✘✘ GRAYBYTE WORDPRESS FILE MANAGER ✘✘

a

q�qe� �@s�dd
lm
Z

ddlmZmZmZmZ
ddlmZm	Z	m
Z
mZmZ
ddl
mZ
ddlmZmZmZ
ddlmZ
dd	lmZ
Gd
d�de�ZGdd
�d
ee�ZdS)�)
�defaultdict)�	FrozenSet�List�Optional�Union�)�
AnyConstraint�ConstraintRuletype�Role�Type�User�
)
�DiffResultDescriptor)�
Difference�
SymbolWrapper�Wrapper)
�class_wrapper_factory)
�RuleListc@s�eZ
dZUd
Zed�
Zed�
Zed�
Zed�
Zed�
Z	ed�
Z
ed�
Zed�
ZdZ
eeefed<dZeeefed<dd	�
d
d�Zdd	�
dd
�Zdd	�
dd�Zdd	�
dd�Zdd	�
dd�Zdd	�
dd�ZdS)�ConstraintsDifferencea�
    Determine the difference in constraints between two policies.

    Since the compiler does not union constraints, there may be multiple
    constraints with the same ruletype, object class, and permission
    set, so constraints can only be added or removed, not modified.

    The constraint expressions are compared only on a basic level.
    Expressions that are logically equivalent but are structurally
    different, for example, by associativity, will be considered
    different.  Type and role attributes are also not expanded,
    so if there are changes to attribute members, it will not
    be reflected as a difference.
    �diff_constrains�diff_mlsconstrains�diff_validatetrans�diff_mlsvalidatetransN�_left_constraints�_right_constraints)
�returnc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_	|_
}
dS)zAGenerate the difference in constraint rules between the policies.zJGenerating constraint differences from {0.left_policy} to {0.right_policy}N�)Left constraints didn't load, this a bug.�*Right constraints didn't load, this a bug.c
ss|]}
t|
�
V
qdS�
N�
�ConstraintWrapper��.0�
c�r$�>/usr/lib64/python3.9/site-packages/setools/diff/constraints.py�	<genexpr>?�z8ConstraintsDifference.diff_constrains.<locals>.<genexpr>c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&@r')�log�info�formatrr�_create_constrain_lists�	_set_diffr	Z	constrain�added_constrains�removed_constrains��self�
_r$r$r%r2s

�



�z%ConstraintsDifference.diff_constrainsc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_	|_
}
dS)zEGenerate the difference in MLS constraint rules between the policies.zNGenerating MLS constraint differences from {0.left_policy} to {0.right_policy}Nrrc
ss|]}
t|
�
V
qdSrrr!r$r$r%r&Pr'z;ConstraintsDifference.diff_mlsconstrains.<locals>.<genexpr>c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&Rr')r(r)r*rrr+r,r	Zmlsconstrain�added_mlsconstrains�removed_mlsconstrainsr/r$r$r%rBs"

��




�

��z(ConstraintsDifference.diff_mlsconstrainsc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_	|_
}
dS)zDGenerate the difference in validatetrans rules between the policies.zMGenerating validatetrans differences from {0.left_policy} to {0.right_policy}Nrrc
ss|]}
t|
�
V
qdSrrr!r$r$r%r&cr'z;ConstraintsDifference.diff_validatetrans.<locals>.<genexpr>c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&er')r(r)r*rrr+r,r	Z
validatetrans�added_validatetrans�removed_validatetransr/r$r$r%rUs"

��




�

��z(ConstraintsDifference.diff_validatetransc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_	|_
}
dS)zHGenerate the difference in MLS validatetrans rules between the policies.zPGenerating mlsvalidatetrans differences from {0.left_policy} to {0.right_policy}Nrrc
ss|]}
t|
�
V
qdSrrr!r$r$r%r&vr'z>ConstraintsDifference.diff_mlsvalidatetrans.<locals>.<genexpr>c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&xr')r(r)r*rrr+r,r	Zmlsvalidatetrans�added_mlsvalidatetrans�removed_mlsvalidatetransr/r$r$r%rhs"

��




�

��z+ConstraintsDifference.diff_mlsvalidatetransc
Cs�tt
�
|_|j�d
�|�
�

|j��D]}
|j|
j�	|
�

q&|j�
�D] \}}|j�d�t|�
|��

qHtt
�
|_|j�d�|�
�

|j
��D]}
|j|
j�	|
�

q�|j�
�D] \}}|j�d�t|�
|��

q�|j�d�

dS)z$Create rule lists for both policies.z.Building constraint lists from {0.left_policy}zLoaded {0} {1} rules.z/Building constraint lists from {0.right_policy}z)Completed building constraint rule lists.N)r�listrr(�debugr*Zleft_policy�constraints�ruletype�append�items�lenrZright_policy)r0�ruler;Zrulesr$r$r%r+~s









z-ConstraintsDifference._create_constrain_listsc

CsL|j�
d
�

d|_d|_d|_d|_d|_d|_d|_d|_	d|_
d|_dS)z%Reset diff results on policy changes.z%Resetting all constraints differencesN)r(r9r-r.r2r3r4r5r6r7rr�
r0r$r$r%�_reset_diff�s








z!ConstraintsDifference._reset_diff)�__name__�
__module__�__qualname__�__doc__rr-r.r2r3r4r5r6r7rrr	r�__annotations__rrrrrr+rAr$r$r$r%rs"





rc@s<eZ
dZd
ZdZedd�dd�Zdd�Zd	d
�Zdd�Z	dS)
r z#Wrap constraints for diff purposes.�r;�tclass�perms�exprN)r?rcCs�|
|_|
j
|_
t|
j�
|_z|
j|_Wnty>


d|_Yn0t|
�
|_g|_|
j	D]6}t
|t�r�|j�td
d�|D�
�
�

qV|j�|�

qVdS)Nc
ss|]}
t|
�
V
qdSr)
r)r"�itemr$r$r%r&�r'z-ConstraintWrapper.__init__.<locals>.<genexpr>)
�originr;rrHrI�AttributeError�hash�keyrJZ
expression�
isinstance�	frozensetr<)r0r?�opr$r$r%�__init__�s








zConstraintWrapper.__init__c


Cs|jSr�
rOr@r$r$r%�__hash__�s
zConstraintWrapper.__hash__cCs|j|
jkSrrT�r0�otherr$r$r%�__lt__�s
zConstraintWrapper.__lt__cCs0|j|
jko.|j
|
j
ko.|j|
jko.|j|
jkSrrGrVr$r$r%�__eq__�s


�
�
�zConstraintWrapper.__eq__)
rBrCrDrE�	__slots__rrSrUrXrYr$r$r$r%r �sr N)�collectionsr�typingrrrrZ	policyreprr	r
rrZdescriptorsr�
differencerrrZobjclassrrrr r$r$r$r%�<module>s