← Back
Editing: nodeconquery.cpython-312.pyc
� ���i� � �� � U d dl mZ d dlZd dlZddlmZmZmZ ej ej z Z dZ ej e edf ed< G d� d ej ej" � Zy) � )�IterableN� )�mixins� policyrep�query)� AnyIPNetwork� NodeconQuery.�__all__c �V � e Zd ZU dZdZedz ed< dZeed< dZ e j dz ed< e de j dz fd�� Z e j d e j ez dz ddfd �� Z e dedz fd �� Zej d eez dz ddfd �� Zdee j$ fd �Zy)r aI Query nodecon statements. Parameter: policy The policy to query. Keyword Parameters/Class attributes: network The IPv4/IPv6 address or IPv4/IPv6 network address with netmask, e.g. 192.168.1.0/255.255.255.0 or "192.168.1.0/24". network_overlap If true, the net will match if it overlaps with the nodecon's network instead of equality. ip_version The IP version of the nodecon to match. (socket.AF_INET for IPv4 or socket.AF_INET6 for IPv6) user The criteria to match the context's user. user_regex If true, regular expression matching will be used on the user. role The criteria to match the context's role. role_regex If true, regular expression matching will be used on the role. type_ The criteria to match the context's type. type_regex If true, regular expression matching will be used on the type. range_ The criteria to match the context's range. range_subset If true, the criteria will match if it is a subset of the context's range. range_overlap If true, the criteria will match if it overlaps any of the context's range. range_superset If true, the criteria will match if it is a superset of the context's range. range_proper If true, use proper superset/subset operations. No effect if not using set operations. N�_networkF�network_overlap� _ip_version�returnc � � | j S �N)r ��selfs �;/usr/lib64/python3.12/site-packages/setools/nodeconquery.py� ip_versionzNodeconQuery.ip_version9 s � �� � � � �valuec �` � |r%t j j |� | _ y d | _ y r )r �NodeconIPVersion�lookupr �r r s r r zNodeconQuery.ip_version= s& � � � (� 9� 9� @� @�� G�D� � #�D� r c � � | j S r )r r s r �networkzNodeconQuery.networkD s � ��}�}� r c �L � |rt j |� | _ y d | _ y r )� ipaddress� ip_networkr r s r r zNodeconQuery.networkH s � � � %� 0� 0�� 7�D�M� �D�Mr c # �� K � | j j d| j � �� | j j d| j �d| j ��� | j j d| j ��� | j | j � | j j � D ]� }| j rL| j r&| j j |j � s�A|j | j k( s�[| j r| j |j k7 r��| j |j � s��|�� �� y�w)z-Generator which yields all matching nodecons.z Generating nodecon results from z self.network=z, self.network_overlap=zself.ip_version=N) �log�info�policy�debugr r r �_match_context_debug�nodecons�overlaps�_match_context�context)r �nodecons r �resultszNodeconQuery.resultsO s � �� � ��� � �8���� �F�G� �����-�$�,�,� �(@�4�+?�+?�*A�B�C� �����*�$�/�/�+�,�-� �!�!�$�(�(�+��{�{�+�+�-�G��|�|��'�'� �<�<�0�0�� � �A� �"�?�?�d�l�l�:� ����4�?�?�g�6H�6H�#H���&�&�w���7���M�! .�s �E E!)�__name__� __module__� __qualname__�__doc__r r �__annotations__r �boolr r r �propertyr �setter�strr r �Nodeconr, � r r r r s� � � �D %)�H�l�T�!�(� !�O�T�!�59�K��+�+�d�2�9� � �I� 6� 6�� =� � � � ���$� � :� :�S� @�4� G� $�D� $� �$� � � ��,� � � � �^�^�!�\�C� /�$� 6� !�4� !� �!� ��)�"3�"3�4� r r )�collections.abcr r �typing� r r r � IPv4Network� IPv6Networkr r �Final�tupler5 r1 � MatchContext� PolicyQueryr r7 r r �<module>rA sc �� %� � � &� &��$�$�y�'<�'<�<� �)I��� � �e�C��H�o� &� I�U�6�&�&��(9�(9� Ur
Save File
Cancel