Name	Size	Mode	Actions
boolquery.cpython-39.opt-1.pyc	2101	0644	editdlrm
boolquery.cpython-39.pyc	2101	0644	editdlrm
boundsquery.cpython-39.opt-1.pyc	1883	0644	editdlrm
boundsquery.cpython-39.pyc	1883	0644	editdlrm
categoryquery.cpython-39.opt-1.pyc	1682	0644	editdlrm
categoryquery.cpython-39.pyc	1682	0644	editdlrm
commonquery.cpython-39.opt-1.pyc	1912	0644	editdlrm
commonquery.cpython-39.pyc	1912	0644	editdlrm
constraintquery.cpython-39.opt-1.pyc	4758	0644	editdlrm
constraintquery.cpython-39.pyc	4758	0644	editdlrm
defaultquery.cpython-39.opt-1.pyc	2363	0644	editdlrm
defaultquery.cpython-39.pyc	2363	0644	editdlrm
descriptors.cpython-39.opt-1.pyc	10120	0644	editdlrm
descriptors.cpython-39.pyc	10313	0644	editdlrm
devicetreeconquery.cpython-39.opt-1.pyc	2590	0644	editdlrm
devicetreeconquery.cpython-39.pyc	2590	0644	editdlrm
dta.cpython-39.opt-1.pyc	15613	0644	editdlrm
dta.cpython-39.pyc	15613	0644	editdlrm
exception.cpython-39.opt-1.pyc	9323	0644	editdlrm
exception.cpython-39.pyc	9323	0644	editdlrm
fsusequery.cpython-39.opt-1.pyc	3042	0644	editdlrm
fsusequery.cpython-39.pyc	3042	0644	editdlrm
genfsconquery.cpython-39.opt-1.pyc	3276	0644	editdlrm
genfsconquery.cpython-39.pyc	3276	0644	editdlrm
ibendportconquery.cpython-39.opt-1.pyc	3351	0644	editdlrm
ibendportconquery.cpython-39.pyc	3351	0644	editdlrm
ibpkeyconquery.cpython-39.opt-1.pyc	4763	0644	editdlrm
ibpkeyconquery.cpython-39.pyc	4763	0644	editdlrm
infoflow.cpython-39.opt-1.pyc	13047	0644	editdlrm
infoflow.cpython-39.pyc	13047	0644	editdlrm
initsidquery.cpython-39.opt-1.pyc	2618	0644	editdlrm
initsidquery.cpython-39.pyc	2618	0644	editdlrm
iomemconquery.cpython-39.opt-1.pyc	4096	0644	editdlrm
iomemconquery.cpython-39.pyc	4096	0644	editdlrm
ioportconquery.cpython-39.opt-1.pyc	4100	0644	editdlrm
ioportconquery.cpython-39.pyc	4100	0644	editdlrm
mixins.cpython-39.opt-1.pyc	6947	0644	editdlrm
mixins.cpython-39.pyc	6947	0644	editdlrm
mlsrulequery.cpython-39.opt-1.pyc	3290	0644	editdlrm
mlsrulequery.cpython-39.pyc	3290	0644	editdlrm
netifconquery.cpython-39.opt-1.pyc	2696	0644	editdlrm
netifconquery.cpython-39.pyc	2696	0644	editdlrm
nodeconquery.cpython-39.opt-1.pyc	4032	0644	editdlrm
nodeconquery.cpython-39.pyc	4032	0644	editdlrm
objclassquery.cpython-39.opt-1.pyc	3188	0644	editdlrm
objclassquery.cpython-39.pyc	3188	0644	editdlrm
pcideviceconquery.cpython-39.opt-1.pyc	2990	0644	editdlrm
pcideviceconquery.cpython-39.pyc	2990	0644	editdlrm
permmap.cpython-39.opt-1.pyc	12820	0644	editdlrm
permmap.cpython-39.pyc	13054	0644	editdlrm
pirqconquery.cpython-39.opt-1.pyc	2912	0644	editdlrm
pirqconquery.cpython-39.pyc	2912	0644	editdlrm
polcapquery.cpython-39.opt-1.pyc	1482	0644	editdlrm
polcapquery.cpython-39.pyc	1482	0644	editdlrm
portconquery.cpython-39.opt-1.pyc	4753	0644	editdlrm
portconquery.cpython-39.pyc	4753	0644	editdlrm
query.cpython-39.opt-1.pyc	1272	0644	editdlrm
query.cpython-39.pyc	1272	0644	editdlrm
rbacrulequery.cpython-39.opt-1.pyc	4352	0644	editdlrm
rbacrulequery.cpython-39.pyc	4352	0644	editdlrm
rolequery.cpython-39.opt-1.pyc	2190	0644	editdlrm
rolequery.cpython-39.pyc	2190	0644	editdlrm
sensitivityquery.cpython-39.opt-1.pyc	2402	0644	editdlrm
sensitivityquery.cpython-39.pyc	2402	0644	editdlrm
terulequery.cpython-39.opt-1.pyc	6703	0644	editdlrm
terulequery.cpython-39.pyc	6703	0644	editdlrm
typeattrquery.cpython-39.opt-1.pyc	2352	0644	editdlrm
typeattrquery.cpython-39.pyc	2352	0644	editdlrm
typequery.cpython-39.opt-1.pyc	3146	0644	editdlrm
typequery.cpython-39.pyc	3146	0644	editdlrm
userquery.cpython-39.opt-1.pyc	4020	0644	editdlrm
userquery.cpython-39.pyc	4020	0644	editdlrm
util.cpython-39.opt-1.pyc	7723	0644	editdlrm
util.cpython-39.pyc	7723	0644	editdlrm
__init__.cpython-39.opt-1.pyc	3756	0644	editdlrm
__init__.cpython-39.pyc	3756	0644	editdlrm

a q�qe]�@s
dd
lm
Z

ddlmZmZmZmZ
ddlmZm Z
ddl mZmZm Z
eed�dd�Zeed �d d�Zeed�dd �Zeeed�dd�Zeeed�dd�Zeeeeed�dd�Zeeeeeed�dd�Zd"eeeeeee dd�dd�Zd#eeeeeefd�d d!�ZdS)$�)
�suppress)�Iterable�List�Optional�Tuple�
)�InvalidPermission�NoCommon)�Level�ObjClass� SELinuxPolicy)�regex�returncCs"|rt|
�
t|�
�
�
S||
kSd
S)z� Match the object with optional regular expression. Parameters: obj The object to match. criteria The criteria to match. regex If regular expression matching should be used. N)�bool�search�str��obj�criteriar �r�2/usr/lib64/python3.9/site-packages/setools/util.py�match_regex s 
r)�equalrcCs|r||
kSt|�
|
�
�
Sd
S)a
Match the object (a set) with optional set equality. Parameters: obj The object to match. (a set) criteria The criteria to match. (a set) equal If set equality should be used. Otherwise any set intersection will match. N)r�intersection)rrrrrr� match_sets
rcs&|rt�f
d
d�|D�
�
S�|vSdS)z� Match if the criteria is in the list, with optional regular expression matching. Parameters: obj The object to match. criteria The criteria to match. regex If regular expression matching should be used. c
sg|]}
��t
|
�
�
r|
�qSr�rr��.0�
m�
rrr� :�z match_in_set..N)
rrrrr�match_in_set.s
r")�indirectr rcsN|r>|r"t�f
d
d�|�
�D�
�
Stt��
��
�|�
��
�
Snt|�|�SdS)aK
Match the object with optional regular expression and indirection. Parameters: obj The object to match. criteria The criteria to match. regex If regular expression matching should be used. indirect If object indirection should be used, e.g. expanding an attribute. c
sg|]}
��t
|
�
�
r|
�qSrr)r�
orrrr Mr!z(match_indirect_regex..N)r�expand�setrr)rrr#r rrr�match_indirect_regex?s 

r')rr rcs.|rt�f
d
d�|D�
�
St
|t��
|�SdS)a" Match the object (a set) with either set comparisons (equality or intersection) or by regex matching of the set members. Regular expression matching will override the set equality option. Parameters: obj The object to match. (a set) criteria The criteria to match. equal If set equality should be used. Otherwise any set intersection will match. Ignored if regular expression matching is used. regex If regular expression matching should be used. c
sg|]}
��t
|
�
�
r|
�qSrrrrrrr er!z&match_regex_or_set..N)rrr&)rrrr rrr�match_regex_or_setTs
r()�subset�overlap�superset�properrcCs
|rX|j|
jk
o|j
k
n
pV|j|
j
k
o:|j
k
n
pV|
j|jk
oV|j
|
j
k
S|r�|r�|j|
jkrx|
j
|j
k
p�|j|
jk
o�|
j
|j
kS|j|
jk
o�|
j
|j
k
Snp|�
r|r�|
j|jkr�|j
|
j
k
p�|
j|jk
o�|j
|
j
kS|
j|jk
�o�|j
|
j
k
Sn|
j|jk�
o|j
|
j
kSd
S)aR Match ranges of objects. obj An object with attributes named "low" and "high", representing the range. criteria An object with attributes named "low" and "high", representing the criteria. subset If true, the criteria will match if it is a subset obj's range. overlap If true, the criteria will match if it overlaps any of the obj's range. superset If true, the criteria will match if it is a superset of the obj's range. proper If true, use proper superset/subset operations. No effect if not using set operations. N)ZlowZhigh)rrr)r*r+r,rrr�match_rangejs& 

��


�



�r-)rr�dom�domby�incomprcCs0|r|
|kS|r|
|k
S|r$|
|AS|
|kSd
S)aX
Match the an MLS level. obj The level to match. criteria The criteria to match. (a level) dom If true, the criteria will match if it dominates obj. domby If true, the criteria will match if it is dominated by obj. incomp If true, the criteria will match if it is incomparable to obj. Nr)rrr.r/r0rrr�match_level�s




r1N)�perms�tclass�policyrc Cs�|std
�
�
|
r$t
dd�|
D�
�
}n|r6t
|���
}ntd�
�
t
dd�|D�
�
}|D]J}||j8}tt�
�
||jj8}Wd�
n1s�0


Y
|sT
q�qT|
r�td�d� |�
�
�
�
ntd �d� |�
�
�
�
dS) a Validate that each permission is valid for at least one of specified object classes. If no classes are specified, then all classes in the policy are checked. A tclass or policy must be specified. Parameters: perms A container of str permission names. Keyword Parameters. tclass An iterable of 1 or more ObjClass. policy A SELinuxPolicy Exceptions: ValueError Invalid parameter. InvalidPermission One or more permissions is invalid. Return: None zNo permissions specified.c
ss|] }
|
V
qdS�
Nr)r�
crrr� �r!z%validate_perms_any..z(No object class(es) or policy specified.c
ss|] }
|
V
qdSr5r)r�
prrrr7�r!Nz7Permission(s) do not exist in the specified classes: {}z, z(Permission(s) do not exist any class: {}) � ValueErrorr&�classesr2rr �commonr�format�join)r2r3r4Zselected_classesZinvalidr6rrr�validate_perms_any�s2





*



��

��r>�
,)r2� separatorrcCs�g}|�|
�
D]�}|�d
�
}t
|�
dkrP|�t|ddd�t|ddd�f�

qt
|�
dkr�|�t|ddd�t|ddd�f�

qtd�|�
�
�
q|S)a�
Create a extended permission list of ranges from a string representation of ranges. This does not do any checking for out-of-range values. Parameters: perms A string representation of integer extended permissions, such as "0x08,0x30-0x40,0x55,0x60-0x65" Keyword Parameters: separator The separator between permissions/permission ranges. Default is "," Return: List[Tuple[int, int]] equivalent of the permissions. �
-�r
�)
�baserz Unable to parse "{}" for xperms.)�split�len�append�intr9r<)r2r@Zxperms�item�rngrrr�xperm_str_to_tuple_ranges�s



(

(rK)NN)
r?)� contextlibr�typingrrrr� exceptionrr Z policyrepr rrrrrr"r'r(r-r1rr>rHrKrrrr�s 

!
�
�6