Commit Graph

896 Commits

Author SHA1 Message Date
Chris PeBenito
897427e5da InfoFlowAnalysisTab: add permission exclude option 2016-04-12 15:07:02 -04:00
Chris PeBenito
7938a89e0d apol: implement permission map editor
Closes #91
2016-04-12 15:02:45 -04:00
Chris PeBenito
3b3846a599 PermissionMap: refactor to use Mapping class for individual perm mappings 2016-04-12 10:18:26 -04:00
Chris PeBenito
c16653666a SummaryTab: disable irrelevant fields when MLS is disabled.
Also add tooltips restating that MLS is disabled.
2016-04-11 08:48:28 -04:00
Chris PeBenito
256adbbebc apol: implement SummaryTab
Closes #115
2016-04-10 10:46:34 -04:00
Chris PeBenito
153f2acd7a InfoFlowAnalysisTab: add perm_map property for getting map updates
Also fail to start analysis if no perm map is loaded.
2016-04-08 13:30:13 -04:00
Chris PeBenito
9d8258523d ExcludeTypes: revise to override QDialog accept method.
This is a more typical implementation.
2016-04-08 13:30:13 -04:00
Chris PeBenito
ce347e4537 ChooseAnalysis: revise design to support switching MLS on/off
Due to the previous design, if the user loaded several policies with
different MLS on/off settings, the MLS-only analyses would continue
to appear, even if MLS was not enabled in the policy.

Also revise to override QDialog accept and show methods to bring in line
with typical design.
2016-04-08 13:30:01 -04:00
Chris PeBenito
91046e8ddb apol: move ChooseAnalysis to its own module 2016-04-08 11:47:37 -04:00
Chris PeBenito
2b6b35e558 ApolMainWindow: change tab creation to put analysis widget in directly
No need to put an empty widget in.
2016-04-08 09:48:03 -04:00
Chris PeBenito
93b35f6d65 data/perm_map: update to current access vectors
Reformatted with new PermissionMap save() function.
2016-04-07 14:04:16 -04:00
Chris PeBenito
44d63daccb PermissionMap: change to OrderedDict so saving files will have same order
Better for revision-controlled map files.
2016-04-07 13:57:37 -04:00
Chris PeBenito
8107602be4 PermissionMap: implement save function. 2016-04-07 13:54:24 -04:00
Chris PeBenito
c9ca5d7826 PermissionMap: move constants out of class to global module scope.
These are constants across all PermissionMaps.
2016-04-07 13:49:46 -04:00
Chris PeBenito
1147d00797 Implement DCCP protocol support for portcons. 2016-04-06 13:01:28 -04:00
Chris PeBenito
bb1acd1c7f Refactor ComponentQuery and ContextQuery into mixins
Also move generic matching functions in PolicyQuery into new util module.
2016-04-06 09:59:41 -04:00
Chris PeBenito
0c5f52bc8b Add debug logging funtions for analysis mixins.
Keep mixin implementation details in the mixin.
2016-04-05 15:53:10 -04:00
Chris PeBenito
6502bae091 apol: revise match all vs. equal options
Where subset is available, keep "match all" option since that is more
likely to be used.  Otherwise, change GUI to "Equal" for correctness.
2016-04-05 15:26:49 -04:00
Chris PeBenito
f1a8077f79 apol: implement common query tab
Closes #77
2016-04-05 15:00:05 -04:00
Chris PeBenito
27bc09c0e3 apol: Implement constraint tab
Closes #78
2016-04-05 13:37:55 -04:00
Chris PeBenito
75ab2c38c0 objclass, nodecon, portcon .ui: fix tab stops 2016-04-05 10:21:23 -04:00
Chris PeBenito
0fae059145 rule queries.ui: revise vertical stretch so preference is given to results 2016-04-05 10:15:00 -04:00
Chris PeBenito
1ef86d8497 choose_analysis.ui: increase initial height
Show all analyses without scrolling.
2016-04-05 10:10:11 -04:00
Chris PeBenito
884480f8c4 apol: implement object class query
Closes #84
2016-04-04 13:59:35 -04:00
Chris PeBenito
729ba7ded7 apol: implement nodecon query tab
Closes #83
2016-04-04 10:36:23 -04:00
Chris PeBenito
e8f756a7ab ChooseAnalysis: fix fs_use_* capitalization 2016-04-04 10:32:26 -04:00
Chris PeBenito
1d821b109e userquery.ui: add vertical spacer in range criteria 2016-04-04 10:29:37 -04:00
Chris PeBenito
73dd211cf9 UserTableModel: calculate column count on init 2016-04-04 10:26:02 -04:00
Chris PeBenito
a7fb2057d2 apol: change context queries to disable instead of hide MLS features
This keeps layouts cleaner. Change tooltips accordingly to inform user why
the fields are disabled.
2016-04-04 10:22:25 -04:00
Chris PeBenito
02f5b9a329 Fix xperm rendering to use Python built-in "0x" formatting
Also swap low/high if they are backwards in the TERuleQuery setter instead
of erroring out
2016-04-01 15:20:57 -04:00
Chris PeBenito
1370cfd20f apol: further simplify Table model subclasses 2016-04-01 14:50:25 -04:00
Chris PeBenito
b416862554 apol: rename models to make it clear they are tables 2016-04-01 14:03:41 -04:00
Chris PeBenito
14aa86c99d apol: implement portcon query
Closes #86
2016-04-01 10:59:54 -04:00
Chris PeBenito
87c8b85c98 PortconQuery: add missing debug statement 2016-04-01 10:45:05 -04:00
Chris PeBenito
6c147f8c7b PortconProtocol: add support for specifiying by protocol string
Leverage Python lib socket.getprotobyname()
2016-04-01 10:42:00 -04:00
Chris PeBenito
57d446de1b NetifconQueryTab: fix log message on completion 2016-04-01 10:35:36 -04:00
Chris PeBenito
a158d412db apol: implement netif query
Closes #82
2016-04-01 09:06:37 -04:00
Chris PeBenito
f1f9c3186d Create new base class for table models.
Break up rule models into three files since RuleListModel doesn't make
sense any longer.
2016-04-01 09:00:17 -04:00
Chris PeBenito
807efb1e10 ApolMainWindow: handle closing the policy
* Close all tabs when closing the policy
* Close the policy if using the "open policy" action and policy load
  succeeds.
* Warn the user the above actions will close analysis tabs
  (if any tabs are open)
* Set analysis widgets to delete on close since widgets are not deleted
  by QTabWidget.clear() or .removeTab()
2016-03-31 11:34:27 -04:00
Chris PeBenito
95ecdf492a apol: implement initial SID query tab
Closes #81
2016-03-31 09:06:20 -04:00
Chris PeBenito
f335831de7 DTA/infoflow tabs: revise update completion signal connection
Bring in line with all other tabs.
2016-03-31 08:22:23 -04:00
Chris PeBenito
1ec35b9e2e DTA/infoflow: additional debug logging for graph size 2016-03-31 08:17:12 -04:00
Chris PeBenito
a769180acb PermissionMap: revise logging
* Add success message on load
* Reduce unmapped class/perm messages to debug
2016-03-30 13:51:03 -04:00
Chris PeBenito
8f907fe0f0 ApolMainWindow: revise policy and permmap loading for status messages
Revise ordering of initialization so log messages about permisison map and
policy loading can be seen on the status bar.  Also fix exception handling
so a failure loading the policy specified on the CLI is handled.
2016-03-30 13:47:20 -04:00
Chris PeBenito
c6198c4fed apol: switch to new tabs 2016-03-30 11:00:40 -04:00
Chris PeBenito
c281b9410a apol: explicitly set initial result table sort orders. 2016-03-30 10:49:34 -04:00
Chris PeBenito
7434043500 FSUseTableModel: fix variable assignment scope issue in data() 2016-03-30 10:46:47 -04:00
Chris PeBenito
21c70d5b74 apol: implement GenfsconQueryTab
Closes #80
2016-03-30 10:43:54 -04:00
Chris PeBenito
945a6548e0 apol: move queries to common updater thread class
Move logger to main tab class and have the result class send the result
count back on the finished signal.
2016-03-30 10:26:38 -04:00
Chris PeBenito
69332d4e64 AVRuleXperm: add missing hashing function.
Since there is only one permission that can be extended, not having this
was not an issue.
2016-03-30 08:38:09 -04:00