Admin

name	type	size	perms	modified	actions
[parent directory]
__pycache__/	dir	-	0755	2026-08-19 08:35:27
__init__.py	file	2,585 B	0644	2026-02-17 00:00:00	edit
bool.py	file	2,651 B	0644	2026-02-17 00:00:00	edit
bounds.py	file	3,789 B	0644	2026-02-17 00:00:00	edit
commons.py	file	2,409 B	0644	2026-02-17 00:00:00	edit
conditional.py	file	1,256 B	0644	2026-02-17 00:00:00	edit
constraints.py	file	8,663 B	0644	2026-02-17 00:00:00	edit
context.py	file	1,382 B	0644	2026-02-17 00:00:00	edit
default.py	file	3,679 B	0644	2026-02-17 00:00:00	edit
descriptors.py	file	1,279 B	0644	2026-02-17 00:00:00	edit
difference.py	file	5,522 B	0644	2026-02-17 00:00:00	edit
fsuse.py	file	2,628 B	0644	2026-02-17 00:00:00	edit
genfscon.py	file	2,809 B	0644	2026-02-17 00:00:00	edit
ibendportcon.py	file	2,748 B	0644	2026-02-17 00:00:00	edit
ibpkeycon.py	file	2,769 B	0644	2026-02-17 00:00:00	edit
initsid.py	file	2,168 B	0644	2026-02-17 00:00:00	edit
mls.py	file	10,558 B	0644	2026-02-17 00:00:00	edit
mlsrules.py	file	4,740 B	0644	2026-02-17 00:00:00	edit
netifcon.py	file	3,198 B	0644	2026-02-17 00:00:00	edit
nodecon.py	file	2,742 B	0644	2026-02-17 00:00:00	edit
objclass.py	file	3,325 B	0644	2026-02-17 00:00:00	edit
polcap.py	file	1,177 B	0644	2026-02-17 00:00:00	edit
portcon.py	file	2,742 B	0644	2026-02-17 00:00:00	edit
properties.py	file	1,974 B	0644	2026-02-17 00:00:00	edit
rbacrules.py	file	6,647 B	0644	2026-02-17 00:00:00	edit
roles.py	file	2,869 B	0644	2026-02-17 00:00:00	edit
terules.py	file	25,488 B	0644	2026-02-17 00:00:00	edit
typeattr.py	file	3,010 B	0644	2026-02-17 00:00:00	edit
types.py	file	4,372 B	0644	2026-02-17 00:00:00	edit
typing.py	file	603 B	0644	2026-02-17 00:00:00	edit
users.py	file	5,475 B	0644	2026-02-17 00:00:00	edit

editing: commons.py

# Copyright 2015, Tresys Technology, LLC
#
# SPDX-License-Identifier: LGPL-2.1-only
#
from dataclasses import dataclass

from .descriptors import DiffResultDescriptor
from .difference import Difference, DifferenceResult, SymbolWrapper
from .. import policyrep

@dataclass(frozen=True, order=True)
class ModifiedCommon(DifferenceResult):

"""Difference details for a modified common permission set."""

common: policyrep.Common
    added_perms: set[str]
    removed_perms: set[str]
    matched_perms: set[str]

class CommonDifference(Difference):

"""
    Determine the difference in common permission sets
    between two policies.
    """

def diff_commons(self) -> None:
        """Generate the difference in commons between the policies."""

self.log.info(
            f"Generating common differences from {self.left_policy} to {self.right_policy}")

self.added_commons, self.removed_commons, matched_commons = self._set_diff(
            (SymbolWrapper(c) for c in self.left_policy.commons()),
            (SymbolWrapper(c) for c in self.right_policy.commons()))

self.modified_commons = list[ModifiedCommon]()

for left_common, right_common in matched_commons:
            # Criteria for modified commons
            # 1. change to permissions
            added_perms, removed_perms, matched_perms = self._set_diff(left_common.perms,
                                                                       right_common.perms,
                                                                       unwrap=False)

if added_perms or removed_perms:
                self.modified_commons.append(ModifiedCommon(left_common,
                                                            added_perms,
                                                            removed_perms,
                                                            matched_perms))

added_commons = DiffResultDescriptor[policyrep.Common](diff_commons)
    removed_commons = DiffResultDescriptor[policyrep.Common](diff_commons)
    modified_commons = DiffResultDescriptor[ModifiedCommon](diff_commons)

#
    # Internal functions
    #
    def _reset_diff(self) -> None:
        """Reset diff results on policy changes."""
        self.log.debug("Resetting common differences")
        del self.added_commons
        del self.removed_commons
        del self.modified_commons

cancel