1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232
|
"""
Common functions for processing rules in SSG
"""
from __future__ import absolute_import
from __future__ import print_function
import os
def get_rule_dir_yaml(dir_path):
"""
Constructs the path to the YAML metadata file for a given rule directory,
regardless of if it exists.
Args:
dir_path (str): The path to the rule directory.
Returns:
str: The path to the "rule.yml" file within the specified directory.
"""
return os.path.join(dir_path, "rule.yml")
def get_rule_dir_id(path):
"""
Returns the base name of a rule directory.
This function takes a file path and returns the base name of the directory.
It correctly handles being passed either the directory path or the YAML metadata
file path (ending with 'rule.yml').
Args:
path (str): The file or directory path.
Returns:
str: The base name of the rule directory.
"""
dir_path = path
if path.endswith("rule.yml"):
dir_path = os.path.dirname(path)
return os.path.basename(dir_path)
def is_rule_dir(dir_path):
"""
Check if a given directory path is a valid rule directory.
A valid rule directory must:
1. Exist as a directory.
2. Contain a specific YAML file as determined by get_rule_dir_yaml().
Args:
dir_path (str): The path to the directory to check.
Returns:
bool: True if dir_path is a valid rule directory, False otherwise.
"""
rule_yaml = get_rule_dir_yaml(dir_path)
is_dir = os.path.isdir(dir_path)
has_rule_yaml = os.path.exists(rule_yaml)
return is_dir and has_rule_yaml
def applies_to_product(file_name, product):
"""
Determines if a given file applies to a specified product.
An OVAL or fix is considered applicable to a product if any of the following conditions are met:
- The product parameter is Falsy (e.g., None, False, or an empty string).
- The file_name is "shared".
- The file_name matches the product.
- The product starts with the file_name.
Note that this function only filters based on the file name and does not consider the contents
of the fix or check.
Args:
file_name (str): The name of the file to check.
product (str): The product to check against.
Returns:
bool: True if the file applies to the product, False otherwise.
"""
if not product:
return True
return file_name == "shared" or file_name == product or product.startswith(file_name)
def get_rule_dir_ovals(dir_path, product=None):
"""
Gets a list of OVALs contained in a rule directory.
If product is None, returns all OVALs. Only returns OVALs which exist.
Args:
dir_path (str): The path to the rule directory.
product (str, optional): The product name to filter OVALs. Defaults to None.
Returns:
list: A list of paths to OVAL files in the specified directory, ordered by priority.
"""
if not is_rule_dir(dir_path):
return []
oval_dir = os.path.join(dir_path, "oval")
has_oval_dir = os.path.isdir(oval_dir)
if not has_oval_dir:
return []
# Two categories of results: those for a product and those that are shared
# to multiple products. Within common results, there's two types:
# those shared to multiple versions of the same type (added up front) and
# those shared across multiple product types (e.g., RHEL and Ubuntu).
product_results = []
common_results = []
for oval_file in sorted(os.listdir(oval_dir)):
file_name, ext = os.path.splitext(oval_file)
oval_path = os.path.join(oval_dir, oval_file)
if ext == ".xml" and applies_to_product(file_name, product):
# applies_to_product ensures we only have three entries:
# 1. shared
# 2. <product>
# 3. <product><version>
if file_name == 'shared':
# Shared are the lowest priority items, add them to the end of
# the common results.
common_results.append(oval_path)
elif file_name != product:
# Here, the filename is a subset of the product, but isn't
# the full product. Product here is both the product name
# (e.g., ubuntu) and its version (2004). Filename could be
# either "ubuntu" or "ubuntu2004" so we want this branch
# to trigger when it is the former, not the latter. It is
# the highest priority of common results, so insert it
# before any shared ones.
common_results.insert(0, oval_path)
else:
# Finally, this must be a product-specific result.
product_results.append(oval_path)
# Combine the two sets in priority order.
return product_results + common_results
def get_rule_dir_sces(dir_path, product=None):
"""
Get a list of SCEs contained in a rule directory.
Only returns SCEs which exist.
Args:
dir_path (str): The path to the rule directory.
product (str, optional): The product name to filter SCEs. If None, returns all SCEs.
Returns:
list: A list of paths to applicable SCE files. If product is specified, returns SCEs
in the order of priority:
- {product}.{ext}
- shared.{ext}
The function performs the following steps:
1. Checks if the provided directory is a valid rule directory.
2. Checks if the "sce" subdirectory exists within the rule directory.
3. Iterates over the files in the "sce" directory, filtering and prioritizing them based
on the product.
4. Returns a list of applicable SCE file paths, with product-specific SCEs listed before
shared SCEs.
"""
if not is_rule_dir(dir_path):
return []
sce_dir = os.path.join(dir_path, "sce")
has_sce_dir = os.path.isdir(sce_dir)
if not has_sce_dir:
return []
results = []
common_results = []
for sce_file in sorted(os.listdir(sce_dir)):
file_name, ext = os.path.splitext(sce_file)
sce_path = os.path.join(sce_dir, sce_file)
if applies_to_product(file_name, product):
if file_name == 'shared':
common_results.append(sce_path)
elif file_name != product:
common_results.insert(0, sce_path)
else:
results.append(sce_path)
return results + common_results
def find_rule_dirs(base_dir):
"""
Generator which yields all rule directories within a given base_dir, recursively.
Args:
base_dir (str): The base directory to start searching for rule directories.
Yields:
str: The path to each rule directory found within the base directory.
"""
for root, dirs, _ in os.walk(base_dir):
dirs.sort()
for dir_name in dirs:
dir_path = os.path.join(root, dir_name)
if is_rule_dir(dir_path):
yield dir_path
def find_rule_dirs_in_paths(base_dirs):
"""
Generator which yields all rule directories within a given directories list, recursively.
Args:
base_dirs (list): A list of base directories to search for rule directories.
Yields:
str: Paths to rule directories found within the base directories.
"""
if base_dirs:
for cur_dir in base_dirs:
for d in find_rule_dirs(cur_dir):
yield d
|