Current File : //lib/python2.7/site-packages/salt/modules/selinux.pyo
�
���^c @@ sm d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l Z d d l
Z d d l j j
Z
d d l Z d d l m Z m Z d d l m Z i d d 6d d 6d
d 6d d
6d d 6d d 6d d 6d d 6Z d � Z e
j d � � Z d � Z d � Z d � Z d � Z e d � Z e d � Z d � Z d � Z d � Z! d! � Z" d" � Z# d# � Z$ d$ � Z% d% � Z& d& � Z' d' � Z( d d( � Z) d d d d d) � Z+ d d d d d* � Z, d d d d d+ � Z- d d d d d, � Z. d d d d d- � Z/ e d. � Z0 e d/ � Z1 d d d d0 � Z2 d d d d d1 � Z3 d d d2 � Z4 d d d d d3 � Z5 d S(4 u�
Execute calls on selinux
.. note::
This module requires the ``semanage``, ``setsebool``, and ``semodule``
commands to be available on the minion. On RHEL-based distributions,
ensure that the ``policycoreutils`` and ``policycoreutils-python``
packages are installed. If not on a Fedora or RHEL-based distribution,
consult the selinux documentation for your distribution to ensure that the
proper packages are installed.
i ( t absolute_importt unicode_literalst print_functionN( t CommandExecutionErrort SaltInvocationError( t sixu all filesu au regular fileu fu directoryu du character deviceu cu block deviceu bu socketu su
symbolic linku lu
named pipeu pc C@ sX d } x1 | D]) } t j j j | � s
t | d f Sq
Wt d d k rN d St d f S(
ug
Check if the os is Linux, and then if selinux is running in permissive or
enforcing mode.
u semanageu setseboolu semoduleu is not in the pathu kernelu Linuxu selinuxu1 Module only works on Linux with selinux installed( u semanageu setseboolu semodule( t saltt utilst patht whicht Falset
__grains__( t
required_cmdst cmd( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt __virtual__* s
c C@ sl yS xH d D]@ } t j j | � r
t j j t j j | d � � rJ | Sq
q
Wd SWn t k
rg d SXd S( u�
Return the location of the SELinux VFS directory
CLI Example:
.. code-block:: bash
salt '*' selinux.selinux_fs_path
u /sys/fs/selinuxu /selinuxu enforceN( u /sys/fs/selinuxu /selinux( t osR t isdirt isfilet joint Nonet AttributeError( t directory( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt selinux_fs_path= s
!
c C@ s� t � } | d k r d Syi t j j | d � } t j j j | d � �6 } t j j j
| j � � j � d k rw d Sd SWd QXWn t
t t f k
r� d SXd S( u�
Return the mode selinux is running in
CLI Example:
.. code-block:: bash
salt '*' selinux.getenforce
u Disabledu enforceu ru 0u
Permissiveu EnforcingN( R R R R R R R t filest fopent stringutilst
to_unicodet readlinet stript IOErrort OSErrorR ( t _selinux_fs_patht enforcet _fp( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt
getenforceU s
'c C@ s� y� d } t j j j | d � �_ } xU | D]M } t j j j | � } | j � j d � r+ | j d � d j � j � Sq+ WWd QXWn t
t t f k
r� d SXd S( u�
Return the selinux mode from the config file
CLI Example:
.. code-block:: bash
salt '*' selinux.getconfig
u /etc/selinux/configu ru SELINUX=u =i N( R R R R R R R t
startswitht splitt
capitalizeR R R R ( t configR! t line( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt getconfigm s
+c
C@ se t | t j � r� | j � d k r3 d } d } q� | j � d k rT d } d } q� | j � d k ru d } d } q� d j | � Sn4 t | t � r� | r� d } q� d } n
d j | � St � d k r[t j j t
� d
� } yA t j j
j | d � �# } | j t j j j | � � Wd QXWq[t t f k
rW} d
} t | j | � � � q[Xn d } y� t j j
j | d � � } | j � } Wd QXy^ t j j
j | d � �@ } t j d d | d | � } | j t j j j | � � Wd QXWn4 t t f k
r%} d } t | j | � � � n XWn4 t t f k
r]} d } t | j | � � � n Xt � S( u�
Set the SELinux enforcing mode
CLI Example:
.. code-block:: bash
salt '*' selinux.setenforce enforcing
u enforcingu 1u Enforcingu
permissiveu 0u
Permissiveu disabledu Disabledu Invalid mode {0}u enforceu wNu) Could not write SELinux enforce file: {0}u /etc/selinux/configu ru \nSELINUX=.*\nu
SELINUX=u
u( Could not write SELinux config file: {0}u' Could not read SELinux config file: {0}( t
isinstanceR t string_typest lowert formatt intR" R R R R R R R R t writeR t to_strR R R t readt ret sub( t modet
modestringR R! t exct msgR& t _cft conf( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt
setenforce� sN
& & c C@ s t � j | i � S( u�
Return the information on a specific selinux boolean
CLI Example:
.. code-block:: bash
salt '*' selinux.getsebool virt_use_usb
( t list_seboolt get( t boolean( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt getsebool� s
c C@ sB | r d j | | � } n d j | | � } t d | d t � S( u�
Set the value for a boolean
CLI Example:
.. code-block:: bash
salt '*' selinux.setsebool virt_use_usb off
u setsebool -P {0} {1}u setsebool {0} {1}u cmd.retcodet python_shell( R, t __salt__R
( R< t valuet persistR
( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt setsebool� s
c C@ sr t | t � s i S| r" d } n d } x2 t j | � D]! \ } } d j | | | � } q8 Wt d | d t � S( u�
Set the value of multiple booleans
CLI Example:
.. code-block:: bash
salt '*' selinux.setsebools '{virt_use_usb: on, squid_use_tproxy: off}'
u
setsebool -P u
setsebool u {0} {1}={2}u cmd.retcodeR> ( R) t dictR t iteritemsR, R? R
( t pairsRA R
R< R@ ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt
setsebools� s
c C@ s� t d d � j � } i } xp | d D]d } | j � s? q' n | j � } i | d d d 6| d d d 6d j | d � d
6| | d <q' W| S( u�
Return a structure listing all of the selinux booleans on the system and
what state they are in
CLI Example:
.. code-block:: bash
salt '*' selinux.list_sebool
u cmd.runu semanage boolean -li u Statei i����u Defaultu i u Descriptioni ( R? t
splitlinesR R$ R ( t bdatat retR' t comps( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyR: � s #c C@ s t � j | i � S( u�
Return the information on a specific selinux module
CLI Example:
.. code-block:: bash
salt '*' selinux.getsemod mysql
.. versionadded:: 2016.3.0
( t
list_semodR; ( t module( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt getsemod s c C@ sW | j � d k r$ d j | � } n$ | j � d k rH d j | � } n t d | � S( u�
Enable or disable an SELinux module.
CLI Example:
.. code-block:: bash
salt '*' selinux.setsemod nagios Enabled
.. versionadded:: 2016.3.0
u enabledu semodule -e {0}u disabledu semodule -d {0}u cmd.retcode( R+ R, R? ( RL t stateR
( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt setsemod s
c C@ sF | j d � d k r( t d | � } n d j | � } t d | � S( u�
Install custom SELinux module from file
CLI Example:
.. code-block:: bash
salt '*' selinux.install_semod [salt://]path/to/module.pp
.. versionadded:: 2016.11.6
u salt://i u
cp.cache_fileu semodule -i {0}u cmd.retcode( t findR? R, ( t module_pathR
( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt
install_semod) s c C@ s d j | � } t d | � S( u�
Remove SELinux module
CLI Example:
.. code-block:: bash
salt '*' selinux.remove_semod module_name
.. versionadded:: 2016.11.6
u semodule -r {0}u cmd.retcode( R, R? ( RL R
( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt remove_semod; s c C@ s� t d d � j � } d } x, | D]$ } | j � j d � r# d } q# q# W| d k r� t d d � j � } i } x | D]q } | j � s� qz n | j � } t | � d k r� i t d 6d d 6| | d
<qz i t d 6d d 6| | d
<qz Wn� t d d � j � } i } x� | D]y } | j � s-qn | j � } t | � d k rni t d 6| d
d 6| | d
<qi t d 6| d
d 6| | d
<qW| S( u�
Return a structure listing all of the selinux modules on the system and
what state they are in
CLI Example:
.. code-block:: bash
salt '*' selinux.list_semod
.. versionadded:: 2016.3.0
u cmd.runu semodule -hu u fullu newu semodule -lfulli u Enabledu Versioni u semodule -li i N( R? RG R R# R$ t lenR
R t True( t helptextt semodule_versionR' t mdataRI RJ ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyRK K s:
c C@ s. | t j � k r* t d j | � � � n t S( u�
.. versionadded:: 2017.7.0
Checks if the given filetype is a valid SELinux filetype
specification. Throws an SaltInvocationError if it isn't.
u Invalid filetype given: {0}( t _SELINUX_FILETYPESt keysR R, RU ( t filetype( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt _validate_filetype{ s c C@ s d } t j | | � } | s? t j | d j | | � � } n | sc t d j | | | � � � n | j d � | j d � f S( u
.. versionadded:: 2019.2.0
Validates and parses the protocol and port/port range from the name
if both protocol and port are not provided.
If the name is in a valid format, the protocol and port are ignored if provided
Examples: tcp/8080 or udp/20-21
u ^(tcp|udp)\/(([\d]+)\-?[\d]+)$u {0}/{1}uU Invalid name "{0}" format and protocol and port not provided or invalid: "{1}" "{2}".i i ( R1 t matchR, R t group( t namet protocolt portt protocol_port_patternt
name_parts( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt _parse_protocol_port� s !c C@ s
d j | � S( uc
.. versionadded:: 2017.7.0
Converts an SELinux file context from a dict to a string.
u, {sel_user}:{sel_role}:{sel_type}:{sel_level}( R, ( t context( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt _context_dict_to_string� s c C@ sx t j d | � s% t d d � � n | j d d � } i } x4 t d d d d g � D] \ } } | | | | <qV W| S(
u_
.. versionadded:: 2017.7.0
Converts an SELinux file context from string to dict.
u [^:]+:[^:]+:[^:]+:[^:]+$u% Invalid SELinux context string: {0}. u/ Expected "sel_user:sel_role:sel_type:sel_level"u :i u sel_useru sel_roleu sel_typeu sel_level( R1 R] R R$ t enumerate( Re t context_listRI t indexR@ ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt _context_string_to_dict� s
%c C@ s t | � t j | d � S( u�
.. versionadded:: 2017.7.0
Translates SELinux filetype single-letter representation to a more
human-readable version (which is also used in `semanage fcontext
-l`).
u error( R\ RY R; ( R[ ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt filetype_id_to_string� s
c C@ sB | r t | � n d } i | d 6t j | � d 6| p< d d 6d d 6| pP d d 6| p] d d 6} | d k rv d n t | � | d
<d d j | � } t d
| d t �} | d k r� d St j d j i t j | � d 6� | � } i | j d � j
� d 6| j d � j
� d
6}
|
j t | j d � j
� � � |
S( u�
.. versionadded:: 2017.7.0
Returns the current entry in the SELinux policy list as a
dictionary. Returns None if no exact match was found.
Returned keys are:
* filespec (the name supplied and matched)
* filetype (the descriptive name of the filetype supplied)
* sel_user, sel_role, sel_type, sel_level (the selinux context)
For a more in-depth explanation of the selinux context, go to
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/chap-Security-Enhanced_Linux-SELinux_Contexts.html
name
filespec of the file or directory. Regex syntax is allowed.
filetype
The SELinux filetype specification. Use one of [a, f, d, c, b,
s, l, p]. See also `man semanage-fcontext`. Defaults to 'a'
(all files).
CLI Example:
.. code-block:: bash
salt '*' selinux.fcontext_get_policy my-policy
u [ ]+u spaceru filespecu [^:]+u sel_useru sel_roleu sel_typeu sel_levelu
[[:alpha:] ]+u filetypeu semanage fcontext -l | egrep uT '^{filespec}{spacer}{filetype}{spacer}{sel_user}:{sel_role}:{sel_type}:{sel_level}$'u cmd.shellt ignore_retcodeu u ^({filespec}) +([a-z ]+) (.*)$i i i N(
R\ R1 t escapeR Rk R, R? RU R] R^ R t updateRj ( R_ R[ t sel_typet sel_usert sel_levelt re_spacert
cmd_kwargsR
t current_entry_textt partsRI ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt fcontext_get_policy� s*
" +"c C@ s t d | | | | | � S( u�
.. versionadded:: 2019.2.0
Adds the SELinux policy for a given filespec and other optional parameters.
Returns the result of the call to semanage.
Note that you don't have to remove an entry before setting a new
one for a given filespec and filetype, as adding one with semanage
automatically overwrites a previously configured SELinux context.
name
filespec of the file or directory. Regex syntax is allowed.
file_type
The SELinux filetype specification. Use one of [a, f, d, c, b,
s, l, p]. See also ``man semanage-fcontext``. Defaults to 'a'
(all files).
sel_type
SELinux context type. There are many.
sel_user
SELinux user. Use ``semanage login -l`` to determine which ones
are available to you.
sel_level
The MLS range of the SELinux context.
CLI Example:
.. code-block:: bash
salt '*' selinux.fcontext_add_policy my-policy
u add( t _fcontext_add_or_delete_policy( R_ R[ Ro Rp Rq ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt fcontext_add_policy� s $c C@ s t d | | | | | � S( u�
.. versionadded:: 2019.2.0
Deletes the SELinux policy for a given filespec and other optional parameters.
Returns the result of the call to semanage.
Note that you don't have to remove an entry before setting a new
one for a given filespec and filetype, as adding one with semanage
automatically overwrites a previously configured SELinux context.
name
filespec of the file or directory. Regex syntax is allowed.
file_type
The SELinux filetype specification. Use one of [a, f, d, c, b,
s, l, p]. See also ``man semanage-fcontext``. Defaults to 'a'
(all files).
sel_type
SELinux context type. There are many.
sel_user
SELinux user. Use ``semanage login -l`` to determine which ones
are available to you.
sel_level
The MLS range of the SELinux context.
CLI Example:
.. code-block:: bash
salt '*' selinux.fcontext_delete_policy my-policy
u delete( Rw ( R_ R[ Ro Rp Rq ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt fcontext_delete_policy! s $c C@ s/ t j j j d d � t | | | | | | � S( u
.. versionadded:: 2017.7.0
Adds or deletes the SELinux policy for a given filespec and other optional parameters.
Returns the result of the call to semanage.
Note that you don't have to remove an entry before setting a new
one for a given filespec and filetype, as adding one with semanage
automatically overwrites a previously configured SELinux context.
.. warning::
Use :mod:`selinux.fcontext_add_policy()<salt.modules.selinux.fcontext_add_policy>`,
or :mod:`selinux.fcontext_delete_policy()<salt.modules.selinux.fcontext_delete_policy>`.
.. deprecated:: 2019.2.0
action
The action to perform. Either ``add`` or ``delete``.
name
filespec of the file or directory. Regex syntax is allowed.
file_type
The SELinux filetype specification. Use one of [a, f, d, c, b,
s, l, p]. See also ``man semanage-fcontext``. Defaults to 'a'
(all files).
sel_type
SELinux context type. There are many.
sel_user
SELinux user. Use ``semanage login -l`` to determine which ones
are available to you.
sel_level
The MLS range of the SELinux context.
CLI Example:
.. code-block:: bash
salt '*' selinux.fcontext_add_or_delete_policy add my-policy
u Sodiumu The 'selinux.fcontext_add_or_delete_policy' module has been deprecated. Please use the 'selinux.fcontext_add_policy' and 'selinux.fcontext_delete_policy' modules instead. Support for the 'selinux.fcontext_add_or_delete_policy' module will be removed in Salt {version}.( R R t versionst
warn_untilRw ( t actionR_ R[ Ro Rp Rq ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt fcontext_add_or_delete_policyH s . c C@ s� | d k r$ t d j | � � � n d j | � } | d
k rk | d k rk t | � | d j | � 7} n | d
k r� | d j | � 7} n | d
k r� | d j | � 7} n | d
k r� | d j | � 7} n | d
t j | � 7} t d | � S( u�
.. versionadded:: 2019.2.0
Performs the action as called from ``fcontext_add_policy`` or ``fcontext_delete_policy``.
Returns the result of the call to semanage.
u addu deleteu4 Actions supported are "add" and "delete", not "{0}".u semanage fcontext --{0}u au --ftype {0}u --type {0}u
--seuser {0}u --range {0}u u cmd.run_all( u addu deleteN( R R, R R\ R1 Rm R? ( R| R_ R[ Ro Rp Rq R
( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyRw � s
c C@ sC d } | r | d 7} n | t j | � 7} t d | � j d � S( u�
.. versionadded:: 2017.7.0
Returns an empty string if the SELinux policy for a given filespec
is applied, returns string with differences in policy and actual
situation otherwise.
name
filespec of the file or directory. Regex syntax is allowed.
CLI Example:
.. code-block:: bash
salt '*' selinux.fcontext_policy_is_applied my-policy
u restorecon -n -v u -R u cmd.run_allu stdout( R1 Rm R? R; ( R_ t recursiveR
( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt fcontext_policy_is_applied� s
c C@ s� i } t | | � } d } | r. | d 7} n | t j | � 7} t d | � } | j | � | d d k r�t j d | t j � } t | � d k r� | j i i d 6� n x� | D]� } | d } t | d � } t | d � }
i } xI t j
| � D]8 \ } }
|
j | � |
k r� | j i |
| 6� q� q� Wx | D] } | | =|
| =q?W| d j i i | d
6|
d 6| 6� q� Wn | S( u�
.. versionadded:: 2017.7.0
Applies SElinux policies to filespec using `restorecon [-R]
filespec`. Returns dict with changes if successful, the output of
the restorecon command otherwise.
name
filespec of the file or directory. Regex syntax is allowed.
recursive
Recursively apply SELinux policies.
CLI Example:
.. code-block:: bash
salt '*' selinux.fcontext_apply_policy my-policy
u restorecon -v -F u -R u cmd.run_allu retcodei u) restorecon reset (.*) context (.*)->(.*)$u changesi i u oldu new( R R1 Rm R? Rn t findallt MRT Rj R RD R; ( R_ R~ RI t changes_textR
t apply_rett changes_listt itemt filespect oldt newt intersectt keyR@ ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt fcontext_apply_policy� s2
-c
C@ s� t | | | � \ } } d } | r* | n d } i | d 6| d 6| d 6| d 6} d d j | � } t d | d
t �} | d k r� d St j d | � } i | j d
� j � d 6| j d � j � d 6| j d � j � d 6S( u
.. versionadded:: 2019.2.0
Returns the current entry in the SELinux policy list as a
dictionary. Returns None if no exact match was found.
Returned keys are:
* sel_type (the selinux type)
* proto (the protocol)
* port (the port(s) and/or port range(s))
name
The protocol and port spec. Can be formatted as ``(tcp|udp)/(port|port-range)``.
sel_type
The SELinux Type.
protocol
The protocol for the port, ``tcp`` or ``udp``. Required if name is not formatted.
port
The port or port range. Required if name is not formatted.
CLI Example:
.. code-block:: bash
salt '*' selinux.port_get_policy tcp/80
salt '*' selinux.port_get_policy foobar protocol=tcp port=80
u [ ]+u \w+u spaceru sel_typeu protocolu portu semanage port -l | egrep u< '^{sel_type}{spacer}{protocol}{spacer}((.*)*)[ ]{port}($|,)'u cmd.shellRl u u ^(\w+)[ ]+(\w+)[ ]+([\d\-, ]+)i i i N( Rd R, R? RU R R1 R] R^ R (
R_ Ro R` Ra Rr t re_sel_typeRs R
t port_policyRu ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt port_get_policy� s"
c C@ s t d | | | | | � S( u�
.. versionadded:: 2019.2.0
Adds the SELinux policy for a given protocol and port.
Returns the result of the call to semanage.
name
The protocol and port spec. Can be formatted as ``(tcp|udp)/(port|port-range)``.
sel_type
The SELinux Type. Required.
protocol
The protocol for the port, ``tcp`` or ``udp``. Required if name is not formatted.
port
The port or port range. Required if name is not formatted.
sel_range
The SELinux MLS/MCS Security Range.
CLI Example:
.. code-block:: bash
salt '*' selinux.port_add_policy add tcp/8080 http_port_t
salt '*' selinux.port_add_policy add foobar http_port_t protocol=tcp port=8091
u add( t _port_add_or_delete_policy( R_ Ro R` Ra t sel_range( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt port_add_policy s c C@ s t d | d | | d � S( uX
.. versionadded:: 2019.2.0
Deletes the SELinux policy for a given protocol and port.
Returns the result of the call to semanage.
name
The protocol and port spec. Can be formatted as ``(tcp|udp)/(port|port-range)``.
protocol
The protocol for the port, ``tcp`` or ``udp``. Required if name is not formatted.
port
The port or port range. Required if name is not formatted.
CLI Example:
.. code-block:: bash
salt '*' selinux.port_delete_policy tcp/8080
salt '*' selinux.port_delete_policy foobar protocol=tcp port=8091
u deleteN( R� R ( R_ R` Ra ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt port_delete_policy6 s c C@ s� | d
k r$ t d j | � � � n | d k rF | rF t d � � n t | | | � \ } } d j | | � } | r� | d j | � 7} n | r� | d j | � 7} n | d j | � 7} t d | � S( u�
.. versionadded:: 2019.2.0
Performs the action as called from ``port_add_policy`` or ``port_delete_policy``.
Returns the result of the call to semanage.
u addu deleteu4 Actions supported are "add" and "delete", not "{0}".u( SELinux Type is required to add a policyu semanage port --{0} --proto {1}u --type {0}u --range {0}u {0}u cmd.run_all( u addu delete( R R, Rd R? ( R| R_ Ro R` Ra R� R
( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyR� Q s (6 t __doc__t
__future__R R R R R1 t salt.utils.filesR t salt.utils.patht salt.utils.stringutilst salt.utils.decoratorsR t
decoratorst salt.utils.versionst salt.exceptionsR R t salt.extR RY R t memoizeR R" R( R9 R= R
RB RF R: RM RO RR RS RK R\ Rd Rf Rj Rk R Rv Rx Ry R} Rw R R� R� R� R� R� ( ( ( s8 /usr/lib/python2.7/site-packages/salt/modules/selinux.pyt <module> sb
:
0 8''8 /4!
Mini Shell