✘✘ GRAYBYTE WORDPRESS FILE MANAGER ✘✘

a

q�qe��@s�dd
lm
Z

ddlmZ
ddlmZmZmZmZm	Z	
ddl
mZ
ddlm
Z
mZ
ddlmZ
dd	lmZ
dd
lmZ
ddlmZ
Gdd
�d
e�ZGdd�de
�ZGdd�dee�ZGdd�dee	�ZdS)�)
�defaultdict)
�
NamedTuple�)�AnyRBACRule�RBACRuletype�Role�	RoleAllow�RoleTransition�
)
�DiffResultDescriptor)�
Difference�Wrapper)
�class_wrapper_factory)
�role_wrapper_factory)
�type_or_attr_wrapper_factory)
�RuleListc@s*eZ
dZUd
Zeed<eed<eed<dS)�ModifiedRBACRulez,Difference details for a modified RBAC rule.�ruleZ
added_defaultZremoved_defaultN)�__name__�
__module__�__qualname__�__doc__r�__annotations__r�rr�</usr/lib64/python3.9/site-packages/setools/diff/rbacrules.pyrs


rc@s�eZ
dZUd
Zed�
Zed�
Zed�
Zed�
Zed�
Z	dZ
eee
fed<dZeee
fed<dd�
dd	�Zdd�
d
d�Zdd�
dd
�Zdd�
dd�ZdS)�RBACRulesDifferencez<Determine the difference in RBAC rules between two policies.�diff_role_allows�diff_role_transitionsN�_left_rbac_rules�_right_rbac_rules)
�returnc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�|�|jtj	t
�|�|jtj	t
��\|_|_}
dS)zAGenerate the difference in role allow rules between the policies.zJGenerating role allow differences from {0.left_policy} to {0.right_policy}N�(Left RBAC rules didn't load, this a bug.�)Right RBAC rules didn't load, this a bug.)
�log�info�formatrr�_create_rbac_rule_lists�	_set_diff�_expand_generatorrZallow�RoleAllowWrapper�added_role_allows�removed_role_allows)�self�
_rrrr,s

��



�z$RBACRulesDifference.diff_role_allowsc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�|�|jtj	t
�|�|jtj	t
��\}
}}g}|D]2\}}t|j�
t|j�
kr�|�
t||j|j��

q�|
|_||_||_dS)zFGenerate the difference in role_transition rules between the policies.zOGenerating role_transition differences from {0.left_policy} to {0.right_policy}Nr!r")r#r$r%rrr&r'r(rZrole_transition�RoleTransitionWrapperr�default�appendr�added_role_transitions�removed_role_transitions�modified_role_transitions)r,ZaddedZremovedZmatchedZmodifiedZ	left_ruleZ
right_rulerrrr=s6

��



�
��




�

z)RBACRulesDifference.diff_role_transitionsc
Cs�tt
�
|_|j�d
�|�
�

|j��D]}
|j|
j�	|
�

q&tt
�
|_
|j�d�|�
�

|j��D]}
|j
|
j�	|
�

qd|j�d�

dS)z$Create rule lists for both policies.z-Building RBAC rule lists from {0.left_policy}z.Building RBAC rule lists from {0.right_policy}z#Completed building RBAC rule lists.N)r�listrr#�debugr%Zleft_policyZ	rbacrulesZruletyper0rZright_policy�r,rrrrr&`s







z+RBACRulesDifference._create_rbac_rule_listsc

Cs:|j�
d
�

d|_d|_d|_d|_d|_d|_d|_dS)z%Reset diff results on policy changes.zResetting RBAC rule differencesN)	r#r5r*r+r1r2r3rr�
r,rrr�_reset_diffps





zRBACRulesDifference._reset_diff)rrrrrr*r+r1r2r3rrrrrrrrr&r8rrrrrs




#rc@s<eZ
dZd
ZdZedd�dd�Zdd�Zd	d
�Zdd�Z	dS)
r)z.Wrap role allow rules to allow set operations.��source�targetN�rr cCs,|
|_t
|
j�
|_t
|
j�
|_t|
�
|_dS�
N)�originrr:r;�hash�keyr6rrr�__init__�s



zRoleAllowWrapper.__init__c


Cs|jSr=�
r@r7rrr�__hash__�s
zRoleAllowWrapper.__hash__cCs|j|
jkSr=rB�r,�otherrrr�__lt__�s
zRoleAllowWrapper.__lt__cCs|j|
jko|j
|
j
kSr=r9rDrrr�__eq__�szRoleAllowWrapper.__eq__)
rrrr�	__slots__rrArCrFrGrrrrr)~sr)c@s<eZ
dZd
ZdZedd�dd�Zdd�Zd	d
�Zdd�Z	dS)
r.z3Wrap role_transition rules to allow set operations.�r:r;�tclassNr<cCs8|
|_t
|
j�
|_t|
j�
|_t|
j�
|_t|
�
|_dSr=)	r>rr:rr;rrJr?r@r6rrrrA�s





zRoleTransitionWrapper.__init__c


Cs|jSr=rBr7rrrrC�s
zRoleTransitionWrapper.__hash__cCs|j|
jkSr=rBrDrrrrF�s
zRoleTransitionWrapper.__lt__cCs$|j|
jko"|j
|
j
ko"|j|
jkSr=rIrDrrrrG�s


�
�zRoleTransitionWrapper.__eq__)
rrrrrHr	rArCrFrGrrrrr.�sr.N)�collectionsr�typingrZ	policyreprrrrr	Zdescriptorsr�
differencerr
ZobjclassrZrolesr�typesrrrrr)r.rrrr�<module>s





	b