✘✘ GRAYBYTE WORDPRESS FILE MANAGER ✘✘

a

q�qe��@s�dd
lZdd
l
Z
ddlmZmZ
ddlmZmZmZ
ddl	m
Z

ddlmZm
Z

ddlmZ
eejejfZGdd	�d	e
e�Zd
S)
�N)�AF_INET�AF_INET6)�Iterable�Optional�Union�
)
�MatchContext)�Nodecon�NodeconIPVersion)
�PolicyQuerycs�eZ
dZUd
ZdZeeed<dZe	ed<dZ
eeed<eeed�
dd	��
Z
e
jeeeefdd
�dd	��
Z
eeed�
dd
��
Zejeeeefdd
�dd
��
Zdd�
�f
dd�Zeed�
dd�Z�ZS)�NodeconQueryaI
    Query nodecon statements.

    Parameter:
    policy          The policy to query.

    Keyword Parameters/Class attributes:
    network         The IPv4/IPv6 address or IPv4/IPv6 network address
                    with netmask, e.g. 192.168.1.0/255.255.255.0 or
                    "192.168.1.0/24".
    network_overlap If true, the net will match if it overlaps with
                    the nodecon's network instead of equality.
    ip_version      The IP version of the nodecon to match. (socket.AF_INET
                    for IPv4 or socket.AF_INET6 for IPv6)
    user            The criteria to match the context's user.
    user_regex      If true, regular expression matching
                    will be used on the user.
    role            The criteria to match the context's role.
    role_regex      If true, regular expression matching
                    will be used on the role.
    type_           The criteria to match the context's type.
    type_regex      If true, regular expression matching
                    will be used on the type.
    range_          The criteria to match the context's range.
    range_subset    If true, the criteria will match if it is a subset
                    of the context's range.
    range_overlap   If true, the criteria will match if it overlaps
                    any of the context's range.
    range_superset  If true, the criteria will match if it is a superset
                    of the context's range.
    range_proper    If true, use proper superset/subset operations.
                    No effect if not using set operations.
    N�_networkF�network_overlap�_ip_version)
�returnc


Cs|jS�
N)
r�
�self�r�:/usr/lib64/python3.9/site-packages/setools/nodeconquery.py�
ip_version;szNodeconQuery.ip_version)�valuercCs|
rt�
|
�
|_nd|_dSr)r
�lookupr�rrrrrr?s
c


Cs|jSr)
r
rrrr�networkFszNodeconQuery.networkcCs|
rt�
|
�
|_nd|_dSr)�	ipaddressZ
ip_networkr
rrrrrJs
cs(tt
|�j|
f
i|�
�

t�t�
|_dSr)�superr�__init__�loggingZ	getLogger�__name__�log)r�policy�kwargs�
�	__class__rrrQs

zNodeconQuery.__init__c
cs�|j�
d
�|�
�

|j�d�|�
�

|j�d�|�
�

|�|j�

|j��D]X}
|jr||jrn|j�	|
j�
s|qLn|
j|jks|qL|j
r�|j
|
j
kr�qL|�|
j�
s�qL|
V
qLdS)z-Generator which yields all matching nodecons.z*Generating nodecon results from {0.policy}z4Network: {0.network!r}, overlap: {0.network_overlap}zIP Version: {0.ip_version!r}N)
r �info�format�debugZ_match_context_debugr!ZnodeconsrrZoverlapsrZ_match_context�context)rZnodeconrrr�resultsUs 








zNodeconQuery.results)r�
__module__�__qualname__�__doc__r
r�AnyIPNetwork�__annotations__r�boolrr
�propertyr�setterr�strrrrr	r)�
__classcell__rrr#rrs
"





r)rrZsocketrr�typingrrrZmixinsrZ	policyrepr	r
�queryrZIPv4NetworkZIPv6Networkr-rrrrr�<module>s