You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
143 lines
3.8 KiB
143 lines
3.8 KiB
#!/usr/bin/env python
|
|
import sys
|
|
import os
|
|
import argparse
|
|
|
|
class FileContextsNode:
|
|
path = None
|
|
fileType = None
|
|
context = None
|
|
Type = None
|
|
meta = None
|
|
stemLen = None
|
|
strLen = None
|
|
Type = None
|
|
line = None
|
|
def __init__(self, path, fileType, context, meta, stemLen, strLen, line):
|
|
self.path = path
|
|
self.fileType = fileType
|
|
self.context = context
|
|
self.meta = meta
|
|
self.stemLen = stemLen
|
|
self.strlen = strLen
|
|
self.Type = context.split(":")[2]
|
|
self.line = line
|
|
|
|
metaChars = frozenset(['.', '^', '$', '?', '*', '+', '|', '[', '(', '{'])
|
|
escapedMetaChars = frozenset(['\.', '\^', '\$', '\?', '\*', '\+', '\|', '\[', '\(', '\{'])
|
|
|
|
def getStemLen(path):
|
|
global metaChars
|
|
stemLen = 0
|
|
i = 0
|
|
while i < len(path):
|
|
if path[i] == "\\":
|
|
i += 1
|
|
elif path[i] in metaChars:
|
|
break
|
|
stemLen += 1
|
|
i += 1
|
|
return stemLen
|
|
|
|
|
|
def getIsMeta(path):
|
|
global metaChars
|
|
global escapedMetaChars
|
|
metaCharsCount = 0
|
|
escapedMetaCharsCount = 0
|
|
for c in metaChars:
|
|
if c in path:
|
|
metaCharsCount += 1
|
|
for c in escapedMetaChars:
|
|
if c in path:
|
|
escapedMetaCharsCount += 1
|
|
return metaCharsCount > escapedMetaCharsCount
|
|
|
|
def CreateNode(line):
|
|
global metaChars
|
|
if (len(line) == 0) or (line[0] == '#'):
|
|
return None
|
|
|
|
split = line.split()
|
|
path = split[0].strip()
|
|
context = split[-1].strip()
|
|
fileType = None
|
|
if len(split) == 3:
|
|
fileType = split[1].strip()
|
|
meta = getIsMeta(path)
|
|
stemLen = getStemLen(path)
|
|
strLen = len(path.replace("\\", ""))
|
|
|
|
return FileContextsNode(path, fileType, context, meta, stemLen, strLen, line)
|
|
|
|
def ReadFileContexts(files):
|
|
fc = []
|
|
for f in files:
|
|
fd = open(f)
|
|
for line in fd:
|
|
node = CreateNode(line.strip())
|
|
if node != None:
|
|
fc.append(node)
|
|
return fc
|
|
|
|
# Comparator function for list.sort() based off of fc_sort.c
|
|
# Compares two FileContextNodes a and b and returns 1 if a is more
|
|
# specific or -1 if b is more specific.
|
|
def compare(a, b):
|
|
# The regex without metachars is more specific
|
|
if a.meta and not b.meta:
|
|
return -1
|
|
if b.meta and not a.meta:
|
|
return 1
|
|
|
|
# The regex with longer stemlen (regex before any meta characters) is more specific.
|
|
if a.stemLen < b.stemLen:
|
|
return -1
|
|
if b.stemLen < a.stemLen:
|
|
return 1
|
|
|
|
# The regex with longer string length is more specific
|
|
if a.strLen < b.strLen:
|
|
return -1
|
|
if b.strLen < a.strLen:
|
|
return 1
|
|
|
|
# A regex with a fileType defined (e.g. file, dir) is more specific.
|
|
if a.fileType is None and b.fileType is not None:
|
|
return -1
|
|
if b.fileType is None and a.fileType is not None:
|
|
return 1
|
|
|
|
# Regexes are equally specific.
|
|
return 0
|
|
|
|
def FcSort(files):
|
|
for f in files:
|
|
if not os.path.exists(f):
|
|
sys.exit("Error: File_contexts file " + f + " does not exist\n")
|
|
|
|
Fc = ReadFileContexts(files)
|
|
Fc.sort(cmp=compare)
|
|
|
|
return Fc
|
|
|
|
def PrintFc(Fc, out):
|
|
if not out:
|
|
f = sys.stdout
|
|
else:
|
|
f = open(out, "w")
|
|
for node in Fc:
|
|
f.write(node.line + "\n")
|
|
|
|
if __name__ == '__main__':
|
|
parser = argparse.ArgumentParser(description="SELinux file_contexts sorting tool.")
|
|
parser.add_argument("-i", dest="input", help="Path to the file_contexts file(s).", nargs="?", action='append')
|
|
parser.add_argument("-o", dest="output", help="Path to the output file", nargs=1)
|
|
args = parser.parse_args()
|
|
if not args.input:
|
|
parser.error("Must include path to policy")
|
|
if not not args.output:
|
|
args.output = args.output[0]
|
|
|
|
PrintFc(FcSort(args.input),args.output)
|