Server : LiteSpeed System : Linux barito.iixcp.rumahweb.net 5.14.0-611.49.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Apr 21 16:39:08 EDT 2026 x86_64 User : elvh3918 ( 1528) PHP Version : 8.2.31 Disable Function : mail Directory : /proc/self/root/lib64/python3.9/site-packages/setools/__pycache__/ |
a
q�qeW � @ s� d dl Z d dlZd dlmZmZmZmZmZ ddlm Z m
Z
ddl m Z m
Z
ddlmZmZ ddlmZmZmZmZ ddlmZ G d d
� d
e je
j�ZdS ) � N)�cast�Iterable�Optional�Pattern�Union� )�mixins�query)�CriteriaDescriptor�CriteriaSetDescriptor)� InvalidType� RuleUseError)� AnyRBACRule� RBACRuletype�Role�
TypeOrAttr)�match_indirect_regexc s e Zd ZU dZeed�Zedd�ZdZ e
e d< dZ e
e d< dZ
eeeeef e d < dZe
e d
< dZe
e d < ed d
�ZdZe
e d < edd�ZdZe
e d< eeeeeef d�dd��Zejeee eef dd�dd��Zdd�� fdd� Z e e d�dd�Z � Z!S )�
RBACRuleQuerya�
Query the RBAC rules.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
ruletype The list of rule type(s) to match.
source The name of the source role/attribute to match.
source_indirect If true, members of an attribute will be
matched rather than the attribute itself.
source_regex If true, regular expression matching will
be used on the source role/attribute.
Obeys the source_indirect option.
target The name of the target role/attribute to match.
target_indirect If true, members of an attribute will be
matched rather than the attribute itself.
target_regex If true, regular expression matching will
be used on the target role/attribute.
Obeys target_indirect option.
tclass The object class(es) to match.
tclass_regex If true, use a regular expression for
matching the rule's object class.
default The name of the default role to match.
default_regex If true, regular expression matching will
be used on the default role.
)�
enum_class� source_regex� lookup_roleFT�source_indirectN�_target� target_regex�target_indirect� tclass_regexZ lookup_class�
default_regex)�returnc C s | j S �N)r )�self� r �;/usr/lib64/python3.9/site-packages/setools/rbacrulequery.py�target: s zRBACRuleQuery.target)�valuer c C st |s d | _ nd| jr t�|�| _ nPz | j�tttt f |��| _ W n. t
yn | j� tttt f |��| _ Y n0 d S r )
r r �re�compile�policyZlookup_type_or_attrr r �strr r r r )r r# r r r! r" > s c s( t t| �j|fi |�� t�t�| _d S r )�superr �__init__�loggingZ getLogger�__name__�log)r r& �kwargs�� __class__r r! r) J s zRBACRuleQuery.__init__c c s: | j �d�| �� | j �d�| �� | j �d�| �� | j �d�| �� | �| j � | j �d�| �� | j�� D ]�}| jr�|j| jvr�qp| jr�t |j| j| j
| j �s�qp| j r�t |j | j | j
| j�s�qpz| �|�s�W qpW n ty� Y qpY n0 | j�r.z t |j| jd| j��sW qpW n t�y, Y qpY n0 |V qpdS )z/Generator which yields all matching RBAC rules.z,Generating RBAC rule results from {0.policy}zRuletypes: {0.ruletype}zLSource: {0.source!r}, indirect: {0.source_indirect}, regex: {0.source_regex}zLTarget: {0.target!r}, indirect: {0.target_indirect}, regex: {0.target_regex}z0Default: {0.default!r}, regex: {0.default_regex}TN)r, �info�format�debugZ_match_object_class_debugr& Z rbacrules�ruletype�sourcer r r r" r r Z_match_object_classr
�defaultr )r Zruler r r! �resultsN sZ
�
� ��
�
zRBACRuleQuery.results)"r+ �
__module__� __qualname__�__doc__r r r3 r
r4 r �bool�__annotations__r r r r r r r r r Ztclassr r5 r �propertyr" �setterr' r) r r r6 �
__classcell__r r r. r! r s$
r )r* r$ �typingr r r r r � r r Z descriptorsr
r � exceptionr r
Z policyrepr r r r �utilr Z
MatchObjClassZ PolicyQueryr r r r r! �<module> s