rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

fix error with file common being output, not file class (unique perms were missing)

Browse Source
This commit is contained in:
Chris PeBenito 2005-09-21 20:01:21 +00:00
parent 5fd4a1c529
commit 6e0542eb27
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
refpolicy/support/genclassperms.py
View File

@ -31,17 +31,21 @@ class Class:
# True if the class is declared as common, False if not.
self.common = common
def get_perms(name, av_db):
def get_perms(name, av_db, common):
"""
Returns the list of permissions contained within an access vector
class that is stored in the access vector database av_db.
Returns an empty list if the object name is not found.
Specifiy whether get_perms is to return the class or the
common set of permissions with the boolean value 'common',
which is important in the case of having duplicate names (such as
class file and common file).
"""
# Traverse through the access vector database and try to find the
# object with the name passed.
for obj in av_db:
if obj.name == name:
if obj.name == name and obj.common == common:
return obj.perms
return []
@ -153,7 +157,8 @@ def get_av_db(file_name):
# av_data[0] is the name of the parent.
# Append the permissions of the parent to
# the current class' permissions.
perms += get_perms(av_data[0], database)
perms += get_perms(av_data[0], database, True)
# Dequeue the name of the parent.
av_data = av_data[1:]
@ -247,8 +252,8 @@ def gen_class_perms(av_db, sc_db):
if obj.common == True:
continue
# Get the list of permissions.
perms = get_perms(obj.name, av_db)
# Get the list of permissions from the specified class.
perms = get_perms(obj.name, av_db, False)
# Merge all the permissions into one string with one space
# padding.