1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
import json
import os
from typing import List
from yaml import load as yaml_load
import utils.srg_utils.worksheet_utils
from utils.srg_utils.worksheet_utils import Row
from ssg.yaml import yaml_SafeLoader
from ssg.build_stig import SEVERITY
from utils.srg_utils.yaml import replace_yaml_key, create_output
def get_full_name(root_dir: str, product: str) -> str:
product_yml_path = os.path.join(root_dir, 'products', product, 'product.yml')
with open(product_yml_path, 'r') as f:
data = yaml_load(f, Loader=yaml_SafeLoader)
return data['full_name']
def get_cce_dict(data: dict, product: str) -> dict:
results = dict()
for rule_id in data.keys():
rule = data[rule_id]
cce_key = f'cce@{product}' in rule['identifiers']
if product in rule['products'] and cce_key:
results[rule['identifiers'][f'cce@{product}']] = rule_id
return results
def get_rule_dir_json(path: str) -> dict:
with open(path, 'r') as f:
return json.load(f)
def fix_changed_text(replacement: str, changed_name: str) -> str:
no_space_name = changed_name.replace(' ', '')
return replacement.replace(changed_name, '{{{ full_name }}}')\
.replace(no_space_name, '{{{ full_name }}}')
def get_last_content_index(lines: List[str]) -> int:
last_content_index = len(lines)
lines.reverse()
for line in lines:
if line == '\n':
last_content_index -= 1
else:
break
lines.reverse()
return last_content_index
def cleanup_end_of_file(rule_dir: str) -> None:
path = create_output(rule_dir)
with open(path, 'r') as f:
lines = f.readlines()
last_content_index = get_last_content_index(lines)
lines = lines[:last_content_index]
with open(path, 'w') as f:
f.writelines(lines)
def get_cac_status(disa: str) -> str:
return SEVERITY.get(disa, 'Unknown')
def update_severity(changed: Row,
current: Row, rule_dir_json: dict) -> int:
if changed.Severity != current.Severity and changed.Severity is not None and \
current.Severity is not None:
cac_severity = get_cac_status(changed.Severity)
replace_yaml_key('severity', cac_severity, rule_dir_json)
|
