diff options
Diffstat (limited to 'lib/python2.7/site-packages/setools/boundsquery.py')
-rwxr-xr-x | lib/python2.7/site-packages/setools/boundsquery.py | 72 |
1 files changed, 72 insertions, 0 deletions
diff --git a/lib/python2.7/site-packages/setools/boundsquery.py b/lib/python2.7/site-packages/setools/boundsquery.py new file mode 100755 index 0000000..a1ec87d --- /dev/null +++ b/lib/python2.7/site-packages/setools/boundsquery.py @@ -0,0 +1,72 @@ +# Copyright 2016, Tresys Technology, LLC +# +# This file is part of SETools. +# +# SETools is free software: you can redistribute it and/or modify +# it under the terms of the GNU Lesser General Public License as +# published by the Free Software Foundation, either version 2.1 of +# the License, or (at your option) any later version. +# +# SETools is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Lesser General Public License for more details. +# +# You should have received a copy of the GNU Lesser General Public +# License along with SETools. If not, see +# <http://www.gnu.org/licenses/>. +# +import logging +import re + +from .descriptors import CriteriaDescriptor, CriteriaSetDescriptor +from .query import PolicyQuery +from .util import match_regex + + +class BoundsQuery(PolicyQuery): + + """ + Query *bounds statements. + + Parameter: + policy The policy to query. + + Keyword Parameters/Class attributes: + ruletype The rule type(s) to match. + """ + + ruletype = CriteriaSetDescriptor(lookup_function="validate_bounds_ruletype") + parent = CriteriaDescriptor("parent_regex") + parent_regex = False + child = CriteriaDescriptor("child_regex") + child_regex = False + + def __init__(self, policy, **kwargs): + super(BoundsQuery, self).__init__(policy, **kwargs) + self.log = logging.getLogger(__name__) + + def results(self): + """Generator which yields all matching *bounds statements.""" + self.log.info("Generating bounds results from {0.policy}".format(self)) + self.log.debug("Ruletypes: {0.ruletype}".format(self)) + self.log.debug("Parent: {0.parent!r}, regex: {0.parent_regex}".format(self)) + self.log.debug("Child: {0.child!r}, regex: {0.child_regex}".format(self)) + + for b in self.policy.bounds(): + if self.ruletype and b.ruletype not in self.ruletype: + continue + + if self.parent and not match_regex( + b.parent, + self.parent, + self.parent_regex): + continue + + if self.child and not match_regex( + b.child, + self.child, + self.child_regex): + continue + + yield b |