+ ?zaRt$0t^RIt^RIt^RIHt^RIHt^RIHt^RI H t ^RI H t ^RIt^RIt^RIHtHt^RIHtR t]^kRt]^k^t]^k^ t]^kRt]^k] !R R 44tRRltRRlt]]]]]]]],] ,3,3,3,t!!RR 4t"!RR 4t#R#)N) OrderedDict)Iterable)suppress) dataclass) resources) exception policyrep)PermissionMapDescriptorperm_map RuleWeightMapping PermissionMapc0a]tRt^toRtV3RltRtVtR#)r zDThe read and write weights for a rule, given all of its permissions.c2<V^8dQh/S[;R&S[;R&#)readwriteint)format __classdict__s"6/usr/lib64/python3.14/site-packages/setools/permmap.py __annotate__RuleWeight.__annotate__s I  J N)__name__ __module__ __qualname____firstlineno____doc____annotate_func____static_attributes____classdictcell__rs@rr r sOrc0V^8dQhR\R\/#)rweightreturnr)rs"rrr(sCCrcT\Tu;8:d \8:gM\RV 24hV#)z!Permission weights must be 1-10: ) MIN_WEIGHT MAX_WEIGHT ValueError)r's&rvalidate_weightr-(s'  -: -5FDNN9 %j 1 .-- ?.KLL !::22i[*_3]^^;rc <V^8dQhRS[/#rr()r;)rrs"rrr<Zs**t*rcVPVP8XdVPVP8#VPVP8#N)rCrD)rGothers&&r__lt__Mapping.__lt__Zs8 ;;%,, &99uzz) ){{U\\))rc2<V^8dQh/S[;R&S[;R&#)rrCrDr0)rrs"rrr<:s K Ir)rBrCrDN)F)rrrr r!r r-r'r4r/r;r?rHrOr"r#r$r%s@rr r :sE; $_ 5F'(:;I%d+G__,**Arcna]tRt^atoRt]t]tR'V3RlRlltV3RlRltV3RlRlt V3R lR lt V3R lR lt V3R lRlt V3RlRlt V3RlRltV3RlRltV3RlRltV3RlRltV3RlRltV3RlRltV3RlRltV3RlR ltV3R!lR"ltV3R#lR$ltV3R%ltR&tVtR#)(rz-Permission Map for information flow analysis.NcV<V^8dQhRS[S[P,R,RR/#)r permmapfileNr(r1pathlibPath)rrs"rrPermissionMap.__annotate__hs)  C',,$6$=  rc v\P!\4Vn\ 4VnVV'dVP V4R#\P!R4p\P!V\, 4;_uu_4pVP V4RRR4R# +'giR#;i)D Parameter: permmapfile The path to the permission map to load. setoolsN) logging getLoggerrlogr_permmapload pkg_resourcesfilesas_fileDEFAULT_PERM_MAP)rGrTpackage_locationpaths&& rrHPermissionMap.__init__hsw $$X.#.=   IIk ",229= &&'7:J'JKKt $LKKKs B'' B8 c <V^8dQhRS[/#rKr0)rrs"rrrXxs&&&rc,\VP4#rM)r1 _permmapfilerGs&r__str__PermissionMap.__str__xs4$$%%rc<V^8dQhRR/#)rr(rr)rrs"rrrX{sOrc\P\4pVPVn\P!VP 4VnVP VnW!\V4&V#rM)r__new__r^copydeepcopyr_rjid)rGmemonewobjs&& r __deepcopy__PermissionMap.__deepcopy__{sO&&}5XX -- 6"//RX rc0<V^8dQhRS[S[,/#rK)rr )rrs"rrrXs(7+rc#t"VP4FpVPV4FpVxK K! R#5irM)classesperms)rGclsmappings& r__iter__PermissionMap.__iter__s,<<>C::c? +"s68cH<V^8dQhRS[S[P,RR/#rrTr(NrU)rrs"rrrXs,i[i[gll 2i[ti[rc VVPPRV R24\VRRR7;_uu_4p^p^p^p^pVPP 4\ V^R7EFwrxVP 4p \V 4^8XgV ^,^,R8XdK=V^8Xd=\V ^,4pT^8d\P!T RT R T 24h^pKV^8Xd\V 4^8wgV ^,R 8wd\P!V RV R V 24h\V ^,4p \V ^,4p T ^8d\P!T RT RT 24hT^, pYE8d\P!T RT RT 24h\4TPT &^p ^pEKXV^8XgEKb\V ^,4p\V ^,4pV\9d\P!V RV RV 24h\V ^,4p\Tu;8:d \ 8:g/M\P!T RT R\ R\ RT 2 4hTPP#RX RT RT RT 24TR8Xd#TPPRT RT R24\%TPYRR7pTTnTTnT^, pX ^, p T X 8gEK^pEK R R R 4\*P,!V4VnVPPRV R24VPP#RX RX R24R # \d,p \P!T RT R T ^, 24T hR p ? ii;i \d,p \P!T RT RT ^, 24T hR p ? ii;i \d,p \P!T RT RT ^, 24T hR p ? ii;i +'giEL;i) rZzOpening permission map ""rutf-8encoding)start#rAz:Invalid number of classes: Nz%:Number of classes must be positive: classz:Invalid class declaration: z :Invalid number of permissions: z):Number of permissions must be positive: z:Extra class found: z%:Invalid information flow direction: z:Invalid permission weight: z:Permission weight must be -z: zRead  r>z Permission is unmapped.Tr9z$Successfully opened permission map "z classes and z total permissions.)r^infoopenr_clear enumeratesplitlenrr,rPermissionMapParseErrorr1rr3r*r+debugr r/r'rVrWrj)rGrTmapfile total_perms class_count num_classesstateline_numlineentryex class_name num_perms perm_count perm_nameflow_directionr'r}s&& rr`PermissionMap.loadsR  1+bAB +sW 5 5KKKE MM   !"+G1"="= u:?eAhqkS&8A:3&)%(m #Q'??*m1XJ6[*m-..EaZ5zQ%(g*='??*m1XJ6RSXRYZ\\"%U1XJ3$'aM !1}'??*m1XJ6_(k+,, 1$K"0'??*m1XJ6J:,WYY1< DMM*-!"JEaZ #E!H I%(q]N%-@@'??*m1XJ6[-.0113!$U1X &=:='??*m1XJ6Q)l!J6x$LL5  =k]"MN {m= EXYZ[&3'??*m1XJ6R$Qxj*+0233*&3'??*m1XJ6V$Qxj*+0233<&3'??*m1XJ6R$Qxj*+0233I6 5 5sA4P+M,=A>P<N%A4PA PO(CP?P, N" 7&N N" "P% O 0&O O P P )&P P P P( c$<V^8dQhRS[RR/#rr0)rrs"rrrXs#U#U#U#Urc  \VRRR7;_uu_4pVPPRV R24VP\ VP 4 R24VP P 4EFwr4VPRV R\ V4 R 24VP 4FwrV\P!\VR ,4p\P!\VR ,4p\Tu;8:d \8:gMQV R V R V R24hV\9gQV R V RV R24hVR8Xd#VPPRV RV R24VPVR RVR RVR R 24K VPR 4EK" VPPRV R24RRR4R# +'giR#;i)z Save the permission map to the specified path. Existing files will be overwritten. Parameter: permmapfile The path to write the permission map. wrrzWriting permission map to "rz zclass r r/r'rAz weight is out of range (z). This is an SETools bug.z flow direction (z%) is invalid. This is an SETools bug.r>zWarning: permission z in class rz>20z>9z&Successfully wrote permission map to "N)rr^rrrr_itemstypingcastr1rr*r+r3warning) rGrTrr7r{permnamesettingsr/r's && rsavePermissionMap.saves+sW 5 5 HHMM8 RH I MMS/05 6$(MM$7$7$9  yk3u:,bAB*/++-&H & C+1F GI#[[hx.@AF%=:=2$+Qxj0I&R222=%(;;2$+Qxj0A)M222;!C'((28*JykQ^_aMMXcN!Ib>6"+R"PQ!+8$ d#+%:. HHMMCK=PRS T76 5 5 5s F$G G c0<V^8dQhRS[S[,/#rK)rr1)rrs"rrrXs((#(rc# V"VPP4RjxL R#L5i)zW Generate class names in the permission map. Yield: class An object class name. N)r_keysrks&rrzPermissionMap.classess==%%'''s )')c6<V^8dQhRS[RS[S[,/#)rrCr()r1rr )rrs"rrrX!s$NNCNHW$5Nrc# "VPV,P4Fp\VPW4xK R# \d p\P !T R24ThRp?ii;i5i)z Generate permission mappings for the specified class. Parameter: class_ An object class name. Yield: Mapping A permission's complete map (weight, direction, enabled) r@N)r_rr KeyErrorrrE)rGrCrDrs&& rr{PermissionMap.perms!sc N f-224dmmV::5 N))VHO*DE2 M Ns)A3AAA3 A0A++A00A3c,<V^8dQhRS[RS[RS[/#)rrCrDr()r1r )rrs"rrrX1s"44c444rc .\VPW4#)z)Retrieve a specific permission's mapping.)r r_rGrCrDs&&&rr}PermissionMap.mapping1st}}f33rc$<V^8dQhRS[RR/#rrCr(Nr0)rrs"rrrX5s ! !C !D !rc DVPV4F pRVnK R#)z Exclude all permissions in an object class for calculating rule weights. Parameter: class_ The object class to exclude. Exceptions: UnmappedClass The specified object class is not mapped. FNr{r?rs&& r exclude_classPermissionMap.exclude_class5sJJv&D DL'rc*<V^8dQhRS[RS[RR/#rrCr8r(Nr0)rrs"rrrXBs' C C C# C$ Crc <R\VPW4nR#)aH Exclude a permission for calculating rule weights. Parameter: class_ The object class of the permission. permission The permission name to exclude. Exceptions: UnmappedClass The specified object class is not mapped. UnmappedPermission The specified permission is not mapped for the object class. FNr r_r?rGrCr8s&&&rexclude_permission PermissionMap.exclude_permissionBs>C v2:rc$<V^8dQhRS[RR/#rr0)rrs"rrrXPs   C  D  rc DVPV4F pRVnK R#)z Include all permissions in an object class for calculating rule weights. Parameter: class_ The object class to include. Exceptions: UnmappedClass The specified object class is not mapped. TNrrs&& r include_classPermissionMap.include_classPsJJv&DDL'rc*<V^8dQhRS[RS[RR/#rr0)rrs"rrrX^s' B B B# B$ Brc <R\VPW4nR#)aH Include a permission for calculating rule weights. Parameter: class_ The object class of the permission. permission The permission name to include. Exceptions: UnmappedClass The specified object class is not mapped. UnmappedPermission The specified permission is not mapped for the object class. TNrrs&&&rinclude_permission PermissionMap.include_permission^s>B v2:rc8<V^8dQhRS[PRR/#)rpolicyr(N)r SELinuxPolicy)rrs"rrrXms%OO!8!8OTOrc  dVP4EFp\V4pW0P9d9VPP RV RV 24\ 4VPV&VP p\\P4;_uu_4WBPP ,pRRR4VFXpWPPV,9gKVPP RV RV RV 24\VPW5RR7KZ EK R# +'giLu;i)zHCreate mappings for all classes and permissions in the specified policy.zAdding unmapped class z from NzAdding unmapped permission z in Tr) rzr1r_r^rrr{rrNoCommoncommonr )rGrrCrr{rs&& r map_policyPermissionMap.map_policymsnn&FVJ.!7 |6&RS,7M j)LLE),,--,,,.# MM*$==HHNN5i[ZLPVW]V^_aDMM:N #'.-s D D/ c:<V^8dQhRS[PRS[/#)rruler()r AVRuler )rrs"rrrXs!%5%5 0 0%5Z%5rc v^p^p\VP4pVP\PP 8wd$\ P!VP R24hVPFp\VPWE4pVP'gK-VPR8Xd\W6P4pKUVPR8Xd\W&P4pK}VPR8XgK\W6P4p\W&P4pK \W24#)a Get the type enforcement rule's information flow read and write weights. Parameter: rule A type enforcement rule. Return: Tuple(read_weight, write_weight) read_weight The type enforcement rule's read weight. write_weight The type enforcement rule's write weight. z. rules cannot be used for calculating a weightrrb)r1tclassruletyper TERuletypeallowr RuleTypeErrorr{r r_r?r/maxr'r )rGr write_weight read_weightrrr}s&& r rule_weightPermissionMap.rule_weights  % ==I0066 6))==/!OPR R IdmmZCG???  C'!+~~> ""c)"<@ ""c)!+~~> "<@ $+44rc0<V^8dQhRS[RS[RS[RR/#)rrCr8r/r(Nr0)rrs"rrrXs/ I IC IS IS IT Irc <V\VPW4nR#)a Set the information flow direction of a permission. Parameter: class_ The object class of the permission. permission The permission name. direction The information flow direction the permission (r/w/b/n). Exceptions: UnmappedClass The specified object class is not mapped. UnmappedPermission The specified permission is not mapped for the object class. N)r r_r/)rGrCr8r/s&&&&r set_directionPermissionMap.set_directions@I v2=V\\=!""!FLL !#$#"FLL "%(TSeCHo &S)r)rrrnr>)r r r)%rr\rq collectionsrcollections.abcr contextlibr dataclassesr importlibrrarVrrr descriptorsr rdr3r*r+rr r-r4dictr1r;rr:r rr)rs@rrs  #$!0 "0'10$== ! ! " ")SS   d3S$*s*:%: ;;<< = $*$*NcCcCr