File: //lib/python3/dist-packages/apparmor/rule/__pycache__/ptrace.cpython-310.pyc
o
%`b� � @ s� d dl Z d dlmZmZmZ d dlmZmZ d dlm Z m
Z
m Z m Z m
Z
mZ d dlmZ e� Zg d�Zdd�e� d Zed d
e d d e d
d Ze �de d d ed d d �ZG dd� de �ZG dd� de
�ZdS )� N)�RE_PROFILE_PTRACE�RE_PROFILE_NAME� strip_quotes)� AppArmorBug�AppArmorException)�BaseRule� BaseRuleset�check_and_split_list�logprof_value_or_all�parse_modifiers�quote_if_needed)�init_translation) �r�w�rw�wr�read�write�readby�trace�tracedbyz\s*(�|z)\s*z\(�(z(\s|,)+z)*z\)z^(\s+(?P<access>z))?z
(\s+(peer=�peerz\s*$c sx e Zd ZdZG dd� de�ZeZdZ d� fdd � Ze d
d � �Z
e d d
� �Z ddd�Z dd� Z
dd� Zdd� Z� ZS )�
PtraceRulez.Class to handle and store a single ptrace rulec @ s e Zd ZdS )zPtraceRule.__PtraceAllN)�__name__�
__module__� __qualname__� r r �6/usr/lib/python3/dist-packages/apparmor/rule/ptrace.py� __PtraceAll0 s r �ptraceF� Nc sn t t| �j|||||d� t|ttjdd�\| _| _}|r(tt d�d�
|� ��| j |dd|d�\| _ | _
d S ) N)�audit�deny�
allow_keyword�comment� log_eventr �accessz/Passed unknown access keyword to PtraceRule: %s� r F)�is_pathr' )�superr �__init__r �access_keywords�ALLr( �
all_accessr �_�join� _aare_or_allr � all_peers) �selfr( r r# r$ r% r& r' �
unknown_items�� __class__r r r, 7 s � zPtraceRule.__init__c C s
t �|�S )N)r �search)�cls�raw_ruler r r �_matchE s
zPtraceRule._matchc C s� | � |�}|sttd�| ��t|�\}}}}d}|�d�r#|�d�}|rkt�|�}|s4ttd| ���|�d�rW|�d�} | �d�rN| �d�rN| dd � } | � d
d ��
� } nt j } |�d �rgt
|�d ��}
n
t j }
nt j } t j }
t | |
||||d
�S )z$parse raw_rule and return PtraceRulezInvalid ptrace rule '%s'r" �detailsz)Invalid or unknown keywords in 'ptrace %sr( r �)� ����,r) r )r# r$ r% r& )r; r r0 r �group�RE_PTRACE_DETAILSr8 �
startswith�endswith�replace�splitr r. r ) r9 r: �matchesr# r$ r% r& � rule_detailsr< r( r r r r �_parseI s2
�zPtraceRule._parser c C s� d| }| j r
d}n"t| j�dkrdd�| j� }n| jr(dd�t| j�� }ntd��| jr2d}n| jr>dt| jj � }ntd ��d
|| �
� ||| j f S ) z)return rule (in clean/default formatting)z r" r> z %sr) z (%s)zEmpty access in ptrace rulez peer=%szEmpty peer in ptrace rulez%s%sptrace%s%s,%s) r/ �lenr( r1 �sortedr r3 r r �regex�
modifiers_strr& )r4 �depth�spacer( r r r r � get_cleanp s zPtraceRule.get_cleanc C s@ | � | j| j|j|jd�sdS | �| j| j|j|jd�s dS dS )z2check if other_rule is covered by this rule objectr( Fr T)�_is_covered_listr( r/ �_is_covered_aarer r3 )r4 �
other_ruler r r �is_covered_localvars� s
z PtraceRule.is_covered_localvarsc C sZ t |�tkstdt|� ��| j|jks| j|jkr dS | �| j| j|j|jd�s+dS dS )z,compare if rule-specific variables are equalzPassed non-ptrace rule: %sFr T) �typer r �strr( r/ �_is_equal_aarer r3 )r4 �rule_obj�strictr r r �is_equal_localvars� s z PtraceRule.is_equal_localvarsc C s0 t | j| j�}t | j| j�}td�|td�|gS )Nz Access mode�Peer)r
r( r/ r r3 r0 )r4 r( r r r r �logprof_header_localvars� s
�z#PtraceRule.logprof_header_localvars)FFFr" N)r )r r r �__doc__�object�_PtraceRule__PtraceAllr. � rule_namer, � classmethodr; rI rP rT rZ r\ �
__classcell__r r r6 r r + s �
& r c @ s e Zd ZdZdd� ZdS )�
PtraceRulesetz6Class to handle and store a collection of ptrace rulesc C s dS )zeReturn the next possible glob. For ptrace rules, that means removing access or removing/globbing peerzptrace,r )r4 � path_or_ruler r r �get_glob� s zPtraceRuleset.get_globN)r r r r] re r r r r rc � s rc )�re�apparmor.regexr r r �apparmor.commonr r �
apparmor.ruler r r r
r r �apparmor.translationsr
r0 r- r1 �joint_access_keyword�RE_ACCESS_KEYWORDS�compilerB r rc r r r r �<module> sV ���������������