seinfo: add default_* details

Closes #69
This commit is contained in:
Chris PeBenito 2016-02-01 09:13:30 -05:00
parent 8c5a7caa9e
commit a3d554bc4c
2 changed files with 15 additions and 0 deletions

10
seinfo
View File

@ -61,6 +61,8 @@ queries.add_argument("--common", help="Print common permission set.", dest="comm
nargs='?', const=True, metavar="COMMON")
queries.add_argument("--constrain", help="Print constraints.", dest="constraintquery",
nargs='?', const=True, metavar="CLASS")
queries.add_argument("--default", help="Print default_* rules.", dest="defaultquery",
nargs='?', const=True, metavar="CLASS")
queries.add_argument("--fs_use", help="Print fs_use statements.", dest="fsusequery",
nargs='?', const=True, metavar="FS_TYPE")
queries.add_argument("--genfscon", help="Print genfscon statements.", dest="genfsconquery",
@ -133,6 +135,13 @@ try:
components.append(("Constraints", q, lambda x: x.statement()))
if args.defaultquery or args.all:
q = setools.DefaultQuery(p)
if isinstance(args.defaultquery, str):
q.tclass = [args.defaultquery]
components.append(("Default rules", q, lambda x: x.statement()))
if args.fsusequery or args.all:
q = setools.FSUseQuery(p)
if isinstance(args.fsusequery, str):
@ -279,6 +288,7 @@ try:
p.netifcon_count, p.nodecon_count))
print(" Permissives: {0:7} Polcap: {1:7}".format(
p.permissives_count, p.polcap_count))
print(" Defaults: {0:7}".format(p.default_count))
for desc, component, expander in components:
results = sorted(component.results())

View File

@ -210,6 +210,11 @@ class SELinuxPolicy(object):
"""The number of standard constraints."""
return sum(1 for c in self.constraints() if c.ruletype == "constrain")
@property
def default_count(self):
"""The number of default_* rules."""
return sum(1 for d in self.defaults())
@property
def dontaudit_count(self):
"""The number of dontaudit rules."""