setools/setoolsgui/apol/mainwindow.py

# Copyright 2015, Tresys Technology, LLC
#
# This file is part of SETools.
#
# SETools is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as
# published by the Free Software Foundation, either version 2.1 of
# the License, or (at your option) any later version.
#
# SETools is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with SETools.  If not, see
# <http://www.gnu.org/licenses/>.
#

import logging

from PyQt5.QtWidgets import QDialog, QFileDialog, QMainWindow, QMessageBox, QTreeWidgetItem, \
                            QVBoxLayout, QWidget
from setools import PermissionMap, SELinuxPolicy

from ..widget import SEToolsWidget
from .terulequery import TERuleQueryTab


class ApolMainWindow(SEToolsWidget, QMainWindow):

    def __init__(self, filename):
        super(ApolMainWindow, self).__init__()
        self.log = logging.getLogger(self.__class__.__name__)

        if filename:
            self._policy = SELinuxPolicy(filename)
        else:
            self._policy = None

        try:
            # try to load default permission map
            self._permmap = PermissionMap()
        except OSError as ex:
            self.log.info("Failed to load default permission map: {0}".format(ex))
            self._permmap = None

        self.setupUi()

    def setupUi(self):
        self.load_ui("apol.ui")

        self.error_msg = QMessageBox(self)
        self.error_msg.setStandardButtons(QMessageBox.Ok)

        self.open_policy.triggered.connect(self.select_policy)
        self.open_permmap.triggered.connect(self.select_permmap)
        self.new_analysis.triggered.connect(self.choose_analysis)
        self.AnalysisTabs.tabCloseRequested.connect(self.AnalysisTabs.removeTab)

        self.show()

    def select_policy(self):
        filename = QtWidgets.QFileDialog.getOpenFileName(self, "Open policy file", ".")[0]
        if filename:
            try:
                self._policy = SELinuxPolicy(filename)
            except Exception as ex:
                self.error_msg.critical(self, "Policy loading error", str(ex))

            if self._policy and self._permmap:
                self._permmap.map_policy(self._policy)

    def select_permmap(self):
        filename = QFileDialog.getOpenFileName(self, "Open permission map file", ".")[0]
        if filename:
            try:
                self._permmap = PermissionMap(filename)
            except Exception as ex:
                self.error_msg.critical(self, "Permission map loading error", str(ex))

            if self._policy and self._permmap:
                self._permmap.map_policy(self._policy)

    def choose_analysis(self):
        if not self._policy:
            self.error_msg.critical(self, "No open policy", "Please load a policy first.")
            return

        chooser = ChooseAnalysis(self)
        chooser.show()

    def create_new_analysis(self, tabtitle, tabclass):
        newtab = QWidget()
        newtab.setObjectName(tabtitle)

        newanalysis = tabclass(newtab, self._policy)

        # create a vertical layout in the tab, place the analysis ui inside.
        tabLayout = QVBoxLayout()
        tabLayout.setContentsMargins(3, 3, 3, 3)
        tabLayout.addWidget(newanalysis)
        newtab.setLayout(tabLayout)

        self.AnalysisTabs.addTab(newtab, tabtitle)


class ChooseAnalysis(SEToolsWidget, QDialog):

    """
    Dialog for choosing a new analysis

    The below class attributes are used for populating
    the GUI contents and mapping them to the appropriate
    tab widget class for the analysis.

    The item_mapping attribute will be populated to
    map the tree list items to the analysis tab widgets.
    """
    _components_map = {"Attributes (Type)": TERuleQueryTab,
                       "Booleans": TERuleQueryTab,
                       "Categories": TERuleQueryTab,
                       "Common Permission Sets": TERuleQueryTab,
                       "Object Classes": TERuleQueryTab,
                       "Policy Capabilities": TERuleQueryTab,
                       "Roles": TERuleQueryTab,
                       "Types": TERuleQueryTab,
                       "Users": TERuleQueryTab}

    _rule_map = {"TE Rules": TERuleQueryTab,
                 "RBAC Rules": TERuleQueryTab,
                 "MLS Rules": TERuleQueryTab,
                 "Constraints": TERuleQueryTab}

    _analysis_map = {"Domain Transition Analysis": TERuleQueryTab,
                     "Information Flow Analysis": TERuleQueryTab}

    _labeling_map = {"fs_use Statements": TERuleQueryTab,
                     "Genfscon Statements": TERuleQueryTab,
                     "Initial SID Statements": TERuleQueryTab,
                     "Netifcon Statements": TERuleQueryTab,
                     "Nodecon Statements": TERuleQueryTab,
                     "Portcon Statements": TERuleQueryTab}

    _analysis_choices = {"Components": _components_map,
                         "Rules": _rule_map,
                         "Analysis": _analysis_map,
                         "Labeling Statements": _labeling_map}

    def __init__(self, parent):
        super(ChooseAnalysis, self).__init__(parent)
        self.item_mapping = {}
        self.parent = parent
        self.setupUi()

    def setupUi(self):
        self.load_ui("choose_analysis.ui")
        self.buttonBox.accepted.connect(self.ok_clicked)
        self.analysisTypes.doubleClicked.connect(self.ok_clicked)

        # populate the item list:
        self.analysisTypes.clear()
        for groupname, group in self._analysis_choices.items():
            groupitem = QTreeWidgetItem(self.analysisTypes)
            groupitem.setText(0, groupname)
            groupitem._tab_class = None
            for entryname, cls in group.items():
                item = QTreeWidgetItem(groupitem)
                item.setText(0, entryname)
                item._tab_class = cls
                groupitem.addChild(item)

        self.analysisTypes.expandAll()

    def ok_clicked(self):
        try:
            # .ui is set for single item selection.
            item = self.analysisTypes.selectedItems()[0]
            title = item.text(0)
            self.parent.create_new_analysis(title, item._tab_class)
        except (IndexError, TypeError):
            # IndexError: nothing is selected
            # TypeError: one of the group items was selected.
            pass
        else:
            self.accept()