a
qqe @ sz d dl Z d dlZd dlmZ ddlmZmZ ddlmZ ddl m
Z
ddl m Z ddl
mZmZmZ G d d
d
ee ZdS ) N)Iterable )CriteriaDescriptorCriteriaSetDescriptor) MatchName)User) PolicyQuery)match_regex_or_set match_level match_rangec s e Zd ZU dZeddZdZeed< dZ eed< dZ
eed< eddZ dZ eed < dZ
eed
< dZeed < dZeed < ed
dZdZeed< dZeed
< dd fdd Zee dddZ ZS ) UserQueryaf
Query SELinux policy users.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
name The user name to match.
name_regex If true, regular expression matching
will be used on the user names.
roles The attribute to match.
roles_equal If true, only types with role sets
that are equal to the criteria will
match. Otherwise, any intersection
will match.
roles_regex If true, regular expression matching
will be used on the role names instead
of set logic.
level The criteria to match the user's default level.
level_dom If true, the criteria will match if it dominates
the user's default level.
level_domby If true, the criteria will match if it is dominated
by the user's default level.
level_incomp If true, the criteria will match if it is incomparable
to the user's default level.
range_ The criteria to match the user's range.
range_subset If true, the criteria will match if it is a subset
of the user's range.
range_overlap If true, the criteria will match if it overlaps
any of the user's range.
range_superset If true, the criteria will match if it is a superset
of the user's range.
range_proper If true, use proper superset/subset operations.
No effect if not using set operations.
Z lookup_level)Zlookup_functionF level_dom level_domby level_incompZ lookup_range
range_overlap range_subsetrange_superset range_proper roles_regexZ lookup_role roles_equalN)returnc s( t t| j|fi | tt| _d S )N)superr __init__loggingZ getLogger__name__log)selfpolicykwargs __class__ 7/usr/lib64/python3.9/site-packages/setools/userquery.pyr C s zUserQuery.__init__c c s | j d| | | j | j d| | j d| | j d| | j D ]|}| |snq^| jrt |j| j| j
| j sq^| j rt
|j| j | j| j| jsq^| jrt|j| j| j| j| j| jsq^|V q^dS )z*Generator which yields all matching users.z'Generating user results from {0.policy}z?Roles: {0.roles!r}, regex: {0.roles_regex}, eq: {0.roles_equal}zXLevel: {0.level!r}, dom: {0.level_dom}, domby: {0.level_domby}, incomp: {0.level_incomp}zRange: {0.range_!r}, subset: {0.range_subset}, overlap: {0.range_overlap}, superset: {0.range_superset}, proper: {0.range_proper}N)r infoformatZ_match_name_debugdebugr ZusersZ _match_namerolesr r r levelr
Z mls_levelr
r r range_r Z mls_ranger r r r )r userr! r! r" resultsG sN
zUserQuery.results)r
__module__ __qualname____doc__r r' r
bool__annotations__r r r( r r r r r r& r r r r r r*
__classcell__r! r! r r" r s
$
r )r retypingr Z descriptorsr r Zmixinsr Z policyrepr queryr utilr r
r r r! r! r! r" s