m�
=&KRc,@s�dkZdk
Z
dkZdkZdkZdkZdkZdkZd�Zhd-d<d.d<d/d<d0d<d1d<d2d<d3d<d4d<d5d<d6d<d7d<d8d<d9d<d:d<d;d <d<d!<d=d"<d>d#<d?d$<d@d%<dAd&<dBd'<dCd(<dDd)<dEd+<dFd*<dGd,<Z	dHZ
dIZdJZdKZ
dLZdMZdNZdOZdPZdQZdRZdSZdTZdUZdVZdWZdXZdY�ZdZ�Zd[�Zd\�Zd]�Zd^�Z da"da#da$dd_�
Z%d`�Z&da�Z'db�Z(dc�Z)dd�Z*de�Z+df�Z,dg�Z-dh�Z.di�Z/dj�Z0dk�Z1dl�Z2dm�Z3dn�Z4do�Z5dp�Z6dq�Z7dr�Z8ds�Z9dt�Z:du�Z;dv�Z<dw�Z=dx�Z>dy�Z?dz�Z@d{�ZAd|�ZBd}�ZCd~�ZDd�ZEd��ZFd��ZGd��ZHd��ZId��ZJd��ZKd��ZLd��ZMd��ZNd��ZOd��ZPdaQdaRd��ZSddeTd��ZUd��ZVdeWeTd��ZXdS(�NtTICKtSQUOTEtOBRACEtCBRACEtSEMItCOLONtOPARENtCPARENtCOMMAtMINUStTILDEtASTERISKtAMPtBARtEXPLtEQUALt
IDENTIFIERtCLASSt
TYPEATTRIBUTEtTYPEt	ATTRIBUTEtALIASt	TYPEALIAStBOOLtIFtELSEtROLEtTYPEStALLOWt	DONTAUDITt
AUDITALLOWtTYPE_TRANSITIONtTYPE_CHANGEtTYPE_MEMBERtRANGE_TRANSITIONtROLE_TRANSITIONt
OPT_POLICYt	INTERFACEtTUNABLE_POLICYtGEN_REQtTEMPLATEtIFDEFtIFNDEFtDEFINEtclasst
typeattributettypet	attributetaliast	typealiastbooltiftelsetrolettypestallowt	dontauditt
auditallowttype_transitionttype_changettype_membertrange_transitiontrole_transitiontoptional_policyt	interfacettunable_policytgen_requirettemplatetifndeftifdeftdefines\`s\'s\{s\}s\;+s\:s\(s\)s\,s\-s\~s\*s\&s\|s\!s\=s 	c

Cs|i
d
7_
dS(sdnl.*\ni
N(t
ttlineno(
RG((t6/usr/lib/python2.4/site-packages/sepolgen/refparser.pytt_m4comment�s
c

Cs|i
d
7_
dS(srefpolicywarn\(.*\ni
N(RGRH(
RG((RItt_refpolicywarn�s
c

Csti
|id
�|_|S(s[a-zA-Z_\$][a-zA-Z0-9_\.\$\*]*RN(treservedtgetRGtvalueR.(
RG((RItt_IDENTIFIER�s

c

Cs|i
d
7_
dS(s\#.*\ni
N(RGRH(
RG((RIt	t_comment�s
c

Cs!d
|i
dGH|id�

dS(NsIllegal character '%s'ii
(RGRNtskip(
RG((RItt_error�s

c

Cs|i
t|i�
7_
d
S(s\n+N(RGRHtlenRN(
RG((RIt	t_newline�s

cCs�|djo
dSn

xh|D]`}|djo
qn

|
|_|dj	o
|
iid
||f�
q
|
iid
|�
qWdS(Ni(tstmtstNonet
stparenttvaltchildrentinsert(RURXRYRW((RItcollect�s







	


cCsLxE|D]=}ti|�
o
|
iti|�
�

q
|
i|�

qWdS(
N(tidstidtsptthas_keyRWtupdatetby_nametadd(R]RWR^((RItexpand�s



c

CsZt|�
d
jo
tii|d�

n,
t|�
d
jo
tii|d
�

n

dS(s^statements : statement
                  | statements statement
                  | empty
    ii
N(RSt
pt
mRZtappend(
Re((RItp_statements�s




c

Cs|d
|d<dS(sVstatement : interface
                 | template
                 | obj_perm_set
    i
iN(
Re(
Re((RItp_statement�s
c
Cs�ti
�}
t|�
d
jo
t|d|
�
nX
t|�
d
jo
t|d|
�
t|
_n'
t|dg
�

|
id|d
�

|
|d<dS(s�names : identifier
             | nested_id_set
             | asterisk
             | TILDE identifier
             | TILDE nested_id_set
             | IDENTIFIER MINUS IDENTIFIER
    ii
it
-iN(	t	refpolicytIdSetRWRSReRdtTruet
complimentRc(ReRW((RItp_names

s








c

Cs|d
g
|d<dS(sidentifier : IDENTIFIERi
iN(
Re(
Re((RItp_identifier
s

c

Cs|d
g
|d<dS(sasterisk : ASTERISKi
iN(
Re(
Re((RIt
p_asterisk!
s

c

Cs|d
|d<dS(s1nested_id_set : OBRACE nested_id_list CBRACE
    iiN(
Re(
Re((RItp_nested_id_set%
s
c

Cs?t|�
d
jo
|d|d<n
|d|d
|d<dS(s`nested_id_list : nested_id_element
                      | nested_id_list nested_id_element
    ii
iN(RSRe(
Re((RItp_nested_id_list*
s

c
CsDt|�
d
jo
|d|d<n
d|d
}
|
g
|d<dS(sxnested_id_element : identifier
                         | MINUS IDENTIFIER
                         | nested_id_set
    ii
iRjN(RSRetstr(ReRt((RItp_nested_id_element3
s



c

CsEt|�
d
jo
|d|d<n
|dd|dg|d<dS(s�interface_call_param : IDENTIFIER
                            | IDENTIFIER MINUS IDENTIFIER
                            | nested_id_set
    ii
iRjiN(RSRe(
Re((RItp_interface_call_param?
s
c

CsEt|�
d
jo
|dg
|d<n
|d|dg
|d<dS(s�interface_call_param_list : interface_call_param
                                 | interface_call_param_list COMMA interface_call_param
    ii
iiN(RSRe(
Re((RItp_interface_call_param_listK
s

c

Cs?t|�
d
jo
|d|d|d<n

|d|d<dS(sTcomma_list : nested_id_list
                  | comma_list COMMA nested_id_list
    ii
iiN(RSRe(
Re((RItp_comma_listU
s


c


Csd
S(s/optional_semi : SEMI
                   | emptyN((
Re((RItp_optional_semi]
sc
Cs�t|�
}
|
d
jo
|dg
|d<nT
|
djo
|dg
|d
|d<n*
|d|d
|dg
|d|d<dS(s
cond_expr : IDENTIFIER
                 | EXPL cond_expr
                 | cond_expr AMP AMP cond_expr
                 | cond_expr BAR BAR cond_expr
                 | cond_expr EQUAL EQUAL cond_expr
                 | cond_expr EXPL EQUAL cond_expr
    ii
iiiN(RSRet
l(ReRz((RItp_cond_exprb
s






c


Csd
S(sempty :N((
Re((RItp_emptys
s
c
Cs2ti
|d
�
}
t|d|
�
|
|d<dS(sainterface : INTERFACE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
    iiiN(Rkt	InterfaceRet
xR\(ReR~((RItp_interfacey
s


c
Cs2ti
|d
�
}
t|d|
�
|
|d<dS(s�template : TEMPLATE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
                | DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
    iiiN(RktTemplateReR~R\(ReR~((RIt
p_template�
s


c

CsVt|�
d
jo
|d|d<n.
t|�
d
jo
|d|d
|d<n

dS(slinterface_stmts : policy
                       | interface_stmts policy
                       | empty
    ii
iN(RSRe(
Re((RItp_interface_stmts�
s




c
Cs*ti
�}
|d
|
_|
g
|d<dS(sP
    optional_policy : OPT_POLICY OPAREN TICK interface_stmts SQUOTE CPAREN
    iiN(RktOptionalPolicyt
oReRZ(ReR�((RItp_optional_policy�
s



c
Csoti
�}
|d
|
_t|d|
dt�

t|�
djo
t|d|
dt�

n

|
g
|d<dS(s�tunable_policy : TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
                      | TUNABLE_POLICY OPAREN TICK cond_expr SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN
    iiRYiiiN(	Rkt
TunablePolicyR~Ret	cond_exprR\RmRStFalse(ReR~((RItp_tunable_policy�
s






c
Cs�ti
|d
�
}
|ddjo

t}n
t}t|d|
d|�

t|�
djo
t|d|
dt�

n

|
g
|d<dS(	s^
ifdef : IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
             | IFNDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
             | IFDEF OPAREN TICK IDENTIFIER SQUOTE COMMA TICK interface_stmts SQUOTE COMMA TICK interface_stmts SQUOTE CPAREN optional_semi
    ii
REiRYiiN(	RktIfDefReR~Rmt
vR�R\RS(ReR~R�((RItp_ifdef�
s







c
Cs8ti
d
|d�
}
|
ii|d�

|
|d<dS(sCinterface_call : IDENTIFIER OPAREN interface_call_param_list CPARENtifnamei
iiN(Rkt
InterfaceCallRet
itargstextend(ReR�((RItp_interface_call�
s


c
Cs.ti
|d
�
}
|d|
_|
|d<dS(sRobj_perm_set : DEFINE OPAREN TICK IDENTIFIER SQUOTE COMMA TICK names SQUOTE CPARENiiiN(Rkt
ObjPermSetReRWtperms(ReRW((RItp_obj_perm_set�
s




c

Cs|d
|d<dS(s�policy : policy_stmt
              | optional_policy
              | tunable_policy
              | ifdef
              | conditional
    i
iN(
Re(
Re((RItp_policy�
s
c

Cs|d
g
|d<dS(s�
policy_stmt : gen_require
                   | avrule_def
                   | typerule_def
                   | typeattribute_def
                   | interface_call
                   | role_def
                   | role_allow
                   | type_def
                   | typealias_def
                   | attribute_def
                   | range_transition_def
                   | role_transition_def
    i
iN(
Re(
Re((RIt
p_policy_stmt�
s

c


Csd
S(s8gen_require : GEN_REQ OPAREN TICK requires SQUOTE CPARENN((
Re((RIt
p_gen_require�
s
c


Csd
S(ssrequires : require
                | requires require
                | ifdef
                | requires ifdef
    N((
Re((RIt
p_requires�
sc


Csd
S(s�require : TYPE comma_list SEMI
               | ROLE comma_list SEMI
               | ATTRIBUTE comma_list SEMI
               | CLASS comma_list SEMI
               | BOOL comma_list SEMI
    N((
Re((RIt	p_require�
sc
Cs�ti
|d
�
}
t|�
djo:
|ddjo
|
ii|d�

q�
|d|
_nP
t|�
djo<
|d|
_t|�
djo
|
ii|d�

q�
n

|
|d<dS(	s�type_def : TYPE IDENTIFIER COMMA comma_list SEMI
                | TYPE IDENTIFIER SEMI
                | TYPE IDENTIFIER ALIAS names SEMI
                | TYPE IDENTIFIER ALIAS names COMMA comma_list SEMI
    iiit
,iiiN(RktTypeReRGRSt
attributesRataliases(ReRG((RIt
p_type_def�
s









c
Cs!ti
|d
�
}
|
|d<dS(s)attribute_def : ATTRIBUTE IDENTIFIER SEMIiiN(Rkt	AttributeRet
a(ReR�((RItp_attribute_defs


c
Cs4ti
�}
|d
|
_|d|
_|
|d<dS(s5typealias_def : TYPEALIAS IDENTIFIER ALIAS names SEMIiiiN(Rkt	TypeAliasRGReR.R�(ReRG((RItp_typealias_defs







c
Cs;ti
�}
|d
|
_|
ii|d�

|
|d<dS(s0role_def : ROLE IDENTIFIER TYPES comma_list SEMIiiiN(RktRolet
rReR5R6Ra(ReR�((RIt
p_role_defs






c
Cs4ti
�}
|d
|
_|d|
_|
|d<dS(s#role_allow : ALLOW names names SEMIiiiN(Rkt	RoleAllowR�Ret	src_rolest	tgt_roles(ReR�((RItp_role_allows







c
Cs�ti
�}
|d
djo
ti
i|
_n%
|d
djo
ti
i|
_n

|d|
_|d|
_|d|
_	|d|
_
|
|d<d	S(
s�avrule_def : ALLOW names names COLON names names SEMI
                  | DONTAUDIT names names COLON names names SEMI
                  | AUDITALLOW names names COLON names names SEMI
    i
R8R9iiiiiN(RktAVRuleR�ReRt	rule_typeRt	src_typest	tgt_typestobj_classesR�(ReR�((RItp_avrule_def s













c
Cs�ti
�}
|d
djo
ti
i|
_n%
|d
djo
ti
i|
_n

|d|
_|d|
_|d|
_	|d|
_
|
|d<d	S(
s�typerule_def : TYPE_TRANSITION names names COLON names IDENTIFIER SEMI
                    | TYPE_CHANGE names names COLON names IDENTIFIER SEMI
                    | TYPE_MEMBER names names COLON names IDENTIFIER SEMI
    i
R;R<iiiiiN(RktTypeRuleRGReR R�R!R�R�R�t	dest_type(ReRG((RItp_typerule_def0s













c
Csoti
�}
|d
|
_t|d|
dt�

t|�
djo
t|d|
dt�

n

|
g
|d<dS(s� conditional : IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE
                    | IF OPAREN cond_expr CPAREN OBRACE interface_stmts CBRACE ELSE OBRACE interface_stmts CBRACE
    iiRYii
iN(	RktConditionalt
cReR�R\RmRSR�(ReR�((RIt
p_conditional@s






c
Cs;ti
�}
|d
|
_|
ii|d�

|
|d<dS(s<typeattribute_def : TYPEATTRIBUTE IDENTIFIER comma_list SEMIiiiN(Rkt
TypeAttributeRGReR.R�Ra(ReRG((RItp_typeattribute_defKs






c


Csd
S(sMmls_level_def : IDENTIFIER COLON comma_list
                     | IDENTIFIERN((
Re((RItp_mls_level_defRsc


Csd
S(s[mls_range_def : mls_level_def MINUS mls_level_def
                     | mls_level_def
    N((
Re((RItp_mls_range_defWsc


Csd
S(s�range_transition_def : RANGE_TRANSITION names names COLON names mls_range_def SEMI
                            | RANGE_TRANSITION names names names SEMIN((
Re((RItp_range_transition_def^sc


Csd
S(s<role_transition_def : ROLE_TRANSITION names names names SEMIN((
Re((RItp_role_transition_defcs
c

Cs%d
|i
|i|ifatGHdS(Ns$Syntax error on line %d %s [type=%s](ttokRHRNR.terror(
R�((RItp_errorgs


c
Cs7|p
hSn

h}
x|D]}||
|i<qWdS(
N(R_tmapR~tname(R_R�R~((RItprep_sptls




cCsytp.
t
i
�atid
dd|dd�an

|dj	o

|an

ti	�a|
p
ti�an
|
adS(NtmethodtLALRtdebugtwrite_tablesi(
tparsertlextlexertyaccR�tmoduleRVRfRktModuletsupportt
SupportMacrosR_(R�R�R�((RItcreate_globalsws



"



cCs�t|
||�
gt_d
t_yti|d|�


Wn%t
j
o

}
dt|�
a
n
Xt
dj	o
dt
}t|�
�
n

tS(NiR�sinternal parser error: %sscould not parse text: "%s"(R�R�R�R�R�tlexdatatlexposR�tparsettextt	Exceptiont
eRtR�RVtmsgt
ValueErrorRf(R�R�R�R�R�R�((RIR��s

	
	








c

Cs'
g}d}
d
dddg}x�ti|�
D]�\}}}	x�|	D]�}||jo
qDn

tii|�
}tii||�}|ddjoS
|djo

|}
q

ttid|d	��
o
|i|d	|f�

q

qD
|dd
jo
|i|d	|f�

qD
qDWq.W||
fS(Nsinit.ifsinetd.ifsuml.ifsthunderbird.ifi
s.sptsobj_perm_sets.spttpatternsis.if(tmodulesRVtsupport_macrost	blacklisttostwalktroottdirpathtdirnamest	filenamesR�tpathtsplitexttmodnametjointfilenameRStretfindallRg(
R�R�R�R�R�R�R�R�R�R�((RItlist_headers�s&














#c
s�dk}
t
i�}g}d}tii	|�
o|
tii|�
d
}|djo
t
d|�
�
n

tii|�
}|i|d|f�

tti��
\}
}n
t|�
\}}|o
|o
t
d�
�
n

�d��d��
d�
}d}|o�
�d|�

t
i�}|||�
|ii|�

t
id	�
}tid
ddd
dddddg	�
}|iit
i|�
�

|ii|�

�d�

n

�o7
�
o/
|
i"t#i$dt%|�
�

}|i'd�

n

g}x�|D]�}	t
i*�}|	d|_y4|o
||	d
||�
n
||	d
|�
Wn=t
j
o1

}
�t-|�
d�

|i|	d
�

q�
n
X|ii|�

�o
�
o
|i.�
q�

q�
Wt%|�
o
�ddi/|�
�

n

|S(Ni
tsInvalid file name %sis1could not find support macros (obj_perm_sets.spt)c

s�o
�i
|�

n

dS(
N(toutputtwriteR�(
R�(
R�(RIR��s

cs��
o
�d
|�

n

y9t|�
}|i�}|i�
t||
|�
�
WnItj
o


}
dSn2
t
j
o%

}
t
d|t|�
f�
�
n
XdS(Nsparsing file %s
serror parsing file %s: %s(R�R�t
ftopentfdtreadttxttcloseR�R�R_tIOErrorR�R�Rt(R�R�R_R�R�R�(R�R�(RIt
parse_file�s











sParsing support macros (%s): tcan_execs$1s$2tfiletexecute_no_transR�tgetattrtlocktexecutetioctlsdone.
tstepssParsing interface filess

s failed to parse some headers: %ss, (0tutilRktHeaderstheadersR�RVR�R�R�tisfileR�tsplitR�R�R�R�RgR�tdefaultstall_modulesRdR�R�R_R�RZR}R�taccesstAccessVectortavR�R�R�tConsoleProgressBartsyststdoutRStstatuststarttfailuresR~R�RfR�RttstepR�(R�R�RdR�R�R�RfR_R
R~R
R�R
R�R

R�R�R�R�R�R
((R�R�R�RIt
parse_headers�sb
	















*

















(,RR
RRRRRRRR	R
RRR
RRs
IDENTIFIERRRRRRRRRRRRRs	DONTAUDITs
AUDITALLOWRsTYPE_CHANGEsTYPE_MEMBERR"R#R$R%R&R'R(R)R*R+(YR	
R�R�RkR
R
R�R�ttokensRLtt_TICKtt_SQUOTEtt_OBRACEtt_CBRACEtt_SEMItt_COLONtt_OPARENtt_CPARENtt_COMMAtt_MINUStt_TILDEt
t_ASTERISKtt_AMPtt_BARtt_EXPLtt_EQUALtt_ignoreRJRKRORPRRRTRVRfR�R_R\RdRhRiRoRpRqRrRsRuRvRwRxRyR{R|RR�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�R�RmR
(QR
RRR�RsR�R
RrR�R�R�R
R�R�R\R
R
R{R�R�RJR�R�R
RhR
RpR
R�R�RiR
R�RTR�R
RvR
R�R
R�ROR�R�RPR�R
RwR
RR 
R�RxR�RLR
RqR�R�R�R!
RKR
RyR�R
R�R
RoR�R�RkR�R�R	
R|RdR�R�RuR�R
((RIt
? s�	
	
		
	
		
	:�)