File: //lib/python3/dist-packages/apparmor/rule/__pycache__/mqueue.cpython-310.pyc
o
T��e�& � @ s2 d dl Z d dlmZmZ d dlmZmZ d dlmZm Z m
Z
m Z m Z m
Z
d dlmZ e� ZddgZdd gZd
d gZg d �Zee e e Zd
d�e� d Zed d e d d e d d ZdZdZe �de d d ed d d ed d d ed d d �Z G d d!� d!e�Z G d"d#� d#e �Z dS )$� N)�RE_PROFILE_MQUEUE�RE_PROFILE_NAME)� AppArmorBug�AppArmorException)�BaseRule� BaseRuleset�check_and_split_list�logprof_value_or_all�parse_modifiers�quote_if_needed)�init_translation�r�read�w�write�rw�wr)�create�open�delete�getattr�setattrz\s*(�|z)\s*z\(�(z(\s|,)+z)*z\)z(?P<%s>(/\S+|\d*))z(?P<%s>(sysv|posix))z^(\s+(?P<access>z))?z
(\s+(type=� mqueue_typez (\s+(label=�labelz(\s+(� mqueue_namez\s*$c s� e Zd ZdZG dd� de�ZeZdZ d� fdd � Zd
d � Z e
d d
� �Z e
dd� �Z ddd�Z
dd� Zdd� Zdd� Z� ZS )�MessageQueueRulez.Class to handle and store a single mqueue rulec @ s e Zd ZdS )z"MessageQueueRule.__MessageQueueAllN)�__name__�
__module__� __qualname__� r! r! �6/usr/lib/python3/dist-packages/apparmor/rule/mqueue.py�__MessageQueueAll7 s r# �mqueueF� Nc
s� t t| �j||||| d� t|ttjdd�\| _| _}
|
r(tt d�d�
|
� ��| j |dd| d�\| _ | _
| j |d d| d�\| _| _| j |d
d| d�\| _| _| �� d S ) N)�audit�deny�
allow_keyword�comment� log_eventr �accessz5Passed unknown access keyword to MessageQueueRule: %s� r F)�is_pathr* �typer )�superr �__init__r �access_keywords�ALLr+ �
all_accessr �_�join� _aare_or_allr �
all_labelsr �all_mqueue_typesr �all_mqueue_names�validate_mqueue_name) �selfr+ r r r r& r' r( r) r* �
unknown_items�� __class__r! r" r0 > s � zMessageQueueRule.__init__c C sb | j s| jrd S | jjdkr| jj�� sttd���| jjdkr-| jj�d�s/ttd���d S d S )N�sysvz.Queue name for SYSV must be a positive integer�posix�/z&Queue name for POSIX must begin with /) r8 r9 r �regexr � isnumericr r4 �
startswith)r; r! r! r" r: P s �z%MessageQueueRule.validate_mqueue_namec C s
t �|�S )N)r �search)�cls�raw_ruler! r! r" �_matchZ s
zMessageQueueRule._matchc
C s: | � |�}|sttd�| ��t|�\}}}}d}|�d�r#|�d�}|r�t�|�}|s4ttd| ���|�d�rW|�d�} | �d�rN| �d�rN| dd � } | � d
d ��
� } nt j } |�d �re|�d �}
nt j }
|�d
�rs|�d
�} nt j } |�d�r�|�d�} nt j } n t j } t j }
t j } t j } t | |
| | ||||d�S )z*parse raw_rule and return MessageQueueRulezInvalid mqueue rule '%s'r% �detailsz)Invalid or unknown keywords in 'mqueue %sr+ r �)� ����,r, r r r )r& r' r( r) )
rH r r4 r
�group�RE_MQUEUE_DETAILSrE rD �endswith�replace�splitr r2 )
rF rG �matchesr& r' r( r) � rule_detailsrI r+ r r r r! r! r" �_parse^ sB
�zMessageQueueRule._parser c C s� d| }| j r
d}n"t| j�dkrdd�| j� }n| jr(dd�t| j�� }ntd��| jr2d}n| jr<d| jj }ntd ��| j rFd}n| j
rRd
t | j
j� }ntd ��| j r\d}n| j
rfd| j
j }ntd ��d
|| �� ||||| jf S )z)return rule (in clean/default formatting)z r% rK z %sr, z (%s)zEmpty access in mqueue rulez type=%szEmpty type in mqueue rulez label=%szEmpty label in mqueue rulez Empty mqueue_name in mqueue rulez%s%smqueue%s%s%s%s,%s)r3 �lenr+ r5 �sortedr r8 r rB r7 r r r9 r �
modifiers_strr) )r; �depth�spacer+ r r r r! r! r" � get_clean� s0 zMessageQueueRule.get_cleanc C s| | � | j| j|j|jd�sdS | �| j| j|j|jd�s dS | �| j| j|j|jd�s-dS | �| j| j |j|j d�s<dS dS )z2check if other_rule is covered by this rule objectr+ Fr r r T)
�_is_covered_listr+ r3 �_is_covered_aarer r8 r r7 r r9 )r; �
other_ruler! r! r" �is_covered_localvars� s z%MessageQueueRule.is_covered_localvarsc C s� t |�tkstdt|� ��| j|jks| j|jkr dS | �| j| j|j|jd�s+dS | �| j | j
|j |j
d�s:dS | �| j | j |j |j d�sIdS dS )z,compare if rule-specific variables are equalzPassed non-mqueue rule: %sFr r r T)
r. r r �strr+ r3 �_is_equal_aarer r8 r r7 r r9 )r; �rule_obj�strictr! r! r" �is_equal_localvars� s z#MessageQueueRule.is_equal_localvarsc C s\ t | j| j�}t | j| j�}t | j| j�}t | j| j�}t d�|t d�|t d�|t d�|fS )Nz Access mode�Type�LabelzMessage queue name)
r r+ r3 r r8 r r7 r r9 r4 )r; r+ r r r r! r! r" �logprof_header_localvars� s �z)MessageQueueRule.logprof_header_localvars)FFFr% N)r )r r r �__doc__�object�"_MessageQueueRule__MessageQueueAllr2 � rule_namer0 r: � classmethodrH rU r[ r_ rd rg �
__classcell__r! r! r= r" r 2 s" �
1%r c @ s e Zd ZdZdd� ZdS )�MessageQueueRulesetz6Class to handle and store a collection of mqueue rulesc C s dS )zaReturn the next possible glob. For mqueue rules, that means removing access, label or mqueue_namezmqueue,r! )r; � path_or_ruler! r! r" �get_glob� s z MessageQueueRuleset.get_globN)r r r rh rp r! r! r! r" rn � s rn ) �re�apparmor.regexr r �apparmor.commonr r �
apparmor.ruler r r r r
r �apparmor.translationsr r4 �access_keywords_read�access_keywords_write�access_keywords_rw�access_keywords_otherr1 r5 �joint_access_keyword�RE_ACCESS_KEYWORDS�RE_MQUEUE_NAME�RE_MQUEUE_TYPE�compilerO r rn r! r! r! r" �<module> sz ��������������������� 9