File: //lib/python3/dist-packages/apparmor/rule/__pycache__/rlimit.cpython-310.pyc
o
%`b�' � @ s� d dl Z d dlmZmZ d dlmZmZmZ d dlm Z m
Z
m Z m Z d dl
mZ e� Zg d�Zg d�Zdd gZd
gZee e e Ze �d �Ze �d �Ze �d
�Ze �d�ZG dd� de �ZG dd� de
�Zdd� Z dS )� N)�RE_PROFILE_RLIMIT� strip_quotes)� AppArmorBug�AppArmorException� type_is_str)�BaseRule� BaseRuleset�
parse_comment�quote_if_needed)�init_translation)�fsize�data�stack�core�rss�as�memlock�msgqueue)�ofile�nofile�locks�
sigpending�nproc�rtprio�cpu�rttime�nicez*^(?P<number>[0-9]+)\s*(?P<unit>[a-zA-Z]*)$z^[0-9]+$z^[0-9]+\s*([KMG]B?)?$z ^(-20|-[01]?[0-9]|[01]?[0-9])$c s� e Zd ZdZG dd� de�ZeZdZ d� fdd � Ze d
d � �Z
e d d
� �Z d dd�Z dd� Z
dd� Zdd� Zdd� Zdd� Z� ZS ) �
RlimitRulez.Class to handle and store a single rlimit rulec @ s e Zd ZdS )zRlimitRule.__RlimitAllN)�__name__�
__module__� __qualname__� r! r! �6/usr/lib/python3/dist-packages/apparmor/rule/rlimit.py� __RlimitAll, s r# �rlimitF� Nc
s� t t| �j|||||d� |s|s|rtd��t|�r)|tv r#|| _ntd| ��tdt|� ��d | _ d | _
d| _ |tj krDd| _ d S t|�r�|�
� sPtd��|tv rht�|�satd||f ��| �|�| _
nZ|tv rt�|�sytd ||f ��t|�| _
nC|tv r�t�|�s�td ||f ��t|�\}} |d
kr�| �|d �| _
n | �|d �| _
n|tv r�t�|�s�td||f ��d
t|� | _
|| _ d S tdt|� ��)N)�audit�deny�
allow_keyword�comment� log_eventzBThe audit, allow or deny keywords are not allowed in rlimit rules.z)Unknown rlimit keyword in rlimit rule: %sz'Passed unknown object to RlimitRule: %sFT�Empty value in rlimit rulez*Invalid value or unit in rlimit %s %s rulez"Invalid value in rlimit %s %s ruler �us�secondsr )�superr �__init__r r �
rlimit_allr$ r �str�value� value_as_int�
all_values�ALL�strip� rlimit_size� RE_UNIT_SIZE�match� size_to_int�
rlimit_number� RE_NUMBER�int� rlimit_time�RE_NUMBER_UNIT�
split_unit� time_to_int� rlimit_nice�RE_NICE)
�selfr$ r2 r& r' r( r) r* �number�unit�� __class__r! r" r/ 3 sR �
zRlimitRule.__init__c C s
t �|�S )N)r �search)�cls�raw_ruler! r! r" �_matchm s
zRlimitRule._matchc C s� | � |�}|sttd�| ��t|�}|�d�r t|�d��}nttd�| ��|�d�r@|�d�dkr8tj}nt|�d��}nttd�| ��t|||d�S )z$parse raw_rule and return RlimitRulezInvalid rlimit rule '%s'r$ z*Invalid rlimit rule '%s' - keyword missingr2 �infinityz(Invalid rlimit rule '%s' - value missing)r) )rL r �_r �groupr r r5 )rJ rK �matchesr) r$ r2 r! r! r" �_parseq s
�zRlimitRule._parser c C sh d| }| j rdt| j � }ntd��| jrd}n| jr$dt| j� }ntd��d|| �� ||| jf S )z)return rule (in clean/default formatting)z z %szEmpty rlimit in rlimit rulez <= infinityz <= %sr+ z%s%sset rlimit%s%s,%s)r$ r
r r4 r2 �
modifiers_strr) )rD �depth�spacer$ r2 r! r! r" � get_clean� s zRlimitRule.get_cleanc C s� t |�\}}|dkr
|S |dks|dkr|d }|S |dks#|dkr+|d d }|S |dks3|dkr=|d d d }|S td || j|f ��)
Nr% �K�KBi �M�MB�G�GB� Unknown unit %s in rlimit %s %s)r@ r r$ )rD r2 rE rF r! r! r" r: � s
�� ��zRlimitRule.size_to_intc C s� t |�\}}|dkr |}|dv r"|d }|dkr ttd�| ��|S |dv r8|d }|dkr6ttd�| ��|S |dv r? |S |d v rI|d
}|S |d v rU|d
d
}|S |d v rc|d
d
d
}|S |dv rs|d
d
d
d }|S td|| j|f ��)Nr% )r, � microsecond� microsecondsg ��.Ar- z"Invalid unit in rlimit cpu %s rule)�ms� millisecond� millisecondsg @�@)�s�sec�secondr- )�min�minute�minutes�< )�h�hour�hours)�d�day�days� )�week�weeks� r\ )r@ r rN r$ )rD r2 � default_unitrE rF r! r! r" rA � s: �� �
� ���zRlimitRule.time_to_intc C sR | � | jd|jdd�s
dS |js|jstd��| js'|jr dS |j| jkr'dS dS )z2check if other_rule is covered by this rule objectFr$ z0No target profile specified in other rlimit ruleT)�_is_covered_plainr$ r2 r4 r r3 )rD �
other_ruler! r! r" �is_covered_localvars� s z RlimitRule.is_covered_localvarsc C sL t |�tkstdt|� ��| j|jkrdS | j|jks"| j|jkr$dS dS )z,compare if rule-specific variables are equalzPassed non-rlimit rule: %sFT)�typer r r1 r$ r3 r4 )rD �rule_obj�strictr! r! r" �is_equal_localvars� s z RlimitRule.is_equal_localvarsc C s, | j }| jr d}n| j}td�|td�|gS )NrM �Rlimit�Value)r$ r4 r2 rN )rD �
rlimit_txt�
values_txtr! r! r" �logprof_header_localvars� s �z#RlimitRule.logprof_header_localvars)FFFr% N)r )r r r �__doc__�object�_RlimitRule__RlimitAllr5 � rule_namer/ � classmethodrL rQ rU r: rA rv rz r �
__classcell__r! r! rG r" r ' s$ �:
r c @ s e Zd ZdZdd� ZdS )�
RlimitRulesetz6Class to handle and store a collection of rlimit rulesc C s t d��)z`Return the next possible glob. For rlimit rules, that can mean changing the value to 'infinity' z4get_glob() is not (yet) available for this rule type)r )rD � path_or_ruler! r! r" �get_glob� s zRlimitRuleset.get_globN)r r r r� r� r! r! r! r" r� � s r� c C s> t �| �}|s
td| ��t|�d��}|�d�pd}||fS )Nz%Invalid value given to split_unit: %srE rF r% )r? r9 r r= rO )r2 rP rE rF r! r! r" r@ s
r@ ) �re�apparmor.regexr r �apparmor.commonr r r �
apparmor.ruler r r r
�apparmor.translationsr rN r7 r; r> rB r0 �compiler? r< r8 rC r r� r@ r! r! r! r" �<module> s&
S