a
qqeW @ s d dl Z d dlZd dlmZmZmZmZmZ ddlm Z m
Z
ddl m Z m
Z
ddlmZmZ ddlmZmZmZmZ ddlmZ G d d
d
e je
jZdS ) N)castIterableOptionalPatternUnion )mixinsquery)CriteriaDescriptorCriteriaSetDescriptor) InvalidType RuleUseError) AnyRBACRule RBACRuletypeRole
TypeOrAttr)match_indirect_regexc s e Zd ZU dZeedZeddZdZ e
e d< dZ e
e d< dZ
eeeeef e d < dZe
e d
< dZe
e d < ed d
ZdZe
e d < eddZdZe
e d< eeeeeef dddZejeee eef ddddZdd fdd Z e e dddZ Z!S )
RBACRuleQuerya
Query the RBAC rules.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
ruletype The list of rule type(s) to match.
source The name of the source role/attribute to match.
source_indirect If true, members of an attribute will be
matched rather than the attribute itself.
source_regex If true, regular expression matching will
be used on the source role/attribute.
Obeys the source_indirect option.
target The name of the target role/attribute to match.
target_indirect If true, members of an attribute will be
matched rather than the attribute itself.
target_regex If true, regular expression matching will
be used on the target role/attribute.
Obeys target_indirect option.
tclass The object class(es) to match.
tclass_regex If true, use a regular expression for
matching the rule's object class.
default The name of the default role to match.
default_regex If true, regular expression matching will
be used on the default role.
)
enum_class source_regex lookup_roleFTsource_indirectN_target target_regextarget_indirect tclass_regexZ lookup_class
default_regex)returnc C s | j S N)r )self r ;/usr/lib64/python3.9/site-packages/setools/rbacrulequery.pytarget: s zRBACRuleQuery.target)valuer c C st |s d | _ nd| jr t|| _ nPz | jtttt f || _ W n. t
yn | j tttt f || _ Y n0 d S r )
r r recompilepolicyZlookup_type_or_attrr r strr r r r )r r# r r r! r" > s c s( t t| j|fi | tt| _d S r )superr __init__loggingZ getLogger__name__log)r r& kwargs __class__r r! r) J s zRBACRuleQuery.__init__c c s: | j d| | j d| | j d| | j d| | | j | j d| | j D ]}| jr|j| jvrqp| jrt |j| j| j
| j sqp| j rt |j | j | j
| jsqpz| |sW qpW n ty Y qpY n0 | jr.z t |j| jd| jsW qpW n ty, Y qpY n0 |V qpdS )z/Generator which yields all matching RBAC rules.z,Generating RBAC rule results from {0.policy}zRuletypes: {0.ruletype}zLSource: {0.source!r}, indirect: {0.source_indirect}, regex: {0.source_regex}zLTarget: {0.target!r}, indirect: {0.target_indirect}, regex: {0.target_regex}z0Default: {0.default!r}, regex: {0.default_regex}TN)r, infoformatdebugZ_match_object_class_debugr& Z rbacrulesruletypesourcer r r r" r r Z_match_object_classr
defaultr )r Zruler r r! resultsN sZ
zRBACRuleQuery.results)"r+
__module__ __qualname____doc__r r r3 r
r4 r bool__annotations__r r r r r r r r r Ztclassr r5 r propertyr" setterr' r) r r r6
__classcell__r r r. r! r s$
r )r* r$ typingr r r r r r r Z descriptorsr
r exceptionr r
Z policyrepr r r r utilr Z
MatchObjClassZ PolicyQueryr r r r r! s