VULN_CHECK_I913V6
/i r d dl Z d dlZd dlZdZdZg dZdZ d dlZi Zej dk rded< ej efd d
ied diZ e j Z d
ZddZddZddZdaddZddZd ZddZd Z ddZ y# d dl
Z
ee
j d < n # e$ r d dlZeej d < Y nw xY wY _xY w) Nz_admin$z_role$) get_all_interfacesget_interfaces_from_xml get_adminget_userget_interface_dictget_interface_format_text!get_interface_compile_format_text get_xml_fileinterface_compile_testzselinux-python) Tunicode localedirz/usr/share/localefallback_c l g }t | }|j D ] }|j | |S )z' Get all interfaces from given xml file)r keysappend)pathinterfaces_listidictks 7/usr/lib/python3.12/site-packages/sepolicy/interface.pyr r 5 s5 O t $E
ZZ\ q! c X ddl m} g }| s | }|S t | }t | }|S )Nr ) get_methods)sepolicyr r
r )r r all_interfacesxml_paths r r r > s8 $N $
%0: r c , g }| rR t | }t | }|j D ]% }|j d s|j | ' |S t j D ]7 }|j d s|j |j d d 9 |S # t
$ rb}t j j |j j dt | d t
j d Y d}~|S d}~ww xY w)z? Get all domains with an admin interface from installed policy._admin:
Nr )r
r r endswithr IOErrorsysstderrwrite __class____name__strexitr r split)r
admin_listr r r eis r r r J s \J #D)H&x0EZZ\::h' %%a( " %%'Azz(#!!!''("3A"67 ( JJ 1;;+?+?Q H I HHQKK s :B( B( ( D1ADDc g }| ro t | }t | }|j D ]B }|j d sd|dd z t j
v s2|j
| D |S t j D ]_ }t! j" dt$ z | }t' | d kD s/d|d z t j
v sL|j
|d a |S # t $ rb}t j j |j j dt | d t j d Y d}~|S d}~ww xY w)
z1 Get all domains with SELinux user role interface_rolez %s_exec_tNr! r" r# z(.*)%sr )r
r r r$ r
get_all_typesr r% r& r' r( r) r* r+ r, r refindallUSER_TRANSITION_INTERFACElen)r
trans_listr r r r/ r0 ms r r r ` s* `J #D)H&x0EZZ\::g&$q"v-(2H2H2JJ"))!, "
%%'A
8&??CA1vz 1%)?)?)AA %%ad+ ( JJ 1;;+?+?Q H I HHQKK s$ :C- C- C- - E6AEEc dd l }dd l}t rt S i ag }d}|| z
}|dz
} |j j | r&|j
j j | }n%|j
j j | }|j d D ] }|j d D ] }|j d D ]n }|j d D ]" } |j | j d $ ||j d j dgt |j d < g }p |j d
D ]n }|j d D ]" } |j | j d $ ||j d j d
gt |j d < g }p
" t S # t $ r Y t S w xY w) Nr zZ
z
layermodule interfaceparamnamesummarytemplate)osxml.etree.ElementTreeinterface_dictr isfileetree ElementTreeparse
fromstringr6 iterr getfindtextr% )
r rC xml
param_listr treelr: r0 r/ s
r r r { s
NJH
H H
77>>$ 99((..t4D99((33H=D g&AYYx( ,A YYw /"))!%%-8 07AAFF9DUDZDZ]h6iNAEE&M3!#J -
+A YYw /"))!%%-8 07AAFF9DUDZDZ]g6hNAEE&M3!#J ,
) '
s FG GGc t | }| ddj || d ddj || d j d }|S )N(, r z) r# r" )r joinr- )r> r r interface_texts r r r sS t $E$-tyyy9I!9L/MsxxX]^gXhijXkXqXqrvXwOxyN r c ddl m} g }| | d D ]7 }|j |j | |ddj | d}9 S )Nr# test_moduler rT rU z)
) templatesr[ r dict_valuesrW )interfaces_dictr> r[ param_tmpr0 rX s r r r sR &I
Y
'
*0034'0$))I2FG + r c | ddl m} d}|t j d||j z
}|t || z
}|S )Nr# rZ TEMPLATETYPE)r\ r[ r5 subte_test_moduler )r> r r@ r[ tes r generate_compile_terf s> & B"&& {'A'A
BBB
+E9
==B
Ir c ddl } ddlm} |j
j
| dz }|j
j | j d d } |d||z z \ }}|dk7 rWt j j d t j j d|z t j d y|S # t $ r ddlm} Y w xY w)
z; Returns xml format of interfaces for given .if policy filer Ngetstatusoutput/.zN/usr/bin/python3 /usr/share/selinux/devel/include/support/segenxml.py -w -m %sz-
Could not process selected interface file.
z
%sr# )
rC commandsri ImportError
subprocessr dirnamebasenamer- r& r' r( r, )if_filerC ri basedirfilenamercoutputs r r
r
s
/, ggoog&,Gww (..s3A6H !qu| @H vH "I JJB Qw
JK
& )
/./s C CCc ~ g d}dg} ddl m} dd l}ddddd }t | }| j
d
d |v s|| d |v st t d | z t |d
d }|j t | | |j |d|d z \ } }
| dk7 rJt j j |
t j j t d | z |j! D ]/ } |j" j% | s |j' | 1 y t j j t d | z y # t $ r
ddlm} Y iw xY w# t $ r7} t j j t d | | fz Y d } ~ d } ~ ww xY w)N)userdomkernelcorenetfilesdevrB r rh zcompiletest.ppzcompiletest.tezcompiletest.fczcompiletest.if)ppre fcifr zCompiling %s interfacere wz,make -f /usr/share/selinux/devel/Makefile %sr| z
Compile test for %s failed.
z%
Compile test for %s has not run. %s
z,
Compiling of %s interface is not supported.)rl ri rm rn rC r r- printr openr( rf closer& r' EnvironmentErrorvaluesr existsremove)
r> r exclude_interfacesexclude_interface_typeri rC policy_filesr fdrt ru r/ vs
r r r s I (\/, *2BJZbrsL t $E OOC #'9 9U9=Ma=PTj=j
a()I56
\l4(#.B HH(E: ; HHJ()WZfgkZl)lmJBQw
(
#D!E !QR $$&Aww~~a ! '
JKiWX1 /../" \ JJ Q H IYXYN Z [ [ \s* E& BE< &E98E9< F<-F77F<)ra )z#/usr/share/selinux/devel/policy.xml) compiletest) r5 r& r ADMIN_TRANSITION_INTERFACEr7 __all__PROGNAMEgettextkwargs version_info translationtr builtinsr+ __dict__rm __builtin__r
r r r r rE r r r rf r
r r r r s ,
& $ W
,
F
$ yH # 1 # # " #A
A ,0 'T$ YK,,!$# ,$+ S!,s/ ?A? ?B6BB6B1.B60B11B6