a
qéqeë" ã @ sš d dl Z d dlmZmZmZmZmZ ddlmZm Z ddl
m Z m Z ddl
mZmZ ddlmZmZmZmZ ddlmZmZ G d d
„ d
ejeje jƒZdS ) é N)ÚcastÚIterableÚOptionalÚSetÚTupleé )ÚmixinsÚquery)ÚCriteriaDescriptorÚCriteriaSetDescriptor)Ú RuleUseErrorÚRuleNotConditional)Ú AnyTERuleÚ AVRuleXpermÚIoctlSetÚ
TERuletype)Úmatch_indirect_regexÚmatch_regex_or_setc s e Zd ZU dZeedZeddƒZdZ e
e d< dZ e
e d< eddƒZ
dZe
e d< dZe
e d < ed
dƒZdZe
e d
< ed d ƒZdZe
e d < dZe
e d
< dZee e d< dZe
e d< eee dœdd„ƒZejee e e e f ddœdd„ƒZddœ‡ fdd„ Z e e dœdd„Z!‡ Z"S )Ú TERuleQueryae
Query the Type Enforcement rules.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
ruletype The list of rule type(s) to match.
source The name of the source type/attribute to match.
source_indirect If true, members of an attribute will be
matched rather than the attribute itself.
Default is true.
source_regex If true, regular expression matching will
be used on the source type/attribute.
Obeys the source_indirect option.
Default is false.
target The name of the target type/attribute to match.
target_indirect If true, members of an attribute will be
matched rather than the attribute itself.
Default is true.
target_regex If true, regular expression matching will
be used on the target type/attribute.
Obeys target_indirect option.
Default is false.
tclass The object class(es) to match.
tclass_regex If true, use a regular expression for
matching the rule's object class.
Default is false.
perms The set of permission(s) to match.
perms_equal If true, the permission set of the rule
must exactly match the permissions
criteria. If false, any set intersection
will match.
Default is false.
perms_regex If true, regular expression matching will be used
on the permission names instead of set logic.
Default is false.
perms_subset If true, the rule matches if the permissions criteria
is a subset of the rule's permission set.
Default is false.
default The name of the default type to match.
default_regex If true, regular expression matching will be
used on the default type.
Default is false.
boolean The set of boolean(s) to match.
boolean_regex If true, regular expression matching will be
used on the booleans.
Default is false.
boolean_equal If true, the booleans in the conditional
expression of the rule must exactly match the
criteria. If false, any set intersection
will match. Default is false.
)Ú
enum_classÚ source_regexZlookup_type_or_attrFTÚsource_indirectÚ target_regexÚtarget_indirectÚ
default_regexÚ
boolean_regexZlookup_booleanÚ
boolean_equalNÚ_xpermsÚ xperms_equal)Úreturnc C s | j S ©N)r )Úself© r" ú9/usr/lib64/python3.9/site-packages/setools/terulequery.pyÚxpermsV s zTERuleQuery.xperms)Úvaluer c C s¦ |rœt ƒ }|D ]€\}}d| kr*dks:n td |¡ƒ‚d| krNdks^n td |¡ƒ‚||k rp|| }}| dd„ t||d ƒD ƒ¡ qt|ƒ| _nd | _d S )Nr iÿÿ z {0:#07x} is not a valid ioctl.c s s | ]
}|V qd S r r" )Ú.0Úir" r" r# Ú i ó z%TERuleQuery.xperms..r )ÚsetÚ
ValueErrorÚformatÚupdateÚranger r )r! r% Zpending_xpermsZlowZhighr" r" r# r$ Z s
c s( t t| ƒj|fi |¤Ž t t¡| _d S r )Úsuperr Ú__init__ÚloggingZ getLoggerÚ__name__Úlog)r! ÚpolicyÚkwargs©Ú __class__r" r# r0 o s zTERuleQuery.__init__c c sH | j d | ¡¡ | j d | ¡¡ | j d | ¡¡ | j d | ¡¡ | | j ¡ | | j ¡ | j d | ¡¡ | j d | ¡¡ | j d | ¡¡ | j ¡ D ] }| jrº|j| jvrºq | j rØt
|j | j | j | j ƒsØq | j
röt
|j
| j
| j| jƒsöq | |¡sq zZ| jrL|jrL| jr2t| jƒdkr2W q tt|ƒj| jvr\W q n| |¡s\W q W n tyv Y q Y n0 z&| jrœt|j| j| j d ƒsœW q W n ty¶ Y q Y n0 | j røz t
|j | j d
| j ƒsÜW q W n työ Y q Y n0 | j r r r? r r r r r r Úpropertyr$ Úsetterr r Úintr0 r r@ Ú
__classcell__r" r" r6 r# r s*
6
"r ) r1 Útypingr r r r r Ú r r Z descriptorsr
r Ú exceptionr r
Z policyrepr r r r Úutilr r Z
MatchObjClassZMatchPermissionZ PolicyQueryr r" r" r" r# Ú s