Name	Size	Mode	Actions
assertrbac.cpython-39.opt-1.pyc	3105	0644	editdlrm
assertrbac.cpython-39.pyc	3181	0644	editdlrm
assertte.cpython-39.opt-1.pyc	3367	0644	editdlrm
assertte.cpython-39.pyc	3453	0644	editdlrm
checker.cpython-39.opt-1.pyc	3979	0644	editdlrm
checker.cpython-39.pyc	4113	0644	editdlrm
checkermodule.cpython-39.opt-1.pyc	3549	0644	editdlrm
checkermodule.cpython-39.pyc	3549	0644	editdlrm
descriptors.cpython-39.opt-1.pyc	4807	0644	editdlrm
descriptors.cpython-39.pyc	4807	0644	editdlrm
emptyattr.cpython-39.opt-1.pyc	2518	0644	editdlrm
emptyattr.cpython-39.pyc	2518	0644	editdlrm
globalkeys.cpython-39.opt-1.pyc	289	0644	editdlrm
globalkeys.cpython-39.pyc	289	0644	editdlrm
roexec.cpython-39.opt-1.pyc	3018	0644	editdlrm
roexec.cpython-39.pyc	3018	0644	editdlrm
util.cpython-39.opt-1.pyc	422	0644	editdlrm
util.cpython-39.pyc	422	0644	editdlrm
__init__.cpython-39.opt-1.pyc	325	0644	editdlrm
__init__.cpython-39.pyc	325	0644	editdlrm

a q�qe��@s�dd
lZddl
mZmZ
ddlmZ
ddlmZ
ddlm Z
ddl mZ
dd lm Z mZmZ
d ZdZdZd ZdZdZdZdZGdd�de�Zd
S)�N)�List�Union�)
�InvalidCheckValue)
� AnyTERule)
�TERuleQuery�
)
� CheckerModule)�ConfigDescriptor�ConfigSetDescriptor�ConfigPermissionSetDescriptor�source�target�tclass�perms� exempt_source� exempt_target� expect_source� expect_targetc s�eZ
dZd
ZdZeeeee e eee f�
Zed�
Zed�
Zedddd�Ze�Zedddd�Zedddd�Zedddd�Zedddd�Zdd �
�f
d d�Zed �
dd �Z�ZS)�AssertTEzKChecker module for asserting a type enforcement allow rule exists (or not).Z assert_teZlookup_type_or_attrZlookup_classTF)�strict�expandN)
�returncs
t��
|
||�
t�t�
|_|�t�
|_|�t �
|_ |�t�
|_|�t �
|_|�t�
|_|�t�
|_|�t�
|_|�t�
|_t|j|j |j|jf�
s�td
�
�
|j|j@}|r�|j�d�d�dd�|D�
�
�
�

|j|j@}|�
r|j�d�d�dd�|D�
�
�
�

dS)NzEAt least one of source, target, tclass, or perms options must be set.z.Overlap in expect_source and exempt_source: {}z, c
ss|]}
|
jV
qdS�
N�
�name��.0�
i�r�>/usr/lib64/python3.9/site-packages/setools/checker/assertte.py� A�z$AssertTE.__init__..z.Overlap in expect_target and exempt_target: {}c
ss|]}
|
jV
qdSrrrrrr r!Fr")�super�__init__�loggingZ getLogger�__name__�log�get� SOURCE_OPTr � TARGET_OPTr� CLASS_OPTr� PERMS_OPTr�EXEMPT_SRC_OPTr�EXEMPT_TGT_OPTr�EXPECT_SRC_OPTr�EXPECT_TGT_OPTr�anyr�info�format�join)�self�policyZ checknameZconfigZsource_exempt_expect_overlapZtarget_exempt_expect_overlap�
� __class__rr r$,s0









�


�


�zAssertTE.__init__c
CsP
t|j
|j|j|jf�
s Jd
�
�
|j�d�

t|j|j
|j|j|jdd�}
t |j �
}t |j�
}g}t|
� ��
D]x}t |j
���
}t |j���
}||8}||8}||j |jr�||j|jr�|�t|�
�

|�|�

qn|�t|�
�

qn|D]"}d�|�
} |�| �

|�| �

q�|D]$}d�|�
} |�| �

|�| �

�
q|j�d�|�
�

|S)Nz'AssertTe no options set, this is a bug.z!Checking TE allow rule assertion.)
Zallow)r rrrZruletypez)Expected rule with source "{}" not found.z)Expected rule with target "{}" not found.z {} failure(s))r1r rrrr'r2rr6�setrr�sorted�resultsrrrZlog_fail�str�appendZlog_okr3�debug) r5�queryZunseen_sourcesZunseen_targetsZfailuresZruleZsrcsZtgts�itemZfailurerrr �runHsF

�




�







�







zAssertTE.run)r&� __module__�__qualname__�__doc__Z check_type� frozensetr)r*r+r,r-r.r/r0Zcheck_configr r rrrrrrrrrr$rrA� __classcell__rrr7r rs

�





r)r%�typingrr� exceptionrZ policyreprZterulequeryrZ checkermoduler Zdescriptorsr rrr)r*r+r,r-r.r/r0rrrrr �s