Name	Size	Mode	Actions
bool.cpython-39.opt-1.pyc	2617	0644	editdlrm
bool.cpython-39.pyc	2617	0644	editdlrm
bounds.cpython-39.opt-1.pyc	3977	0644	editdlrm
bounds.cpython-39.pyc	3977	0644	editdlrm
commons.cpython-39.opt-1.pyc	2161	0644	editdlrm
commons.cpython-39.pyc	2161	0644	editdlrm
conditional.cpython-39.opt-1.pyc	1690	0644	editdlrm
conditional.cpython-39.pyc	1690	0644	editdlrm
constraints.cpython-39.opt-1.pyc	7304	0644	editdlrm
constraints.cpython-39.pyc	7581	0644	editdlrm
context.cpython-39.opt-1.pyc	1590	0644	editdlrm
context.cpython-39.pyc	1590	0644	editdlrm
default.cpython-39.opt-1.pyc	3402	0644	editdlrm
default.cpython-39.pyc	3402	0644	editdlrm
descriptors.cpython-39.opt-1.pyc	1230	0644	editdlrm
descriptors.cpython-39.pyc	1230	0644	editdlrm
difference.cpython-39.opt-1.pyc	5542	0644	editdlrm
difference.cpython-39.pyc	5706	0644	editdlrm
fsuse.cpython-39.opt-1.pyc	3052	0644	editdlrm
fsuse.cpython-39.pyc	3052	0644	editdlrm
genfscon.cpython-39.opt-1.pyc	3151	0644	editdlrm
genfscon.cpython-39.pyc	3151	0644	editdlrm
ibendportcon.cpython-39.opt-1.pyc	3169	0644	editdlrm
ibendportcon.cpython-39.pyc	3169	0644	editdlrm
ibpkeycon.cpython-39.opt-1.pyc	3143	0644	editdlrm
ibpkeycon.cpython-39.pyc	3143	0644	editdlrm
initsid.cpython-39.opt-1.pyc	2196	0644	editdlrm
initsid.cpython-39.pyc	2196	0644	editdlrm
mls.cpython-39.opt-1.pyc	9800	0644	editdlrm
mls.cpython-39.pyc	9800	0644	editdlrm
mlsrules.cpython-39.opt-1.pyc	3938	0644	editdlrm
mlsrules.cpython-39.pyc	4069	0644	editdlrm
netifcon.cpython-39.opt-1.pyc	3239	0644	editdlrm
netifcon.cpython-39.pyc	3239	0644	editdlrm
nodecon.cpython-39.opt-1.pyc	3051	0644	editdlrm
nodecon.cpython-39.pyc	3051	0644	editdlrm
objclass.cpython-39.opt-1.pyc	2971	0644	editdlrm
objclass.cpython-39.pyc	2971	0644	editdlrm
polcap.cpython-39.opt-1.pyc	1540	0644	editdlrm
polcap.cpython-39.pyc	1540	0644	editdlrm
portcon.cpython-39.opt-1.pyc	3084	0644	editdlrm
portcon.cpython-39.pyc	3084	0644	editdlrm
properties.cpython-39.opt-1.pyc	1704	0644	editdlrm
properties.cpython-39.pyc	1704	0644	editdlrm
rbacrules.cpython-39.opt-1.pyc	5447	0644	editdlrm
rbacrules.cpython-39.pyc	5622	0644	editdlrm
roles.cpython-39.opt-1.pyc	2895	0644	editdlrm
roles.cpython-39.pyc	2895	0644	editdlrm
terules.cpython-39.opt-1.pyc	15745	0644	editdlrm
terules.cpython-39.pyc	15745	0644	editdlrm
typeattr.cpython-39.opt-1.pyc	3058	0644	editdlrm
typeattr.cpython-39.pyc	3058	0644	editdlrm
types.cpython-39.opt-1.pyc	3694	0644	editdlrm
types.cpython-39.pyc	3694	0644	editdlrm
typing.cpython-39.opt-1.pyc	591	0644	editdlrm
typing.cpython-39.pyc	591	0644	editdlrm
users.cpython-39.opt-1.pyc	3722	0644	editdlrm
users.cpython-39.pyc	3722	0644	editdlrm
__init__.cpython-39.opt-1.pyc	2081	0644	editdlrm
__init__.cpython-39.pyc	2081	0644	editdlrm

a q�qe� �@s�dd
lm
Z

ddlmZmZmZmZ
ddlmZm Z m Z mZmZ
ddl mZ
ddlmZmZmZ
ddlmZ
dd lmZ
Gd d�de�ZGdd �d ee�ZdS)�)
�defaultdict)� FrozenSet�List�Optional�Union�)� AnyConstraint�ConstraintRuletype�Role�Type�User�
)
�DiffResultDescriptor)� Difference� SymbolWrapper�Wrapper)
�class_wrapper_factory)
�RuleListc@s�eZ
dZUd
Zed�
Zed�
Zed�
Zed�
Zed�
Z ed�
Z ed�
Zed�
ZdZ eeefed<dZeeefed<dd �
d d�Zdd �
dd �Zdd �
dd�Zdd �
dd�Zdd �
dd�Zdd �
dd�ZdS)�ConstraintsDifferencea� Determine the difference in constraints between two policies. Since the compiler does not union constraints, there may be multiple constraints with the same ruletype, object class, and permission set, so constraints can only be added or removed, not modified. The constraint expressions are compared only on a basic level. Expressions that are logically equivalent but are structurally different, for example, by associativity, will be considered different. Type and role attributes are also not expanded, so if there are changes to attribute members, it will not be reflected as a difference. �diff_constrains�diff_mlsconstrains�diff_validatetrans�diff_mlsvalidatetransN�_left_constraints�_right_constraints)
�returnc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_ |_ }
dS)zAGenerate the difference in constraint rules between the policies.zJGenerating constraint differences from {0.left_policy} to {0.right_policy}N�)Left constraints didn't load, this a bug.�*Right constraints didn't load, this a bug.c
ss|]}
t|
�
V
qdS�
N�
�ConstraintWrapper��.0�
c�r$�>/usr/lib64/python3.9/site-packages/setools/diff/constraints.py� ?�z8ConstraintsDifference.diff_constrains..c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&@r')�log�info�formatrr�_create_constrain_lists� _set_diffr Z constrain�added_constrains�removed_constrains��self�
_r$r$r%r2s
�



�z%ConstraintsDifference.diff_constrainsc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_ |_ }
dS)zEGenerate the difference in MLS constraint rules between the policies.zNGenerating MLS constraint differences from {0.left_policy} to {0.right_policy}Nrrc
ss|]}
t|
�
V
qdSrrr!r$r$r%r&Pr'z;ConstraintsDifference.diff_mlsconstrains..c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&Rr')r(r)r*rrr+r,r Zmlsconstrain�added_mlsconstrains�removed_mlsconstrainsr/r$r$r%rBs"

��



�
��z(ConstraintsDifference.diff_mlsconstrainsc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_ |_ }
dS)zDGenerate the difference in validatetrans rules between the policies.zMGenerating validatetrans differences from {0.left_policy} to {0.right_policy}Nrrc
ss|]}
t|
�
V
qdSrrr!r$r$r%r&cr'z;ConstraintsDifference.diff_validatetrans..c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&er')r(r)r*rrr+r,r Z validatetrans�added_validatetrans�removed_validatetransr/r$r$r%rUs"

��



�
��z(ConstraintsDifference.diff_validatetransc
Cs�|j�
d
�|�
�

|jdus&|jdur.|��
|jdu
s@Jd�
�
|jdu
sRJd�
�
|�dd�|jtjD�
dd�|jtjD�
�\|_ |_ }
dS)zHGenerate the difference in MLS validatetrans rules between the policies.zPGenerating mlsvalidatetrans differences from {0.left_policy} to {0.right_policy}Nrrc
ss|]}
t|
�
V
qdSrrr!r$r$r%r&vr'z>ConstraintsDifference.diff_mlsvalidatetrans..c
ss|]}
t|
�
V
qdSrrr!r$r$r%r&xr')r(r)r*rrr+r,r Zmlsvalidatetrans�added_mlsvalidatetrans�removed_mlsvalidatetransr/r$r$r%rhs"

��



�
��z+ConstraintsDifference.diff_mlsvalidatetransc
Cs�tt
�
|_|j�d
�|�
�

|j��D]}
|j|
j� |
�

q&|j� �D] \}}|j�d�t|�
|��

qHtt
�
|_|j�d�|�
�

|j ��D]}
|j|
j� |
�

q�|j� �D] \}}|j�d�t|�
|��

q�|j�d�

dS)z$Create rule lists for both policies.z.Building constraint lists from {0.left_policy}zLoaded {0} {1} rules.z/Building constraint lists from {0.right_policy}z)Completed building constraint rule lists.N)r�listrr(�debugr*Zleft_policy�constraints�ruletype�append�items�lenrZright_policy)r0�ruler;Zrulesr$r$r%r+~s







z-ConstraintsDifference._create_constrain_listsc

CsL|j�
d
�

d|_d|_d|_d|_d|_d|_d|_d|_ d|_ d|_dS)z%Reset diff results on policy changes.z%Resetting all constraints differencesN)r(r9r-r.r2r3r4r5r6r7rr�
r0r$r$r%�_reset_diff�s








z!ConstraintsDifference._reset_diff)�__name__� __module__�__qualname__�__doc__rr-r.r2r3r4r5r6r7rrr r�__annotations__rrrrrr+rAr$r$r$r%rs" 




rc@s<eZ
dZd
ZdZedd�dd�Zdd�Zd d �Zdd�Z dS) r z#Wrap constraints for diff purposes.�r;�tclass�perms�exprN)r?rcCs�|
|_|
j
|_
t|
j�
|_z|
j|_Wnty>


d|_Yn0t|
�
|_g|_|
j D]6}t |t�r�|j�td
d�|D�
�
�

qV|j�|�

qVdS)Nc
ss|]}
t|
�
V
qdSr)
r)r"�itemr$r$r%r&�r'z-ConstraintWrapper.__init__..) �originr;rrHrI�AttributeError�hash�keyrJZ expression� isinstance� frozensetr<)r0r?�opr$r$r%�__init__�s




 
zConstraintWrapper.__init__c


Cs|jSr�
rOr@r$r$r%�__hash__�s
zConstraintWrapper.__hash__cCs|j|
jkSrrT�r0�otherr$r$r%�__lt__�s
zConstraintWrapper.__lt__cCs0|j|
jko.|j
|
j
ko.|j|
jko.|j|
jkSrrGrVr$r$r%�__eq__�s

� � �zConstraintWrapper.__eq__) rBrCrDrE� __slots__rrSrUrXrYr$r$r$r%r �sr N)�collectionsr�typingrrrrZ policyreprr r rrZdescriptorsr� differencerrrZobjclassrrrr r$r$r$r%�s