JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/firewall/core/io/__pycache__/lockdown_whitelist.cpython-39.pyc
a
� i�/ � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZm Z m
Z
d dl m Z d dl
mZmZmZmZmZ d dlmZ d dlmZ G dd � d e �ZG d
d � d e�ZdS ) � N)�config)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�log)�uniqify� checkUser�checkUid� checkCommand� checkContext)�errors)�
FirewallErrorc @ s e Zd Zdd� Zdd� ZdS )�!lockdown_whitelist_ContentHandlerc C s t �| |� d| _d S )NF)r �__init__� whitelist)�self�item� r �G/usr/lib/python3.9/site-packages/firewall/core/io/lockdown_whitelist.pyr % s z*lockdown_whitelist_ContentHandler.__init__c C sV t �| ||� | j�||� |dkr@| jr6ttjd��d| _�n|dkrr| js\t� d� d S |d }| j�
|� n�|dkr�| js�t� d� d S d |v r�zt |d �}W n& t y� t� d
|d � Y d S 0 | j�
|� nd|v r�| j�|d � n\|d k�r@| j�st� d � d S d
|v�r.t� d� d S | j�|d
� nt� d| � d S d S )Nr zMore than one whitelist.T�commandz)Parse Error: command outside of whitelist�name�userz&Parse Error: user outside of whitelist�idz"Parse Error: %s is not a valid uid�selinuxz)Parse Error: selinux outside of whitelist�contextzParse Error: no contextzUnknown XML element %s)r � startElementr Zparser_check_element_attrsr r
r Z PARSE_ERRORr �error� add_command�int�
ValueError�add_uid�add_user� add_context)r r �attrsr �uidr r r r ) sN �
�
z.lockdown_whitelist_ContentHandler.startElementN)�__name__�
__module__� __qualname__r r r r r r r $ s r c s, e Zd ZdZddgfddgfddgfddgffZdZd gZd
d gd
d gd
�Zddd giZ� fdd�Z dd� Z
dd� Z dd� Z dd� Z
dd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Zd4d5� Zd6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!� Z"S )B�LockdownWhitelistz LockdownWhitelist class �commands� �contexts�users�uidsr z
(asasasai)�_Nr r )r r r r r r c s6 t t| ��� || _d | _g | _g | _g | _g | _d S �N) �superr( r �filename�parserr) r+ r, r- )r r1 �� __class__r r r m s zLockdownWhitelist.__init__c C s� |dv r,|D ] }| � ||d d� ||� q nv|dkrJt|�s�ttj|��nX|dkrht|�s�ttj|��n:|dkr�t|�s�ttj|��n |dkr�t |�s�ttj
|��d S )N�r) r+ r, r- ���r r r r$ ) �
_check_configr
r
r �INVALID_COMMANDr �INVALID_CONTEXTr � INVALID_USERr � INVALID_UID)r r r Z
all_configZall_io_objects�xr r r r7 x s z LockdownWhitelist._check_configc C s4 | j d d �= | jd d �= | jd d �= | jd d �= d S r/ r5 �r r r r �cleanup� s zLockdownWhitelist.cleanupc C s@ t |�sttj|��|| jvr,| j�|� nttjd| ��d S )Nz!Command "%s" already in whitelist)r
r
r r8 r) �append�ALREADY_ENABLED�r r r r r r � s
�z LockdownWhitelist.add_commandc C s, || j v r| j �|� nttjd| ��d S )Nz Command "%s" not in whitelist.)r) �remover
r � NOT_ENABLEDrA r r r �remove_command� s
�z LockdownWhitelist.remove_commandc C s
|| j v S r/ �r) rA r r r � has_command� s z LockdownWhitelist.has_commandc C sB | j D ]6}|�d�r.|�|d d� �r< dS q||kr dS qdS )N�*r6 TF)r) �endswith�
startswith)r r Z_commandr r r �
match_command� s
z LockdownWhitelist.match_commandc C s | j S r/ rE r= r r r � get_commands� s z LockdownWhitelist.get_commandsc C sD t |�sttjt|���|| jvr0| j�|� nttjd| ��d S )Nz Uid "%s" already in whitelist)r r
r r; �strr- r? r@ �r r$ r r r r � s
�zLockdownWhitelist.add_uidc C s, || j v r| j �|� nttjd| ��d S )NzUid "%s" not in whitelist.)r- rB r
r rC rM r r r �
remove_uid� s
�z LockdownWhitelist.remove_uidc C s
|| j v S r/ �r- rM r r r �has_uid� s zLockdownWhitelist.has_uidc C s
|| j v S r/ rO rM r r r � match_uid� s zLockdownWhitelist.match_uidc C s | j S r/ rO r= r r r �get_uids� s zLockdownWhitelist.get_uidsc C s@ t |�sttj|��|| jvr,| j�|� nttjd| ��d S )Nz User "%s" already in whitelist)r r
r r: r, r? r@ �r r r r r r! � s
�zLockdownWhitelist.add_userc C s, || j v r| j �|� nttjd| ��d S )NzUser "%s" not in whitelist.)r, rB r
r rC rS r r r � remove_user� s
�z LockdownWhitelist.remove_userc C s
|| j v S r/ �r, rS r r r �has_user� s zLockdownWhitelist.has_userc C s
|| j v S r/ rU rS r r r �
match_user� s z LockdownWhitelist.match_userc C s | j S r/ rU r= r r r � get_users� s zLockdownWhitelist.get_usersc C s@ t |�sttj|��|| jvr,| j�|� nttjd| ��d S )Nz!Context "%s" already in whitelist)r r
r r9 r+ r? r@ �r r r r r r" s
�z LockdownWhitelist.add_contextc C s, || j v r| j �|� nttjd| ��d S )Nz Context "%s" not in whitelist.)r+ rB r
r rC rY r r r �remove_context# s
�z LockdownWhitelist.remove_contextc C s
|| j v S r/ �r+ rY r r r � has_context* s z LockdownWhitelist.has_contextc C s
|| j v S r/ r[ rY r r r �
match_context- s z LockdownWhitelist.match_contextc C s | j S r/ r[ r= r r r � get_contexts0 s z LockdownWhitelist.get_contextsc
C s� | � � | j�d�s&ttjd| j ��t| �}t�� }|� |� z|�
| j� W n: tj y� } z ttj d|�
� ��W Y d }~n
d }~0 0 ~~d S )Nz.xmlz'%s' is missing .xml suffixzNot a valid file: %s)r> r1 rH r
r Z INVALID_NAMEr �saxZ make_parserZsetContentHandler�parseZSAXParseExceptionZ INVALID_TYPEZ getException)r �handlerr2 �msgr r r �read5 s$ �
��zLockdownWhitelist.readc
C s� t j�| j�r^zt�| jd| j � W n6 ty\ } z td| j|f ��W Y d }~n
d }~0 0 t j�tj �szt �
tj d� t j | jddd�}t
|�}|�� |�di � |�d� t| j�D ](}|�d � |�d
d |i� |�d� q�t| j�D ],}|�d � |�d d
t|�i� |�d� q�t| j�D ]*}|�d � |�d d |i� |�d� �q(t| j�D ]*}|�d � |�dd|i� |�d� �q^|�d� |�d� |�� |�� ~d S )Nz%s.oldzBackup of '%s' failed: %si� ZwtzUTF-8)�mode�encodingr �
z r r r r r r )�os�path�existsr1 �shutil�copy2� Exception�IOErrorr Z
ETC_FIREWALLD�mkdir�io�openr Z
startDocumentr ZignorableWhitespacer r) Z
simpleElementr- rL r, r+ Z
endElementZ endDocument�close)r rb �fra r r$ r r r r r �writeF sB (
zLockdownWhitelist.write)#r% r& r' �__doc__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr r7 r> r rD rF rJ rK r rN rP rQ rR r! rT rV rW rX r" rZ r\ r] r^ rc rs �
__classcell__r r r3 r r( V sP ���
1
r( )Zxml.saxr_ rg ro rj Zfirewallr Zfirewall.core.io.io_objectr r r Zfirewall.core.loggerr Zfirewall.functionsr r r r
r r Zfirewall.errorsr
r r( r r r r �<module> s 2Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg