+ ,i?cszaRt$0t^RIt^RIt^RIHt^RIHt^RIHt^RI H t ^RI H t ^RIt^RIt^RIHtHt^RIHtR t]^kRt]^k^t]^k^ t]^kRt]^k] !R R 44tRRltRRlt]]]]]]]],] ,3,3,3,t!!RR 4t"!RR 4t#R#)iN) OrderedDict)Iterable)suppress) dataclass) resources) exception policyrep)PermissionMapDescriptorperm_map RuleWeightMapping PermissionMapcs0a]tRt^toRtV3RltRtVtR#)r zDThe read and write weights for a rule, given all of its permissions.c2<V^8dQh/S[;R&S[;R&#)Zreadwriteintformat __classdict__"6/usr/lib64/python3.14/site-packages/setools/permmap.py __annotate__ZRuleWeight.__annotate__s I  J N)__name__ __module__ __qualname____firstlineno____doc____annotate_func____static_attributes____classdictcell__r@rr r sOrc0V^8dQhR\R\/#)r weightreturnrr"rrr(sCCrcsT\Tu;8:d \8:gM\RV 24hV#)z!Permission weights must be 1-10: ) MIN_WEIGHT MAX_WEIGHT ValueError)r$&rvalidate_weightr,(s'  -: -5FDNN9 %j 1 .-- ?.KLL !::22i[*_3]^^;rc <V^8dQhRS[/#r r%)r6rrrrr7Zs**t*rcsVPVP8XdVPVP8#VPVP8#N)r=r>)r@Zothers&&r__lt__ZMapping.__lt__Zs8 ;;%,, &99uzz) ){{U\\))rcr )r r=r>r.rrrrr7:s K Ir)r<r=r>N)F)rrrrrrr,r$r1r-r6r9rArErrr r!r"rr r :sE; $_ 5F'(:;I%d+G__,**Arcsna]tRt^atoRt]t]tR'V3RlRlltV3RlRltV3RlRlt V3R lR lt V3R lR lt V3R lRlt V3RlRlt V3RlRltV3RlRltV3RlRltV3RlRltV3RlRltV3RlRltV3RlRltV3RlR ltV3R!lR"ltV3R#lR$ltV3R%ltR&tVtR#)(r z-Permission Map for information flow analysis.NcsV<V^8dQhRS[S[P,R,RR/#)r permmapfileNr%r/pathlibPathrrrrPermissionMap.__annotate__hs)  C',,$6$=  rc sv\P!\4Vn\ 4VnVV'dVP V4R#\P!R4p\P!V\, 4;_uu_4pVP V4RRR4R# +'giR#;i)D Parameter: permmapfile The path to the permission map to load. ZsetoolsN) loggingZ getLoggerrlogr_permmapload pkg_resourcesZfilesZas_fileDEFAULT_PERM_MAP)r@rFZpackage_locationZpath&& rrAZPermissionMap.__init__hsw $$X.#.=   IIk ",229= &&'7:J'JKKt $LKKKs B'' B8 crBrCr.rrrrrJxs&&&rcs,\VP4#rD)r/ _permmapfiler@r+r__str__ZPermissionMap.__str__xs4$$%%rcs<V^8dQhRR/#)r r%r rrrrrrJ{sOrcs\P\4pVPVn\P!VP 4VnVP VnW!\V4&V#rD)r Z__new__rMcopyZdeepcopyrNrSZid)r@ZmemoZnewobj&& r __deepcopy__ZPermissionMap.__deepcopy__{sO&&}5XX -- 6"//RX rc0<V^8dQhRS[S[,/#rC)rr rrrrrJs(7+rc#st"VP4FpVPV4FpVxK K! R#5irD)classesperms)r@Zclsmappings& r__iter__ZPermissionMap.__iter__s,<<>C::c? +"s68csH<V^8dQhRS[S[P,RR/#r rFr%NrGrrrrrJs,i[i[gll 2i[ti[rc sVVPPRV R24\VRRR7;_uu_4p^p^p^p^pVPP 4\ V^R7EFwrxVP 4p \V 4^8XgV ^,^,R8XdK=V^8Xd=\V ^,4pT^8d\P!T RT R T 24h^pKV^8Xd\V 4^8wgV ^,R 8wd\P!V RV R V 24h\V ^,4p \V ^,4p T ^8d\P!T RT RT 24hT^, pYE8d\P!T RT RT 24h\4TPT &^p ^pEKXV^8XgEKb\V ^,4p\V ^,4pV\9d\P!V RV RV 24h\V ^,4p\Tu;8:d \ 8:g/M\P!T RT R\ R\ RT 2 4hTPP#RX RT RT RT 24TR8Xd#TPPRT RT R24\%TPYRR7pTTnTTnT^, pX ^, p T X 8gEK^pEK R R R 4\*P,!V4VnVPPRV R24VPP#RX RX R24R # \d,p \P!T RT R T ^, 24T hR p ? ii;i \d,p \P!T RT RT ^, 24T hR p ? ii;i \d,p \P!T RT RT ^, 24T hR p ? ii;i +'giEL;i) rKzOpening permission map ""rutf-8Zencoding)ZstartZ#r;z:Invalid number of classes: Nz%:Number of classes must be positive: Zclassz:Invalid class declaration: z :Invalid number of permissions: z):Number of permissions must be positive: z:Extra class found: z%:Invalid information flow direction: z:Invalid permission weight: z:Permission weight must be Z-z: zRead  r8z Permission is unmapped.Tr4z$Successfully opened permission map "z classes and z total permissions.)rMinfoopenrNZclearZ enumerateZsplitlenrr*rZPermissionMapParseErrorr/rr0r(r)debugr r-r$rHrIrS)r@rFmapfileZ total_permsZ class_countZ num_classesZstateZline_numZlineZentryex class_nameZ num_permsZ perm_count perm_nameZflow_directionr$r\s&& rrOZPermissionMap.loadsR  1+bAB +sW 5 5KKKE MM   !"+G1"="= u:?eAhqkS&8A:3&)%(m #Q'??*m1XJ6[*m-..EaZ5zQ%(g*='??*m1XJ6RSXRYZ\\"%U1XJ3$'aM !1}'??*m1XJ6_(k+,, 1$K"0'??*m1XJ6J:,WYY1< DMM*-!"JEaZ #E!H I%(q]N%-@@'??*m1XJ6[-.0113!$U1X &=:='??*m1XJ6Q)l!J6x$LL5  =k]"MN {m= EXYZ[&3'??*m1XJ6R$Qxj*+0233*&3'??*m1XJ6V$Qxj*+0233<&3'??*m1XJ6R$Qxj*+0233I6 5 5sA4P+M,=A>P<N%A4PA PO(CP?P, N" 7&N N" "P% O 0&O O P P )&P P P P( c$<V^8dQhRS[RR/#r^r.rrrrrJs#U#U#U#Urc  s&\VRRR7;_uu_4pVPPRV R24VP\ VP 4 R24VP P 4Fwr4VPRV R\ V4 R 24VP 4FwrV\P!\VR ,4p\P!\VR ,4pVR 8Xd#VPPR V RV R24VPVR RVR RVR R 24K VPR 4K VPPRV R24RRR4R# +'giR#;i)z Save the permission map to the specified path. Existing files will be overwritten. Parameter: permmapfile The path to write the permission map. wrarbzWriting permission map to "r_z zclass rcZ r-r$r8zWarning: permission z in class rdz>20z>9z&Successfully wrote permission map to "N) rgrMrfrrhrNZitemstypingZcastr/rZwarning) r@rFrjr2r[ZpermnameZsettingsr-r$s && rsaveZPermissionMap.savesS+sW 5 5 HHMM8 RH I MMS/05 6$(MM$7$7$9  yk3u:,bAB*/++-&H & C+1F GI#[[hx.@AF!C'((28*JykQ^_aMMXcN!Ib>6"+R"PQ!+8$ d#+%:. HHMMCK=PRS T76 5 5 5s EE?? F crYrC)rr/rrrrrJs((#(rc# sV"VPP4RjxL R#L5i)zW Generate class names in the permission map. Yield: class An object class name. N)rNkeysrTr+rrZZPermissionMap.classess==%%'''s )')cs6<V^8dQhRS[RS[S[,/#)r r=r%)r/rr rrrrrJ!s$NNCNHW$5Nrc# s"VPV,P4Fp\VPW4xK R# \d p\P !T R24ThRp?ii;i5i)z Generate permission mappings for the specified class. Parameter: class_ An object class name. Yield: Mapping A permission's complete map (weight, direction, enabled) r:N)rNrrr ZKeyErrorrr?)r@r=r>rkrRrr[ZPermissionMap.perms!sc N f-224dmmV::5 N))VHO*DE2 M Ns)A3AAA3 A0A++A00A3cs,<V^8dQhRS[RS[RS[/#)r r=r>r%)r/r rrrrrJ1s"44c444rc s.\VPW4#)z)Retrieve a specific permission's mapping.)r rNr@r=r>&&&rr\ZPermissionMap.mapping1st}}f33rcrnr r=r%Nr.rrrrrJ5s ! !C !D !rc DVPV4F pRVnK R#)z Exclude all permissions in an object class for calculating rule weights. Parameter: class_ The object class to exclude. Exceptions: UnmappedClass The specified object class is not mapped. FNr[r9rsrWr exclude_classZPermissionMap.exclude_class5sJJv&D DL'rc*<V^8dQhRS[RS[RR/#r r=r3r%Nr.rrrrrJBs' C C C# C$ Crc <R\VPW4nR#)aH Exclude a permission for calculating rule weights. Parameter: class_ The object class of the permission. permission The permission name to exclude. Exceptions: UnmappedClass The specified object class is not mapped. UnmappedPermission The specified permission is not mapped for the object class. FNr rNr9r@r=r3rtrexclude_permissionZ PermissionMap.exclude_permissionBs>C v2:rcrnrur.rrrrrJPs   C  D  rc rv)z Include all permissions in an object class for calculating rule weights. Parameter: class_ The object class to include. Exceptions: UnmappedClass The specified object class is not mapped. TNrwrsrWr include_classZPermissionMap.include_classPsJJv&DDL'rcryrzr.rrrrrJ^s' B B B# B$ Brc r{)aH Include a permission for calculating rule weights. Parameter: class_ The object class of the permission. permission The permission name to include. Exceptions: UnmappedClass The specified object class is not mapped. UnmappedPermission The specified permission is not mapped for the object class. TNr|r}rtrinclude_permissionZ PermissionMap.include_permission^s>B v2:rcs8<V^8dQhRS[PRR/#)r policyr%N)rZ SELinuxPolicyrrrrrJms%OO!8!8OTOrc  sdVP4EFp\V4pW0P9d9VPP RV RV 24\ 4VPV&VP p\\P4;_uu_4WBPP ,pRRR4VFXpWPPV,9gKVPP RV RV RV 24\VPW5RR7KZ EK R# +'giLu;i)zHCreate mappings for all classes and permissions in the specified policy.zAdding unmapped class z from NzAdding unmapped permission z in Tre) rZr/rNrMrirr[rrZNoCommonZcommonr )r@rr=rlr[rms&& r map_policyZPermissionMap.map_policymsnn&FVJ.!7 |6&RS,7M j)LLE),,--,,,.# MM*$==HHNN5i[ZLPVW]V^_aDMM:N #'.-s D D/ cs:<V^8dQhRS[PRS[/#)r ruler%)rZAVRuler rrrrrJs!%5%5 0 0%5Z%5rc sv^p^p\VP4pVP\PP 8wd$\ P!VP R24hVPFp\VPWE4pVP'gK-VPR8Xd\W6P4pKUVPR8Xd\W&P4pK}VPR8XgK\W6P4p\W&P4pK \W24#)a Get the type enforcement rule's information flow read and write weights. Parameter: rule A type enforcement rule. Return: Tuple(read_weight, write_weight) read_weight The type enforcement rule's read weight. write_weight The type enforcement rule's write weight. z. rules cannot be used for calculating a weightr`rob)r/ZtclassZruletyperZ TERuletypeZallowrZ RuleTypeErrorr[r rNr9r-Zmaxr$r )r@rZ write_weightZ read_weightrlrmr\s&& r rule_weightZPermissionMap.rule_weights  % ==I0066 6))==/!OPR R IdmmZCG???  C'!+~~> ""c)"<@ ""c)!+~~> "<@ $+44rcs0<V^8dQhRS[RS[RS[RR/#)r r=r3r-r%Nr.rrrrrJs/ I IC IS IS IT Irc <V\VPW4nR#)a Set the information flow direction of a permission. Parameter: class_ The object class of the permission. permission The permission name. direction The information flow direction the permission (r/w/b/n). Exceptions: UnmappedClass The specified object class is not mapped. UnmappedPermission The specified permission is not mapped for the object class. N)r rNr-)r@r=r3r-&&&&r set_directionZPermissionMap.set_directions@I v2=V\\=!""!FLL !#$#"FLL "%(TSeCHo &S)r)r`rorZnr8)r r r )%rrLrVZ collectionsrZcollections.abcrZ contextlibrZ dataclassesrZ importlibrrPrHrpZrrZ descriptorsrrQr0r(r)rr r,r1Zdictr/r6rr5r r r)rr"rrs  #$!0 "0'10$== ! ! " ")SS   d3S$*s*:%: ;;<< = $*$*NcCcCr