File: //lib64/python3.9/site-packages/setools/diff/__pycache__/rbacrules.cpython-39.pyc
a
q�qe� � @ s� d dl mZ d dlmZ ddlmZmZmZmZm Z ddl
m Z ddl m
Z
mZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
� d
e�ZG dd� de
�ZG dd� dee �ZG dd� dee �ZdS )� )� defaultdict)�
NamedTuple� )� AnyRBACRule� RBACRuletype�Role� RoleAllow�RoleTransition� )�DiffResultDescriptor)�
Difference�Wrapper)�class_wrapper_factory)�role_wrapper_factory)� type_or_attr_wrapper_factory)�RuleListc @ s* e Zd ZU dZeed< eed< eed< dS )�ModifiedRBACRulez,Difference details for a modified RBAC rule.�ruleZ
added_defaultZremoved_defaultN)�__name__�
__module__� __qualname__�__doc__r �__annotations__r � r r �</usr/lib64/python3.9/site-packages/setools/diff/rbacrules.pyr s
r c @ s� e Zd ZU dZed�Zed�Zed�Zed�Zed�Z dZ
e e e
f ed< dZe e e
f ed< dd�dd �Zdd�d
d �Zdd�d d
�Zdd�dd�ZdS )�RBACRulesDifferencez<Determine the difference in RBAC rules between two policies.�diff_role_allows�diff_role_transitionsN�_left_rbac_rules�_right_rbac_rules)�returnc C s� | j �d�| �� | jdu s&| jdu r.| �� | jdus@J d��| jdusRJ d��| �| �| jtj t
�| �| jtj t
��\| _ | _ }dS )zAGenerate the difference in role allow rules between the policies.zJGenerating role allow differences from {0.left_policy} to {0.right_policy}N�(Left RBAC rules didn't load, this a bug.�)Right RBAC rules didn't load, this a bug.)
�log�info�formatr r �_create_rbac_rule_lists� _set_diff�_expand_generatorr Zallow�RoleAllowWrapper�added_role_allows�removed_role_allows)�self�_r r r r , s ���z$RBACRulesDifference.diff_role_allowsc C s� | j �d�| �� | jdu s&| jdu r.| �� | jdus@J d��| jdusRJ d��| �| �| jtj t
�| �| jtj t
��\}}}g }|D ]2\}}t |j �t |j �kr�|�
t||j |j �� q�|| _|| _|| _dS )zFGenerate the difference in role_transition rules between the policies.zOGenerating role_transition differences from {0.left_policy} to {0.right_policy}Nr! r" )r# r$ r% r r r& r' r( r Zrole_transition�RoleTransitionWrapperr �default�appendr �added_role_transitions�removed_role_transitions�modified_role_transitions)r, ZaddedZremovedZmatchedZmodifiedZ left_ruleZ
right_ruler r r r = s6 �����
�z)RBACRulesDifference.diff_role_transitionsc C s� t t�| _| j�d�| �� | j�� D ]}| j|j � |� q&t t�| _
| j�d�| �� | j �� D ]}| j
|j � |� qd| j�d� dS )z$Create rule lists for both policies.z-Building RBAC rule lists from {0.left_policy}z.Building RBAC rule lists from {0.right_policy}z#Completed building RBAC rule lists.N) r �listr r# �debugr% Z left_policyZ rbacrulesZruletyper0 r Z right_policy�r, r r r r r& ` s
z+RBACRulesDifference._create_rbac_rule_listsc C s: | j �d� d| _d| _d| _d| _d| _d| _d| _dS )z%Reset diff results on policy changes.z Resetting RBAC rule differencesN) r# r5 r* r+ r1 r2 r3 r r �r, r r r � _reset_diffp s z RBACRulesDifference._reset_diff)r r r r r r* r+ r1 r2 r3 r r r r r r r r r& r8 r r r r r s
#r c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d
� Zd d � Z dS )
r) z.Wrap role allow rules to allow set operations.��source�targetN�r r c C s, || _ t|j�| _t|j�| _t|�| _d S �N)�originr r: r; �hash�keyr6 r r r �__init__� s zRoleAllowWrapper.__init__c C s | j S r= �r@ r7 r r r �__hash__� s zRoleAllowWrapper.__hash__c C s | j |j k S r= rB �r, �otherr r r �__lt__� s zRoleAllowWrapper.__lt__c C s | j |j ko| j|jkS r= r9 rD r r r �__eq__� s zRoleAllowWrapper.__eq__)
r r r r � __slots__r rA rC rF rG r r r r r) ~ s r) c @ s< e Zd ZdZdZedd�dd�Zdd� Zd d
� Zd d � Z dS )
r. z3Wrap role_transition rules to allow set operations.�r: r; �tclassNr< c C s8 || _ t|j�| _t|j�| _t|j�| _t|�| _d S r= ) r> r r: r r; r rJ r? r@ r6 r r r rA � s
z RoleTransitionWrapper.__init__c C s | j S r= rB r7 r r r rC � s z RoleTransitionWrapper.__hash__c C s | j |j k S r= rB rD r r r rF � s z RoleTransitionWrapper.__lt__c C s$ | j |j ko"| j|jko"| j|jkS r= rI rD r r r rG � s
�
�z RoleTransitionWrapper.__eq__)
r r r r rH r rA rC rF rG r r r r r. � s r. N)� collectionsr �typingr Z policyrepr r r r r Z descriptorsr �
differencer r
Zobjclassr Zrolesr �typesr r r r r) r. r r r r �<module> s b