static struct oscap_list *xccdf_benchmark_resolve_dependencies(void *itemptr, void *userdata)
{
struct xccdf_item *item = XITEM(itemptr);
struct oscap_list *ret = oscap_list_new();
struct xccdf_value_iterator *val_it = NULL;
const char *extends = xccdf_item_get_extends(item);
if (extends) oscap_list_add(ret, xccdf_benchmark_get_member(xccdf_item_get_benchmark(item), xccdf_item_get_type(item), extends));
switch (xccdf_item_get_type(item)) {
case XCCDF_BENCHMARK: {
OSCAP_FOR(xccdf_profile, profile, xccdf_benchmark_get_profiles(xccdf_item_to_benchmark(item)))
oscap_list_add(ret, profile);
val_it = xccdf_benchmark_get_values(xccdf_item_to_benchmark(item));
break;
}
case XCCDF_GROUP:
val_it = xccdf_group_get_values(xccdf_item_to_group(item));
default: break; /* no-op */
}
OSCAP_FOR(xccdf_item, child, xccdf_item_get_content(item))
oscap_list_add(ret, child);
OSCAP_FOR(xccdf_value, val, val_it)
oscap_list_add(ret, val);
return ret;
}
static void xccdf_resolve_item(struct xccdf_item *item, struct xccdf_tailoring *tailoring)
{
assert(item != NULL);
if (xccdf_item_get_type(item) == XCCDF_BENCHMARK) {
xccdf_benchmark_set_resolved(xccdf_item_to_benchmark(item), true);
return; // benchmark has no extends
}
assert(!xccdf_item_get_extends(item) || xccdf_item_get_type(item) & (XCCDF_PROFILE | XCCDF_ITEM));
struct xccdf_item *parent = NULL;
if (xccdf_item_get_type(item) == XCCDF_PROFILE && tailoring != NULL) {
parent = XITEM(_xccdf_tailoring_profile_get_real_parent(tailoring, XPROFILE(item)));
}
else {
parent = xccdf_benchmark_get_member(xccdf_item_get_benchmark(item), xccdf_item_get_type(item), xccdf_item_get_extends(item));
}
if (parent == NULL) return;
if (xccdf_item_get_type(item) != xccdf_item_get_type(parent)) return;
if (xccdf_item_get_type(item) == XCCDF_GROUP && xccdf_version_cmp(xccdf_item_get_schema_version(item), "1.2") >= 0)
return; // Group/@extends= has been obsoleted in XCCDF 1.2
// resolve flags
XCCDF_RESOLVE_FLAG(item, parent, selected);
XCCDF_RESOLVE_FLAG(item, parent, hidden);
XCCDF_RESOLVE_FLAG(item, parent, prohibit_changes);
XCCDF_RESOLVE_FLAG(item, parent, interactive);
XCCDF_RESOLVE_FLAG(item, parent, multiple);
// resolve weight & version
if (!item->item.defined_flags.weight)
xccdf_item_set_weight(item, xccdf_item_get_weight(parent));
if (xccdf_item_get_version(item) == NULL) {
xccdf_item_set_version(item, xccdf_item_get_version(parent));
xccdf_item_set_version_update(item, xccdf_item_get_version_update(parent));
xccdf_item_set_version_time(item, xccdf_item_get_version_time(parent));
}
// resolve textual elements
xccdf_resolve_textlist(item->item.title, parent->item.title, NULL);
xccdf_resolve_textlist(item->item.description, parent->item.description, NULL);
xccdf_resolve_textlist(item->item.question, parent->item.question, NULL);
xccdf_resolve_textlist(item->item.rationale, parent->item.rationale, NULL);
xccdf_resolve_textlist(item->item.warnings, parent->item.warnings, xccdf_resolve_warning);
xccdf_resolve_textlist(item->item.references, parent->item.references, NULL);
// resolve platforms
OSCAP_FOR_STR(platform, xccdf_item_get_platforms(parent))
xccdf_item_add_platform(item, platform);
// resolve properties specific to particular item type
switch (xccdf_item_get_type(item)) {
case XCCDF_PROFILE: xccdf_resolve_profile(item, parent); break;
case XCCDF_GROUP: xccdf_resolve_group(item, parent); break;
case XCCDF_RULE: xccdf_resolve_rule(item, parent); break;
case XCCDF_VALUE: xccdf_resolve_value(item, parent); break;
default: assert(false);
}
// item resolved -> it no longer has a parent
xccdf_item_set_extends(item, NULL);
}
void TailoringWindow::synchronizeTreeItem(QTreeWidgetItem* treeItem, struct xccdf_item* xccdfItem, bool recursive)
{
++mSynchronizeItemLock;
const QString title = oscapTextIteratorGetPreferred(xccdf_item_get_title(xccdfItem));
treeItem->setText(0, title);
QString searchable = QString("%1 %2").arg(title, QString::fromUtf8(xccdf_item_get_id(xccdfItem)));
switch (xccdf_item_get_type(xccdfItem))
{
case XCCDF_BENCHMARK:
treeItem->setIcon(0, getShareIcon("benchmark.png"));
break;
case XCCDF_GROUP:
treeItem->setIcon(0, getShareIcon("group.png"));
break;
case XCCDF_RULE:
treeItem->setIcon(0, getShareIcon("rule.png"));
{
struct xccdf_ident_iterator* idents = xccdf_rule_get_idents(xccdf_item_to_rule(xccdfItem));
while (xccdf_ident_iterator_has_more(idents))
{
struct xccdf_ident* ident = xccdf_ident_iterator_next(idents);
searchable += " " + QString::fromUtf8(xccdf_ident_get_id(ident));
}
xccdf_ident_iterator_free(idents);
}
break;
case XCCDF_VALUE:
treeItem->setIcon(0, getShareIcon("value.png"));
break;
default:
treeItem->setIcon(0, QIcon());
break;
}
treeItem->setText(1, searchable);
treeItem->setData(0, Qt::UserRole, QVariant::fromValue(reinterpret_cast<void*>(xccdfItem)));
xccdf_type_t xccdfItemType = xccdf_item_get_type(xccdfItem);
switch (xccdfItemType)
{
case XCCDF_RULE:
case XCCDF_GROUP:
{
treeItem->setFlags(treeItem->flags() | Qt::ItemIsUserCheckable);
treeItem->setCheckState(0,
getXccdfItemInternalSelected(mPolicy, xccdfItem) ? Qt::Checked : Qt::Unchecked);
_syncXCCDFItemChildrenDisabledState(treeItem, treeItem->checkState(0));
break;
}
case XCCDF_VALUE:
treeItem->setFlags(treeItem->flags() & ~Qt::ItemIsUserCheckable);
default:
break;
}
if (recursive)
{
typedef std::vector<struct xccdf_item*> XCCDFItemVector;
typedef std::map<struct xccdf_item*, QTreeWidgetItem*> XCCDFToQtItemMap;
XCCDFItemVector itemsToAdd;
XCCDFToQtItemMap existingItemsMap;
// valuesIt contains Values
struct xccdf_value_iterator* valuesIt = NULL;
// itemsIt contains Rules and Groups
struct xccdf_item_iterator* itemsIt = NULL;
switch (xccdfItemType)
{
case XCCDF_GROUP:
valuesIt = xccdf_group_get_values(xccdf_item_to_group(xccdfItem));
itemsIt = xccdf_group_get_content(xccdf_item_to_group(xccdfItem));
break;
case XCCDF_BENCHMARK:
valuesIt = xccdf_benchmark_get_values(xccdf_item_to_benchmark(xccdfItem));
itemsIt = xccdf_benchmark_get_content(xccdf_item_to_benchmark(xccdfItem));
break;
default:
break;
}
if (valuesIt != NULL)
{
while (xccdf_value_iterator_has_more(valuesIt))
{
struct xccdf_value* childItem = xccdf_value_iterator_next(valuesIt);
itemsToAdd.push_back(xccdf_value_to_item(childItem));
}
xccdf_value_iterator_free(valuesIt);
}
if (itemsIt != NULL)
{
while (xccdf_item_iterator_has_more(itemsIt))
{
struct xccdf_item* childItem = xccdf_item_iterator_next(itemsIt);
itemsToAdd.push_back(childItem);
}
xccdf_item_iterator_free(itemsIt);
}
for (int i = 0; i < treeItem->childCount(); ++i)
{
QTreeWidgetItem* childTreeItem = treeItem->child(i);
struct xccdf_item* childXccdfItem = getXccdfItemFromTreeItem(childTreeItem);
if (std::find(itemsToAdd.begin(), itemsToAdd.end(), childXccdfItem) == itemsToAdd.end())
{
// this will remove it from the tree as well, see ~QTreeWidgetItem()
delete childTreeItem;
}
else
{
existingItemsMap[childXccdfItem] = childTreeItem;
}
}
unsigned int idx = 0;
for (XCCDFItemVector::const_iterator it = itemsToAdd.begin();
it != itemsToAdd.end(); ++it, ++idx)
{
struct xccdf_item* childXccdfItem = *it;
QTreeWidgetItem* childTreeItem = 0;
XCCDFToQtItemMap::iterator mapIt = existingItemsMap.find(childXccdfItem);
if (mapIt == existingItemsMap.end())
{
childTreeItem = new QTreeWidgetItem();
childTreeItem->setFlags(
Qt::ItemIsSelectable |
Qt::ItemIsEnabled);
treeItem->insertChild(idx, childTreeItem);
}
else
{
childTreeItem = mapIt->second;
}
synchronizeTreeItem(childTreeItem, childXccdfItem, true);
}
}
--mSynchronizeItemLock;
}