3
Klfw @ s d Z ddlZddlZyddlmZ W n ek
rD ddlmZ Y nX ddlZddlZddl Z ddl
Z
ddl m Z dd Z
G dd d Zd
d ZG d d
d
ZdS )zU
Utilities for dealing with the compilation of modules and creation
of module tress.
N)getstatusoutput )defaultsc C s0 t jd| }t|dkr(| d j r(dS dS dS )z'Check that a module name is valid.
z[^a-zA-Z0-9_\-\.]r TFN)refindalllenisalpha)modnamem r /usr/lib/python3.6/module.py
is_valid_name( s r
c @ sN e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dddZ
dS )
ModuleTreec C s || _ d | _d S )N)r dirname)selfr r r r __init__2 s zModuleTree.__init__c C s | j S )N)r )r r r r dir_name6 s zModuleTree.dir_namec C s | j d | j d S )N/z.te)r r )r r r r te_name9 s zModuleTree.te_namec C s | j d | j d S )Nr z.fc)r r )r r r r fc_name< s zModuleTree.fc_namec C s | j d | j d S )Nr z.if)r r )r r r r if_name? s zModuleTree.if_namec C s | j d | j d S )Nr z.pp)r r )r r r r package_nameB s zModuleTree.package_namec C s
| j d S )Nz /Makefile)r )r r r r
makefile_nameE s zModuleTree.makefile_nameNc C s |d | j | _tj| j t| j d}|r>|jd| n|jdtj |j t| j
dj t| j dj t| j dj d S )Nr wzinclude )
r r osmkdiropenr writer refpolicy_makefilecloser r r )r Zparent_dirnameZmakefile_includefdr r r createH s zModuleTree.create)N) __name__
__module__ __qualname__r r r r r r r r! r r r r r 1 s r c C s t jjt jj| d d S )Nr r )r pathsplitextsplit)
sourcenamer r r modname_from_sourcenameX s r) c @ sT e Zd ZdZdddZdd Zdd Zd d
Zdd d
Zdd Z dd Z
dd Z dS )ModuleCompilerat ModuleCompiler eases running of the module compiler.
The ModuleCompiler class encapsulates running the commandline
module compiler (checkmodule) and module packager (semodule_package).
You are likely interested in the create_module_package method.
Several options are controlled via paramaters (only effects the
non-refpol builds):
.mls [boolean] Generate an MLS module (by passed -M to
checkmodule). True to generate an MLS module, false
otherwise.
.module [boolean] Generate a module instead of a base module.
True to generate a module, false to generate a base.
.checkmodule [string] Fully qualified path to the module compiler.
Default is /usr/bin/checkmodule.
.semodule_package [string] Fully qualified path to the module
packager. Defaults to /usr/bin/semodule_package.
.output [file object] File object used to write verbose
output of the compililation and packaging process.
Nc C s< t j | _d| _d| _d| _|| _d| _tj | _
d| _ dS )zCreate a ModuleCompiler instance, optionally with an
output file object for verbose output of the compilation process.
Tz/usr/bin/checkmodulez/usr/bin/semodule_package z
/usr/bin/makeN) selinuxZis_selinux_mls_enabledmlsmodule checkmodulesemodule_packageoutput last_outputr r refpol_makefilemake)r r1 r r r r t s
zModuleCompiler.__init__c C s | j r| j j|d || _d S )N
)r1 r r2 )r strr r r o s zModuleCompiler.oc C s$ | j | t|\}}| j | |S )N)r7 r )r commandrcr1 r r r run s
zModuleCompiler.runc C sJ |j d}t|dk r td|dj|dd }|d }|d }||fS ) zGenerate the module and policy package filenames from
a source file name. The source file must be in the form
of "foo.te". This will generate "foo.mod" and "foo.pp".
Returns a tuple with (modname, policypackage).
. z,invalid sourcefile name %s (must end in .te)r r z.modz.pp)r' r RuntimeErrorjoin)r r( Z splitnamebasenamer packagenamer r r
gen_filenames s
z ModuleCompiler.gen_filenamesTc C sD |r| j | n0| j|\}}| j|| | j|| tj| dS )a Create a module package saved in a packagename from a
sourcename.
The create_module_package creates a module package saved in a
file named sourcename (.pp is the standard extension) from a
source file (.te is the standard extension). The source file
should contain SELinux policy statements appropriate for a
base or non-base module (depending on the setting of .module).
Only file names are accepted, not open file objects or
descriptors because the command line SELinux tools are used.
On error a RuntimeError will be raised with a descriptive
error message.
N) refpol_buildrB compilepackager unlink)r r( Z refpolicyr rA r r r create_module_package s z$ModuleCompiler.create_module_packagec C s4 | j d | j }| j|}|dkr0td| j d S )Nz -f r zcompilation failed:
%s)r4 r3 r: r> r2 )r r( r8 r9 r r r rC s
zModuleCompiler.refpol_buildc C sp | j g}| jr|jd | jr(|jd |jd |j| |j| | jdj|}|dkrltd| j d S )Nz-Mz-mz-o r zcompilation failed:
%s)r/ r- appendr. r: r? r> r2 )r r( r sr9 r r r rD s
zModuleCompiler.compilec C sZ | j g}|jd |j| |jd |j| | jdj|}|dkrVtd| j d S )Nz-oz-mrH r zpackaging failed [%s])r0 rI r: r? r> r2 )r r rA rJ r9 r r r rE s
zModuleCompiler.package)N)T) r" r# r$ __doc__r r7 r: rB rG rC rD rE r r r r r* [ s
r* )rK r Ztempfile
subprocessr ImportErrorZcommandsr Zos.pathZshutilr, r+ r r
r r) r* r r r r s '