lib/python2.7/site-packages/setoolsgui/setools/policyrep/objclass.py

# Copyright 2014-2015, Tresys Technology, LLC
#
# This file is part of SETools.
#
# SETools is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as
# published by the Free Software Foundation, either version 2.1 of
# the License, or (at your option) any later version.
#
# SETools is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with SETools.  If not, see
# <http://www.gnu.org/licenses/>.
#
from . import exception
from . import symbol
from . import qpol


def common_factory(policy, name):
    """Factory function for creating common permission set objects."""

    if isinstance(name, Common):
        assert name.policy == policy
        return name
    elif isinstance(name, qpol.qpol_common_t):
        return Common(policy, name)

    try:
        return Common(policy, qpol.qpol_common_t(policy, str(name)))
    except ValueError:
        raise exception.InvalidCommon("{0} is not a valid common".format(name))


def class_factory(policy, name):
    """Factory function for creating object class objects."""

    if isinstance(name, ObjClass):
        assert name.policy == policy
        return name
    elif isinstance(name, qpol.qpol_class_t):
        return ObjClass(policy, name)

    try:
        return ObjClass(policy, qpol.qpol_class_t(policy, str(name)))
    except ValueError:
        raise exception.InvalidClass("{0} is not a valid object class".format(name))


class Common(symbol.PolicySymbol):

    """A common permission set."""

    def __contains__(self, other):
        return other in self.perms

    @property
    def perms(self):
        """The list of the common's permissions."""
        return set(self.qpol_symbol.perm_iter(self.policy))

    def statement(self):
        return "common {0}\n{{\n\t{1}\n}}".format(self, '\n\t'.join(self.perms))


class ObjClass(Common):

    """An object class."""

    def __contains__(self, other):
        try:
            if other in self.common.perms:
                return True
        except exception.NoCommon:
            pass

        return other in self.perms

    @property
    def common(self):
        """
        The common that the object class inherits.

        Exceptions:
        NoCommon    The object class does not inherit a common.
        """

        try:
            return common_factory(self.policy, self.qpol_symbol.common(self.policy))
        except ValueError:
            raise exception.NoCommon("{0} does not inherit a common.".format(self))

    def statement(self):
        stmt = "class {0}\n".format(self)

        try:
            stmt += "inherits {0}\n".format(self.common)
        except exception.NoCommon:
            pass

        # a class that inherits may not have additional permissions
        perms = self.perms
        if len(perms) > 0:
            stmt += "{{\n\t{0}\n}}".format('\n\t'.join(perms))

        return stmt