آگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآآگآ 3 ي«„^م@sxddlZddlZddlmZmZddlmZddlmZm Z ddl mZddlm Z ddlmZGd d „d ee e ƒZdS)éNé)عCriteriaDescriptorعCriteriaSetDescriptor)عConstraintUseError)ع MatchObjClassعMatchPermission)عConstraintRuletype)عPolicyQuery)عmatch_in_setcsleZdZdZeedچZeddƒZdZ eddƒZ dZdZed d ƒZ dZdZ‡fdd„Zd d„Zdd„Z‡ZS)عConstraintQuerya Query constraint rules, (mls)constrain/(mls)validatetrans. Parameter: policy The policy to query. Keyword Parameters/Class attributes: ruletype The list of rule type(s) to match. tclass The object class(es) to match. tclass_regex If true, use a regular expression for matching the rule's object class. perms The permission(s) to match. perms_equal If true, the permission set of the rule must exactly match the permissions criteria. If false, any set intersection will match. perms_regex If true, regular expression matching will be used on the permission names instead of set logic. role The name of the role to match in the constraint expression. role_indirect If true, members of an attribute will be matched rather than the attribute itself. role_regex If true, regular expression matching will be used on the role. type_ The name of the type/attribute to match in the constraint expression. type_indirect If true, members of an attribute will be matched rather than the attribute itself. type_regex If true, regular expression matching will be used on the type/attribute. user The name of the user to match in the constraint expression. user_regex If true, regular expression matching will be used on the user. )ع enum_classع user_regexZlookup_userFع role_regexZlookup_roleTع type_regexZlookup_type_or_attrcs$tt|ƒj|f|ژtjtƒ|_dS)N)عsuperrع__init__عloggingZ getLoggerع__name__عlog)عselfعpolicyعkwargs)ع __class__©ْ'/usr/lib64/python3.6/constraintquery.pyrNszConstraintQuery.__init__cCs8|r(tƒ}x |D]}|j|jƒƒqWn|}t|||ƒS)ay Match roles/types/users in a constraint expression, optionally by expanding the contents of attributes. Parameters: expr The expression to match. criteria The criteria to match. indirect If attributes in the expression should be expanded. regex If regular expression matching should be used. )عsetعupdateعexpandr )rعexprZcriteriaZindirectZregexعobjعitemrrrع_match_exprRs zConstraintQuery._match_exprccsJ|jjdj|ƒƒ|jjdj|ƒƒ|j|jƒ|j|jƒ|jjdj|ƒƒ|jjdj|ƒƒ|jjdj|ƒƒxز|jjƒD]ؤ}|jr–|j|jkr–q~|j |ƒs¢q~y|j |ƒs°w~Wntk rبw~YnX|jrî|j |jj|j|j|jƒrîq~|jگr|j |jj|j|j|jƒگrq~|jگr<|j |jj|jd|jƒگrs