JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/firewall/core/io/__pycache__/firewalld_conf.cpython-39.opt-1.pyc
a
� iy? � @ s` d dl Zd dlZd dlZd dlZd dlmZ d dlmZ d dlm Z g d�Z
G dd� de �Z dS )� N)�config)�log)�errors)� DefaultZone� MinimalMark�
CleanupOnExit�CleanupModulesOnExit�Lockdown�
IPv6_rpfilter�IndividualCalls� LogDenied�AutomaticHelpers�FirewallBackend�FlushAllOnReload� RFC3964_IPv4�AllowZoneDrifting� ReloadPolicy�NftablesTableOwnerc @ st e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z e
dd� �Ze
dd� �ZdS )�firewalld_confc C s i | _ g | _|| _| �� d S �N)�_config�_deleted�filename�clear)�selfr � r �C/usr/lib/python3.9/site-packages/firewall/core/io/firewalld_conf.py�__init__& s zfirewalld_conf.__init__c C s i | _ g | _d S r )r r �r r r r r , s zfirewalld_conf.clearc C s | j �� g | _d S r )r r r r r r r �cleanup0 s
zfirewalld_conf.cleanupc C s | j �|�� �S r )r �get�strip)r �keyr r r r 4 s zfirewalld_conf.getc C s0 |� � }|� � | j|< || jv r,| j�|� d S r )r! r r �remove)r r" �valueZ_keyr r r �set7 s
zfirewalld_conf.setc C s8 d}| j �� D ]$\}}|r"|d7 }|d||f 7 }q|S )N� �
z%s=%s)r �items)r �sr" r$ r r r �__str__= s zfirewalld_conf.__str__c C s | � dtj� | � dttj�� | � dtjr0dnd� | � dtjrFdnd� | � dtjr\dnd� | � dtj� | � d tj r�dnd� | � d
tj
� | � d tj � | � d tj � | � d
tj
r�dnd� | � dtj� | � dtjr�dnd� | � dtjr�dnd� | � dtj�rdnd� d S )Nr r r �yes�nor r r
r r r
r r r r r r )r% r �
FALLBACK_ZONE�str�FALLBACK_MINIMAL_MARK�FALLBACK_CLEANUP_ON_EXIT� FALLBACK_CLEANUP_MODULES_ON_EXIT�FALLBACK_LOCKDOWN�FALLBACK_IPV6_RPFILTER�FALLBACK_INDIVIDUAL_CALLS�FALLBACK_LOG_DENIED�FALLBACK_AUTOMATIC_HELPERS�FALLBACK_FIREWALL_BACKEND� FALLBACK_FLUSH_ALL_ON_RELOAD�FALLBACK_RELOAD_POLICY�FALLBACK_RFC3964_IPV4� FALLBACK_ALLOW_ZONE_DRIFTINGZ FALLBACK_NFTABLES_TABLE_OWNERr r r r � set_defaultsE s$ �zfirewalld_conf.set_defaultsc C s< | � d�dkr8| � d�dv r8t�tjd| � d�� d���d S )Nr Ziptablesr
)z
loose-forwardzstrict-forwardzIPv6_rpfilter=z] is incompatible with FirewallBackend=iptables. This is a limitation of the iptables backend.)r r Z
FirewallErrorZ
INVALID_VALUEr r r r � sanity_checkY s
�zfirewalld_conf.sanity_checkc
C s� | � � zt| jd�}W n> tyV } z&t�d| j|� | �� � W Y d }~n
d }~0 0 |D ]�}|sj �q>|�� }t|�dk s\|d dv r�q\dd� |� d�D �}t|�d kr�t�d
|�� � q\nj|d t
vr�t�d |�� � q\nJ|d d k�rt�d
|�� � q\n(| j � |d �d u�r*t�d|�� � q\|d | j |d < q\|�
� | � d��srt�dtj� | �dttj�� | � d�}z t|� W nN ttf�y� |d u�r�t�d|�r�|nd tj� | �dttj�� Y n0 | � d�}|�r�|�� dv�r2|d u�rt�d|�r|nd tj� | �dtj�r,dnd� | � d�}|�rP|�� dv�r�|d u�rtt�d|�rj|nd tj� | �dtj�r�dnd� | � d�}|�r�|�� dv�r�|d u�r�t�d |�r�|nd tj� | �dtj�r�dnd� | � d �}|�r|�� tjv�r8|d u�r*t�d |�r |nd tj � | �d tj � | � d �}|�rV|�� dv�r�|d u�rzt�d |�rp|nd tj � | �d tj �r�dnd� | � d!�}|�r�|tj v�r�|d u�r�t�d"|tj � | �d!ttj �� | � d#�}|�r�|�� tj v�r0|d u�r t�d$|�r|nd tj!� | �d#ttj!�� | � d%�}|�rP|�� tj"v�r�|d u�rtt�d&|�rj|nd tj#� | �d%ttj#�� | � d'�}|�r�|�� dv�r�|d u�r�t�d(|�r�|nd tj$� | �d'ttj$�� | � d)�}z| �%|�}W n2 t�y$ t�d*|tj&� | �d)tj&� Y n0 | � d+�}|�rD|�� dv�rz|d u�rht�d,|�r^|nd tj'� | �d+ttj'�� | � d-�}|�r�|�� dv�r�|d u�r�t�d.|�r�|nd tj(� | �d-tj(�r�dnd� | �)� d S )/N�rzFailed to load '%s': %s� r )�#�;c S s g | ] }|� � �qS r )r! )�.0�xr r r �
<listcomp>v � z'firewalld_conf.read.<locals>.<listcomp>�=� z Invalid option definition: '%s'zInvalid option: '%s'r& zMissing value: '%s'z!Duplicate option definition: '%s'r z0DefaultZone is not set, using default value '%s'r z7MinimalMark '%s' is not valid, using default value '%d'r )r, �falser+ �truez7CleanupOnExit '%s' is not valid, using default value %sr+ r, r z>CleanupModulesOnExit '%s' is not valid, using default value %sr )r+ rI r, rH z2Lockdown '%s' is not valid, using default value %sr
z7IPv6_rpfilter '%s' is not valid, using default value %sr z9IndividualCalls '%s' is not valid, using default value %sr z3LogDenied '%s' is invalid, using default value '%s'r
z:AutomaticHelpers '%s' is not valid, using default value %sr z9FirewallBackend '%s' is not valid, using default value %sr z:FlushAllOnReload '%s' is not valid, using default value %sr z8ReloadPolicy '%s' is not valid, using default value '%s'r z6RFC3964_IPv4 '%s' is not valid, using default value %sr z;AllowZoneDrifting '%s' is not valid, using default value %s)*r �openr � Exceptionr �errorr< r! �len�split�
valid_keysr r �closer r- r% r. �int�
ValueError� TypeErrorZwarningr/ �lowerr0 r1 r2 ZIPV6_RPFILTER_VALUESr3 r4 ZLOG_DENIED_VALUESr5 ZAUTOMATIC_HELPERS_VALUESr6 ZFIREWALL_BACKEND_VALUESr7 r8 �_parse_reload_policyr9 r: r; r= )r �f�msg�lineZpairr$ r r r �readf s �
�
�
�
�
�
�
�
�
�
�
�
�
�zfirewalld_conf.readc
C s� t | j�dk rd S g }tj�tj�s2t�tjd� z.tj ddtj�
| j � tj� | j �dd�}W n4 t
y� } z t�d| � � W Y d }~n
d }~0 0 d}d}ztj| j dd d
�}W nR t
�y } z8tj�| j �r�t�d | j |f � � nd }W Y d }~�n<d }~0 0 |D �]*}|�s �q:|�d �}t |�dk �rL|�s6|�d � d
}n�|d dk�rtd}|�|� |�d � n�|�d�}t |�dk�r�d}|�|d � �q |d �� } |d �� }
| |v�r2| | jv �r| j| |
k�rd}|�d| | j| f � d
}n$| | jv �rd
}nd}|�|d � |�| � nd
}�q t | j�dk�r�| j�� D ]P\} }
| |v �rj�qT| dv �rx�qT|�s�|�d � d
}|�d| |
f � d
}�qT|�r�|�� |�� |�s�t�|j� d S tj�| j ��r@zt� | j d| j � W nD t
�y> } z*t�|j� t d| j |f ��W Y d }~n
d }~0 0 zt� |j| j � W nD t
�y� } z*t�|j� t d| j |f ��W Y d }~nd }~0 0 t� | j d� d S )Nr? i� Zwtz%s.F)�mode�prefix�dir�deletez!Failed to open temporary file: %sZrtzUTF-8)rZ �encodingzFailed to open '%s': %sr' Tr r@ rF rG z%s=%s
)r r
r z%s.oldzBackup of '%s' failed: %szFailed to create '%s': %si� ) rM r �os�path�existsr Z
ETC_FIREWALLD�mkdir�tempfileZNamedTemporaryFile�basenamer �dirnamerK r rL �iorJ r! �writerN r �appendr( rP r# �name�shutil�copy2�IOError�move�chmod) r ZdoneZ temp_filerW Zmodified�emptyrV rX �pr" r$ r r r rg s� �
� �
( (zfirewalld_conf.writec C s� d}dddd�}| r�| � � } | �� }|dv r@|D ] }|||< q0n�| �dd��d�D ]|}|� � }|sdqR|�dd��dd �}t|�d kr�d
}qR|d � � �� }||vr�d
}qR|d � � �� }|dvr�d
}qR|||< qR|s�td
��|S )NT�DROP)ZINPUTZFORWARDZOUTPUT)ZACCEPTZREJECTrq rA �,rF �:rG Fr r? zInvalid ReloadPolicy)r! �upper�replacerN rM rR )r$ Zvalid�result�v�k�aZa2r r r rU o s> �
z#firewalld_conf._parse_reload_policyc C s d� dd� | �� D ��S )Nrr c s s | ]\}}|� d |� �V qdS )rs Nr )rB rx rw r r r � <genexpr>� rE z8firewalld_conf._unparse_reload_policy.<locals>.<genexpr>)�joinr( )r$ r r r �_unparse_reload_policy� s z%firewalld_conf._unparse_reload_policyN)�__name__�
__module__� __qualname__r r r r r% r* r< r= rY rg � staticmethodrU r| r r r r r % s
j
%r )
Zos.pathr_ rf rc rj Zfirewallr Zfirewall.core.loggerr r rO �objectr r r r r �<module> s Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg