File: //proc/676643/root/lib/python3/dist-packages/apparmor/__pycache__/common.cpython-310.pyc
o
%`bb, � @ sX d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl Z d dl
Z
d dl Z d dl m
Z
daG dd� de�ZG dd� de�Zd5d
d �Zd d
� Ze jfdd�Zdd� Zd6dd�Zdd� Zdd� Zdd� Zdd � Zd d � Z d7d d!�Z d"d#� Z d7d$d%�Z d&d'� Z d(d)� Z!d*d+� Z"d,d-� Z#e j$d d.kr�e%Z&d/d0� Z'd1d2� Z(G d3d4� d4e)�Z*dS )8� )�print_functionNFc @ s e Zd ZdZdd� Zdd� ZdS )�AppArmorExceptionz)This class represents AppArmor exceptionsc C s
|| _ d S �N)�value)�selfr � r �1/usr/lib/python3/dist-packages/apparmor/common.py�__init__! �
zAppArmorException.__init__c C s
t | j�S r )�reprr �r r r r �__str__$ r
zAppArmorException.__str__N)�__name__�
__module__� __qualname__�__doc__r r
r r r r r s r c @ s e Zd ZdZdS )� AppArmorBugzDThis class represents AppArmor exceptions "that should never happen"N)r r r r r r r r r ' s r � Tc C s@ z t d| tjd� W n ty Y nw |r t�|� dS dS )z Print error message and exitz ERROR: %s��fileN)�print�sys�stderr�IOError�exit)�out� exit_code�do_exitr r r �error. s ��r c C s. z t d| tjd� W dS ty Y dS w )zPrint warning messagezWARN: %sr N)r r r r �r r r r �warn8 s
�r c C s, z t d| |d� W dS ty Y dS w )z
Print messagez%sr N)r r )r �outputr r r �msg? s
�r" c C s6 t rz td| tjd� W dS ty Y dS w dS )zPrint debug messagez DEBUG: %sr N)� DEBUGGINGr r r r r r r r �debugF s ��r$ � c C s d| d }t | t�r4d}| �� D ]}t|d| � t| | |d |� d}q|r2t|d � d
S d
S t | t�s>t | t�rft| �dkrLt|d � d
S t|d � | D ] }t||d � qTt|d
� d
S t | tj �rs| �|� d
S |r�t|d || f � d
S t|d | � d
S )z$ Recursively prints nested elements.� � Tz[%s]r Fz[--- empty ---]r �[�]z%s = %sz- %sN)
�
isinstance�dict�keysr �recursive_print�list�tuple�len�rules� _Raw_Rule)�src�dpth�key�tabs�empty�litemr r r r- O s,
� r- c
C s� t | � z tj| tjtjd�}W n ty( } z dt|�gW Y d}~S d}~ww tjd dkr;|� � d �
dd�}n|� � d }|j |gS )z!Try to execute the given command.)�stdoutr � Nr � �ascii�ignore) r$ �
subprocess�Popen�PIPE�STDOUT�OSError�strr � version_info� communicate�decode�
returncode)�command�sp�exr r r r �cmdp s
���
rK c
C s� zt j| t jd�}t j||jd�}W n ty* } z dt|�gW Y d}~S d}~ww tjd dkr=|�� d � dd�}n|�� d }|j
|gS ) z#Try to pipe command1 into command2.)r9 )�stdinr: Nr r; r< r= ) r> r? r@ r9 rB rC r rD rE rF rG )�command1�command2�sp1�sp2rJ r r r r �cmd_pipe� s ��
rQ c C sn d| }| � d�std| � dS d| v r td| � dS z tj�| � W dS ty6 td| � Y dS w ) z
Valid pathzInvalid path: %s�/z
%s (relative)F�"z%s (contains quote)z%s (could not normalize)T)�
startswithr$ �os�path�normpath� Exception)rV �mr r r �
valid_path� s
� �rZ c C s: t | �sdS g }t�| d �D ]}|�|� q|�� |S )z$Find contents of the given directoryNz/*)rZ �glob�append�sort)rV �files�fr r r �get_directory_contents� s r` c C s> t j�| �}|r|d dks|dkrdS d}|�|�r dS dS )a Returns True if filename matches something to be skipped (rpm or dpkg backup files, hidden files etc.)
The list of skippable files needs to be synced with apparmor initscript and libapparmor _aa_is_blacklisted()
path: filename (with or without directory)r �.�READMET) z .dpkg-newz .dpkg-oldz
.dpkg-distz .dpkg-bakz .dpkg-removez.pacsavez.pacnewz.rpmnewz.rpmsavez.origz.rej�~F)rU rV �basename�endswith)rV rd �skippable_suffixr r r �is_skippable_file� s
rg �UTF-8c C s t d| |�S )z Open specified file read-only�r��open_file_anymode)rV �encodingr r r �open_file_read� � rm c C s t d| d�S )z+Open specified file in write/overwrite mode�wrh rj )rV r r r �open_file_write� rn rp c C s, d}t jd dk r d}tj|| ||d�}|S )zBCrash-resistant wrapper to open a specified file in specified mode�surrogateescaper r; �replace)�errors)r rD �codecs�open)�moderV rl �
errorhandling�origr r r rk � s
rk c C sZ t j�� } t�| �}zt�t j�� � t j�d�}W t�| tj |� |S t�| tj |� w )zReturns the pressed keyr )
r rL �fileno�termios� tcgetattr�tty�setraw�read� tcsetattr� TCSADRAIN)�fd� old_settings�chr r r �readkey� s
�r� c C s
t �t�S )z+A neat alternative to perl's hash reference)� collections� defaultdict�hasherr r r r r� � s
r� c C s� t �d�}| �� } | �dd��dd�} t �dd| �}|�|�rE|�|��� }|d }|d }|d
�d d �}|d | d | }|�|�s |�d
d�}d}|�d|�}|�dd�}|�|d�}| d dkrid| }| d dkrs|d }|S )Nz^(.*){([^}]*)}(.*)$�(z\(�)z\)z(?<!\\)(\.|\+|\$)z\\\1r � r �,�|�?z[^/ ]�,__KJHDKVZH_AAPROF_INTERNAL_GLOB_SVCUZDGZID__z**�*z (((?<=/)[^/ ]+)|((?<!/)[^/ ]*))z (((?<=/)[^ ]+)|((?<!/)[^ ]*))�^����$)�re�compile�striprr �sub�search�groups)�regexp� regex_paren�new_reg�match�prev�after�p1�
multi_globr r r �convert_regexp� s*
� r� c C s" t �| t j�stj�d� dS dS )NzVCannot write to profile directory.
Please run as a user with appropriate permissions.
FT)rU �access�W_OKr r9 �write)�prof_dirr r r � user_perm s r� r� c C s t | �ttfv r
dS dS )zT returns True if the given variable is a str (or unicode string when using python 2)TF)�typerC �unicode)�varr r r � type_is_str s r� c C s6 d| v r| � d�d d� \}}||fS | }| }||fS )Nz//r� )�split)� full_profile�profile�hatr r r �
split_name s �r� c @ sD e Zd ZdZe fdd�Zdd� Zdd� Zdd � Zd
d � Zd d
� Z dS )� DebugLoggerz�Unified debug facility. Logs to file or stderr.
Does not log anything by default. Will only log if environment variable
LOGPROF_DEBUG is set to a number between 1 and 3 or if method activateStderr
is run.
c C sJ d| _ tj| _t�dd�r�d| _t�d�| _ zt| j �| _ W n ty* d| _ Y nw | j t dd�vr>t
j � dt�d� � | j dkrEd S | j dkrOtj
| _n| j dkrYtj| _n | j d krbtj| _z tj| j| jd
d � W n, ty� dd l}|jd d
ddd�}t
j � d| j|jf � tj|j| jd
d � Y nw t�|�| _d S d S )NF�
LOGPROF_DEBUGz /var/log/apparmor/logprof.logr r' z>Environment Variable: LOGPROF_DEBUG contains invalid value: %sr r� r; z%%(asctime)s - %(name)s - %(message)s
)�filename�level�formatro �apparmorz.log)�prefix�suffix�deletez#
Could not open: %s
Logging to: %s
)� debugging�logging�DEBUG� debug_levelrU �getenv�logfile�intrX �ranger r9 r� �ERROR�INFO� basicConfigr �tempfile�NamedTemporaryFile�name� getLogger�logger)r � module_namer� �templogr r r r + sH
��
�
�� �zDebugLogger.__init__c C s* d| _ tj| jdtjd� t�t�| _d S )NTz%(levelname)s: %(message)s)r� r� �stream) r� r� r� r� r r r� r r� r r r r �activateStderrP s �zDebugLogger.activateStderrc C � | j r | j�|� d S d S r )r� r� r �r �messager r r r Y � �zDebugLogger.errorc C r� r )r� r� �infor� r r r r� ] r� zDebugLogger.infoc C r� r )r� r� r$ r� r r r r$ a r� zDebugLogger.debugc C s t �� d S r )r� �shutdownr r r r r� e s zDebugLogger.shutdownN)
r r r r r r� r r� r$ r� r r r r r� $ s % r� )r T)r r% )rh )+�
__future__r rt r� r[ r� rU r� r> r rz r| �apparmor.rulesr1 r# rX r r r r r9 r" r$ r- rK rQ rZ r` rg rm rp rk r� r� r� r� rD rC r� r� r� �objectr� r r r r �<module> sJ
!