blob: be6e8d0ffe01b0ef9d5bdbaac5c0b543bf85d9c1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
# Copyright 2014, 2016, Tresys Technology, LLC
#
# This file is part of SETools.
#
# SETools is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as
# published by the Free Software Foundation, either version 2.1 of
# the License, or (at your option) any later version.
#
# SETools is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with SETools. If not, see
# <http://www.gnu.org/licenses/>.
#
from . import exception
from . import symbol
from . import objclass
class PolicyRule(symbol.PolicySymbol):
"""This is base class for policy rules."""
extended = False
def __str__(self):
raise NotImplementedError
def __hash__(self):
try:
cond = self.conditional
cond_block = self.conditional_block
except exception.RuleNotConditional:
cond = None
cond_block = None
return hash("{0.ruletype}|{0.source}|{0.target}|{0.tclass}|{1}|{2}".format(
self, cond, cond_block))
@property
def ruletype(self):
"""The rule type for the rule."""
return self.qpol_symbol.rule_type(self.policy)
@property
def source(self):
"""
The source for the rule. This should be overridden by
subclasses.
"""
raise NotImplementedError
@property
def target(self):
"""
The target for the rule. This should be overridden by
subclasses.
"""
raise NotImplementedError
@property
def tclass(self):
"""The object class for the rule."""
return objclass.class_factory(self.policy, self.qpol_symbol.object_class(self.policy))
@property
def default(self):
"""
The default for the rule. This should be overridden by
subclasses.
"""
raise NotImplementedError
@property
def conditional(self):
"""The conditional expression for this rule."""
# Most rules cannot be conditional.
raise exception.RuleNotConditional
@property
def conditional_block(self):
"""The conditional block of the rule (T/F)"""
# Most rules cannot be conditional.
raise exception.RuleNotConditional
def expand(self):
"""Expand the rule into an equivalent set of rules without attributes."""
raise NotImplementedError
def statement(self):
return str(self)
|
