HOME

�
��^cI@s}dd
lZdd
l
Z
dd
lZdd
lZddlmZ
ddlmZ
ddlmZ
ddlmZ
ddlm	Z	
d�Z
i4ddQ6ddR6ddS6d dT6d!dU6d"dV6d#dW6d$dX6d%dY6d&dZ6d'd[6d(d\6d)d]6d*d^6d+d_6d,d`6d-da6d.db6d/dc6d0dd6d1de6d2df6d3dg6d4dh6d5di6d6dj6d7dk6d8dl6d9dm6d:dn6d;do6d<dp6d=dq6d>dr6d?ds6d@dt6dAdu6dBdv6dCdw6dDdx6dEdy6dFdz6dGd{6dHd|6dId}6dJd~6dKd6dLd�6dMd�6dOd�6dNd�6dPd�6Zd�Zd�Z
d�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd��Zd��Z d��Z!d��Z"d��Z#d��Z$d��Z%d��Z&d��Z'd
a)d
a*d�a+d
a,e-a.d
d��
Z/d��Z0d��Z1d��Z2d��Z3d��Z4d��Z5d��Z6d��Z7d��Z8d��Z9d��Z:d��Z;d��Z<d��Z=d��Z>d��Z?d��Z@d��ZAd��ZBd��ZCd��ZDd��ZEd��ZFd��ZGd��ZHd��ZId��ZJd��ZKd��ZLd��ZMd��ZNd��ZOd��ZPd��ZQd��ZRd��ZSd��ZTd��ZUd��ZVd��ZWd��ZXd��ZYd��ZZd��Z[d��Z\d��Z]d��Z^d��Z_d��Z`d��Zad��Zbd��Zcd��Zdd��Zed��Zfd��Zgd��Zhd��Zid��Zjd��Zkd��Zld��Zmd��Znd��Zod��Zpd��Zqd
ard
asd��Ztd
d
eud��Zvd��Zwd
e-eud��Zxd
S(�i����Ni
(
taccess(
tdefaults(
tlex(
t	refpolicy(
tyacctTICKtSQUOTEtOBRACEtCBRACEtSEMItCOLONtOPARENtCPARENtCOMMAtMINUStTILDEtASTERISKtAMPtBARtEXPLtEQUALtFILENAMEt
IDENTIFIERtNUMBERtPATHt	IPV6_ADDRtMODULEt
POLICY_MODULEtREQUIREtSIDtGENFSCONtFS_USE_XATTRtFS_USE_TRANStFS_USE_TASKtPORTCONtNODECONtNETIFCONtPIRQCONtIOMEMCONt	IOPORTCONtPCIDEVICECONt
DEVICETREECONtCLASSt
TYPEATTRIBUTEt
ROLEATTRIBUTEtTYPEt	ATTRIBUTEtATTRIBUTE_ROLEtALIASt	TYPEALIAStBOOLtTRUEtFALSEtIFtELSEtROLEtTYPEStALLOWt	DONTAUDITt
AUDITALLOWt
NEVERALLOWt
PERMISSIVEt
TYPEBOUNDStTYPE_TRANSITIONtTYPE_CHANGEtTYPE_MEMBERtRANGE_TRANSITIONtROLE_TRANSITIONt
OPT_POLICYt	INTERFACEtTUNABLE_POLICYtGEN_REQtTEMPLATEtGEN_CONTEXTtIFELSEtIFDEFtIFNDEFtDEFINEtmodulet
policy_moduletrequiretsidtgenfscontfs_use_xattrtfs_use_transtfs_use_tasktportcontnodecontnetifcontpirqcontiomemcont	ioportcontpcidevicecont
devicetreecontclasst
typeattributet
roleattributettypet	attributetattribute_roletaliast	typealiastboolttruetfalsetiftelsetrolettypestallowt	dontauditt
auditallowt
neverallowt
permissivet
typeboundsttype_transitionttype_changettype_membertrange_transitiontrole_transitiontoptional_policyt	interfacettunable_policytgen_requirettemplatetgen_contexttifelsetifndeftifdeftdefines\`s\'s\{s\}s\;+s\:s\(s\)s\,s\-s\~s\*s\&s\|s\!s\=s[0-9\.]+s/[a-zA-Z0-9)_\.\*/\$]*s 	c


Cs|S(
s2[a-fA-F0-9]{0,4}:[a-fA-F0-9]{0,4}:([a-fA-F0-9]|:)*((
t
t((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytt_IPV6_ADDR�sc

Cs|jj
d
7_
dS(sdnl.*\ni
N(tlexertlineno(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytt_m4comment�sc

Cs|jd
�

dS(sdefine.*refpolicywarn\(.*\ni
N(
tskip(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytt_refpolicywarn1�sc

Cs|jj
d
7_
dS(srefpolicywarn\(.*\ni
N(R�R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytt_refpolicywarn�sc

Cstj
|jd
�|_|S(s#[a-zA-Z_\$][a-zA-Z0-9_\-\+\.\$\*~]*R(treservedtgettvalueRa(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytt_IDENTIFIER�s
c

Cstj
|jd
�|_|S(s\"[a-zA-Z0-9_\-\+\.\$\*~ :]+\"R(R�R�R�Ra(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
t_FILENAME
s
c

Cs|jj
d
7_
dS(s\#.*\ni
N(R�R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt	t_comment
sc

Cs!d
|jdGH|j
d�

dS(NsIllegal character '%s'ii
(R�R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytt_error
s

c

Cs|jj
t|j�
7_
d
S(s\n+N(R�R�tlenR�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt	t_newline
stcCs{|dkrdSxd|D]\}|dkr/qn|
|_
|dk	r`|
jjd
||f�
q|
jjd
|�
qWdS(Ni(tNonetparenttchildrentinsert(tstmtsR�tvalt
s((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytcollect-
s






	

cCsJxC|D];}tj
|�
r5|
jtj|�
�

q|
j|�

qWdS(
N(tsptthas_keytupdatetby_nametadd(tidsR�tid((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytexpand9
s



c

Csjt|�
d
kr3|dr3t
jj|d�

n3t|�
d
krf|d
rft
jj|d
�

ndS(s^statements : statement
                  | statements statement
                  | empty
    ii
N(R�t
mR�tappend(
t
p((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_statementsA
s


c

Cs|d
|d<dS(s�statement : interface
                 | template
                 | obj_perm_set
                 | policy
                 | policy_module_stmt
                 | module_stmt
    i
iN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_statementK
sc


Csd
S(sempty :N((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_emptyU
sc
Cs=tj
�}
|d
|
_|d|
_t|
_|
|d<dS(sHpolicy_module_stmt : POLICY_MODULE OPAREN IDENTIFIER COMMA NUMBER CPARENiiiN(RtModuleDeclarationtnametversiontTrue(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_policy_module_stmt`
s





	
c
Cs2tj
|d
�
}
t|d|
�
|
|d<dS(sainterface : INTERFACE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
    iiiN(Rt	InterfaceR�(R�t
x((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_interfaceh
s

c
Cs2tj
|d
�
}
t|d|
�
|
|d<dS(s�template : TEMPLATE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
                | DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
    iiiN(RtTemplateR�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_templateo
s

c

Csd|d
<dS(s4define : DEFINE OPAREN TICK IDENTIFIER SQUOTE CPARENiN(
R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_definew
sc

Cs�t|�
d
kr-|dr-|d|d<nnt|�
d
kr�|dsg|d
r�|d
|d<q�q�|d
s�|d|d<q�|d|d
|d<ndS(slinterface_stmts : policy
                       | interface_stmts policy
                       | empty
    ii
iN(
R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_interface_stmts~
s









c
Cs`tj
�}
t|d
|
dt�

t|�
dkrOt|d|
dt�

n|
g
|d<dS(s�optional_policy : OPT_POLICY OPAREN TICK interface_stmts SQUOTE CPAREN
                       | OPT_POLICY OPAREN TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
    iR�iiiN(RtOptionalPolicyR�R�R�tFalse(R�t
o((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_optional_policy�
s




c
Csmtj
�}
|d
|
_t|d|
dt�

t|�
dkr\t|d|
dt�

n|
g
|d<dS(s�tunable_policy : TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
                      | TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
    iiR�iiiN(Rt
TunablePolicyt	cond_exprR�R�R�R�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_tunable_policy�
s





c


Csd
S(s�
ifelse : IFELSE OPAREN TICK IDENTIFIER SQUOTE COMMA COMMA TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
              | IFELSE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
              | IFELSE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
    N((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_ifelse�
sc
Cs�tj
|d
�
}
|ddkr,t}nt}t|d|
d|�

t|�
dkrut|d|
dt�

n|
g
|d<dS(	s^
ifdef : IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
             | IFNDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
             | IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
    ii
R�iR�iiN(RtIfDefR�R�R�R�(R�R�t
v((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_ifdef�
s

	



c
CsMtj
d
|d�
}
t|�
dkr?|
jj|d�

n|
|d<dS(s�interface_call : IDENTIFIER OPAREN interface_call_param_list CPAREN
                      | IDENTIFIER OPAREN CPAREN
                      | IDENTIFIER OPAREN interface_call_param_list CPAREN SEMItifnamei
iiiN(Rt
InterfaceCallR�targstextend(R�t
i((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_interface_call�
s


c

CsCt|�
d
kr#|d|d<n|dd|dg|d<dS(s�interface_call_param : IDENTIFIER
                            | IDENTIFIER MINUS IDENTIFIER
                            | nested_id_set
                            | TRUE
                            | FALSE
                            | FILENAME
    ii
it
-iN(
R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_interface_call_param�
s

c

CsCt|�
d
kr&|dg
|d<n|d|dg
|d<dS(s�interface_call_param_list : interface_call_param
                                 | interface_call_param_list COMMA interface_call_param
    ii
iiN(
R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_interface_call_param_list�
s
c
Cs.tj
|d
�
}
|d|
_|
|d<dS(sRobj_perm_set : DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK names SQUOTE CPARENiiiN(Rt
ObjPermSettperms(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_obj_perm_set�
s


c

Cs|d
|d<dS(s�policy : policy_stmt
              | optional_policy
              | tunable_policy
              | ifdef
              | ifelse
              | conditional
    i
iN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_policy�
sc

Cs"|d
r|d
g
|d<ndS(s�policy_stmt : gen_require
                   | avrule_def
                   | typerule_def
                   | typebound_def
                   | typeattribute_def
                   | roleattribute_def
                   | interface_call
                   | role_def
                   | role_allow
                   | permissive
                   | type_def
                   | typealias_def
                   | attribute_def
                   | attribute_role_def
                   | range_transition_def
                   | role_transition_def
                   | bool
                   | define
                   | initial_sid
                   | genfscon
                   | fs_use
                   | portcon
                   | nodecon
                   | netifcon
                   | pirqcon
                   | iomemcon
                   | ioportcon
                   | pcidevicecon
                   | devicetreecon
    i
iN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_policy_stmt�
s

c
Cs=tj
�}
|d
|
_|d|
_t|
_|
|d<dS(s+module_stmt : MODULE IDENTIFIER NUMBER SEMIiiiN(RR�R�R�R�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_module_stmts





	
c


Csd
S(slgen_require : GEN_REQ OPAREN TICK requires SQUOTE CPAREN
                   | REQUIRE OBRACE requires CBRACEN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_gen_require!sc


Csd
S(ssrequires : require
                | requires require
                | ifdef
                | requires ifdef
    N((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_requires)sc


Csd
S(s�require : TYPE comma_list SEMI
               | ROLE comma_list SEMI
               | ATTRIBUTE comma_list SEMI
               | ATTRIBUTE_ROLE comma_list SEMI
               | CLASS comma_list SEMI
               | BOOL comma_list SEMI
    N((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt	p_require1sc
Csctj
�}
|d
|
_|d|
_|d|
_t|�
dkrU|d|
_n|
|d<dS(s�security_context : IDENTIFIER COLON IDENTIFIER COLON IDENTIFIER
                        | IDENTIFIER COLON IDENTIFIER COLON IDENTIFIER COLON mls_range_defi
iiiiiN(RtSecurityContexttuserRkRaR�tlevel(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_security_context;s







c
Cs%|d
}
|d|
_|
|d<dS(sQgen_context : GEN_CONTEXT OPAREN security_context COMMA mls_range_def CPAREN
    iiiN(
R�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_gen_contextHs


c

Cs|d
|d<dS(s<context : security_context
               | gen_context
    i
iN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt	p_contextSsc
Cs4tj
�}
|d
|
_|d|
_|
|d<dS(s$initial_sid : SID IDENTIFIER contextiiiN(Rt
InitialSidR�tcontext(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_initial_sidYs




c
CsAtj
�}
|d
|
_|d|
_|d|
_|
|d<dS(s+genfscon : GENFSCON IDENTIFIER PATH contextiiiiN(RtGenfsCont
filesystemtpathR�(R�t
g((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_genfscon`s






c
Cs�tj
�}
|d
dkr.tj
j|
_nD|d
dkrPtj
j|
_n"|d
dkrrtj
j|
_n|d|
_|d|
_|
|d<dS(	s�fs_use : FS_USE_XATTR IDENTIFIER context SEMI
              | FS_USE_TASK IDENTIFIER context SEMI
              | FS_USE_TRANS IDENTIFIER context SEMI
    i
RSRURTiiiN(Rt
FilesystemUsetXATTRRatTASKtTRANSR�R�(R�t
f((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_fs_usejs








c
Cs|tj
�}
|d
|
_t|�
dkrH|d|
_|d|
_n&|dd|d|
_|d|
_|
|d<dS(skportcon : PORTCON IDENTIFIER NUMBER context
               | PORTCON IDENTIFIER NUMBER MINUS NUMBER contextiiiiR�iN(RtPortCont	port_typeR�tport_numberR�(R�t
c((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt	p_portcon|s







c
CsAtj
�}
|d
|
_|d|
_|d|
_|
|d<dS(sanodecon : NODECON NUMBER NUMBER context
               | NODECON IPV6_ADDR IPV6_ADDR context
    iiiiN(RtNodeContstarttendR�(R�t
n((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt	p_nodecon�s






c
CsAtj
�}
|d
|
_|d|
_|d|
_|
|d<dS(s.netifcon : NETIFCON IDENTIFIER context contextiiiiN(RtNetifConRytinterface_contexttpacket_context(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_netifcon�s






c
Cs4tj
�}
|d
|
_|d|
_|
|d<dS(s pirqcon : PIRQCON NUMBER contextiiiN(RtPirqContpirq_numberR�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt	p_pirqcon�s



c
Csotj
�}
t|�
d
kr;|d|
_|d|
_n&|dd|d|
_|d
|
_|
|d<dS(sYiomemcon : IOMEMCON NUMBER context
                | IOMEMCON NUMBER MINUS NUMBER contextiiiR�iN(RtIomemConR�t
device_memR�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_iomemcon�s





c
Csotj
�}
t|�
d
kr;|d|
_|d|
_n&|dd|d|
_|d
|
_|
|d<dS(s\ioportcon : IOPORTCON NUMBER context
                | IOPORTCON NUMBER MINUS NUMBER contextiiiR�iN(Rt	IoportConR�tioportR�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_ioportcon�s





c
Cs4tj
�}
|d
|
_|d|
_|
|d<dS(s*pcidevicecon : PCIDEVICECON NUMBER contextiiiN(RtPciDeviceContdeviceR�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_pcidevicecon�s



c
Cs4tj
�}
|d
|
_|d|
_|
|d<dS(s,devicetreecon : DEVICETREECON NUMBER contextiiiN(Rt
DevicetTeeConR�R�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_devicetreecon�s



c

CsA|d
|d<t|�
dkr=|dd|d|d<ndS(s[mls_range_def : mls_level_def MINUS mls_level_def
                     | mls_level_def
    i
iiR�iN(
R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_mls_range_def�s

c

CsJ|d
|d<t|�
dkrF|dddj
|d�
|d<ndS(sRmls_level_def : IDENTIFIER COLON comma_list
                     | IDENTIFIER
    i
iit
:t
,iN(R�tjoin(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_mls_level_def�s

c
Cs�tj
|d
�
}
t|�
dkr\|ddkrL|
jj|d�

q�|d|
_nKt|�
dkr�|d|
_t|�
dkr�|
jj|d�

q�n|
|d<dS(	s�type_def : TYPE IDENTIFIER COMMA comma_list SEMI
                | TYPE IDENTIFIER SEMI
                | TYPE IDENTIFIER ALIAS names SEMI
                | TYPE IDENTIFIER ALIAS names COMMA comma_list SEMI
    iiiR
iiiN(RtTypeR�t
attributesR�taliases(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_type_def�s








c
Cs!tj
|d
�
}
|
|d<dS(s)attribute_def : ATTRIBUTE IDENTIFIER SEMIiiN(Rt	Attribute(R�t
a((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_attribute_def�s
c
Cs!tj
|d
�
}
|
|d<dS(s3attribute_role_def : ATTRIBUTE_ROLE IDENTIFIER SEMIiiN(RtAttribute_Role(R�R

((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_attribute_role_def�s
c
Cs4tj
�}
|d
|
_|d|
_|
|d<dS(s5typealias_def : TYPEALIAS IDENTIFIER ALIAS names SEMIiiiN(Rt	TypeAliasRaR

(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_typealias_def�s




c
CsPtj
�}
|d
|
_t|�
dkrB|
jj|d�

n|
|d<dS(sWrole_def : ROLE IDENTIFIER TYPES comma_list SEMI
                | ROLE IDENTIFIER SEMIiiiN(RtRoleRkR�RlR�(R�t
r((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_role_defs





c
Cs4tj
�}
|d
|
_|d|
_|
|d<dS(s#role_allow : ALLOW names names SEMIiiiN(Rt	RoleAllowt	src_rolest	tgt_roles(R�R
((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_role_allows




c

Cstj
d
�

dS(s"permissive : PERMISSIVE names SEMIi
N(R�R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_permissivesc
Cs�tj
�}
|d
dkr.tj
j|
_nD|d
dkrPtj
j|
_n"|d
dkrrtj
j|
_n|d|
_|d|
_|d|
_|d|
_	|
|d	<d
S(s�avrule_def : ALLOW names names COLON names names SEMI
                  | DONTAUDIT names names COLON names names SEMI
                  | AUDITALLOW names names COLON names names SEMI
                  | NEVERALLOW names names COLON names names SEMI
    i
RnRoRpiiiiiN(
RtAVRuleR:t	rule_typeR;R<t	src_typest	tgt_typestobj_classesR�(R�R

((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_avrule_defs














c
Cs�tj
�}
|d
dkr.tj
j|
_n"|d
dkrPtj
j|
_n|d|
_|d|
_|d|
_|d|
_|d|
_	|
|d	<d
S(s�
typerule_def : TYPE_TRANSITION names names COLON names IDENTIFIER SEMI
                    | TYPE_TRANSITION names names COLON names IDENTIFIER FILENAME SEMI
                    | TYPE_TRANSITION names names COLON names IDENTIFIER IDENTIFIER SEMI
                    | TYPE_CHANGE names names COLON names IDENTIFIER SEMI
                    | TYPE_MEMBER names names COLON names IDENTIFIER SEMI
    i
RtRuiiiiiiN(
RtTypeRuleR@R
RAR
R
R
t	dest_typet	file_name(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_typerule_def*s














c
Cs;tj
�}
|d
|
_|
jj|d�

|
|d<dS(s5typebound_def : TYPEBOUNDS IDENTIFIER comma_list SEMIiiiN(Rt	TypeBoundRaR
R�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_typebound_def=s



c
CsLtj
�}
|d
|
_|ddkr5t|
_n	t|
_|
|d<dS(sIbool : BOOL IDENTIFIER TRUE SEMI
            | BOOL IDENTIFIER FALSE SEMIiiRgiN(RtBoolR�R�tstateR�(R�t
b((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_boolDs



	
c
Csmtj
�}
|d
|
_t|d|
dt�

t|�
dkr\t|d|
dt�

n|
g
|d<dS(s� conditional : IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE
                    | IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE ELSE OBRACE interface_stmts CBRACE
    iiR�ii
iN(RtConditionalR�R�R�R�R�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_conditionalOs





c
Cs;tj
�}
|d
|
_|
jj|d�

|
|d<dS(s<typeattribute_def : TYPEATTRIBUTE IDENTIFIER comma_list SEMIiiiN(Rt
TypeAttributeRaR	
R�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_typeattribute_defZs



c
Cs;tj
�}
|d
|
_|
jj|d�

|
|d<dS(s<roleattribute_def : ROLEATTRIBUTE IDENTIFIER comma_list SEMIiiiN(Rt
RoleAttributeRktroleattributesR�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_roleattribute_defas



c


Csd
S(s�range_transition_def : RANGE_TRANSITION names names COLON names mls_range_def SEMI
                            | RANGE_TRANSITION names names names SEMIN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_range_transition_defhsc


Csd
S(s<role_transition_def : ROLE_TRANSITION names names names SEMIN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_role_transition_defmsc
Cs�t|�
}
|
d
kr,|dg
|d<nQ|
dkrT|dg
|d
|d<n)|d|d
|dg
|d|d<dS(s
cond_expr : IDENTIFIER
                 | EXPL cond_expr
                 | cond_expr AMP AMP cond_expr
                 | cond_expr BAR BAR cond_expr
                 | cond_expr EQUAL EQUAL cond_expr
                 | cond_expr EXPL EQUAL cond_expr
    ii
iiiN(
R�(R�t
l((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_cond_exprqs



c
Cs�tj
�}
t|�
d
kr2t|d|
�
nUt|�
d
krat|d|
�
t|
_n&t|dg
�

|
jd|d
�

|
|d<dS(s�names : identifier
             | nested_id_set
             | asterisk
             | TILDE identifier
             | TILDE nested_id_set
             | IDENTIFIER MINUS IDENTIFIER
    ii
iR�iN(RtIdSetR�R�R�t
complimentR�(R�R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_names�s






c

Cs|d
g
|d<dS(sidentifier : IDENTIFIERi
iN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_identifier�sc

Cs|d
g
|d<dS(sasterisk : ASTERISKi
iN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
p_asterisk�sc

Cs|d
|d<dS(s1nested_id_set : OBRACE nested_id_list CBRACE
    iiN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_nested_id_set�sc

Cs=t|�
d
kr#|d|d<n|d|d
|d<dS(s`nested_id_list : nested_id_element
                      | nested_id_list nested_id_element
    ii
iN(
R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_nested_id_list�s
c
CsBt|�
d
kr#|d|d<nd|d
}
|
g
|d<dS(sxnested_id_element : identifier
                         | MINUS IDENTIFIER
                         | nested_id_set
    ii
iR�N(
R�(R�tstr((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_nested_id_element�s

c

Cs=t|�
d
kr+|d|d|d<n|d|d<dS(sTcomma_list : nested_id_list
                  | comma_list COMMA nested_id_list
    ii
iiN(
R�(
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_comma_list�s

c


Csd
S(s/optional_semi : SEMI
                   | emptyN((
R�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_optional_semi�sc

Cs.d
t|j
|j|jfatGHtadS(Ns(%s: Syntax error on line %d %s [type=%s](t
parse_fileR�R�RaterrorR�tsuccess(
ttok((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytp_error�s

c
Cs2|s
iSi}
x|D]}||
|j<qWdS(
N(
R�(R�tmapR�((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytprep_spt�s






cCssts3t
j
�atjd
dd|dd�an|dk	rH|antj�a|
sitj�a	n|
a	dS(NtmethodtLALRtdebugtwrite_tablesi(
tparserRR�RR�R�RtModulet
SupportMacrosR�(RNtsupportRJ
((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytcreate_globals�s

!
	
cCs�t|
||�
d
t
_taytj|d|dt
�

Wn=tk
r{
}
dada
dt	|�
dt
j�an
Xts�dadt}t
|�
�
ntS(Ni
RJ
R�sinternal parser error: %ss

scould not parse text: "%s"(RP
R�R�R�RC
RL
tparset	ExceptionR�R=
t	tracebackt
format_excRB
t
ValueErrorR�(ttextRNRO
RJ
t
etmsg((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyRQ
�s
	





"



c
	Cs�g}
d}x�t
j|�
D]�\}}}x�|D]�}t
jj|�
}t
jj||�}|d
dkr�|dkr�|}q�ttjd|d��
r�|
j	|d|f�

q�q2|d
dkr2|
j	|d|f�

q2q2WqW|
|fS(Ni
s.sptsobj_perm_sets.spttpatternsis.if(
R�tostwalkR�tsplitextR
R�tretfindallR�(	troottmodulestsupport_macrostdirpathtdirnamest	filenamesR�tmodnametfilename((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pytlist_headers
s







	



"cs�d
dlm
}
tj�}g}d}tjj|�
r�tjj|�
d
}|dkrot	d|�
�
ntjj
|�
}	|j|	d|f�

tt
j��
\}
}nt|�
\}}|r�|r�t	d�
�
n�f
d��
d��
fd�
}d}|r�
�
d	|�

tj�}|||�
|jj|�

tjd
�
}
tjddd
dddddddg
�
}|
jjtj|�
�

|jj|
�

�
d�

n�r�
�r�
|jtjdt|�
�

}|jd�

ng}x�|D]�}tj�}|d|_y2|rA||d
||�
n||d
|�
Wn;t	k
r�
}
�
t|�
d�

|j|d
�

qn
X|jj|�

�r�r|j�
qqWt|�
r��
ddj|�
�

n|S(Ni
(
tutilR�sInvalid file name %sis1could not find support macros (obj_perm_sets.spt)c

s�r�j|�

ndS(
N(
twrite(
RX
(
toutput(s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyR�3s

cs��r�
d
|�

ny?t|�
}|j
�}|j�
|at||
|��
WnBtk
rl
}
dStk
r�
}
td|t|�
f�
�
n
XdS(Nsparsing file %s
serror parsing file %s: %s(topentreadtcloseRA
RQ
tIOErrorRU
R=
(R�RNR�tfdttxtRW
(RJ
R�(s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyRA
7s











sParsing support macros (%s): tcan_execs$1s$2tfiletexecute_no_transRk
Rl
tgetattrtlocktexecutetioctlsdone.
tstepssParsing interface filess

s failed to parse some headers: %ss, (R�Rh
RtHeadersR�RZ
R�tisfiletsplitRU
R\
R�Rg
R
theadersRN
R�R�RtAccessVectorR
tConsoleProgressBartsyststdoutR�R�RM
R�R=
tstepR
(R_
Rj
R�RJ
Rh
R|
R`
Ra
R�Re
tall_modulesRA
R�Rq
tavtstatustfailuresR�R�RW
((RJ
R�Rj
s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt
parse_headerssb





































(IRRRRR	R
RRR
RRRRRRRsFILENAMEs
IDENTIFIERRsPATHRRRRRRRR R!R"R#R$R%R&R'R(R)R*R+R,R-R.R/R0R1R2R3R4R5R6R7R8R9s	DONTAUDITs
AUDITALLOWs
NEVERALLOWR=R>R?sTYPE_CHANGEsTYPE_MEMBERRBRCRDRERFRGsTEMPLATERIRJRKRLRM(yR
RZ
R]
RS
R�RR
RRRttokensR�tt_TICKtt_SQUOTEtt_OBRACEtt_CBRACEtt_SEMItt_COLONtt_OPARENtt_CPARENtt_COMMAtt_MINUStt_TILDEt
t_ASTERISKtt_AMPtt_BARtt_EXPLtt_EQUALtt_NUMBERtt_PATHtt_ignoreR�R�R�R�R�R�R�R�R�R�R�RB
RA
R�R�RC
R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R
R
R
R
R
R
R
R
R
R
R
R 
R$
R&
R*
R,
R.
R1
R2
R3
R5
R8
R9
R:
R;
R<
R>
R?
R@
RE
RG
RL
R�RP
R�RQ
Rg
R�
(((s8/usr/lib64/python2.7/site-packages/sepolgen/refparser.pyt<module> s�



































































































































									

		
	
							
				
		
	
	
	"