Name	Size	Mode	Actions
boolquery.cpython-36.opt-1.pyc	1848	0644	editdlrm
boolquery.cpython-36.pyc	1848	0644	editdlrm
boundsquery.cpython-36.opt-1.pyc	1709	0644	editdlrm
boundsquery.cpython-36.pyc	1709	0644	editdlrm
categoryquery.cpython-36.opt-1.pyc	1524	0644	editdlrm
categoryquery.cpython-36.pyc	1524	0644	editdlrm
commonquery.cpython-36.opt-1.pyc	1756	0644	editdlrm
commonquery.cpython-36.pyc	1756	0644	editdlrm
constraintquery.cpython-36.opt-1.pyc	4527	0644	editdlrm
constraintquery.cpython-36.pyc	4527	0644	editdlrm
defaultquery.cpython-36.opt-1.pyc	2170	0644	editdlrm
defaultquery.cpython-36.pyc	2170	0644	editdlrm
descriptors.cpython-36.opt-1.pyc	7533	0644	editdlrm
descriptors.cpython-36.pyc	7737	0644	editdlrm
devicetreeconquery.cpython-36.opt-1.pyc	2363	0644	editdlrm
devicetreeconquery.cpython-36.pyc	2363	0644	editdlrm
dta.cpython-36.opt-1.pyc	13550	0644	editdlrm
dta.cpython-36.pyc	13550	0644	editdlrm
exception.cpython-36.opt-1.pyc	8842	0644	editdlrm
exception.cpython-36.pyc	8842	0644	editdlrm
fsusequery.cpython-36.opt-1.pyc	2877	0644	editdlrm
fsusequery.cpython-36.pyc	2877	0644	editdlrm
genfsconquery.cpython-36.opt-1.pyc	3034	0644	editdlrm
genfsconquery.cpython-36.pyc	3034	0644	editdlrm
ibendportconquery.cpython-36.opt-1.pyc	3085	0644	editdlrm
ibendportconquery.cpython-36.pyc	3085	0644	editdlrm
ibpkeyconquery.cpython-36.opt-1.pyc	4318	0644	editdlrm
ibpkeyconquery.cpython-36.pyc	4318	0644	editdlrm
infoflow.cpython-36.opt-1.pyc	11597	0644	editdlrm
infoflow.cpython-36.pyc	11597	0644	editdlrm
initsidquery.cpython-36.opt-1.pyc	2465	0644	editdlrm
initsidquery.cpython-36.pyc	2465	0644	editdlrm
iomemconquery.cpython-36.opt-1.pyc	3758	0644	editdlrm
iomemconquery.cpython-36.pyc	3758	0644	editdlrm
ioportconquery.cpython-36.opt-1.pyc	3761	0644	editdlrm
ioportconquery.cpython-36.pyc	3761	0644	editdlrm
mixins.cpython-36.opt-1.pyc	6462	0644	editdlrm
mixins.cpython-36.pyc	6462	0644	editdlrm
mlsrulequery.cpython-36.opt-1.pyc	3025	0644	editdlrm
mlsrulequery.cpython-36.pyc	3025	0644	editdlrm
netifconquery.cpython-36.opt-1.pyc	2538	0644	editdlrm
netifconquery.cpython-36.pyc	2538	0644	editdlrm
nodeconquery.cpython-36.opt-1.pyc	3614	0644	editdlrm
nodeconquery.cpython-36.pyc	3614	0644	editdlrm
objclassquery.cpython-36.opt-1.pyc	2935	0644	editdlrm
objclassquery.cpython-36.pyc	2935	0644	editdlrm
pcideviceconquery.cpython-36.opt-1.pyc	2716	0644	editdlrm
pcideviceconquery.cpython-36.pyc	2716	0644	editdlrm
permmap.cpython-36.opt-1.pyc	11948	0644	editdlrm
permmap.cpython-36.pyc	12190	0644	editdlrm
pirqconquery.cpython-36.opt-1.pyc	2643	0644	editdlrm
pirqconquery.cpython-36.pyc	2643	0644	editdlrm
polcapquery.cpython-36.opt-1.pyc	1316	0644	editdlrm
polcapquery.cpython-36.pyc	1316	0644	editdlrm
portconquery.cpython-36.opt-1.pyc	4309	0644	editdlrm
portconquery.cpython-36.pyc	4309	0644	editdlrm
query.cpython-36.opt-1.pyc	1003	0644	editdlrm
query.cpython-36.pyc	1003	0644	editdlrm
rbacrulequery.cpython-36.opt-1.pyc	3835	0644	editdlrm
rbacrulequery.cpython-36.pyc	3835	0644	editdlrm
rolequery.cpython-36.opt-1.pyc	1988	0644	editdlrm
rolequery.cpython-36.pyc	1988	0644	editdlrm
sensitivityquery.cpython-36.opt-1.pyc	2166	0644	editdlrm
sensitivityquery.cpython-36.pyc	2166	0644	editdlrm
terulequery.cpython-36.opt-1.pyc	6280	0644	editdlrm
terulequery.cpython-36.pyc	6280	0644	editdlrm
typeattrquery.cpython-36.opt-1.pyc	2141	0644	editdlrm
typeattrquery.cpython-36.pyc	2141	0644	editdlrm
typequery.cpython-36.opt-1.pyc	2873	0644	editdlrm
typequery.cpython-36.pyc	2873	0644	editdlrm
userquery.cpython-36.opt-1.pyc	3723	0644	editdlrm
userquery.cpython-36.pyc	3723	0644	editdlrm
util.cpython-36.opt-1.pyc	4701	0644	editdlrm
util.cpython-36.pyc	4701	0644	editdlrm
__init__.cpython-36.opt-1.pyc	2392	0644	editdlrm
__init__.cpython-36.pyc	2392	0644	editdlrm

3 ���^�@sxdd
lZdd
l
Z
ddlmZmZ
ddlmZ
ddlmZm Z
ddl mZ
ddlm Z
ddlmZ
Gd d �d ee e �Zd
S)�N�
)�CriteriaDescriptor�CriteriaSetDescriptor)
�ConstraintUseError)� MatchObjClass�MatchPermission)
�ConstraintRuletype)
�PolicyQuery)
�match_in_setcsleZ
dZd
Zeed�
Zedd�ZdZ edd�Z dZdZed d �Z dZdZ�f
dd�Zd d�Zdd�Z�ZS)�ConstraintQuerya� Query constraint rules, (mls)constrain/(mls)validatetrans. Parameter: policy The policy to query. Keyword Parameters/Class attributes: ruletype The list of rule type(s) to match. tclass The object class(es) to match. tclass_regex If true, use a regular expression for matching the rule's object class. perms The permission(s) to match. perms_equal If true, the permission set of the rule must exactly match the permissions criteria. If false, any set intersection will match. perms_regex If true, regular expression matching will be used on the permission names instead of set logic. role The name of the role to match in the constraint expression. role_indirect If true, members of an attribute will be matched rather than the attribute itself. role_regex If true, regular expression matching will be used on the role. type_ The name of the type/attribute to match in the constraint expression. type_indirect If true, members of an attribute will be matched rather than the attribute itself. type_regex If true, regular expression matching will be used on the type/attribute. user The name of the user to match in the constraint expression. user_regex If true, regular expression matching will be used on the user. )
� enum_class� user_regexZlookup_userF� role_regexZlookup_roleT� type_regexZlookup_type_or_attrcs$tt
|�j|
f
|�

tjt�
|_dS)
N)�superr�__init__�loggingZ getLogger�__name__�log)�self�policy�kwargs)
� __class__��'/usr/lib64/python3.6/constraintquery.pyrNs

zConstraintQuery.__init__cCs8|r(t�}x |
D]}|j
|j��

qWn|
}t|||�S)
ay
Match roles/types/users in a constraint expression, optionally by expanding the contents of attributes. Parameters: expr The expression to match. criteria The criteria to match. indirect If attributes in the expression should be expanded. regex If regular expression matching should be used. )�set�update�expandr )r�exprZcriteriaZindirectZregex�obj�itemrrr�_match_exprRs


zConstraintQuery._match_exprc
csJ
|jj
d
j|�
�

|jjdj|�
�

|j|j�

|j|j�

|jjdj|�
�

|jjdj|�
�

|jjdj|�
�

x�|jj�D]�}
|jr�|
j|jkr�q~|j |
�
s�q~y|j |
�
s�w~Wntk r�


w~YnX|jr�|j |
jj|j|j|j�r�q~|j�
r|j |
jj|j|j|j��
rq~|j�
r<|j |
jj|jd|j��
rs