RepoMirrors/setools
1
0
Fork 0
mirror of https://github.com/SELinuxProject/setools synced 2025-03-23 11:36:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add -Sp argument to sesearch to serve as front end for perms_subset

Browse Source 
The perms_subset rule search flag matches rules where the searched perms
are a subset of the rule perms.  This flag is currently only exposed via
apol, and this commit exposes it via sesearch

Signed-off-by: Daniel Burgener <dburgener@linux.microsoft.com>
This commit is contained in:
Daniel Burgener 2022-03-18 15:43:46 -04:00
parent ea54ee1750
commit af077513fc
2 changed files with 6 additions and 0 deletions

2
man/sesearch.1
View File

@ -84,6 +84,8 @@ A matching rule must have the specified target attribute/type/role explicitly, i
A matching rule must have all specified Booleans, instead of matching any of the specified Boolean.
.IP "-ep"
A matching rule must have exactly the specified permissions, instead of matching any of the specified permission.
.IP "-Sp"
A matching rule must have permissions where are a superset of the specified permissions, instead of matching any of the permissions.
.IP "-rs"
Use regular expression for matching the source type/role.
.IP "-rt"

4
sesearch
View File

@ -93,6 +93,9 @@ opts.add_argument("-ep", action="store_true", dest="perms_equal",
opts.add_argument("-ex", action="store_true", dest="xperms_equal",
help="Match extended permission set exactly instead of matching any listed "
"permission.")
opts.add_argument("-Sp", action="store_true", dest="perms_subset",
help="Match rules where the listed permissions are a subset of the rule "
"permissions.")
opts.add_argument("-ds", action="store_false", dest="source_indirect",
help="Match source attributes directly instead of matching member types/roles.")
opts.add_argument("-dt", action="store_false", dest="target_indirect",
@ -141,6 +144,7 @@ try:
target_regex=args.target_regex,
tclass_regex=args.tclass_regex,
perms_equal=args.perms_equal,
perms_subset=args.perms_subset,
xperms_equal=args.xperms_equal,
default=args.default,
default_regex=args.default_regex,