+ :ic s^RIt^RIt^t^t^t^t^t^t.RmOtR]R]R]R]R]R]/t !RR 4t !R R ] 4t !R R ] 4t RnRlt RoRltRpRltRt!RR]4t!RR] 4t!RR] 4t!RR4t!RR] 4t!RR] 4t!RR] 4t!R R!] 4t!R"R#] 4t!R$R%] 4t!R&R'] 4t!R(R)] 4t!R*R+] 4t!R,R-] 4t!R.R/] 4t !R0R1] 4t!!R2R3] 4t"!R4R5] 4t#!R6R7] 4t$!R8R9] 4t%!R:R;] 4t&!R<R=] 4t'!R>R?] 4t(!R@RA] 4t)!RBRC] 4t*!RDRE] 4t+!RFRG] 4t,!RHRI] 4t-!RJRK] 4t.!RLRM] 4t/!RNRO] 4t0RPt1!RQRR] 4t2!RSRT] 4t3!RURV] 4t4!RWRX] 4t5!RYRZ] 4t6!R[R\] 4t7!R]R^] 4t8!R_R`] 4t9!RaRb] 4t:!RcRd] 4t;!ReRf] 4t<!RgRh4t=!RiRj4t>!RkRl4t?R#)qNsourcetargetobject permissionrole destinationcs*a]tRt^4toRRltRtVtR#) PolicyBaseNcs0RVnRVnRVnR#)NF)parentcommentgen_cilselfr&&7/usr/lib/python3.14/site-packages/sepolgen/refpolicy.py__init__ZPolicyBase.__init__5s   )r r rN)__name__ __module__ __qualname____firstlineno__r__static_attributes____classdictcell__Z __classdict__@rrr4srrcsa]tRt^:toRtRRltRtRtRtRt Rt R t R t R t R tR tRtRtRtRtRtRtRtRtRtRtRtRtRtVtR#)NodeaBase class objects produced from parsing the reference policy. The Node class is used as the base class for any non-leaf object produced by parsing the reference policy. This object should contain a reference to its parent (or None for a top-level object) and 0 or more children. The general idea here is to have a very simple tree structure. Children are not separated out by type. Instead the tree structure represents fairly closely the real structure of the policy statements. The object should be iterable - by default over all children but subclasses are free to provide additional iterators over a subset of their childre (see Interface for example). Nc>\PW4.VnR#r)rrchildrenr r rrZ Node.__init__KsD) rcs,\VP4#r)Ziterrr &r__iter__Z Node.__iter__OsDMM""rc.\R\V44#)c"\V\4#r) isinstancerxrrZNode.nodes..X 1d 3rZfilterwalktreerrrnodesZ Node.nodesW3Xd^DDrcr )cr!r)r"Moduler#rrr%ZNode.modules..[ 1f 5rr'rrrmodulesZ Node.modulesZ5x~FFrcr )cr!r)r" Interfacer#rrr%Z!Node.interfaces..^ 1i 8rr'rrr interfacesZNode.interfaces]8(4.IIrcr )cr!r)r"Templater#rrr%Z Node.templates..a 1h 7rr'rrr templatesZNode.templates`7$HHrcr )cr!r)r" SupportMacrosr#rrr%Z%Node.support_macros..d 1m .is 1.? @rr'rrrmodule_declarationsZNode.module_declarationshs@(4.QQrcr )cr!r)r" InterfaceCallr#rrr%Z&Node.interface_calls..lr8rr'rrrinterface_callsZNode.interface_callskr:rcr )cr!r)r"AVRuler#rrr%ZNode.avrules..or,rr'rrravrulesZ Node.avrulesnr.rcr )cr!r)r" AVExtRuler#rrr%Z!Node.avextrules..rr0rr'rrr avextrulesZNode.avextrulesqr2rcr )cr!r)r"TypeRuler#rrr%Z Node.typerules..ur4rr'rrr typerulesZNode.typerulestr6rcr )cr!r)r" TypeBoundr#rrr%Z!Node.typebounds..xr0rr'rrr typeboundsZNode.typeboundswr2rc .\R\V44#)zAIterate over all of the TypeAttribute children of this Interface.cr!r)r" TypeAttributer#rrr%Z%Node.typeattributes..|r8rr'rrrtypeattributesZNode.typeattributesz.r8rr'rrrroleattributesZNode.roleattributes~rJrcr )cr!r)r"Requirer#rrr%ZNode.requires..s 1g 6rr'rrrrequiresZ Node.requiress6GGrcr )cr!r)r"Roler#rrr%ZNode.roles..r&rr'rrrrolesZ Node.rolesr*rcr )cr!r)r" RoleAllowr#rrr%Z"Node.role_allows..r0rr'rrr role_allowsZNode.role_allowsr2rcr )cr!r)r"RoleTyper#rrr%Z!Node.role_types..r4rr'rrr role_typesZNode.role_typesr6rcVP'd2\VP4R,VP4,#VP4# r str to_stringrrr__str__Z Node.__str__8 <<<t||$t+dnn.>> >>># #rc\RVPP: RVP4: R2#Z<(z)>Z __class__rrZrrr__repr__Z Node.__repr__!^^44dnn6FGGrcR#rrrrZZNode.to_stringrcWnR#rr r r r r set_gen_cilZNode.set_gen_cil r)rr r)rrrr__doc__rrr)r-r1r5r9r<r>r@rBrDrFrIrLrNrPrRrTr[rarZrkrrrrrrr:s #EGJIN RNGJIJNNHEJI$ HrrcsBa]tRt^toRRltRtRtRtRtRt Vt R#) LeafNc0\PW4R#r)rrr r rrZ Leaf.__init__sD)rcrUrVrXrrrr[Z Leaf.__str__r\rcr]r^r`rrrraZ Leaf.__repr__rbrcrcrdrfrrrrZZLeaf.to_stringrgrcrhrrirjr rrkZLeaf.set_gen_cilrlrrir) rrrrrr[rarZrkrrrrrrnrns$*$ Hrrnc#s"V'dRpM^pV^3.p\V4^8dVPV4wrgV'dWg3xMVx\V\4'gKM.p\VP4^, p V ^8d^Ve$\VPV ,V4'd,VP VPV ,V^,34V ^,p KdVP V4KR#5i)a}Iterate over a Node and its Children. The walktree function iterates over a tree containing Nodes and leaf objects. The iteration can perform a depth first or a breadth first traversal of the tree (controlled by the depthfirst parameter. The passed in node will be returned. This function will only work correctly for trees - arbitrary graphs will likely cause infinite looping. Ni)lenZpopr"rrappendextend) nodeZ depthfirst showdepthtypeZindexZstackZcurdepthitemsis &&&& rr(r(sAYKE e*q.YYu%  * I c4 ECLL!A%Aq&<:cll1ot#D#DLL#,,q/519!=>Q LL # s AC9"BC9c#sV"VFpVe\W!4'gKVxK R#5i)aIterate over the direct children of a Node. The walktree function iterates over the children of a Node. Unlike walktree it does note return the passed in node or the children of any Node objects (that is, it does not go beyond the current level in the tree). N)r")rsrur$&& rwalknoderzs% <:a..Gs) )cs\V4pRpV^8d \R4hRPV4pV^8XdV#V^,R,V,R,V^,,#)zConvert a set (or any sequence type) into a string representation formatted to match SELinux space separated list conventions. For example the list ['read', 'write'] would be converted into: '{ read write }' rez"cannot convert 0 len set to string rp ValueErrorjoin)scontlrY&& rlist_to_space_strrs_ AA C1u=>> ((1+CAv Aw}s"S(4722rcs^\V4pV^8d \R4hRPV4#)iz(cannot convert 0 len set to comma string, r|)rr& rlist_to_comma_strrs, AA1uCDD 99Q<rc6a]tRtRtoRRltRtRtRtVtR#)IdSetiNcszV'd\PW4M\PV4RVnR#FN)setr compliment)r listr rrZIdSet.__init__s$  LL $ LL rc*\\V44#r)rsortedrrr to_space_strZIdSet.to_space_str ..rcrr)rrrrr to_comma_strZIdSet.to_comma_str rr)rr) rrrrrrrrrrrrrrs ///rrcsDa]tRtRtoRtR RltRtRtR RltRt Vt R#) SecurityContextiz;An SELinux security context with optional MCS / MLS fields.Nc s\PW4RVnRVnRVnRVnVeVP V4R#R#)zCreate a SecurityContext object, optionally from a string. Parameters: [context] - string representing a security context. Same format as a string passed to the from_string method. reN)rnruserrrulevel from_string)r contextr&&&rrZSecurityContext.__init__sE d#        W % rc s\P!V4pV^,^8Xd V^,pVPR4p\V4^8d\ RV,4hV^,VnV^,VnV^,Vn\V4^8d RPVR,4Vn R#RVn R#)zParse a string representing a context into a SecurityContext. The string should be in the standard format - e.g., 'user:role:type:level'. Raises ValueError if the string is not parsable as a security context. :z)context string [%s] not in a valid format:iNNN) selinuxZselinux_trans_to_raw_contextZsplitrpr}rrrur~r)r rZrawfieldsrrrZSecurityContext.from_strings227; q6Q;!fGs# v;?H7RS S1I 1I 1I v;?&*-DJDJrc sVPVP8H;'d\VPVP8H;'d;VPVP8H;'dVPVP8H#)zCompare two SecurityContext objects - all fields must be exactly the the same for the comparison to work. It is possible for the level fields to be semantically the same yet syntactically different - in this case this function will return false. )rrrur)r otherr r__eq__ZSecurityContext.__eq__9si yyEJJ&))yyEJJ&))yyEJJ&))zzU[[( )rc s@VPVPVP.pVPfCVf-\P !4^8XdVP R4M-VP V4MVP VP4RPV4#)amReturn a string representing this security context. By default, the string will contain a MCS / MLS level potentially from the default which is passed in if none was set. Arguments: default_level - the default level to use if self.level is an empty string. Returns: A string representing the security context in the form 'user:role:type:level'. Zs0r)rrrurrZis_selinux_mls_enabledrqr~)r Z default_levelrryrrZZSecurityContext.to_stringDsu))TYY 2 :: $113q8MM$' m, MM$** %xxr)rrrurNNr) rrrrrmrrrrZrrrrrrrs!E &4 )  rrcs.a]tRtRtoRtRRltRtVtR#) ObjectClassi^aSELinux object class and permissions. This class is a basic representation of an SELinux object class - it does not represent separate common permissions - just the union of the common and class specific permissions. It is meant to be convenient for policy generation. NcsZ\PW4Wn\4VnR#r)rnrnamerpermsr rrrrrZObjectClass.__init__fs d# W rrrreN)rrrrrmrrrrrrrr^srrcsPa]tRtRtoRtR RltRtRtR RltRt R t R t Vt R#) XpermSetikaExtended permission set. This class represents one or more extended permissions represented by numeric values or ranges of values. The .complement attribute is used to specify all permission except those specified. Two xperm set can be merged using the .extend() method. cs Wn.VnR#r complementranges)r rr rrZXpermSet.__init__us$ rc sXVPP4^pV\VP48dV^,\VP48dVPV^,,^,VPV,^,^,8:dVPV,^,\VPV,^,VPV^,,^,43VPV&VPV^,KV^, pEK R#)z0Ensure that ranges are not overlapping. N)rZsortrpZmax)r rxrrZ__normalize_rangesZXpermSet.__normalize_rangesys  #dkk""a%#dkk**;;q1u%a(DKKN1,=,AA&*kk!nQ&7T[[^A=N=A[[Q=OPQ=R:T&UDKKN AE* FA#rc spVPPVP4VP4R#)z%Add ranges from an xperm set N)rrr_XpermSet__normalize_rangesr rr rrrZXpermSet.extends& 188$ !rNc sjVfTpVPPW34VP4R#)z7Add value of range of values to the xperm set. N)rrqr)r ZminimumZmaximumrraddZ XpermSet.adds/ ?G G-. !rcsVP'gR#VP'dRMRp\VP4^8XdbVP^,^,VP^,^,8Xd+V\VP^,^,4,#\ RVP4pV: RRP V4: R2#)rez~ csV^,V^,8Xd\V^,4#\V^,4: R\V^,4: 2#)rZ-hexr#rrr%Z$XpermSet.to_string..s<!A$!A$,S1Y^s1Q4yRUVWXYVZR[<^^rz{ r{z })rrrprmapr~r ZcomplZvals& rrZZXpermSet.to_strings{{{R t{{ q T[[^A%6$++a.:K%K3t{{1~a011 1^`d`k`kl"CHHTN33rcsVP'gR#VP'dRMRp\RVP4pRV^,: RPV4: V^,: R2#)re)csV^,V^,8Xd\V^,4#R\V^,4: R\V^,4: R2#)rz(range r{rrr#rrr%Z(XpermSet.to_string_cil..sA!A$!A$,S1Yf,sSTUVSWyZ]^_`a^bZc%>%@@@4??#a'!=!=!???s7Nr)rrrrrrrrrrs rrcr) TypeAliasiNcrr)rnrrurrr r rrZTypeAlias.__init__s d# w rcsVP'dDRpVPF/pVRV,, pVRV: RVP: R2, pK1 V#RVP: RVPP4: R2#)rez(typealias %s) rr{rz typealias z alias r)r rrurrrrrZZTypeAlias.to_string sk <<<A\\'!++AtyyAA"H 04yy$,,:S:S:UV Vr)rrurrrrrrrs WWrrcr) AttributeiNc<\PW4WnR#rrnrrrrrrZAttribute.__init__ d# rcrVP'dRVP,#RVP,#)z attribute %s;z(typeattribute %s)r rrrrrZZAttribute.to_strings) <<<"TYY. .'$))3 3rrrrrrrrr44rrcr)Attribute_RoleiNcrrrrrrrZAttribute_Role.__init__rrcr)z(roleattribute %s)zattribute_role %s;rrrrrZZAttribute_Role.to_string#s) <<<'$))3 3'$))3 3rrrrrrrrrrrrcsPa]tRtRtoRt^t^t^t^tR Rlt Rt Rt Rt Rt VtR#) r?i,aSELinux access vector (AV) rule. The AVRule class represents all varieties of AV rules including allow, dontaudit, and auditallow (indicated by the flags self.ALLOW, self.DONTAUDIT, and self.AUDITALLOW respectively). The source and target types, object classes, and perms are all represented by sets containing strings. Sets are used to make it simple to add strings repeatedly while avoiding duplicates. No checking is done to make certain that the symbols are valid or consistent (e.g., perms that don't match the object classes). It is even possible to put invalid types like '$1' into the rules to allow storage of the reference policy interfaces. Ncs\PW4\4Vn\4Vn\4Vn\4VnVPVnV'dVPV4R#R#r) rnrr src_types tgt_types obj_classesrALLOW rule_typefrom_av)r avrrrrZAVRule.__init__AsR d# 7W  LL  rcVPVP8XdR#VPVP8XdR#VPVP8XdR#VPVP8XdR#R#)ZallowZ dontauditZ auditallowZ neverallowN)rr DONTAUDIT AUDITALLOW NEVERALLOWrrr__rule_type_strZAVRule.__rule_type_strKsS >>TZZ ' ^^t~~ - ^^t . ^^t ./rc sVPPVP4VPVP8XdVPPR4M%VPPVP4VP PVP 4VPPVP4R#)z9Add the access from an access vector to this allow rule. r N) rrsrc_typetgt_typerr obj_classrupdate)r rr rrZAVRule.from_avUs 2;;' ;;"++ % NN  v & NN  r{{ + R\\* "((#rc s2VP'dRpVPFnpVPF[pVPFHpVRVP 4: RV: RV: RV: RRP VP 4: R2 , pKJ K] Kp V#VP 4: RVPP4: RVPP4: RVPP4: RVP P4: R2 #)zReturn a string representation of the rule that is a valid policy language representation (assuming that the types, object class, etc. are valid). rer_r{ (z)))rr)r rrr_AVRule__rule_type_strr~rrr rsrctgtZobj& rrZZAVRule.to_stringas <<<A~~>>C#//t7K7K7M7:C7:xx 7KMM 0*& H(,(<(<(>(,(C(C(E(,(C(C(E(,(8(8(E(E(G(, (?(?(A C Cr)rrrrrr)rrrrrmrrrrrrrrZrrrrrr?r?,s; EIJJ  $CCrr?csVa]tRtRtoRt^t^t^t^tR Rlt Rt Rt Rt Rt R tVtR#) rAivaRExtended permission access vector rule. The AVExtRule class represents allowxperm, dontauditxperm, auditallowxperm, and neverallowxperm rules. The source and target types, and object classes are represented by sets containing strings. The operation is a single string, e.g. 'ioctl'. Extended permissions are represented by an XpermSet. Ncs \PW4\4Vn\4Vn\4VnVP Vn\4Vn W n V'dVPW4R#R#r) rnrrrrr ALLOWXPERMrrxperms operationr)r roprs&&&&rrZAVExtRule.__init__sW d# 7j  LL  rcr)Z allowxpermZdontauditxpermZauditallowxpermZneverallowxpermNrrDONTAUDITXPERMAUDITALLOWXPERMNEVERALLOWXPERMrrrrZAVExtRule.__rule_type_strsY >>T__ , ^^t22 2# ^^t33 3$ ^^t33 3$4rcr)ZallowxZ dontauditxZ auditallowxZ neverallowxNrrrr__rule_type_str_cilZAVExtRule.__rule_type_str_cilsY >>T__ , ^^t22 2 ^^t33 3 ^^t33 3 4rcsVPPVP4VPVP8XdVPPR4M%VPPVP4VP PVP 4W nVPV,VnR#)r N) rrrrrrrrr)r rrrrrZAVExtRule.from_avs| 2;;' ;;"++ % NN  v & NN  r{{ + R\\*iim rc shVP'dRpVPF{pVPFhpVPFUpVRVP 4: RV: RV: RVP : RV: RVP P4: R2 , pKW Kj K} V#VP4: RVPP4: RVPP4: RVPP4: RVP : RVP P4: R2 #)zReturn a string representation of the rule that is a valid policy language representation (assuming that the types, object class, etc. are valid). rer_r{rz))rr) r rrr_AVExtRule__rule_type_str_cilrrr_AVExtRule__rule_type_strrrZrrrrZZAVExtRule.to_strings <<<A~~>>C#//8P8P8R8;S8<8;8< 8Q8Q8S UU 0*&H+/+?+?+A+/>>+F+F+H+/>>+F+F+H+/+;+;+H+H+J+/>>+/;;+@+@+B D Dr)rrrrrr)NNN)rrrrrmrrrrrrrrrZrrrrrrArAvs@JNOO !%!$DDrrAcsLa]tRtRtoRt^t^t^tR RltRt Rt Rt Rt Vt R#) rCizSELinux type rules. This class is very similar to the AVRule class, but is for representing the type rules (type_trans, type_change, and type_member). The major difference is the lack of perms and only and sing destination type. Ncs\PW4\4Vn\4Vn\4VnRVnVPVnR#r) rnrrrrr dest_typeTYPE_TRANSITIONrr r rrZTypeRule.__init__s> d# 7--rczVPVP8XdR#VPVP8XdR#R#)Ztype_transitionZ type_changeZ type_memberrr TYPE_CHANGErrrrZTypeRule.__rule_type_strs/ >>T11 1$ ^^t// /  rcr)ZtypetransitionZ typechangeZ typememberrrrrrZTypeRule.__rule_type_str_cils/ >>T11 1# ^^t// /rc sVP'dxRVP4: RVPP4: RVPP4: RVP P4: RVP : R2 #VP4: RVPP4: RVPP4: RVP P4: RVP : R2 #)r_r{rrr)r _TypeRule__rule_type_str_cilrrrrr_TypeRule__rule_type_strrrrrZZTypeRule.to_strings <<<)-)A)A)C)-)D)D)F)-)D)D)F)-)9)9)F)F)H)- 9 9 )-(<(<(>(,(C(C(E(,(C(C(E(,(8(8(E(E(G(, 8 8r)rrrrrr)rrrrrmrrZ TYPE_MEMBERrrrrZrrrrrrCrCs4 OKK.!  8 8rrCcr)rEizKSElinux typebound statement. This class represents a typebound statement. Ncrr)rnrrurrr r rrZTypeBound.__init__s d# rcsVP'd4RpVPFpVRVP: RV: R2, pK! V#RVP: RVPP4: R2#)rez (typebounds r{rz typebounds r)r rrurrrrrZZTypeBound.to_stringsY <<<A^^TYY::$H  +/))T^^5P5P5RS Sr)rrurrrrrrErEs! TTrrEcr)rQi Ncsl\PW4\4Vn\4VnR#r)rnrr src_roles tgt_rolesr r rrZRoleAllow.__init__ s  d#rcsVP'd=RpVPF(pVPFpVRV: RV: R2, pK K* V#RVPP4: RVPP4: R2#)rez (roleallow r{rzallow r)r rrr)r rrr& rrZZRoleAllow.to_stringsu <<<A~~>>CS99A*&H &*^^%@%@%B%)^^%@%@%BD Dr)rrrrrrrrQrQ s! D DrrQcr)rSiNcrrrr r rrZRoleType.__init__rrcsRpVPFOpVP'dVRVP: RV: R2, pK3VRVP: RV: R2, pKQ V#)rerr{rrrr)rr rrrrrZZRoleType.to_string#sK A|||TYY::dii;;  rrrrrrrrSrSs rrScr)r;i,NcsZ\PW4RVnRVnRVnR#reFN)rnrrversion refpolicyr r rrZModuleDeclaration.__init__-s# d#  rcsVP'dR#VP'd RVP: RVP: R2#RVP: RVP: R2#)rezpolicy_module(rrzmodule r{r)r rrrrrrrZZModuleDeclaration.to_string3sD <<<~~~26))T\\JJ+/))T\\BBr)rrrrrrrrr;r;,s CCrr;cr) Conditionali<Ncrrrr cond_exprr r rrZConditional.__init__= d#rc>R\VPRR7,#)z[If %s]rrrrrrrrZZConditional.to_stringAs,T^^(KKKrrrrrrrrr<sLLrrcr)BooliDNcsL\PW4RVnRVnR#r)rnrrstater r rrZ Bool.__init__Es d#  rcspRVP,pVP'd VR,#VR,#)zbool %s ZtrueZfalserr rrrrZZBool.to_stringJs-  " 777v: w; rr rrrrrr r Ds rr cr) InitialSidiQNcL\PW4RVnRVnR#r)rnrrrr r rZ__initZInitialSid.__initR d#  rcVP'd)RVP: R\VP4: R2#RVP: R\VP4: 2#)z(sid r{rzsid )r rrYrrrrrZZInitialSid.to_stringWsB <<<$(IIs4<? ?r)rrr)rrrrZ_InitialSid__initrZrrrrrrrQs @@rrcr)GenfsConi]NcZ\PW4RVnRVnRVnR#r)rnr filesystempathrr r rrZGenfsCon.__init__^s# d#  rcVP'd7RVP: RVP: R\VP4: R2#RVP: RVP: R\VP4: 2#)z (genfscon r{rz genfscon )r rrrYrrrrrZZGenfsCon.to_stringdsN <<<,0OOTYYDLLHYZ Z +///499c$,,FWX Xr)rrrrrrrrrr]s YYrrcs<a]tRtRto^t^t^tRRltRtRt Vt R#) FilesystemUseijNcsn\PW4VPVnRVnRVnR#r)rnrXATTRrurrr r rrZFilesystemUse.__init__os' d#JJ  rcs<RpVP'dVPVP8XdRpM;VPVP8XdRpMVPVP8XdRpRV: RVP : R\ VP4: R2#VPVP8XdRpM;VPVP8XdRpMVPVP8XdR pV: RVP : R\ VP4: R 2#) rez fsuse xattr z fsuse trans z fsuse task r_r{rz fs_use_xattr z fs_use_trans z fs_use_task r)r rurTRANSTASKrrYrrrrrZZFilesystemUse.to_stringus  <<<yyDJJ&"djj("dii'!#$doos4<<7HI IyyDJJ&#djj(#dii'""#T__c$,,6GH Hr)rrrur) rrrrrrrrrZrrrrrrrjs% E E D IIrrcr)PortConiNcrr)rnr port_type port_numberrr r rrZPortCon.__init__s$ d# rcr)z (portcon r{rzportcon )r rrrYrrrrrZZPortCon.to_stringsU <<<+/>>4;K;KSQUQ]Q]M^_ _ *.9I9I3t||K\] ]r)rrrrrrrrrrs ^^rrcr)NodeConiNcrr)rnrstartendrr r rrZNodeCon.__init__s# d#  rcr)z (nodecon r{rznodecon )r rr rYrrrrrZZNodeCon.to_stringsN <<<+/::txxT\\ARS S *.TXXs4<T>T:U*-d.A.A*BD Dr)r"r#r$rrrrrr!r!s# DDrr!cr)PirqConiNcrr)rnr pirq_numberrr r rrZPirqCon.__init__s d# rcr)z (pirqcon r{rzpirqcon )r r&rYrrrrrZZPirqCon.to_stringsF <<<(,(8(8#dll:KL L '+&6&6DLL8IJ Jr)rr&rrrrrr%r% KKrr%cr)IomemConiNcrr)rnr device_memrr r rrZIomemCon.__init__s d# rcr)z (iomemcon r{rz iomemcon )r r)rYrrrrrZZIomemCon.to_stringsB <<<)-#dll:KL L (,DLL8IJ Jr)rr)rrrrrr(r(r'rr(cr) IoportConiNcrr)rnrioportrr r rrZIoportCon.__init__ d#  rcr)z (ioportcon r{rz ioportcon )r r+rYrrrrrZZIoportCon.to_stringsB <<<*.++s4<<7HI I )- S5FG Gr)rr+rrrrrr*r*s HHrr*cr) PciDeviceConiNcrr)rnrdevicerr r rrZPciDeviceCon.__init__r,rcr)z(pcidevicecon r{rz pcidevicecon )r r.rYrrrrrZZPciDeviceCon.to_stringsB <<<-1[[#dll:KL L ,0;;DLL8IJ Jr)rr.rrrrrr-r-r'rr-cr) DeviceTreeConiNcrr)rnrrrr r rrZDeviceTreeCon.__init__rrcr)z(devicetreecon r{rzdevicetreecon )r rrYrrrrrZZDeviceTreeCon.to_stringsB <<<.2iiT\\9JK K -1IIs4<<7HI Ir)rrrrrrrr/r/s JJrr/cs\VRR7F=wrRp\V4F pVR,pK \V\V4,4K? R#)T)rtreZ N)r(ZrangeZprintrY)Zheadrsrvrrxrr print_treer0sA5  uADA a#d)m 6rcr)HeadersiNcrorrrr r rrZHeaders.__init__ d#rcrc)z [Headers]rfrrrrZZHeaders.to_stringsrrfrrrrrr1r1s$rr1cr)r+iNcrorr2r r rrZModule.__init__r3rcrcrdrfrrrrZZModule.to_stringrgrrfrrrrrr+r+s$rr+cr)r/iziA reference policy interface definition. This class represents a reference policy interface definition. NcrrrrrrrrrZInterface.__init__ rrc(RVP,#)z[Interface name: %s]rrrrrZZInterface.to_strings% 11rrrrrrrr/r/s22rr/cr) TunablePolicyiNcrrrr r rrZTunablePolicy.__init__rrcr)z[Tunable Policy %s]rrr rrrrZZTunablePolicy.to_strings$'8h'WWWrr rrrrrr6r6sXXrr6cr)r3iNcrrr4rrrrZTemplate.__init__rrcr5)z[Template name: %s]rrrrrZZTemplate.to_string!s$tyy00rrrrrrrr3r3s11rr3cr)IfDefi$Ncrrr4rrrrZIfDef.__init__%rrcr5)z[Ifdef name: %s]rrrrrZZIfDef.to_string)s!DII--rrrrrrrr7r7$s..rr7cr)IfElsei,Ncrrr4rrrrZIfElse.__init__-rrcr5)z[Ifelse name: %s]rrrrrZZIfElse.to_string1s"TYY..rrrrrrrr8r8,s//rr8cr)r=i4NcsX\PW4Wn.Vn.VnR#r)rnrifnameargscomments)r r9rrrrZInterfaceCall.__init__5s! d#   rcsVPVP8wdR#\VP4\VP48wdR#\VPVP4Fwr#W#8wgK R# R#)FT)r9rpr:Zzip)r rrZbrrmatchesZInterfaceCall.matches;sX ;;%,, & tyy>S_ ,tyy%**-CAv.rcsRVP,p^pVPFPp\V\4'd \ V4pMTpV^8wdVRV,,pMW,pV^, pKR VR,#)z%s(rr)r9r:r"rr)r rrxrrYrrrZZInterfaceCall.to_stringEso DKK  A!T""'*Av $G FA3wr)r:r;r9r) rrrrrr<rZrrrrrr=r=4s rr=cr)OptionalPolicyiUNcrorr2r r rrZOptionalPolicy.__init__Vr3rcrc)z[Optional Policy]rfrrrrZZOptionalPolicy.to_stringYs"rrfrrrrrr=r=Us$##rr=csHa]tRtRtoR RltRtRtRtRtRt R t Vt R#) r7i\Ncs>\PW4RVnR#r)rrrr r rrZSupportMacros.__init__]s d#rcrc)z[Support Macros]rfrrrrZZSupportMacros.to_stringas!rcs\4pWP9d;VPV4F#pVPVP V44K% V#VP V4V#r)rrby_namer_SupportMacros__expand_permr)r permrprrZ __expand_permZSupportMacros.__expand_permdsX E 88 \\$'++A./( EE$Krcs/VnVFXp\4pVPF#pVPVP V44K% W PVP &KZ R#r)rrrrr?r)r r$Z exp_permsr@rrZ __gen_mapZSupportMacros.__gen_mappsQAI  !3!3D!9: (HHQVV  rcslVP'gVP4VPV,#rr_SupportMacros__gen_mapr rr rr>ZSupportMacros.by_namexs#xxx NN xx~rcsbVP'gVP4WP9#rrBrDr rhas_keyZSupportMacros.has_key}s"xxx NN xxr)rr) rrrrrrZr?rCr>rErrrrrr7r7\s(" )   rr7cr)rMiNcs\PW4\4Vn/Vn\4Vn\4Vn\4VnR#r)rnrrrrrPdatausersr r rrZRequire.__init__s: d#W W G W rcspVPPV\44pVPV4R#r)rZ setdefaultrr)r rrrAs&&& r add_obj_classZRequire.add_obj_classs'    ' ' 57 ; rcsp.pVP'dhVPFpVPRV,4K VPFpVPRV,4K RP V4#VPR4VPFpVPRV,4K VP P 4F-wrEVPRV: RVP4: R24K/ VPFpVPRV,4K VPFpVPR V,4K VPFpVPR V,4K VPR 4\V4^8XdR #RP V4#) z%(typeattributeset cil_gen_require %s)z%(roleattributeset cil_gen_require %s)rWz require {z type %s;z class r{rz role %s;z bool %s;z user %s;}re) r rrqrPr~rrwrrFrGrp)r rrurrrZboolrs& rrZZRequire.to_stringsG  <<< @4GH# @4GH#99Q<  HH[ ! ,-#$($4$4$:$:$< Y8J8J8LMN%= ,-# ,-" ,-# HHSM1v{99Q< r)rFrrPrrGr) rrrrrrHrZrrrrrrMrMs   rrMc,a]tRtRtoRtRtRtVtR#) ObjPermSetics0Wn\4VnR#r)rrrrDr rrZObjPermSet.__init__s U rcs\RVP: RVPP4: R2#)zdefine(`z', `z'))rrrrrrrZZObjPermSet.to_strings'+yy$**2I2I2KLLrrNrrrrrKrKsMMrrKcrJ)ClassMapicsWnW nR#rrr)r rrrrrZClassMap.__init__s " rcsJVPR,VP,#)z: rMrrrrZZClassMap.to_strings~~$tzz11rrMNrrrrrLrLs22rrLcsBa]tRtRtoR RltRtRtRtRtRt Vt R#) CommentiNcs@V'dWnM.VnRVnR#r)linesr )r rr rrZComment.__init__s JDJ rcs\VP4^8XdR#.pVPFGpVP'dVPRV,4K/VPRV,4KI RP V4#)rrerZ#rW)rprOr rqr~)r ZoutlinerrrZZComment.to_stringsc tzz?a C <<<JJsTz*JJsTz* # 99S> !rcs\VP4'd:VPF'pVR8wgK VPPV4K) R#R#r)rprOrq)r rrPryrmergeZ Comment.merges= u{{   2:JJ%%d+$ rcs"VP4#r)rZrrrr[ZComment.__str__s~~rcrhrrirjr rrkZComment.set_gen_cilrlr)r rOr) rrrrrrZrQr[rkrrrrrrNrNs# ",  rrN)rrrrrr)TFNr))Z{rI)@ZstringrZSRC_TYPEZTGT_TYPEZ OBJ_CLASSZPERMSZROLEZ DEST_TYPEZ field_to_strZ str_to_fieldrrrnr(rzrrrrrrrrHrKrOrrrrr?rArCrErQrSr;rr rrrrrr!r%r(r*r-r/r0r1r+r/r6r3r7r8r=r=r7rMrKrLrNrfrrrRs("     T Hh8iuft]YQ  a:aF:,$ L 3" /C /N dN ` $ BABALXDX(\D\*4$4.WW 4 4 4T 4HCTHCTNDNDb08t08dTT&DD" t CC L$L 4  @ @ Yt YIDI@ ^d ^ Rd R Dt D Kd K Kt K H H K4 K JD JdT 2 2XDX1t1.D./T/DB#T#$ D$ L* d* XMM22  r