1R3R5R8R:R7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR9s,																			tLeafcBs/eZdd�Zd�Zd�Zd�ZRS(cCstj||�dS(N(RR(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCs2|jr$t|j�d|j�S|j�SdS(Ns
(R	R6R7(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR8�s	cCsd|jj|j�fS(Ns<%s(%s)>(R9RR7(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR:�scCsdS(NR;((R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR8R:R7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR=�s		c
cs|rd}nd}|dfg}x�t|�dkr|j|�\}}|rb||fVn|Vt|t�r'g}t|j�d}	x]|	dkr�|dks�t|j|	|�r�|j|j|	|df�n|	d8}	q�W|j|�q'q'WdS(s�Iterate over a Node and its Children.

    The walktree function iterates over a tree containing Nodes and
    leaf objects. The iteration can perform a depth first or a breadth
    first traversal of the tree (controlled by the depthfirst
    paramater. The passed in node will be returned.

    This function will only work correctly for trees - arbitrary graphs
    will likely cause infinite looping.
    i����iiN(tlentpopRRRRtappendtextend(
tnodet
depthfirstt	showdepthttypetindextstacktcurtdepthtitemsti((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s"
	"!ccs8x1|D])}|dks(t||�r|VqqWdS(sIterate over the direct children of a Node.

    The walktree function iterates over the children of a Node.
    Unlike walktree it does note return the passed in node or
    the children of any Node objects (that is, it does not go
    beyond the current level in the tree).
    N(RR(RBRER((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytwalknode�s
t{t}cCslt|�}d}|dkr-td��ndj|�}|dkrL|S|dd|d|dSdS(s�Convert a set (or any sequence type) into a string representation
    formatted to match SELinux space separated list conventions.

    For example the list ['read', 'write'] would be converted into:
    '{ read write }'
    R;is"cannot convert 0 len set to stringt iN(R>t
ValueErrortjoin(tstconttlR6((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytlist_to_space_str�scCs4t|�}|dkr'td��ndj|�S(Nis'cannot conver 0 len set to comma strings, (R>RPRQ(RRRT((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytlist_to_comma_str�stIdSetcBs&eZdd�Zd�Zd�ZRS(cCs3|rtj||�n
tj|�t|_dS(N(tsetRtFalset
compliment(R
tlist((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s
cCstt|��S(N(RUtsorted(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytto_space_strscCstt|��S(N(RVR\(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytto_comma_strsN(RR
RRR]R^(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRW�s	tSecurityContextcBs;eZdZddd�Zd�Zd�Zdd�ZRS(s;An SELinux security context with optional MCS / MLS fields.cCsTtj||�d|_d|_d|_d|_|dk	rP|j|�ndS(s�Create a SecurityContext object, optionally from a string.

        Parameters:
           [context] - string representing a security context. Same format
              as a string passed to the from_string method.
        R;N(R=RtuserRRERtleveltfrom_string(R
tcontextR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRs				cCs�tj|�}|ddkr,|d}n|jd�}t|�dkr`td|��n|d|_|d|_|d|_t|�dkr�dj|d�|_	n	d|_	dS(s�Parse a string representing a context into a SecurityContext.

        The string should be in the standard format - e.g.,
        'user:role:type:level'.

        Raises ValueError if the string is not parsable as a security context.
        iit:is)context string [%s] not in a valid formatiN(tselinuxtselinux_trans_to_raw_contexttsplitR>RPR`RRERQRaR(R
Rctrawtfields((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRbs	



cCsF|j|jkoE|j|jkoE|j|jkoE|j|jkS(sCompare two SecurityContext objects - all fields must be exactly the
        the same for the comparison to work. It is possible for the level fields
        to be semantically the same yet syntactically different - in this case
        this function will return false.
        (R`RRERa(R
tother((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt__eq__1scCs�|j|j|jg}|jdkrh|dkrXtj�dkre|jd�qeqx|j|�n|j|j�dj|�S(s�Return a string representing this security context.

        By default, the string will contiain a MCS / MLS level
        potentially from the default which is passed in if none was
        set.

        Arguments:
           default_level - the default level to use if self.level is an
             empty string.

        Returns:
           A string represening the security context in the form
              'user:role:type:level'.
        its0RdN(	R`RRERaRRetis_selinux_mls_enabledR@RQ(R
t
default_levelRi((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7<sN(RR
R<RRRbRkR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR_s
		tObjectClasscBseZdZddd�ZRS(s"SELinux object class and permissions.

    This class is a basic representation of an SELinux object
    class - it does not represent separate common permissions -
    just the union of the common and class specific permissions.
    It is meant to be convenient for policy generation.
    R;cCs)tj||�||_t�|_dS(N(R=RtnameRWtperms(R
RpR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR^s	N(RR
R<RR(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRoVsR*cBs#eZdZdd�Zd�ZRS(s[SElinux typeattribute statement.

    This class represents a typeattribute statement.
    cCs)tj||�d|_t�|_dS(NR;(R=RRERWt
attributes(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRjs	cCsd|j|jj�fS(Nstypeattribute %s %s;(RERrR^(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7osN(RR
R<RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR*esR,cBs#eZdZdd�Zd�ZRS(s[SElinux roleattribute statement.

    This class represents a roleattribute statement.
    cCs)tj||�d|_t�|_dS(NR;(R=RRRWR-(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRws	cCsd|j|jj�fS(Nsroleattribute %s %s;(RR-R^(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7|sN(RR
R<RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR,rsR0cBseZdd�Zd�ZRS(cCs)tj||�d|_t�|_dS(NR;(R=RRRWttypes(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCs5d}x(|jD]}|d|j|f7}qW|S(NR;srole %s types %s;
(RsR(R
RRtt((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR0�stTypecBs eZddd�Zd�ZRS(R;cCs5tj||�||_t�|_t�|_dS(N(R=RRpRWRrtaliases(R
RpR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCssd|j}t|j�dkr<|d|jj�}nt|j�dkrk|d|jj�}n|dS(Nstype %sisalias %ss, %st;(RpR>RvR]RrR^(R
RR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�s
N(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRu�st	TypeAliascBseZdd�Zd�ZRS(cCs)tj||�d|_t�|_dS(NR;(R=RRERWRv(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCsd|j|jj�fS(Nstypealias %s alias %s;(RERvR](R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRx�st	AttributecBs eZddd�Zd�ZRS(R;cCstj||�||_dS(N(R=RRp(R
RpR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsd|jS(Ns
attribute %s;(Rp(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRy�stAttribute_RolecBs eZddd�Zd�ZRS(R;cCstj||�||_dS(N(R=RRp(R
RpR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsd|jS(Nsattribute_role %s;(Rp(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRz�sR$cBsPeZdZdZdZdZdZd	d	d�Zd�Z	d�Z
d�ZRS(
s�SELinux access vector (AV) rule.

    The AVRule class represents all varieties of AV rules including
    allow, dontaudit, and auditallow (indicated by the flags self.ALLOW,
    self.DONTAUDIT, and self.AUDITALLOW respectively).

    The source and target types, object classes, and perms are all represented
    by sets containing strings. Sets are used to make it simple to add
    strings repeatedly while avoiding duplicates.

    No checking is done to make certain that the symbols are valid or
    consistent (e.g., perms that don't match the object classes). It is
    even possible to put invalid types like '$1' into the rules to allow
    storage of the reference policy interfaces.
    iiiicCsftj||�t�|_t�|_t�|_t�|_|j|_|rb|j	|�ndS(N(
R=RRWt	src_typest	tgt_typestobj_classesRqtALLOWt	rule_typetfrom_av(R
tavR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCs4|j|jkrdS|j|jkr,dSdSdS(Ntallowt	dontauditt
auditallow(RR~t	DONTAUDIT(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt__rule_type_str�s
cCsu|jj|j�|j|jkr8|jjd�n|jj|j�|jj|j�|jj|j�dS(sIAdd the access from an access vector to this allow
        rule.
        R
N(	R{taddtsrc_typettgt_typeR|R}t	obj_classRqtupdate(R
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��scCsAd|j�|jj�|jj�|jj�|jj�fS(s�Return a string representation of the rule
        that is a valid policy language representation (assuming
        that the types, object class, etc. are valie).
        s%s %s %s:%s %s;(t_AVRule__rule_type_strR{R]R|R}Rq(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�s
N(RR
R<R~R�t
AUDITALLOWt
NEVERALLOWRRR�R�R7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR$�s
		R&cBs>eZdZdZdZdZdd�Zd�Zd�Z	RS(s�SELinux type rules.

    This class is very similar to the AVRule class, but is for representing
    the type rules (type_trans, type_change, and type_member). The major
    difference is the lack of perms and only and sing destination type.
    iiicCsMtj||�t�|_t�|_t�|_d|_|j|_dS(NR;(	R=RRWR{R|R}t	dest_typetTYPE_TRANSITIONR(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCs4|j|jkrdS|j|jkr,dSdSdS(Nttype_transitionttype_changettype_member(RR�tTYPE_CHANGE(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s
cCs;d|j�|jj�|jj�|jj�|jfS(Ns%s %s %s:%s %s;(t_TypeRule__rule_type_strR{R]R|R}R�(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7s
N(
RR
R<R�R�tTYPE_MEMBERRRR�R7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR&�s	R(cBs#eZdZdd�Zd�ZRS(sSSElinux typebound statement.

    This class represents a typebound statement.
    cCs)tj||�d|_t�|_dS(NR;(R=RRERWR|(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRs	cCsd|j|jj�fS(Nstypebounds %s %s;(RER|R^(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7sN(RR
R<RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR(sR2cBseZdd�Zd�ZRS(cCs,tj||�t�|_t�|_dS(N(R=RRWt	src_rolest	tgt_roles(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR$scCs d|jj�|jj�fS(Nsallow %s %s;(R�R^R�(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7)sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR2#sR4cBseZdd�Zd�ZRS(cCs)tj||�d|_t�|_dS(NR;(R=RRRWRs(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR.s	cCs5d}x(|jD]}|d|j|f7}qW|S(NR;srole %s types %s;
(RsR(R
RRRt((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR73sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR4-sR cBseZdd�Zd�ZRS(cCs/tj||�d|_d|_t|_dS(NR;(R=RRptversionRYt	refpolicy(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR:s		cCs5|jrd|j|jfSd|j|jfSdS(Nspolicy_module(%s, %s)s
module %s %s;(R�RpR�(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7@s	N(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR 9stConditionalcBseZdd�Zd�ZRS(cCstj||�g|_dS(N(RRt	cond_expr(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRGscCsdt|jdd�S(Ns[If %s]RSR;(R;R;(RUR�(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7KsN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�FstBoolcBseZdd�Zd�ZRS(cCs&tj||�d|_t|_dS(NR;(R=RRpRYtstate(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyROs	cCs*d|j}|jr|dS|dSdS(Nsbool %s ttruetfalse(RpR�(R
RR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7Ts
	N(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�Nst
InitialSidcBseZdd�Zd�ZRS(cCs&tj||�d|_d|_dS(NR;(R=RRpRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt__init\s	cCsd|jt|j�fS(Ns	sid %s %s(RpR6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7asN(RR
Rt_InitialSid__initR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�[stGenfsConcBseZdd�Zd�ZRS(cCs/tj||�d|_d|_d|_dS(NR;(R=Rt
filesystemtpathRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRes		cCs d|j|jt|j�fS(Nsgenfscon %s %s %s(R�R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7ksN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�dst
FilesystemUsecBs/eZdZdZdZdd�Zd�ZRS(iiicCs2tj||�|j|_d|_d|_dS(NR;(R=RtXATTRRER�RRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRss	cCskd}|jtkrd}n0|jtkr6d}n|jtkrNd}nd||jt|j�fS(NR;s
fs_use_xattr s
fs_use_trans sfs_use_task s	%s %s %s;(RER�tTRANStTASKR�R6Rc(R
RR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7ys			N(RR
R�R�R�RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�ns
tPortConcBseZdd�Zd�ZRS(cCs/tj||�d|_d|_d|_dS(NR;(R=Rt	port_typetport_numberRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s		cCs d|j|jt|j�fS(Nsportcon %s %s %s(R�R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��stNodeConcBseZdd�Zd�ZRS(cCs/tj||�d|_d|_d|_dS(NR;(R=RtstarttendRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s		cCs d|j|jt|j�fS(Nsnodecon %s %s %s(R�R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��stNetifConcBseZdd�Zd�ZRS(cCs/tj||�d|_d|_d|_dS(NR;(R=Rt	interfaceRtinterface_contexttpacket_context(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s		cCs&d|jt|j�t|j�fS(Nsnetifcon %s %s %s(R�R6R�R�(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��stPirqConcBseZdd�Zd�ZRS(cCs&tj||�d|_d|_dS(NR;(R=Rtpirq_numberRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCsd|jt|j�fS(Ns
pirqcon %s %s(R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��stIomemConcBseZdd�Zd�ZRS(cCs&tj||�d|_d|_dS(NR;(R=Rt
device_memRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCsd|jt|j�fS(Nsiomemcon %s %s(R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��st	IoportConcBseZdd�Zd�ZRS(cCs&tj||�d|_d|_dS(NR;(R=RtioportRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCsd|jt|j�fS(Nsioportcon %s %s(R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��stPciDeviceConcBseZdd�Zd�ZRS(cCs&tj||�d|_d|_dS(NR;(R=RtdeviceRRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCsd|jt|j�fS(Nspcidevicecon %s %s(R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��st
DeviceTreeConcBseZdd�Zd�ZRS(cCs&tj||�d|_d|_dS(NR;(R=RR�RRc(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCsd|jt|j�fS(Nsdevicetreecon %s %s(R�R6Rc(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��scCs]xVt|dt�D]B\}}d}xt|�D]}|d}q2W|t|�GHqWdS(NRDR;s	(RtTruetrangeR6(theadRBRIRRRK((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
print_tree�s
tHeaderscBseZdd�Zd�ZRS(cCstj||�dS(N(RR(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsdS(Ns	[Headers]((R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��sRcBseZdd�Zd�ZRS(cCstj||�dS(N(RR(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsdS(NR;((R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�sRcBs&eZdZddd�Zd�ZRS(sqA reference policy interface definition.

    This class represents a reference policy interface definition.
    R;cCstj||�||_dS(N(RRRp(R
RpR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsd|jS(Ns[Interface name: %s](Rp(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
R<RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�st
TunablePolicycBseZdd�Zd�ZRS(cCstj||�g|_dS(N(RRR�(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsdt|jdd�S(Ns[Tunable Policy %s]RSR;(R;R;(RUR�(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��sRcBs eZddd�Zd�ZRS(R;cCstj||�||_dS(N(RRRp(R
RpR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsd|jS(Ns[Template name: %s](Rp(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�stIfDefcBs eZddd�Zd�ZRS(R;cCstj||�||_dS(N(RRRp(R
RpR((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRscCsd|jS(Ns[Ifdef name: %s](Rp(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7	sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�sR"cBs)eZddd�Zd�Zd�ZRS(R;cCs/tj||�||_g|_g|_dS(N(R=Rtifnametargstcomments(R
R�R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR
s		cCsr|j|jkrtSt|j�t|j�kr8tSx3t|j|j�D]\}}||krNtSqNWtS(N(R�RYR>R�tzipR�(R
Rjtatb((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytmatchess"cCs�d|j}d}xf|jD][}t|t�rAt|�}n|}|dkrd|d|}n
||}|d7}qW|dS(Ns%s(is, %sit)(R�R�RR[RU(R
RRRKR�R6((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7s

N(RR
RRR�R7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR"s	
tOptionalPolicycBseZdd�Zd�ZRS(cCstj||�dS(N(RR(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR.scCsdS(Ns[Optional Policy]((R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR71sN(RR
RRR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�-sRcBsAeZdd�Zd�Zd�Zd�Zd�Zd�ZRS(cCstj||�d|_dS(N(RRRtmap(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR5scCsdS(Ns[Support Macros]((R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR79scCs\t�}||jkrKx=|j|�D]}|j|j|��q(Wn
|j|�|S(N(RXR�tby_nameR�t_SupportMacros__expand_permR�(R
tpermRRtp((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
__expand_perm<s	
cCsai|_xQ|D]I}t�}x'|jD]}|j|j|��q)W||j|j<qWdS(N(R�RXRqR�R�Rp(R
Rt	exp_permsR�((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt	__gen_mapHs	
	cCs!|js|j�n|j|S(N(R�t_SupportMacros__gen_map(R
Rp((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�Ps	
cCs#|js|j�n||jkS(N(R�R�(R
Rp((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pythas_keyUs	
N(	RR
RRR7R�R�R�R�(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR4s				R.cBs&eZdd�Zd�Zd�ZRS(cCsMtj||�t�|_i|_t�|_t�|_t�|_dS(N(R=RRWRsR}R1tdatatusers(R
R((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR[s	cCs)|jj|t��}|j|�dS(N(R}t
setdefaultRWR�(R
R�RqR�((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt
add_obj_classcscCsg}|jd�x"|jD]}|jd|�qWx:|jj�D])\}}|jd||j�f�qHWx"|jD]}|jd|�qWx"|jD]}|jd|�q�Wx"|jD]}|jd|�q�W|jd�t|�dkrd	Sd
j	|�S(Ns	require {s		type %s;s
	class %s %s;s		role %s;s		bool %s;s		user %s;RNiR;s
(
R@RsR}RJR]R1R�R�R>RQ(R
RRRER�RqRtboolR`((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7hs 
!
N(RR
RRR�R7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR.Zs	t
ObjPermSetcBseZd�Zd�ZRS(cCs||_t�|_dS(N(RpRXRq(R
Rp((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyRs	cCsd|j|jj�fS(Nsdefine(`%s', `%s')(RpRqR](R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�s(RR
RR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�~s	tClassMapcBseZd�Zd�ZRS(cCs||_||_dS(N(R�Rq(R
R�Rq((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�s	cCs|jd|jS(Ns: (R�Rq(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�s(RR
RR7(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��s	tCommentcBs/eZdd�Zd�Zd�Zd�ZRS(cCs|r||_n	g|_dS(N(tlines(R
RT((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR�scCsUt|j�dkrdSg}x"|jD]}|jd|�q)Wdj|�SdS(NiR;t#s
(R>R�R@RQ(R
touttline((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR7�scCsIt|j�rEx3|jD]%}|dkr|jj|�qqWndS(NR;(R>R�R@(R
RjR�((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pytmerge�scCs
|j�S(N(R7(R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR8�sN(RR
RRR7R�R8(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyR��s		((RMRN((((@tstringRetSRC_TYPEtTGT_TYPEt	OBJ_CLASStPERMStROLEt	DEST_TYPEtfield_to_strtstr_to_fieldRRR=R�RYRRRLRURVRXRWR_RoR*R,R0RuRxRyRzR$R&R(R2R4R R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�RRR�RR�R"R�RR.R�R�R�(((s8/usr/lib64/python2.7/site-packages/sepolgen/refpolicy.pyt<module>sx^&
		P
	=!


	



					!&$
F1l3 Manager
