shell bypass 403
a
q�qe� � @ s� d dl Z d dlZd dlmZmZ d dlmZmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ee je jf ZG dd � d e
e�ZdS )
� N)�AF_INET�AF_INET6)�Iterable�Optional�Union� )� MatchContext)�Nodecon�NodeconIPVersion)� PolicyQueryc s� e Zd ZU dZdZee ed< dZe ed< dZ
ee ed< e ee d�dd ��Z
e
jeeee f dd
�d d ��Z
e ee d�d d
��Zejeeeef dd
�dd
��Zdd�� fdd� Zee d�dd�Z� ZS )� NodeconQueryaI
Query nodecon statements.
Parameter:
policy The policy to query.
Keyword Parameters/Class attributes:
network The IPv4/IPv6 address or IPv4/IPv6 network address
with netmask, e.g. 192.168.1.0/255.255.255.0 or
"192.168.1.0/24".
network_overlap If true, the net will match if it overlaps with
the nodecon's network instead of equality.
ip_version The IP version of the nodecon to match. (socket.AF_INET
for IPv4 or socket.AF_INET6 for IPv6)
user The criteria to match the context's user.
user_regex If true, regular expression matching
will be used on the user.
role The criteria to match the context's role.
role_regex If true, regular expression matching
will be used on the role.
type_ The criteria to match the context's type.
type_regex If true, regular expression matching
will be used on the type.
range_ The criteria to match the context's range.
range_subset If true, the criteria will match if it is a subset
of the context's range.
range_overlap If true, the criteria will match if it overlaps
any of the context's range.
range_superset If true, the criteria will match if it is a superset
of the context's range.
range_proper If true, use proper superset/subset operations.
No effect if not using set operations.
N�_networkF�network_overlap� _ip_version)�returnc C s | j S �N)r ��self� r �:/usr/lib64/python3.9/site-packages/setools/nodeconquery.py�
ip_version; s zNodeconQuery.ip_version)�valuer c C s |rt �|�| _nd | _d S r )r
�lookupr �r r r r r r ? s c C s | j S r )r
r r r r �networkF s zNodeconQuery.networkc C s |rt �|�| _nd | _d S r )� ipaddressZ
ip_networkr
r r r r r J s c s( t t| �j|fi |�� t�t�| _d S r )�superr �__init__�loggingZ getLogger�__name__�log)r �policy�kwargs�� __class__r r r Q s zNodeconQuery.__init__c c s� | j �d�| �� | j �d�| �� | j �d�| �� | �| j � | j�� D ]X}| jr|| jrn| j� |j�s|qLn|j| jks|qL| j
r�| j
|j
kr�qL| � |j �s�qL|V qLdS )z-Generator which yields all matching nodecons.z*Generating nodecon results from {0.policy}z4Network: {0.network!r}, overlap: {0.network_overlap}z IP Version: {0.ip_version!r}N)
r �info�format�debugZ_match_context_debugr! Znodeconsr r Zoverlapsr Z_match_context�context)r Znodeconr r r �resultsU s zNodeconQuery.results)r �
__module__� __qualname__�__doc__r
r � AnyIPNetwork�__annotations__r �boolr r
�propertyr �setterr �strr r r r r) �
__classcell__r r r# r r s
" r )r r Zsocketr r �typingr r r Zmixinsr Z policyrepr r
�queryr Z IPv4NetworkZ IPv6Networkr- r r r r r �<module> s