| Current File : //lib/python3.9/site-packages/firewall/core/io/__pycache__/service.cpython-39.pyc |
a
���g'0 � @ s� g d �Z ddlmZ ddlZddlZddlZddlmZ ddlm Z m
Z
m Z m Z m
Z
mZmZ ddlmZ ddlmZ ddlmZ G dd � d e �ZG d
d � d e
�Zd d
� Zddd�ZdS ))�Service�service_reader�service_writer� N)�config)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator�
check_port� check_tcpudp�check_protocol�
check_address)�log)�errors)�
FirewallErrorc s� e Zd Zdddddgfddgfdddifd dgfd
dgfd dgfd dgff
Zd
dgZdddd�Zddgddgdgdgddgddgdgdgd�Z� fdd�Zd d � Zd d � Z � Z
S ) r )�version� )�shortr )� descriptionr �ports)r r �modulesr � destination� protocols� source_ports�includes�helpers�_�-N)r r �service�namer �port�protocol�value�ipv4�ipv6r )r r r �moduler � source-port�include�helperc sN t t| ��� d| _d| _d| _g | _g | _g | _i | _ g | _
g | _ g | _ d S �Nr )
�superr �__init__r r r r r r r r r r ��self�� __class__� �</usr/lib/python3.9/site-packages/firewall/core/io/service.pyr* C s zService.__init__c C sh d| _ d| _d| _| jd d �= | jd d �= | jd d �= | j�� | jd d �= | j d d �= | j
d d �= d S r( ) r r r r r r r �clearr r r r+ r/ r/ r0 �cleanupP s
zService.cleanupc
C sd |dkrH|D ]6}|d dkr6t |d � t|d � q t|d � q �n|dkrd|D ] }t|� qTn�|dkr�|D ] }t |d � t|d � qpn�|dkr�|D ]*}|dvr�ttjd | ��t||| � q�n�|d
k�r&|D ]J}|�d ��r
|�d d�}d |v �r
|�d d
�}t |�dk r�ttj
|��q�n:|dk�r`|D ]*} | |d v�r4ttj d� | j
| ����q4d S )Nr r r � r r r �r" r# z'%s' not in {'ipv4'|'ipv6'}r �
nf_conntrack_r r � r Zservicesz.Service '{}': Included service '{}' not found.)r r
r r r ZINVALID_DESTINATIONr �
startswith�replace�lenZINVALID_MODULE�INVALID_SERVICE�formatr )
r, r �itemZ
all_configZall_io_objectsr �protor r$ r& r/ r/ r0 �
_check_config\ sL ��
��zService._check_config) �__name__�
__module__� __qualname__ZIMPORT_EXPORT_STRUCTUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr* r2 r> �
__classcell__r/ r/ r- r0 r % s8
� ��
r c @ s e Zd Zdd� ZdS )�service_ContentHandlerc C s, t �| ||� | j�||� |dkrTd|v r<t�d|d � d|v rP|d | j_�n�|dkr`�n�|dkrl�n�|dk�r$|d dkr�t|d � t|d � |d |d f}|| jj vr�| jj �
|� nt�d
|d |d � nBt |d � |d | jj v�r| jj �
|d � nt�d |d � �n|d k�rtt |d � |d | jj v�r`| jj �
|d � nt�d |d � �n�|d
k�r�t|d � t|d � |d |d f}|| jj
v�r�| jj
�
|� nt�d|d |d � �nJ|dk�r:dD ]J}||v �r�t||| � || jjv �r$t�d|� n|| | jj|< �q�n�|dk�r�|d }|�d��rz|�dd�}d|v �rz|�dd�}|| jjv�r�| jj�
|� n t�d|� n�|dk�r�|d | jjv�r�| jj�
|d � nt�d|d � n@|dk�r(|d | jjv�r| jj�
|d � nt�d|d � d S )Nr r z'Ignoring deprecated attribute name='%s'r r r r r r z#Port '%s/%s' already set, ignoring.z$Protocol '%s' already set, ignoring.r! r% z)SourcePort '%s/%s' already set, ignoring.r r4 z2Destination address for '%s' already set, ignoringr$ r5 r r z"Module '%s' already set, ignoring.r& z#Include '%s' already set, ignoring.r' z"Helper '%s' already set, ignoring.)r � startElementr< Zparser_check_element_attrsr
Zwarningr r r
r �appendr r r r r r7 r8 r r r )r, r �attrs�entry�xr$ r/ r/ r0 rD � s� �
� �
�
�
�
�
�
�z#service_ContentHandler.startElementN)r? r@ rA rD r/ r/ r/ r0 rC � s rC c C s t � }| �d�s ttjd| ��| d d� |_|�|j� | |_||_|� t
j �rVdnd|_ |j |_
t|�}t�� }|�|� d|| f }t|d��n}t�d �}|�|� z|�|� W n: tjy� } z ttjd|�� ��W Y d }~n
d }~0 0 W d � n1 �s
0 Y ~~|S ) Nz.xmlz'%s' is missing .xml suffix���FT�%s/%s�rbz not a valid service file: %s)r �endswithr r Z INVALID_NAMEr Z
check_name�filename�pathr7 r �
ETC_FIREWALLDZbuiltin�defaultrC �saxZ make_parserZsetContentHandler�openZ InputSourceZ
setByteStream�parseZSAXParseExceptionr: Z getException) rM rN r �handler�parserr �f�source�msgr/ r/ r0 r � s:
�
��:r c
C sZ |r|n| j }| jr$d|| jf }nd|| jf }tj �|�r�zt�|d| � W n2 ty� } zt� d||� W Y d }~n
d }~0 0 tj �
|�}|� t j
�r�tj �|�s�tj �t j
�s�t�t j
d� t�|d� tj|ddd�}t|�}|�� i }| j�r| jd k�r| j|d
< |�d |� |�d � | j�rt| jd k�rt|�d
� |�di � |�| j� |�d� |�d � | j�r�| jd k�r�|�d
� |�di � |�| j� |�d� |�d � | jD ]4} |�d
� |�d| d | d d�� |�d � �q�| j D ]*}
|�d
� |�dd|
i� |�d � �q | j D ]4} |�d
� |�d| d | d d�� |�d � �q2| j D ]*} |�d
� |�dd| i� |�d � �qnt | j �dk�r�|�d
� |�d| j � |�d � | j!D ]*} |�d
� |�dd | i� |�d � �q�| j"D ]*}
|�d
� |�dd|
i� |�d � �q|�d � |�d � |�#� |�$� ~d S ) NrJ z %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si� ZwtzUTF-8)�mode�encodingr r r �
z r r r r r3 )r r r r! r% r$ r r r& r' )%rN rM r �os�exists�shutil�copy2� Exceptionr
�error�dirnamer7 r rO �mkdir�iorR r Z
startDocumentr rD ZignorableWhitespacer Z
charactersZ
endElementr r Z
simpleElementr r r r9 r r r Z endDocument�close)r rN �_pathr rX �dirpathrV rT rF r r r$ r& r' r/ r/ r0 r � s� $
�
r )N)�__all__Zxml.saxrQ r\ rd r^ Zfirewallr Zfirewall.core.io.io_objectr r r r r
r r Zfirewall.core.loggerr
r Zfirewall.errorsr r rC r r r/ r/ r/ r0 �<module> s $ dQ