a qqe@szddlZddlZddlmZddlmZmZddlmZddl m Z ddl m Z ddl mZmZmZGd d d ee ZdS) N)Iterable)CriteriaDescriptorCriteriaSetDescriptor) MatchName)User) PolicyQuery)match_regex_or_set match_level match_rangecseZdZUdZeddZdZeed<dZ eed<dZ eed<eddZ dZ eed <dZ eed <dZeed <dZeed <ed dZdZeed<dZeed <ddfdd ZeedddZZS) UserQueryaf Query SELinux policy users. Parameter: policy The policy to query. Keyword Parameters/Class attributes: name The user name to match. name_regex If true, regular expression matching will be used on the user names. roles The attribute to match. roles_equal If true, only types with role sets that are equal to the criteria will match. Otherwise, any intersection will match. roles_regex If true, regular expression matching will be used on the role names instead of set logic. level The criteria to match the user's default level. level_dom If true, the criteria will match if it dominates the user's default level. level_domby If true, the criteria will match if it is dominated by the user's default level. level_incomp If true, the criteria will match if it is incomparable to the user's default level. range_ The criteria to match the user's range. range_subset If true, the criteria will match if it is a subset of the user's range. range_overlap If true, the criteria will match if it overlaps any of the user's range. range_superset If true, the criteria will match if it is a superset of the user's range. range_proper If true, use proper superset/subset operations. No effect if not using set operations. Z lookup_level)Zlookup_functionF level_dom level_domby level_incompZ lookup_range range_overlap range_subsetrange_superset range_proper roles_regexZ lookup_role roles_equalN)returnc s(tt|j|fi|tt|_dS)N)superr __init__loggingZ getLogger__name__log)selfpolicykwargs __class__7/usr/lib64/python3.9/site-packages/setools/userquery.pyrCszUserQuery.__init__ccs|jd|||j|jd||jd||jd||jD]|}||snq^|jrt |j|j|j |j sq^|j rt |j|j |j|j|jsq^|jrt|j|j|j|j|j|jsq^|Vq^dS)z*Generator which yields all matching users.z'Generating user results from {0.policy}z?Roles: {0.roles!r}, regex: {0.roles_regex}, eq: {0.roles_equal}zXLevel: {0.level!r}, dom: {0.level_dom}, domby: {0.level_domby}, incomp: {0.level_incomp}zRange: {0.range_!r}, subset: {0.range_subset}, overlap: {0.range_overlap}, superset: {0.range_superset}, proper: {0.range_proper}N)rinfoformatZ_match_name_debugdebugrZusersZ _match_namerolesr rrlevelr Z mls_levelr rrrange_r Z mls_rangerrrr)ruserr!r!r"resultsGsN     zUserQuery.results)r __module__ __qualname____doc__rr'r bool__annotations__rrr(rrrrrr&rrrrrr* __classcell__r!r!rr"r s $            r )rretypingrZ descriptorsrrZmixinsrZ policyreprqueryrutilr r r r r!r!r!r"s