2012-01-18 21:43:57 +00:00
|
|
|
diff --git a/sepolgen/HACKING b/sepolgen/HACKING
|
|
|
|
index 5cdf6d5..a0ec323 100644
|
|
|
|
--- a/sepolgen/HACKING
|
|
|
|
+++ b/sepolgen/HACKING
|
|
|
|
@@ -76,4 +76,4 @@ information about the object classes - including information flow. It
|
|
|
|
is separated to keep the core from being concerned about the details
|
|
|
|
of the object classes.
|
|
|
|
|
|
|
|
-[selist]: http://www.nsa.gov/selinux/info/list.cfm
|
|
|
|
\ No newline at end of file
|
|
|
|
+[selist]: http://www.nsa.gov/research/selinux/info/list.cfm
|
|
|
|
diff --git a/sepolgen/src/sepolgen/audit.py b/sepolgen/src/sepolgen/audit.py
|
|
|
|
index 9fdfafa..9e2ccee 100644
|
|
|
|
--- a/sepolgen/src/sepolgen/audit.py
|
|
|
|
+++ b/sepolgen/src/sepolgen/audit.py
|
|
|
|
@@ -20,6 +20,7 @@
|
|
|
|
import refpolicy
|
|
|
|
import access
|
|
|
|
import re
|
|
|
|
+import sys
|
|
|
|
|
|
|
|
# Convenience functions
|
|
|
|
|
|
|
|
@@ -343,6 +344,7 @@ class AuditParser:
|
|
|
|
self.policy_load_msgs = []
|
|
|
|
self.path_msgs = []
|
|
|
|
self.by_header = { }
|
|
|
|
+ self.check_input_file = False
|
|
|
|
|
|
|
|
# Low-level parsing function - tries to determine if this audit
|
|
|
|
# message is an SELinux related message and then parses it into
|
|
|
|
@@ -378,6 +380,7 @@ class AuditParser:
|
|
|
|
found = True
|
|
|
|
|
|
|
|
if found:
|
|
|
|
+ self.check_input_file = True
|
|
|
|
try:
|
|
|
|
msg.from_split_string(rec)
|
|
|
|
except ValueError:
|
|
|
|
@@ -447,6 +450,9 @@ class AuditParser:
|
|
|
|
while line:
|
|
|
|
self.__parse(line)
|
|
|
|
line = input.readline()
|
|
|
|
+ if not self.check_input_file:
|
|
|
|
+ sys.stderr.write("Nothing to do\n")
|
|
|
|
+ sys.exit(0)
|
|
|
|
self.__post_process()
|
|
|
|
|
|
|
|
def parse_string(self, input):
|
2011-08-30 20:32:33 +00:00
|
|
|
diff --git a/sepolgen/src/sepolgen/matching.py b/sepolgen/src/sepolgen/matching.py
|
|
|
|
index 1a9a3e5..d56dd92 100644
|
|
|
|
--- a/sepolgen/src/sepolgen/matching.py
|
|
|
|
+++ b/sepolgen/src/sepolgen/matching.py
|
2011-05-25 20:20:29 +00:00
|
|
|
@@ -50,7 +50,7 @@ class Match:
|
2010-05-27 21:23:08 +00:00
|
|
|
return 1
|
|
|
|
|
|
|
|
class MatchList:
|
|
|
|
- DEFAULT_THRESHOLD = 120
|
|
|
|
+ DEFAULT_THRESHOLD = 150
|
|
|
|
def __init__(self):
|
|
|
|
# Match objects that pass the threshold
|
|
|
|
self.children = []
|
2011-05-25 20:20:29 +00:00
|
|
|
@@ -63,14 +63,15 @@ class MatchList:
|
2010-05-27 21:23:08 +00:00
|
|
|
def best(self):
|
|
|
|
if len(self.children):
|
|
|
|
return self.children[0]
|
|
|
|
- else:
|
|
|
|
- return None
|
|
|
|
+ if len(self.bastards):
|
|
|
|
+ return self.bastards[0]
|
|
|
|
+ return None
|
|
|
|
|
|
|
|
def __len__(self):
|
|
|
|
# Only return the length of the matches so
|
|
|
|
# that this can be used to test if there is
|
|
|
|
# a match.
|
|
|
|
- return len(self.children)
|
|
|
|
+ return len(self.children) + len(self.bastards)
|
|
|
|
|
|
|
|
def __iter__(self):
|
|
|
|
return iter(self.children)
|
2012-02-01 13:44:52 +00:00
|
|
|
diff --git a/sepolgen/src/sepolgen/yacc.py b/sepolgen/src/sepolgen/yacc.py
|
|
|
|
index 2f3c09d..bc4536d 100644
|
|
|
|
--- a/sepolgen/src/sepolgen/yacc.py
|
|
|
|
+++ b/sepolgen/src/sepolgen/yacc.py
|
|
|
|
@@ -506,7 +506,7 @@ def initialize_vars():
|
|
|
|
|
|
|
|
Errorfunc = None # User defined error handler
|
|
|
|
|
|
|
|
- Signature = hashlib.md5() # Digital signature of the grammar rules, precedence
|
|
|
|
+ Signature = hashlib.sha256() # Digital signature of the grammar rules, precedence
|
|
|
|
# and other information. Used to determined when a
|
|
|
|
# parsing table needs to be regenerated.
|
|
|
|
|