...

����q�qe�����������������������@���s����d�dl�Z�d�dlZd�dlmZmZ�ddlmZmZ�ddlm	Z	�ddl
mZmZ�ddl
mZmZ�ddlmZ�dd	lmZ�G�d
d��deee�ZdS�)�����N)�Iterable�Set����)�CriteriaDescriptor�CriteriaSetDescriptor)�ConstraintUseError)�
MatchObjClass�MatchPermission)�
AnyConstraint�ConstraintRuletype)�PolicyQuery)�match_in_setc�����������������������s����e�Zd�ZU�dZeed�Zedd�ZdZ	e
ed<�edd�ZdZ
e
ed<�dZe
ed	<�ed
d�ZdZe
ed
<�dZe
ed<�d
d���fdd�Zdd��Zee�d�dd�Z���ZS�)�ConstraintQuerya���
    Query constraint rules, (mls)constrain/(mls)validatetrans.

Parameter:
    policy            The policy to query.

Keyword Parameters/Class attributes:
    ruletype          The list of rule type(s) to match.
    tclass            The object class(es) to match.
    tclass_regex      If true, use a regular expression for
                      matching the rule's object class.
    perms             The permission(s) to match.
    perms_equal       If true, the permission set of the rule
                      must exactly match the permissions
                      criteria.  If false, any set intersection
                      will match.
    perms_regex       If true, regular expression matching will be used
                      on the permission names instead of set logic.
    role              The name of the role to match in the
                      constraint expression.
    role_indirect     If true, members of an attribute will be
                      matched rather than the attribute itself.
    role_regex        If true, regular expression matching will
                      be used on the role.
    type_             The name of the type/attribute to match in the
                      constraint expression.
    type_indirect     If true, members of an attribute will be
                      matched rather than the attribute itself.
    type_regex        If true, regular expression matching will
                      be used on the type/attribute.
    user              The name of the user to match in the
                      constraint expression.
    user_regex        If true, regular expression matching will
                      be used on the user.
    )�
enum_class�
user_regexZlookup_userF�
role_regexZlookup_roleT�
role_indirect�
type_regexZlookup_type_or_attr�
type_indirectN)�returnc��������������������s(���t�t|��j|fi�|���t�t�|�_d�S�)N)�superr����__init__�loggingZ	getLogger�__name__�log)�self�policy�kwargs��	__class__���=/usr/lib64/python3.9/site-packages/setools/constraintquery.pyr���A���s����zConstraintQuery.__init__c�����������������C���s4���|r$t���}|D�]}|�|�����qn|}t|||�S�)ay��
        Match roles/types/users in a constraint expression,
        optionally by expanding the contents of attributes.

Parameters:
        expr        The expression to match.
        criteria    The criteria to match.
        indirect    If attributes in the expression should be expanded.
        regex       If regular expression matching should be used.
        )�set�update�expandr
���)r����exprZcriteriaZindirectZregex�obj�itemr ���r ���r!����_match_exprE���s����zConstraintQuery._match_exprc��������������	���c���sB��|�j��d�|����|�j��d�|����|��|�j���|��|�j���|�j��d�|����|�j��d�|����|�j��d�|����|�j���D�]�}|�jr�|j|�jvr�q||��	|�s�q|z|��
|�s�W�q|W�n�ty����Y�q|Y�n0�|�jr�|��
|jj|�j|�j|�j�s�q||�j�r|��
|jj|�j|�j|�j��sq||�j�r6|��
|jj|�jd|�j��s6q||V��q|dS�)z6Generator which yields all matching constraints rules.z-Generating constraint results from {0.policy}zRuletypes: {0.ruletype}z'User: {0.user!r}, regex: {0.user_regex}z'Role: {0.role!r}, regex: {0.role_regex}z(Type: {0.type_!r}, regex: {0.type_regex}FN)r����info�format�debugZ_match_object_class_debugZ_match_perms_debugr����constraints�ruletypeZ_match_object_classZ_match_permsr����roler(���Z
expressionZrolesr���r����type_�typesr���r����userZusersr���)r����cr ���r ���r!����resultsZ���sP����

���zConstraintQuery.results)r����
__module__�__qualname__�__doc__r���r���r-���r���r1���r����bool�__annotations__r.���r���r���r/���r���r���r���r(���r���r
���r3����
__classcell__r ���r ���r���r!���r������s���
$

r���)r����re�typingr���r���Zdescriptorsr���r����	exceptionr���Zmixinsr���r	���Z	policyrepr
���r����queryr����utilr
���r���r ���r ���r ���r!����<module>���s���

.	Edit
..	Edit
__init__.cpython-39.opt-1.pyc	Edit
__init__.cpython-39.pyc	Edit
boolquery.cpython-39.opt-1.pyc	Edit
boolquery.cpython-39.pyc	Edit
boundsquery.cpython-39.opt-1.pyc	Edit
boundsquery.cpython-39.pyc	Edit
categoryquery.cpython-39.opt-1.pyc	Edit
categoryquery.cpython-39.pyc	Edit
commonquery.cpython-39.opt-1.pyc	Edit
commonquery.cpython-39.pyc	Edit
constraintquery.cpython-39.opt-1.pyc	Edit
constraintquery.cpython-39.pyc	Edit
defaultquery.cpython-39.opt-1.pyc	Edit
defaultquery.cpython-39.pyc	Edit
descriptors.cpython-39.opt-1.pyc	Edit
descriptors.cpython-39.pyc	Edit
devicetreeconquery.cpython-39.opt-1.pyc	Edit
devicetreeconquery.cpython-39.pyc	Edit
dta.cpython-39.opt-1.pyc	Edit
dta.cpython-39.pyc	Edit
exception.cpython-39.opt-1.pyc	Edit
exception.cpython-39.pyc	Edit
fsusequery.cpython-39.opt-1.pyc	Edit
fsusequery.cpython-39.pyc	Edit
genfsconquery.cpython-39.opt-1.pyc	Edit
genfsconquery.cpython-39.pyc	Edit
ibendportconquery.cpython-39.opt-1.pyc	Edit
ibendportconquery.cpython-39.pyc	Edit
ibpkeyconquery.cpython-39.opt-1.pyc	Edit
ibpkeyconquery.cpython-39.pyc	Edit
infoflow.cpython-39.opt-1.pyc	Edit
infoflow.cpython-39.pyc	Edit
initsidquery.cpython-39.opt-1.pyc	Edit
initsidquery.cpython-39.pyc	Edit
iomemconquery.cpython-39.opt-1.pyc	Edit
iomemconquery.cpython-39.pyc	Edit
ioportconquery.cpython-39.opt-1.pyc	Edit
ioportconquery.cpython-39.pyc	Edit
mixins.cpython-39.opt-1.pyc	Edit
mixins.cpython-39.pyc	Edit
mlsrulequery.cpython-39.opt-1.pyc	Edit
mlsrulequery.cpython-39.pyc	Edit
netifconquery.cpython-39.opt-1.pyc	Edit
netifconquery.cpython-39.pyc	Edit
nodeconquery.cpython-39.opt-1.pyc	Edit
nodeconquery.cpython-39.pyc	Edit
objclassquery.cpython-39.opt-1.pyc	Edit
objclassquery.cpython-39.pyc	Edit
pcideviceconquery.cpython-39.opt-1.pyc	Edit
pcideviceconquery.cpython-39.pyc	Edit
permmap.cpython-39.opt-1.pyc	Edit
permmap.cpython-39.pyc	Edit
pirqconquery.cpython-39.opt-1.pyc	Edit
pirqconquery.cpython-39.pyc	Edit
polcapquery.cpython-39.opt-1.pyc	Edit
polcapquery.cpython-39.pyc	Edit
portconquery.cpython-39.opt-1.pyc	Edit
portconquery.cpython-39.pyc	Edit
query.cpython-39.opt-1.pyc	Edit
query.cpython-39.pyc	Edit
rbacrulequery.cpython-39.opt-1.pyc	Edit
rbacrulequery.cpython-39.pyc	Edit
rolequery.cpython-39.opt-1.pyc	Edit
rolequery.cpython-39.pyc	Edit
sensitivityquery.cpython-39.opt-1.pyc	Edit
sensitivityquery.cpython-39.pyc	Edit
terulequery.cpython-39.opt-1.pyc	Edit
terulequery.cpython-39.pyc	Edit
typeattrquery.cpython-39.opt-1.pyc	Edit
typeattrquery.cpython-39.pyc	Edit
typequery.cpython-39.opt-1.pyc	Edit
typequery.cpython-39.pyc	Edit
userquery.cpython-39.opt-1.pyc	Edit
userquery.cpython-39.pyc	Edit
util.cpython-39.opt-1.pyc	Edit
util.cpython-39.pyc	Edit