a
qqe @ s d dl Z d dlZd dlmZmZ d dlmZmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ee je jf ZG dd d e
eZdS )
N)AF_INETAF_INET6)IterableOptionalUnion ) MatchContext)NodeconNodeconIPVersion) PolicyQueryc s e Zd ZU dZdZee ed< dZe ed< dZ
ee ed< e ee ddd Z
e
jeeee f dd
d d Z
e ee dd d
Zejeeeef dd
dd
Zdd fdd Zee dddZ ZS ) NodeconQueryaI
Query nodecon statements.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
network The IPv4/IPv6 address or IPv4/IPv6 network address
with netmask, e.g. 192.168.1.0/255.255.255.0 or
"192.168.1.0/24".
network_overlap If true, the net will match if it overlaps with
the nodecon's network instead of equality.
ip_version The IP version of the nodecon to match. (socket.AF_INET
for IPv4 or socket.AF_INET6 for IPv6)
user The criteria to match the context's user.
user_regex If true, regular expression matching
will be used on the user.
role The criteria to match the context's role.
role_regex If true, regular expression matching
will be used on the role.
type_ The criteria to match the context's type.
type_regex If true, regular expression matching
will be used on the type.
range_ The criteria to match the context's range.
range_subset If true, the criteria will match if it is a subset
of the context's range.
range_overlap If true, the criteria will match if it overlaps
any of the context's range.
range_superset If true, the criteria will match if it is a superset
of the context's range.
range_proper If true, use proper superset/subset operations.
No effect if not using set operations.
N_networkFnetwork_overlap _ip_version)returnc C s | j S N)r self r :/usr/lib64/python3.9/site-packages/setools/nodeconquery.py
ip_version; s zNodeconQuery.ip_version)valuer c C s |rt || _nd | _d S r )r
lookupr r r r r r r ? s c C s | j S r )r
r r r r networkF s zNodeconQuery.networkc C s |rt || _nd | _d S r ) ipaddressZ
ip_networkr
r r r r r J s c s( t t| j|fi | tt| _d S r )superr __init__loggingZ getLogger__name__log)r policykwargs __class__r r r Q s zNodeconQuery.__init__c c s | j d| | j d| | j d| | | j | j D ]X}| jr|| jrn| j |js|qLn|j| jks|qL| j
r| j
|j
krqL| |j sqL|V qLdS )z-Generator which yields all matching nodecons.z*Generating nodecon results from {0.policy}z4Network: {0.network!r}, overlap: {0.network_overlap}z IP Version: {0.ip_version!r}N)
r infoformatdebugZ_match_context_debugr! Znodeconsr r Zoverlapsr Z_match_contextcontext)r Znodeconr r r resultsU s zNodeconQuery.results)r
__module__ __qualname____doc__r
r AnyIPNetwork__annotations__r boolr r
propertyr setterr strr r r r r)
__classcell__r r r# r r s
" r )r r Zsocketr r typingr r r Zmixinsr Z policyrepr r
queryr Z IPv4NetworkZ IPv6Networkr- r r r r r s