✘✘ GRAYBYTE WORDPRESS FILE MANAGER ✘✘

a

q�qe�@s~dd
lZddl
mZmZ
ddlmZmZmZmZ
ddl	m
Z

ddlmZ
ddl
mZmZmZ
ddlmZ
Gd	d
�d
e
e�Zd
S)�N)�IPPROTO_TCP�IPPROTO_UDP)�Iterable�Optional�Tuple�Union�
)
�MatchContext)
�PolicyQuery)�Portcon�PortconRange�PortconProtocol)
�match_rangecs�eZ
dZUd
ZdZeeed<dZee	ed<dZ
eed<dZeed<dZ
eed<dZeed	<eee	d
�
dd��
Zejeeeefdd
�dd��
Zeeed
�
dd��
Zejeeeefdd
�dd��
Zdd
�
�f
dd�Zeed
�
dd�Z�ZS)�PortconQuerya_
    Port context query.

    Parameter:
    policy          The policy to query.

    Keyword Parameters/Class attributes:
    protocol        The protocol to match (socket.IPPROTO_TCP for
                    TCP or socket.IPPROTO_UDP for UDP)

    ports           A 2-tuple of the port range to match. (Set both to
                    the same value for a single port)
    ports_subset    If true, the criteria will match if it is a subset
                    of the portcon's range.
    ports_overlap   If true, the criteria will match if it overlaps
                    any of the portcon's range.
    ports_superset  If true, the criteria will match if it is a superset
                    of the portcon's range.
    ports_proper    If true, use proper superset/subset operations.
                    No effect if not using set operations.

    user            The criteria to match the context's user.
    user_regex      If true, regular expression matching
                    will be used on the user.

    role            The criteria to match the context's role.
    role_regex      If true, regular expression matching
                    will be used on the role.

    type_           The criteria to match the context's type.
    type_regex      If true, regular expression matching
                    will be used on the type.

    range_          The criteria to match the context's range.
    range_subset    If true, the criteria will match if it is a subset
                    of the context's range.
    range_overlap   If true, the criteria will match if it overlaps
                    any of the context's range.
    range_superset  If true, the criteria will match if it is a superset
                    of the context's range.
    range_proper    If true, use proper superset/subset operations.
                    No effect if not using set operations.
    N�	_protocol�_portsF�ports_subset�
ports_overlap�ports_superset�ports_proper)
�returnc


Cs|jS�
N)
r�
�self�r�:/usr/lib64/python3.9/site-packages/setools/portconquery.py�portsDszPortconQuery.ports)�valuercCsb|
rXt|
�}t
|�
r^|jd
ks(|jd
kr6td�|�
�
�
|j|jkrPtd�|�
�
�
||_nd|_dS)Nrz/Port numbers must be positive: {0.low}-{0.high}zAThe low port must be smaller than the high port: {0.low}-{0.high})r�allZlowZhigh�
ValueError�formatr)rrZ
pending_portsrrrrHs



�


��c


Cs|jSr)
rrrrr�protocol[szPortconQuery.protocolcCs|
rt�
|
�
|_nd|_dSr)r
�lookupr)rrrrrr!_s
cs(tt
|�j|
f
i|�
�

t�t�
|_dSr)�superr�__init__�loggingZ	getLogger�__name__�log)r�policy�kwargs�
�	__class__rrr$fs

zPortconQuery.__init__c
cs�|j�
d
�|�
�

|j�d�|�
�

|j�d�|�
�

|�|j�

|j��D]R}
|jrvt|
j|j|j	|j
|j|j�svqL|j
r�|j
|
j
kr�qL|�|
j�
s�qL|
V
qLdS)z-Generator which yields all matching portcons.z*Generating portcon results from {0.policy}z~Ports: {0.ports}, overlap: {0.ports_overlap}, subset: {0.ports_subset}, superset: {0.ports_superset}, proper: {0.ports_proper}zProtocol: {0.protocol!r}N)r'�infor �debugZ_match_context_debugr(Zportconsrrrrrrr!Z_match_context�context)rZportconrrr�resultsjs*

�






�

zPortconQuery.results)r&�
__module__�__qualname__�__doc__rrr
�__annotations__rrr�boolrrr�propertyr�setterr�intr!r�strr$rrr/�
__classcell__rrr*rrs"
,








r)r%Zsocketrr�typingrrrrZmixinsr	�queryr
Z	policyreprrr
�utilrrrrrr�<module>s