✘✘ GRAYBYTE WORDPRESS FILE MANAGER ✘✘

a

q�qe�"�@s�dd
lZddl
mZmZmZmZmZ
ddlmZm	Z	
ddl
mZmZ
ddl
mZmZ
ddlmZmZmZmZ
ddlmZmZ
Gd	d
�d
ejeje	j�Zd
S)�N)�cast�Iterable�Optional�Set�Tuple�
)�mixins�query)�CriteriaDescriptor�CriteriaSetDescriptor)�RuleUseError�RuleNotConditional)�	AnyTERule�AVRuleXperm�IoctlSet�
TERuletype)�match_indirect_regex�match_regex_or_setcs
eZ
dZUd
Zeed�
Zedd�ZdZ	e
ed<dZe
ed<edd�Z
dZe
ed<dZe
ed	<ed
d�ZdZe
ed
<edd�ZdZe
ed<dZe
ed
<dZeeed<dZe
ed<eeed�
dd��
Zejeeeeefdd�dd��
Zdd�
�f
dd�Zee d�
dd�Z!�Z"S)�TERuleQueryae

    Query the Type Enforcement rules.

    Parameter:
    policy            The policy to query.

    Keyword Parameters/Class attributes:
    ruletype          The list of rule type(s) to match.
    source            The name of the source type/attribute to match.
    source_indirect   If true, members of an attribute will be
                      matched rather than the attribute itself.
                      Default is true.
    source_regex      If true, regular expression matching will
                      be used on the source type/attribute.
                      Obeys the source_indirect option.
                      Default is false.
    target            The name of the target type/attribute to match.
    target_indirect   If true, members of an attribute will be
                      matched rather than the attribute itself.
                      Default is true.
    target_regex      If true, regular expression matching will
                      be used on the target type/attribute.
                      Obeys target_indirect option.
                      Default is false.
    tclass            The object class(es) to match.
    tclass_regex      If true, use a regular expression for
                      matching the rule's object class.
                      Default is false.
    perms             The set of permission(s) to match.
    perms_equal       If true, the permission set of the rule
                      must exactly match the permissions
                      criteria.  If false, any set intersection
                      will match.
                      Default is false.
    perms_regex       If true, regular expression matching will be used
                      on the permission names instead of set logic.
                      Default is false.
    perms_subset      If true, the rule matches if the permissions criteria
                      is a subset of the rule's permission set.
                      Default is false.
    default           The name of the default type to match.
    default_regex     If true, regular expression matching will be
                      used on the default type.
                      Default is false.
    boolean           The set of boolean(s) to match.
    boolean_regex     If true, regular expression matching will be
                      used on the booleans.
                      Default is false.
    boolean_equal     If true, the booleans in the conditional
                      expression of the rule must exactly match the
                      criteria.  If false, any set intersection
                      will match.  Default is false.
    )
�
enum_class�source_regexZlookup_type_or_attrFT�source_indirect�target_regex�target_indirect�
default_regex�
boolean_regexZlookup_boolean�
boolean_equalN�_xperms�xperms_equal)
�returnc


Cs|jS�
N)
r)
�self�r"�9/usr/lib64/python3.9/site-packages/setools/terulequery.py�xpermsVszTERuleQuery.xperms)�valuercCs�|
r�t�}|
D]�\}}d
|k
r*dk
s:n
t
d�|�
�
�
d
|k
rNdk
s^n
t
d�|�
�
�
||krp||}}|�dd�t||d�D�
�

qt|�
|_nd|_dS)Nr
i��z{0:#07x} is not a valid ioctl.c
ss|]
}
|
V
qdSr r")�.0�
ir"r"r#�	<genexpr>i�z%TERuleQuery.xperms.<locals>.<genexpr>r)�set�
ValueError�format�update�rangerr)r!r%Zpending_xpermsZlowZhighr"r"r#r$Zs





 cs(tt
|�j|
f
i|�
�

t�t�
|_dSr )�superr�__init__�loggingZ	getLogger�__name__�log)r!�policy�kwargs�
�	__class__r"r#r0os

zTERuleQuery.__init__c
	csH|j�
d
�|�
�

|j�d�|�
�

|j�d�|�
�

|j�d�|�
�

|�|j�

|�|j�

|j�d�|�
�

|j�d�|�
�

|j�d�|�
�

|j��D�
]�}
|jr�|
j|jv
r�q�|j	r�t
|
j	|j	|j|j�s�q�|j
r�t
|
j
|j
|j|j�s�q�|�|
�
�
sq�zZ|j�
rL|
j�
rL|j�
r2t|j�
dk�
r2Wq�tt|
�j|jv
�
r\Wq�n|�|
�
�
s\Wq�Wnt�
yv


Yq�Yn0z&|j�
r�t|
j|j|jd	��
s�Wq�Wnt�
y�


Yq�Yn0|j�
r�zt
|
j|jd
|j��
s�Wq�Wnt�
y�


Yq�Yn0|j�r<z"t|
j j!|j|j"|j#��s Wq�Wnt$�y:


Yq�Yn0|
V
q�dS)z-Generator which yields all matching TE rules.z*Generating TE rule results from {0.policy}zRuletypes: {0.ruletype}zLSource: {0.source!r}, indirect: {0.source_indirect}, regex: {0.source_regex}zLTarget: {0.target!r}, indirect: {0.target_indirect}, regex: {0.target_regex}z*Xperms: {0.xperms!r}, eq: {0.xperms_equal}z0Default: {0.default!r}, regex: {0.default_regex}zGBoolean: {0.boolean!r}, eq: {0.boolean_equal}, regex: {0.boolean_regex}rFTN)%r3�infor,�debugZ_match_object_class_debugZ_match_perms_debugr4Zterules�ruletype�sourcerrr�targetrrZ_match_object_classZpermsZextendedZperms_equal�lenrrZ
xperm_typeZ_match_permsrr$rr�defaultr�booleanZconditionalZbooleansrrr
)r!Zruler"r"r#�resultsss�



�

�





�





�



�














�






�








�


zTERuleQuery.results)#r2�
__module__�__qualname__�__doc__rrr:r
r;r�bool�__annotations__rr<rrr>rr?rrrrrr�propertyr$�setterrr�intr0rr@�
__classcell__r"r"r6r#rs*
6



















"r)r1�typingrrrrr�rr	Zdescriptorsr
r�	exceptionrr
Z	policyreprrrr�utilrrZ
MatchObjClassZMatchPermissionZPolicyQueryrr"r"r"r#�<module>s