MINI MINI MANI MO
ó
dßØ[c @ s d d d g Z d d l j Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l
m Z m Z m
Z
m Z m Z m Z m Z m Z d d l m Z d d l m Z d d
l m Z d e f d „ ƒ YZ d e
f d
„ ƒ YZ d „ Z d d „ Z d S( t Servicet service_readert service_writeriÿÿÿÿN( t config( t
u2b_if_py2( t PY2t IO_Objectt IO_Object_ContentHandlert IO_Object_XMLGeneratort
check_portt check_tcpudpt check_protocolt
check_address( t log( t errors( t
FirewallErrorc
B sö e Z d d d d d g f d d g f d i d d 6f d d g f d d g f f Z d Z d
d g Z i d d 6d d 6d d 6Z i d
d g d 6d d g d 6d g d 6d
g d 6d d g d 6d d g d 6Z d „ Z d „ Z d „ Z
d „ Z RS( t versiont t shortt descriptiont portst modulest destinationt protocolst source_portss (sssa(ss)asa{ss}asa(ss))t _t -t servicet namet portt protocolt valuet modulet ipv4t ipv6s source-portc C s_ t t | ƒ j ƒ d | _ d | _ d | _ g | _ g | _ g | _ i | _ g | _
d S( NR ( t superR t __init__R R R R R R R R ( t self( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR$ A s c C sH d | _ d | _ d | _ | j 2| j 2| j 2| j j ƒ | j 2d S( NR ( R R R R R R R t clearR ( R% ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt cleanupL s
c C s t | j ƒ | _ t | j ƒ | _ t | j ƒ | _ g | j D]$ \ } } t | ƒ t | ƒ f ^ q@ | _ g | j D] } t | ƒ ^ qw | _ d „ | j j ƒ Dƒ | _ g | j D] } t | ƒ ^ q¸ | _ g | j D]$ \ } } t | ƒ t | ƒ f ^ qÝ | _ d S( s» HACK. I haven't been able to make sax parser return
strings encoded (because of python 2) instead of in unicode.
Get rid of it once we throw out python 2 support.c S s+ i | ]! \ } } t | ƒ t | ƒ “ q S( ( R ( t .0t kt v( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pys
<dictcomp>_ s N(
R R R R R R R t itemsR R ( R% t pot prt m( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt encode_stringsV s 7% %c C s© | d k r] x–| D]C } | d d k rH t | d ƒ t | d ƒ q t | d ƒ q WnH| d k r‡ x9| D] } t | ƒ qp Wn | d k rà x| D]" } t | d ƒ t | d ƒ qš Wnâ | d k rxÓ | D]< } | d k rt t j d
| ƒ ‚ n t | | | ƒ qÖ WnŒ | d k r¥x} | D]r } | j d ƒ rw| j d d ƒ } d
| k rw| j d
d ƒ } qwn t | ƒ d k r,t t j
| ƒ ‚ q,q,Wn d S( NR i R i R R R R! R" s '%s' not in {'ipv4'|'ipv6'}R t
nf_conntrack_R R i ( R! R" ( R R
R R R t INVALID_DESTINATIONR t
startswitht replacet lent INVALID_MODULE( R% R t itemR t protoR R ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt
_check_configd s8
( s versionR ( s shortR ( s descriptionR ( R R ( R R N( t __name__t
__module__t IMPORT_EXPORT_STRUCTUREt DBUS_SIGNATUREt ADDITIONAL_ALNUM_CHARSt Nonet PARSER_REQUIRED_ELEMENT_ATTRSt PARSER_OPTIONAL_ELEMENT_ATTRSR$ R' R/ R8 ( ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR & s2
t service_ContentHandlerc B s e Z d „ Z RS( c C sx t j | | | ƒ | j j | | ƒ | d k rw d | k rU t j d | d ƒ n d | k rt| d | j _ qtný| d k r† nî| d k r• nß| d k r|| d d k r't | d ƒ t | d ƒ | d | d f } | | j j k r | j j j
| ƒ qyt j d
| d | d ƒ qtt | d ƒ | d | j j k re| j j j
| d ƒ qtt j d | d ƒ nø| d k rÝt | d ƒ | d | j j k rÆ| j j j
| d ƒ qtt j d | d ƒ n—| d
k r_t | d ƒ t | d ƒ | d | d f } | | j j
k rA| j j
j
| ƒ qtt j d | d | d ƒ n| d k rÞxd d g D]_ } | | k rxt | | | ƒ | | j j k rÀt j d | ƒ q×| | | j j | <qxqxWn– | d k rt| d } | j d ƒ r9| j d d ƒ } d | k r9| j d d ƒ } q9n | | j j k ra| j j j
| ƒ qtt j d | ƒ n d S( NR R s' Ignoring deprecated attribute name='%s'R R R R R R s# Port '%s/%s' already set, ignoring.s$ Protocol '%s' already set, ignoring.R s source-ports) SourcePort '%s/%s' already set, ignoring.R R! R" s2 Destination address for '%s' already set, ignoringR R0 R R s" Module '%s' already set, ignoring.( R t startElementR6 t parser_check_element_attrsR
t warningR R R
R t appendR R R R R R2 R3 R ( R% R t attrst entryt xR ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyRB ‹ st
( R9 R: RB ( ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyRA Š s c C s= t ƒ } | j d ƒ s1 t t j d | ƒ ‚ n | d | _ | j | j ƒ | | _ | | _ | j t
j ƒ rx t n t
| _ | j | _ t | ƒ } t j ƒ } | j | ƒ d | | f } t | d ƒ M } y | j | ƒ Wn2 t j k
r} t t j d | j ƒ ƒ ‚ n XWd QX~ ~ t r9| j ƒ n | S( Ns .xmls '%s' is missing .xml suffixiüÿÿÿs %s/%st rs not a valid service file: %s( R t endswithR R t INVALID_NAMER t
check_namet filenamet pathR2 R t
ETC_FIREWALLDt Falset Truet builtint defaultRA t saxt make_parsert setContentHandlert opent parset SAXParseExceptiont INVALID_SERVICEt getExceptionR R/ ( RM RN R t handlert parserR t ft msg( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR Ï s4
!
c
C sþ | r | n | j } | j r4 d | | j f } n d | | j f } t j j | ƒ r y t j | d | ƒ Wq t k
r™ } t j d | | ƒ q Xn t j j
| ƒ } | j t j
ƒ rt j j | ƒ rt j j t j
ƒ sÿ t j t j
d ƒ n t j | d ƒ n t j | d d d d ƒ} t | ƒ } | j ƒ i } | j rq| j d
k rq| j | d <n | j d | ƒ | j d
ƒ | j rð| j d
k rð| j d ƒ | j d i ƒ | j | j ƒ | j d ƒ | j d
ƒ n | j rR| j d
k rR| j d ƒ | j d i ƒ | j | j ƒ | j d ƒ | j d
ƒ n xQ | j D]F } | j d ƒ | j d i | d d 6| d d 6ƒ | j d
ƒ q\WxB | j D]7 }
| j d ƒ | j d i |
d 6ƒ | j d
ƒ q°WxQ | j D]F } | j d ƒ | j d i | d d 6| d d 6ƒ | j d
ƒ qõWxB | j D]7 } | j d ƒ | j d i | d 6ƒ | j d
ƒ qIWt | j ƒ d k rÉ| j d ƒ | j d | j ƒ | j d
ƒ n | j d ƒ | j d
ƒ | j! ƒ | j" ƒ ~ d S( Ns %s/%ss %s/%s.xmls %s.olds Backup of file '%s' failed: %siè t modet wtt encodings UTF-8R R R s
s R R R i i R R s source-portR R R (# RN RM R t ost existst shutilt copy2t ExceptionR
t errort dirnameR2 R RO t mkdirt ioRW R t
startDocumentR RB t ignorableWhitespaceR t
characterst
endElementR R t
simpleElementR R R R4 R t endDocumentt close( R RN t _pathR R_ t dirpathR^ R\ RF R R R ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR ë sx %
&
( t __all__t xml.saxRT Rc Rk Re t firewallR t firewall.functionsR t firewall.core.io.io_objectR R R R R R
R R t firewall.core.loggerR
R t firewall.errorsR R RA R R> R ( ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt <module> s :dE
OHA YOOOO