|
Server : Apache/2.2.2 (Fedora) System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686 User : apache ( 48) PHP Version : 5.2.9 Disable Function : NONE Directory : /proc/self/root/usr/lib/python2.4/site-packages/ |
Upload File : |
mò
iì†Dc @ s) d k Z d k Z d k Z d k Z d k Z d k Z d k Z d k Td k l Z l
Z
e i ƒ Z d k
Z
h Z e e d <e e d <e e d <e e d <e e d <e e d <e e d <e e d
<e e d <e e d <e e d
<e e d <e e d <e e d <e e d <e e d <y d k Z d f d „ ƒ YZ Wn d f d „ ƒ YZ n Xe ƒ Z d „ Z d d „ Z d d „ Z d f d „ ƒ YZ d f d „ ƒ YZ d e f d „ ƒ YZ d e f d! „ ƒ YZ d" e f d# „ ƒ YZ! d$ e f d% „ ƒ YZ" d& e f d' „ ƒ YZ# d( e f d) „ ƒ YZ$ d S(* N( t *( t _s N_t s all filess --s regular files -dt directorys -cs character devices -bs block devices -st sockets -ls
symbolic links -ps
named pipet loggerc B s/ t Z d „ Z d d d d d d d d „ Z RS( Nc C s t i ƒ | _ d S( N( t auditt
audit_opent selft audit_fd( R ( ( t, /usr/lib/python2.4/site-packages/seobject.pyt __init__5 s R c
C sK t i | i t i t i d | | d | | | | | | d d d | ƒ d S( Ni R ( R t audit_log_semanage_messageR R t AUDIT_USER_ROLE_CHANGEt syst argvt msgt namet senamet serolet seranget
old_senamet
old_serolet old_seranget success(
R R R R R R R R R R ( ( R
t log8 s ( t __name__t
__module__R R ( ( ( R
R 4 s c B s& t Z d d d d d d d d „ Z RS( NR c
C s | d j o
d }
n d }
|
d | | f 7}
| d j o |
d | 7}
n | d j o |
d | 7}
n | d j o |
d | 7}
n | d j o |
d | 7}
n | d j o | d j o |
d
| 7}
n | d j o | d j o |
d | 7}
n t i |
ƒ d S( Ni s Successful: s Failed: s %s name=%sR s sename=s old_sename=s role=s
old_role=s
MLSRange=s old_MLSRange=( R t messageR R R R R R R t NoneR t syslog( R R R R R R R R R R R ( ( R
R < s"
( R R R ( ( ( R
R ; s c C sf d } d } | d | d } | d | d } | d | d d | d } t i d | d
| ƒ S( Ns s[0-9]*s c[0-9]*s (\.s )?s (\,s )*s (-s (:t ^t $( t sensitivityt categoryt cat_ranget
categoriest regt ret searcht raw( R( R" R# R! R% R$ ( ( R
t validate_levelR s i c C s‚ | d j o d | } n | } t i | ƒ \ } } | d j o | Sn | o | i d ƒ } n | d j o | Sn | Sd S( Ni s a:b:c:%si s a:b:cR ( t prependR( t contextt selinuxt selinux_raw_to_trans_contextt rct transt strip( R( R* R+ R. R/ ( ( R
t translateZ s
c C s‚ | d j o d | } n | } t i | ƒ \ } } | d j o | Sn | o | i d ƒ } n | d j o | Sn | Sd S( Ni s a:b:c:%si s a:b:cR ( R* R/ R+ R, t selinux_trans_to_raw_contextR. R( R0 ( R/ R* R( R+ R. ( ( R
t untranslatei s
t setransRecordsc B sS t Z d „ Z d „ Z d „ Z d d „ Z d „ Z d „ Z d „ Z d „ Z RS(
Nc C s_ t p t t d ƒ ƒ ‚ n t i ƒ | _ y, t | i d ƒ } | i ƒ } | i ƒ Wn4 t j
o( } t t d ƒ | i | f ƒ ‚ n Xh | _ g | _ x· | D]¯ } t | ƒ d j o q¨ n | i ƒ } | d j p | d d j o | i i | ƒ q¨ n | i d ƒ } t | ƒ d j o | i i | ƒ q¨ n | d | i | d <q¨ Wd S(
Ns. translations not supported on non-MLS machinest rsA Unable to open %s: translations not supported on non-MLS machinesi R t #t =i i ( t is_mls_enabledt
ValueErrorR R, t selinux_translations_pathR t filenamet opent fdt readlinest translationst closet IOErrort et ddictt commentsR5 t lenR0 t it appendt split( R RB RF R? R5 R= ( ( R
R z s0 $ c C s | i S( N( R RC ( R ( ( R
t get_all” s c C sq d } x | i D] } | | d 7} q W| i i ƒ } | i ƒ x) | D]! } | d | | i | f 7} qH W| S( NR s
s %s=%s
( t recR RD t cRC t keyst sortt k( R RL RJ RK RN ( ( R
t out— s
i c C sX | o
d d GHn | i i ƒ } | i ƒ x$ | D] } d | | i | f GHq4 Wd S( Ns
%-25s %s
t Levelt Translations %-25s %s( RP RQ ( t headingR RC RL RM RN ( R RR RL RN ( ( R
t list¡ s
c C s¥ | i d ƒ d j o t t d ƒ | ƒ ‚ n t | ƒ d j o t t d ƒ | ƒ ‚ n | i i | ƒ o t t d ƒ | ƒ ‚ n | | i | <| i
ƒ d S( Nt i s) Translations can not contain spaces '%s' s Invalid Level '%s' s" %s already defined in translations( R/ t findR9 R R) R( R R RC t has_keyt save( R R( R/ ( ( R
t add© s
c C sx | i d ƒ d j o t t d ƒ | ƒ ‚ n | i i | ƒ o | | i | <n t t d ƒ | ƒ ‚ | i ƒ d S( NRT i s) Translations can not contain spaces '%s' s %s not defined in translations( R/ RU R9 R R RC RV R( RW ( R R( R/ ( ( R
t modify¶ s c C s | i i | ƒ | i ƒ d S( N( R RC t popR( RW ( R R( ( ( R
t deleteÀ s c C sO t i d | i ƒ \ } } | i | i ƒ ƒ | i ƒ t i
| | i ƒ d S( NR ( t tempfilet mkstempR R; R= t newfilenamet writeRO R@ t ost rename( R R= R^ ( ( R
RW Ä s
(
R R R RI RO RS RX RY R[ RW ( ( ( R
R4 y s
t semanageRecordsc B s t Z d „ Z RS( Nc C sÍ t ƒ | _ t | i ƒ | _ | i p# t | i ƒ t t d ƒ ƒ ‚ n t | i ƒ } | t
j o# t | i ƒ t t d ƒ ƒ ‚ n t | i ƒ } | d j o# t | i ƒ t t d ƒ ƒ ‚ n d S( Ns: SELinux policy is not managed or store cannot be accessed.s Cannot read policy store.i s' Could not establish semanage connection( t semanage_handle_createR t sht semanage_is_managedt semanagedt semanage_handle_destroyR9 R t semanage_access_checkR. t SEMANAGE_CAN_READt semanage_connect( R R. ( ( R
R Ë s
( R R R ( ( ( R
Rb Ê s t loginRecordsc B sG t Z d „ Z d „ Z d d d „ Z d „ Z d „ Z d d „ Z RS( Nc C s t i | ƒ d S( N( Rb R R ( R ( ( R
R Þ s c C s2 t d j o' | d j o
d } q4 t | ƒ } n | d j o
d } n yyt | i | ƒ \ } } | d j o t
t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t
t d ƒ | ƒ ‚ n | o t
t d ƒ | ƒ ‚ n y t i | ƒ Wn t
t d ƒ | ƒ ‚ n Xt | i ƒ \ } } | d j o t
t d
ƒ | ƒ ‚ n t | i | | ƒ } | d j o t
t d ƒ | ƒ ‚ n | d j o@ t | i | | ƒ } | d j o t
t d ƒ | ƒ ‚ qãn t | i | | ƒ } | d j o t
t d
ƒ | ƒ ‚ n t | i ƒ } | d j o t
t d ƒ ƒ ‚ n t | i | | ƒ } | d j o t
t d ƒ | ƒ ‚ n t | i ƒ } | d j o t
t d ƒ | ƒ ‚ n Wn7 t
j
o+ } t i d d | | d | ƒ | ‚ n Xt i d d | | d | ƒ t | ƒ t | ƒ d S( Ni R t s0t user_ui s Could not create a key for %ss2 Could not check if login mapping for %s is defineds' Login mapping for %s is already defineds Linux User %s does not exists% Could not create login mapping for %ss Could not set name for %ss Could not set MLS range for %ss! Could not set SELinux user for %ss$ Could not start semanage transactions" Could not add login mapping for %ss add SELinux user mapping( R8 R R3 R t semanage_seuser_key_createR Rd R R. RN R9 R t semanage_seuser_existst existst pwdt getpwnamt semanage_seuser_createt ut semanage_seuser_set_namet semanage_seuser_set_mlsranget semanage_seuser_set_senamet semanage_begin_transactiont semanage_seuser_modify_localt semanage_committ errort mylogR t semanage_seuser_key_freet semanage_seuser_free( R R R R Rp R. RN Rt R{ ( ( R
RX á s^
R c
C s´ d } d } y(| d j o# | d j o t t d ƒ ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | ƒ } t | ƒ } | d j o t | i | t | ƒ ƒ n | } | d j o t | i | | ƒ n | } t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ | ƒ ‚ n Wn@ t j
o4 }
t i d d
| | d | | d | ƒ |
‚ n Xt i d d
| | d | | d | ƒ t | ƒ t | ƒ d S( NR s Requires seuser or serangei s Could not create a key for %ss2 Could not check if login mapping for %s is defineds# Login mapping for %s is not defineds Could not query seuser for %ss$ Could not start semanage transactions% Could not modify login mapping for %ss modify selinux user mappingi ( t oldsenamet
oldserangeR R R9 R Rn R Rd R R. RN Ro Rp t semanage_seuser_queryRt t semanage_seuser_get_mlsranget semanage_seuser_get_senameRv R3 Rw Rx Ry Rz R{ R| R R} R~ ( R R R R Rp R€ R. R RN Rt R{ ( ( R
RY sN
% %
c C sö y¤t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t
| i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | ƒ } | d j o t t d ƒ | ƒ ‚ n t
| i ƒ } | d j o t t d ƒ | ƒ ‚ n Wn. t j
o" } t i d d | ƒ | ‚ n Xt i d d | ƒ t | ƒ d S(
Ni s Could not create a key for %ss2 Could not check if login mapping for %s is defineds# Login mapping for %s is not defineds< Login mapping for %s is defined in policy, cannot be deleteds$ Could not start semanage transactions% Could not delete login mapping for %ss delete SELinux user mappingi ( Rn R Rd R R. RN R9 R Ro Rp t semanage_seuser_exists_localRx t semanage_seuser_del_localRz R{ R| R R} ( R R Rp RN R{ R. ( ( R
R[ S s8
c C s h } t | i ƒ \ } | _ | d j o t t d ƒ ƒ ‚ n x9 | i D]. } t | ƒ } t | ƒ t | ƒ f | | <qK W| S( Ni s Could not list login mappings(
RC t semanage_seuser_listR Rd R. t ulistR9 R Rt t semanage_seuser_get_nameR Rƒ R‚ ( R RC R Rt R. ( ( R
RI z s
i c C sÀ | i ƒ } | i ƒ } | i ƒ t d j oQ | o
d d
GHn xv | D]. } d | | | d t | | d ƒ f GHqJ Wn= | o
d d GHn x% | D] } d | | | d f GHq› Wd S( Ni s
%-25s %-25s %-25s
s
Login Names SELinux Users
MLS/MCS Ranges %-25s %-25s %-25si s
%-25s %-25s
s %-25s %-25s( s
Login Names SELinux Users
MLS/MCS Range( s
Login Names SELinux User( R RI RC RL RM R8 RR RN R1 ( R RR RC RL RN ( ( R
RS … s
0
( R R R RX RY R[ RI RS ( ( ( R
Rk Ý s >4 ' t seluserRecordsc B sM t Z d „ Z d „ Z g d d d d „ Z d „ Z d „ Z d d „ Z RS( Nc C s t i | ƒ d S( N( Rb R R ( R ( ( R
R • s c C sð t d j oJ | d j o
d } n
t | ƒ } | d j o
d } qW t | ƒ } n d i | ƒ } y t | i | ƒ \ } }
| d j o t
t d ƒ | ƒ ‚ n t | i |
ƒ \ } } | d j o t
t d ƒ | ƒ ‚ n | o t
t d ƒ | ƒ ‚ n t | i ƒ \ } } | d j o t
t d ƒ | ƒ ‚ n t | i | | ƒ } | d j o t
t d
ƒ | ƒ ‚ n xP | D]H } t | i | | ƒ } | d j o t
t d ƒ | | f ƒ ‚ q‡q‡Wt d j o| t | i | | ƒ } | d j o t
t d ƒ | ƒ ‚ n t | i | | ƒ } | d j o t
t d
ƒ | ƒ ‚ q\n t | i | | ƒ } | d j o t
t d ƒ | | f ƒ ‚ n t | i | ƒ \ } } | d j o t
t d ƒ | ƒ ‚ n t | i ƒ } | d j o t
t d ƒ ƒ ‚ n t | i |
| ƒ } | d j o t
t d ƒ | ƒ ‚ n t | i ƒ } | d j o t
t d ƒ | ƒ ‚ n Wn7 t
j
o+ }
t i! d d | | | | ƒ |
‚ n Xt i! d d | | | | ƒ t" |
ƒ t# | ƒ d S( Ni R Rl RT i s Could not create a key for %ss- Could not check if SELinux user %s is defineds" SELinux user %s is already defineds$ Could not create SELinux user for %ss Could not set name for %ss Could not add role %s for %ss Could not set MLS range for %ss Could not set MLS level for %ss Could not add prefix %s for %ss Could not extract key for %ss$ Could not start semanage transactions Could not add SELinux user %ss add SELinux user record($ R8 R R3 t selevelt joint rolest serolest semanage_user_key_createR Rd R R. RN R9 R t semanage_user_existsRp t semanage_user_createRt t semanage_user_set_nameR5 t semanage_user_add_rolet semanage_user_set_mlsranget semanage_user_set_mlslevelt semanage_user_set_prefixt prefixt semanage_user_key_extractt keyRx t semanage_user_modify_localRz R{ R| R t semanage_user_key_freet semanage_user_free( R R RŒ RŠ R R– Rp R. R˜ R RN R5 Rt R{ ( ( R
RX ˜ sp
$
R c
C s™ d } t i | d ƒ } y| d j of t | ƒ d j oS | d j oF | d j o9 t d j o t
t d ƒ ƒ ‚ qŽ t
t d ƒ ƒ ‚ n t | i | ƒ \ } }
| d j o t
t d ƒ | ƒ ‚ n t | i |
ƒ \ } } | d j o t
t d ƒ | ƒ ‚ n | p t
t d ƒ | ƒ ‚ n t | i |
ƒ \ } } | d j o t
t d
ƒ | ƒ ‚ n t | ƒ } t | i | ƒ \ } } | d j o t i | d ƒ } n | d | } | d j o t | i | t | ƒ ƒ n | d j o t | i | t | ƒ ƒ n | d j o t | i | | ƒ n t | ƒ d j o( x% | D] }
t | i | |
ƒ qSWn t | i ƒ } | d j o t
t d ƒ ƒ ‚ n t! | i |
| ƒ } | d j o t
t d ƒ | ƒ ‚ n t" | i ƒ } | d j o t
t d ƒ | ƒ ‚ n Wn@ t
j
o4 } t$ i% d d
| d | | d | | ƒ | ‚ n Xt$ i% d d
| d | | d | | ƒ t& |
ƒ t' | ƒ d S( NR RT i i s& Requires prefix, roles, level or ranges Requires prefix or roless Could not create a key for %ss- Could not check if SELinux user %s is defineds SELinux user %s is not defineds Could not query user for %ss$ Could not start semanage transactions Could not modify SELinux user %ss modify SELinux user record(( t oldrolest stringR‹ RŒ t newrolesR– RE R RŠ R8 R9 R RŽ R Rd R R. RN R Rp t semanage_user_queryRt t semanage_user_get_mlsrangeR€ t semanage_user_get_rolest rlistR“ R3 R” R• R5 R’ Rx R™ Rz R{ R| R Rš R› ( R R RŒ RŠ R R– Rp R€ R. R¢ RN Rž Rœ R5 Rt R{ ( ( R
RY á s` :
% %
c C sö y¤t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t
| i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | ƒ } | d j o t t d ƒ | ƒ ‚ n t
| i ƒ } | d j o t t d ƒ | ƒ ‚ n Wn. t j
o" } t i d d | ƒ | ‚ n Xt i d d | ƒ t | ƒ d S(
Ni s Could not create a key for %ss- Could not check if SELinux user %s is defineds SELinux user %s is not defineds7 SELinux user %s is defined in policy, cannot be deleteds$ Could not start semanage transactions Could not delete SELinux user %ss delete SELinux user recordi ( RŽ R Rd R R. RN R9 R R Rp t semanage_user_exists_localRx t semanage_user_del_localRz R{ R| R Rš ( R R Rp RN R{ R. ( ( R
R[ ! s8
c C sä h } t | i ƒ \ } | _ | d j o t t d ƒ ƒ ‚ n xœ | i D]‘ } t | ƒ } t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t
i | d ƒ } t | ƒ t | ƒ t | ƒ | f | t | ƒ <qK W| S( Ni s Could not list SELinux userss Could not list roles for user %sRT ( RC t semanage_user_listR Rd R. R‡ R9 R Rt t semanage_user_get_nameR R¡ R¢ R R‹ RŒ t semanage_user_get_prefixt semanage_user_get_mlslevelR ( R RC R¢ R RŒ Rt R. ( ( R
RI E s
2i c C så | i ƒ } | i ƒ } | i ƒ t d j ov | o d d GHd d GHn x’ | D]J } d | | | d
t | | d ƒ t | | d ƒ | | d f GHqS Wn= | o
d d GHn x% | D] } d | | | d f GHqÀ Wd S( Ni s
%-15s %-10s %-10s %-30sR t Labelings MLS/s %-15s %-10s %-10s %-30s %s
s SELinux Usert Prefixs MCS Levels MCS Ranges
SELinux Roless %-15s %-10s %-10s %-30s %si i i s %-15s %s
s %-15s %s( R R© s MLS/s MLS/( s SELinux UserRª s MCS Levels MCS Ranges
SELinux Roles( s SELinux Users
SELinux Roles( R RI RC RL RM R8 RR RN R1 ( R RR RC RL RN ( ( R
RS V s
L
( R R R RX RY R[ RI RS ( ( ( R
R‰ ” s I@ $ t portRecordsc B sS t Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d d „ Z RS(
Nc C s t i | ƒ d S( N( Rb R R ( R ( ( R
R g s c C s | d j o
t } n* | d j o
t } n t t d ƒ ƒ ‚ | d j o t t d ƒ ƒ ‚ n | i d ƒ } t | ƒ d j o t
| d ƒ } } n! t
| d ƒ } t
| d ƒ } t
| i | | | ƒ \ } } | d j o t t d ƒ | | f ƒ ‚ n | | | | f S(
Nt tcpt udps Protocol udp or tcp is requiredR s Port is requiredt -i i s Could not create a key for %s/%s( t protot SEMANAGE_PROTO_TCPt proto_dt SEMANAGE_PROTO_UDPR9 R t portRH t portsRE t intt hight lowt semanage_port_key_createR Rd R. RN ( R R³ R¯ R± R¶ R· R. RN R´ ( ( R
t __genkeyj s
c
C s¯ t d j o' | d j o
d } q4 t | ƒ } n | d j o t t d ƒ ƒ ‚ n | i | | ƒ \ }
} } } t | i |
ƒ \ } } | d j o t t d ƒ | | f ƒ ‚ n | o t t d ƒ | | f ƒ ‚ n t | i ƒ \ } } | d j o t t d ƒ | | f ƒ ‚ n t | | ƒ t | | | ƒ t | i ƒ \ } } | d j o t t d ƒ | | f ƒ ‚ n t | i | d
ƒ } | d j o t t d ƒ | | f ƒ ‚ n t | i | d ƒ } | d j o t t d
ƒ | | f ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | | f ƒ ‚ n | d j oF t | i | | ƒ } | d j o t t d ƒ | | f ƒ ‚ q›n t | i | | ƒ } | d j o t t d ƒ | | f ƒ ‚ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i |
| ƒ } | d j o t t d ƒ | | f ƒ ‚ n t | i ƒ } | d j o t t d ƒ | | f ƒ ‚ n t | ƒ t! |
ƒ t" | ƒ d S( Ni R Rl s Type is requiredi s( Could not check if port %s/%s is defineds Port %s/%s already defineds Could not create port for %s/%ss" Could not create context for %s/%st system_us, Could not set user in port context for %s/%st object_rs, Could not set role in port context for %s/%ss, Could not set type in port context for %s/%ss2 Could not set mls fields in port context for %s/%ss$ Could not set port context for %s/%ss$ Could not start semanage transactions Could not add port %s/%s(# R8 R R3 t typeR9 R R t _portRecords__genkeyR³ R¯ RN R± R· R¶ t semanage_port_existsRd R. Rp t semanage_port_createt pt semanage_port_set_protot semanage_port_set_ranget semanage_context_createt cont semanage_context_set_usert semanage_context_set_rolet semanage_context_set_typet semanage_context_set_mlst semanage_port_set_conRx t semanage_port_modify_localRz t semanage_context_freet semanage_port_key_freet semanage_port_free(
R R³ R¯ R R¼ Rp R± R¶ R· R. RN RÀ RÄ ( ( R
RX s`
$
c
C sD | d j oF | d j o9 t d j o t t d ƒ ƒ ‚ qS t t d ƒ ƒ ‚ n | i | | ƒ \ }
} } } t
| i |
ƒ \ } } | d j o t t d ƒ | | f ƒ ‚ n | p t t d ƒ | | f ƒ ‚ n t | i |
ƒ \ } } | d j o t t d ƒ | | f ƒ ‚ n t | ƒ } | d j o t | i | t | ƒ ƒ n | d j o t | i | | ƒ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i |
| ƒ } | d j o t t d
ƒ | | f ƒ ‚ n t | i ƒ } | d j o t t d
ƒ | | f ƒ ‚ n t |
ƒ t | ƒ d S( NR i s Requires setype or seranges Requires setypei s( Could not check if port %s/%s is defineds Port %s/%s is not defineds Could not query port %s/%ss$ Could not start semanage transactions Could not modify port %s/%s( R t setypeR8 R9 R R R½ R³ R¯ RN R± R· R¶ R¾ Rd R. Rp t semanage_port_queryRÀ t semanage_port_get_conRÄ RÈ R3 RÇ Rx RÊ Rz RÌ RÍ (
R R³ R¯ R RÎ Rp R± R¶ R· R. RN RÀ RÄ ( ( R
RY Â s:
c C s± | i | | ƒ \ } } } } t | i | ƒ \ } } | d j o t t
d ƒ | | f ƒ ‚ n | p t t
d ƒ | | f ƒ ‚ n t | i | ƒ \ } } | d j o t t
d ƒ | | f ƒ ‚ n | p t t
d ƒ | | f ƒ ‚ n t | i ƒ } | d j o t t
d ƒ ƒ ‚ n t | i | ƒ } | d j o t t
d ƒ | | f ƒ ‚ n t | i ƒ } | d j o t t
d ƒ | | f ƒ ‚ n t | ƒ d S( Ni s( Could not check if port %s/%s is defineds Port %s/%s is not defineds2 Port %s/%s is defined in policy, cannot be deleteds$ Could not start semanage transactions Could not delete port %s/%s( R R½ R³ R¯ RN R± R· R¶ R¾ Rd R. Rp R9 R t semanage_port_exists_localRx t semanage_port_del_localRz RÌ ( R R³ R¯ Rp R± RN R¶ R· R. ( ( R
R[ ë s*
c C sÚ h } t | i ƒ \ } | _ | d j o t t d ƒ ƒ ‚ n x’ | i D]‡ } t | ƒ }
t |
ƒ } | d j o qK n t
|
ƒ } t | ƒ } t | ƒ } t | ƒ } t | ƒ } | | | f | | | f <qK W| S( Ni s Could not list portst reserved_port_t( RC t semanage_port_listR Rd R. t plistR9 R R³ RÐ RÄ t semanage_context_get_typet ctypet semanage_context_get_mlst levelt semanage_port_get_protoR¯ t semanage_port_get_proto_strt proto_strt semanage_port_get_lowR· t semanage_port_get_highR¶ ( R RC R¶ RÙ R¯ R× R³ R· R. RÜ RÄ ( ( R
RI s"
c
C s/ h } t | i ƒ \ } | _ | d j o t t d ƒ ƒ ‚ n xç | i D]Ü } t | ƒ } t | ƒ } | d j o qK n t
| ƒ } t | ƒ } t | ƒ } t | ƒ } | | f | i ƒ j o g | | | f <n | | j o | | | f i d | ƒ qK | | | f i d | | f ƒ qK W| S( Ni s Could not list portsRÓ s %ds %d-%d( RC RÔ R Rd R. RÕ R9 R R³ RÐ RÄ RÖ R× RÚ R¯ RÛ RÜ RÝ R· RÞ R¶ RL RG (
R RC R¶ R¯ R× R³ R· R. RÜ RÄ ( ( R
t get_all_by_type s(
%i c C s— | o
d d
GHn | i ƒ } | i ƒ } | i ƒ xZ | D]R } d | } | d | | d 7} x$ | | d D] } | d | 7} qr W| GHq= Wd S( Ns %-30s %-8s %s
s SELinux Port Typet Protos Port Numbers %-30s %-8s s %si i s , %s( s SELinux Port TypeRà s Port Number( RR R Rß RC RL RM RF RJ RÀ ( R RR RC RÀ RL RF RJ ( ( R
RS 1 s
(
R R R R½ RX RY R[ RI Rß RS ( ( ( R
R« f s A ) t interfaceRecordsc B sA t Z d „ Z d „ Z d „ Z d „ Z d „ Z d d „ Z RS( Nc C s t i | ƒ d S( N( Rb R R ( R ( ( R
R ? s c C s t d j o' | d j o
d } q4 t | ƒ } n | d j o t t d ƒ ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | o t t d ƒ | ƒ ‚ n t | i ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | | ƒ } t | i ƒ \ } } | d j o t t d
ƒ | ƒ ‚ n t | i | d ƒ } | d j o t t d ƒ | ƒ ‚ n t | i | d
ƒ } | d j o t t d ƒ | ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n | d j o@ t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ q„n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ | ƒ ‚ n t | ƒ t | ƒ t | ƒ d S( Ni R Rl s SELinux Type is requiredi s Could not create key for %ss* Could not check if interface %s is defineds Interface %s already defineds! Could not create interface for %ss Could not create context for %sRº s. Could not set user in interface context for %sR» s. Could not set role in interface context for %ss. Could not set type in interface context for %ss4 Could not set mls fields in interface context for %ss& Could not set interface context for %ss$ Could not set message context for %ss$ Could not start semanage transactions Could not add interface %s( R8 R R3 R× R9 R t semanage_iface_key_createR Rd t interfaceR. RN t semanage_iface_existsRp t semanage_iface_createt ifacet semanage_iface_set_nameRÃ RÄ RÅ RÆ RÇ RÈ t semanage_iface_set_ifcont semanage_iface_set_msgconRx t semanage_iface_modify_localRz RË t semanage_iface_key_freet semanage_iface_free( R Rã R R× Rp Ræ R. RN RÄ ( ( R
RX B sh
c C s$ | d j o# | d j o t t d ƒ ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t
| i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | ƒ } | d j o t | i | t | ƒ ƒ n | d j o t | i | | ƒ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ | ƒ ‚ n t | ƒ t | ƒ d S(
NR s Requires setype or serangei s Could not create key for %ss* Could not check if interface %s is defineds Interface %s is not defineds Could not query interface %ss$ Could not start semanage transactions Could not modify interface %s( R RÎ R9 R Râ R Rd Rã R. RN Rä Rp t semanage_iface_queryRæ t semanage_iface_get_ifconRÄ RÈ R3 RÇ Rx Rê Rz Rë Rì ( R Rã R RÎ Rp Ræ R. RN RÄ ( ( R
RY ˆ s:
c C s® t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t
| i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | ƒ } | d j o t t d ƒ | ƒ ‚ n t
| i ƒ } | d j o t t d ƒ | ƒ ‚ n t | ƒ d S( Ni s Could not create key for %ss* Could not check if interface %s is defineds Interface %s is not defineds4 Interface %s is defined in policy, cannot be deleteds$ Could not start semanage transactions Could not delete interface %s( Râ R Rd Rã R. RN R9 R Rä Rp t semanage_iface_exists_localRx t semanage_iface_del_localRz Rë ( R Rã Rp R. RN ( ( R
R[ ° s.
c C s™ h } t | i ƒ \ } | _ | d j o t t d ƒ ƒ ‚ n xQ | i D]F } t | ƒ } t | ƒ t | ƒ t
| ƒ t | ƒ f | t | ƒ <qK W| S( Ni s Could not list interfaces( RC t semanage_iface_listR Rd R. t ilistR9 R Rã Rî RÄ t semanage_context_get_usert semanage_context_get_roleRÖ RØ t semanage_iface_get_name( R RC R. Rã RÄ ( ( R
RI Ï s
8i c C sÕ | o
d d
GHn | i ƒ } | i ƒ } | i ƒ t oV x‘ | D]G } d | | | d | | d | | d t | | d t ƒ f GHqD Wn? x; | D]3 } d | | | d | | d | | d f GHqš Wd S( Ns %-30s %s
s SELinux Interfacet Contexts %-30s %s:%s:%s:%s i i i i s %-30s %s:%s:%s ( s SELinux InterfaceRö (
RR R RI RC RL RM R8 RN R1 t False( R RR RC RL RN ( ( R
RS Û s
I ( R R R RX RY R[ RI RS ( ( ( R
Rá > s F ( t fcontextRecordsc B sJ t Z d „ Z d d d d „ Z d „ Z d „ Z d „ Z d d „ Z RS(
Nc C s t i | ƒ d S( N( Rb R R ( R ( ( R
R é s R Rº c C sµ | d j o
d } n t d j o' | d j o
d } qK t | ƒ } n | d j o t t d ƒ ƒ ‚ n t | i | t | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | o t t d ƒ | ƒ ‚ n t | i ƒ \ } } | d j o t t d
ƒ | ƒ ‚ n t | i | | ƒ } t | i ƒ \ } }
| d j o t t d ƒ | ƒ ‚ n t | i |
| ƒ } | d j o t t d ƒ | ƒ ‚ n t | i |
d
ƒ } | d j o t t d ƒ | ƒ ‚ n t | i |
| ƒ } | d j o t t d ƒ | ƒ ‚ n | d j o@ t | i |
| ƒ } | d j o t t d ƒ | ƒ ‚ q¢n t | t | ƒ t | i | |
ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ | ƒ ‚ n t |
ƒ t | ƒ t! | ƒ d S( NR Rº i Rl s SELinux Type is requiredi s Could not create key for %ss1 Could not check if file context for %s is defineds# File context for %s already defineds$ Could not create file context for %ss Could not create context for %ss) Could not set user in file context for %sR» s) Could not set role in file context for %ss) Could not set type in file context for %ss/ Could not set mls fields in file context for %ss! Could not set file context for %ss$ Could not start semanage transactions! Could not add file context for %s(" t seuserR8 R R3 R¼ R9 R t semanage_fcontext_key_createR Rd t targett
file_typest ftypeR. RN t semanage_fcontext_existsRp t semanage_fcontext_createt fcontextt semanage_fcontext_set_exprRÃ RÄ RÅ RÆ RÇ RÈ t semanage_fcontext_set_typet semanage_fcontext_set_conRx t semanage_fcontext_modify_localRz RË t semanage_fcontext_key_freet semanage_fcontext_free( R Rû R¼ Rý R Rù Rp R R. RN RÄ ( ( R
RX ì sh
c C s\ | d j o0 | d j o# | d j o t t d ƒ ƒ ‚ n t | i | t | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t
| i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | ƒ }
| d j o t | i |
t | ƒ ƒ n | d j o t | i |
| ƒ n | d j o t | i |
| ƒ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ | ƒ ‚ n t | ƒ t | ƒ d S(
NR s" Requires setype, serange or seuseri s Could not create a key for %ss1 Could not check if file context for %s is defineds" File context for %s is not defineds# Could not query file context for %ss$ Could not start semanage transactions$ Could not modify file context for %s( R RÎ Rù R9 R Rú R Rd Rû Rü Rý R. RN Rþ Rp t semanage_fcontext_queryR t semanage_fcontext_get_conRÄ RÈ R3 RÅ RÇ Rx R Rz R R ( R Rû RÎ Rý R Rù Rp R R. RN RÄ ( ( R
RY 2 s> '
c C sµ t | i | t | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t
| i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t
| i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ | ƒ ‚ n t | ƒ d S( Ni s Could not create a key for %ss1 Could not check if file context for %s is defineds" File context for %s is not defineds; File context for %s is defined in policy, cannot be deleteds$ Could not start semanage transactions$ Could not delete file context for %s( Rú R Rd Rû Rü Rý R. RN R9 R Rþ Rp t semanage_fcontext_exists_localRx t semanage_fcontext_del_localRz R ( R Rû Rý Rp RN R. ( ( R
R[ \ s.
c C sá g } t | i ƒ \ } | _ | d j o t t d ƒ ƒ ‚ n x™ | i D]Ž } t | ƒ } t | ƒ } t
| ƒ } t | ƒ } | o; | i | | t | ƒ t | ƒ t | ƒ t | ƒ f ƒ qK | i | | | f ƒ qK W| S( Ni s Could not list file contexts( t lt semanage_fcontext_listR Rd R. t flistR9 R R t semanage_fcontext_get_exprt exprt semanage_fcontext_get_typeRý t semanage_fcontext_get_type_strt ftype_strR RÄ RG Ró Rô RÖ RØ ( R R R R R Rý R. RÄ ( ( R
RI { s
;i c
C sÖ | o
d d GHn | i ƒ } x¯ | D]§ } t | ƒ d j ow t o@ d | d | d | d | d | d
t | d t ƒ f GHqÎ d | d | d | d | d | d
f GHq' d
| d | d f GHq' Wd S( Ns %-50s %-18s %s
s SELinux fcontextR¼ Rö i s %-50s %-18s %s:%s:%s:%s i i i i i s %-50s %-18s %s:%s:%s s %-50s %-18s <<None>>( s SELinux fcontexts types Context( RR R RI t fcon_listt fconRE R8 R1 R÷ ( R RR R R ( ( R
RS s
@0( R R R RX RY R[ RI RS ( ( ( R
Rø è s F * t booleanRecordsc B s; t Z d „ Z d d „ Z d „ Z d „ Z d d „ Z RS( Nc C s t i | ƒ d S( N( Rb R R ( R ( ( R
R › s R c C sç | d j o t t d ƒ ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | d j o t
| ƒ } t | | ƒ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | | ƒ } | d j o t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ | ƒ ‚ n t | ƒ t | ƒ d S(
NR s Requires valuei s Could not create a key for %ss( Could not check if boolean %s is defineds Boolean %s is not defineds Could not query file context %ss$ Could not start semanage transactions Could not modify boolean %s( t valueR9 R t semanage_bool_key_createR Rd R R. RN t semanage_bool_existsRp t semanage_bool_queryt bRµ t nvaluet semanage_bool_set_valueRx t semanage_bool_modify_localRz t semanage_bool_key_freet semanage_bool_free( R R R R Rp R R. RN ( ( R
RY ž s6
c C s® t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n t | i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t
| i | ƒ \ } } | d j o t t d ƒ | ƒ ‚ n | p t t d ƒ | ƒ ‚ n t | i ƒ } | d j o t t d ƒ ƒ ‚ n t | i | ƒ } | d j o t t d ƒ | ƒ ‚ n t
| i ƒ } | d j o t t d ƒ | ƒ ‚ n t | ƒ d S( Ni s Could not create a key for %ss( Could not check if boolean %s is defineds Boolean %s is not defineds2 Boolean %s is defined in policy, cannot be deleteds$ Could not start semanage transactions Could not delete boolean %s( R R Rd R R. RN R9 R R Rp t semanage_bool_exists_localRx R
Rz R ( R R Rp RN R. ( ( R
R[ Ã s.
c C s{ h } t | i ƒ \ } | _ | d j o t t d ƒ ƒ ‚ n x3 | i D]( } t | ƒ } t | ƒ } | | | <qK W| S( Ni s Could not list booleans(
RC t semanage_bool_listR Rd R. t blistR9 R t booleant semanage_bool_get_nameR t semanage_bool_get_valueR ( R RC R R R# R. ( ( R
RI â s
i c C sk | o
d d GHn | i ƒ } | i ƒ } x8 | D]0 } | | o d | d | | d f GHq3 q3 Wd S( Ns %-50s %-18s
s SELinux booleanR s %-50s %-18s i ( s SELinux booleans value( RR R RI RC RL RN ( R RR RL RC RN ( ( R
RS ï s
( R R R RY R[ RI RS ( ( ( R
R š s
%
(% Rq R R, R\ R` R& R t semanaget rhpl.translateR t N_t is_selinux_mls_enabledR8 R Rü t SEMANAGE_FCONTEXT_ALLt SEMANAGE_FCONTEXT_REGt SEMANAGE_FCONTEXT_DIRt SEMANAGE_FCONTEXT_CHARt SEMANAGE_FCONTEXT_BLOCKt SEMANAGE_FCONTEXT_SOCKt SEMANAGE_FCONTEXT_LINKt SEMANAGE_FCONTEXT_PIPER R R| R) R1 R3 R4 Rb Rk R‰ R« Rá Rø R ( Rá R, R Rb R| R\ R& R( R R1 R3 R8 R R‰ Rk R4 R Rq R) Rü R R R R« Rø R` ( ( R
t ? sL ?
Q·Òت²