+ :ilcs(Rt^RIt^RIt^RIt^RIHt^RIHtR.t ]Pt !R R4tR# ] d^RI t ^RI t ] P!4^,t] P !R]4'd^t LP] P !R]4'd^t Lm] P !R]4'd^t L] P !R]4'd^t L] P !R ]4'd^@t L] P !R ]4'dR t L^t Li;i) zAccess control for setroubleshoot. For now this is only used for determining which users are allowed to connect to the server: see UserServerAccess for more information.N) get_config) syslog_trace ServerAccessz^i\d86z^x86_64z^(ppc|powerpc)z ^(alpha|mips)z^sparcz^parisci@csba]tRt^BtoRtRRR/RRR//tRtRtR tR t R t R t R t Rt VtR#)rz[ Determine if a user should be given access to the server based on the configuration file. ZclientwildcardTZfix_cmdFcs/Vn\\PP44F!pVP V4VPV&K# R#)N) privilegesZlistrZkeysinit_privilegeself privileges& B/usr/lib/python3.14/site-packages/setroubleshoot/access_control.py__init__ZServerAccess.__init__LsBl55::<=I)-)<)cs\RRV,4PR4Uu.uFq"P4NK ppV#uupi)Zaccessz%s_usersZ,)rZsplitZstrip)rrZnameZ cfg_namess&& r rZServerAccess.init_privilegeWsK*y*@AGGLNL'+ZZ\L NNsAcsV\P9pV'dR#\P!\PRV,4R#)Tzunknown access privilege (%s)F)rrsyslogLOG_ERR)rrZvalids&& r valid_privilegeZServerAccess.valid_privilege\s3\444  fnn&E &QRr csVPV4'gR#\PV,R,'gR#RVPV,9#)FrZ*)rrrrs&&r unrestricted_privilegeZ#ServerAccess.unrestricted_privilegecsC##I..&&y1*==dooi000r c sVPV4'gR#VPV4'dR#W PV,9dR#R#)zk Determine if the given user name is allowed access. Returns True if access should be given, False if not. FT)rrr)rrZusers&&&r user_allowedZServerAccess.user_allowedksA ##I..  & &y 1 1 ??9- -r c sVPV4'gR#VPV4'dR#^RIpVPV4pTP Y^,4# \dR#i;i)z Determine if the given uid is allowed access. No error is returned if the uid is invalid (False is returned). Returns True if access should be given, False if not. FTN)rrpwdZgetpwuidZKeyErrorr)rruidrZ pwd_entrys&&& r uid_allowedZServerAccess.uid_allowedzso##I..  & &y 1 1   S)I   aL99   sA!! A0/A0c s4R;p;r4VPpV\P8wdW43#Rp\P !V4pVP \P\V4p\P!Wh4wr#pVR8XdRpVR8XdRpVR8XdRpW43# \dLi;i \d[p R;p;r4^RI p \T P44\P!\PRT ,4Rp ? Y43#Rp ? ii;i)zObtain the effective user and group IDs of the process on the other end of a socket. SO_PEERCRED is used so the information returned is generally trustworthy (though root processes can impersonate any uid/gid).NZIIIzget_credentials(): %si)familySocketZAF_UNIXAttributeErrorstructZcalcsizeZ getsockoptZ SOL_SOCKET SO_PEERCREDZunpackZ Exception tracebackrZ format_excr r ) rZsockZpidrZgidrZ format_ucredZ sizeof_ucredZucredZers && r get_credentialsZServerAccess.get_credentialss c [[F'x(  |4  GOOF$5$5{LQE"MM,>MCcbybybyx-     G" "C "#  --/ 0 MM&..*AA*E F Fx  Gs+#B!AB2! B/.B/2 D=ADD)rN)Z__name__Z __module__Z __qualname__Z__firstlineno____doc__rr rrrrrrZ__static_attributes__Z__classdictcell__)Z __classdict__s@r rrBsP Z.j%0J H 1 :,""r )rrZsocketrr Zsetroubleshoot.configrZsetroubleshoot.utilrZ__all__rrZosZreZunameZmachineZsearchr)r r rs(* ,, $$K,pp+  hhjmG yyG$$ :w ' ' $g . . #W - - 9g & & :w ' '  #sW 7?D7D;DDD1D5DDD+D/DD DD