MINI MINI MANI MO
ó
dßØ[c @ s d d l j Z d d l Z d d l Z d d l Z d d l m Z d d l Td d l m Z m
Z
m Z d d l m
Z
m Z m Z d d l m Z d d l m Z d d l m Z d d l m Z d d
l m Z d e f d „ ƒ YZ d
e
f d „ ƒ YZ d S( iÿÿÿÿN( t config( t *( t splitArgst joinArgst
u2b_if_py2( t IO_Objectt IO_Object_ContentHandlert IO_Object_XMLGenerator( t log( t ipXtables( t ebtables( t errors( t
FirewallErrort direct_ContentHandlerc B s# e Z d „ Z d „ Z d „ Z RS( c C s t j | | ƒ t | _ d S( N( R t __init__t Falset direct( t selft item( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR ( s c C sú t j | | | ƒ | j j | | ƒ | d k r\ | j rP t t j d ƒ ‚ n t | _ nš| d k rË | j s‚ t j
d ƒ d S| d } | d } | d } | j j t | ƒ t | ƒ t | ƒ ƒ n+| d k rœ| j sñ t j
d ƒ d S| d } | d k r t t j
d | ƒ ‚ n | d } | d } y t | d
ƒ } Wn' t k
rqt j
d | d
ƒ d SXt | ƒ t | ƒ t | ƒ | g | _ nZ | d k rá| j sÂt j
d ƒ d S| d } t | ƒ g | _ n t j
d | ƒ d Sd S( NR s More than one direct tag.t chains$ Parse Error: chain outside of directt ipvt tablet rules# Parse Error: rule outside of directt ipv4t ipv6t ebs" '%s' not from {'ipv4'|'ipv6'|'eb'}t prioritys' Parse Error: %s is not a valid priorityt passthroughs& Parse Error: command outside of directs Unknown XML element %s( R R R ( R t startElementR t parser_check_element_attrsR R R t PARSE_ERRORt TrueR t errort add_chainR t INVALID_IPVt intt
ValueErrort _rulet _passthrough( R t namet attrsR R R R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR , sT
c C s t j | | ƒ | d k r† | j rm | j j g t | j ƒ D] } t | ƒ ^ q> ƒ | j j | j Œ n
t j
d ƒ d | _ nz | d k r | j rã | j j g t | j ƒ D] } t | ƒ ^ q´ ƒ | j j
| j Πn t j
d d ƒ d | _ n d S( NR s2 Error: rule does not have any arguments, ignoring.R s0 Error: passthrough does not have any arguments, s ignoring.( R t
endElementt _elementR% t appendR R R t add_ruleR R t NoneR& t add_passthrough( R R' t x( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR) ^ s &
& ( t __name__t
__module__R R R) ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR
' s 2t Directc B sƒ e Z d Z d d( g f d d d d d d g f g f d d d g f g f f Z d Z i d) d 6d d d
g d
6d d d
d g d 6d g d
6Z i Z d „ Z d „ Z d „ Z
d „ Z d „ Z d „ Z
d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d! „ Z d" „ Z d# „ Z d$ „ Z d% „ Z d& „ Z d' „ Z! RS(* s Direct class t chainst t rulesi t passthroughss (a(sss)a(sssias)a(sas))R R R R R R R c C sD t t | ƒ j ƒ | | _ t ƒ | _ t ƒ | _ t ƒ | _ d S( N( t superR2 R t filenamet LastUpdatedOrderedDictR3 R5 R6 ( R R8 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR Š s
c C s d S( N( ( R t confR ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
_check_config‘ s c C sN g } g } xO | j D]D } x; | j | D], } | j t t | ƒ t | g ƒ ƒ ƒ q* Wq W| j | ƒ g } xe | j D]Z } xQ | j | D]B } | j t | d | d | d | d t | d ƒ f ƒ ƒ q Wq{ W| j | ƒ g } xH | j D]= } x4 | j | D]% } | j t | t | ƒ f ƒ ƒ q
Wqö W| j | ƒ t | ƒ S( Ni i i ( R3 R+ t tuplet listR5 R6 ( R t retR/ t keyR R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
export_config• s$ .
%
'
c C sÔ | j ƒ | j | ƒ x¶ t | j ƒ D]¥ \ } \ } } | d k rj x" | | D] } | j | Œ qP Wn | d k r› x" | | D] } | j | Œ q Wn | d k r' x" | | D] } | j | Œ q² Wq' q' Wd S( NR3 R5 R6 ( t cleanupt check_configt enumeratet IMPORT_EXPORT_STRUCTURER! R, R. ( R R: t it elementt dummyR/ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
import_config© s
" c C s+ | j j ƒ | j j ƒ | j j ƒ d S( N( R3 t clearR5 R6 ( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyRA · s
c C s d GHx; | j D]0 } d | d | d d j | j | ƒ f GHq Wd GHxe | j D]Z } d | d | d | d f GHx3 | j | D]$ \ } } d | d
j | ƒ f GHq„ WqR Wd GHxD | j D]9 } d | GHx' | j | D] } d
d
j | ƒ GHqÜ Wq¿ Wd S( NR3 s (%s, %s): %si i t ,R5 s (%s, %s, %s):i s (%d, ('%s'))s ','R6 s %s:s
('%s')( R3 t joinR5 R6 ( R R? R t args( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt output¼ s c C s> d d d g } | | k r: t t j d | | f ƒ ‚ n d S( NR R R s '%s' not in '%s'( R R R" ( R R t ipvs( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
_check_ipvÌ s c C sf | j | ƒ | d k r( t j j ƒ n t j j ƒ } | | k rb t t j d | | f ƒ ‚ n d S( NR R s '%s' not in '%s'( s ipv4s ipv6( RO R t BUILT_IN_CHAINSt keysR
R R t
INVALID_TABLE( R R R t tables( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt _check_ipv_tableÒ s
c C s‡ | j | | ƒ | | f } | | j k r; g | j | <n | | j | k re | j | j | ƒ n t j d | | | f d ƒ d S( Ns( Chain '%s' for table '%s' with ipv '%s' s already in list, ignoring( RT R3 R+ R t warning( R R R R R? ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR! Ý s c C s˜ | j | | ƒ | | f } | | j k r{ | | j | k r{ | j | j | ƒ t | j | ƒ d k r” | j | =q” n t d | | | f ƒ ‚ d S( Ni s4 Chain '%s' with table '%s' with ipv '%s' not in list( RT R3 t removet lenR$ ( R R R R R? ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt remove_chainè s "c C s< | j | | ƒ | | f } | | j k o; | | j | k S( N( RT R3 ( R R R R R? ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt query_chainô s c C sP | j | | ƒ | | f } | | j k r6 | j | St d | | f ƒ ‚ d S( Ns& No chains for table '%s' with ipv '%s'( RT R3 R$ ( R R R R? ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
get_chainsù s c C s | j S( N( R3 ( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt get_all_chains s c C s³ | j | | ƒ | | | f } | | j k rA t ƒ | j | <n | t | ƒ f } | | j | k rz | | j | | <n5 t j d d j | ƒ | | f d | | f d ƒ d S( Ns( Rule '%s' for table '%s' and chain '%s' s ',s with ipv '%s' and priority %d s already in list, ignoring( RT R5 R9 R< R RU RK ( R R R R R RL R? t value( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR, s 'c C s¾ | j | | ƒ | | | f } | t | ƒ f } | | j k rŠ | | j | k rŠ | j | | =t | j | ƒ d k rº | j | =qº n0 t d d j | ƒ | | f d | | f ƒ ‚ d S( Ni s( Rule '%s' for table '%s' and chain '%s' s ',s) with ipv '%s' and priority %d not in list( RT R< R5 RW R$ RK ( R R R R R RL R? R\ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt remove_rule s "c C s‡ | j | | ƒ | | | f } | | j k rƒ x) | j | j ƒ D] } | j | | =qB Wt | j | ƒ d k rƒ | j | =qƒ n d S( Ni ( RT R5 RQ RW ( R R R R R? R\ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt remove_rules" s c C sQ | j | | ƒ | | | f } | t | ƒ f } | | j k oP | | j | k S( N( RT R< R5 ( R R R R R RL R? R\ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
query_rule+ s c C s[ | j | | ƒ | | | f } | | j k r9 | j | St d | | f d | ƒ ‚ d S( Ns' No rules for table '%s' and chain '%s' s
with ipv '%s'( RT R5 R$ ( R R R R R? ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt get_rules1 s c C s | j S( N( R5 ( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
get_all_rules: s c C s~ | j | ƒ | | j k r, g | j | <n | | j | k rV | j | j | ƒ n$ t j d d j | ƒ | f d ƒ d S( Ns Passthrough '%s' for ipv '%s's ',s already in list, ignoring( RO R6 R+ R RU RK ( R R RL ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR. ? s
c C s“ | j | ƒ | | j k rl | | j | k rl | j | j | ƒ t | j | ƒ d k r | j | =q n# t d d j | ƒ | f d ƒ ‚ d S( Ni s Passthrough '%s' for ipv '%s's ',s not in list( RO R6 RV RW R$ RK ( R R RL ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt remove_passthroughI s
"c C s- | j | ƒ | | j k o, | | j | k S( N( RO R6 ( R R RL ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt query_passthroughS s
c C s; | j | ƒ | | j k r' | j | St d | ƒ ‚ d S( Ns No passthroughs for ipv '%s'( RO R6 R$ ( R R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt get_passthroughsW s
c C s | j S( N( R6 ( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt get_all_passthroughs^ s c C s | j ƒ | j j d ƒ s8 t t j d | j ƒ ‚ n t | ƒ } t j ƒ } | j | ƒ t
| j d ƒ M } y | j | ƒ Wn2 t j k
r· } t t j
d | j ƒ ƒ ‚ n XWd QXd S( Ns .xmls '%s' is missing .xml suffixt rs Not a valid file: %s( RA R8 t endswithR R t INVALID_NAMER
t saxt make_parsert setContentHandlert opent parset SAXParseExceptiont INVALID_TYPEt getException( R t handlert parsert ft msg( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt readc s
c
C sý t j j | j ƒ re y t j | j d | j ƒ Wqe t k
ra } t d | j | f ƒ ‚ qe Xn t j j t j ƒ s t j
t j d ƒ n t j | j d d d d ƒ} t
| ƒ } | j ƒ | j d i ƒ | j d ƒ xt | j D]i } | \ } } xT | j | D]E } | j d
ƒ | j d i | d 6| d
6| d 6ƒ | j d ƒ q Wqë WxÌ | j D]Á } | \ } } } x© | j | D]š \ } } t | ƒ d k r©q…n | j d
ƒ | j d i | d 6| d
6| d 6d | d 6ƒ | j t j j t | ƒ ƒ ƒ | j d ƒ | j d ƒ q…WqbWxž | j D]“ } xŠ | j | D]{ } t | ƒ d k rcqEn | j d
ƒ | j d i | d 6ƒ | j t j j t | ƒ ƒ ƒ | j d ƒ | j d ƒ qEWq1W| j d ƒ | j d ƒ | j ƒ | j ƒ ~ d S( Ns %s.olds Backup of '%s' failed: %siè t modet wtt encodings UTF-8R s
s R R R i R s %dR R ( t ost patht existsR8 t shutilt copy2t Exceptiont IOErrorR t
ETC_FIREWALLDt mkdirt ioRl R t
startDocumentR t ignorableWhitespaceR3 t
simpleElementR5 RW Ri t saxutilst escapeR R) R6 t endDocumentt close(
R Rt Rs Rq R? R R R R RL ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt writes sZ
( R4 R4 R4 N(" R0 R1 t __doc__RD t DBUS_SIGNATURER- t PARSER_REQUIRED_ELEMENT_ATTRSt PARSER_OPTIONAL_ELEMENT_ATTRSR R; R@ RH RA RM RO RT R! RX RY RZ R[ R, R] R^ R_ R` Ra R. Rb Rc Rd Re Ru RŠ ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR2 u sJ
( t xml.saxRi Ry R‚ R| t firewallR t firewall.fw_typest firewall.functionsR R R t firewall.core.io.io_objectR R R t firewall.core.loggerR t
firewall.coreR R
R t firewall.errorsR R
R2 ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt <module> s
N
OHA YOOOO