a
qéqe ã @ s~ d dl Z d dlmZmZ d dlmZmZmZmZ ddl m
Z
ddl m Z ddl
mZmZmZ ddlmZ G d d
„ d
e
e ƒZdS ) é N)Ú IPPROTO_TCPÚ IPPROTO_UDP)ÚIterableÚOptionalÚTupleÚUnioné )Ú MatchContext)Ú PolicyQuery)ÚPortconÚ PortconRangeÚPortconProtocol)Ú match_rangec sú e Zd ZU dZdZee ed< dZee ed< dZ
e ed< dZ e ed< dZ
e ed< dZe ed < eee d
œd d „ƒZejeeeef dd
œdd „ƒZeee d
œdd„ƒZejeeeef dd
œdd„ƒZdd
œ‡ fdd„ Zee d
œdd„Z‡ ZS )Ú PortconQuerya_
Port context query.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
protocol The protocol to match (socket.IPPROTO_TCP for
TCP or socket.IPPROTO_UDP for UDP)
ports A 2-tuple of the port range to match. (Set both to
the same value for a single port)
ports_subset If true, the criteria will match if it is a subset
of the portcon's range.
ports_overlap If true, the criteria will match if it overlaps
any of the portcon's range.
ports_superset If true, the criteria will match if it is a superset
of the portcon's range.
ports_proper If true, use proper superset/subset operations.
No effect if not using set operations.
user The criteria to match the context's user.
user_regex If true, regular expression matching
will be used on the user.
role The criteria to match the context's role.
role_regex If true, regular expression matching
will be used on the role.
type_ The criteria to match the context's type.
type_regex If true, regular expression matching
will be used on the type.
range_ The criteria to match the context's range.
range_subset If true, the criteria will match if it is a subset
of the context's range.
range_overlap If true, the criteria will match if it overlaps
any of the context's range.
range_superset If true, the criteria will match if it is a superset
of the context's range.
range_proper If true, use proper superset/subset operations.
No effect if not using set operations.
NÚ _protocolÚ_portsFÚ ports_subsetÚ
ports_overlapÚports_supersetÚ ports_proper)Úreturnc C s | j S ©N)r ©Úself© r ú:/usr/lib64/python3.9/site-packages/setools/portconquery.pyÚportsD s zPortconQuery.ports)Úvaluer c C sb |rXt |Ž }t|ƒr^|jdk s(|jdk r6td |¡ƒ‚|j|jkrPtd |¡ƒ‚|| _nd | _d S )Nr z/Port numbers must be positive: {0.low}-{0.high}zAThe low port must be smaller than the high port: {0.low}-{0.high})r ÚallZlowZhighÚ
ValueErrorÚformatr )r r Z
pending_portsr r r r H s ÿ ÿÿc C s | j S r )r r r r r Úprotocol[ s zPortconQuery.protocolc C s |rt |¡| _nd | _d S r )r
Úlookupr )r r r r r r! _ s c s( t t| ƒj|fi |¤Ž t t¡| _d S r )Úsuperr Ú__init__ÚloggingZ getLoggerÚ__name__Úlog)r ÚpolicyÚkwargs©Ú __class__r r r$ f s zPortconQuery.__init__c c s¤ | j d | ¡¡ | j d | ¡¡ | j d | ¡¡ | | j ¡ | j ¡ D ]R}| jrvt|j| j| j | j
| j | j ƒsvqL| j
rŠ| j
|j
krŠqL| |j¡s˜qL|V qLdS )z-Generator which yields all matching portcons.z*Generating portcon results from {0.policy}z~Ports: {0.ports}, overlap: {0.ports_overlap}, subset: {0.ports_subset}, superset: {0.ports_superset}, proper: {0.ports_proper}zProtocol: {0.protocol!r}N)r' Úinfor ÚdebugZ_match_context_debugr( Zportconsr r r r r r r! Z_match_contextÚcontext)r Zportconr r r Úresultsj s*
þ ú zPortconQuery.results) r& Ú
__module__Ú __qualname__Ú__doc__r r r
Ú__annotations__r r r Úboolr r r Úpropertyr Úsetterr Úintr! r Ústrr$ r r r/ Ú
__classcell__r r r* r r s"
, r )r% Zsocketr r Útypingr r r r Zmixinsr Úqueryr
Z policyrepr r r
Úutilr r r r r r Ú s