| Dir : /proc/self/root/usr/lib/python3.6/site-packages/sepolicy/__pycache__/ |
| Server: Linux red.truehostdns.com 4.18.0-553.150.1.el8_10.x86_64 #1 SMP Fri Jul 31 15:23:31 EDT 2026 x86_64 IP: 51.161.15.103 |
| Dir : //proc/self/root/usr/lib/python3.6/site-packages/sepolicy/__pycache__/gui.cpython-36.pyc |
3
El�f � @ s( d dl Z e jdd� d dlmZ d dlmZ d dlmZ d dlmZ d dlZd dl Z d dl
Z
d dl
m Z m Z m
Z
d dlZ d dlZ d dlZd dlZd dlZd dlZd Zy:d dlZi Zejd0k r�d ed < ejefd
dd�e�� W nL yd dlZeejd< W n( e k
�r$ d dl Z e e jd< Y nX Y nX i Z x e j D ]Z!e!e e j e! < �q8W e"d�e"d�gZ#e"d�e"d�gZ$dd� Z%d dl&Z'e"d�e"d�fZ(e"d�e"d�fZ)d Z*dZ+d Z,dZ-d Z.d Z/dZ0d Z1d Z2dZ3d Z4d
Z5d Z6d Z7d Z8d Z9d!Z:d"Z;d#d$d%d&d'd(d)d*d+g Z<e"d,�Z=G d-d.� d.�Z>e?d/k�r$e>� Z@dS )1� N�Gtkz3.0)r )�Gdk)�GLib)� SELinuxDBus)�DISABLED�
PERMISSIVE� ENFORCINGzselinux-python� T�unicodez/usr/share/localezutf-8)Z localedirZcodeset�_ZNoZYesZDisableZEnablec C s< | d kr|d krdS | d kr dS |d kr,dS | |k| |k S )Nr � ���� )�a�br r �/usr/lib/python3.6/gui.py�cmpF s r z Advanced >>z Advanced <<zAdvanced Search >>zAdvanced Search <<r � � � � � � � �boolean�fcontextzfcontext-equiv�port�login�user�module�node� interfacez�<small>
To change from Disabled to Enforcing mode
- Change the system mode from Disabled to Permissive
- Reboot, so that the system can relabel
- Once the system is working as planned
* Change the system mode to Enforcing</small>
c @ s� e Zd Z�d%dd�Zdd� Zdd� Zd d
� Zd d � Zd
d� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Zd5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z d?d@� Z!dAdB� Z"dCdD� Z#dEdF� Z$dGdH� Z%dIdJ� Z&dKdL� Z'dMdN� Z(dOdP� Z)dQdR� Z*dSdT� Z+dUdV� Z,dWdX� Z-dYdZ� Z.d[d\� Z/d]d^� Z0d_d`� Z1dadb� Z2dcdd� Z3dedf� Z4dgdh� Z5didj� Z6dkdl� Z7dmdn� Z8dodp� Z9dqdr� Z:dsdt� Z;dudv� Z<dwdx� Z=dydz� Z>d{d|� Z?d}d~� Z@dd�� ZAd�d�� ZBd�d�� ZCd�d�� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHd�d�� ZId�d�� ZJd�d�� ZKd�d�� ZLd�d�� ZMd�d�� ZNd�d�� ZOd�d�� ZPd�d�� ZQd�d�� ZRd�d�� ZSd�d�� ZTd�d�� ZUd�d�� ZVd�d�� ZWd�d�� ZXd�d�� ZYd�d�� ZZd�d�� Z[d�d�� Z\d�d�� Z]d�d�� Z^d�d�� Z_d�d�� Z`d�d�� Za�d&d�dÄZbd�dń Zcd�dDŽ Zdd�dɄ Zed�d˄ Zfd�d̈́ Zgd�dτ Zhd�dф Zid�dӄ Zjd�dՄ Zkd�dׄ Zld�dل Zmd�dۄ Znd�d݄ Zod�d߄ Zpd�d� Zqd�d� Zrd�d� Zsd�d� Ztd�d� Zud�d� Zvd�d� Zwd�d� Zxd�d� Zyd�d� Zzd�d�� Z{d�d�� Z|d�d�� Z}d�d�� Z~d�d�� Zd�d�� Z��d �d� Z��d�d� Z��d�d� Z��d�d� Z��d�d � Z��d
�d � Z��d �d
� Z��d�d� Z��d�d� Z��d�d� Z��d'�d�d�Z��d�d� Z��d�d� Z��d�d � Z��d �d � Z��d �d � Z��d!�d"� Z��d#�d$� Z�dS (( �
SELinuxGuiNFc Q C s d| _ d| _t| _t� | _y| jj� }W n6 tjjk
r^ } zt |� | j
� W Y d d }~X nX | j � || _ d| _
tj� }tjjdd�d | _| jd }|j|� |jd�| _|jd�| _|jd �| _|jd
�| _d | _|jd �| _|jd
�| _ t j t j j �| _!t j t j j"�| _#t$j%� d | _&d | _'d | _(d| _)d| _*d| _+d| _,g | _-g | _.i | _/|jd�| _0|jd�| _1|jd�| _2d| _3|jd�| _4|jd�| _5| j5j6| j7� |jd�| _8|jd�| _9|jd�| _:d| _;|jd�| _<|jd�| _=|jd�| _>|jd�| _?|jd�| _@|jd �| _A|jd �| _B|jd �| _C|jd �| _D| jDjEd tjFjG� |jd �| _H| jHj6| j7� |jd!�| _I|jd"�| _J|jd#�| _K|jd$�| _L|jd%�| _M|jd&�| _N| jNjEd tjFjG� |jd'�| _O| jOj6| j7� |jd(�| _P|jd)�| _Q|jd*�| _R|jd+�| _S|jd,�| _T|jd-�| _U|jd.�| _V|jd/�| _W|jd0�| _X|jd1�| _Y|jd2�| _Z|jd3�| _[|jd4�| _\|jd5�| _]|jd6�| _^|jd7�| __|jd8�| _`| j`jEd tjFjG� |jd9�| _a|jd:�| _b| jbj6| j7� |jd;�| _c|jd<�| _d|jd=�| _e|jd>�| _f|jd?�| _g|jd@�| _h|jdA�| _i|jdB�| _j|jdC�| _k|jdD�| _l|jdE�| _m|jdF�| _n|jdG�| _o|jdH�| _p|jdI�| _q|jdJ�| _r|jdK�| _s|jdL�| _tg | _u| jv� dMk �r�| jkjwd� | jmjwd� | jtjwd� |jdN�| _x|jdO�| _y|jdP�| _z| j{� |jdQ�| _||jdR�| _}|jdS�| _~|jdT�| _|jdU�| _�|jdV�| _�|jdW�| _�|jdX�| _�|jdY�| _�|jdZ�| _�|jd[�| _�|jd\�| _�|jd]�| _�|jd^�| _�|jd_�| _�|jd`�| _�|jda�| _�|jdb�| _�|jdc�| _�|jdd�| _�|jde�| _�|jdf�| _�|jdg�| _�|jdh�| _�|jdi�| _�|jdj�| _�|jdk�| _�|jdl�| _�|jdm�| _�|jdn�| _�|jdo�| _�|jdp�| _�|jdq�| _�|jdr�| _�|jds�| _�|jdt�| _�|jdu�| _�|jdv�| _�|jdw�| _�|jdx�| _�|jdy�| _�|jdz�| _�|jd{�| _�|jd|�| _�|jd}�| _�|jd~�| _�| j�j�d� |jd�| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�| j�jEd tjFjG� |jd��| _�| j�j�� | _�|jd��| _�|jd��| _�| j�jEd tjFjG� |jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�|jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�| j�jEd tjFjG� |jd��| _�| j�j�� | _�|jd��| _�| j�j�� | _�|jd��| _�|jd��| _�| j�jEd tjFjG� |jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�|jd��| _�| j�jEd tjFjG� |jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�|jd��| _�| j�jEdMtjFjG� |jd��| _�| j�j6| j7� |jd��| _�|jd��| _�|jd��| _�|jd��| _�| j�| _�| j�j�� | _�|jd��| _�|jd��| _�| j�jEdtjFjG� |jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�| j�j�� | _�|jd��| _�|jd��| _�| j�jEdMtjFjG� |jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�|jd��| _�| j�jEd tjFjG� |jd��| _�| j�j6| j7� |jd��| _�| j�j�� | _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�| j�j�d � | j�j�d � | j�j�| j�d � | j�j�| j� | j�j�d tj�� |jd��| _�|jd��| _�|jd��| _�|jd��| _�|jd��| _�| j�j�d��| _�|jd��| _�|jd��| �_ |jd��| �_|jd��| �_|jd��| �_| �j�jd�| �j| j�� |jdÃ| �_| �j�jd�| �j| jc� |jdă| �_| �j�jd�| �j| jY� |jdŃ| �_| �j�jd�| �j| jJ� |jdƃ| �_ | �j �jd�| �j| j�� |jdǃ| �_
|jd�| _|jdȃ| �_ |jdɃ| �_ |jdʃ| �_
|jd˃}| �j
�jd�| �j| j�� g | �_| �j�jd�| �j| jԃ d| �_d }|�rd�d�g| _-|�r$|| j-k�r$| j-�j|� n�t�j� | _-| j-�j�t�jd |�rj|| j-k�rj| �j�tdσ| � | j
� |�j� �t| j-�} �t�j� }
x�| j-D ]�} | �j | | � �t �t | �j��t | � �| �_ | j��j | �j � | j��j | �j � | �j!� xH|
�j"| g �D ]6} �t�j#| �}|�r| �j || � | j.�j|� �qW | �jd7 �_�q�W |�j$� | j�j%| j� | j:�j%| j8� | �j&| �j'| �j(| �j)| �j*| �j+| �j,| �j-| �j.| �j/| �j0| �j1| �j2| �j3| �j4| �j5| �j6| �j7| �j8| �j9| �j:| �j;| �j<| �j=| �j>| �j?| �j@| �jA| �jB| �jC| �jD| �jE| �j1| �jF| �jG| �jH| �jI| �jJ| �jJ| �jK| �jL| �jM| �jN| �jO| �jP| �jQ| �jR| �jS| �jT| �jU| �jV| �jH| �jW| �jX| �jY| �jZ| �j[| �j\| �j\| �j\| �j]| �j^| �j_| j7| �j`| �jadМB}
| �jb|� |�jc|
� | j�j� �td�jed�| �jf� | �jf� d| �_g| �j�j$� | �j �j$� | �jh�tik�r�| �jj� nV| j �r�| j�jk| j � | j�jl| j � | �jm� | �j`� n| �jn� | j�jot� | �jp� d| _ t�jq� d S )�NFT� )Z
plat_specificz
/sepolicy/zsepolicy.glade�outer_notebookZSELinux_windowZMain_selection_menu�main_advanced_labelr � applications_selection_buttonZ
Revert_buttonr Zadd_path_dialog�error_check_window�error_check_label�advanced_search_windowZadvanced_filterZ
advanced_sort�advanced_filter_entry�advanced_search_treeviewZ Login_label�login_seuser_comboboxZlogin_seuser_liststore�login_name_entry�login_mls_label�login_mls_entryZ Login_button�login_treeview�login_liststore� login_filter�login_popup_window�login_delete_liststore�login_delete_window�user_popup_windowZ User_button�user_liststore� user_filter�
user_treeview�user_roles_comboboxZuser_roles_liststoreZ
User_label�user_name_entry�user_mls_label�user_mls_level_entry�user_mls_entryZselinux_user_combobox�user_delete_liststore�user_delete_window�file_equiv_label�file_equiv_source_entry�file_equiv_dest_entryZfile_equiv_button�file_equiv_treeview�file_equiv_liststore�file_equiv_popup_windowZfile_equiv_filter�file_equiv_delete_liststore�file_equiv_delete_window�app_system_buttonZ
System_buttonZLockdown_buttonZ Systems_boxZRelabel_buttonZRelabel_button_no�advanced_system�outer_notebook_frameZsystem_policy_type_label�select_button_browse�cancel_button_browse�moreTypes_window_filesZmore_types_file_liststoreZmoreTypes_treeview_files� system_policy_type_liststore�system_policy_type_comboboxr ZEnforcing_button_defaultZPermissive_button_defaultZDisabled_button_defaultZenable_unconfinedZdisable_unconfinedZenable_permissiveZdisable_permissiveZ
enable_ptraceZdisable_ptrace� help_windowZ
help_textv� info_text�
help_image�forward_button� back_button�
update_window�update_treeviewZUpdate_treestore� apply_buttonZ
Update_buttonZ
Add_buttonZ
Delete_button�files_path_entry�network_ports_entry�files_popup_window�network_popup_windowZ
Network_labelZ files_labelZmake_path_recursiveZfiles_type_combo_storeZfiles_class_combo_store�files_type_combobox�files_class_combobox�files_mls_label�files_mls_entryZAdvanced_text_filesZcancel_delete_filesZ
tcp_buttonZ
udp_buttonZnetwork_type_combo_storeZnetwork_type_combobox�network_mls_label�network_mls_entryZAdvanced_text_networkZcancel_network_deleteZShow_mislabeled_files�mislabeled_files_label�
warning_filesZ
Modify_button�fix_label_window�fixlabel_label�fix_label_cancel�files_delete_window�files_delete_treeview�files_delete_liststore�network_delete_window�network_delete_treeview�network_delete_liststore� progress_barZExecutable_files_treeview�executable_files_filterZExecutable_files_tabZexecutable_files_treestoreZ files_buttonZWritable_files_treeviewZwritable_files_treestore�writable_files_filterZWritable_files_tabZApplication_files_treeview�application_files_filterZApplication_files_tabZapplication_files_treestoreZnetwork_buttonZoutbound_treeview�network_out_liststore�network_out_filter�network_out_tabZinbound_treeview�network_in_liststore�network_in_filter�network_in_tabZBoolean_treeview�boolean_liststore�boolean_filterZbooleans_more_detail_windowZ booleans_more_detail_treeviewZ booleans_more_detail_liststoreZBooleans_button�transitions_into_treeview�transitions_into_liststore�transitions_into_filterZTransitions_into_tabZTransitions_button�transitions_from_treeview�transitions_from_treestore�transitions_from_filterZTransitions_from_tabZfile_transitions_treeviewZfile_transitions_liststoreZfile_transitions_filterZfile_transitionsZ combobox_org�application_liststore�completion_entry�entrycompletion_objZShow_modified_only_toggleZEnforcing_labelZEnforcing_buttonZPermissive_button�
status_barzSELinux status� filter_entry�
filter_box�add_modify_delete_boxZactivateZfiles_toggle_deleteZtoggledZfile_equiv_toggle_delete1Zuser_toggle_deleteZlogin_toggle_deleteZnetwork_toggle_deleteZ
toggle_updateZfiles_inner_notebookZnetwork_inner_notebookZtransitions_inner_notebook� loading_guiZhttpd_tZabrt_t)�keyz%s is not a valid domain)BZon_combo_button_clickedZon_disable_ptrace_toggledZ!on_SELinux_window_configure_eventZ%on_entrycompletion_obj_match_selectedZon_filter_changedZ"on_save_changes_file_equiv_clickedZ on_save_changes_login_clickedZ on_save_changes_user_clickedZ on_save_changes_files_clickedZ on_save_changes_network_clickedZ)on_Advanced_text_files_button_press_eventZitem_in_tree_selectedZ2on_Application_file_types_treeview_configure_event�on_save_delete_clickedZ)on_moreTypes_treeview_files_row_activatedZ on_retry_button_files_clickedZ on_make_path_recursive_toggledZ&on_files_path_entry_button_press_eventZon_files_path_entry_changedZ on_select_type_files_clickedZon_choose_fileZon_Enforcing_button_toggledZon_confirmation_closeZon_column_clickedZ
on_tab_switchZ on_file_equiv_button_clickedz on_app/system_button_clickedzon_app/users_button_clicked� on_show_advanced_search_windowZ on_Show_mislabeled_files_toggledZ on_Browse_button_files_clickedZon_cancel_popup_clickedZon_treeview_cursor_changedZ on_login_seuser_combobox_changedZ on_user_roles_combobox_changedZ on_cancel_button_browse_clickedZon_apply_button_clickedZon_Revert_button_clickedZon_Update_button_clickedZ on_advanced_filter_entry_changedZ)on_advanced_search_treeview_row_activatedZ!on_Select_advanced_search_clickedZ!on_info_button_button_press_eventZon_back_button_clickedZon_forward_button_clickedZ#on_Boolean_treeview_columns_changedZon_completion_entry_changedZon_Add_button_clickedZon_Delete_button_clickedZon_Modify_button_clickedZ on_Show_modified_only_toggledZ on_cancel_button_config_clickedZon_Import_button_clickedZon_Export_button_clickedZ on_enable_unconfined_toggledZ on_enable_permissive_toggledZ&on_system_policy_type_combobox_changedZ#on_Enforcing_button_default_toggledZ$on_Permissive_button_default_toggledZ"on_Disabled_button_default_toggledZ on_Relabel_button_toggled_cbZ%on_advanced_system_button_press_eventZ on_files_type_combobox_changedZon_filter_row_changedZon_button_toggledZ
gtk_main_quitr (r � finish_initZ
advanced_init�
START_PAGE�opager �dbus�
customized�
exceptions�
DBusException�print�quit�init_cur� application�
filter_txtr ZBuilder� distutils� sysconfigZget_python_lib� code_pathZ
add_from_fileZ
get_objectr$ �window�main_selection_windowr% �popupr& �
revert_buttonr ZCursorZ
CursorTypeZWATCH� busy_cursorZLEFT_PTR� ready_cursor�selinux�selinux_getpolicytype� initialtype�
current_popup�
import_export� clear_entry� files_add� network_add�mislabeled_filesZ all_domainsZinstalled_listZpreviously_modified� file_dialogr' r( Z
invalid_entryr) �advanced_search_filterZset_visible_func�filter_the_dataZadvanced_search_sortr* r+ Zadvanced_search� login_labelr, �login_seuser_combolistr- r. r/ �login_radio_buttonr0 r1 Zset_sort_column_idZSortTypeZ ASCENDINGr2 r3 r4 r5 r6 �user_radio_buttonr7 r8 r9 r: �user_roles_combolist�
user_labelr; r< r= r> Z
user_comboboxr? r@ rA rB rC �file_equiv_radio_buttonrD rE rF Zfile_equiv_treefilterrG rH rI �system_radio_button�lockdown_radio_buttonZ systems_box�relabel_button�relabel_button_norJ rK �system_policy_labelrL rM rN �more_types_files_liststore�moreTypes_treeviewrO rP Z policy_list�populate_system_policy� set_visible�enforcing_button_default�permissive_button_default�disabled_button_default� initialize_system_default_mode�enable_unconfined_button�disable_unconfined_button�enable_permissive_button�disable_permissive_buttonZenable_ptrace_button�disable_ptrace_buttonrQ � help_textrR rS rT rU rV rW �update_treestorerX �
update_button�
add_button�
delete_buttonrY rZ r[ r\ �popup_network_label�popup_files_label�recursive_path_toggle�files_type_combolist�files_class_combolistr] r^ r_ r` �advanced_text_filesZfiles_cancel_button�network_tcp_button�network_udp_button�network_port_type_combolist�network_port_type_comboboxra rb �advanced_text_networkZnetwork_cancel_button�show_mislabeled_files_onlyrc rd �
modify_button�
set_sensitivere rf rg rh ri rj rk rl rm rn �executable_files_treeviewro �executable_files_tabZget_tooltip_textZ executable_files_tab_tooltip_txt�executable_files_liststore�files_radio_buttonZfiles_button_tooltip_txt�writable_files_treeview�writable_files_liststorerp �writable_files_tabZ writable_files_tab_tooltip_txt�application_files_treeviewrq �application_files_tabZ!application_files_tab_tooltip_txt�application_files_liststore�network_radio_buttonZnetwork_button_tooltip_txt�network_out_treeviewrr rs rt Znetwork_out_tab_tooltip_txt�network_in_treeviewru rv rw Znetwork_in_tab_tooltip_txt�boolean_treeviewrx ry �boolean_more_detail_windowZ boolean_more_detail_treeview�!boolean_more_detail_tree_data_set�boolean_radio_button�
active_buttonZboolean_button_tooltip_txtrz r{ r| �transitions_into_tabZ transitions_into_tab_tooltip_txt�transitions_radio_buttonZ transitions_button_tooltip_txtr} r~ r �transitions_from_tabZ transitions_from_tab_tooltip_txt�transitions_file_treeview�transitions_file_liststoreZtransitions_file_filter�transitions_file_tabZ transitions_file_tab_tooltip_txtZ
combobox_menur� r� r� Zset_minimum_key_lengthZset_text_columnZset_match_func�
match_funcZset_completionZset_icon_from_stockZ
STOCK_FIND�show_modified_only�current_status_label�current_status_enforcing�current_status_permissiver� Zget_context_id�
context_idr� r� r� �cellZdel_cell_files�connect�on_toggle_updateZdel_cell_files_equivZ
del_cell_userZdel_cell_loginZdel_cell_networkZ update_cell�inner_notebook_files�inner_notebook_network�inner_notebook_transitionsZ all_entries� on_toggleZloading�append�sepolicyZget_all_domains�sort�str�lower�errorr �show�lenZget_init_entrypoints_str�
combo_box_add�floatZ
percentageZ set_fractionZset_pulse_step� idle_func�getZfind_entrypoint_path�hideZ set_model�open_combo_menu�on_disable_ptrace�hide_combo_menu�set_application_label�get_filter_data�update_to_file_equiv�update_to_login�update_to_user�update_to_files�update_to_network�reveal_advanced�cursor_changed� resize_wrapr� �populate_type_combo�invalid_entry_retry�recursive_path�highlight_entry_text�autofill_add_files_entry�select_type_more�on_browse_select� set_enforce�confirmation_close�column_clicked�
clear_filters�show_file_equiv_page�system_interface�users_interfacer� �show_mislabeled_files�browse_for_files� close_popup� login_seuser_combobox_change�user_roles_combobox_change�close_config_window�apply_changes_button_press�update_or_revert_changes�get_advanced_filter_data�advanced_item_selected�advanced_item_button_push�on_help_button�on_help_back_clicked�on_help_forward_clicked�resize_columns�application_selected�add_button_clicked�delete_button_clicked�modify_button_clicked�on_show_modified_only�import_config_show�export_config_show�unconfined_toggle�permissive_toggle�change_default_policy�change_default_mode�relabel_on_reboot�reveal_advanced_system�show_more_types�
tab_change� closewindow� previously_modified_initializeZconnect_signalsr Ztimeout_add_seconds�selinux_status�lockdown_inited�statusr �show_system_page� set_label�set_text�show_applications_page� clearbuttons�set_current_page�reinit�main)�self�appZtestr� �eZbuilderZ
glade_filer� �path�lengthZentrypoint_dict�domainZ
entrypoint�dicr r r �__init__u s
"
zSELinuxGui.__init__c C s" i | _ xtD ]}i | j |< q W d S )N)�cur_dict�keys)rP �kr r r r� s s
zSELinuxGui.init_curc C sL d}xB| j D ]8}x2| j | D ]$}||kr8| j | |= d S |d7 }q W q W d S )Nr r )rX )rP �ctr�irZ �jr r r �
remove_curx s zSELinuxGui.remove_curc C s yt j� | _W n tk
r( t| _Y nX | jtkr�| jjd� | jjd� | jjd� | j jd� | j
j | j t
d�� | jjt� n | j| j� tjjd�r�| jjd� n | jjd� t j� d }t j� d }|tkr�| j jd� |tkr�| j jd� |tk�r| j jd� dS )NFzSystem Status: Disabledz
/.autorelabelTr ) r� Zsecurity_getenforcerG �OSErrorr r� r� r� r� r� r� �pushr� r rR rI �
DISABLED_TEXT�set_enforce_text�osrS �existsr� �
set_activer� r� �selinux_getenforcemoder r r� r� )rP Z
policytype�moder r r rE � s0
zSELinuxGui.selinux_statusc C s� | j r
d S | j� d| _ | jjtjd�� i | _xN| jj� j d�D ]:}|j � }t
|�dk r\qB|d t
|�dkd�| j|d < qBW | j j| jd d � | j j| jd
d � | j
� d S ) NTZ deny_ptrace�
r r )Zpriority�Disabledr �
unconfinedri �permissivedomains)rF �
wait_mouser� re r� Zsecurity_get_boolean_activeZ module_dictr� Z
semodule_list�splitr r� r� � ready_mouse)rP �m�modr r r �
lockdown_init� s $zSELinuxGui.lockdown_initc G s� | j � }|sd S | jtkr4|j� dkr4| j| j|� | jtkrp| jj|d�}|j� dkrp|rp| j | jj|d�� | jt
kr�| jj|d�}|r�| j j � | j
j|� d S )NZmore_detail_colr Zrestorecon_colr r )�get_selected_iterr� �
BOOLEANS_PAGEZget_name�display_more_detailr� �
FILES_PAGE� liststore� get_value�fix_mislabeled�TRANSITIONS_PAGEr� Zclickedr� rJ )rP �treeviewZtreepathZtreecol�args�iterZvisibleZ bool_namer r r r � s
zSELinuxGui.column_clickedc C s xt j� rt j� qW d S )N)r Zevents_pendingZmain_iteration)rP r r r r � s
zSELinuxGui.idle_funcc C s: y | j j|d�j|�dkr dS dS tk
r4 Y nX d S )Nr r TFr
)r� rw �find�AttributeError)rP Z
completionZ
key_stringr| Z func_datar r r r� � s zSELinuxGui.match_funcc
C s� | j j| jdk� | jj| jt| j�d k � y0td| j| j| j f d�}|j� }|j � W n t
k
rv d}Y nX | j j � }|j
|d| ji � | j j|� | jjd| j| j| j f � | j| j� d S )Nr r z
%shelp/%s.txt�rr# �APPz
%shelp/%s.png)rU r� � help_pagerT r � help_list�openr� �read�close�IOErrorr� Z
get_bufferrJ r� Z
set_bufferrS Z
set_from_file�
show_popuprQ )rP �fd�bufr� r r r �help_show_page� s
zSELinuxGui.help_show_pagec G s | j d8 _ | j� d S )Nr )r� r� )rP r{ r r r r1 � s z SELinuxGui.on_help_back_clickedc G s | j d7 _ | j� d S )Nr )r� r� )rP r{ r r r r2 � s z"SELinuxGui.on_help_forward_clickedc G st d| _ g | _| jtkr.| jjtd�� dg| _| jtkrV| jjtd�� ddddg| _| jtkr�| j j
� }|t kr�| jjtd �� d
g| _|t kr�| jjtd �� d g| _|t
kr�| jjtd
�� dg| _| jtk�r$| jj
� }|tk�r| jjtd�� dg| _|tk�r$| jjtd�� dg| _| jtk�r�| jj
� }|tk�rb| jjtd�� ddddg| _|tk�r�| jjtd�� dg| _|tk�r�| jjtd�� dg| _| jtk�r�| jjtd �� d d d d d!d"g| _| jtk�r�| jjtd#�� d$d%d&d'g| _| jtk�r$| jjtd(�� d)d*g| _| jtk�rH| jjtd+�� d,g| _| jtk�rl| jjtd-�� d.g| _| j � S )/Nr zHelp: Start Page�startzHelp: Booleans PageZbooleansZbooleans_toggledZ
booleans_moreZbooleans_more_showzHelp: Executable Files PageZ
files_execzHelp: Writable Files PageZ files_writez Help: Application Types PageZ files_appz'Help: Outbound Network Connections PageZports_outboundz&Help: Inbound Network Connections PageZ
ports_inboundz&Help: Transition from application PageZtransition_fromZtransition_from_booleanZtransition_from_boolean_1Ztransition_from_boolean_2z&Help: Transition into application PageZ
transition_toz&Help: Transition application file PageZtransition_filezHelp: Systems Page�systemZsystem_boot_modeZsystem_current_modeZ
system_exportZsystem_policy_typeZsystem_relabelzHelp: Lockdown PageZlockdownZlockdown_unconfinedZlockdown_permissiveZlockdown_ptracezHelp: Login Pager Z
login_defaultzHelp: SELinux User Page�userszHelp: File Equivalence PageZ
file_equiv) r� r� r� r� rQ � set_titler rs ru r� �get_current_page�EXE_PAGE�
WRITABLE_PAGE�APP_PAGE� NETWORK_PAGEr� �
OUTBOUND_PAGE� INBOUND_PAGEry r� �TRANSITIONS_FROM_PAGE�TRANSITIONS_TO_PAGE�TRANSITIONS_FILE_PAGE� SYSTEM_PAGE�
LOCKDOWN_PAGE�
LOGIN_PAGE� USER_PAGE�FILE_EQUIV_PAGEr� )rP r{ �ipager r r r0 � sl
zSELinuxGui.on_help_buttonc G sX | j dkrDd| _ | jj� }| jj|d d |d d � | jj� n| jj� d| _ d S )Nr r r �A )r� r� Z get_positionr� Zmover r )rP r{ �locationr r r r
) s
zSELinuxGui.open_combo_menuc G s | j j� d| _d S )Nr )r� r r� )rP r{ r r r r 3 s
zSELinuxGui.hide_combo_menuc G s
d| _ d S )NT)r
)rP r{ r r r r
7 s z SELinuxGui.set_application_labelc G s t |� d S )N)r� )rP r{ r r r r : s zSELinuxGui.resize_wrapc C sH t j� d | _| jtkr | j| _| jtkr2| j| _| jtkrD| j | _d S )Nr )
r� rf � enforce_moder r� �enforce_buttonr r� r r� )rP r r r r� = s
z)SELinuxGui.initialize_system_default_modec C sv t tjtj� dd��d }|j� d}xJ|D ]B}| jj� }| jj|d|� || j krf| j
j |� || _ |d7 }q,W |S )NT)�topdownr r )
�nextrc �walkr� Z selinux_pathr� rO r� � set_valuer� rP re � typeHistory)rP �typesr[ �itemr| r r r r� F s
z!SELinuxGui.populate_system_policyc G s� | j dkrdS y�x�td|j� �D ]p}yR|j||�}|dksJ|dksJ|d krLw |j| j �dksp|j� j| j �dkrtdS W q ttfk
r� Y q X q W W n Y nX dS )Nr# Tr Fr r
r
)r� �range�
get_n_columnsrw r} r r~ � TypeError)rP �listr| r{ �x�valr r r r� S s
$zSELinuxGui.filter_the_datac
C s� x�|j � D ]|}xv|| D ]j\}}dj|�|f} | | jd krl| jd | d dkrTq|| jd | d krlq| j|dj|�||� qW q
W d S )N�,r �actionz-d�typez, )rY �joinrX �network_initial_data_insert)
rP rQ �netd�protocol� direction�modelrZ �t�portsZpkeyr r r �
net_updatef s zSELinuxGui.net_updatec C s� | j � tj� }| jj� x�|D ]�}| jj� }|| d rX| j|�}| j|| d �}n|}|| d }| jj|d|� | jj|d|� | jj|d|| d � q W | j� d S )N�modify�equivr r r ) rl r� Zget_file_equivrE �clearr� �markupr� rn )rP Zedict�fr| �namer� r r r �file_equiv_initializeq s
z SELinuxGui.file_equiv_initializec C s� | j � | jj� x�tj� D ]�}| jj� }| jj|dt|d �� |d }d|kr\|jd� | jj|ddj |�� | jj|d|j
dd �� | jj|d
|j
d d �� | jj|d d
� q W | j � d S )Nr r� �rolesZobject_rr z, r �levelr# r r� r T) rl r7 r� r� �get_selinux_usersr� r� r �remover� r rn )rP �ur| r� r r r �user_initialize� s
zSELinuxGui.user_initializec C s� | j � | jj� xftj� D ]Z}| jj� }| jj|d|d � | jj|d|d � | jj|d|d � | jj|dd� q W | j� d S ) Nr r� r �seuserr �mlsr T)rl r1 r� r� Zget_login_mappingsr� r� rn )rP r� r| r r r �login_initialize� s
zSELinuxGui.login_initializec C s| t jj|dddd�}| j||dt| j� t jj|dddd�}| j||dt| j� t jj|dddd�}| j||dt| j� d S )N�tcp� name_connectT)� check_bools� name_bind�udp)r� �network�get_network_connectr� r� rr r� ru )rP rQ r� r r r �network_initialize� s z SELinuxGui.network_initializec C sD |j � }|j|d|� |j|d|� |j|d|� |j|dd� d S )Nr r r r T)r� r� )rP r� r� ZportTyper� r| r r r r� � s
z&SELinuxGui.network_initial_data_insertc C s� d}|j � }x.|D ]&}|d |kr0|j|� d S |d7 }qW |j|d �}|j|d�td�krr|j|�}|d }n|j� }|j|d|� |j|� d S )Nr r zMore...)� get_modelre �get_iterrw r Z
insert_beforer� r� )rP �comboboxr� r[ rv r\ �niterr| r r r �combo_set_active_text� s
z SELinuxGui.combo_set_active_textc C s2 |j � }|j� }|dk r d S |j|�}|j|d�S )Nr )r� �
get_activer� rw )rP r� rv �indexr| r r r �combo_get_active_text� s
z SELinuxGui.combo_get_active_textc C s: |d kr d S | j j� }| j j|d|� | j j|d|� d S )Nr r )r� r� r� )rP r� �val1r| r r r r � s
zSELinuxGui.combo_box_addc G sN | j j� }|j� d }|d kr"d S | jj|d�}| j| j|� | j| j� d S )Nr r ) r� �
get_selection� get_selectedr� rw r� r] rC rN )rP r{ rQ r| r r r r � s
zSELinuxGui.select_type_morec G sx | j j� }|j� \}}|j|�}| jj|�}| jj|d�}|d krFd S | jjd� | j j
� | j | j � | j
j|� d S )Nr r# )r+ r� r� �convert_iter_to_child_iterr� r� rw r* rJ r) r r r% r� )rP r{ �rowr� r| rQ r r r r/ � s
z$SELinuxGui.advanced_item_button_pushc G s` | j j|�}| j j|�}| jj|d�}| jjd� | jj� | j | j
� | j j|� | j � d S )Nr r# )
r� r� r� r� rw r* rJ r) r r r% r� r4 )rP rz rS r{ r| rQ r r r r. � s
z!SELinuxGui.advanced_item_selectedc C s4 |r0t |�dkr0x | jD ]}||d krdS qW dS )Nr TF)r r� )rP rQ �itemsr r r �find_application� s
zSELinuxGui.find_applicationc G s� | j jd� | jjd� | jjd� | jjd� | jj� }| j|�sHd S | j � | j
j d� | j j d� | j
j� | jj� | jj� | jj� | jj� | jj� | jj� | jj� | jj� y(|d dkr�tj|�}|s�d S || _W n tk
�r Y nX | j� | j | j j � � | j � | j |� d| _!| j"|� | j#|� | j$|� | j%|� | j&|� | j'|� | j(|� | j)j*t+d�| � | j,j*t+d�| � | j-j*t+d�| � | j.j*t+d �| � | j/j*t+d
�| � | j0j*t+d �| � | j1j*t+d �| � | j2j*t+d
�| � | j3j4t+d�| � | j5j4t+d�| � | j6j4t+d�| � | j3j*t+d�| � | j5j*t+d�| � | j6j*t+d�| � | j7j*t+d�| � || _| j8j4| j� | j9� d S )NFr# Tr �/z(File path used to enter the '%s' domain.z)Files to which the '%s' domain can write.z6Network Ports to which the '%s' is allowed to connect.z5Network Ports to which the '%s' is allowed to listen.z File Types defined for the '%s'.zODisplay boolean information that can be used to modify the policy for the '%s'.z;Display file type information that can be used by the '%s'.zADisplay network ports to which the '%s' can connect or listen to.z!Application Transitions Into '%s'z!Application Transitions From '%s'zFile Transitions From '%s'zVExecutables which will transition to '%s', when executing selected domains entrypoint.zQExecutables which will transition to a different domain, when '%s' executes them.z4Files by '%s' with transitions to a different label.zADisplay applications that can transition into or out of the '%s'.):r� r� rc rd r� rJ r� �get_textr� rK r� r� r� r� r� ru rr rx r{ r~ r� r� r� r� Zget_init_transtyper� �
IndexErrorrl rD r� r� rN �boolean_initializer� �executable_files_initializer� �writable_files_initialize�transitions_into_initialize�transitions_from_initialize� application_files_initialize� transitions_files_initializer� �set_tooltip_textr r� rt rw r� r� r� r� r� rI r� r� r� r& rn )rP r{ rQ r r r r4 � sr
z SELinuxGui.application_selectedc C s t j� t j� | _t j� | _d S )N)r� rN Z
get_fcdict�fcdictZget_local_file_paths�local_file_paths)rP r r r rN 6 s
zSELinuxGui.reinitc C s� i | _ �x�|jd�D �]�}|j� }t|�dkr0q|d dkr>q|d | j krZi | j |d < |d dkr�d|d dki| j d |d < |d d kr�|d
|d d �| j d |d < |d d
kr�d|d
i| j d
|d! < |d dk�rd|d
|d d�| j d |d" < |d dk�r6d|d
i| j d |d# |d$ f< |d dk�rj|d
|d |d d�| j d |d% < |d dk�r�|d dk�r�d| j k�r�i | j d< d|d
i| j d |d& < n"d|d i| j d |d' |d
f< |d dkrd|d d ki| j d |d( < qW d| j k�rd S xJd | jfd | jfgD ]2\}}|| j d k�r.|j| j d | d � �q.W x*tD ]"}|| j k�rj| j j|i i� �qjW d S ))Nrh r r z-Dr �activer z-1r r r )r� r� r! r� r �s0)r� r� �roler r r )�maskr� r� r z-ezfcontext-equivr� r �enabledz-drj rk r
r
r
r
r
���r
r
r
r
)� cust_dictrm r r� r� re rY �update)rP r� r\ ZrecZsemodule�buttonr r r rD ; sJ ""&
" "
z)SELinuxGui.previously_modified_initializec C s� t j|�| _x�| jj� D ]�}t| j| �dkr0q| j| d }xr| j| d D ]`}||f| jd kr�| jd ||f d dkr�qN|| jd ||f d kr�qN| j| j|||� qNW qW d S )Nr r r r� z-dr� )r� Zget_entrypoints� entrypointsrY r rX �files_initial_data_insertr� )rP r� �exe�
file_classrS r r r r� e s z&SELinuxGui.executable_files_initializec C s@ y&t j|d�d }t j|�d }||kS tk
r: dS X d S )Nr r F)r� � matchpathcon�
getfileconr_ )rP rS �con�curr r r �
mislabeleds s zSELinuxGui.mislabeledc C s� | j |�sd S tj|d�d }tj|�d }d| _|j|dd� |j|dd� |j|dd� |j|d|jd�d � |j|d |jd�d � d S )
Nr r Tr r r �:r r )r r� r� r� r� r� rm )rP �treerS r| r� r� r r r r �set_mislabeled{ s
zSELinuxGui.set_mislabeledc C s� t j|�| _x�| jj� D ]�}t| j| �dk rF| j| jd |td�� q| j| d }xr| j| d D ]`}||f| jd kr�| jd ||f d dkr�qd|| jd ||f d kr�qd| j| j|||� qdW qW d S ) Nr z all filesr r r r� z-dr� ) r� Zget_writable_files�writable_filesrY r r� r� r rX )rP r� �writer� rS r r r r� � s z$SELinuxGui.writable_files_initializec C s� |j d �}|d kr td�}d}nl||f| jk}x:tj|�D ],}|j |�}|j|d|� | j||||� q:W |r�| j|�}| j|�}| j|�}|j|d|� |j|d|� |j|d|� |j|d|� d S )NzMISSING FILE PATHFr r r r )r� r r� r� Z find_filer� r r� ) rP rv rS Z
selinux_labelr� r| r� �pr� r r r r� � s"
z$SELinuxGui.files_initial_data_insertc C s d| S )Nz <b>%s</b>r )rP r� r r r r� � s zSELinuxGui.markupc C s |r t jddt jdd|��S d S )Nz</b>$r# z^<b>)�re�sub)rP r� r r r �unmarkup� s zSELinuxGui.unmarkupc C s� t j|�| _x�| jj� D ]�}t| j| �dkr0q| j| d }x�| j| d D ]p}t j|| jd�}||f| jd kr�| jd ||f d dkr�qN|| jd ||f d kr�qN| j| j |||� qNW qW d S )Nr r )r� r r� z-dr� )
r� Zget_file_types�
file_typesrY r Zget_descriptionr� rX r� r� )rP r� rQ r� rS �descr r r r� � s z'SELinuxGui.application_files_initializec C s. d}x$| j D ]}t| j | �dkr dS q W dS )Nr TF)rX r )rP r\ rZ r r r �modified� s
zSELinuxGui.modifiedc C sb x\t j|�D ]N}xH|D ]@\}}|| jd kr>| jd | d }t j|�}| j|||� qW q W d S )Nr r� )r� Z get_boolsrX � boolean_desc�boolean_initial_data_insert)rP r� �blistr r� r r r r r� � s
z SELinuxGui.boolean_initializec C sR | j j� }| j j|d|� | j j|d|� | j j|d|� | j j|dtd�� d S )Nr r r r zMore...)rx r� r� r )rP r� r r� r| r r r r � s
z&SELinuxGui.boolean_initial_data_insertc C sb x\t j|�D ]N}d }d }d }d|kr,|d }d|kr<|d }d|krL|d }| j|||� q W d S )Nr �target�source)r� Zget_transitions_into�$transitions_into_initial_data_insert)rP r� r� r� �
executabler r r r r� � s z&SELinuxGui.transitions_into_initializec C sd | j j� }|d kr0| j j|dt|d d � n| j j|dd� | j j|d|� | j j|d|� d S )Nr r �Defaultr )r{ r� r� r� )rP r� r r r| r r r r � s
z/SELinuxGui.transitions_into_initial_data_insertc C s� x�t j|�D ]�}d }d }d }d|kr,|d }d|kr<|d }d|krL|d }| j|||� y*x$| j| d D ]}| j|||� qlW W q tk
r� Y q X q W d S )Nr r � transtypeZregex)r� Zget_transitions�$transitions_from_initial_data_insertr� �KeyError)rP r� r� r� r r Zexecutable_typer r r r� � s z&SELinuxGui.transitions_from_initializec C s� | j jd �}|d kr6| j j|dd� | j j|dd� n�| j j|�}| j j|dt|d d � d
}|d d r�| j j|dtd �| � n| j j|dtd
�| � | j j|d|d d � | j j|dd � | j j|d|� | j j|d |� d S )Nr r r Fr �<span foreground="blue"><u>� </u></span>r z:To disable this transition, go to the %sBoolean section%s.z9To enable this transition, go to the %sBoolean section%s.Tr )r r )r~ r� r� r� r )rP r� r r r| r� r� r r r r s z/SELinuxGui.transitions_from_initial_data_insertc C sJ xDt j|�D ]6}d|kr"|d }nd }| j|d |d |d |� q W d S )N�filenamer �classr )r� Zget_file_transitions�$transitions_files_inital_data_insert)rP r� r\ r r r r r� s
z'SELinuxGui.transitions_files_initializec C sZ | j j� }| j j|d|� | j j|d|� | j j|d|� |d krFd}| j j|d|� d S )Nr r r �*r )r� r� r� )rP rS �tclass�destr� r| r r r r " s
z/SELinuxGui.transitions_files_inital_data_insertc G s8 | j � d | _d | _d | _d | _| jjd� | jj� | j j
d� | j j
d� | j j
d� | j
j
d� | jj� r�| jjt� | j| _| j j
d� | jj� �r�| j| j� | j j
d� | j j
| j� | j j
| j� | j
j
| j� | jjt� |d | jk�r|d }n
| jj� }|tk�r*| j| _t d�}n6|t k�rF| j | _t d�}n|t k�r`| j | _t d�}| j!j"t d�|| j#d � � | j$j"t d
�|| j#d � � | jj"t d �|| j#d � � | j%j� �r�| jj&� | j j
d� | jjt'� |d | j(k�r�|d }n
| j(j� }|t)k�r | j*| _t d �}|t+k�r:| j,| _t d
�}| j!j"t d�| j#|d� � | j$j"t d�| j#|d� � | jj"t d�| j#|d� � | j-j� �r | jjt.� |d | j/k�r�|d }n
| j/j� }|t0k�r�| j1| _|t2k�r�| j3| _|t4k�r | j5| _| j6j� �r"| jjt7� | j8j� | j9j� �rL| j:� | jjt;� | j8j� | j<j� �r�| jjt=� | jj&� | j j
d� | j>| _| j!j"t d�� | j$j"t d�� | jj"t d�� | j?j� �r| jjt@� | jj&� | j j
d� | jA| _| j!j"t d�� | j$j"t d�� | jj"t d�� | jBj� �r~| jjtC� | jj&� | j j
d� | jD| _| j!j"t d�� | j$j"t d�� | jj"t d�� | jj� | _E| j�r(| j8j&� | jjF� | _| jjF� | _| jjF� | _xXtGd| jjH� �D ]D}| jjI|�}|�r�|jJ� d }tK|tLjM��r�| jjN|| jOd � �q�W | jjP� jQ� | jjd� d S )NFTr r r �writabler� z4Add new %(TYPE)s file path for '%(DOMAIN)s' domains.)ZTYPEZDOMAINz3Delete %(TYPE)s file paths for '%(DOMAIN)s' domain.z�Modify %(TYPE)s file path for '%(DOMAIN)s' domain. Only bolded items in the list can be selected, this indicates they were modified previously.r� z listen for inbound connectionszMAdd new port definition to which the '%(APP)s' domain is allowed to %(PERM)s.)r� ZPERMzVDelete modified port definitions to which the '%(APP)s' domain is allowed to %(PERM)s.zMModify port definitions to which the '%(APP)s' domain is allowed to %(PERM)s.z%Add new SELinux User/Role definition.z.Delete modified SELinux User/Role definitions.z7Modify selected modified SELinux User/Role definitions.z!Add new Login Mapping definition.z*Delete modified Login Mapping definitions.z3Modify selected modified Login Mapping definitions.z$Add new File Equivalence definition.z-Delete modified File Equivalence definitions.z�Modify selected modified File Equivalence definitions. Only bolded items in the list can be selected, this indicates they were modified previously.)Rr! rz �treesort�
treefilterrv r� r� r� r r� r� r� rc rd r� r� r$ rM rs r� r� r� r� ru r� r� r� r� r r� r� r� r� r� r� r� r� r� r r� r� r� r� r� r� r� ry r� r� r} r� rz r� r� r� r� r� r� rq r� r� r� r9 r� r� r0 r� r� rD r� r� r� r� Z
get_columnZ get_cells�
isinstancer ZCellRendererTextZ
set_sort_func� stripsortr� Z unselect_all)rP r{ r� �categoryr� �colr� r r r rB + s�
zSELinuxGui.tab_changec C s: |j � \}}| j|j||��}| j|j||��}t||�S )N)Zget_sort_column_idr
rw r ) rP r� Zrow1Zrow2Z user_dataZ sort_columnr r� Zval2r r r r% � s zSELinuxGui.stripsortc C s� | j j|�}| j j|�}| jj� | jjtd�| jj |d� � t
j | j | jj |d��}x,|D ]$}| j
|d |d |d |d � q^W | j| j� d S )NzBoolean %s Allow Rulesr r r r Zpermlist)ry r� r� r� r� r� r� r rx rw r� Zget_boolean_rulesr� �display_more_detail_initr� )rP �windowsrS �itr r r r r rt � s
$z SELinuxGui.display_more_detailc C s0 | j j� }| j j|dd|||dj|�f � d S )Nr zallow %s %s:%s { %s };� )r� r� r� r� )rP r r Z
class_typeZ
permissionr| r r r r( � s
z#SELinuxGui.display_more_detail_initc G s� d| _ | jtkrJ| jjtd�| j � | jjtd�| j � | j |� d S | jt
kr�| j jtd�| j � | j jtd�| j � | j
|� | jj� }|tkr�| jjd� n | jjd� d| _| jtkr�| jjtd �� | jjtd
�� | j|� d| _| jtk�r2| jjtd �� | jjtd �� | j|� d| _| jtk�r�| j jd
� | j jd
� | j jtd�� | j jtd�� d| _| j | j � | j!� d S )NFzGAdd Network Port for %s. Ports will be created when update is applied.zAdd Network Port for %szMAdd File Labeling for %s. File labels will be created when update is applied.zAdd File Labeling for %szex: /usr/sbin/Foobarzex: /var/lib/FoobarTzGAdd Login Mapping. User Mapping will be created when Update is applied.zAdd Login MappingzQAdd SELinux User Role. SELinux user roles will be created when update is applied.zAdd SELinux Usersr# zMAdd File Equivalency Mapping. Mapping will be created when update is applied.z Add SELinux File Equivalency)"r� r� r� r� rJ r r� r\ r� �init_network_dialogru r� r[ �init_files_dialogr� r� r� rY r� r� r� r3 �login_init_dialogr� r� r6 �user_init_dialogr� rB rC rA rF r� � new_updates)rP r{ r� r r r r5 � sB
z SELinuxGui.add_button_clickedc C s || _ |j� d S )N)r� r )rP r� r r r r� � s zSELinuxGui.show_popupc G s | j j� | jjd� dS )NT)r� r r� r� )rP r{ r r r r' � s
zSELinuxGui.close_popupc
G s� d }| j r&| j� }|s&| jjd� d S d| _| jtkr@| j|� | jtk�r\| j j
t d�| j � | j
jt d�| j � d | _| j|� d| _d}d}| jj� }|tk�r | jj|�}|| _| jj|d�}| jj
|� | jj|d�}|d kr�| j| j|� | jj|d�}|d k�r | j| j|� |t k�r�| j j|�}|| _| j j|d�}| jj
|� | j j|d�} | d k�r|| j| j| � | j j|d�}|d k�r�| j| j|� |t k�r\| j j|�}|| _| j!j|d�}| jj
|� y&| j!j|d�}
|
j"d �d j"d
�}
W n t#k
�r Y nX | j!j|d�} | d k�r<| j| j| � |
d }|d k�r\| j| j|� | jt$k�r�| j%|� | j&j
| j'j|d�� | j(j
| j'j|d�� | j)j
| j'j|d �� | j| j*| j'j|d�� | j+j
t d �� | j,jt d
�� | j-| j,� | jt.k�r~| j/|� | j0j
| j1j|d�� | j2j
| j1j|d�� | j| j3| j1j|d�� | j4j
t d�� | j5jt d�� | j-| j5� | jt6k�r�| j7j
| j8| j9j|d��� | j:j
| j8| j9j|d��� | j;j
t d�� | j<jt d�� d| _=| j-| j<� d S )NFTzPModify File Labeling for %s. File labels will be created when update is applied.zAdd File Labeling for %s�Modifyr r r z<b>z</b>r zUModify SELinux User Role. SELinux user roles will be modified when update is applied.zModify SELinux UserszLModify Login Mapping. Login Mapping will be modified when Update is applied.zModify Login MappingzPModify File Equivalency Mapping. Mapping will be created when update is applied.z Modify SELinux File Equivalency)>rz rr r� r� r� r� r� � modify_button_network_clickedru r� rJ r r� r[ r� �delete_old_itemr- r� r� r� ro r� r� rw rY r� r] r^ r� rp r� r� rq r� rm r~ r� r/ r; r7 r= r> r: r� r6 r� r� r. r- r1 r/ r, r� r3 r� rB r
rE rC rA rF r� ) rP r{ r| � operationr� r� rS �ftyper r� Zget_typer r r r7 � s�
z SELinuxGui.modify_button_clickedc G sB | j j|�}| j j|d�}| j| j|� | j| j� | jj� d S )Nr ) r� r� rw r� r] r� r[ rN r )rP r �locr{ r| r5 r r r r H s
z SELinuxGui.populate_type_comboc C s. |d kr d S |j d�r d}nd}|j|�d S )NZ _script_tZ_tr )�endswithrm )rP rU Z
split_charr r r � strip_domainO s
zSELinuxGui.strip_domainc C s x|D ]}|j |�rdS qW dS )NTF)�
startswith)rP r� � exclude_listrR r r r � exclude_typeX s
zSELinuxGui.exclude_typec
G s� g }| j jd� | j| j� | jj� }| jj� | jj� | j | j
�}xN| j D ]D}|d j |�rN|d | j
krN|d j d� rN|j
| j |d �� qNW | jj� �y�x.tjD ]$}| jj
� }| jj|dtj| � q�W |tko�| jd k�rXxR| jj� D ]D}|j |��r | jj
� }| jj|d|� | jj
� }| jj|d|� q�W | j jd� | j jd� �n(|tk�r�| jd k�r�xp| jj� D ]b} | j |��r�| j| |� �r�| | jk�r�| jj
� }| jj|d| � | jj
� }| jj|d| � �qzW | j jd� n�|tk�r�| jd k�r�xntj� D ]b}
|
j |��r|
j |��rT| j|
|� �rT| jj
� }| jj|d|
� | jj
� }| jj|d|
� �qW | j jd� W n t k
�r� t d� Y nX | j jd� | j j d� | jj
� }| jj|dt!d�� d S ) NTr Z httpd_sysr Fr r� zMore...)"r^ r� r� r[ r� r� r� r� r� r8 r� r� r9 r� r� r� �
file_type_strr� r� r� rY re r� r r; r r� Zget_all_file_typesr~ r� r] r` rJ r ) rP r{ r: r� Zcompare�d�filesr| r� r rQ r r r r- ^ s`
,
(
z SELinuxGui.init_files_dialogc G s� | j � }|s | jjd� d S | jjtd�| j � | jjtd�| j � d | _ | j
|� d}d}d| _ | j � }| j j
|d�}| jj|� | j j
|d�}|dkr�| jjd� n|d kr�| jjd� | j j
|d
�}|d kr�| j| j|� || _ d S ) NFzJModify Network Port for %s. Ports will be created when update is applied.zModify Network Port for %sr1 r Tr r� r� r )rr r� r� r� rJ r r� r\ r� r3 r, r� rv rw rZ r� re r� r� r� )rP r{ r| r4 r� r r� r� r r r r2 � s.
z(SELinuxGui.modify_button_network_clickedc
G s� | j | j� | jj� }| jj� | jjd� �y:|tkrPt j
j | j dddd�}n8|t
kr�t j
j | j dddd�}|t j
j | j dddd�7 }g }xL|j� D ]@}x:|| D ].\}}||dd g kr�|jd
�r�q�|j|� q�W q�W |j� | j| j �}|d d k�r|d d� }|d
}d} d}
x@|D ]8}|j|��r2| }
| jj� } | jj| d|� | d 7 } �q W | jj|
� W n tk
�r~ Y nX | jjd� | jjd� d S )Nr# r� r� T)r� r� r� Zport_tZunreserved_port_tZ_typer r= r r r� r
r
)r� r\ r� r� r� r� rZ rJ r� r� r� r� r� r� rY r7 r� r� r8 r9 r� r� re r~ r� rb ) rP r{ r� r� Z
port_typesrZ r� r� Z short_domainr[ �foundr| r r r r, � sF
z SELinuxGui.init_network_dialogc G sN | j |�}| jj� dkrJx0tj� D ]$}||d kr"| jj|jdd�� q"W d S )Nr# r� r� )r� r/ r� r� r� rJ r )rP �combor{ r� r� r r r r( � s
z'SELinuxGui.login_seuser_combobox_changec G sN | j |�}| jj� dkrJx0tj� D ]$}||d kr"| jj|jdd�� q"W d S )Nr# r� r� )r� r> r� r� �
get_all_rolesrJ r )rP r@ r{ Zseroler� r r r r) � s
z%SELinuxGui.user_roles_combobox_changec C sN d }| j sd S | j j� }|s d S |j� \}}|rJ|j|�}|rJ| jj|�}|S )N)rz r� r� r� r# )rP r| r� r" r r r rr � s
z SELinuxGui.get_selected_iterc G sf | j jd� | j� }|d kr,| j jd� d S | j| sH| j| d rLd S | j j| j| d � d S )NFr r
r
)r� r� rr rv )rP r{ r| r r r r � s zSELinuxGui.cursor_changedc G sn | j | j� | jj� tj� }|j� x*|D ]"}| jj� }| jj|dt |�� q,W | j
j d� | j j d� d S )Nr r# )
r� r3 r� r� r� Z
get_all_usersr� r� r� r r- rJ r/ )rP r{ r� r� r| r r r r. � s
z SELinuxGui.login_init_dialogc G sn | j | j� | jj� tj� }|j� x*|D ]"}| jj� }| jj|dt |�� q,W | j
j d� | j j d� d S )Nr r# )
r� r6 r� r� r� rA r� r� r� r r; rJ r> )rP r{ r� r r| r r r r/ s
zSELinuxGui.user_init_dialogc C sh | j rdd|j� }| j� y| jj|� W n0 tjjk
rZ } z| j|� W Y d d }~X nX | j� d S )Nzboolean -m -%d deny_ptrace) r� r� rl r� �semanager� r� r rn )rP � checkbutton�
update_bufferrR r r r r s z SELinuxGui.on_disable_ptracec s� | j j� � � fdd�}g }| jtkrh|j� s8| j| j�S x.| j D ]$}|d | jd kr@|j||�� q@W | jt kr�| j
j � }|j� s�|t kr�| j
| j�S |tkr�| j| j�S |tkr�| j| j�S x2| j D ](}|d |d f| jd kr�|j|� q�W | jtk�rR|j� �s| j| j�S x:| j D ]0}|d |d f| jd k�r |j||�� �q W | jtk�r�|j� d k�st| j� S x2| j D ](}|d | jd
k�r||j||�� �q|W | jtk�r�|j� �s�| j� S x2| j D ](}|d | jd k�r�|j||�� �q�W | jtk�rP|j� d k�s | j� S x2| j D ](}|d | jd k�r$|j||�� �q$W | j j� xB|D ]:}| j j� }x(td� �D ]}| j j |||| � �qzW �q`W d S )
Nc s* g }x t d� �D ]}|j| | � qW |S )Nr )r� r� )r� �lr\ )rT r r �dup_row! s z1SELinuxGui.on_show_modified_only.<locals>.dup_rowr r r r r r Tzfcontext-equivr r ) rv r� r� rs r� r� r� r� r� ru r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� )rP rC rF Z append_listr� r� r| r\ r )rT r r8 sd
z SELinuxGui.on_show_modified_onlyc C s8 |j d �}|j|d|� |j|d|� |j|d|� d S )Nr r r )r� r� ) rP r rQ r� r4 rS Zfclassr5 r| r r r � init_modified_files_liststoreb s
z(SELinuxGui.init_modified_files_liststorec G s t d� d S )Nz restore to defualt clicked...)r� )rP r{ r r r �restore_to_defaulth s z SELinuxGui.restore_to_defaultc G s( | j | j� | jjd� | jjd� d S )NT)rC r' r[ r� r\ )rP r{ r r r r k s z SELinuxGui.invalid_entry_retryc C sV t |�dks|d dkrR| jj� | jjd� | jjd� | jjtd�| � dS dS )Nr r� FzAThe entry '%s' is not a valid path. Paths must begin with a '/'.T) r r' r r[ r� r\ r( rJ r )rP Z
insert_txtr r r �error_check_filesp s
z SELinuxGui.error_check_filesc C sl y t |�}|dk s|dkr t�W nF tk
rf | jj� | jjd� | jjd� | jjt d�� dS X dS )Nr i Fz'Port number must be between 1 and 65536T)
�int�
ValueErrorr' r r[ r� r\ r( rJ r )rP r Zpnumr r r �error_check_networky s
z SELinuxGui.error_check_networkc G s2 | j r.| j| j�td�kr.| jj� | jj� d S )NzMore...)r� r� r] r r[ r rN r )rP r{ r r r rA � s
zSELinuxGui.show_more_typesc G s | j � | j| j�}| jj� }| jj� }| jr�| j� }| jj |d�}| jj |d�}| jj |d�}| j
j |d|� | j
j |d|� | j
j |d|� d|||||d�| j d |< n"| j
j
d �}d||d�| j d |< | j
j |d|� | j
j |d|� | j
j |d|� | j� d S ) Nr r r z-m)r� r� r� �oldrange� oldseuser�oldnamer z-a)r� r� r� )r' r� r, r/ r� r- r� rr r1 rw rv r� rX r� r0 ) rP r{ r� � mls_ranger� r| rO rN rM r r r r � s&
zSELinuxGui.update_to_loginc G sj | j � | j| j�}| jj� }| jj� }| jj� }| jr�| j� }| j j
|d�}| j j
|d�}| j j
|d�} | j j
|d�}
| j j |d|� | j j |d|� | j j |d| � | j j |d|
� d||||
| ||d�| j
d |< nD| j jd �}|s�|�r
d|||d �| j
d |< nd|d
�| j
d |< | j j |d|� | j j |d|� | j j |d|� | j j |d|� | j� d S ) Nr r r r z-m)r� r� r� r� rM �oldlevel�oldrolesrO r z-a)r� r� r� r� )r� r� )r' r� r: r= r� r> r; r� rr r7 rw rv r� rX r� r0 ) rP r{ r� r� rP r� r| rO rR rQ rM r r r r � s2
"
zSELinuxGui.update_to_userc G s� | j � | jj� }| jj� }| jrl| j� }| j| jj|d��}| j| jj|d��}d|||d�| j d |< n | jj
d �}d|d�| j d |< | jj|d| j |�� | jj|d| j |�� d S )Nr r z-m)r� �src�oldsrc�olddestzfcontext-equivz-a)r� rS ) r' rC r� rB r� rr r
rv r� rX r� r� )rP r{ r rS r| rU rT r r r r � s
z SELinuxGui.update_to_file_equivc
G s0 | j � d| _| jj� }| j|�r&d S | j| j�}| jj� }| j| j�}| j r�| j
� }| j | j j
|d��}| j | j j|d��}| j j
|d�} d|||| d�| jd ||f< n$| j jd �}d|d �| jd ||f< | j j|d| j|�� | j j|d| j|�� | j j|d| j|�� d
| _| jjd
� | j� d S ) NTr r r z-m)r� r� �oldtype�oldpathZoldclassr z-a)r� r� F)r' r� rY r� rI r� r] r` r^ r� rr �unmarkrv rw r� rX r� r� r� re r0 )
rP r{ rS �setyper� r r| rW � oldsetypeZ oldtclassr r r r � s,
zSELinuxGui.update_to_filesc
G s2 d| _ | jj� }| j|�r d S | jj� r.d}nd}| j| j�}| jj� }| j r�| j
� }| j | j j
|d��}| j | j j
|d��}| j | j j|d��} d||| ||d�| jd ||f< n&| j jd �}d
||d �| jd ||f< | j j|d|� | j j|d|� | j j|d|� d | _ | jj� | jjd� | j� d S )
NTr� r� r r r z-m)r� r� r� rV � oldprotocol�oldportsr z-a)r� r� r� F)r� rZ r� rL r� r� r� r� rb r� rr rX rv rw r� rX r� r\ r r� r� r0 )
rP r{ r� r� rY r� r| r\ r[ rZ r r r r � s0
"
z SELinuxGui.update_to_networkc G s� d}| j jd� | jtkr�| jj� | jd }xZ|D ]R\}}|||f d }| jj� }| jj|d|� | jj|d|� | jj|d|� q4W | j | j
� d S | jt k�r,| j j� | jd }x`|D ]X\} }
|| |
f d }| j j� }| j j|d| � | j j|d|� | j j|dt
j|
� q�W | j | j� d S | jtk�r�| jj� | jd } x�| D ]|} | | d
}
| | jd d �}| | jd
d �}| jj� }| jj|d| � | jj|d|
� | jj|d|� | jj|d|� �qRW | j | j� d S | jtk�rx| jj� | jd }xd|D ]\}|| d }|| jd d �}| jj� }| jj|d|� | jj|d|� | jj|d|� �qW | j | j� d S | jtk�r�| jj� xX| jD ]N}|d �r�| jj� }| jj|d| j|d �� | jj|d| j|d �� �q�W | j | j� d S d S )NZAddFr r� r r r r r r� r� r# r� r r r� r ) r� r� r� r� rm r� r� r� r� r� rk ru rj r� r< rh r� r? r r@ r� r4 r5 r� rG rE r
rH )rP r{ r4 Z port_dictr� r� rY r| Z
fcontext_dictrS r Z user_dictr r� r� r� Z
login_dictr r� r� r r r r6 sv
z SELinuxGui.delete_button_clickedc G sx | j � | jtkrNx:| jD ]0}|d rd|d d�| jd |d |d f< qW | jtkr�x>| jD ]4}|d r`d|d d�| jd |d t|d f< q`W | jtkr�x8| j D ].}|d r�d|d |d d
�| jd |d < q�W | jt
k�r(x>| j D ]4}|d r�d|d |d |d d �| jd
|d < q�W | jt k�rlx6| j
D ],}|d �r<d|d d�| jd |d < �q<W | j� d S )Nr z-dr )r� r� r r r r r )r� r� r� r )r� r r� r� r )r� rS zfcontext-equiv)r' r� r� rm rX ru rj �reverse_file_type_strr� r? r� r4 r� rG r0 )rP r{ �deleter r r r� O s,
(
,
& ,
"z!SELinuxGui.on_save_delete_clickedc G s, x&| j D ] }t|d |d |d � qW d S )Nr r r )rj r� )rP r{ r^ r r r �!on_save_delete_file_equiv_clickedg s z,SELinuxGui.on_save_delete_file_equiv_clickedc C s || d || d< d S )Nr r )rP r� rS r� r r r r� k s zSELinuxGui.on_toggle_updatec C sV d}xL|D ]D}|d |d krF|d |d krF|j |�}|j|� d S |d7 }q
W d S )Nr r r )r� r� )rP rv r� r[ r� r| r r r � ipage_deleten s
zSELinuxGui.ipage_deletec C s� |sd S | j j|�}| j j|�}|j|d�}|j|d|j|d� � |j|d�}|| jd krl| jd |= nd|i| jd |< | j� d S )Nr r r r� )ry r� r� rw r� rX r0 )rP r� rS r� r| r� r� r r r r� w s zSELinuxGui.on_togglec G s |j � | _| jj� d S )N)r� r� r� �refilter)rP �entryr{ r r r r- � s
z#SELinuxGui.get_advanced_filter_datac G s |j � | _| jj� d S )N)r� r� r# ra )rP r) r{ r r r r � s
zSELinuxGui.get_filter_datac G sF d| _ | jj� x�| jd D ]�}| jd | d }| jjd �}| jj|dd� | jj|dtj|�� | jj|dt| jd | d � | jj|dd� | jj|�}| jj|dt d �| � | jj|dd
� q W �x�| jd D �]~\}}| jd ||f d }| jd ||f d }| jjd �}| jj|dd� | jj|d|� | jj|dd� |d
k�rr| jj|dt d�| j
� |dk�r�| jj|dt d�| j
� |dk�r�| jj|dt d�| j
� | jj|�}| jj|dd
� | jj|dt d�| � | jj|�}| jj|dd
� | jj|dt d�tj | � | jj|�}| jj|dd
� | jj|dt d�| � q�W �x�| jd D �]z\} }
| jd | |
f d }| jjd �}| jj|dd� | jj|d|� | jj|dd� |d
k�r�| jj|dt d�| j
� |dk�r| jj|dt d�| j
� |dk�r6| jj|dt d�| j
� | jj|�}| jj|dt d�| � | jj|dd
� | jj|�}| jj|dt d�|
� | jj|dd
� | jd | |
f d }| jj|�}| jj|dd
� | jj|dt d�| � �qnW �x�| jd D �]r} | jd | d }| jjd �}| jj|dd� | jj|d|� | jj|dd� |d
k�rn| jj|dt d �� |dk�r�| jj|dt d �� |dk�r�| jj|dt d �� | jj|�}| jj|dt d �| � | jj|dd
� | jj|�}| jj|dd
� | jd | d! } | jj|dt d"�| � | jd | j d#d$�}
| jj|�}| jj|dd
� | jj|dt d%�|
� �q�W �x�| jd& D �]r}| jd& | d }| jjd �}| jj|dd� | jj|d|� | jj|dd� |d
k�r�| jj|dt d'�� |dk�r| jj|dt d(�� |dk�r0| jj|dt d)�� | jj|�}| jj|dd
� | jj|dt d*�| � | jj|�}| jj|dd
� | jd& | d+ }| jj|dt d,�| � | jd& | j d#d$�}
| jj|�}| jj|dd
� | jj|dt d%�|
� �q�W �x8| jd- D �](}| jd- | d }| jjd �}| jj|dd� | jj|d|� | jj|dd� |d
k�rz| jj|dt d.�� |dk�r�| jj|dt d/�� |dk�r�| jj|dt d0�� | jj|�}| jj|dd
� | jj|dt d1�| � | jj|�}| jj|dd
� | jd- | d2 }| jj|dt d3�| � �qW | j
| j� d S )4NTr r� r r r r� r zSELinux name: %sFr r� z-azAdd file labeling for %sz-dzDelete file labeling for %sz-mzModify file labeling for %sz
File path: %szFile class: %szSELinux file type: %sr zAdd ports for %szDelete ports for %szModify ports for %szNetwork ports: %szNetwork protocol: %sr zAdd userz Delete userz Modify userzSELinux User : %sr� z Roles: %sr� r# zMLS/MCS Range: %sr zAdd login mappingzDelete login mappingzModify login mappingzLogin Name : %sr� zSELinux User: %szfcontext-equivzAdd file equiv labeling.zDelete file equiv labeling.zModify file equiv labeling.zFile path : %srS zEquivalence: %s)r� r� r� rX r� r� r� r r� r r� r< r r� rV )rP r{ Zboolsr4 r| r� rS r rY r r� r r� r� r r� rS r r r �
update_gui� s�
"
zSELinuxGui.update_guic C sL | j j� r| j | _| jj� r$| j| _| jj� r6| j| _| jj� rH| j| _d S )N)r� r� r� r� r� r� )rP r r r � set_active_application_button s
z(SELinuxGui.set_active_application_buttonTc C s~ | j j� | jjd� | jjd� | jjd� | jjd� | jjd� | jjd� | j jd� | j
jd� |rz| j j d� d S )NFr# )
r� r r� r� r� r� r� r� r� r� r� r� rJ )rP r� r r r rL s
zSELinuxGui.clearbuttonsc C sP | j � | jjd� | jjd� | jjtd�� | jjd� | j� | j � d S )NTZSystem)
rL r� r� r� r& rI r re rB r )rP r r r rH - s zSELinuxGui.show_system_pagec G sX | j � | j� | jjd� | jjtd�� | j� | j� | j j
d� | j j
d� d S )NTzFile Equivalence) rL r� r� re r& rI r rB r r� r� r� )rP r{ r r r r" 6 s z SELinuxGui.show_file_equiv_pagec C sx | j � | jjd� | jjd� | jjtd�� | jjd� | j� | j � | j
� | j � | j j
d� | jj
d� d S )NTZUsers)rL r� r� r� r& rI r re rB r� r� r r� r� r� )rP r r r �show_users_page@ s zSELinuxGui.show_users_pagec C sZ | j d� | jjd� | jjd� | jjd� | jjd� | jjd� | j� | j� d S )NFT) rL r� r� r� r� r� re rB r )rP r r r rK M s
z!SELinuxGui.show_applications_pagec G s | j � d S )N)rH )rP r{ r r r r# W s zSELinuxGui.system_interfacec G s | j � d S )N)re )rP r{ r r r r$ Z s zSELinuxGui.users_interfacec G s� g }d}| j j� }|j� dkr�x^| jD ]T}| jj|�}| jj|�}| jj|�}|d kr&| jj|d�dkrr|j |� |d7 }q&W xn|D ]}| jj
|� q�W nT| j d kr�| jj � |t
kr�| j| j � n*|tkr�| j| j � n|tkr�| j| j � d S )Nr Tr Fr )r� r� r� rv r" r� r� r# rw r� r� r� r� r� r� r� r� r� r� ) rP rC r{ Ziterlistr[ r� r� r| Zitersr r r r% ] s,
z SELinuxGui.show_mislabeled_filesc C sp t j|�d jd�d }t j|d�d jd�d }| jtd�|||d� dd�tjjkrl| j j
|� | j � d S ) Nr r r r zbRun restorecon on %(PATH)s to change its type from %(CUR_CONTEXT)s to the default %(DEF_CONTEXT)s?)�PATHZ CUR_CONTEXTZ DEF_CONTEXTzrestorecon dialog)�title) r� r� rm r� �verifyr r � ResponseTypeZYESr� Z
restoreconr4 )rP rS r r� r r r rx v s
& zSELinuxGui.fix_mislabeledc G s$ | j j| j� � | jj| j� � d S )N)r� r� r
r� )rP r{ r r r r0 } s zSELinuxGui.new_updatesc G sF | j � |j� td�k| _| jr2| jjtd�� n| jjtd�� d S )NZUpdatezUpdate ChangeszRevert Changes)rc � get_labelr r� rV r� )rP r� r{ r r r r, � s
z#SELinuxGui.update_or_revert_changesc G sb | j � | jr| j� n| j� d| _| j| jj� � d| _| j� | j � | j
� | j j � d S )NFT)
r' r� �update_the_system� revert_datar� rD r� r� r! r4 r0 r� r� )rP r{ r r r r+ � s
z%SELinuxGui.apply_changes_button_pressc G sl | j � | j� }| j� y| jj|� W n. tjjk
rV } zt|� W Y d d }~X nX | j� | j � d S )N)
r' �
format_updaterl r� rB r� r� r� rn r� )rP r{ rD rR r r r rk � s z SELinuxGui.update_the_systemc C s2 dddddd�}x |D ]}||kr|| S qW dS )Nr r r )zExecutable FileszWritable FileszApplication File TypeZInboundZOutboundZBooleansr )rP �lookupZ ipage_values�valuer r r �ipage_value_lookup� s
z SELinuxGui.ipage_value_lookupc C s4 |j d�d }|j d�d }|dkr,|| _n|S d S )Nz: r r z SELinux name)rm Z bool_revert)rP Z attributeZbool_idr r r �get_attributes_update� s
z SELinuxGui.get_attributes_updatec C s� | j � d}�xp| jD �]d}|dkrVx0| j| D ]"}|d| j| | d |f 7 }q0W |dk�rx�| j| D ]�}| j| | d dkr�|d| 7 }qld | j| | kr�|d
| j| | d | j| | d | j| | d |f 7 }ql|d | j| | d | j| | d |f 7 }qlW |d
k�rx�| j| D ]�}| j| | d dk�rX|d| 7 }n�d| j| | k�r�d | j| | k�r�|d| j| | d | j| | d | j| | d | j| | d |f 7 }n.|d| j| | d | j| | d |f 7 }�q.W |dk�rxxh| j| D ]Z}| j| | d dk�rD|d| 7 }n.|d| j| | d | j| | d |f 7 }�qW |dk�r�xx| j| D ]j}| j| | d dk�r�|d| 7 }n>|d| j| | d | j| | d | j| | d |f 7 }�q�W |dkrxv| j| D ]h\}}| j| ||f d dk�rF|d ||f 7 }n0|d | j| | d | j| | d ||f 7 }�qW qW |S ) Nr# r zboolean -m -%d %s
r� r r� z-dz login -d %s
r� zlogin %s -s %s -r %s %s
r� zlogin %s -s %s %s
r z user -d %s
r� z user %s -L %s -r %s -R %s %s
r� zuser %s -R %s %s
zfcontext-equivzfcontext -d %s
zfcontext %s -e %s %s
rS r zfcontext %s -t %s -f %s %s
r� r r zport -d -p %s %s
zport %s -t %s -p %s %s
)rl rX ) rP rD rZ r rE r� r� r r� r r r rm � sH "
@2
(P4
4
D :zSELinuxGui.format_updatec C s` d}g }d}x.| j D ]$}| j | d s0|j|� |d7 }qW |j� x|D ]}| j|� qJW d S )Nr r# r )r� r� �reverser^ )rP r[ Z remove_listrD r� r r r rl � s
zSELinuxGui.revert_datac G sN |j � td k}|r$|jtd � n|jtd � | jj|� | jj|� d S )Nr r )r� �ADVANCED_LABELrJ r� r� rP )rP �labelr{ �advancedr r r r@ � s z!SELinuxGui.reveal_advanced_systemc G sf |j � td k}|r$|jtd � n|jtd � | jj|� | jj|� | jj|� | jj|� d S )Nr r )r� rs rJ r_ r� r` ra rb )rP rt r{ ru r r r r � s zSELinuxGui.reveal_advancedc G sF |j � td kr(|jtd � | j� n|jtd � | j| j� d S )Nr r )r� �ADVANCED_SEARCH_LABELrJ r' r� r) )rP rt r{ r r r r�
s
z)SELinuxGui.on_show_advanced_search_windowc C sJ |r&| j j| jtd�� | jjd� n | j j| jtd�� | jjd� d S )NzSystem Status: EnforcingTzSystem Status: Permissive)r� r` r� r r� re r� )rP ro r r r rb
s
zSELinuxGui.set_enforce_textc C s, | j s
d S | jj|j� � | j|j� � d S )N)r� r� Z
setenforcer� rb )rP r� r r r r
s zSELinuxGui.set_enforcec G s` | j j� }|d krd S d| _| j j� | jj|� | jdkrH| j|� n| jdkr\| j|� d S )NF�Import�Export) r� � get_filenamer� r rY rJ r� �
import_config�
export_config)rP r{ r r r r r
s
zSELinuxGui.on_browse_selectc G sX | j j� }| jj� r0|jd�sT| j j|d � n$|jd�rT|jd�d }| j j|� d S )Nz(/.*)?r )rY r� r� r� r7 rJ rm )rP r{ rS r r r r #
s
zSELinuxGui.recursive_pathc G s" |j � }| jr |jd� d| _d S )Nr# F)r� r� rJ )rP Z entry_objr{ Ztxtr r r r ,
s
z SELinuxGui.highlight_entry_textc C s~ |j � }|dkrd S |jd�r*| jjd� xNtjD ]D}|j|�r2x4| jD ]*}|d jtj| �rH| j| j |d � qHW q2W d S )Nr# z(/.*)?Tr )
r� r7 r� re r� Z DEFAULT_DIRSr9 r� r� r] )rP rb �textr= r� r r r r 2
s
z#SELinuxGui.autofill_add_files_entryc G s& | j jd�| _| jj� }| jj� }d S )Nr )r� Zget_colZboolean_column_1Z get_widthZget_cell_renderers)rP r{ �widthZrendererr r r r3 >
s
zSELinuxGui.resize_columnsc G s | j j� d S )N)r� r )rP r{ r r r r& C
s zSELinuxGui.browse_for_filesc G s | j j� d S )N)r� r )rP r{ r r r r* F
s z SELinuxGui.close_config_windowc G sl | j | jj� krd S | jtd��tjjkr<| jj| j � d S | j j
| j | j�� | j j d� | jj� | _ d S )Nz�Changing the policy type will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue?T)
r� rP r� rh r r ri �NOre r� r= r� �relabel_on_boot)rP r{ r r r r= I
s z SELinuxGui.change_default_policyc C s4 | j s
d S | j|� |j� r0| jj|j� j� � d S )N)r� �enabled_changedr� r� r> rj r )rP r� r r r r> U
s
z SELinuxGui.change_default_modec G s0 | j jtjj� | j jd� | j j� d| _d S )NzImport Configurationrw )r� �
set_actionr �FileChooserActionZOPENr� r r� )rP r{ r r r r9 \
s
z SELinuxGui.import_config_showc G s0 | j jtjj� | j jd� | j j� d| _d S )NzExport Configurationrx )r� r� r r� ZSAVEr� r r� )rP r{ r r r r: c
s
z SELinuxGui.export_config_showc C s: | j � | jj� }t|d�}|j|� |j� | j� d S )N�w)rl r� r� r� r r� rn )rP r r� r� r r r r{ i
s
zSELinuxGui.export_configc C sT t |d�}|j� }|j� | j� y| jj|� W n tk
rF Y nX | j� d S )Nr )r� r� r� rl r� rB r_ rn )rP r r� r� r r r rz q
s
zSELinuxGui.import_configc C sV |||f|kr i ||||f< ||f||||f krR||| |
d�||||f ||f< d S )N)r� r� �changed�oldr ) rP rV rQ r� r4 r �qr5 r� r� r� r r r �init_dictionary|
s zSELinuxGui.init_dictionaryc C s* |j d�d }|dkrdS |dkr&dS d S )N�-r �0F�1T)rm )rP r r r r �translate_bool�
s
zSELinuxGui.translate_boolc G sx | j j� }tjjd�}|r"|r"d S | r2| r2d S y| jj|� W n0 tjjk
rr } z| j |� W Y d d }~X nX d S )Nz
/.autorelabel)
r� r� rc rS rd r� r r� r� r )rP r{ r� rd rR r r r r? �
s
z SELinuxGui.relabel_on_rebootc G s
|j � | jjd� | jjd� | j|krV| j| j� | j| j �t
d�krV| j jd� | j |kr�| j rt| j| j� n| j
r�| j| j� | jj� s�| jj� r�| jjd� | jjd� | jjd� | jjd� | jjd� | jjd� | jj� td k�r| jjtd � dS )NFTzMore...r r )r r� re r� r� rN r� r[ r� r] r r' r� r� r\ r_ Z get_visiblera r� r� r` r� rb r% r� rv rJ )rP r� r{ r r r rC �
s,
zSELinuxGui.closewindowc C s | j j� j| j� | j� d S )N)r� �
get_window�
set_cursorr� r )rP r r r rl �
s zSELinuxGui.wait_mousec C s | j j� j| j� | j� d S )N)r� r� r� r� r )rP r r r rn �
s zSELinuxGui.ready_mouser# c C sN t jd dt jjt jj|�}|j|� |jt jj � |j
� |j � }|j � |S )Nr )
r �
MessageDialog� MessageType�INFO� ButtonsTypeZYES_NOr� � set_position�WindowPosition�MOUSE�show_all�run�destroy)rP �messagerg �dlgZrcr r r rh �
s
zSELinuxGui.verifyc C sD t jd dt jjt jj|�}|jt jj� |j � |j
� |j � d S )Nr ) r r� r� ZERRORr� ZCLOSEr� r� r� r� r� r� )rP r� r� r r r r �
s zSELinuxGui.errorc C s� |j � s d S |j� }|dkrH| jtkrH| jtd��tjjkrH| j j
d� |dkr|| jtkr|| jtd��tjjkr|| j j
d� || _ d S )Nri a� Changing to SELinux disabled requires a reboot. It is not recommended. If you later decide to turn SELinux back on, the system will be required to relabel. If you just want to see if SELinux is causing a problem on your system, you can go to permissive mode which will only log errors and not enforce SELinux policy. Permissive mode does not require a reboot. Do you wish to continue?Tz�Changing to SELinux enabled will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue?) r� rj r� r rh r r ri r~ r� re )rP Zradiort r r r r� �
s zSELinuxGui.enabled_changedc G s | j jd� | jjd� d S )Nr# F)r� rJ r� re )rP r{ r r r r! �
s zSELinuxGui.clear_filtersc G sB | j s
d S | j� | jj� r*| jjd� n | jjd� | j� d S )Nzmodule -e unconfinedzmodule -d unconfined)r� rl r� r� r� rB rn )rP r{ r r r r; �
s
z SELinuxGui.unconfined_togglec G sB | j s
d S | j� | jj� r*| jjd� n | jjd� | j� d S )Nzmodule -e permissivedomainszmodule -d permissivedomains)r� rl r� r� r� rB rn )rP r{ r r r r< �
s
z SELinuxGui.permissive_togglec G s: t | j�dkr.| jtd�td��tjjkr.dS | j� d S )Nr a0 You are attempting to close the application without applying your changes.
* To apply changes you have made during this session, click No and click Update.
* To leave the application without applying your changes, click Yes. All changes that you have made during this session will be lost.zLoss of data DialogT)r r� rh r r ri r~ r� )rP r� r{ r r r r �
s z SELinuxGui.confirmation_closec G s t jd� d S )Nr )�sys�exit)rP r{ r r r r� �
s zSELinuxGui.quit)NF)T)r# )��__name__�
__module__� __qualname__rW r� r^ rE rq r r r� r� r1 r2 r0 r
r r
r r� r� r� r� r� r� r� r� r� r� r� r r r/ r. r� r4 rN rD r� r r r� r� r� r
r� r
r� r r� r r� r r� r rB r% rt r( r5 r� r' r7 r r8 r; r- r2 r, r( r) rr r r. r/ r r8 rG rH r rI rL rA r r r r r r6 r� r_ r� r` r� r- r rc rd rL rH r" re rK r# r$ r% rx r0 r, r+ rk rp rq rm rl r@ r r� rb r r r r r r3 r& r* r= r> r9 r: r{ rz r� r� r? rC rl rn rh r r� r! r; r< r r� r r r r r" s s* @
B*
} )Y 5+
D
A
/
r" �__main__)r )AZgiZrequire_versionZ
gi.repositoryr r r Zsepolicy.sedbusr r� r� r� r r r Zsepolicy.networkZsepolicy.manpager� rc r Z unicodedataZPROGNAME�gettext�kwargs� version_infoZinstall�builtinsr �__dict__� ImportErrorZ __builtin__r
r] r< r� r r� r� r Zdistutils.sysconfigr� rs rv r� r� r� r� r� r� r� r� rs ru r� ry r� r� r� r� r� r� rY ra r" r� r� r r r r �<module> s�