<h2>Editing File: /usr/lib/python3.6/site-packages/sepolicy/interface.py</h2><form method='post'><textarea name='content' class='file-edit'># Copyright (C) 2012 Red Hat
# see file 'COPYING' for use and warranty information
#
# policygentool is a tool for the initial generation of SELinux policy
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of the GNU General Public License as
#    published by the Free Software Foundation; either version 2 of
#    the License, or (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program; if not, write to the Free Software
#    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
#                                        02111-1307  USA
#
#
import re
import sys
import sepolicy
ADMIN_TRANSITION_INTERFACE = &quot;_admin$&quot;
USER_TRANSITION_INTERFACE = &quot;_role$&quot;

__all__ = ['get_all_interfaces', 'get_interfaces_from_xml', 'get_admin', 'get_user', 'get_interface_dict', 'get_interface_format_text', 'get_interface_compile_format_text', 'get_xml_file', 'interface_compile_test']

##
## I18N
##
PROGNAME = &quot;selinux-python&quot;
try:
    import gettext
    kwargs = {}
    if sys.version_info &lt; (3,):
        kwargs['unicode'] = True
    gettext.install(PROGNAME,
                    localedir=&quot;/usr/share/locale&quot;,
                    codeset='utf-8',
                    **kwargs)
except:
    try:
        import builtins
        builtins.__dict__['_'] = str
    except ImportError:
        import __builtin__
        __builtin__.__dict__['_'] = unicode


def get_interfaces_from_xml(path):
    &quot;&quot;&quot; Get all interfaces from given xml file&quot;&quot;&quot;
    interfaces_list = []
    idict = get_interface_dict(path)
    for k in idict.keys():
        interfaces_list.append(k)
    return interfaces_list


def get_all_interfaces(path=&quot;&quot;):
    from sepolicy import get_methods
    all_interfaces = []
    if not path:
        all_interfaces = get_methods()
    else:
        xml_path = get_xml_file(path)
        all_interfaces = get_interfaces_from_xml(xml_path)

    return all_interfaces


def get_admin(path=&quot;&quot;):
    &quot;&quot;&quot; Get all domains with an admin interface from installed policy.&quot;&quot;&quot;
    &quot;&quot;&quot; If xml_path is specified, func returns an admin interface from specified xml file&quot;&quot;&quot;
    admin_list = []
    if path:
        try:
            xml_path = get_xml_file(path)
            idict = get_interface_dict(xml_path)
            for k in idict.keys():
                if k.endswith(&quot;_admin&quot;):
                    admin_list.append(k)
        except IOError as e:
            sys.stderr.write(&quot;%s: %s\n&quot; % (e.__class__.__name__, str(e)))
            sys.exit(1)
    else:
        for i in sepolicy.get_methods():
            if i.endswith(&quot;_admin&quot;):
                admin_list.append(i.split(&quot;_admin&quot;)[0])

    return admin_list


def get_user(path=&quot;&quot;):
    &quot;&quot;&quot; Get all domains with SELinux user role interface&quot;&quot;&quot;
    &quot;&quot;&quot; If xml_path is specified, func returns an user role interface from specified xml file&quot;&quot;&quot;
    trans_list = []
    if path:
        try:
            xml_path = get_xml_file(path)
            idict = get_interface_dict(xml_path)
            for k in idict.keys():
                if k.endswith(&quot;_role&quot;):
                    if ((&quot;%s_exec_t&quot; % k[:-5]) in sepolicy.get_all_types()):
                        trans_list.append(k)
        except IOError as e:
            sys.stderr.write(&quot;%s: %s\n&quot; % (e.__class__.__name__, str(e)))
            sys.exit(1)
    else:
        for i in sepolicy.get_methods():
            m = re.findall(&quot;(.*)%s&quot; % USER_TRANSITION_INTERFACE, i)
            if len(m) &gt; 0:
                if &quot;%s_exec_t&quot; % m[0] in sepolicy.get_all_types():
                    trans_list.append(m[0])

    return trans_list

interface_dict = None


def get_interface_dict(path=&quot;/usr/share/selinux/devel/policy.xml&quot;):
    global interface_dict
    import os
    import xml.etree.ElementTree
    if interface_dict:
        return interface_dict

    interface_dict = {}
    param_list = []

    xml_path = &quot;&quot;&quot;&lt;?xml version=&quot;1.0&quot; encoding=&quot;ISO-8859-1&quot; standalone=&quot;no&quot;?&gt;
&lt;policy&gt;
&lt;layer name=&quot;admin&quot;&gt;
&quot;&quot;&quot;
    xml_path += path
    xml_path += &quot;&quot;&quot;
&lt;/layer&gt;
&lt;/policy&gt;
&quot;&quot;&quot;

    try:
        if os.path.isfile(path):
            tree = xml.etree.ElementTree.parse(path)
        else:
            tree = xml.etree.ElementTree.fromstring(xml_path)
        for l in tree.findall(&quot;layer&quot;):
            for m in l.findall(&quot;module&quot;):
                for i in m.getiterator('interface'):
                    for e in i.findall(&quot;param&quot;):
                        param_list.append(e.get('name'))
                    interface_dict[(i.get(&quot;name&quot;))] = [param_list, (i.find('summary').text), &quot;interface&quot;]
                    param_list = []
                for i in m.getiterator('template'):
                    for e in i.findall(&quot;param&quot;):
                        param_list.append(e.get('name'))
                    interface_dict[(i.get(&quot;name&quot;))] = [param_list, (i.find('summary').text), &quot;template&quot;]
                    param_list = []
    except IOError:
        pass
    return interface_dict


def get_interface_format_text(interface, path=&quot;/usr/share/selinux/devel/policy.xml&quot;):
    idict = get_interface_dict(path)
    interface_text = &quot;%s(%s) %s&quot; % (interface, &quot;, &quot;.join(idict[interface][0]), &quot; &quot;.join(idict[interface][1].split(&quot;\n&quot;)))

    return interface_text


def get_interface_compile_format_text(interfaces_dict, interface):
    from .templates import test_module
    param_tmp = []
    for i in interfaces_dict[interface][0]:
        param_tmp.append(test_module.dict_values[i])
        interface_text = &quot;%s(%s)\n&quot; % (interface, &quot;, &quot;.join(param_tmp))

    return interface_text


def generate_compile_te(interface, idict, name=&quot;compiletest&quot;):
    from .templates import test_module
    te = &quot;&quot;
    te += re.sub(&quot;TEMPLATETYPE&quot;, name, test_module.te_test_module)
    te += get_interface_compile_format_text(idict, interface)

    return te


def get_xml_file(if_file):
    &quot;&quot;&quot; Returns xml format of interfaces for given .if policy file&quot;&quot;&quot;
    import os
    try:
        from commands import getstatusoutput
    except ImportError:
        from subprocess import getstatusoutput
    basedir = os.path.dirname(if_file) + &quot;/&quot;
    filename = os.path.basename(if_file).split(&quot;.&quot;)[0]
    rc, output = getstatusoutput(&quot;python /usr/share/selinux/devel/include/support/segenxml.py -w -m %s&quot; % basedir + filename)
    if rc != 0:
        sys.stderr.write(&quot;\n Could not proceed selected interface file.\n&quot;)
        sys.stderr.write(&quot;\n%s&quot; % output)
        sys.exit(1)
    else:
        return output


def interface_compile_test(interface, path=&quot;/usr/share/selinux/devel/policy.xml&quot;):
    exclude_interfaces = [&quot;userdom&quot;, &quot;kernel&quot;, &quot;corenet&quot;, &quot;files&quot;, &quot;dev&quot;]
    exclude_interface_type = [&quot;template&quot;]

    try:
        from commands import getstatusoutput
    except ImportError:
        from subprocess import getstatusoutput
    import os
    policy_files = {'pp': &quot;compiletest.pp&quot;, 'te': &quot;compiletest.te&quot;, 'fc': &quot;compiletest.fc&quot;, 'if': &quot;compiletest.if&quot;}
    idict = get_interface_dict(path)

    if not (interface.split(&quot;_&quot;)[0] in exclude_interfaces or idict[interface][2] in exclude_interface_type):
        print(_(&quot;Compiling %s interface&quot;) % interface)
        try:
            fd = open(policy_files['te'], &quot;w&quot;)
            fd.write(generate_compile_te(interface, idict))
            fd.close()
            rc, output = getstatusoutput(&quot;make -f /usr/share/selinux/devel/Makefile %s&quot; % policy_files['pp'])
            if rc != 0:
                sys.stderr.write(output)
                sys.stderr.write(_(&quot;\nCompile test for %s failed.\n&quot;) % interface)

        except EnvironmentError as e:
            sys.stderr.write(_(&quot;\nCompile test for %s has not run. %s\n&quot;) % (interface, e))
        for v in policy_files.values():
            if os.path.exists(v):
                os.remove(v)

    else:
        sys.stderr.write(_(&quot;\nCompiling of %s interface is not supported.&quot;) % interface)
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flib%2Fpython3.6%2Fsite-packages%2Fsepolicy'>Back to Directory</a>