509318396 ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 3 ^@sZddlZddlZddlmZmZddlmZddlmZddl m Z Gdddee Z dS) N)AF_INETAF_INET6) MatchContext)NodeconIPVersion) PolicyQuerycsheZdZdZdZdZdZeddZej ddZeddZ e j d dZ fd d Z d d Z Z S) NodeconQueryaI Query nodecon statements. Parameter: policy The policy to query. Keyword Parameters/Class attributes: network The IPv4/IPv6 address or IPv4/IPv6 network address with netmask, e.g. 192.168.1.0/255.255.255.0 or "192.168.1.0/24". network_overlap If true, the net will match if it overlaps with the nodecon's network instead of equality. ip_version The IP version of the nodecon to match. (socket.AF_INET for IPv4 or socket.AF_INET6 for IPv6) user The criteria to match the context's user. user_regex If true, regular expression matching will be used on the user. role The criteria to match the context's role. role_regex If true, regular expression matching will be used on the role. type_ The criteria to match the context's type. type_regex If true, regular expression matching will be used on the type. range_ The criteria to match the context's range. range_subset If true, the criteria will match if it is a subset of the context's range. range_overlap If true, the criteria will match if it overlaps any of the context's range. range_superset If true, the criteria will match if it is a superset of the context's range. range_proper If true, use proper superset/subset operations. No effect if not using set operations. NFcCs|jS)N) _ip_version)selfr $/usr/lib64/python3.6/nodeconquery.py ip_versionFszNodeconQuery.ip_versioncCs|rtj||_nd|_dS)N)rlookupr )r valuer r r r JscCs|jS)N)_network)r r r r networkQszNodeconQuery.networkcCs|rtj||_nd|_dS)N) ipaddressZ ip_networkr)r rr r r rUsc s$tt|j|f|tjt|_dS)N)superr__init__loggingZ getLogger__name__log)r policykwargs) __class__r r r\szNodeconQuery.__init__ccs|jjdj||jjdj||jjdj||j|jxf|jjD]X}|jr~|jrp|jj |js~qNn|j|jks~qN|j r|j |j krqN|j |j sqN|VqNWdS)z-Generator which yields all matching nodecons.z*Generating nodecon results from {0.policy}z4Network: {0.network!r}, overlap: {0.network_overlap}zIP Version: {0.ip_version!r}N) rinfoformatdebugZ_match_context_debugrZnodeconsrnetwork_overlapZoverlapsr Z_match_contextcontext)r Znodeconr r r results`s    zNodeconQuery.results)r __module__ __qualname____doc__rrr propertyr setterrrr __classcell__r r )rr rs"   r) rrZsocketrrZmixinsrZ policyreprZqueryrrr r r r s