File: //proc/676643/root/lib/python3/dist-packages/apparmor/__pycache__/tools.cpython-310.pyc
o
%`b�) � @ s\ d dl Z d dlZd dlmZ d dlmZ d dlm Z m
Z
d dl m Z e � Z
G dd� d�ZdS )� N)� user_perm�cmd)�init_translationc @ s| e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd S ) �aa_toolsc C s| t j|jd� || _|j| _| �� d | _|j| _|dv r#|j | _ d S |dkr2|j
| _
t � � | _ d S |dkr<|j| _d S d S )N)�
profiledir)�audit�autodep� cleanprof)
�apparmor�init_aa�dir�name�program� profiling�check_profile_dir�silent� do_reload�remove�force�check_for_apparmor�
aa_mountpoint)�self� tool_name�args� r �0/usr/lib/python3/dist-packages/apparmor/tools.py�__init__ s �zaa_tools.__init__c C s t tj�s
t�dtj ��d S )Nz%Cannot write to profile directory: %s)r r
� profile_dir�AppArmorException)r r r r r , s
�zaa_tools.check_profile_dirc c s � | j D ]�}|s qd}d}tj�|�s|�d�r9t�|��� }tj�tj |g�tj kr0d}|}nT|}t�
|d�}nKt� |�}|durNt�|�}t�
|d�}n6tj�tj� tj |��rjd}t�tj� tj |���� }nd|vrzt
�td�d|i � n t
�td�| � q||fV qdS )z6Iterator function to walk the list of arguments passedN�/T��Can't find %(program)s in the system path list. If the name of the application
is correct, please run 'which %(program)s' as a user with correct PATH
environment set up in order to find the fully-qualified path and
use the full path as parameter.r �0%s does not exist, please double-check the path.)r �os�path�exists�
startswithr
�
get_full_path�strip� commonprefixr �$get_profile_filename_from_attachment�which�join�aaui�UI_Info�_)r �pr �profile�fq_pathr* r r r �get_next_to_profile0 s4 �
�z aa_tools.get_next_to_profilec C s� t �� | �� D ]`\}}|d u r|}|r tj�|�s=t �|�s=|r/|�d�s/t� t
d�d�}nt� t
d�| � t �
d� |rJt �|�rJ| �|� qd|vrZt� t
d�d|i � qt� t
d�| � t �
d� qd S )Nr zaThe given program cannot be found, please try with the fully qualified path name of the program: � r! � r r )r
�
read_profilesr2 r" r# r$ �profile_existsr% r, � UI_GetStringr. r- �sys�exit�
clean_profile�r r r0 r r r �
cleanprof_actR s
�zaa_tools.cleanprof_actc C s~ t �� | �� D ]4\}}|d u r|n|}tj�|�r t �|�r)t�t d�| � qt�t d�| � | �
|� | � |� qd S )N�"Profile for %s not found, skippingz
Disabling %s.) r
r5 r2 r" r# �isfile�is_skippable_filer, r- r. �disable_profile�unload_profile�r r r0 � output_namer r r � cmd_disablek s
�zaa_tools.cmd_disablec C �n t �� | �� D ],\}}|d u r|n|}tj�|�r t �|�r)t�t d�| � qt �
||� | � |� qd S �Nr= ) r
r5 r2 r" r# r> r? r, r- r. � set_enforce�reload_profilerB r r r � cmd_enforce{ � �zaa_tools.cmd_enforcec C rE rF ) r
r5 r2 r" r# r> r? r, r- r. � set_complainrH rB r r r � cmd_complain� rJ zaa_tools.cmd_complainc C s� t �� | �� D ]d\}}|d u r|n|}tj�|�r t �|�r)t�t d�| � q| j
s6t�t d�| � n t�t d�| � t � ||d| j
� dt j tj�
|�f }tj�|�rgt�t d�tj�
|� � | �|� qd S )Nr= zSetting %s to audit mode.z Removing audit mode from %s.r z
%s/disable/%szQ
Warning: the profile %s is disabled. Use aa-enforce or aa-complain to enable it.)r
r5 r2 r" r# r> r? r, r- r. r �change_profile_flagsr �basenamer$ rH )r r r0 rC � disable_linkr r r � cmd_audit� s �zaa_tools.cmd_auditc C s� t �� t �� | �� D ]9\}}|s t�td�| � q t �|� tj �
t � |d��r8| j s8t�td�| � q t �
|� | jrEt �|� q d S )NzYPlease pass an application to generate a profile for, not a profile itself - skipping %s.Tz)Profile for %s already exists - skipping.)r
r5 � loadincludesr2 r, r- r. �check_qualifiersr" r# r$ r) r r r �reloadr; r r r � cmd_autodep� s
��zaa_tools.cmd_autodepc C sF t �|d�}dd lm} |�|�}|�d||�}|�|�}t�t d�| � dt j
|< |r�| j s�t� � }d|_
t d�||d� |_g d�|_d|_g |_d|_d }d } |d
kr�|�� \}} |d
krmt �|d� | �|� n|dkr�t �t j| |d di�}
tj||
dd � |d
ksWd S d S t �|d� | �|� d S t �t d
�| ��)NTr z
Deleted %s rules.zChanged Local ProfileszZThe local profile for %(program)s in file %(file)s was changed. Would you like to save it?)r �file)�CMD_SAVE_CHANGES�CMD_VIEW_CHANGES� CMD_ABORTrW r3 rV �
is_attachment)�commentsz5The profile for %s does not exists. Nothing to clean.)r
r) �apparmor.cleanprofile� cleanprofile�Prof� CleanProf�remove_duplicate_rulesr, r- r. �changedr �PromptQuestion�title� explanation� functions�default�options�selected�
promptUser�write_profile_ui_feedbackrH �serialize_profile�aa�
UI_Changesr ) r r �filenamer\ �profr �deleted�q�ans�arg�
newprofiler r r r: � s<
�
zaa_tools.clean_profilec C � t �d|� d S �N�disable)r
�delete_symlink�r rm r r r �enable_profile� � zaa_tools.enable_profilec C rt ru )r
�create_symlinkrx r r r r@ � rz zaa_tools.disable_profilec C �F | j sd S ttjdtj dtjd|g�}|d dkr!t�|d ��d S )N�-I%s�--basez-Rr r4 �r r r
�parserr r �r r0 �cmd_infor r r rA � s �zaa_tools.unload_profilec C r| )Nr} r~ z-rr r4 r r� r r r rH � s �zaa_tools.reload_profileN)�__name__�
__module__� __qualname__r r r2 r< rD rI rL rP rT r: ry r@ rA rH r r r r r s "#
r )r" r8 � apparmor.aark r
� apparmor.ui�uir, �apparmor.commonr r �apparmor.translationsr r. r r r r r �<module> s