File: //usr/lib/python3/dist-packages/apparmor/__pycache__/severity.cpython-310.pyc
o
%`b3$ � @ s@ d dl mZ d dlZd dlmZmZmZmZ G dd� de�Z dS )� )�with_statementN)�AppArmorException�open_file_read�warn�convert_regexpc @ sP e Zd Zddd�Zdd� Zddd�Zd d
� Zd d � Zd
d� Zdd� Z dd� Z
dS )�SeverityN�
c
C s� d| _ d| _t� | _|| jd< i | jd< i | jd< i | jd< || jd< t� | jd< |s/td ��t|���}t|d
d �D ]�\}}|�� }|d ksL|�d
�rMq;|�d�r�z|� � \}}}} t
|�t
|�t
| �}}} W n t yz td|||f ��w |t dd�vs�|t dd�vs�| t dd�vr�td|||f ��|�
d�}d|vr�||| d�| jd |< q;| jd }
|� d�} t| �D ]-\} }
d|
v r�d�| | d� �}t|�}d||| d�i|
|< n
|
�|
i �|
|
< |
|
}
q�q;|�d��r*z |� � \}}t
|�}W n t �y d|||f }t|��w |t dd�v�r"td|||f ��|| jd |< q;td|||f ��W d � dS 1 �s?w Y dS )z Initialises the class objectz/etc/apparmor.dz_-*not*implemented*-_� DATABASENAME� CAPABILITIES�FILES�REGEXPS� DEFAULT_RANK� VARIABLESzNo severity db file given� )�start� �#�/z>Insufficient values for permissions in file: %s
[Line %s]: %sr � z?Inappropriate values for permissions in file: %s
[Line %s]: %s�*)�r�w�xN�AA_RANK�CAP_z4No severity value present in file: %s
[Line %s]: %sz?Inappropriate severity value present in file: %s
[Line %s]: %sz*Unexpected line in file: %s
[Line %s]: %s)�PROF_DIR�NOT_IMPLEMENTED�dict�severityr r � enumerate�strip�
startswith�split�int�
ValueError�range�lstrip�joinr �get)�self�dbname� default_rank�database�lineno�line�path�read�write�execute�ptr�pieces�index�piece�regexp�resourcer �
error_message� r: �3/usr/lib/python3/dist-packages/apparmor/severity.py�__init__ sj
�*
� ��$�zSeverity.__init__c C s\ d|� � }|dkrt| jd �� �S || jd �� v r#| jd | S td| � | jd S )zNReturns the severity of for the capability resource, default value if no matchzCAP_%s�__ALL__r
zunknown capability: %sr
)�upper�maxr �values�keysr )r) r8 �capr: r: r; �rank_capabilityN s
zSeverity.rank_capabilityc C s8 d|v r
| � ||�S |d dkr| �||�S td| ��)z#Returns the rank for the given path�@r r zUnexpected path input: %s)�handle_variable_rank� handle_filer )r) r/ �moder: r: r; � rank_pathY s
zSeverity.rank_pathc
C s� t |�dkr d}n|d }|dd� }d�|g| �}|�|d�r+| �|| |||�}|du ri|�� D ]5}d|v rht�d| |�rhd || �� v rh|D ] } |du s]|| d �| d
�|krg|| d �| d�}qKq3|S ) z,Returns the max severity from the regex treer r r Nr Fr �^r ���)�lenr' r( �
check_subtreerA �re�search)
r) �treerG �sev�segments�first�restr/ �chunk�mr: r: r; rL b s" �zSeverity.check_subtreec C s� |dd� }|� d�}d}|| jd �� v r8|D ] }|du s+| jd | �|d�|kr6| jd | �|d�}qn | �| jd |||�}|du rL| jd S |S )zBReturns the severity for the file, default value if no match foundr Nr r rJ r r
)r" r rA r( rL )r) r8 rG r4 rP rU r: r: r; rF { s
"��
zSeverity.handle_filec
C s� t �d�}|�|�}|rI| jd }d|�� d }| jd | D ]&}| �|||�}| �||�} || jd kr9| }q | | jd krF| |krF| }q |S | �||�S )zEReturns the max possible rank for file resources containing variablesz @{([^{.]*)}r
z@{%s}r r )rM �compilerN r �groups�variable_replacerE rF )
r) r8 rG �regex_variable�matches�rank�variable� replacement�resource_replaced�rank_newr: r: r; rE � s
� z Severity.handle_variable_rankc C s� d}d}|� d| �dkr|� d| �dkrd}|� |d �dkr,|� |d �dkr,d}|d dkrB|dd� dkrB|rB|d d� }|d dkrX|d
d� dkrX|rX|dd� }|�||�S ) z1Returns the expanded path for the passed variableFr rJ z//Tr N� r ���)�find�replace)r) r\ r] r8 �leading�trailingr: r: r; rX � s $$ zSeverity.variable_replacec C s || j d< dS )z: Set the profile variables to use for rating the severity r N)r )r) �varsr: r: r; �
set_variables� s zSeverity.set_variables)Nr )N) �__name__�
__module__� __qualname__r< rC rH rL rF rE rX rg r: r: r: r; r s
;
r )
�
__future__r rM �apparmor.commonr r r r �objectr r: r: r: r; �<module> s