shell bypass 403
a
q�qe � @ sf d dl Z d dlmZmZmZ ddlmZ ddlmZm Z ddl
m Z ddl m
Z
G dd � d ee �ZdS )
� N)�Iterable�Optional�Tuple� )� MatchContext)� Ioportcon�IoportconRange)� PolicyQuery)� match_rangec s� e Zd ZU dZdZee ed< dZe ed< dZ
e ed< dZ e ed< dZ e ed< e
ee d �d
d ��Zejeeeef dd �d
d ��Zdd �� fdd� Zee d �dd�Z� ZS )�IoportconQuerya�
Ioportcon context query.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
ports A 2-tuple of the port range to match. (Set both to
the same value for a single port)
ports_subset If true, the criteria will match if it is a subset
of the ioportcon's range.
ports_overlap If true, the criteria will match if it overlaps
any of the ioportcon's range.
ports_superset If true, the criteria will match if it is a superset
of the ioportcon's range.
ports_proper If true, use proper superset/subset operations.
No effect if not using set operations.
user The criteria to match the context's user.
user_regex If true, regular expression matching
will be used on the user.
role The criteria to match the context's role.
role_regex If true, regular expression matching
will be used on the role.
type_ The criteria to match the context's type.
type_regex If true, regular expression matching
will be used on the type.
range_ The criteria to match the context's range.
range_subset If true, the criteria will match if it is a subset
of the context's range.
range_overlap If true, the criteria will match if it overlaps
any of the context's range.
range_superset If true, the criteria will match if it is a superset
of the context's range.
range_proper If true, use proper superset/subset operations.
No effect if not using set operations.
N�_portsF� ports_subset�
ports_overlap�ports_superset� ports_proper)�returnc C s | j S �N)r )�self� r �</usr/lib64/python3.9/site-packages/setools/ioportconquery.py�ports? s zIoportconQuery.ports)�valuer c C sZ |rPt |� }|jdk s |jdk r.td�|���|j|jkrHtd�|���|| _nd | _d S )Nr z/Port numbers must be positive: {0.low}-{0.high}zAThe low port must be smaller than the high port: {0.low}-{0.high})r ZlowZhigh�
ValueError�formatr )r r Z
pending_portsr r r r C s � ��c s( t t| �j|fi |�� t�t�| _d S r )�superr �__init__�loggingZ getLogger�__name__�log)r �policy�kwargs�� __class__r r r T s zIoportconQuery.__init__c c s~ | j �d�| �� | j �d�| �� | �| j � | j�� D ]>}| jrdt|j| j| j | j
| j | j �sdq:| �
|j�srq:|V q:dS )z/Generator which yields all matching ioportcons.z"Generating results from {0.policy}z�Ports: {0.ports!r}, overlap: {0.ports_overlap}, subset: {0.ports_subset}, superset: {0.ports_superset}, proper: {0.ports_proper}N)r �infor �debugZ_match_context_debugr Z
ioportconsr r
r
r r r Z_match_context�context)r Z ioportconr r r �resultsX s$
� � zIoportconQuery.results)r �
__module__� __qualname__�__doc__r r r �__annotations__r
�boolr r r �propertyr �setterr �intr r r r& �
__classcell__r r r! r r s
) r )r �typingr r r Zmixinsr Z policyrepr r �queryr �utilr
r r r r r �<module> s