1#!/usr/bin/env python3 2 3"""Mbed TLS configuration file manipulation library and tool 4 5Basic usage, to read the Mbed TLS configuration: 6 config = ConfigFile() 7 if 'MBEDTLS_RSA_C' in config: print('RSA is enabled') 8""" 9 10# Note that as long as Mbed TLS 2.28 LTS is maintained, the version of 11# this script in the mbedtls-2.28 branch must remain compatible with 12# Python 3.4. The version in development may only use more recent features 13# in parts that are not backported to 2.28. 14 15## Copyright The Mbed TLS Contributors 16## SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later 17## 18 19import os 20import re 21 22class Setting: 23 """Representation of one Mbed TLS mbedtls_config.h setting. 24 25 Fields: 26 * name: the symbol name ('MBEDTLS_xxx'). 27 * value: the value of the macro. The empty string for a plain #define 28 with no value. 29 * active: True if name is defined, False if a #define for name is 30 present in mbedtls_config.h but commented out. 31 * section: the name of the section that contains this symbol. 32 """ 33 # pylint: disable=too-few-public-methods 34 def __init__(self, active, name, value='', section=None): 35 self.active = active 36 self.name = name 37 self.value = value 38 self.section = section 39 40class Config: 41 """Representation of the Mbed TLS configuration. 42 43 In the documentation of this class, a symbol is said to be *active* 44 if there is a #define for it that is not commented out, and *known* 45 if there is a #define for it whether commented out or not. 46 47 This class supports the following protocols: 48 * `name in config` is `True` if the symbol `name` is active, `False` 49 otherwise (whether `name` is inactive or not known). 50 * `config[name]` is the value of the macro `name`. If `name` is inactive, 51 raise `KeyError` (even if `name` is known). 52 * `config[name] = value` sets the value associated to `name`. `name` 53 must be known, but does not need to be set. This does not cause 54 name to become set. 55 """ 56 57 def __init__(self): 58 self.settings = {} 59 60 def __contains__(self, name): 61 """True if the given symbol is active (i.e. set). 62 63 False if the given symbol is not set, even if a definition 64 is present but commented out. 65 """ 66 return name in self.settings and self.settings[name].active 67 68 def all(self, *names): 69 """True if all the elements of names are active (i.e. set).""" 70 return all(self.__contains__(name) for name in names) 71 72 def any(self, *names): 73 """True if at least one symbol in names are active (i.e. set).""" 74 return any(self.__contains__(name) for name in names) 75 76 def known(self, name): 77 """True if a #define for name is present, whether it's commented out or not.""" 78 return name in self.settings 79 80 def __getitem__(self, name): 81 """Get the value of name, i.e. what the preprocessor symbol expands to. 82 83 If name is not known, raise KeyError. name does not need to be active. 84 """ 85 return self.settings[name].value 86 87 def get(self, name, default=None): 88 """Get the value of name. If name is inactive (not set), return default. 89 90 If a #define for name is present and not commented out, return 91 its expansion, even if this is the empty string. 92 93 If a #define for name is present but commented out, return default. 94 """ 95 if name in self.settings: 96 return self.settings[name].value 97 else: 98 return default 99 100 def __setitem__(self, name, value): 101 """If name is known, set its value. 102 103 If name is not known, raise KeyError. 104 """ 105 self.settings[name].value = value 106 107 def set(self, name, value=None): 108 """Set name to the given value and make it active. 109 110 If value is None and name is already known, don't change its value. 111 If value is None and name is not known, set its value to the empty 112 string. 113 """ 114 if name in self.settings: 115 if value is not None: 116 self.settings[name].value = value 117 self.settings[name].active = True 118 else: 119 self.settings[name] = Setting(True, name, value=value) 120 121 def unset(self, name): 122 """Make name unset (inactive). 123 124 name remains known if it was known before. 125 """ 126 if name not in self.settings: 127 return 128 self.settings[name].active = False 129 130 def adapt(self, adapter): 131 """Run adapter on each known symbol and (de)activate it accordingly. 132 133 `adapter` must be a function that returns a boolean. It is called as 134 `adapter(name, active, section)` for each setting, where `active` is 135 `True` if `name` is set and `False` if `name` is known but unset, 136 and `section` is the name of the section containing `name`. If 137 `adapter` returns `True`, then set `name` (i.e. make it active), 138 otherwise unset `name` (i.e. make it known but inactive). 139 """ 140 for setting in self.settings.values(): 141 setting.active = adapter(setting.name, setting.active, 142 setting.section) 143 144 def change_matching(self, regexs, enable): 145 """Change all symbols matching one of the regexs to the desired state.""" 146 if not regexs: 147 return 148 regex = re.compile('|'.join(regexs)) 149 for setting in self.settings.values(): 150 if regex.search(setting.name): 151 setting.active = enable 152 153def is_full_section(section): 154 """Is this section affected by "config.py full" and friends?""" 155 return section.endswith('support') or section.endswith('modules') 156 157def realfull_adapter(_name, active, section): 158 """Activate all symbols found in the global and boolean feature sections. 159 160 This is intended for building the documentation, including the 161 documentation of settings that are activated by defining an optional 162 preprocessor macro. 163 164 Do not activate definitions in the section containing symbols that are 165 supposed to be defined and documented in their own module. 166 """ 167 if section == 'Module configuration options': 168 return active 169 return True 170 171# The goal of the full configuration is to have everything that can be tested 172# together. This includes deprecated or insecure options. It excludes: 173# * Options that require additional build dependencies or unusual hardware. 174# * Options that make testing less effective. 175# * Options that are incompatible with other options, or more generally that 176# interact with other parts of the code in such a way that a bulk enabling 177# is not a good way to test them. 178# * Options that remove features. 179EXCLUDE_FROM_FULL = frozenset([ 180 #pylint: disable=line-too-long 181 'MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH', # interacts with CTR_DRBG_128_BIT_KEY 182 'MBEDTLS_AES_USE_HARDWARE_ONLY', # hardware dependency 183 'MBEDTLS_BLOCK_CIPHER_NO_DECRYPT', # incompatible with ECB in PSA, CBC/XTS/NIST_KW/DES 184 'MBEDTLS_CTR_DRBG_USE_128_BIT_KEY', # interacts with ENTROPY_FORCE_SHA256 185 'MBEDTLS_DEPRECATED_REMOVED', # conflicts with deprecated options 186 'MBEDTLS_DEPRECATED_WARNING', # conflicts with deprecated options 187 'MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED', # influences the use of ECDH in TLS 188 'MBEDTLS_ECP_NO_FALLBACK', # removes internal ECP implementation 189 'MBEDTLS_ECP_WITH_MPI_UINT', # disables the default ECP and is experimental 190 'MBEDTLS_ENTROPY_FORCE_SHA256', # interacts with CTR_DRBG_128_BIT_KEY 191 'MBEDTLS_HAVE_SSE2', # hardware dependency 192 'MBEDTLS_MEMORY_BACKTRACE', # depends on MEMORY_BUFFER_ALLOC_C 193 'MBEDTLS_MEMORY_BUFFER_ALLOC_C', # makes sanitizers (e.g. ASan) less effective 194 'MBEDTLS_MEMORY_DEBUG', # depends on MEMORY_BUFFER_ALLOC_C 195 'MBEDTLS_NO_64BIT_MULTIPLICATION', # influences anything that uses bignum 196 'MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES', # removes a feature 197 'MBEDTLS_NO_PLATFORM_ENTROPY', # removes a feature 198 'MBEDTLS_NO_UDBL_DIVISION', # influences anything that uses bignum 199 'MBEDTLS_PSA_P256M_DRIVER_ENABLED', # influences SECP256R1 KeyGen/ECDH/ECDSA 200 'MBEDTLS_PLATFORM_NO_STD_FUNCTIONS', # removes a feature 201 'MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS', # removes a feature 202 'MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG', # behavior change + build dependency 203 'MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER', # incompatible with USE_PSA_CRYPTO 204 'MBEDTLS_PSA_CRYPTO_SPM', # platform dependency (PSA SPM) 205 'MBEDTLS_PSA_INJECT_ENTROPY', # conflicts with platform entropy sources 206 'MBEDTLS_RSA_NO_CRT', # influences the use of RSA in X.509 and TLS 207 'MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY', # interacts with *_USE_A64_CRYPTO_IF_PRESENT 208 'MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY', # interacts with *_USE_ARMV8_A_CRYPTO_IF_PRESENT 209 'MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY', # interacts with *_USE_A64_CRYPTO_IF_PRESENT 210 'MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT', # setting *_USE_ARMV8_A_CRYPTO is sufficient 211 'MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN', # build dependency (clang+memsan) 212 'MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND', # build dependency (valgrind headers) 213 'MBEDTLS_X509_REMOVE_INFO', # removes a feature 214]) 215 216def is_seamless_alt(name): 217 """Whether the xxx_ALT symbol should be included in the full configuration. 218 219 Include alternative implementations of platform functions, which are 220 configurable function pointers that default to the built-in function. 221 This way we test that the function pointers exist and build correctly 222 without changing the behavior, and tests can verify that the function 223 pointers are used by modifying those pointers. 224 225 Exclude alternative implementations of library functions since they require 226 an implementation of the relevant functions and an xxx_alt.h header. 227 """ 228 if name in ( 229 'MBEDTLS_PLATFORM_GMTIME_R_ALT', 230 'MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT', 231 'MBEDTLS_PLATFORM_MS_TIME_ALT', 232 'MBEDTLS_PLATFORM_ZEROIZE_ALT', 233 ): 234 # Similar to non-platform xxx_ALT, requires platform_alt.h 235 return False 236 return name.startswith('MBEDTLS_PLATFORM_') 237 238def include_in_full(name): 239 """Rules for symbols in the "full" configuration.""" 240 if name in EXCLUDE_FROM_FULL: 241 return False 242 if name.endswith('_ALT'): 243 return is_seamless_alt(name) 244 return True 245 246def full_adapter(name, active, section): 247 """Config adapter for "full".""" 248 if not is_full_section(section): 249 return active 250 return include_in_full(name) 251 252# The baremetal configuration excludes options that require a library or 253# operating system feature that is typically not present on bare metal 254# systems. Features that are excluded from "full" won't be in "baremetal" 255# either (unless explicitly turned on in baremetal_adapter) so they don't 256# need to be repeated here. 257EXCLUDE_FROM_BAREMETAL = frozenset([ 258 #pylint: disable=line-too-long 259 'MBEDTLS_ENTROPY_NV_SEED', # requires a filesystem and FS_IO or alternate NV seed hooks 260 'MBEDTLS_FS_IO', # requires a filesystem 261 'MBEDTLS_HAVE_TIME', # requires a clock 262 'MBEDTLS_HAVE_TIME_DATE', # requires a clock 263 'MBEDTLS_NET_C', # requires POSIX-like networking 264 'MBEDTLS_PLATFORM_FPRINTF_ALT', # requires FILE* from stdio.h 265 'MBEDTLS_PLATFORM_NV_SEED_ALT', # requires a filesystem and ENTROPY_NV_SEED 266 'MBEDTLS_PLATFORM_TIME_ALT', # requires a clock and HAVE_TIME 267 'MBEDTLS_PSA_CRYPTO_SE_C', # requires a filesystem and PSA_CRYPTO_STORAGE_C 268 'MBEDTLS_PSA_CRYPTO_STORAGE_C', # requires a filesystem 269 'MBEDTLS_PSA_ITS_FILE_C', # requires a filesystem 270 'MBEDTLS_THREADING_C', # requires a threading interface 271 'MBEDTLS_THREADING_PTHREAD', # requires pthread 272 'MBEDTLS_TIMING_C', # requires a clock 273 'MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT', # requires an OS for runtime-detection 274 'MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT', # requires an OS for runtime-detection 275 'MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT', # requires an OS for runtime-detection 276]) 277 278def keep_in_baremetal(name): 279 """Rules for symbols in the "baremetal" configuration.""" 280 if name in EXCLUDE_FROM_BAREMETAL: 281 return False 282 return True 283 284def baremetal_adapter(name, active, section): 285 """Config adapter for "baremetal".""" 286 if not is_full_section(section): 287 return active 288 if name == 'MBEDTLS_NO_PLATFORM_ENTROPY': 289 # No OS-provided entropy source 290 return True 291 return include_in_full(name) and keep_in_baremetal(name) 292 293# This set contains options that are mostly for debugging or test purposes, 294# and therefore should be excluded when doing code size measurements. 295# Options that are their own module (such as MBEDTLS_ERROR_C) are not listed 296# and therefore will be included when doing code size measurements. 297EXCLUDE_FOR_SIZE = frozenset([ 298 'MBEDTLS_DEBUG_C', # large code size increase in TLS 299 'MBEDTLS_SELF_TEST', # increases the size of many modules 300 'MBEDTLS_TEST_HOOKS', # only useful with the hosted test framework, increases code size 301]) 302 303def baremetal_size_adapter(name, active, section): 304 if name in EXCLUDE_FOR_SIZE: 305 return False 306 return baremetal_adapter(name, active, section) 307 308def include_in_crypto(name): 309 """Rules for symbols in a crypto configuration.""" 310 if name.startswith('MBEDTLS_X509_') or \ 311 name.startswith('MBEDTLS_SSL_') or \ 312 name.startswith('MBEDTLS_KEY_EXCHANGE_'): 313 return False 314 if name in [ 315 'MBEDTLS_DEBUG_C', # part of libmbedtls 316 'MBEDTLS_NET_C', # part of libmbedtls 317 'MBEDTLS_PKCS7_C', # part of libmbedx509 318 ]: 319 return False 320 return True 321 322def crypto_adapter(adapter): 323 """Modify an adapter to disable non-crypto symbols. 324 325 ``crypto_adapter(adapter)(name, active, section)`` is like 326 ``adapter(name, active, section)``, but unsets all X.509 and TLS symbols. 327 """ 328 def continuation(name, active, section): 329 if not include_in_crypto(name): 330 return False 331 if adapter is None: 332 return active 333 return adapter(name, active, section) 334 return continuation 335 336DEPRECATED = frozenset([ 337 'MBEDTLS_PSA_CRYPTO_SE_C', 338]) 339def no_deprecated_adapter(adapter): 340 """Modify an adapter to disable deprecated symbols. 341 342 ``no_deprecated_adapter(adapter)(name, active, section)`` is like 343 ``adapter(name, active, section)``, but unsets all deprecated symbols 344 and sets ``MBEDTLS_DEPRECATED_REMOVED``. 345 """ 346 def continuation(name, active, section): 347 if name == 'MBEDTLS_DEPRECATED_REMOVED': 348 return True 349 if name in DEPRECATED: 350 return False 351 if adapter is None: 352 return active 353 return adapter(name, active, section) 354 return continuation 355 356def no_platform_adapter(adapter): 357 """Modify an adapter to disable platform symbols. 358 359 ``no_platform_adapter(adapter)(name, active, section)`` is like 360 ``adapter(name, active, section)``, but unsets all platform symbols other 361 ``than MBEDTLS_PLATFORM_C. 362 """ 363 def continuation(name, active, section): 364 # Allow MBEDTLS_PLATFORM_C but remove all other platform symbols. 365 if name.startswith('MBEDTLS_PLATFORM_') and name != 'MBEDTLS_PLATFORM_C': 366 return False 367 if adapter is None: 368 return active 369 return adapter(name, active, section) 370 return continuation 371 372class ConfigFile(Config): 373 """Representation of the Mbed TLS configuration read for a file. 374 375 See the documentation of the `Config` class for methods to query 376 and modify the configuration. 377 """ 378 379 _path_in_tree = 'include/mbedtls/mbedtls_config.h' 380 default_path = [_path_in_tree, 381 os.path.join(os.path.dirname(__file__), 382 os.pardir, 383 _path_in_tree), 384 os.path.join(os.path.dirname(os.path.abspath(os.path.dirname(__file__))), 385 _path_in_tree)] 386 387 def __init__(self, filename=None): 388 """Read the Mbed TLS configuration file.""" 389 if filename is None: 390 for candidate in self.default_path: 391 if os.path.lexists(candidate): 392 filename = candidate 393 break 394 else: 395 raise Exception('Mbed TLS configuration file not found', 396 self.default_path) 397 super().__init__() 398 self.filename = filename 399 self.inclusion_guard = None 400 self.current_section = 'header' 401 with open(filename, 'r', encoding='utf-8') as file: 402 self.templates = [self._parse_line(line) for line in file] 403 self.current_section = None 404 405 def set(self, name, value=None): 406 if name not in self.settings: 407 self.templates.append((name, '', '#define ' + name + ' ')) 408 super().set(name, value) 409 410 _define_line_regexp = (r'(?P<indentation>\s*)' + 411 r'(?P<commented_out>(//\s*)?)' + 412 r'(?P<define>#\s*define\s+)' + 413 r'(?P<name>\w+)' + 414 r'(?P<arguments>(?:\((?:\w|\s|,)*\))?)' + 415 r'(?P<separator>\s*)' + 416 r'(?P<value>.*)') 417 _ifndef_line_regexp = r'#ifndef (?P<inclusion_guard>\w+)' 418 _section_line_regexp = (r'\s*/?\*+\s*[\\@]name\s+SECTION:\s*' + 419 r'(?P<section>.*)[ */]*') 420 _config_line_regexp = re.compile(r'|'.join([_define_line_regexp, 421 _ifndef_line_regexp, 422 _section_line_regexp])) 423 def _parse_line(self, line): 424 """Parse a line in mbedtls_config.h and return the corresponding template.""" 425 line = line.rstrip('\r\n') 426 m = re.match(self._config_line_regexp, line) 427 if m is None: 428 return line 429 elif m.group('section'): 430 self.current_section = m.group('section') 431 return line 432 elif m.group('inclusion_guard') and self.inclusion_guard is None: 433 self.inclusion_guard = m.group('inclusion_guard') 434 return line 435 else: 436 active = not m.group('commented_out') 437 name = m.group('name') 438 value = m.group('value') 439 if name == self.inclusion_guard and value == '': 440 # The file double-inclusion guard is not an option. 441 return line 442 template = (name, 443 m.group('indentation'), 444 m.group('define') + name + 445 m.group('arguments') + m.group('separator')) 446 self.settings[name] = Setting(active, name, value, 447 self.current_section) 448 return template 449 450 def _format_template(self, name, indent, middle): 451 """Build a line for mbedtls_config.h for the given setting. 452 453 The line has the form "<indent>#define <name> <value>" 454 where <middle> is "#define <name> ". 455 """ 456 setting = self.settings[name] 457 value = setting.value 458 if value is None: 459 value = '' 460 # Normally the whitespace to separate the symbol name from the 461 # value is part of middle, and there's no whitespace for a symbol 462 # with no value. But if a symbol has been changed from having a 463 # value to not having one, the whitespace is wrong, so fix it. 464 if value: 465 if middle[-1] not in '\t ': 466 middle += ' ' 467 else: 468 middle = middle.rstrip() 469 return ''.join([indent, 470 '' if setting.active else '//', 471 middle, 472 value]).rstrip() 473 474 def write_to_stream(self, output): 475 """Write the whole configuration to output.""" 476 for template in self.templates: 477 if isinstance(template, str): 478 line = template 479 else: 480 line = self._format_template(*template) 481 output.write(line + '\n') 482 483 def write(self, filename=None): 484 """Write the whole configuration to the file it was read from. 485 486 If filename is specified, write to this file instead. 487 """ 488 if filename is None: 489 filename = self.filename 490 with open(filename, 'w', encoding='utf-8') as output: 491 self.write_to_stream(output) 492 493if __name__ == '__main__': 494 def main(): 495 """Command line mbedtls_config.h manipulation tool.""" 496 parser = argparse.ArgumentParser(description=""" 497 Mbed TLS configuration file manipulation tool. 498 """) 499 parser.add_argument('--file', '-f', 500 help="""File to read (and modify if requested). 501 Default: {}. 502 """.format(ConfigFile.default_path)) 503 parser.add_argument('--force', '-o', 504 action='store_true', 505 help="""For the set command, if SYMBOL is not 506 present, add a definition for it.""") 507 parser.add_argument('--write', '-w', metavar='FILE', 508 help="""File to write to instead of the input file.""") 509 subparsers = parser.add_subparsers(dest='command', 510 title='Commands') 511 parser_get = subparsers.add_parser('get', 512 help="""Find the value of SYMBOL 513 and print it. Exit with 514 status 0 if a #define for SYMBOL is 515 found, 1 otherwise. 516 """) 517 parser_get.add_argument('symbol', metavar='SYMBOL') 518 parser_set = subparsers.add_parser('set', 519 help="""Set SYMBOL to VALUE. 520 If VALUE is omitted, just uncomment 521 the #define for SYMBOL. 522 Error out of a line defining 523 SYMBOL (commented or not) is not 524 found, unless --force is passed. 525 """) 526 parser_set.add_argument('symbol', metavar='SYMBOL') 527 parser_set.add_argument('value', metavar='VALUE', nargs='?', 528 default='') 529 parser_set_all = subparsers.add_parser('set-all', 530 help="""Uncomment all #define 531 whose name contains a match for 532 REGEX.""") 533 parser_set_all.add_argument('regexs', metavar='REGEX', nargs='*') 534 parser_unset = subparsers.add_parser('unset', 535 help="""Comment out the #define 536 for SYMBOL. Do nothing if none 537 is present.""") 538 parser_unset.add_argument('symbol', metavar='SYMBOL') 539 parser_unset_all = subparsers.add_parser('unset-all', 540 help="""Comment out all #define 541 whose name contains a match for 542 REGEX.""") 543 parser_unset_all.add_argument('regexs', metavar='REGEX', nargs='*') 544 545 def add_adapter(name, function, description): 546 subparser = subparsers.add_parser(name, help=description) 547 subparser.set_defaults(adapter=function) 548 add_adapter('baremetal', baremetal_adapter, 549 """Like full, but exclude features that require platform 550 features such as file input-output.""") 551 add_adapter('baremetal_size', baremetal_size_adapter, 552 """Like baremetal, but exclude debugging features. 553 Useful for code size measurements.""") 554 add_adapter('full', full_adapter, 555 """Uncomment most features. 556 Exclude alternative implementations and platform support 557 options, as well as some options that are awkward to test. 558 """) 559 add_adapter('full_no_deprecated', no_deprecated_adapter(full_adapter), 560 """Uncomment most non-deprecated features. 561 Like "full", but without deprecated features. 562 """) 563 add_adapter('full_no_platform', no_platform_adapter(full_adapter), 564 """Uncomment most non-platform features. 565 Like "full", but without platform features. 566 """) 567 add_adapter('realfull', realfull_adapter, 568 """Uncomment all boolean #defines. 569 Suitable for generating documentation, but not for building.""") 570 add_adapter('crypto', crypto_adapter(None), 571 """Only include crypto features. Exclude X.509 and TLS.""") 572 add_adapter('crypto_baremetal', crypto_adapter(baremetal_adapter), 573 """Like baremetal, but with only crypto features, 574 excluding X.509 and TLS.""") 575 add_adapter('crypto_full', crypto_adapter(full_adapter), 576 """Like full, but with only crypto features, 577 excluding X.509 and TLS.""") 578 579 args = parser.parse_args() 580 config = ConfigFile(args.file) 581 if args.command is None: 582 parser.print_help() 583 return 1 584 elif args.command == 'get': 585 if args.symbol in config: 586 value = config[args.symbol] 587 if value: 588 sys.stdout.write(value + '\n') 589 return 0 if args.symbol in config else 1 590 elif args.command == 'set': 591 if not args.force and args.symbol not in config.settings: 592 sys.stderr.write("A #define for the symbol {} " 593 "was not found in {}\n" 594 .format(args.symbol, config.filename)) 595 return 1 596 config.set(args.symbol, value=args.value) 597 elif args.command == 'set-all': 598 config.change_matching(args.regexs, True) 599 elif args.command == 'unset': 600 config.unset(args.symbol) 601 elif args.command == 'unset-all': 602 config.change_matching(args.regexs, False) 603 else: 604 config.adapt(args.adapter) 605 config.write(args.write) 606 return 0 607 608 # Import modules only used by main only if main is defined and called. 609 # pylint: disable=wrong-import-position 610 import argparse 611 import sys 612 sys.exit(main()) 613
