Server : LiteSpeed System : Linux barito.iixcp.rumahweb.net 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 User : elvh3918 ( 1528) PHP Version : 8.2.31 Disable Function : mail Directory : /lib64/python3.9/site-packages/setools/checker/__pycache__/ |
a
q�qe� � @ s� d dl Z d dlZd dlZd dlmZmZ d dlmZ ddlmZm Z ddl
m Z ddl m
Z
mZ dd lmZ d
ZG d d � d �ZdS )
� N)�datetime�timezone)�List� )�InvalidCheckerConfig�InvalidCheckerModule)�
SELinuxPolicy� )�CHECKER_REGISTRY�
CheckerModule)�CHECK_TYPE_KEYz;---------------------------------------------------------
c @ sV e Zd ZdZeedd�dd�Zedd� �Zej ed�d d��Ze
j fe d
�d d �Z
dS )
�
PolicyCheckerz;Configuration file-driven automated policy analysis checks.N)�policy�
configpath�returnc C s. t s J d��t�t�| _|| _g | _|| _d S )Nz$No checks are loaded, this is a bug.)r
�loggingZ getLogger�__name__�logr �checks�config)�selfr r � r �=/usr/lib64/python3.9/site-packages/setools/checker/checker.py�__init__ s
zPolicyChecker.__init__c C s | j S )N)� _configpath)r r r r r " s zPolicyChecker.config)r c
C s� | j �d�|�� zDt|d��&}t�� }|j||d� W d � n1 sJ0 Y W n6 ty� } z td�||��|�W Y d }~n
d }~0 0 | j �d� g }|� � D ]�\}}|dkr�q�z |t
}W n4 t y� } z t d�|t
���W Y d }~n
d }~0 0 zt
| | j||�} W n8 t �yH } z t d�||��|�W Y d }~n
d }~0 0 |�| � q�|�sjtd �|���| j �d
�t| j��� | j �d �|�� || _|| _|| _d S ) Nz!Opening policy checker config {}.�r)�sourcez%Unable to parse checker config {}: {}z"Validating configuration settings.ZDEFAULTz{}: Missing {} option.z!{}: Unknown policy check type: {}zNo checks found in {}.zValidated {} checks.z-Successfully opened policy checker config {}.)r �info�format�open� configparserZ ConfigParserZ read_file� Exceptionr �itemsr �KeyErrorr r
r �append�debug�lenr r Z_config)
r r �fdr �er � checknameZ checkconfig�
check_typeZnewcheckr r r r & sL 0�� � �� )r c C sd d}| j sJ d��|�t� |�d�| j�� |�d�| j�� |�d�t�tj ��� g }| j D �]^}d}z�|�t� |�d�|j
�� |j r�|�d�|j �� |j r�|�d�|j �� |�
|j
d �|j �f� | j�d
�|j
|j �� W qb| j�d �|j
|j�� ||_|t|�� �7 }|�d � W nN t�yv } z4|�d
�|�� | jjd|d� |d7 }W Y d}~n
d}~0 0 |�r�|�d� |�
|j
d�|�f� n|�d� |�
|j
df� ||7 }qb|�t� |�d� |D ] \}}|�d�||�� �q�|�d�|�� |�d�| j�� |�d�| j�� |�d�t�tj ��� | j�d�|t| j ��� |S )zCRun all configured checks and print report to the file-like output.r z=Configuration loaded but no checks configured. This is a bug.z Policy check configuration: {}
zPolicy being checked: {}
zStart time: {}
zCheck name: {}
zDescription: {}
z Check DISABLED. Reason: {}
z
DISABLED ({})z Skipping disabled check {!r}: {}z Running check {0!r}, type {1}.�
z'Unexpected error: {}. Failing check.
zException info)�exc_infor NzCheck FAILED
zFAILED ({} failures)zCheck PASSED
ZPASSEDzResult Summary:
z
{:<39} {}
z
{} failure(s) found.
z
End time: {}
z {} failures found in {} checks.)r �write�SECTION_SEPARATORr r r r Znowr Zutcr) Zdesc�disabler$ r r% r* �outputr& �runr! r ) r r0 ZfailuresZresult_summary�checkZcheck_failuresr( r) �resultr r r r1 P sb
�
�
�
zPolicyChecker.run)r �
__module__� __qualname__�__doc__r �strr �propertyr �setter�sys�stdout�intr1 r r r r r
s
)r
)r: r r r r �typingr � exceptionr r Z policyrepr Z
checkermoduler
r Z
globalkeysr r. r
r r r r �<module> s