Your IP : 3.17.177.75
�
��^c I @ s} d d l Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d� Z
i4 d dQ 6d dR 6d dS 6d dT 6d! dU 6d" dV 6d# dW 6d$ dX 6d% dY 6d& dZ 6d' d[ 6d( d\ 6d) d] 6d* d^ 6d+ d_ 6d, d` 6d- da 6d. db 6d/ dc 6d0 dd 6d1 de 6d2 df 6d3 dg 6d4 dh 6d5 di 6d6 dj 6d7 dk 6d8 dl 6d9 dm 6d: dn 6d; do 6d< dp 6d= dq 6d> dr 6d? ds 6d@ dt 6dA du 6dB dv 6dC dw 6dD dx 6dE dy 6dF dz 6dG d{ 6dH d| 6dI d} 6dJ d~ 6dK d 6dL d� 6dM d� 6dO d� 6dN d� 6dP d� 6Z d� Z d� Z
d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� Z d� � Z d� � Z d� � Z! d� � Z" d� � Z# d� � Z$ d� � Z% d� � Z& d� � Z' d a) d a* d� a+ d a, e- a. d d� � Z/ d� � Z0 d� � Z1 d� � Z2 d� � Z3 d� � Z4 d� � Z5 d� � Z6 d� � Z7 d� � Z8 d� � Z9 d� � Z: d� � Z; d� � Z< d� � Z= d� � Z> d� � Z? d� � Z@ d� � ZA d� � ZB d� � ZC d� � ZD d� � ZE d� � ZF d� � ZG d� � ZH d� � ZI d� � ZJ d� � ZK d� � ZL d� � ZM d� � ZN d� � ZO d� � ZP d� � ZQ d� � ZR d� � ZS d� � ZT d� � ZU d� � ZV d� � ZW d� � ZX d� � ZY d� � ZZ d� � Z[ d� � Z\ d� � Z] d� � Z^ d� � Z_ d� � Z` d� � Za d� � Zb d� � Zc d� � Zd d� � Ze d� � Zf d� � Zg d� � Zh d� � Zi d� � Zj d� � Zk d� � Zl d� � Zm d� � Zn d� � Zo d� � Zp d� � Zq d ar d as d� � Zt d d eu d� � Zv d� � Zw d e- eu d� � Zx d S(� i����Ni ( t access( t defaults( t lex( t refpolicy( t yacct TICKt SQUOTEt OBRACEt CBRACEt SEMIt COLONt OPARENt CPARENt COMMAt MINUSt TILDEt ASTERISKt AMPt BARt EXPLt EQUALt FILENAMEt
IDENTIFIERt NUMBERt PATHt IPV6_ADDRt MODULEt
POLICY_MODULEt REQUIREt SIDt GENFSCONt FS_USE_XATTRt FS_USE_TRANSt FS_USE_TASKt PORTCONt NODECONt NETIFCONt PIRQCONt IOMEMCONt IOPORTCONt PCIDEVICECONt
DEVICETREECONt CLASSt
TYPEATTRIBUTEt
ROLEATTRIBUTEt TYPEt ATTRIBUTEt ATTRIBUTE_ROLEt ALIASt TYPEALIASt BOOLt TRUEt FALSEt IFt ELSEt ROLEt TYPESt ALLOWt DONTAUDITt
AUDITALLOWt
NEVERALLOWt
PERMISSIVEt
TYPEBOUNDSt TYPE_TRANSITIONt TYPE_CHANGEt TYPE_MEMBERt RANGE_TRANSITIONt ROLE_TRANSITIONt
OPT_POLICYt INTERFACEt TUNABLE_POLICYt GEN_REQt TEMPLATEt GEN_CONTEXTt IFELSEt IFDEFt IFNDEFt DEFINEt modulet
policy_modulet requiret sidt genfscont fs_use_xattrt fs_use_transt fs_use_taskt portcont nodecont netifcont pirqcont iomemcont ioportcont pcidevicecont
devicetreecont classt
typeattributet
roleattributet typet attributet attribute_rolet aliast typealiast boolt truet falset ift elset rolet typest allowt dontauditt
auditallowt
neverallowt
permissivet
typeboundst type_transitiont type_changet type_membert range_transitiont role_transitiont optional_policyt interfacet tunable_policyt gen_requiret templatet gen_contextt ifelset ifndeft ifdeft defines \`s \'s \{s \}s \;+s \:s \(s \)s \,s \-s \~s \*s \&s \|s \!s \=s [0-9\.]+s /[a-zA-Z0-9)_\.\*/\$]*s c C s | S( s2 [a-fA-F0-9]{0,4}:[a-fA-F0-9]{0,4}:([a-fA-F0-9]|:)*( ( t t( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_IPV6_ADDR� s c C s | j j d 7_ d S( s dnl.*\ni N( t lexert lineno( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_m4comment� s c C s | j d � d S( s define.*refpolicywarn\(.*\ni N( t skip( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_refpolicywarn1� s c C s | j j d 7_ d S( s refpolicywarn\(.*\ni N( R� R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_refpolicywarn� s c C s t j | j d � | _ | S( s# [a-zA-Z_\$][a-zA-Z0-9_\-\+\.\$\*~]*R ( t reservedt gett valueRa ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_IDENTIFIER� s c C s t j | j d � | _ | S( s \"[a-zA-Z0-9_\-\+\.\$\*~ :]+\"R ( R� R� R� Ra ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
t_FILENAME s c C s | j j d 7_ d S( s \#.*\ni N( R� R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_comment s c C s! d | j d GH| j d � d S( Ns Illegal character '%s'i i ( R� R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_error s c C s | j j t | j � 7_ d S( s \n+N( R� R� t lenR� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt t_newline s t c C s{ | d k r d Sxd | D]\ } | d k r/ q n | | _ | d k r` | j j d | | f � q | j j d | � q Wd S( Ni ( t Nonet parentt childrent insert( t stmtsR� t valt s( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt collect- s
c C sJ xC | D]; } t j | � r5 | j t j | � � q | j | � q Wd S( N( t sptt has_keyt updatet by_namet add( t idsR� t id( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt expand9 s
c C sj t | � d k r3 | d r3 t j j | d � n3 t | � d k rf | d rf t j j | d � n d S( s^ statements : statement
| statements statement
| empty
i i N( R� t mR� t append( t p( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_statementsA s c C s | d | d <d S( s� statement : interface
| template
| obj_perm_set
| policy
| policy_module_stmt
| module_stmt
i i N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_statementK s c C s d S( s empty :N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_emptyU s c C s= t j � } | d | _ | d | _ t | _ | | d <d S( sH policy_module_stmt : POLICY_MODULE OPAREN IDENTIFIER COMMA NUMBER CPARENi i i N( R t ModuleDeclarationt namet versiont True( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_policy_module_stmt` s
c C s2 t j | d � } t | d | � | | d <d S( sa interface : INTERFACE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
i i i N( R t InterfaceR� ( R� t x( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_interfaceh s c C s2 t j | d � } t | d | � | | d <d S( s� template : TEMPLATE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
| DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
i i i N( R t TemplateR� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_templateo s c C s d | d <d S( s4 define : DEFINE OPAREN TICK IDENTIFIER SQUOTE CPARENi N( R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_definew s c C s� t | � d k r- | d r- | d | d <nn t | � d k r� | d sg | d r� | d | d <q� q� | d s� | d | d <q� | d | d | d <n d S( sl interface_stmts : policy
| interface_stmts policy
| empty
i i i N( R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_interface_stmts~ s
c C s` t j � } t | d | d t �t | � d k rO t | d | d t �n | g | d <d S( s� optional_policy : OPT_POLICY OPAREN TICK interface_stmts SQUOTE CPAREN
| OPT_POLICY OPAREN TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
i R� i i i N( R t OptionalPolicyR� R� R� t False( R� t o( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_optional_policy� s
c C sm t j � } | d | _ t | d | d t �t | � d k r\ t | d | d t �n | g | d <d S( s� tunable_policy : TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
| TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
i i R� i i i N( R t
TunablePolicyt cond_exprR� R� R� R� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_tunable_policy� s
c C s d S( s� ifelse : IFELSE OPAREN TICK IDENTIFIER SQUOTE COMMA COMMA TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
| IFELSE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
| IFELSE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_ifelse� s c C s� t j | d � } | d d k r, t } n t } t | d | d | �t | � d k ru t | d | d t �n | g | d <d S( s^ ifdef : IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
| IFNDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
| IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
i i R� i R� i i N( R t IfDefR� R� R� R� ( R� R� t v( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_ifdef� s c C sM t j d | d � } t | � d k r? | j j | d � n | | d <d S( s� interface_call : IDENTIFIER OPAREN interface_call_param_list CPAREN
| IDENTIFIER OPAREN CPAREN
| IDENTIFIER OPAREN interface_call_param_list CPAREN SEMIt ifnamei i i i N( R t
InterfaceCallR� t argst extend( R� t i( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_interface_call� s c C sC t | � d k r# | d | d <n | d d | d g | d <d S( s� interface_call_param : IDENTIFIER
| IDENTIFIER MINUS IDENTIFIER
| nested_id_set
| TRUE
| FALSE
| FILENAME
i i i t -i N( R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_interface_call_param� s
c C sC t | � d k r& | d g | d <n | d | d g | d <d S( s� interface_call_param_list : interface_call_param
| interface_call_param_list COMMA interface_call_param
i i i i N( R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_interface_call_param_list� s c C s. t j | d � } | d | _ | | d <d S( sR obj_perm_set : DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK names SQUOTE CPARENi i i N( R t
ObjPermSett perms( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_obj_perm_set� s
c C s | d | d <d S( s� policy : policy_stmt
| optional_policy
| tunable_policy
| ifdef
| ifelse
| conditional
i i N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_policy� s c C s" | d r | d g | d <n d S( s� policy_stmt : gen_require
| avrule_def
| typerule_def
| typebound_def
| typeattribute_def
| roleattribute_def
| interface_call
| role_def
| role_allow
| permissive
| type_def
| typealias_def
| attribute_def
| attribute_role_def
| range_transition_def
| role_transition_def
| bool
| define
| initial_sid
| genfscon
| fs_use
| portcon
| nodecon
| netifcon
| pirqcon
| iomemcon
| ioportcon
| pcidevicecon
| devicetreecon
i i N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_policy_stmt� s
c C s= t j � } | d | _ | d | _ t | _ | | d <d S( s+ module_stmt : MODULE IDENTIFIER NUMBER SEMIi i i N( R R� R� R� R� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_module_stmt s
c C s d S( sl gen_require : GEN_REQ OPAREN TICK requires SQUOTE CPAREN
| REQUIRE OBRACE requires CBRACEN( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_gen_require! s c C s d S( ss requires : require
| requires require
| ifdef
| requires ifdef
N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_requires) s c C s d S( s� require : TYPE comma_list SEMI
| ROLE comma_list SEMI
| ATTRIBUTE comma_list SEMI
| ATTRIBUTE_ROLE comma_list SEMI
| CLASS comma_list SEMI
| BOOL comma_list SEMI
N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_require1 s c C sc t j � } | d | _ | d | _ | d | _ t | � d k rU | d | _ n | | d <d S( s� security_context : IDENTIFIER COLON IDENTIFIER COLON IDENTIFIER
| IDENTIFIER COLON IDENTIFIER COLON IDENTIFIER COLON mls_range_defi i i i i i N( R t SecurityContextt userRk Ra R� t level( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_security_context; s
c C s% | d } | d | _ | | d <d S( sQ gen_context : GEN_CONTEXT OPAREN security_context COMMA mls_range_def CPAREN
i i i N( R� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_gen_contextH s
c C s | d | d <d S( s< context : security_context
| gen_context
i i N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_contextS s c C s4 t j � } | d | _ | d | _ | | d <d S( s$ initial_sid : SID IDENTIFIER contexti i i N( R t
InitialSidR� t context( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_initial_sidY s
c C sA t j � } | d | _ | d | _ | d | _ | | d <d S( s+ genfscon : GENFSCON IDENTIFIER PATH contexti i i i N( R t GenfsCont
filesystemt pathR� ( R� t g( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_genfscon` s
c C s� t j � } | d d k r. t j j | _ nD | d d k rP t j j | _ n" | d d k rr t j j | _ n | d | _ | d | _ | | d <d S( s� fs_use : FS_USE_XATTR IDENTIFIER context SEMI
| FS_USE_TASK IDENTIFIER context SEMI
| FS_USE_TRANS IDENTIFIER context SEMI
i RS RU RT i i i N( R t
FilesystemUset XATTRRa t TASKt TRANSR� R� ( R� t f( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_fs_usej s
c C s| t j � } | d | _ t | � d k rH | d | _ | d | _ n& | d d | d | _ | d | _ | | d <d S( sk portcon : PORTCON IDENTIFIER NUMBER context
| PORTCON IDENTIFIER NUMBER MINUS NUMBER contexti i i i R� i N( R t PortCont port_typeR� t port_numberR� ( R� t c( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_portcon| s
c C sA t j � } | d | _ | d | _ | d | _ | | d <d S( sa nodecon : NODECON NUMBER NUMBER context
| NODECON IPV6_ADDR IPV6_ADDR context
i i i i N( R t NodeCont startt endR� ( R� t n( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_nodecon� s
c C sA t j � } | d | _ | d | _ | d | _ | | d <d S( s. netifcon : NETIFCON IDENTIFIER context contexti i i i N( R t NetifConRy t interface_contextt packet_context( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_netifcon� s
c C s4 t j � } | d | _ | d | _ | | d <d S( s pirqcon : PIRQCON NUMBER contexti i i N( R t PirqCont pirq_numberR� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_pirqcon� s
c C so t j � } t | � d k r; | d | _ | d | _ n& | d d | d | _ | d | _ | | d <d S( sY iomemcon : IOMEMCON NUMBER context
| IOMEMCON NUMBER MINUS NUMBER contexti i i R� i N( R t IomemConR� t
device_memR� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_iomemcon� s
c C so t j � } t | � d k r; | d | _ | d | _ n& | d d | d | _ | d | _ | | d <d S( s\ ioportcon : IOPORTCON NUMBER context
| IOPORTCON NUMBER MINUS NUMBER contexti i i R� i N( R t IoportConR� t ioportR� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_ioportcon� s
c C s4 t j � } | d | _ | d | _ | | d <d S( s* pcidevicecon : PCIDEVICECON NUMBER contexti i i N( R t PciDeviceCont deviceR� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_pcidevicecon� s
c C s4 t j � } | d | _ | d | _ | | d <d S( s, devicetreecon : DEVICETREECON NUMBER contexti i i N( R t
DevicetTeeConR� R� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_devicetreecon� s
c C sA | d | d <t | � d k r= | d d | d | d <n d S( s[ mls_range_def : mls_level_def MINUS mls_level_def
| mls_level_def
i i i R� i N( R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_mls_range_def� s c C sJ | d | d <t | � d k rF | d d d j | d � | d <n d S( sR mls_level_def : IDENTIFIER COLON comma_list
| IDENTIFIER
i i i t :t ,i N( R� t join( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_mls_level_def� s c C s� t j | d � } t | � d k r\ | d d k rL | j j | d � q� | d | _ nK t | � d k r� | d | _ t | � d k r� | j j | d � q� n | | d <d S( s� type_def : TYPE IDENTIFIER COMMA comma_list SEMI
| TYPE IDENTIFIER SEMI
| TYPE IDENTIFIER ALIAS names SEMI
| TYPE IDENTIFIER ALIAS names COMMA comma_list SEMI
i i i R i i i N( R t TypeR� t
attributesR� t aliases( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_type_def� s
c C s! t j | d � } | | d <d S( s) attribute_def : ATTRIBUTE IDENTIFIER SEMIi i N( R t Attribute( R� t a( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_attribute_def� s c C s! t j | d � } | | d <d S( s3 attribute_role_def : ATTRIBUTE_ROLE IDENTIFIER SEMIi i N( R t Attribute_Role( R� R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_attribute_role_def� s c C s4 t j � } | d | _ | d | _ | | d <d S( s5 typealias_def : TYPEALIAS IDENTIFIER ALIAS names SEMIi i i N( R t TypeAliasRa R
( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_typealias_def� s
c C sP t j � } | d | _ t | � d k rB | j j | d � n | | d <d S( sW role_def : ROLE IDENTIFIER TYPES comma_list SEMI
| ROLE IDENTIFIER SEMIi i i N( R t RoleRk R� Rl R� ( R� t r( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_role_def s
c C s4 t j � } | d | _ | d | _ | | d <d S( s# role_allow : ALLOW names names SEMIi i i N( R t RoleAllowt src_rolest tgt_roles( R� R ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_role_allow s
c C s t j d � d S( s" permissive : PERMISSIVE names SEMIi N( R� R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_permissive s c C s� t j � } | d d k r. t j j | _ nD | d d k rP t j j | _ n" | d d k rr t j j | _ n | d | _ | d | _ | d | _ | d | _ | | d <d
S( s� avrule_def : ALLOW names names COLON names names SEMI
| DONTAUDIT names names COLON names names SEMI
| AUDITALLOW names names COLON names names SEMI
| NEVERALLOW names names COLON names names SEMI
i Rn Ro Rp i i i i i N(
R t AVRuleR: t rule_typeR; R< t src_typest tgt_typest obj_classesR� ( R� R
( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_avrule_def s
c C s� t j � } | d d k r. t j j | _ n" | d d k rP t j j | _ n | d | _ | d | _ | d | _ | d | _ | d | _ | | d <d
S( s� typerule_def : TYPE_TRANSITION names names COLON names IDENTIFIER SEMI
| TYPE_TRANSITION names names COLON names IDENTIFIER FILENAME SEMI
| TYPE_TRANSITION names names COLON names IDENTIFIER IDENTIFIER SEMI
| TYPE_CHANGE names names COLON names IDENTIFIER SEMI
| TYPE_MEMBER names names COLON names IDENTIFIER SEMI
i Rt Ru i i i i i i N(
R t TypeRuleR@ R RA R R R t dest_typet file_name( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_typerule_def* s
c C s; t j � } | d | _ | j j | d � | | d <d S( s5 typebound_def : TYPEBOUNDS IDENTIFIER comma_list SEMIi i i N( R t TypeBoundRa R R� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_typebound_def= s
c C sL t j � } | d | _ | d d k r5 t | _ n t | _ | | d <d S( sI bool : BOOL IDENTIFIER TRUE SEMI
| BOOL IDENTIFIER FALSE SEMIi i Rg i N( R t BoolR� R� t stateR� ( R� t b( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_boolD s
c C sm t j � } | d | _ t | d | d t �t | � d k r\ t | d | d t �n | g | d <d S( s� conditional : IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE
| IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE ELSE OBRACE interface_stmts CBRACE
i i R� i i
i N( R t ConditionalR� R� R� R� R� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_conditionalO s
c C s; t j � } | d | _ | j j | d � | | d <d S( s< typeattribute_def : TYPEATTRIBUTE IDENTIFIER comma_list SEMIi i i N( R t
TypeAttributeRa R R� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_typeattribute_defZ s
c C s; t j � } | d | _ | j j | d � | | d <d S( s< roleattribute_def : ROLEATTRIBUTE IDENTIFIER comma_list SEMIi i i N( R t
RoleAttributeRk t roleattributesR� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_roleattribute_defa s
c C s d S( s� range_transition_def : RANGE_TRANSITION names names COLON names mls_range_def SEMI
| RANGE_TRANSITION names names names SEMIN( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_range_transition_defh s c C s d S( s< role_transition_def : ROLE_TRANSITION names names names SEMIN( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_role_transition_defm s c C s� t | � } | d k r, | d g | d <nQ | d k rT | d g | d | d <n) | d | d | d g | d | d <d S( s cond_expr : IDENTIFIER
| EXPL cond_expr
| cond_expr AMP AMP cond_expr
| cond_expr BAR BAR cond_expr
| cond_expr EQUAL EQUAL cond_expr
| cond_expr EXPL EQUAL cond_expr
i i i i i N( R� ( R� t l( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_cond_exprq s c C s� t j � } t | � d k r2 t | d | � nU t | � d k ra t | d | � t | _ n& t | d g � | j d | d � | | d <d S( s� names : identifier
| nested_id_set
| asterisk
| TILDE identifier
| TILDE nested_id_set
| IDENTIFIER MINUS IDENTIFIER
i i i R� i N( R t IdSetR� R� R� t
complimentR� ( R� R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_names� s c C s | d g | d <d S( s identifier : IDENTIFIERi i N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_identifier� s c C s | d g | d <d S( s asterisk : ASTERISKi i N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_asterisk� s c C s | d | d <d S( s1 nested_id_set : OBRACE nested_id_list CBRACE
i i N( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_nested_id_set� s c C s= t | � d k r# | d | d <n | d | d | d <d S( s` nested_id_list : nested_id_element
| nested_id_list nested_id_element
i i i N( R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_nested_id_list� s c C sB t | � d k r# | d | d <n d | d } | g | d <d S( sx nested_id_element : identifier
| MINUS IDENTIFIER
| nested_id_set
i i i R� N( R� ( R� t str( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_nested_id_element� s c C s= t | � d k r+ | d | d | d <n | d | d <d S( sT comma_list : nested_id_list
| comma_list COMMA nested_id_list
i i i i N( R� ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_comma_list� s c C s d S( s/ optional_semi : SEMI
| emptyN( ( R� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_optional_semi� s c C s. d t | j | j | j f a t GHt a d S( Ns( %s: Syntax error on line %d %s [type=%s]( t
parse_fileR� R� Ra t errorR� t success( t tok( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt p_error� s c C s2 | s
i Si } x | D] } | | | j <q Wd S( N( R� ( R� t mapR� ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt prep_spt� s
c C ss t s3 t j � a t j d d d | d d � a n | d k rH | a n t j � a | si t j � a n | a d S( Nt methodt LALRt debugt write_tablesi (
t parserR R� R R� R� R t Modulet
SupportMacrosR� ( RN t supportRJ ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt create_globals� s ! c C s� t | | | � d t _ t a y t j | d | d t �Wn= t k
r{ } d a d a d t | � d t
j � a n Xt s� d a d t } t
| � � n t S( Ni RJ R� s internal parser error: %ss
s could not parse text: "%s"( RP R� R� R� RC RL t parset ExceptionR� R= t tracebackt
format_excRB t
ValueErrorR� ( t textRN RO RJ t et msg( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyRQ � s "
c C s� g } d } x� t j | � D]� \ } } } x� | D]� } t j j | � } t j j | | � } | d d k r� | d k r� | } q� t t j d | d � � r� | j | d | f � q� q2 | d d k r2 | j | d | f � q2 q2 Wq W| | f S( Ni s .spts obj_perm_sets.sptt patternsi s .if(
R� t ost walkR� t splitextR R� t ret findallR� ( t roott modulest support_macrost dirpatht dirnamest filenamesR� t modnamet filename( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt list_headers
s
"c s� d d l m } t j � } g } d } t j j | � r� t j j | � d } | d k ro t d | � � n t j j
| � } | j | d | f � t t
j � � \ }
} n t | � \ } } | r� | r� t d � � n � f d � � d � � f d � } d } | r�� d | � t j � } | | | � | j j | � t j d
� }
t j d d d
d d d d d d d g
� } |
j j t j | � � | j j |
� � d � n � r�� r�| j t j d t | � �} | j d � n g } x� | D]� } t j � } | d | _ y2 | rA| | d | | � n | | d | � Wn; t k
r�} � t | � d � | j | d � qn X| j j | � � r� r| j � qqWt | � r�� d d j | � � n | S( Ni ( t utilR� s Invalid file name %si s1 could not find support macros (obj_perm_sets.spt)c s � r � j | � n d S( N( t write( RX ( t output( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyR� 3 s c s� � r � d | � n y? t | � } | j � } | j � | a t | | | � � WnB t k
rl } d St k
r� } t d | t | � f � � n Xd S( Ns parsing file %s
s error parsing file %s: %s( t opent readt closeRA RQ t IOErrorRU R= ( R� RN R� t fdt txtRW ( RJ R� ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyRA 7 s
s Parsing support macros (%s): t can_execs $1s $2t filet execute_no_transRk Rl t getattrt lockt executet ioctls done.
t stepss Parsing interface filess
s failed to parse some headers: %ss , ( R� Rh R t HeadersR� RZ R� t isfilet splitRU R\ R� Rg R t headersRN R� R� R t AccessVectorR t ConsoleProgressBart syst stdoutR� R� RM R� R= t stepR ( R_ Rj R� RJ Rh R| R` Ra R� Re t all_modulesRA R� Rq t avt statust failuresR� R� RW ( ( RJ R� Rj s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
parse_headers sb
(I R R R R R R
R R R
R R R R R R R s FILENAMEs
IDENTIFIERR s PATHR R R R R R R R R! R" R# R$ R% R& R' R( R) R* R+ R, R- R. R/ R0 R1 R2 R3 R4 R5 R6 R7 R8 R9 s DONTAUDITs
AUDITALLOWs
NEVERALLOWR= R> R? s TYPE_CHANGEs TYPE_MEMBERRB RC RD RE RF RG s TEMPLATERI RJ RK RL RM (y R RZ R] RS R� R R R R R t tokensR� t t_TICKt t_SQUOTEt t_OBRACEt t_CBRACEt t_SEMIt t_COLONt t_OPARENt t_CPARENt t_COMMAt t_MINUSt t_TILDEt
t_ASTERISKt t_AMPt t_BARt t_EXPLt t_EQUALt t_NUMBERt t_PATHt t_ignoreR� R� R� R� R� R� R� R� R� R� R� RB RA R� R� RC R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R R R R R R R R R R R R R$ R& R* R, R. R1 R2 R3 R5 R8 R9 R: R; R< R> R? R@ RE RG RL R� RP R� RQ Rg R� ( ( ( s8 /usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt <module> s�
"