# SPDX-License-Identifier: LGPL-2.1-only from PyQt6 import QtWidgets import setools from . import criteria, models, tab class MLSRuleQueryTab(tab.TableResultTabWidget): """An MLS rule query.""" section = tab.AnalysisSection.Rules tab_title = "Multi-Level Security (MLS) Rules" mlsonly = True def __init__(self, policy: "setools.SELinuxPolicy", /, *, parent: QtWidgets.QWidget | None = None) -> None: super().__init__(setools.MLSRuleQuery(policy), enable_criteria=True, parent=parent) self.setWhatsThis("Search Type Enforcement rules in a SELinux policy.") # # Set up criteria widgets # rt = criteria.MLSRuleType("Rule Type", self.query, parent=self.criteria_frame) rt.setToolTip("The rule types for rule matching.") rt.setWhatsThis( """
Select rule types for rule matching.
If a rule's has a one of the selected types, it will be returned.
""") src = criteria.TypeOrAttrName("Source Type/Attribute", self.query, "source", mode=criteria.TypeOrAttrName.Mode.type_or_attribute, enable_regex=True, enable_indirect=True, parent=self.criteria_frame) src.setToolTip("The source type/attribute for rule matching.") src.setWhatsThis( """Enter the source type/attribute for rule matching.
The behavior differs if a type or attribute is entered.
For types, if a rule has this type as the source, it will be returned. If indirect is enabled, rules that have an attribute as a source will be returned if the attribute contains this type.
For attributes, if a rule has this attribute as the source, it will be returned. If indirect is enabled, rules that have a source type that is contained by this attribute will be returned.
If regex is enabled, a regular expression is used for matching the type/attribute name instead of direct string comparison.
""") dst = criteria.TypeOrAttrName("Target Type/Attribute", self.query, "target", mode=criteria.TypeOrAttrName.Mode.type_or_attribute, enable_regex=True, enable_indirect=True, parent=self.criteria_frame) dst.setToolTip("The target type/attribute for rule matching.") dst.setWhatsThis( """Enter the target type/attribute for rule matching.
The behavior differs if a type or attribute is entered.
For types, if a rule has this type as the target, it will be returned. If indirect is enabled, rules that have an attribute as a target will be returned if the attribute contains this type.
For attributes, if a rule has this attribute as the target, it will be returned. If indirect is enabled, rules that have a target type that is contained by this attribute will be returned.
If regex is enabled, a regular expression is used for matching the type/attribute name instead of direct string comparison.
""") tclass = criteria.ObjClassList("Object Class", self.query, "tclass", parent=self.criteria_frame) tclass.setToolTip("The object class(es) for rule matching.") tclass.setWhatsThis( """Select object classes for rule matching.
A rule will be returned if its object class is one of the selected classes
""") dflt = criteria.MLSRangeName("Default Range", self.query, "default", parent=self.criteria_frame) dflt.setToolTip("The default range for rule matching.") dflt.setWhatsThis( """Enter the default role for rule matching.
If a rule has this range as the default, it will be returned.
""") # Add widgets to layout self.criteria_frame_layout.addWidget(rt, 0, 0, 1, 2) self.criteria_frame_layout.addWidget(src, 1, 0, 1, 1) self.criteria_frame_layout.addWidget(dst, 1, 1, 1, 1) self.criteria_frame_layout.addWidget(tclass, 2, 0, 1, 1) self.criteria_frame_layout.addWidget(dflt, 2, 1, 1, 1) self.criteria_frame_layout.addWidget(self.buttonBox, 3, 0, 1, 2) # Save widget references self.criteria = (rt, src, dst, tclass, dflt) # Set result table's model self.table_results_model = models.MLSRuleTable(self.table_results) if __name__ == '__main__': import sys import logging import pprint import warnings logging.basicConfig(level=logging.DEBUG, format='%(asctime)s|%(levelname)s|%(name)s|%(message)s') warnings.simplefilter("default") app = QtWidgets.QApplication(sys.argv) mw = QtWidgets.QMainWindow() widget = MLSRuleQueryTab(setools.SELinuxPolicy(), parent=mw) mw.setCentralWidget(widget) mw.resize(widget.size()) whatsthis = QtWidgets.QWhatsThis.createAction(mw) mw.menuBar().addAction(whatsthis) # type: ignore[union-attr] mw.setStatusBar(QtWidgets.QStatusBar(mw)) mw.show() rc = app.exec() pprint.pprint(widget.save()) sys.exit(rc)