mirror of
https://github.com/SELinuxProject/setools
synced 2025-04-04 23:39:29 +00:00
126 lines
5.6 KiB
Python
126 lines
5.6 KiB
Python
# Copyright 2016, Tresys Technology, LLC
|
|
# Copyright 2018, Chris PeBenito <pebenito@ieee.org>
|
|
#
|
|
# SPDX-License-Identifier: LGPL-2.1-only
|
|
#
|
|
#
|
|
|
|
import logging
|
|
|
|
from PyQt5.QtCore import Qt, QSortFilterProxyModel, QStringListModel, QThread
|
|
from PyQt5.QtGui import QPalette, QTextCursor
|
|
from PyQt5.QtWidgets import QCompleter, QHeaderView, QMessageBox, QProgressDialog
|
|
from setools import MLSRuleQuery
|
|
|
|
from ..logtosignal import LogHandlerToSignal
|
|
from ..models import SEToolsListModel, invert_list_selection
|
|
from ..mlsrulemodel import MLSRuleTableModel
|
|
from .analysistab import AnalysisSection, AnalysisTab
|
|
from .queryupdater import QueryResultsUpdater
|
|
from .workspace import load_checkboxes, load_textedits, save_checkboxes, save_textedits
|
|
|
|
|
|
class SummaryTab(AnalysisTab):
|
|
|
|
"""An SELinux policy summary."""
|
|
|
|
section = AnalysisSection.General
|
|
tab_title = "Summary"
|
|
mlsonly = False
|
|
|
|
def __init__(self, parent, policy, perm_map):
|
|
super(SummaryTab, self).__init__(parent)
|
|
self.log = logging.getLogger(__name__)
|
|
self.setupUi(policy)
|
|
|
|
def setupUi(self, p):
|
|
self.load_ui("apol/summary.ui")
|
|
|
|
# Ensure settings are consistent with the initial .ui state
|
|
self.notes.setHidden(not self.notes_expander.isChecked())
|
|
|
|
# Populate policy stats
|
|
mls = "enabled" if p.mls else "disabled"
|
|
|
|
self.policy_version.setText(str(p.version))
|
|
self.mls.setText(mls)
|
|
self.handle_unknown.setText(p.handle_unknown.name)
|
|
self.class_count.setText(str(p.class_count))
|
|
self.perms_count.setText(str(p.permission_count))
|
|
self.type_count.setText(str(p.type_count))
|
|
self.attribute_count.setText(str(p.type_attribute_count))
|
|
self.user_count.setText(str(p.user_count))
|
|
self.role_count.setText(str(p.role_count))
|
|
self.bool_count.setText(str(p.boolean_count))
|
|
self.allow_count.setText(str(p.allow_count))
|
|
self.neverallow_count.setText(str(p.neverallow_count))
|
|
self.auditallow_count.setText(str(p.auditallow_count))
|
|
self.dontaudit_count.setText(str(p.dontaudit_count))
|
|
self.type_transition_count.setText(str(p.type_transition_count))
|
|
self.type_change_count.setText(str(p.type_change_count))
|
|
self.type_member_count.setText(str(p.type_member_count))
|
|
self.role_allow_count.setText(str(p.role_allow_count))
|
|
self.role_transition_count.setText(str(p.role_transition_count))
|
|
self.constrain_count.setText(str(p.constraint_count))
|
|
self.validatetrans_count.setText(str(p.validatetrans_count))
|
|
self.permissive_count.setText(str(p.permissives_count))
|
|
self.default_count.setText(str(p.default_count))
|
|
self.typebounds_count.setText(str(p.typebounds_count))
|
|
self.allowxperm_count.setText(str(p.allowxperm_count))
|
|
self.neverallowxperm_count.setText(str(p.neverallowxperm_count))
|
|
self.auditallowxperm_count.setText(str(p.auditallowxperm_count))
|
|
self.dontauditxperm_count.setText(str(p.dontauditxperm_count))
|
|
self.ibendportcon_count.setText(str(p.ibendportcon_count))
|
|
self.ibpkeycon_count.setText(str(p.ibpkeycon_count))
|
|
self.initsid_count.setText(str(p.initialsids_count))
|
|
self.fs_use_count.setText(str(p.fs_use_count))
|
|
self.genfscon_count.setText(str(p.genfscon_count))
|
|
self.portcon_count.setText(str(p.portcon_count))
|
|
self.netifcon_count.setText(str(p.netifcon_count))
|
|
self.nodecon_count.setText(str(p.nodecon_count))
|
|
|
|
if p.mls:
|
|
self.sensitivity_count.setText(str(p.level_count))
|
|
self.category_count.setText(str(p.category_count))
|
|
self.range_transition_count.setText(str(p.range_transition_count))
|
|
self.mlsconstrain_count.setText(str(p.mlsconstraint_count))
|
|
self.mlsvalidatetrans_count.setText(str(p.mlsvalidatetrans_count))
|
|
else:
|
|
self.sens_label.setEnabled(False)
|
|
self.sens_label.setToolTip("MLS is disabled in this policy.")
|
|
self.cats_label.setEnabled(False)
|
|
self.cats_label.setToolTip("MLS is disabled in this policy.")
|
|
self.range_trans_label.setEnabled(False)
|
|
self.range_trans_label.setToolTip("MLS is disabled in this policy.")
|
|
self.mlsconstrain_label.setEnabled(False)
|
|
self.mlsconstrain_label.setToolTip("MLS is disabled in this policy.")
|
|
self.mlsvalidatetrans_label.setEnabled(False)
|
|
self.mlsvalidatetrans_label.setToolTip("MLS is disabled in this policy.")
|
|
self.sensitivity_count.setEnabled(False)
|
|
self.sensitivity_count.setToolTip("MLS is disabled in this policy.")
|
|
self.category_count.setEnabled(False)
|
|
self.category_count.setToolTip("MLS is disabled in this policy.")
|
|
self.range_transition_count.setEnabled(False)
|
|
self.range_transition_count.setToolTip("MLS is disabled in this policy.")
|
|
self.mlsconstrain_count.setEnabled(False)
|
|
self.mlsconstrain_count.setToolTip("MLS is disabled in this policy.")
|
|
self.mlsvalidatetrans_count.setEnabled(False)
|
|
self.mlsvalidatetrans_count.setToolTip("MLS is disabled in this policy.")
|
|
|
|
# Fill policy capabilities list
|
|
self.polcaps.addItems([str(c) for c in p.polcaps()])
|
|
|
|
#
|
|
# Save/Load tab
|
|
#
|
|
def save(self):
|
|
"""Return a dictionary of settings."""
|
|
settings = {}
|
|
save_checkboxes(self, settings, ["notes_expander"])
|
|
save_textedits(self, settings, ["notes"])
|
|
return settings
|
|
|
|
def load(self, settings):
|
|
load_checkboxes(self, settings, ["notes_expander"])
|
|
load_textedits(self, settings, ["notes"])
|