🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-08-06 22:59:02 | PHP 8.2.32
📂
/ (Root)
/
usr
/
lib
/
python3.6
/
site-packages
/
setroubleshoot
/
__pycache__
📍 /usr/lib/python3.6/site-packages/setroubleshoot/__pycache__
🔄 Refresh
✏️
Editing: server.cpython-36.opt-1.pyc
Read Only
3 �Qf4� � @ s2 d dl mZ dddddgZd dlmZmZ d dlZd dlZd dlZd dl Z d dl Z d dl Z d dl Z d dl Z d dlZd dlZd d lmZmZ ed d �Zed d �Zi Ze jdBk r�ded< e jf eed�e�� e jeedd�Zy ejZW n e k �r ej ZY nX d dl m Z d dl m Z m!Z!m"Z"m#Z# d dl$T d dlmZ d dl$m%Z% d dl&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z- d dl.m/Z/m0Z0m1Z1m2Z2 d dl3m4Z4m5Z5m6Z6 d dl7m8Z8m9Z9m:Z:m;Z;m<Z<m=Z=m>Z> e<d� d d � Z?d d � Z@d d!� ZAd"d� ZBed#d$�ZCed#d%�ZDed#d&�ZEejF� ZGeGjHeC� d'd� ZIdaJdaKdaLed(d)�ZMed d*�aNed d+�ZOed d,�ZPeA� ZQG d-d� deR�ZSeS� ZTG d.d/� d/e �ZUG d0d� de/�ZVG d1d2� d2eVe4e5e6�ZWG d3d4� d4eR�ZXd dlYT d dl7ZZG d5d6� d6ej[j\�Z]d7d8� Z^G d9d:� d:�Z_d dl`Z`d dlajbZbd;d<� Zcejd� Zed=d>� ZfdCd@d�ZgehdAk�r.eg� dS )D� )�absolute_import�RunFaultServer�ClientConnectionHandler�get_host_database�send_alert_notification�ConnectionPool)�GObject�GLibN)�parse_config_setting� get_configZgeneralZi18n_text_domainZi18n_locale_dir� TZunicode)�domain� localedir)r r Zfallback)� ServerAccess)�PluginReportReceiver�SETroubleshootDatabase�TestPluginReportReceiver� AnalyzeThread)�*)r )�AuditRecordReceiver)� ProgramError�ERR_NOT_AUTHENTICATED�ERR_USER_LOOKUP�ERR_USER_PROHIBITED�ERR_USER_PERMISSION� ERR_FILE_OPEN�ERR_DATABASE_NOT_FOUND)� RpcChannel�ConnectionState�get_socket_list_from_config�ListeningServer)� SETroubleshootServerInterface�%SETroubleshootDatabaseNotifyInterface�SEAlertInterface)� get_hostname�make_database_filepath�!assure_file_ownership_permissions� get_identity�log_init� log_debug� syslog_trace�setroubleshootd_logc C s8 t d| � dd lj}| tjkr4t d� |j� d S d S )Nzreceived signal=%sr z reloading configuration file)r) �setroubleshoot.config�config�signal�SIGHUPZ config_init)�signum�framer- � r2 � /usr/lib/python3.6/server.py� sighandlerm s r4 c C s( t d| � tjtjd� tjd� d S )Nzreceived signal=%sz=/sys/fs/selinux/policy is in use by another process. Exiting!� )r) �syslog�LOG_ERR�os�_exit)r0 r1 r2 r2 r3 �polling_failed_handlerv s r: c C s0 dd l } t� }tj� }t| j � �}d|||f S )Nr z%s:%s:%s)�timer$ r8 �getpid�str)r; Zhostname�pidZstampr2 r2 r3 �make_instance_id} s r? c C s t S )N)� host_databaser2 r2 r2 r3 r � s Z system_dbusZbus_name� object_pathZ interfacec C sT t jjttd�}|j| j� |j| j� tj |� x t j d�D ]}|j | � q>W d S )N�alert�sealert) �dbusZlowlevelZ SignalMessage�dbus_system_object_path�dbus_system_interface�append�level�local_id� system_busZ send_message�connection_pool�clientsrB )�siginforB �clientr2 r2 r3 r � s ZemailZrecipients_filepath�pkg_name� pkg_version� rpc_versionc @ s8 e Zd Zdd� Zdd� Zdd� Zd dd �Zd d d �ZdS )r c C s i | _ d S )N)� client_pool)�selfr2 r2 r3 �__init__� s zConnectionPool.__init__c C s( || j krtd| � d S d | j |< d S )Nz.add_client: client (%s) already in client pool)rR r) )rS �handlerr2 r2 r3 � add_client� s zConnectionPool.add_clientc C s& || j krtd| � d S | j |= d S )Nz-remove_client: client (%s) not in client pool)rR r) )rS rU r2 r2 r3 � remove_client� s z ConnectionPool.remove_clientNc c s4 x.| j D ]$}|d kr |V q|j|kr|V qW d S )N)rR � channel_type)rS rX rN r2 r2 r3 rL � s zConnectionPool.clientsc C s& x | j D ]}|j|kr|j� qW d S )N)rR rX Zclose_connection)rS rX rN r2 r2 r3 � close_all� s zConnectionPool.close_all)N)N)�__name__� __module__� __qualname__rT rV rW rL rY r2 r2 r2 r3 r � s c s( e Zd Z� fdd�Z� fdd�Z� ZS )�AlertPluginReportReceiverc s t t| �j|� d S )N)�superr] rT )rS �database)� __class__r2 r3 rT � s z"AlertPluginReportReceiver.__init__c s^ t t| �j|�}td k r�g }xHtjD ]>}d|j }|j||j�}|dkr$td|j � |j |j� q$W t |�r�ddl m } |||� | jj� td� ddlm} tjtj|j� td�|j � x&|jjD ]}|jd kr�|jd } P q�W td d t ��rt j j |j � | t!d � xB|j"D ]8} | j#dd� dk�r2�q|j| j#�}|dk�r|S �qW t$|� |S )Nzemail:%s�ignorezEmail: siginfo.sig=%sr )� email_alertz sending alert to all clients)� html_to_textz1 For complete SELinux messages run: sealert -l %s�AVCr> r+ Zlog_full_report)Z OBJECT_PIDZSYSLOG_IDENTIFIER� zemail:)%r^ r] �report_problem�email_recipientsZrecipient_listZaddress�evaluate_filter_for_user� filter_typer) �sigrG �lenZsetroubleshoot.email_alertrb r_ Z mark_modifiedZsetroubleshoot.html_utilrc r6 r7 �summary�_rI � audit_event�records� record_type�fieldsr �bool�systemdZjournal�sendZ format_textrO Zusers�usernamer ) rS rM Zto_addrsZ recipientru �actionrb rc � audit_recordr> �u)r` r2 r3 rf � s< z(AlertPluginReportReceiver.report_problem)rZ r[ r\ rT rf � __classcell__r2 r2 )r` r3 r] � s r] c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )r c C s* t j| d� |j� | _| jjd| j� d S )NrC Zchanged)r rT �copy�socket_address�connection_stateZconnect�on_connection_state_change)rS r{ r2 r2 r3 rT � s z ClientConnectionHandler.__init__c C sT t d| jj||j|�|j|�| jf � |tj@ r<tj| � |tj@ rPtj | � d S )Nz]%s.on_connection_state_change: connection_state=%s flags_added=%s flags_removed=%s address=%s) r) r` rZ �flags_to_stringr{ r �OPENrK rW rV )rS r| �flags� flags_added� flags_removedr2 r2 r3 r} s ( z2ClientConnectionHandler.on_connection_state_changec C s8 | j jtj@ rdS || j_| j jtj� | j| j� d S )NT) r| r� r r r{ �socket�update� io_watch_add�handle_client_io)rS r� r{ r2 r2 r3 �open s z ClientConnectionHandler.openN)rZ r[ r\ rT r} r� r2 r2 r2 r3 r � s c @ s~ e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� Zd dd�Zd d � Zd S ) �&SetroubleshootdClientConnectionHandlerc C sJ t j| |� t� | _| jd| � | jd| � t� | _d | _d | _d | _ d S )NZSETroubleshootServerr ) r rT r r_ Zconnect_rpc_interfacer �accessru �uid�gid)rS r{ r2 r2 r3 rT s z/SetroubleshootdClientConnectionHandler.__init__c C s� t d| jj||j|�|j|�| jf � |tj@ r<tj| � |tj@ r�| j j | jj �\| _ | _ t d| jj| j | j f � tj| � d S )Nz]%s.on_connection_state_change: connection_state=%s flags_added=%s flags_removed=%s address=%szF%s.on_connection_state_change: open, socket credentials: uid=%s gid=%s)r) r` rZ r~ r{ r r rK rW r� Zget_credentialsr� r� r� rV )rS r| r� r� r� r2 r2 r3 r} ( s ( zASetroubleshootdClientConnectionHandler.on_connection_state_changec C s8 | j jtj@ rdS || j_| j jtj� | j| j� d S )NT) r| r� r r r{ r� r� r� r� )rS r� r{ r2 r2 r3 r� 3 s z+SetroubleshootdClientConnectionHandler.openc C sB | j jtj@ stt��t� }|jj|kr0|jgS tt d| ��d S )Nzdatabase (%s) not found) r| r� r � AUTHENTICATEDr r r � properties�namer )rS Z database_namer@ r2 r2 r3 � database_bind< s z4SetroubleshootdClientConnectionHandler.database_bindc C s� t d| ||f � |t| j�kr6ttd| j|f d��|dkrDd}nd }| jj||�s^tt��|| _|| _ || _ | j j |�| _ | j d kr�| j j|� | jjtj� ttgS )Nz logon(%s) type=%s username=%sz)uid=%s does not match logon username (%s))�detailrC rN )r) r' r� r r r� Z user_allowedr rX Z channel_nameru r_ Zget_user�userZadd_userr| r� r r� rP rQ )rS �typeru ZpasswordZ privileger2 r2 r3 �logonE s z,SetroubleshootdClientConnectionHandler.logonc C s | j jtj@ stt��tgS )N)r| r� r r� r r rg )rS r2 r2 r3 �query_email_recipients] s z=SetroubleshootdClientConnectionHandler.query_email_recipientsc C s4 t d| � | jjtj@ s"tt��|atjt � d S )Nzset_email_recipients: %s) r) r| r� r r� r r rg Zwrite_recipient_file�email_recipients_filepath)rS Z recipientsr2 r2 r3 �set_email_recipientsc s z;SetroubleshootdClientConnectionHandler.set_email_recipientsc C s2 t d| � | jjtj@ s"tt��| jj|�}d S )Nzdelete_signature: sig=%s) r) r| r� r r� r r r_ �delete_signature)rS rj rM r2 r2 r3 r� p s z7SetroubleshootdClientConnectionHandler.delete_signaturec C s. t d� | jjtj@ s tt��| jj� }|gS )N�get_properties) r) r| r� r r� r r r_ r� )rS r� r2 r2 r3 r� y s z5SetroubleshootdClientConnectionHandler.get_propertiesc C s: t d||f � | jjtj@ s&tt��| jj||�}|gS )Nz)evaluate_alert_filter: username=%s sig=%s) r) r| r� r r� r r r_ �evaluate_alert_filter)rS rj ru rv r2 r2 r3 r� � s z<SetroubleshootdClientConnectionHandler.evaluate_alert_filterc C s4 t d| � | jjtj@ s"tt��| jj|�}|gS )Nzlookup_local_id: %s) r) r| r� r r� r r r_ �lookup_local_id)rS rI rM r2 r2 r3 r� � s z6SetroubleshootdClientConnectionHandler.lookup_local_idc C s4 t d| � | jjtj@ s"tt��| jj|�}|gS )Nzquery_alerts: criteria=%s) r) r| r� r r� r r r_ � query_alerts)rS Zcriteria�sigsr2 r2 r3 r� � s z3SetroubleshootdClientConnectionHandler.query_alerts� c C sb t d|||f � | jjtj@ s(tt��|| jkrLttt d�| j|f d��| j j ||||� d S )Nz.set_filter: username=%s filter_type=%s sig= %sz)The user (%s) cannot modify data for (%s))r� ) r) r| r� r r� r r ru r rm r_ � set_filter)rS rj ru ri �datar2 r2 r3 r� � s z1SetroubleshootdClientConnectionHandler.set_filterc C s@ t d||||f � | jjtj@ s*tt��| jj||||� d S )Nz2set_user_data: username=%s item=%s data=%s sig= %s) r) r| r� r r� r r r_ � set_user_data)rS rj ru �itemr� r2 r2 r3 r� � s z4SetroubleshootdClientConnectionHandler.set_user_dataN)r� )rZ r[ r\ rT r} r� r� r� r� r� r� r� r� r� r� r� r� r2 r2 r2 r3 r� s r� c @ s e Zd Zdd� Zdd� ZdS )�ClientNotifierc C s || _ d S )N)rK )rS rK r2 r2 r3 rT � s zClientNotifier.__init__c C s& x | j jd�D ]}|j||� qW d S )NrC )rK rL �signatures_updated)rS r� r� rN r2 r2 r3 r� � s z!ClientNotifier.signatures_updatedN)rZ r[ r\ rT r� r2 r2 r2 r3 r� � s r� c @ sl e Zd Zd2dd�Zdd� Zejje�dd� �Z ejjedd �d d � �Z ejj e�d d � �Z ejj edddd�dd� �Z d3dd�Zejj edddd�dd� �Zejj edddd�d d � �Zejj edddd�d d � �Zd d!� Zejj eddd"d�d#d$� �Zejj eddd%d�d&d'� �Zejj eddd%d�d(d)� �Zejj eddd*�d+d,� �Zejj e�d-d.� �Zd4d/d0�Zd1S )5�SetroubleshootdDBusObject� c C s^ t jjj| t j� |� d| _|| _| j| j� td| � || _ || _ t t j �| _ t� | _d S )Nr zdbus __init__ %s called)rD �service�ObjectrT � SystemBus�conn_ctr�timeout�alarmr) �queue�receiverZAuditRecordReaderZ TEXT_FORMAT� record_readerr �record_receiver)rS rA �analysis_queue�alert_receiverr� r2 r2 r3 rT � s z"SetroubleshootdDBusObject.__init__c C s� y`t j� d }x4dt j� |f d| gD ]}tjj|�r(td��q(W t|�r^| jj || j f� W n4 tk r� } zt j t j t |�� W Y d d }~X nX d S )Nr5 z%%s%s/modules/active/disable_dontauditz,/var/lib/selinux/%s/active/disable_dontauditzsSetroubleshoot can not analyze AVCs while dontaudit rules are disabled, 'semodule -B' will turn on dontaudit rules.)�selinuxZselinux_getpolicytypeZ selinux_pathr8 �path�exists� ValueErrorZ verify_avcr� Zputr� r6 r7 r= )rS �avcZ policy_typeZ store_path�er2 r2 r3 �add� s z SetroubleshootdDBusObject.addc C s d S )Nr2 )rS �reasonr2 r2 r3 �restart� s z!SetroubleshootdDBusObject.restartZss)Z signaturec C s d S )Nr2 )rS rH rI r2 r2 r3 rB � s z SetroubleshootdDBusObject.alertc C s. | j d� | jd7 _td| j � td�S )Nr r5 z)dbus iface start() called: %d ConnectionsZStarted)r� r� r) rm )rS r2 r2 r3 �start� s z SetroubleshootdDBusObject.start�sender�sZii)Zsender_keyword� in_signature� out_signaturec C s� t | jj|��}t� }d}g }x2|jd�j� D ] }|j|�}|dkr.|j|� q.W |jt d� d} d} x8|D ]0}| d7 } |j dkr�| d7 } |j |krld} d} qlW | | fS )Nr� r ra )�keyr r5 �red) r' � connection� get_unix_userr r� �siginfosrh rG �sort� compare_sigrH rI ) rS Z last_seen_idr� ru r_ r� Z signaturesrj rv �countr� r2 r2 r3 � check_for_new� s& z'SetroubleshootdDBusObject.check_for_new�displayc C s~ t | jj|��}t� }tjjt|d ��}|jd�j }g }x>|D ]6} | j |k rPq@| j |�|kr@|j | j | j� | jf� q@W |S )Ni@B r )r' r� r� r �setroubleshoot�utilZ TimeStamp�floatr� �signature_list�last_seen_daterh rG rI rl � report_count) rS �sincer� � alert_actionru r_ Z since_alerts�database_alertsZalertsrB r2 r2 r3 �_get_all_alerts_since s z/SetroubleshootdDBusObject._get_all_alerts_since�tza(ssi)c C s | j ||�S )N)r� )rS r� r� r2 r2 r3 �get_all_alerts_since s z.SetroubleshootdDBusObject.get_all_alerts_sincer� c C s | j d|�S )a� Return array of *local_id*'s, *summary*'s, and *report_count*'s of all current alerts in a setroubleshoot database returns list of: * `local_id(s)`: a report id in a setroubleshoot database * `summary(s)`: a brief description of an alert. E.g. `"SELinux is preventing /usr/bin/bash from ioctl access on the unix_stream_socket unix_stream_socket."` * `report_count(i)`: count of reports of this alert r )r� )rS r� r2 r2 r3 �get_all_alerts s z(SetroubleshootdDBusObject.get_all_alertsc C s | j d|dd�S )a� Return array of *local_id*'s, *summary*'s, and *report_count*'s of all alerts which a user set to be ignored by a user returns list of: * `local_id(s)`: a report id in a setroubleshoot database * `summary(s)`: a brief description of an alert. E.g. `"SELinux is preventing /usr/bin/bash from ioctl access on the unix_stream_socket unix_stream_socket."` * `report_count(i)`: count of reports of this alert r ra )r� )r� )rS r� r2 r2 r3 �get_all_alerts_ignored( s z0SetroubleshootdDBusObject.get_all_alerts_ignoredc C sF y|j |�}W n& tk r4 } z |�W Y d d }~X nX |j� j� }|S )N)r� r r� �__next__)rS rI r_ r� r� rB r2 r2 r3 � _get_alert4 s z$SetroubleshootdDBusObject._get_alertzssiasa(ssssbbi)ttsc C s� t | jj|��}t� }| j||�}|j� |jj}dd� |D �}|j� \}} g } xZ| D ]R\} } | j |j | j || ��|j | j || ��|j | j || ��| j| j| j| jf� qVW |j|j� |j|| t|jjd��d t|jjd��d |jp�dfS )ar Return an alert with summary, audit events, fix suggestions ##### arguments * `local_id(s)`: an alert id ##### return values * `local_id(s)`: an alert id * `summary(s)`: a brief description of an alert. E.g. `"SELinux is preventing /usr/bin/bash from ioctl access on the unix_stream_socket unix_stream_socket."` * `report_count(i)`: count of reports of this alert * `audit_event(as)`: an array of audit events (AVC, SYSCALL) connected to the alert * `plugin_analysis(a(ssssbb)`: an array of plugin analysis structure * `if_text(s)`: * `then_text(s)` * `do_text(s)` * `analysis_id(s)`: plugin id. It can be used in `org.fedoraproject.SetroubleshootFixit.run_fix()` * `fixable(b)`: True when an alert is fixable by a plugin * `report_bug(b)`: True when an alert should be reported to bugzilla * `priority(i)`: An analysis priority. Typically the value is between 1 - 100. * `first_seen_date(t)`: when the alert was seen for the first time, number of microseconds since the Epoch * `last_seen_date(t)`: when the alert was seen for the last time, number of microseconds since the Epoch * `level(s)`: "green", "yellow" or "red" c S s g | ] }|j � �qS r2 )Zto_text)�.0Zeventr2 r2 r3 � <listcomp>^ s z7SetroubleshootdDBusObject.get_alert.<locals>.<listcomp>z%si@B r� )r' r� r� r r� Z%update_derived_template_substitutionsrn ro Z get_pluginsrG Z substituteZ get_if_textZ get_then_textZ get_do_textZ analysis_idZfixableZ report_bugZpriorityrI rl r� �intZfirst_seen_date�formatr� rH ) rS rI r� ru r_ rB r� Z audit_eventsZtotal_priorityZ alert_pluginsZpluginsZplugin�argsr2 r2 r3 � get_alert< s, z#SetroubleshootdDBusObject.get_alert�bc C sX yHt | jj|��}t� }| j||�}ddlm} |j|j||| d� dS dS dS )z� Sets a filter on an alert. The alert can be "always" filtered, "never" filtered or "after_first" filtered. ##### arguments * `local_id(s)`: an alert id * `filter_type(s)`: "always", "never", "after_first" ##### return values * `success(b)`: r )�map_filter_name_to_valueNTF) r' r� r� r r� �setroubleshoot.signaturer� r� rj )rS rI ri r� ru r_ rB r� r2 r2 r3 r� t s z$SetroubleshootdDBusObject.set_filterc C s2 y"t � }| j||�}|j|j� dS dS dS )zz Deletes an alert from the database. ##### arguments * `local_id(s)`: an alert id ##### return values * `success(b)`: TFN)r r� r� rj )rS rI r� r_ rB r2 r2 r3 � delete_alert� s z&SetroubleshootdDBusObject.delete_alert)r� r� c C s t |�}| jd� | jd7 _td|| jf � x^| jjt |��D ]J\}}}}}t|||||�}|j� x"| jj|�D ]}| j t |�� qxW qDW x\| jj d�D ]L}y| j t |�� W q� t k r� } zt j t jd| � W Y d d } ~ X q�X q�W | jd8 _| j| j� td�S )Nr r5 z#dbus avc(%s) called: %d Connectionsz Unable to add audit event: %srd )r= r� r� r) r� ZfeedZ AuditRecordZaudispd_rectifyr� r� rd �flushr� r6 r7 r� rm ) rS r� rp Zevent_idZ body_textrq Z line_numberrw rn r� r2 r2 r3 r� � s" ( z SetroubleshootdDBusObject.avcc C s, | j d8 _ td| j � | j| j� dS )Nr5 z*dbus iface finish() called: %d Connectionsr� )r� r) r� r� )rS r2 r2 r3 �finish� s z SetroubleshootdDBusObject.finishc C s | j dkrtj|� d S )Nr )r� r. r� )rS r� r2 r2 r3 r� � s z SetroubleshootdDBusObject.alarmN)r� )r� )r� )rZ r[ r\ rT r� rD r� r. rF r� rB �methodr� r� r� r� r� r� r� r� r� r� r� r� r� r2 r2 r2 r3 r� � s" 8 r� c C s | j S )N)r� )�ar2 r2 r3 r� � s r� c @ s e Zd Zdd� Zdd� ZdS )�SetroubleshootdDBusc C sd y&t dtttf � tt|||�| _W n8 tk r^ } z tjtjd| � |�W Y d d }~X nX d S )Nz=creating system dbus: bus_name=%s object_path=%s interface=%sz$cannot start system DBus service: %s) r) �dbus_system_bus_namerE rF r� �dbus_obj� Exceptionr6 r7 )rS r� r� r� r� r2 r2 r3 rT � s z SetroubleshootdDBus.__init__c C s | j jd� dS )Nzdaemon requestT)r� r� )rS r2 r2 r3 � do_restart� s z SetroubleshootdDBus.do_restartN)rZ r[ r\ rT r� r2 r2 r2 r3 r� � s r� c C s | j � tj� d S )N)�save� audit2whyr� )r_ r2 r2 r3 �goodbye� s r� c C s t d� tj� d S )Nz SIGALRM raised in RunFaultServer)r) � main_loop�quit)r0 r1 r2 r2 r3 � alarm_handler� s r� r� c C s� t j| � t j t jt� x�ytj� t jd� P W q tk rf } zdt|�krRw|�W Y d d }~X q tk r� } z dtt |dd��kr�w|�W Y d d }~X qX qW t j t jt � t j t j t � �yt jt� tt�}tdd�}t|�}t|dd� t||td �d �atj|� tjtt� d }x�tj j D ]�}tj t|j j �t|j j!�t|j j"�|j j#�\}}|tj$k�sx|tj%k�r,|tj$k�r�d } nd } t j t j&d|j'| f � d}tj(|j � �q,W |�r�tj)dd� tddt*��s�t+t�} nt,t�} dd l-} | j.j/j0d�a1t2t1| �} | j3d� | j4� ddl5m6} | � a7tt8dd� yt7j9t8� W n@ t:k �r� } z"|j;t<k�rxt=|j>� n|�W Y d d }~X nX t?d�}x |D ]}t@|tA�}|jB� �q�W tCjDjE� tFt1| | �}tGjH� W n� tIk �r } zt=d� W Y d d }~X n� tJk �r. } zt=d� W Y d d }~X nV tKk �r� } z8dd lL}tM|jN� � t j t j&d|jOjPt|�f � W Y d d }~X nX d S )Nr z%unable to open /sys/fs/selinux/policy� __context__r� r_ �filenamei� r� zAudit Listener)Z friendly_nameFZallowedz dontaudit'dz-Deleting alert %s, it is %s in current policyT)ZpruneZtest�analyze)�SEEmailRecipientSetZlisten_for_clientz#KeyboardInterrupt in RunFaultServerz$raising SystemExit in RunFaultServerzexception %s: %s)Qr. r� �SIGALRMr: r� Zinitr� r= � SystemError�getattrr� r/ r4 r6 ZopenlogrO r� rK r r% r& r rm r@ Z set_notify�atexit�registerr� r� r� r� rj ZscontextZtcontextZtclassr� ZALLOWZ DONTAUDITr7 rI r� r� rr r] r Zsix.moves.queueZmovesr� ZQueuer� r Z setDaemonr� r� r� rg r� Zparse_recipient_filer �errnor r) �strerrorr r r� r� rD ZglibZ init_threadsr� r� Zrun�KeyboardInterrupt� SystemExitr� � tracebackr* � format_excr` rZ )r� r� Zclient_notifierZdatabase_filenameZdatabase_filepathZdeleted�iZwhyZboolsr� r� ZsixZanalyze_threadr� Zlisten_addressesZlisten_addressZlistening_serverZsetroubleshootd_dbusr r2 r2 r3 r � s� 0 �__main__)r )r� )iZ __future__r �__all__Z gi.repositoryr r rD Z dbus.serviceZ dbus.glib�gettextr8 r. r� �sysr6 Zsystemd.journalrs r, r r r r �kwargs� version_infoZinstallZ translationZugettextrm �AttributeErrorZ setroubleshoot.access_controlr Zsetroubleshoot.analyzer r r r Zsetroubleshoot.avc_auditr Zsetroubleshoot.errcoder r r r r r r Zsetroubleshoot.rpcr r r r Z setroubleshoot.rpc_interfacesr! r" r# Zsetroubleshoot.utilr$ r% r& r' r( r) r* r4 r: r? r r� rE rF r� rJ Z request_namer r@ r� rg r� rO rP rQ Z instance_id�objectr rK r] r r� r� Zsetroubleshoot.audit_datar� r� r� r� r� r� r� Zselinux.audit2whyr� r� ZMainLoopr� r� r rZ r2 r2 r2 r3 �<module> s� $ $ 0
💾 Save Changes
❌ Cancel