관리-도구
편집 파일: nodeconquery.cpython-39.pyc
a q�qe� � @ s� d dl Z d dlZd dlmZmZ d dlmZmZmZ ddl m Z ddl m Z m Z ddlmZ ee je jf ZG dd � d e e�ZdS ) � N)�AF_INET�AF_INET6)�Iterable�Optional�Union� )� MatchContext)�Nodecon�NodeconIPVersion)� PolicyQueryc s� e Zd ZU dZdZee ed< dZe ed< dZ ee ed< e ee d�dd ��Z e jeeee f dd �d d ��Z e ee d�d d ��Zejeeeef dd �dd ��Zdd�� fdd� Zee d�dd�Z� ZS )� NodeconQueryaI Query nodecon statements. Parameter: policy The policy to query. Keyword Parameters/Class attributes: network The IPv4/IPv6 address or IPv4/IPv6 network address with netmask, e.g. 192.168.1.0/255.255.255.0 or "192.168.1.0/24". network_overlap If true, the net will match if it overlaps with the nodecon's network instead of equality. ip_version The IP version of the nodecon to match. (socket.AF_INET for IPv4 or socket.AF_INET6 for IPv6) user The criteria to match the context's user. user_regex If true, regular expression matching will be used on the user. role The criteria to match the context's role. role_regex If true, regular expression matching will be used on the role. type_ The criteria to match the context's type. type_regex If true, regular expression matching will be used on the type. range_ The criteria to match the context's range. range_subset If true, the criteria will match if it is a subset of the context's range. range_overlap If true, the criteria will match if it overlaps any of the context's range. range_superset If true, the criteria will match if it is a superset of the context's range. range_proper If true, use proper superset/subset operations. No effect if not using set operations. N�_networkF�network_overlap� _ip_version)�returnc C s | j S �N)r ��self� r �:/usr/lib64/python3.9/site-packages/setools/nodeconquery.py� ip_version; s zNodeconQuery.ip_version)�valuer c C s |rt �|�| _nd | _d S r )r �lookupr �r r r r r r ? s c C s | j S r )r r r r r �networkF s zNodeconQuery.networkc C s |rt �|�| _nd | _d S r )� ipaddressZ ip_networkr r r r r r J s c s( t t| �j|fi |�� t�t�| _d S r )�superr �__init__�loggingZ getLogger�__name__�log)r �policy�kwargs�� __class__r r r Q s zNodeconQuery.__init__c c s� | j �d�| �� | j �d�| �� | j �d�| �� | �| j � | j�� D ]X}| jr|| jrn| j� |j�s|qLn|j| jks|qL| j r�| j |j kr�qL| � |j �s�qL|V qLdS )z-Generator which yields all matching nodecons.z*Generating nodecon results from {0.policy}z4Network: {0.network!r}, overlap: {0.network_overlap}z IP Version: {0.ip_version!r}N) r �info�format�debugZ_match_context_debugr! Znodeconsr r Zoverlapsr Z_match_context�context)r Znodeconr r r �resultsU s zNodeconQuery.results)r � __module__� __qualname__�__doc__r r � AnyIPNetwork�__annotations__r �boolr r �propertyr �setterr �strr r r r r) � __classcell__r r r# r r s " r )r r Zsocketr r �typingr r r Zmixinsr Z policyrepr r �queryr Z IPv4NetworkZ IPv6Networkr- r r r r r �<module> s