| 1 | 1 |  | from ..data_structures.data_structures import Rule | 
            
                                                        
            
                                    
            
            
                | 2 | 1 |  | from ..namespaces import NAMESPACES | 
            
                                                        
            
                                    
            
            
                | 3 | 1 |  | from .description_parser import DescriptionParser | 
            
                                                        
            
                                    
            
            
                | 4 | 1 |  | from .remediation_parser import RemediationParser | 
            
                                                        
            
                                    
            
            
                | 5 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 6 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 7 | 1 |  | class RuleParser(): | 
            
                                                        
            
                                    
            
            
                | 8 | 1 |  |     def __init__(self, ref_values): | 
            
                                                        
            
                                    
            
            
                | 9 | 1 |  |         self.description_parser = DescriptionParser(ref_values) | 
            
                                                        
            
                                    
            
            
                | 10 | 1 |  |         self.remediation_parser = RemediationParser(ref_values) | 
            
                                                        
            
                                    
            
            
                | 11 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 12 | 1 |  |     @staticmethod | 
            
                                                        
            
                                    
            
            
                | 13 | 1 |  |     def _get_references(rule): | 
            
                                                        
            
                                    
            
            
                | 14 | 1 |  |         references = [] | 
            
                                                        
            
                                    
            
            
                | 15 | 1 |  |         for referenc in rule.findall(".//xccdf:reference", NAMESPACES): | 
            
                                                        
            
                                    
            
            
                | 16 | 1 |  |             ref = { | 
            
                                                        
            
                                    
            
            
                | 17 |  |  |                 "href": referenc.get("href"), | 
            
                                                        
            
                                    
            
            
                | 18 |  |  |                 "text": referenc.text, | 
            
                                                        
            
                                    
            
            
                | 19 |  |  |             } | 
            
                                                        
            
                                    
            
            
                | 20 | 1 |  |             references.append(ref) | 
            
                                                        
            
                                    
            
            
                | 21 | 1 |  |         return references | 
            
                                                        
            
                                    
            
            
                | 22 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 23 | 1 |  |     @staticmethod | 
            
                                                        
            
                                    
            
            
                | 24 | 1 |  |     def _get_identifiers(rule): | 
            
                                                        
            
                                    
            
            
                | 25 | 1 |  |         identifiers = [] | 
            
                                                        
            
                                    
            
            
                | 26 | 1 |  |         for identifier in rule.findall(".//xccdf:ident", NAMESPACES): | 
            
                                                        
            
                                    
            
            
                | 27 | 1 |  |             ident = { | 
            
                                                        
            
                                    
            
            
                | 28 |  |  |                 "system": identifier.get("system"), | 
            
                                                        
            
                                    
            
            
                | 29 |  |  |                 "text": identifier.text, | 
            
                                                        
            
                                    
            
            
                | 30 |  |  |             } | 
            
                                                        
            
                                    
            
            
                | 31 | 1 |  |             identifiers.append(ident) | 
            
                                                        
            
                                    
            
            
                | 32 | 1 |  |         return identifiers | 
            
                                                        
            
                                    
            
            
                | 33 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 34 | 1 |  |     @staticmethod | 
            
                                                        
            
                                    
            
            
                | 35 | 1 |  |     def _get_warnings(rule): | 
            
                                                        
            
                                    
            
            
                | 36 | 1 |  |         warnings = [] | 
            
                                                        
            
                                    
            
            
                | 37 | 1 |  |         for warning in rule.findall(".//xccdf:warning", NAMESPACES): | 
            
                                                        
            
                                    
            
            
                | 38 | 1 |  |             warnings.append(warning.text) | 
            
                                                        
            
                                    
            
            
                | 39 | 1 |  |         return warnings | 
            
                                                        
            
                                    
            
            
                | 40 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 41 | 1 |  |     def _get_remediations(self, rule): | 
            
                                                        
            
                                    
            
            
                | 42 | 1 |  |         output = [] | 
            
                                                        
            
                                    
            
            
                | 43 | 1 |  |         for fix in rule.findall(".//xccdf:fix", NAMESPACES): | 
            
                                                        
            
                                    
            
            
                | 44 | 1 |  |             remediation = self.remediation_parser.get_remediation(fix) | 
            
                                                        
            
                                    
            
            
                | 45 | 1 |  |             output.append(remediation) | 
            
                                                        
            
                                    
            
            
                | 46 | 1 |  |         return output | 
            
                                                        
            
                                    
            
            
                | 47 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 48 | 1 |  |     @staticmethod | 
            
                                                        
            
                                    
            
            
                | 49 | 1 |  |     def _get_multi_check(rule): | 
            
                                                        
            
                                    
            
            
                | 50 | 1 |  |         for check in rule.findall(".//xccdf:check", NAMESPACES): | 
            
                                                        
            
                                    
            
            
                | 51 | 1 |  |             if check.get("multi-check") == "true": | 
            
                                                        
            
                                    
            
            
                | 52 | 1 |  |                 return True | 
            
                                                        
            
                                    
            
            
                | 53 | 1 |  |         return False | 
            
                                                        
            
                                    
            
            
                | 54 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 55 | 1 |  |     @staticmethod | 
            
                                                        
            
                                    
            
            
                | 56 | 1 |  |     def _get_check_content_refs_dict(rule): | 
            
                                                        
            
                                    
            
            
                | 57 | 1 |  |         check_content_refs = rule.findall(".//xccdf:check-content-ref", NAMESPACES) | 
            
                                                        
            
                                    
            
            
                | 58 | 1 |  |         check_content_refs_dict = {} | 
            
                                                        
            
                                    
            
            
                | 59 | 1 |  |         if check_content_refs is not None: | 
            
                                                        
            
                                    
            
            
                | 60 | 1 |  |             for check_ref in check_content_refs: | 
            
                                                        
            
                                    
            
            
                | 61 | 1 |  |                 name = check_ref.get("name", "") | 
            
                                                        
            
                                    
            
            
                | 62 | 1 |  |                 id_check = name[:name.find(":")] | 
            
                                                        
            
                                    
            
            
                | 63 | 1 |  |                 check_content_refs_dict[id_check] = name | 
            
                                                        
            
                                    
            
            
                | 64 | 1 |  |         return check_content_refs_dict | 
            
                                                        
            
                                    
            
            
                | 65 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 66 | 1 |  |     def process_rule(self, rule): | 
            
                                                        
            
                                    
            
            
                | 67 | 1 |  |         rule_id = rule.get("id") | 
            
                                                        
            
                                    
            
            
                | 68 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 69 | 1 |  |         rule_dict = { | 
            
                                                        
            
                                    
            
            
                | 70 |  |  |             "rule_id": rule_id, | 
            
                                                        
            
                                    
            
            
                | 71 |  |  |             "severity": rule.get("severity", "Unknown"), | 
            
                                                        
            
                                    
            
            
                | 72 |  |  |             "description": self.description_parser.get_full_description(rule), | 
            
                                                        
            
                                    
            
            
                | 73 |  |  |             "references": self._get_references(rule), | 
            
                                                        
            
                                    
            
            
                | 74 |  |  |             "identifiers": self._get_identifiers(rule), | 
            
                                                        
            
                                    
            
            
                | 75 |  |  |             "warnings": self._get_warnings(rule), | 
            
                                                        
            
                                    
            
            
                | 76 |  |  |             "remediations": self._get_remediations(rule), | 
            
                                                        
            
                                    
            
            
                | 77 |  |  |             "multi_check": self._get_multi_check(rule), | 
            
                                                        
            
                                    
            
            
                | 78 |  |  |         } | 
            
                                                        
            
                                    
            
            
                | 79 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 80 | 1 |  |         title = rule.find(".//xccdf:title", NAMESPACES) | 
            
                                                        
            
                                    
            
            
                | 81 | 1 |  |         if title is not None: | 
            
                                                        
            
                                    
            
            
                | 82 | 1 |  |             rule_dict["title"] = title.text | 
            
                                                        
            
                                    
            
            
                | 83 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 84 | 1 |  |         rationale = rule.find(".//xccdf:rationale", NAMESPACES) | 
            
                                                        
            
                                    
            
            
                | 85 | 1 |  |         if rationale is not None: | 
            
                                                        
            
                                    
            
            
                | 86 | 1 |  |             rule_dict["rationale"] = rationale.text | 
            
                                                        
            
                                    
            
            
                | 87 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 88 | 1 |  |         platforms = rule.findall(".//xccdf:platform", NAMESPACES) | 
            
                                                        
            
                                    
            
            
                | 89 | 1 |  |         rule_dict["platforms"] = [] | 
            
                                                        
            
                                    
            
            
                | 90 | 1 |  |         if platforms is not None: | 
            
                                                        
            
                                    
            
            
                | 91 | 1 |  |             for platform in platforms: | 
            
                                                        
            
                                    
            
            
                | 92 | 1 |  |                 rule_dict["platforms"].append(platform.get("idref")) | 
            
                                                        
            
                                    
            
            
                | 93 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 94 | 1 |  |         check_content_refs_dict = self._get_check_content_refs_dict(rule) | 
            
                                                        
            
                                    
            
            
                | 95 | 1 |  |         rule_dict["oval_definition_id"] = check_content_refs_dict.get("oval", "") | 
            
                                                        
            
                                    
            
            
                | 96 |  |  |  | 
            
                                                        
            
                                    
            
            
                | 97 |  |  |         return Rule(**rule_dict) | 
            
                                                        
            
                                    
            
            
                | 98 |  |  |  |