관리-도구
편집 파일: config_ipset.cpython-39.opt-1.pyc
a ���gI � @ s� d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl m Z m Z m Z mZ d dlmZ d dlmZ d dlmZmZmZmZ d d lmZ d d lmZ G d d � d e�ZdS ) � N)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�IPSet)� IPSET_TYPES�normalize_ipset_entry� check_entry_overlaps_existing� check_for_overlapping_entries)�log)�DbusServiceObject)�handle_exceptions�dbus_handle_exceptions�dbus_service_method�dbus_polkit_require_auth)�errors)� FirewallErrorc s e Zd ZdZdZejjZe � fdd��Z e dd� �Z e dd� �Z e d d � �Zeejd d d �e dWdd���Zeejddd �e dXdd���Zeejj�eejdd�e dYdd����Zejjejdd�dd � �Zeejj�eejdd �e dZ� fd d � ���Zeejje j d �e d[d d!���Z eejje j d�e d\d"d#���Z eejj�e d]d$d%���Z ejjejjdd�e d&d'� ��Z!eejj�e d^d(d)���Z"ejjejjdd�e d*d+� ��Z#eejjdd�e d_d,d-���Z$ejjejjdd�e d.d/� ��Z%eejjdd �e d`d0d1���Z&eejjdd�e dad2d3���Z'eejjdd �e dbd4d5���Z(eejjdd�e dcd6d7���Z)eejjdd �e ddd8d9���Z*eejjdd�e ded:d;���Z+eejjdd �e dfd<d=���Z,eejjdd�e dgd>d?���Z-eejjd@d �e dhdAdB���Z.eejjd@d�e didCdD���Z/eejjd d�e djdEdF���Z0eejjdd�e dkdGdH���Z1eejjd dId �e dldJdK���Z2eejjdLd �e dmdMdN���Z3eejjdLd�e dndOdP���Z4eejjdd�e dodQdR���Z5eejjdd�e dpdSdT���Z6eejjddId �e dqdUdV���Z7� Z8S )r�FirewallDConfigIPSetzFirewallD main classTc s` t t| �j|i |�� || _|| _|| _|| _|d | _|d | _d| j | _ t | tj j � d S )Nr � zconfig.ipset.%d) �superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_IPSET)�selfr ZconfZipsetr �args�kwargs�� __class__� �@/usr/lib/python3.9/site-packages/firewall/server/config_ipset.pyr 6 s �z FirewallDConfigIPSet.__init__c C s d S �Nr$ �r r$ r$ r% �__del__C s z FirewallDConfigIPSet.__del__c C s | � � d S r& )Zremove_from_connectionr' r$ r$ r% � unregisterG s z FirewallDConfigIPSet.unregisterc C s� |dkrt �| jj�S |dkr,t �| jj�S |dkrBt �| jj�S |dkrXt �| jj�S |dkrnt �| jj�S t j � d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r* r+ r ZBooleanr, r- � exceptions� DBusException)r � property_namer$ r$ r% � _get_propertyO s ��z"FirewallDConfigIPSet._get_property�ss�v)� in_signature� out_signatureNc C sL t |t�}t |t�}t�d| j||� |tjjkrBtj� d| ��| � |�S )Nz%s.Get('%s', '%s')�Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r r/ r0 r2 )r �interface_namer1 �senderr$ r$ r% �Get` s � ��zFirewallDConfigIPSet.Get�sza{sv}c C s` t |t�}t�d| j|� |tjjkr6tj� d| ��i }dD ]}| � |�||< q>tj |dd�S )Nz%s.GetAll('%s')r7 )r* r+ r r, r- �sv�Z signature) r r8 r r9 r r r r r/ r0 r2 Z Dictionary)r r: r; �ret�xr$ r$ r% �GetAllq s ��zFirewallDConfigIPSet.GetAllZssv)r5 c C sl t |t�}t |t�}t |�}t�d| j|||� | j�|� |tjj krXtj � d| ��tj � d| ��d S )Nz%s.Set('%s', '%s', '%s')r7 zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r8 r r9 r r � accessCheckr r r r/ r0 )r r: r1 Z new_valuer; r$ r$ r% �Set� s$ � ����zFirewallDConfigIPSet.Setzsa{sv}asr? c C s2 t |t�}t |�}t |�}t�d| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r8 r r9 r )r r: Zchanged_propertiesZinvalidated_propertiesr$ r$ r% �PropertiesChanged� s �z&FirewallDConfigIPSet.PropertiesChanged)r6 c s8 t �d| j� tt| ��| j| j�� �}t | |t j j �S )Nz%s.Introspect()) r Zdebug2r r r � Introspectr r Zget_busr r r r )r r; �datar" r$ r% rF � s � �z FirewallDConfigIPSet.Introspectc C s t �d| j� | j�| j�S )z get settings for ipset z%s.getSettings())r r9 r r Zget_ipset_configr �r r; r$ r$ r% � getSettings� s z FirewallDConfigIPSet.getSettingsc C sF t |�}t�d| j� | j�|� | j�| j|�| _| � | jj � dS )z"update settings for ipset z%s.update('...')N) r r r9 r r rC r Zset_ipset_configr �Updatedr* )r �settingsr; r$ r$ r% �update� s zFirewallDConfigIPSet.updatec C s< t �d| j� | j�|� | j�| j�| _| �| jj � dS )z0load default settings for builtin ipset z%s.loadDefaults()N) r r9 r r rC r Zload_ipset_defaultsr rJ r* rH r$ r$ r% � loadDefaults� s z!FirewallDConfigIPSet.loadDefaultsc C s t �d| j|f � d S )Nz%s.Updated('%s')�r r9 r �r r* r$ r$ r% rJ � s z FirewallDConfigIPSet.Updatedc C s: t �d| j� | j�|� | j�| j� | j�| j� dS )zremove ipset z %s.remove()N) r r9 r r rC r Z remove_ipsetr Z removeIPSetrH r$ r$ r% �remove� s zFirewallDConfigIPSet.removec C s t �d| j|f � d S )Nz%s.Removed('%s')rN rO r$ r$ r% �Removed� s z FirewallDConfigIPSet.Removedc C sF t |t�}t�d| j|� | j�|� | j�| j |�| _ | � |� dS )zrename ipset z%s.rename('%s')N) r r8 r r9 r r rC r Z rename_ipsetr �Renamed)r r* r; r$ r$ r% �rename� s zFirewallDConfigIPSet.renamec C s t �d| j|f � d S )Nz%s.Renamed('%s')rN rO r$ r$ r% rR � s z FirewallDConfigIPSet.Renamedc C s t �d| j� | �� d S )Nz%s.getVersion()r �r r9 r rI rH r$ r$ r% � getVersion� s z FirewallDConfigIPSet.getVersionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setVersion('%s')r � r r8 r r9 r r rC �listrI rL )r �versionr; rK r$ r$ r% � setVersion s z FirewallDConfigIPSet.setVersionc C s t �d| j� | �� d S )Nz %s.getShort()r rT rH r$ r$ r% �getShort s z FirewallDConfigIPSet.getShortc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setShort('%s')r rV )r Zshortr; rK r$ r$ r% �setShort s z FirewallDConfigIPSet.setShortc C s t �d| j� | �� d S )Nz%s.getDescription()� rT rH r$ r$ r% �getDescription# s z#FirewallDConfigIPSet.getDescriptionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setDescription('%s')r\ rV )r � descriptionr; rK r$ r$ r% �setDescription* s � z#FirewallDConfigIPSet.setDescriptionc C s t �d| j� | �� d S )Nz %s.getType()� rT rH r$ r$ r% �getType8 s z FirewallDConfigIPSet.getTypec C s\ t |t�}t�d| j|� | j�|� |tvr:tt j |��t | � � �}||d< | � |� d S )Nz%s.setType('%s')r` )r r8 r r9 r r rC r r r Z INVALID_TYPErW rI rL )r Z ipset_typer; rK r$ r$ r% �setType? s z FirewallDConfigIPSet.setTypeza{ss}c C s t �d| j� | �� d S )Nz%s.getOptions()� rT rH r$ r$ r% � getOptionsN s z FirewallDConfigIPSet.getOptionsc C sL t |t�}t�d| jt|�� | j�|� t| � � �}||d< | � |� d S )Nz%s.setOptions('[%s]')rc ) r �dictr r9 r �reprr rC rW rI rL )r �optionsr; rK r$ r$ r% � setOptionsU s � z FirewallDConfigIPSet.setOptionsc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||d v rn|d | |krnt t j d||f ��||d |< | � |� d S )Nz%s.addOption('%s', '%s')rc z '%s': '%s') r r8 r r9 r r rC rW rI r r �ALREADY_ENABLEDrL �r �key�valuer; rK r$ r$ r% � addOptiona s � z FirewallDConfigIPSet.addOptionc C sb t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d |= | � |� d S )Nz%s.removeOption('%s')rc ) r r8 r r9 r r rC rW rI r r � NOT_ENABLEDrL )r rk r; rK r$ r$ r% � removeOptionp s z!FirewallDConfigIPSet.removeOption�bc C sN t |t�}t |t�}t�d| j||� t| �� �}||d v oL|d | |kS )Nz%s.queryOption('%s', '%s')rc )r r8 r r9 r rW rI rj r$ r$ r% � queryOption} s � z FirewallDConfigIPSet.queryOption�asc C s t �d| j� | �� d S )Nz%s.getEntries()� rT rH r$ r$ r% � getEntries� s z FirewallDConfigIPSet.getEntriesc C s| t |t�}t|� t�d| jd�|�� | j�|� t| � � �}d|d v rf|d d dkrft t j ��||d< | � |� d S )Nz%s.setEntries('[%s]')�,�timeoutrc �0rs )r rW r r r9 r �joinr rC rI r r �IPSET_WITH_TIMEOUTrL )r �entriesr; rK r$ r$ r% � setEntries� s � z FirewallDConfigIPSet.setEntriesc C s� t |t�}t|�}t�d| j|� | j�|� t| � � �}d|d v r`|d d dkr`t t j ��||d v rxt t j |��t||d � |d �|� | �|� d S )Nz%s.addEntry('%s')rv rc rw rs )r r8 r r r9 r r rC rW rI r r ry ri r �appendrL �r �entryr; rK r$ r$ r% �addEntry� s z FirewallDConfigIPSet.addEntryc C s� t |t�}t|�}t�d| j|� | j�|� t| � � �}d|d v r`|d d dkr`t t j ��||d vrxt t j |��|d �|� | �|� d S )Nz%s.removeEntry('%s')rv rc rw rs )r r8 r r r9 r r rC rW rI r r ry rn rP rL r} r$ r$ r% � removeEntry� s z FirewallDConfigIPSet.removeEntryc C s` t |t�}t|�}t�d| j|� t| �� �}d|d v rT|d d dkrTtt j ��||d v S )Nz%s.queryEntry('%s')rv rc rw rs ) r r8 r r r9 r rW rI r r ry r} r$ r$ r% � queryEntry� s z FirewallDConfigIPSet.queryEntry)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)9�__name__� __module__� __qualname__�__doc__Z persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r r( r) r2 r ZPROPERTIES_IFACEr< rB r rD Zservice�signalrE ZPK_ACTION_INFOZINTROSPECTABLE_IFACErF r r ZDBUS_SIGNATURErI rL rM rJ rP rQ rS rR rU rY rZ r[ r] r_ ra rb rd rh rm ro rq rt r{ r r� r� � __classcell__r$ r$ r" r% r . s0 �� �� � �� �� �� �� �� � � � �� �� �r ) r Z dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.ipsetr Zfirewall.core.ipsetr r r r Zfirewall.core.loggerr Zfirewall.server.dbusr Zfirewall.server.decoratorsr r r r r Zfirewall.errorsr r r$ r$ r$ r% �<module> s