/usr/lib/python2.7/dist-packages/setools/__init__.py is in python-setools 3.3.8-3ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 | #!/usr/bin/env python
# Author: Thomas Liu <tliu@redhat.com>
import _sesearch
import _seinfo
import types
TYPE = _seinfo.TYPE
ROLE = _seinfo.ROLE
ATTRIBUTE = _seinfo.ATTRIBUTE
PORT = _seinfo.PORT
USER = _seinfo.USER
ALLOW = 'allow'
AUDITALLOW = 'auditallow'
NEVERALLOW = 'neverallow'
DONTAUDIT = 'dontaudit'
SCONTEXT = 'scontext'
TCONTEXT = 'tcontext'
PERMS = 'permlist'
CLASS = 'class'
def sesearch(types, info):
valid_types = [ALLOW, AUDITALLOW, NEVERALLOW, DONTAUDIT]
for type in types:
if type not in valid_types:
raise ValueError("Type has to be in %s" % valid_types)
info[type] = True
perms = []
if PERMS in info:
perms = info[PERMS]
info[PERMS] = ",".join(info[PERMS])
dict_list = _sesearch.sesearch(info)
if dict_list and len(perms) != 0:
dict_list = filter(lambda x: dict_has_perms(x, perms), dict_list)
return dict_list
def dict_has_perms(dict, perms):
for perm in perms:
if perm not in dict[PERMS]:
return False
return True
def seinfo(setype, name=None):
dict_list = _seinfo.seinfo(setype, name)
return dict_list
|