/ usr / lib / python3 / dist-packages / setools / diff / [ HOME SHELL ]

Name	Size	Permission	Action
__pycache__	[ DIR ]	drwxr-xr-x
__init__.py	3.15 KB	-rw-r--r--
bool.py	3.05 KB	-rw-r--r--
bounds.py	4.41 KB	-rw-r--r--
commons.py	2.77 KB	-rw-r--r--
conditional.py	1.95 KB	-rw-r--r--
constraints.py	8.92 KB	-rw-r--r--
context.py	2.08 KB	-rw-r--r--
default.py	4.26 KB	-rw-r--r--
descriptors.py	1.66 KB	-rw-r--r--
difference.py	6.04 KB	-rw-r--r--
fsuse.py	3.21 KB	-rw-r--r--
genfscon.py	3.38 KB	-rw-r--r--
ibendportcon.py	3.3 KB	-rw-r--r--
ibpkeycon.py	3.31 KB	-rw-r--r--
initsid.py	2.58 KB	-rw-r--r--
mls.py	10.82 KB	-rw-r--r--
mlsrules.py	5.27 KB	-rw-r--r--
netifcon.py	3.77 KB	-rw-r--r--
nodecon.py	3.31 KB	-rw-r--r--
objclass.py	3.7 KB	-rw-r--r--
polcap.py	1.72 KB	-rw-r--r--
portcon.py	3.29 KB	-rw-r--r--
properties.py	2.4 KB	-rw-r--r--
rbacrules.py	7.22 KB	-rw-r--r--
roles.py	3.28 KB	-rw-r--r--
terules.py	24.91 KB	-rw-r--r--
typeattr.py	3.42 KB	-rw-r--r--
types.py	4.79 KB	-rw-r--r--
typing.py	1.02 KB	-rw-r--r--
users.py	5.97 KB	-rw-r--r--

Code Editor : objclass.py

# Copyright 2015, Tresys Technology, LLC
# Copyright 2018, Chris PeBenito <pebenito@ieee.org>
#
# This file is part of SETools.
#
# SETools is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as
# published by the Free Software Foundation, either version 2.1 of
# the License, or (at your option) any later version.
#
# SETools is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with SETools.  If not, see
# <http://www.gnu.org/licenses/>.
#
from collections import defaultdict
from contextlib import suppress
from typing import NamedTuple, Set

from ..exception import NoCommon
from ..policyrep import ObjClass

from .descriptors import DiffResultDescriptor
from .difference import Difference, SymbolWrapper
from .typing import SymbolCache

_class_cache: SymbolCache[ObjClass] = defaultdict(dict)

class ModifiedObjClass(NamedTuple):

"""Difference details for a modified object class."""

added_perms: Set[str]
    removed_perms: Set[str]
    matched_perms: Set[str]

def class_wrapper_factory(class_: ObjClass) -> SymbolWrapper[ObjClass]:
    """
    Wrap class from the specified policy.

This caches results to prevent duplicate wrapper
    objects in memory.
    """

try:
        return _class_cache[class_.policy][class_]
    except KeyError:
        c = SymbolWrapper(class_)
        _class_cache[class_.policy][class_] = c
        return c

class ObjClassDifference(Difference):

"""
    Determine the difference in object classes
    between two policies.
    """

added_classes = DiffResultDescriptor("diff_classes")
    removed_classes = DiffResultDescriptor("diff_classes")
    modified_classes = DiffResultDescriptor("diff_classes")

def diff_classes(self) -> None:
        """Generate the difference in object classes between the policies."""

self.log.info(
            "Generating class differences from {0.left_policy} to {0.right_policy}".format(self))

self.added_classes, self.removed_classes, matched_classes = self._set_diff(
            (SymbolWrapper(c) for c in self.left_policy.classes()),
            (SymbolWrapper(c) for c in self.right_policy.classes()))

self.modified_classes = dict()

for left_class, right_class in matched_classes:
            # Criteria for modified classes
            # 1. change to permissions (inherited common is expanded)

left_perms = left_class.perms
            with suppress(NoCommon):
                left_perms |= left_class.common.perms

right_perms = right_class.perms
            with suppress(NoCommon):
                right_perms |= right_class.common.perms

added_perms, removed_perms, matched_perms = self._set_diff(left_perms,
                                                                       right_perms,
                                                                       unwrap=False)

if added_perms or removed_perms:
                self.modified_classes[left_class] = ModifiedObjClass(added_perms,
                                                                     removed_perms,
                                                                     matched_perms)

#
    # Internal functions
    #
    def _reset_diff(self) -> None:
        """Reset diff results on policy changes."""
        self.log.debug("Resetting object class differences")
        self.added_classes = None
        self.removed_classes = None
        self.modified_classes = None

Urban Research Lab

Urban Research Lab

The Urban Research Lab (URL) at IIIT-Delhi was established in 2020, during a time when the pandemic brought the complexities of urban life more visible than ever. What started as an initiative by faculty and students has grown into a collaborative space for critically exploring and reimagining the urban questions through research, dialogue, and interdisciplinary engagement.