File: //lib/python3/dist-packages/apparmor/rule/__pycache__/dbus.cpython-310.pyc
o
%`bb? � @ s� d dl Z d dlmZmZmZmZ d dlmZmZ d dl m
Z
m Z m Z m
Z
mZmZ d dlmZ e� Zg d�Zddge Zd d
�e� d d Zed
d
d e d d d e d d ZdZe �de d d ed d d ed d d ed d d ed d d ed! d d" d d d# d d$ d% ed& d d$ d' ed( d d$ d% ed) d* d' ed+ d d$ d' ed, d* d% ed- d d. �ZG d/d0� d0e
�ZG d1d2� d2e �Z dS )3� N)�RE_PROFILE_DBUS�RE_PROFILE_NAME�strip_parenthesis� strip_quotes)� AppArmorBug�AppArmorException)�BaseRule� BaseRuleset�check_and_split_list�logprof_value_or_all�parse_modifiers�quote_if_needed)�init_translation)�send�receive�r�read�w�write�rw�bind� eavesdropz ((\s|,)*(�|z)(\s|,)*�)z\(z(\s|,)*�?�(z(\s|,)+z)*z\)z5(?P<%s>(\S+|"[^"]+"|\(\s*\S+\s*\)|\(\s*"[^"]+"\)\s*))z^(\s+(?P<access>z))?z((\s+(bus\s*=\s*�busz))?|z(\s+(path\s*=\s*�pathz(\s+(name\s*=\s*�namez(\s+(interface\s*=\s*� interfacez(\s+(member\s*=\s*�memberz(\s+(peer\s*=\s*\((,|\s)*z(,|\s)*z|(z name\s*=\s*� peername1z label\s*=\s*�
peerlabel1� peername2z(,|\s)+�
peerlabel2�
peerlabel3� peername3z)(,|\s)*\)))?){0,6}\s*$c s~ e Zd ZdZG dd� de�ZeZdZ d� fdd � Ze d
d � �Z
e d d
� �Z ddd�Z dd� Z
dd� Zdd� Zdd� Z� ZS )�DbusRulez,Class to handle and store a single dbus rulec @ s e Zd ZdS )zDbusRule.__DbusAllN)�__name__�
__module__� __qualname__� r+ r+ �4/usr/lib/python3/dist-packages/apparmor/rule/dbus.py� __DbusAllG s r- �dbusF� Nc s� t t| �j| |
| | |
d� t|ttjdd�\| _| _}|r(tt d�d�
|� ��| � |dd|
�\| _ | _
| � |dd |
�\| _| _| � |d
d|
�\| _| _| � |d d|
�\| _| _| � |d d|
�\| _| _| � |d
d|
�\| _| _| � |dd|
�\| _| _| jr�d| jv r�| js�| js�| js�| js�| jr�tt d���| jr�d| jv r�| js�| js�| js�| js�| js�| jr�tt d���| jr�| jr�tD ]}|| jv r�tt d�d�
| j� ��q�d S d S d S )N)�audit�deny�
allow_keyword�comment� log_eventr' �accessz-Passed unknown access keyword to DbusRule: %s� r Fr Tr r r z peer namez
peer labelr zNdbus bind rules must not contain a path, interface, member or peer conditionalr zYdbus eavesdrop rules must not contain a name, path, interface, member or peer conditionalz1dbus %s rules must not contain a name conditional�/)�superr' �__init__r
�access_keywords�ALLr5 �
all_accessr �_�join� _aare_or_allr � all_busesr � all_pathsr � all_namesr �all_interfacesr � all_members�peername�
all_peernames� peerlabel�all_peerlabels�message_keywords)�selfr5 r r r r r rE rG r0 r1 r2 r3 r4 �
unknown_items�msg�� __class__r+ r, r9 N s4 � . 4
��zDbusRule.__init__c C s
t �|�S )N)r �search)�cls�raw_ruler+ r+ r, �_matchm s
zDbusRule._matchc C sp | � |�}|sttd�| ��t|�\}}}}d}|�d�r#|�d�}|�rt�|�}|s5ttd| ���|�d�rQt|�d��} | �dd�� � } | g krPt
j } nt
j } |�d�rctt |�d���}
nt
j }
|�d �rutt |�d ���} nt
j } |�d
�r�tt |�d
���} nt
j } |�d �r�tt |�d ���}
nt
j }
|�d �r�tt |�d ���}nt
j }|�d
�r�tt |�d
���}n!|�d�r�tt |�d���}n|�d�r�tt |�d���}nt
j }|�d�r�tt |�d���}n;|�d�r�tt |�d���}n,|�d��r tt |�d���}n t
j }nt
j } t
j }
t
j } t
j } t
j }
t
j }t
j }t
j }t
| |
| | |
|||||||d� S )z"parse raw_rule and return DbusRulezInvalid dbus rule '%s'r/ �detailsz'Invalid or unknown keywords in 'dbus %sr5 �,r6 r r r r r r! r# r& r" r$ r% )r0 r1 r2 r3 )
rR r r= r �group�RE_DBUS_DETAILSrO r �replace�splitr' r; r )rP rQ �matchesr0 r1 r2 r3 � rule_detailsrS r5 r r r r r rE rG r+ r+ r, �_parseq st
�
�zDbusRule._parser c C s d| }| j r
d}n"t| j�dkrdd�| j� }n| jr(dd�t| j�� }ntd��| �d| j| j�}| �d | j | j
�}| �d
| j | j �}| �d | j
| j�}| �d | j| j�}| �d
| j| j�} | �d
| j| j�}
| |
} | rwd| �� } d|| �� ||||||| | jf
S )z)return rule (in clean/default formatting)z r/ � z %sr6 z (%s)zEmpty access in dbus ruler r r r r �labelz
peer=(%s)z%s%sdbus%s%s%s%s%s%s%s,%s)r< �lenr5 r> �sortedr �_get_aare_rule_partr r@ r rA r rB r rC r rD rE rF rG rH �strip�
modifiers_strr3 ) rJ �depth�spacer5 r r r r r rE rG �peerr+ r+ r, � get_clean� s& "zDbusRule.get_cleanc C s4 |rdS |rd|t |j�d� S td|| jd� ��)zNhelper function to write a rule part
value is expected to be a AAREr/ z %(prefix)s=%(value)s)�prefix�valuez+Empty %(prefix_name)s in %(rule_name)s rule)� prefix_name� rule_name)r
�regexr rj )rJ rg rh �
all_valuesr+ r+ r, r` � s
z DbusRule._get_aare_rule_partc C s� | � | j| j|j|jd�sdS | �| j| j|j|jd�s dS | �| j| j|j|jd�s-dS | �| j| j |j|j d�s<dS | �| j
| j |j
|j d�sKdS | �| j | j
|j |j
d�sZdS | �| j| j|j|jd�sidS | �| j| j|j|jd �sxdS d
S ) z2check if other_rule is covered by this rule objectr5 Fr r r r r rE rG T)�_is_covered_listr5 r< �_is_covered_aarer r@ r rA r rB r rC r rD rE rF rG rH )rJ �
other_ruler+ r+ r, �is_covered_localvars� s" z DbusRule.is_covered_localvarsc C s t |�tkstdt|� ��| j|jks| j|jkr dS | �| j| j|j|jd�s+dS | �| j | j
|j |j
d�s:dS | �| j | j |j |j d�sIdS | �| j
| j|j
|jd�sXdS | �| j| j|j|jd�sgdS | �| j| j|j|jd�svdS | �| j| j|j|jd �s�dS d
S ) z,compare if rule-specific variables are equalzPassed non-dbus rule: %sFr r r r r rE rG T)�typer' r �strr5 r< �_is_equal_aarer r@ r rA r rB r rC r rD rE rF rG rH )rJ �rule_obj�strictr+ r+ r, �is_equal_localvars s( zDbusRule.is_equal_localvarsc C s� t | j| j�}t | j| j�}t | j| j�}t | j| j�}t | j | j
�}t | j | j �}t | j
| j�}t | j| j�}td�|td�|td�|td�|td�|td�|td�|td�|gS ) Nz Access mode�Bus�Path�Name� Interface�Memberz Peer namez
Peer label)r r5 r< r r@ r rA r rB r rC r rD rE rF rG rH r= ) rJ r5 r r r r r rE rG r+ r+ r, �logprof_header_localvars- s" �z!DbusRule.logprof_header_localvars)FFFr/ N)r )r( r) r* �__doc__�object�_DbusRule__DbusAllr; rj r9 � classmethodrR r[ rf r` rp rv r| �
__classcell__r+ r+ rM r, r' B s �
S !r' c @ s e Zd ZdZdd� ZdS )� DbusRulesetz4Class to handle and store a collection of dbus rulesc C s dS )zbReturn the next possible glob. For dbus rules, that means removing access or removing/globbing buszdbus,r+ )rJ � path_or_ruler+ r+ r, �get_globF s zDbusRuleset.get_globN)r( r) r* r} r� r+ r+ r+ r, r� C s r� ) �re�apparmor.regexr r r r �apparmor.commonr r �
apparmor.ruler r r
r r r
�apparmor.translationsr r= rI r: r> �joint_access_keyword�RE_ACCESS_KEYWORDS�RE_FLAG�compilerV r' r� r+ r+ r+ r, �<module> s ����������������������������� � � �
� � � � �
�
�
�����������������