| Current File : //lib/python3.9/site-packages/firewall/core/io/__pycache__/direct.cpython-39.pyc |
a
���g�< � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
m Z d dl m
Z
mZmZ d dlmZ d dlmZ d dlmZ d d lmZ d d
lmZ G d d � d e�ZG d
d� de
�ZdS )� N)�config)�LastUpdatedOrderedDict)� splitArgs�joinArgs)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�log)� ipXtables)�ebtables)�errors)�
FirewallErrorc @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�direct_ContentHandlerc C s t �| |� d| _d S )NF)r �__init__�direct)�self�item� r �;/usr/lib/python3.9/site-packages/firewall/core/io/direct.pyr ( s z direct_ContentHandler.__init__c C sf t �| ||� | j�||� |dkr@| jr6ttjd��d| _�n"|dkr�| js\t� d� d S |d }|d }|d }| j�
|||� n�|dk�r | js�t� d � d S |d }|d
vr�ttj d | ��|d }|d }zt |d �}W n( t
�y t� d
|d � Y d S 0 ||||g| _nD|dk�rP| j�s>t� d� d S |d }|g| _nt� d| � d S d S )Nr zMore than one direct tag.T�chainz$Parse Error: chain outside of direct�ipv�table�rulez#Parse Error: rule outside of direct��ipv4�ipv6Zebz"'%s' not from {'ipv4'|'ipv6'|'eb'}�priorityz'Parse Error: %s is not a valid priority� passthroughz&Parse Error: command outside of directzUnknown XML element %s)r � startElementr Zparser_check_element_attrsr r
r Z PARSE_ERRORr �error� add_chain� INVALID_IPV�int�
ValueError�_rule� _passthrough)r �name�attrsr r r r r r r r , sV �
��
z"direct_ContentHandler.startElementc C s� t �| |� |dkrN| jr<| j�t| j�� | jj| j� n
t� d� d | _n@|dkr�| jr~| j
�t| j�� | jj | j
� n
t� d� d | _
d S )Nr z2Error: rule does not have any arguments, ignoring.r z9Error: passthrough does not have any arguments, ignoring.) r �
endElementZ_elementr$ �appendr r �add_ruler r r% �add_passthrough)r r& r r r r( \ s
z direct_ContentHandler.endElementN)�__name__�
__module__� __qualname__r r r( r r r r r ' s 0r c s6 e Zd ZdZddgfddddddgfgfdddgfgffZdZd g d
�g d �d gd
�Zi Z� fdd�Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Zd4d5� Zd6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!� Z"S )B�Directz Direct class �chains)� r1 r1 �rulesr1 r � passthroughsz(a(sss)a(sssias)a(sas))N�r r r �r r r r r )r r r r c s0 t t| ��� || _t� | _t� | _t� | _d S �N)�superr/ r �filenamer r0 r2 r3 )r r8 �� __class__r r r � s
zDirect.__init__c C s d S r6 r )r �confr Zall_conf�all_io_objectsr r r �
_check_config� s zDirect._check_configc C s� g }g }| j D ]0}| j | D ] }|�tt|�t|g� �� q q|�|� g }| jD ]D}| j| D ]4}|�t|d |d |d |d t|d �f�� qbqT|�|� g }| jD ]*}| j| D ]}|�t|t|�f�� q�q�|�|� t|�S )Nr � � )r0 r) �tuple�listr2 r3 )r �ret�x�keyr r r r r �
export_config� s&
�
zDirect.export_configc C s� | � � | �|� t| j�D ]l\}\}}|dkrH|| D ]}| j|� q8|dkrh|| D ]}| j|� qX|dkr || D ]}| j|� qxq d S )Nr0 r2 r3 )�cleanupZ check_config� enumerate�IMPORT_EXPORT_STRUCTUREr r* r+ )r r; r< �i�elementZdummyrC r r r �
import_config� s
zDirect.import_configc C s" | j �� | j�� | j�� d S r6 )r0 �clearr2 r3 �r r r r rF � s
zDirect.cleanupc C s� t d� | jD ]*}t d|d |d d�| j| �f � qt d� | jD ]L}t d|d |d |d f � | j| D ] \}}t d |d
�|�f � qtqHt d � | jD ]2}t d | � | j| D ]}t d
d
�|� � q�q�d S )Nr0 z (%s, %s): %sr r> �,r2 z (%s, %s, %s):r? z (%d, ('%s'))z','r3 z %s:z
('%s'))�printr0 �joinr2 r3 )r rD r �argsr r r �output� s
�
z
Direct.outputc C s( g d�}||vr$t tjd||f ��d S )Nr �'%s' not in '%s')r
r r! )r r Zipvsr r r �
_check_ipv� s
�zDirect._check_ipvc C sF | � |� |dv r tj�� ntj�� }||vrBttjd||f ��d S )N)r r rS )rT r
ZBUILT_IN_CHAINS�keysr r
r Z
INVALID_TABLE)r r r Ztablesr r r �_check_ipv_table� s
�
�zDirect._check_ipv_tablec C sd | � ||� ||f}|| jvr(g | j|< || j| vrH| j| �|� nt�d|||f d � d S )Nz(Chain '%s' for table '%s' with ipv '%s' �already in list, ignoring)rV r0 r) r �warning�r r r r rD r r r r � s
��zDirect.add_chainc C sn | � ||� ||f}|| jv rX|| j| v rX| j| �|� t| j| �dkrj| j|= ntd|||f ��d S )Nr z4Chain '%s' with table '%s' with ipv '%s' not in list)rV r0 �remove�lenr# rY r r r � remove_chain� s
��zDirect.remove_chainc C s, | � ||� ||f}|| jv o*|| j| v S r6 )rV r0 rY r r r � query_chain� s zDirect.query_chainc C s< | � ||� ||f}|| jv r(| j| S td||f ��d S )Nz&No chains for table '%s' with ipv '%s')rV r0 r# )r r r rD r r r �
get_chains� s
�zDirect.get_chainsc C s | j S r6 )r0 rM r r r �get_all_chains� s zDirect.get_all_chainsc C s� | � ||� |||f}|| jvr,t� | j|< |t|�f}|| j| vrV|| j| |< n*t�dd�|�||f d||f d � d S )N�(Rule '%s' for table '%s' and chain '%s' �',z with ipv '%s' and priority %d rW )rV r2 r r@ r rX rP �r r r r r rQ rD �valuer r r r* s
�
��zDirect.add_rulec C s� | � ||� |||f}|t|�f}|| jv rb|| j| v rb| j| |= t| j| �dkr�| j|= n$tdd�|�||f d||f ��d S )Nr r` ra z)with ipv '%s' and priority %d not in list)rV r@ r2 r[ r# rP rb r r r � remove_rule s
�
�zDirect.remove_rulec C s^ | � ||� |||f}|| jv rZ| j| �� D ]}| j| |= q.t| j| �dkrZ| j|= d S )Nr )rV r2 rU r[ )r r r r rD rc r r r � remove_rules s
zDirect.remove_rulesc C s: | � ||� |||f}|t|�f}|| jv o8|| j| v S r6 )rV r@ r2 rb r r r �
query_rule' s
zDirect.query_rulec C sF | � ||� |||f}|| jv r*| j| S td||f d| ��d S )Nz'No rules for table '%s' and chain '%s' z
with ipv '%s')rV r2 r# rY r r r � get_rules- s
��zDirect.get_rulesc C s | j S r6 )r2 rM r r r �
get_all_rules6 s zDirect.get_all_rulesc C s^ | � |� || jvr g | j|< || j| vr>| j| �|� n t�dd�|�|f d � d S )N� Passthrough '%s' for ipv '%s'ra rW )rT r3 r) r rX rP �r r rQ r r r r+ ; s
��zDirect.add_passthroughc C sl | � |� || jv rN|| j| v rN| j| �|� t| j| �dkrh| j|= ntdd�|�|f d ��d S )Nr ri ra z not in list)rT r3 rZ r[ r# rP rj r r r �remove_passthroughE s
��zDirect.remove_passthroughc C s" | � |� || jv o || j| v S r6 )rT r3 rj r r r �query_passthroughO s
zDirect.query_passthroughc C s. | � |� || jv r | j| S td| ��d S )Nz No passthroughs for ipv '%s')rT r3 r# )r r r r r �get_passthroughsS s
zDirect.get_passthroughsc C s | j S r6 )r3 rM r r r �get_all_passthroughsZ s zDirect.get_all_passthroughsc C s� | � � | j�d�s&ttjd| j ��t| �}t�� }|� |� t
| jd��n}t� d �}|� |� z|�
|� W n: tjy� } z ttjd|�� ��W Y d }~n
d }~0 0 W d � n1 s�0 Y d S )Nz.xmlz'%s' is missing .xml suffix�rbzNot a valid file: %s)rF r8 �endswithr
r Z INVALID_NAMEr �saxZ make_parserZsetContentHandler�openZ InputSourceZ
setByteStream�parseZSAXParseExceptionZ INVALID_TYPEZ getException)r �handler�parser�f�source�msgr r r �read_ s& �
��z Direct.readc
C s, t j�| j�r^zt�| jd| j � W n6 ty\ } z td| j|f ��W Y d }~n
d }~0 0 t j�tj �szt �
tj d� t j | jddd�}t
|�}|�� |�di � |�d� | jD ]D}|\}}| j| D ],}|�d � |�d
|||d �� |�d� q�q�| jD ]�}|\}}}| j| D ]j\}} t| �d k �r6�q |�d � |�d
|||d| d�� |�tj�t| ��� |�d
� |�d� �q �q| jD ]n}| j| D ]\} t| �d k �r��q�|�d � |�dd|i� |�tj�t| ��� |�d� |�d� �q��q�|�d� |�d� |�� |� � ~d S )Nz%s.oldzBackup of '%s' failed: %si� ZwtzUTF-8)�mode�encodingr �
z r r4 r> r z%dr5 r r ) �os�path�existsr8 �shutil�copy2� Exception�IOErrorr Z
ETC_FIREWALLD�mkdir�iorr r Z
startDocumentr ZignorableWhitespacer0 Z
simpleElementr2 r[ rq Zsaxutils�escaper r( r3 Z endDocument�close)
r rx rv rt rD r r r r rQ r r r �writeq s^ (
�
�
z Direct.write)#r, r- r. �__doc__rH ZDBUS_SIGNATUREZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr r= rE rK rF rR rT rV r r\ r] r^ r_ r* rd re rf rg rh r+ rk rl rm rn ry r� �
__classcell__r r r9 r r/ q sL ��
r/ )Zxml.saxrq r} r� r� Zfirewallr Zfirewall.fw_typesr Zfirewall.functionsr r Zfirewall.core.io.io_objectr r r Zfirewall.core.loggerr Z
firewall.corer
r r Zfirewall.errorsr
r r/ r r r r �<module> s J