관리-도구
편집 파일: descriptors.cpython-39.opt-1.pyc
a q�qe� � @ sh d dl Z d dlmZmZ ddlmZ ddlmZmZ G dd� de�Z G dd � d e�Z G d d � d e�Z dS ) � N)�Callable�Union� )�InvalidCheckValue)�CriteriaDescriptor� CriteriaPermissionSetDescriptorc s< e Zd ZdZeeef dd�� fdd� Z� fdd�Z� Z S )�ConfigDescriptoraU Single item configuration option descriptor. Parameter: lookup_function The name of the SELinuxPolicy lookup function, e.g. lookup_type or lookup_boolean. Read-only instance attribute use (obj parameter): checkname The name of the check. policy The instance of SELinuxPolicy N)�lookup_function�returnc s t � j|d� d S )N)r )�super�__init__)�selfr �� __class__� �A/usr/lib64/python3.9/site-packages/setools/checker/descriptors.pyr s zConfigDescriptor.__init__c sh |sd | j |< nTzt� �||�� � W n< tyb } z$td�|j| j|��|�W Y d }~n d }~0 0 d S )N�{}: Invalid {} setting: {}) � instancesr �__set__�strip� ValueErrorr �format� checkname�name�r �obj�value�exr r r r s ��zConfigDescriptor.__set__) �__name__� __module__� __qualname__�__doc__r r �strr r � __classcell__r r r r r s r c s> e Zd ZdZd eeef eedd�� fdd� Zdd � Z � Z S ) �ConfigSetDescriptora Descriptor for a configuration option set. Parameter: lookup_function The name of the SELinuxPolicy lookup function, e.g. lookup_type or lookup_boolean. Keyword Parameters: strict (Bool) If True, all objects must exist in the policy when setting the value. If False, any objects that fail the policy lookup will be dropped instead of raising an exception. The default is True. expand (Bool) If True, each object will be expanded. Default is False. Read-only instance attribute use (obj parameter): checkname The name of the check. log A logger instance. policy The instance of SELinuxPolicy TFN)r �strict�expandr c s" t � j|t� d� || _|| _d S )N)r � default_value)r r � frozensetr% r& )r r r% r& r r r r ? s z ConfigSetDescriptor.__init__c C s |st � | j|< �n|j}t| j�r,| j}nt|j| j�}t� }dd� t� d|�D �D ]�}z,||�}| j rz|� |� � � n |� |� W qV t �y } zd| jr�|�d�| j|�� |jd|d� td�|j| j|��|�|�d�|j| j|�� W Y d }~qVd }~0 0 qVt |�| j|< d S )Nc s s | ]}|r|V qd S �Nr )�.0�ir r r � <genexpr>P � z.ConfigSetDescriptor.__set__.<locals>.<genexpr>z\szInvalid {} item: {}z Traceback:)�exc_infoz{}: Invalid {} item: {})r( r �log�callabler �getattrZpolicy�set�re�splitr& �update�addr r% �errorr r �debugr r �info) r r r r/ �lookup�ret�item�o�er r r r F s4 �� � zConfigSetDescriptor.__set__)TF) r r r r! r r r" �boolr r r# r r r r r$ ( s ��r$ c s2 e Zd ZdZdd�� fdd� Z� fdd�Z� ZS )� ConfigPermissionSetDescriptoraJ Descriptor for a configuration permissions set. Read-only instance attribute use (obj parameter): checkname The name of the check. policy The instance of SELinuxPolicy tclass If it exists, it will be used to validate the permissions. See validate_perms_any() N)r c s t � jt� d� d S )N)r' )r r r( )r r r r r p s z&ConfigPermissionSetDescriptor.__init__c sv |st � | j|< n`z"t� �|dd� |�d�D �� W n< typ } z$td�|j| j |��|�W Y d }~n d }~0 0 d S )Nc s s | ]}|r|V qd S r) r )r* �vr r r r, x r- z8ConfigPermissionSetDescriptor.__set__.<locals>.<genexpr>� r ) r( r r r r4 r r r r r r r r r r s s " ��z%ConfigPermissionSetDescriptor.__set__)r r r r! r r r# r r r r r@ d s r@ ) r3 �typingr r � exceptionr Z descriptorsr r r r$ r@ r r r r �<module> s <