← Back
Editing: constraintquery.cpython-312.pyc
� ���i� � �� � U d dl mZ d dlZddlmZmZmZmZmZ ddl m Z m Z dZ ej eedf ed< G d � d ej" ej$ ej& � Zy) � )�IterableN� )� exception�mixins� policyrep�query�util)�CriteriaDescriptor�CriteriaSetDescriptor)�ConstraintQuery.�__all__c � � e Zd ZU dZ eej ej �� Z eej dd� Z dZ e e d< eej dd� ZdZe e d< dZe e d < eej$ d d � ZdZe e d < dZe e d < d eej eej z eej$ z de de de fd�Zdeej2 fd�Zy)r a� Query constraint rules, (mls)constrain/(mls)validatetrans. Parameter: policy The policy to query. Keyword Parameters/Class attributes: ruletype The list of rule type(s) to match. tclass The object class(es) to match. tclass_regex If true, use a regular expression for matching the rule's object class. perms The permission(s) to match. perms_equal If true, the permission set of the rule must exactly match the permissions criteria. If false, any set intersection will match. perms_regex If true, regular expression matching will be used on the permission names instead of set logic. role The name of the role to match in the constraint expression. role_indirect If true, members of an attribute will be matched rather than the attribute itself. role_regex If true, regular expression matching will be used on the role. type_ The name of the type/attribute to match in the constraint expression. type_indirect If true, members of an attribute will be matched rather than the attribute itself. type_regex If true, regular expression matching will be used on the type/attribute. user The name of the user to match in the constraint expression. user_regex If true, regular expression matching will be used on the user. )� enum_class� user_regex� lookup_userF� role_regex� lookup_roleT� role_indirect� type_regex�lookup_type_or_attr� type_indirect�expr�indirect�regex�returnc � � |r1t � }|D ]! }|j |j � � �# n|}t j |||� S )ay Match roles/types/users in a constraint expression, optionally by expanding the contents of attributes. Parameters: expr The expression to match. criteria The criteria to match. indirect If attributes in the expression should be expanded. regex If regular expression matching should be used. )�set�update�expandr � match_in_set)�selfr �criteriar r �obj�items �>/usr/lib64/python3.12/site-packages/setools/constraintquery.py� _match_exprzConstraintQuery._match_expr? sF � � ��%�C� ��� � �4�;�;�=�)� � �C�� � ��h��6�6� c # �J K � | j j d| j � �� | j j d| j ��� | j | j � | j | j � | j j d| j �d| j ��� | j j d| j �d| j ��� | j j d| j �d| j ��� | j j � D �]B }| j r|j | j vr�)| j |� s�; | j |� s�N | j rG| j% |j& j( | j | j* | j � s��| j rG| j% |j& j, | j | j. | j � s��| j r>| j% |j& j0 | j d | j � s��?|�� ��E y # t j" $ r Y ��]w xY w�w) z6Generator which yields all matching constraints rules.z#Generating constraint results from zself.ruletype=z self.user=z, self.user_regex=z self.role=z, self.role_regex=z self.type_=z, self.type_regex=FN)�log�info�policy�debug�ruletype�_match_object_class_debug�_match_perms_debug�userr �roler �type_r � constraints�_match_object_class� _match_permsr �ConstraintUseErrorr& � expression�rolesr �typesr �users)r! �cs r% �resultszConstraintQuery.resultsV s � �� � ��� � �;�D�K�K�=�I�J� �����.�$�-�-�)�*�+� �&�&�t�x�x�0� � � ����)� �����*�$�)�)� �%8����'9�:�;� �����*�$�)�)� �%8����'9�:�;� �����+�$�*�*� �&9�� � �(:�;�<����(�(�*�A��}�}��:�:�T�]�]�2� ��+�+�A�.�� ��(�(��+� � ,� �y�y��!1�!1��L�L�&�&��I�I��&�&��O�O� "%� ��z�z�$�"2�"2��L�L�&�&��J�J��&�&��O�O� #%� ��y�y��!1�!1��L�L�&�&��I�I���O�O� "%� ��G�G +�� �/�/� �� �s+ �E;J#�>J �C:J#� J � J#� J � J#N)�__name__� __module__� __qualname__�__doc__r r �ConstraintRuletyper- r �Userr0 r �bool�__annotations__�Roler1 r r �Typer2 r r � frozensetr& r � AnyConstraintr< � r' r% r r s � �"�H C�$�Y�%A�%A�B� �/�/�1�H� -� �i�n�n� -�l�M� J�D� �J�� � -� �i�n�n� -�l�M� J�D� �J�� � �M�4� � .� �y�~�~� .�|�=R� S�E� �J�� � �M�4� �7� �)�.�.� 9�I�i�n�n�<U� U� �i�n�n�-�!.� 7�CG�7�PT�7�Y]�7�.-��)�"9�"9�:� -r' r )�collections.abcr �typing� r r r r r � descriptorsr r r �Final�tuple�strrD � MatchObjClass�MatchPermission� PolicyQueryr rI r' r% �<module>rT sU �� %� � 7� 7� B�)=��� � �e�C��H�o� &� =�u�f�*�*�F�,B�,B�E�DU�DU� ur'
Save File
Cancel