Sindbad~EG File Manager

Current Path : /usr/share/crypto-policies/python/cryptopolicies/__pycache__/
Current File : //usr/share/crypto-policies/python/cryptopolicies/__pycache__/cryptopolicies.cpython-36.opt-1.pyc
3

."�dCB�@s6ddlZddlZddlZddlZddlZddlZddlmZddlmZdd�d<D�Z	dZ
d=Zd dhdddhdddhddhdddhdddhdddhdddhdddhdddhd!�
ZGd"d#�d#�Z
Gd$d%�d%ej�Zd&d'�Zejd(d>�Zd-d.�Zd?d0d1�ZGd2d3�d3e�Zd4d5�ZGd6d7�d7�Zd8d9�ZGd:d;�d;�ZdS)@�N�)�	alg_lists)�
validationcCsi|]
}d|�qS)r�)�.0�krr�C./usr/share/crypto-policies/python/cryptopolicies/cryptopolicies.py�
<dictcomp>sr	�arbitrary_dh_groups�min_dh_size�min_dsa_size�min_rsa_size�
sha1_in_certs�	ssh_certs�ssh_etm�*�tls�ssl�openssl�nss�gnutls�java-tls�ssh�openssh�openssh-server�openssh-client�libssh�ipsec�ike�	libreswan�kerberos�krb5�dnssec�bind)
r#rzjava-tlsr!rrrzopenssh-clientzopenssh-serverrc@s(eZdZefdd�Zdd�Zdd�ZdS)�
ScopeSelectorcCs�|j�|_}|jd�|_|jr&|n
|dd�}tjj||jd�tjj||jd�|jd�rr|dd�jd�n|g|_	tjj
|j	t|jd�dS)a=
        Initialize a scope selector.
        An example would be `ssh` in `ciphers@ssh = -NULL`.
        When openssh backend will request the configuration,
        it'll offer (`{'ssh', 'openssh'}`) as scopes
        and the rule above will be taken into account.
        Both patterns and scopes are cast to lowercase.
        For more examples, refer to tests/unit/parsing/test_scope_selector.py
        >>> ss = ScopeSelector('!{SSH,IPsec}')
        >>> ss.matches({'ipsec', 'libreswan'})
        False
        >>> ss.matches({'tls', 'openssl'})
        True
        �!rN)Zoriginal_pattern�{�,���)�lower�pattern�
startswith�	_positiver�scopeZillegal_charactersZcurly_brackets�split�_globsZresulting_globs�
ALL_SCOPES)�selfr*�prrr�__init__5s$zScopeSelector.__init__cCsdt|j��d�S)Nz<ScopeSelector pattern=�>)�reprr*)r1rrr�__str__PszScopeSelector.__str__csR|jtkrdSdd��D��|jr:t�fdd�|jD��St�fdd�|jD��S)aE
        Checks whether ScopeSelector matches one of the scopes.
        For more examples, refer to tests/unit/parsing/test_scope_selector.py
        >>> ScopeSelector('{SSH,IPsec}').matches({'ipsec', 'libreswan'})
        True
        >>> ScopeSelector('!{SSH,IPsec}').matches({'ipsec', 'libreswan'})
        False
        TcSsg|]}|j��qSr)r))r�srrr�
<listcomp>^sz)ScopeSelector.matches.<locals>.<listcomp>c3s|]}tj�|�VqdS)N)�fnmatch�filter)r�g)�scopesrr�	<genexpr>asz(ScopeSelector.matches.<locals>.<genexpr>c3s|]}tj�|�VqdS)N)r9r:)rr;)r<rrr=bs)r*�	SCOPE_ANYr,�anyr/�all)r1r<r)r<r�matchesSs	
zScopeSelector.matchesN)�__name__�
__module__�__qualname__r>r3r6rArrrrr$4sr$c@s$eZdZdZdZdZdZdZdZdS)�	OperationzM
    An operation that comes with the right-hand value of the directive.
    r����N)	rBrCrD�__doc__�RESET�PREPEND�APPEND�OMIT�SET_INTrrrrrEgsrEcs�dd��|j�rL�tjkr2�tkr2tjt|�fgS�tjkr`tjj	���q`n�tkr`tjj
���|j�}t�fdd�|D��s�t
�fdd�|D�g�}tjdfgdd�|D�St�fd	d�|D���rtg}x�|D]�}|jd
��rtj�tj|dd���ddd
�}nL|jd
��r:tj�tj|dd���ddd�}ntj�tj|dd���}|j�fdd�|D��q�W|Stjj|��dS)a7
    Parses right-hand parts of the directives
    into lists of operation/value pairs.
    For more examples, refer to tests/unit/test_parsing.py
    >>> parse_rhs('', 'cipher')
    [(<Operation.RESET: 1>, None)]
    >>> parse_rhs('IDEA-CBC SEED-CBC', 'cipher')
    [(<Operation.RESET: 1>, None),
     (<Operation.APPEND: 3>, 'IDEA-CBC'),
     (<Operation.APPEND: 3>, 'SEED-CBC')]
    >>> # 3DES-CBC gets prepended last for higher prio
    >>> parse_rhs('+*DES-CBC', 'cipher')
    [(<Operation.PREPEND: 2>, 'DES-CBC'),
     (<Operation.PREPEND: 2>, '3DES-CBC')]
    cSs|jd�p|jd�p|jd�S)N�+�-)r+�endswith)�vrrr�differential�szparse_rhs.<locals>.differentialc3s|]}�|�VqdS)Nr)rrS)rTrrr=�szparse_rhs.<locals>.<genexpr>csg|]}tj|���qSr)r�glob)rrS)�	prop_namerrr8�szparse_rhs.<locals>.<listcomp>NcSsg|]}tj|f�qSr)rErM)rrSrrrr8�sc3s|]}�|�VqdS)Nr)rrS)rTrrr=�srPrcsg|]}�|f�qSrr)rrS)�oprrr8�sr(r(r()�isdigitr�ALL�INT_DEFAULTSrErO�intr�rulesZNonIntPropertyIntValueErrorZIntPropertyNonIntValueErrorr.r?�sumrKr@r+rLrUrRrMrN�extendZ%MixedDifferentialNonDifferentialError)�rhsrV�valuesZ
operations�valueZunglobr)rTrWrVr�	parse_rhsrs8


  rb�	DirectiverVr-�	operationracs�|j�sgStjj|�|jd�\}}|j�|j�}}tjj||�d|krZ|jdd�n|tf\����fdd�t|��D�S)ae
    Parses configuration lines into tuples of directives.
    For more examples, refer to tests/unit/test_parsing.py
    >>> parse_line('cipher@TLS = RC4* NULL')
    [Directive(prop_name='cipher', scope='tls',
               operation=<Operation.RESET: 1>, value=None),
     Directive(prop_name='cipher', scope='tls',
               operation=<Operation.APPEND: 3>, value='RC4-40'),
     Directive(prop_name='cipher', scope='tls',
               operation=<Operation.APPEND: 3>, value='RC4-128'),
     Directive(prop_name='cipher', scope='tls',
               operation=<Operation.APPEND: 3>, value='NULL')]
    �=�@rcs$g|]\}}t��j�||d��qS))rVr-rdra)rcr))rrdra)rVr-rrr8�szparse_line.<locals>.<listcomp>)�striprr\Zcount_equals_signsr.Z	empty_lhsr>rb)�lineZlhsr_r)rVr-r�
parse_line�s riFcCs^y$t|�}x|D]}t|j�qWWn4tjk
rX}z|s>�tj|�WYdd}~XnXdS)N)rir$r-rZPolicySyntaxError�warnings�warn)rhrk�l�d�exrrr�syntax_check_line�s
rocseZdZ�fdd�Z�ZS)�PolicySyntaxDeprecationWarningcs@|jdd�}d|�d�}|d|�d�7}|d7}t�j|�dS)N�
z and zoption z is deprecatedz", please rewrite your rules using z; z2be advised that it is not always a 1-1 replacement)�replace�superr3)r1Z
deprecatedZreplacement�msg)�	__class__rrr3�s
z'PolicySyntaxDeprecationWarning.__init__)rBrCrDr3�
__classcell__rr)rurrp�srpcCs�tjdd|�}|jdd�}djdd�|jd�D��}|jdd�}djd	d�|jd�D��}djd
d�|jd�D��}tjdd|�j�}tjd|�r�tjt	d
d��ddddd�}xr|j
�D]f\}}d|d}tj||�}|r�tjt	||��tj|d|�}x"|D]}|d|�d|��7}�qWq�Wtjdd|�j�}ddd�}xN|j
�D]B\}}d|d}tj||��r|tjt	||��tj|||�}�qJWtt
jddd%��}xZ|�r�djdd�|dd&�D��}	tjd|d'd|	�r�d |	��nd|�}|j��q�Wtjd!d|�}tt
jddd(��}
xZ|
�r|djd"d�|
dd)�D��}	tjd#|
d*d|	�rhd |	��nd|�}|
j��q$Wtjd$d|�}|S)+a
    Preprocesses text before parsing.
    Fixes line breaks, handles backwards compatibility.
    >>> preprocess_text('cipher = c1 \\ \nc2#x')
    'cipher = c1 c2'
    >>> with warnings.catch_warnings():
    ...     warnings.simplefilter("ignore")
    ...     preprocess_text('ike_protocol = IKEv2')
    'protocol@IKE = IKEv2'
    >>> with warnings.catch_warnings():
    ...     warnings.simplefilter("ignore")
    ...     preprocess_text('min_tls_version=TLS1.3')
    'protocol@TLS = -SSL2.0 -SSL3.0 -TLS1.0 -TLS1.1 -TLS1.2'
    z#.*�rez = rqcss|]}|j�VqdS)N)rg)rrlrrrr=�sz"preprocess_text.<locals>.<genexpr>z\
css|]}|j�VqdS)N)rg)rrlrrrr=�scss|]}tjdd|�VqdS)z\s+� N)�re�sub)rrlrrrr=�sz
+z\bprotocol\s*=�protocolzprotocol@TLSz
cipher@TLSz
cipher@SSHz	group@SSHzprotocol@IKE)Z
tls_cipherZ
ssh_cipherZ	ssh_groupZike_protocolz\bz\s*=(.*)z

z =z7hash@DNSSec = -SHA1
sign@DNSSec = -RSA-SHA1 -ECDSA-SHA1z7hash@DNSSec = SHA1+
sign@DNSSec = RSA-SHA1+ ECDSA-SHA1+)zsha1_in_dnssec = 0zsha1_in_dnssec = 1Nrrxcss|]}d|VqdS)rQNr)rrSrrrr=sz\bmin_dtls_version = zprotocol@TLS = z\bmin_dtls_version = 0\bcss|]}d|VqdS)rQNr)rrSrrrr=$sz\bmin_tls_version = z\bmin_tls_version = 0\br(r(r(r(r(r()ryrzrr�joinr.rg�findallrjrkrp�items�search�listrZDTLS_PROTOCOLS�popZ
TLS_PROTOCOLS)�textZPOSTFIX_REPLACEMENTS�frZtoZregexZms�mZPLAIN_REPLACEMENTSZ
dtls_versions�negZtls_versionsrrr�preprocess_text�sZ
r�c@sJeZdZdZd
dd�Zedd��Zedd��Zed	d
��Zedd��Z	dS)�ScopedPolicya�
    An entity constructing lists of what's `.enabled` and what's `.disabled`
    when the given scopes are active.
    >>> sp = ScopedPolicy(parse_line('cipher@TLS = RC4* NULL'), {'tls'})
    >>> 'AES-256-GCM' in sp.disabled['cipher']
    True
    >>> sp.enabled['cipher']
    ['RC4-40', 'RC4-128', 'NULL']
    >>> ScopedPolicy(parse_line('min_dh_size=2048')).integers['min_dh_size']
    2048
    Ncs(|pt�}tj��_dd�tjD��_x�|D]މt�j�}|j	|�r,�j
tjkr^g�j�j
<q,�j
tjkr��j�j
}�j|kr�|j�j�q,�j
tjkr̈j�j
}�j|kr�|j�j�|jd�j�q,�j
tjkr��fdd��j�j
D��j�j
<q,�j�j�j
<q,W�fdd�tjD��_dS)NcSsi|]
}g|�qSrr)rrVrrrr	>sz)ScopedPolicy.__init__.<locals>.<dictcomp>rcsg|]}|�jkr|�qSr)ra)r�e)�	directiverrr8Rsz)ScopedPolicy.__init__.<locals>.<listcomp>cs(i|] ���fdd�tj�D���qS)csg|]}|�j�kr|�qSr)�enabled)rr�)rVr1rrr8Zsz4ScopedPolicy.__init__.<locals>.<dictcomp>.<listcomp>)rrY)r)r1)rVrr	Zs)�setrZ�copy�integersrrYr�r$r-rArdrErKrVrMra�appendrL�remove�insertrNZdisabled)r1�
directivesZrelevant_scopesZssr�r)r�r1rr3;s,






$
zScopedPolicy.__init__cCstj|jd�S)Nr{)r�min_tls_versionr�)r1rrrr�^szScopedPolicy.min_tls_versioncCstj|jd�S)Nr{)r�max_tls_versionr�)r1rrrr�bszScopedPolicy.max_tls_versioncCstj|jd�S)Nr{)r�min_dtls_versionr�)r1rrrr�fszScopedPolicy.min_dtls_versioncCstj|jd�S)Nr{)r�max_dtls_versionr�)r1rrrr�jszScopedPolicy.max_dtls_version)N)
rBrCrDrJr3�propertyr�r�r�r�rrrrr�/s
#r�cCs@x,|D]$}tjj||�}tj|tj�r|SqWtj|||��dS)N)�os�pathr|�access�R_OKrZPolicyFileNotFoundError)�
policyname�fname�pathsrmr2rrr�lookup_fileqs

r�c@sFeZdZdZdZdd�dd�Zdd�Zdd	d
�Zddd
�Zdd�Z	dS)�UnscopedCryptoPolicyz/etc/crypto-policiesz/usr/share/crypto-policiesN)�	policydircGsR||_dj|f|�|_g|_|j|�}x|D]}||j|dd�7}q.W||_dS)N�:T)�	subpolicy)r�r|r��lines�read_policy_file�_directives)r1Zpolicy_namer�Zsubpolicy_namesr�Zsubpolicy_namerrrr3�s

zUnscopedCryptoPolicy.__init__cCs|jS)N)r�)r1rrr�is_empty�szUnscopedCryptoPolicy.is_emptycCst|j|pi�S)N)r�r�)r1r<rrr�scoped�szUnscopedCryptoPolicy.scopedFc	Cs�|jpd}|rtjj|d�}t|||s*dndtjj|tjj|j|�tjj|j|�f�}t|��}|j	�}WdQRXt
|�}|jd�}x|D]}t|dd�q�Wx|D]}t|�q�Wt
dd	�|D�g�S)
NZpolicies�modulesz.polz.pmodrqT)rkcSsg|]}t|��qSr)ri)rrlrrrr8�sz9UnscopedCryptoPolicy.read_policy_file.<locals>.<listcomp>)r�r�r�r|r��curdir�
CONFIG_DIR�	SHARE_DIR�open�readr�r.ror])	r1�namer�Zpdirr2�fr�r�rlrrrr��s$




z%UnscopedCryptoPolicy.read_policy_filecCsdd�}|j�}d|j�d�}|d7}|d7}|d7}|d7}|d7}|j|j�}x"|j�D]\}}||||�7}q\Wd	}xvtj�D]j\}}	|j|	d
�}
|
j|
j�}xH|j�D]<\}}|||kr�|s�|d7}d}|||�d
|��|�7}q�Wq�W|�s|d7}|S)NcSs2t|t�rdj|�nt|�}|�d|��j�dS)Nrxz = rq)�
isinstancer�r|�str�rstrip)�keyrar7rrr�fmt�sz)UnscopedCryptoPolicy.__str__.<locals>.fmtz	# Policy z dump
z#
z?# Do not parse the contents of this file with automated tools,
z.# it is provided for review convenience only.
z"# Baseline values for all scopes:
F)r<z9# Scope-specific properties derived for select backends:
Trfz&# No scope-specific properties found.
)r�r�r�r�r~�DUMPABLE_SCOPES)r1r�Zgeneric_scopedr7Zgeneric_allrVraZanything_scope_specificZ
scope_nameZ	scope_setZspecific_scopedZspecific_allrrrr6�s2 zUnscopedCryptoPolicy.__str__)N)F)
rBrCrDr�r�r3r�r�r�r6rrrrr�{s

r�)r
rrr
rrr)rrrrrrrrrrrrrrr r!r"r#)rVr-rdra)F)�collections�enumr9r�ryrjrwrrrZr>r0r�r$�EnumrErb�
namedtuplercriro�
FutureWarningrpr�r�r�r�rrrr�<module>sP3;
	LB
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists