관리-도구
편집 파일: config_zone.cpython-39.opt-1.pyc
a ���g�� � @ s� d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl m Z d dl m Z d dlmZ d dlmZ d d lmZ d d lmZmZmZmZ d d lmZ d d lmZ d d l m Z m Z m Z m Z G dd� de�Z!dS )� N)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�Zone)�ifcfg_set_zone_of_interface)�DEFAULT_ZONE_TARGET)� Rich_Rule)�log)�DbusServiceObject)�handle_exceptions�dbus_handle_exceptions�dbus_service_method�dbus_polkit_require_auth)�errors)� FirewallError)�portStr�portInPortRange�coalescePortRange�breakPortRangec s� e Zd ZdZdZejjZe � fdd��Z e dd� �Z e dd� �Z e d d � �Zeejd d d �e d�dd���Zeejddd �e d�dd���Zeejj�eejdd�e d�dd����Zejjejdd�dd � �Zeejj�eejdd �e d�� fd d � ���Zeejjd d �e d�d!d"���Z eejjdd �e d�d#d$���Z d%d&� Z eejjd d�e d�d'd(���Z eejjdd�e d�d)d*���Z eejj�e d�d+d,���Z!ejjejjdd�e d-d.� ��Z"eejj�e d�d/d0���Z#ejjejjdd�e d1d2� ��Z$eejjdd�e d�d3d4���Z%ejjejjdd�e d5d6� ��Z&eejjdd �e d�d7d8���Z'eejjdd�e d�d9d:���Z(eejjdd �e d�d;d<���Z)eejjdd�e d�d=d>���Z*eejjdd �e d�d?d@���Z+eejjdd�e d�dAdB���Z,eejjdd �e d�dCdD���Z-eejjdd�e d�dEdF���Z.eejjdGd �e d�dHdI���Z/eejjdGd�e d�dJdK���Z0eejjdd�e d�dLdM���Z1eejjdd�e d�dNdO���Z2eejjddPd �e d�dQdR���Z3eejjdSd �e d�dTdU���Z4eejjdSd�e d�dVdW���Z5eejjd d�e d�dXdY���Z6eejjd d�e d�dZd[���Z7eejjd dPd �e d�d\d]���Z8eejjdGd �e d�d^d_���Z9eejjdGd�e d�d`da���Z:eejjdd�e d�dbdc���Z;eejjdd�e d�ddde���Z<eejjddPd �e d�dfdg���Z=eejjdSd �e d�dhdi���Z>eejjdSd�e d�djdk���Z?eejjd d�e d�dldm���Z@eejjd d�e d�dndo���ZAeejjd dPd �e d�dpdq���ZBeejjdGd �e d�drds���ZCeejjdGd�e d�dtdu���ZDeejjdd�e d�dvdw���ZEeejjdd�e d�dxdy���ZFeejjddPd �e d�dzd{���ZGeejjdPd �e d�d|d}���ZHeejjdPd�e d�d~d���ZIeejj�e d�d�d����ZJeejj�e d�d�d����ZKeejjdPd �e d�d�d����ZLeejjdPd �e d�d�d����ZMeejjdPd�e d�d�d����ZNeejj�e d�d�d����ZOeejj�e d�d�d����ZPeejjdPd �e d�d�d����ZQeejjd�d �e d�d�d����ZReejjd�d�e d�d�d����ZSeejjd�d�e d�d�d����ZTeejjd�d�e d�d�d����ZUeejjd�dPd �e d�d�d����ZVeejjdGd �e d�d�d����ZWeejjdGd�e d�d�d����ZXeejjdd�e d�d�d����ZYeejjdd�e d�d�d����ZZeejjddPd �e d�d�d����Z[eejjdGd �e d�d�d����Z\eejjdGd�e d�d�d����Z]eejjdd�e d�d�d����Z^eejjdd�e d�d�d����Z_eejjddPd �e d�d�d����Z`eejjdGd �e d�d�d����ZaeejjdGd�e �d d�d����Zbeejjdd�e �dd�d����Zceejjdd�e �dd�d����ZdeejjddPd �e �dd�d����Ze� ZfS ( �FirewallDConfigZonezFirewallD main classTc s` t t| �j|i |�� || _|| _|| _|| _|d | _|d | _d| j | _ t | tj j � d S )Nr � zconfig.zone.%d) �superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_ZONE)�selfr Zconf�zoner �args�kwargs�� __class__� �?/usr/lib/python3.9/site-packages/firewall/server/config_zone.pyr 8 s �z FirewallDConfigZone.__init__c C s d S �Nr( �r" r( r( r) �__del__E s zFirewallDConfigZone.__del__c C s | � � d S r* )Zremove_from_connectionr+ r( r( r) � unregisterI s z FirewallDConfigZone.unregisterc C s� |dkrt �| jj�S |dkr,t �| jj�S |dkrBt �| jj�S |dkrXt �| jj�S |dkrnt �| jj�S t j � d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r. r/ r ZBooleanr0 r1 � exceptions� DBusException)r" � property_namer( r( r) � _get_propertyQ s ��z!FirewallDConfigZone._get_property�ss�v)� in_signature� out_signatureNc C sL t |t�}t |t�}t�d| j||� |tjjkrBtj� d| ��| � |�S )Nz%s.Get('%s', '%s')�Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r! r3 r4 r6 )r" �interface_namer5 �senderr( r( r) �Getb s � ��zFirewallDConfigZone.Get�sza{sv}c C s` t |t�}t�d| j|� |tjjkr6tj� d| ��i }dD ]}| � |�||< q>tj |dd�S )Nz%s.GetAll('%s')r; )r. r/ r r0 r1 �sv�Z signature) r r< r r= r r r r! r3 r4 r6 Z Dictionary)r" r> r? �ret�xr( r( r) �GetAlls s ��zFirewallDConfigZone.GetAllZssv)r9 c C sl t |t�}t |t�}t |�}t�d| j|||� | j�|� |tjj krXtj � d| ��tj � d| ��d S )Nz%s.Set('%s', '%s', '%s')r; zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r< r r= r r � accessCheckr r r! r3 r4 )r" r> r5 Z new_valuer? r( r( r) �Set� s$ � ����zFirewallDConfigZone.Setzsa{sv}asrC c C s2 t |t�}t |�}t |�}t�d| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r< r r= r )r" r> Zchanged_propertiesZinvalidated_propertiesr( r( r) �PropertiesChanged� s �z%FirewallDConfigZone.PropertiesChanged)r: c s8 t �d| j� tt| ��| j| j�� �}t | |t j j �S )Nz%s.Introspect()) r Zdebug2r r r � Introspectr r Zget_busr r r r! )r" r? �datar& r( r) rJ � s � �z FirewallDConfigZone.Introspectz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)c C sD t �d| j� | j�| j�}|d tkr@t|�}d|d< t|�}|S )� get settings for zone z%s.getSettings()� r0 ) r r= r r Zget_zone_configr r �list�tuple)r" r? �settings� _settingsr( r( r) � getSettings� s z FirewallDConfigZone.getSettingsc C s4 t �d| j� | j�| j�}|d tkr0d|d< |S )rL z%s.getSettings2()�targetr0 )r r= r r �get_zone_config_dictr r �r" r? rP r( r( r) � getSettings2� s z FirewallDConfigZone.getSettings2c C s | j �| j�}d|v r"t|d �nt� }d|v r<t|d �nt� }t|t�rzt|t�d� �| }t|t�d� �| }nDd|v r�t|d �nt� }d|v r�t|d �nt� }|| }|| }|D ] } | j� | �r�t t j | ��q�|D ] } | j� | �r�t t j | ��q�dS )a Assignment of interfaces/sources to zones is different from other zone settings in the sense that particular interface/zone can be part of only one zone. So make sure added interfaces/sources have not already been bound to another zone.� interfaces�sourcesN)r rT r �set� isinstancerO r Zindex_ofr ZgetZoneOfInterfacer r Z ZONE_CONFLICTZgetZoneOfSource) r" rP Z old_settingsZ old_ifacesZ old_sourcesZ added_ifacesZ added_sourcesZ new_ifacesZ new_sourcesZiface�sourcer( r( r) � _checkDuplicateInterfacesSources� s z4FirewallDConfigZone._checkDuplicateInterfacesSourcesc C st t |�}t�d| j� | j�|� |d dkrFt|�}t|d< t|�}| � |� | j � | j |�| _ | � | j j� dS )�!update settings for zone z%s.update('...')rM r0 N)r r r= r r rG rN r rO r\ r Zset_zone_configr �Updatedr. )r" rP r? rQ r( r( r) �update� s zFirewallDConfigZone.updatec C sl t |�}t�d| j� | j�|� d|v r>|d dkr>t|d< | �|� | j� | j |�| _ | � | j j � dS )r] z%s.update2('...')rS r0 N) r r r= r r rG r r\ r Zset_zone_config_dictr r^ r. )r" rP r? r( r( r) �update2� s zFirewallDConfigZone.update2c C s< t �d| j� | j�|� | j�| j�| _| �| jj � dS )z/load default settings for builtin zone z%s.loadDefaults()N) r r= r r rG r Zload_zone_defaultsr r^ r. �r" r? r( r( r) � loadDefaults s z FirewallDConfigZone.loadDefaultsc C s t �d| j|f � d S )Nz%s.Updated('%s')�r r= r �r" r. r( r( r) r^ s zFirewallDConfigZone.Updatedc C s: t �d| j� | j�|� | j�| j� | j�| j� dS )zremove zone z%s.removeZone()N) r r= r r rG r Z remove_zoner Z removeZonera r( r( r) �remove s zFirewallDConfigZone.removec C s t �d| j|f � d S )Nz%s.Removed('%s')rc rd r( r( r) �Removed s zFirewallDConfigZone.Removedc C sF t |t�}t�d| j|� | j�|� | j�| j |�| _ | � |� dS )zrename zone z%s.rename('%s')N) r r< r r= r r rG r Z rename_zoner �Renamed)r" r. r? r( r( r) �rename% s zFirewallDConfigZone.renamec C s t �d| j|f � d S )Nz%s.Renamed('%s')rc rd r( r( r) rg 1 s zFirewallDConfigZone.Renamedc C s t �d| j� | �� d S )Nz%s.getVersion()r �r r= r rR ra r( r( r) � getVersion8 s z FirewallDConfigZone.getVersionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setVersion('%s')r � r r< r r= r r rG rN rR r_ )r" �versionr? rP r( r( r) � setVersion? s z FirewallDConfigZone.setVersionc C s t �d| j� | �� d S )Nz %s.getShort()r ri ra r( r( r) �getShortL s z FirewallDConfigZone.getShortc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setShort('%s')r rk )r" Zshortr? rP r( r( r) �setShortS s z FirewallDConfigZone.setShortc C s t �d| j� | �� d S )Nz%s.getDescription()� ri ra r( r( r) �getDescription` s z"FirewallDConfigZone.getDescriptionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setDescription('%s')rp rk )r" � descriptionr? rP r( r( r) �setDescriptiong s z"FirewallDConfigZone.setDescriptionc C s. t �d| j� | �� }|d tkr*|d S dS )Nz%s.getTarget()rM r0 )r r= r rR r rU r( r( r) � getTargetw s z FirewallDConfigZone.getTargetc C sT t |t�}t�d| j|� | j�|� t| �� �}|dkr>|nt |d< | � |� d S )Nz%s.setTarget('%s')r0 rM ) r r< r r= r r rG rN rR r r_ )r" rS r? rP r( r( r) � setTarget s z FirewallDConfigZone.setTarget�asc C s t �d| j� | �� d S )Nz%s.getServices()� ri ra r( r( r) � getServices� s z FirewallDConfigZone.getServicesc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setServices('[%s]')�,rw � r rN r r= r �joinr rG rR r_ )r" Zservicesr? rP r( r( r) � setServices� s � z FirewallDConfigZone.setServicesc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t j |��|d � |� | � |� d S )Nz%s.addService('%s')rw �r r< r r= r r rG rN rR r r �ALREADY_ENABLED�appendr_ �r" �servicer? rP r( r( r) � addService� s z FirewallDConfigZone.addServicec C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d � |� | � |� d S )Nz%s.removeService('%s')rw �r r< r r= r r rG rN rR r r � NOT_ENABLEDre r_ r� r( r( r) � removeService� s z!FirewallDConfigZone.removeService�bc C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryService('%s')rw �r r< r r= r rR )r" r� r? r( r( r) � queryService� s z FirewallDConfigZone.queryServiceza(ss)c C s t �d| j� | �� d S )Nz %s.getPorts()� ri ra r( r( r) �getPorts� s z FirewallDConfigZone.getPortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j � |� t| � � �}||d< | � |� d S )Nz%s.setPorts('[%s]')ry c s s" | ]}d |d |d f V qdS �z ('%s, '%s')r r Nr( ��.0�portr( r( r) � <genexpr>� � z/FirewallDConfigZone.setPorts.<locals>.<genexpr>r� � r rN rZ r rO r r= r r{ r rG rR r_ �r" Zportsr? Z_portsr� rP r( r( r) �setPorts� s � z FirewallDConfigZone.setPortsc s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]&}t ||d �r\t t j d|� f ��q\t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S ) Nz%s.addPort('%s', '%s')c s | d � kS �Nr r( �rE ��protocolr( r) �<lambda>� r� z-FirewallDConfigZone.addPort.<locals>.<lambda>r� r �%s:%sc S s g | ] \}}|�qS r( r( �r� �_port� _protocolr( r( r) � <listcomp>� r� z/FirewallDConfigZone.addPort.<locals>.<listcomp>�-�r r< r r= r r rG rN rR �filterr r r r~ r re r r r_ � r" r� r� r? rP Zexisting_port_idsZport_idZ added_rangesZremoved_ranges�ranger( r� r) �addPort� s& � �zFirewallDConfigZone.addPortc s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]}t ||d �r\ q�q\t t j d|� f ��t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S ) Nz%s.removePort('%s', '%s')c s | d � kS r� r( r� r� r( r) r� � r� z0FirewallDConfigZone.removePort.<locals>.<lambda>r� r r� c S s g | ] \}}|�qS r( r( r� r( r( r) r� r� z2FirewallDConfigZone.removePort.<locals>.<listcomp>r� �r r< r r= r r rG rN rR r� r r r r� r re r r r_ r� r( r� r) � removePort� s$ � z FirewallDConfigZone.removePortc C sX t |t�}t |t�}t�d| j||� | �� d D ] \}}t||�r2||kr2 dS q2dS )Nz%s.queryPort('%s', '%s')r� TF�r r< r r= r rR r �r" r� r� r? r� r� r( r( r) � queryPort s �z FirewallDConfigZone.queryPortc C s t �d| j� | �� d S )Nz%s.getProtocols()� ri ra r( r( r) � getProtocols s z FirewallDConfigZone.getProtocolsc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setProtocols('[%s]')ry r� rz )r" Z protocolsr? rP r( r( r) � setProtocols! s � z FirewallDConfigZone.setProtocolsc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t j |��|d � |� | � |� d S )Nz%s.addProtocol('%s')r� r} �r" r� r? rP r( r( r) � addProtocol- s z FirewallDConfigZone.addProtocolc C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d � |� | � |� d S )Nz%s.removeProtocol('%s')r� r� r� r( r( r) �removeProtocol: s z"FirewallDConfigZone.removeProtocolc C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryProtocol('%s')r� r� )r" r� r? r( r( r) � queryProtocolG s z!FirewallDConfigZone.queryProtocolc C s t �d| j� | �� d S )Nz%s.getSourcePorts()� ri ra r( r( r) �getSourcePortsQ s z"FirewallDConfigZone.getSourcePortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j � |� t| � � �}||d< | � |� d S )Nz%s.setSourcePorts('[%s]')ry c s s" | ]}d |d |d f V qdS r� r( r� r( r( r) r� e r� z5FirewallDConfigZone.setSourcePorts.<locals>.<genexpr>r� r� r� r( r( r) �setSourcePortsX s � z"FirewallDConfigZone.setSourcePortsc s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]&}t ||d �r\t t j d|� f ��q\t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S ) Nz %s.addSourcePort('%s', '%s')c s | d � kS r� r( r� r� r( r) r� u r� z3FirewallDConfigZone.addSourcePort.<locals>.<lambda>r� r r� c S s g | ] \}}|�qS r( r( r� r( r( r) r� z r� z5FirewallDConfigZone.addSourcePort.<locals>.<listcomp>r� r� r� r( r� r) � addSourcePortk s& � �z!FirewallDConfigZone.addSourcePortc s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]}t ||d �r\ q�q\t t j d|� f ��t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S ) Nz %s.removeSourcePort('%s', '%s')c s | d � kS r� r( r� r� r( r) r� � r� z6FirewallDConfigZone.removeSourcePort.<locals>.<lambda>r� r r� c S s g | ] \}}|�qS r( r( r� r( r( r) r� � r� z8FirewallDConfigZone.removeSourcePort.<locals>.<listcomp>r� r� r� r( r� r) �removeSourcePort� s$ � z$FirewallDConfigZone.removeSourcePortc C sX t |t�}t |t�}t�d| j||� | �� d D ] \}}t||�r2||kr2 dS q2dS )Nz %s.querySourcePort('%s', '%s')r� TFr� r� r( r( r) �querySourcePort� s �z#FirewallDConfigZone.querySourcePortc C s t �d| j� | �� d S )Nz%s.getIcmpBlocks()� ri ra r( r( r) � getIcmpBlocks� s z!FirewallDConfigZone.getIcmpBlocksc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setIcmpBlocks('[%s]')ry r� rz )r" Z icmptypesr? rP r( r( r) � setIcmpBlocks� s � z!FirewallDConfigZone.setIcmpBlocksc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t j |��|d � |� | � |� d S )Nz%s.addIcmpBlock('%s')r� r} �r" �icmptyper? rP r( r( r) � addIcmpBlock� s z FirewallDConfigZone.addIcmpBlockc C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d � |� | � |� d S )Nz%s.removeIcmpBlock('%s')r� r� r� r( r( r) �removeIcmpBlock� s z#FirewallDConfigZone.removeIcmpBlockc C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryIcmpBlock('%s')r� r� )r" r� r? r( r( r) �queryIcmpBlock� s z"FirewallDConfigZone.queryIcmpBlockc C s t �d| j� | �� d S )Nz%s.getIcmpBlockInversion()� ri ra r( r( r) �getIcmpBlockInversion� s z)FirewallDConfigZone.getIcmpBlockInversionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz %s.setIcmpBlockInversion('%s')r� � r �boolr r= r r rG rN rR r_ )r" �flagr? rP r( r( r) �setIcmpBlockInversion� s z)FirewallDConfigZone.setIcmpBlockInversionc C sP t �d| j� | j�|� t| �� �}|d r:ttj d��d|d< | � |� d S )Nz%s.addIcmpBlockInversion()r� �icmp-block-inversionT� r r= r r rG rN rR r r r~ r_ rU r( r( r) �addIcmpBlockInversion� s z)FirewallDConfigZone.addIcmpBlockInversionc C sP t �d| j� | j�|� t| �� �}|d s:ttj d��d|d< | � |� d S )Nz %s.removeIcmpBlockInversion()r� r� F� r r= r r rG rN rR r r r� r_ rU r( r( r) �removeIcmpBlockInversion� s z,FirewallDConfigZone.removeIcmpBlockInversionc C s t �d| j� | �� d S )Nz %s.queryIcmpBlockInversion()r� ri ra r( r( r) �queryIcmpBlockInversion s z+FirewallDConfigZone.queryIcmpBlockInversionc C s t �d| j� | �� d S )Nz%s.getMasquerade()� ri ra r( r( r) � getMasquerade s z!FirewallDConfigZone.getMasqueradec C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setMasquerade('%s')r� r� )r" � masquerader? rP r( r( r) � setMasquerade s z!FirewallDConfigZone.setMasqueradec C sP t �d| j� | j�|� t| �� �}|d r:ttj d��d|d< | � |� d S )Nz%s.addMasquerade()r� r� Tr� rU r( r( r) � addMasquerade" s z!FirewallDConfigZone.addMasqueradec C sP t �d| j� | j�|� t| �� �}|d s:ttj d��d|d< | � |� d S )Nz%s.removeMasquerade()r� r� Fr� rU r( r( r) �removeMasquerade- s z$FirewallDConfigZone.removeMasqueradec C s t �d| j� | �� d S )Nz%s.queryMasquerade()r� ri ra r( r( r) �queryMasquerade8 s z#FirewallDConfigZone.queryMasqueradeza(ssss)c C s t �d| j� | �� d S )Nz%s.getForwardPorts()� ri ra r( r( r) �getForwardPortsA s z#FirewallDConfigZone.getForwardPortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j � |� t| � � �}||d< | � |� d S )Nz%s.setForwardPorts('[%s]')ry c s s. | ]&}d |d |d |d |d f V qdS )z('%s, '%s', '%s', '%s')r r rp � Nr( r� r( r( r) r� U s � �z6FirewallDConfigZone.setForwardPorts.<locals>.<genexpr>r� r� r� r( r( r) �setForwardPortsH s �� z#FirewallDConfigZone.setForwardPortsZssssc C s� t |t�}t |t�}t |t�}t |t�}t�d| j||||� | j�|� ||t|�t|�f}t| �� �}||d v r�t t j d||||f ��|d � |� | � |� d S )Nz)%s.addForwardPort('%s', '%s', '%s', '%s')r� � %s:%s:%s:%sr} �r" r� r� �toport�toaddrr? �fwp_idrP r( r( r) �addForwardPort\ s$ � ��z"FirewallDConfigZone.addForwardPortc C s� t |t�}t |t�}t |t�}t |t�}t�d| j||||� | j�|� ||t|�t|�f}t| �� �}||d vr�t t j d||||f ��|d � |� | � |� d S )Nz,%s.removeForwardPort('%s', '%s', '%s', '%s')r� r� r� r� r( r( r) �removeForwardPortp s$ � ��z%FirewallDConfigZone.removeForwardPortc C sb t |t�}t |t�}t |t�}t |t�}t�d| j||||� ||t|�t|�f}|| �� d v S )Nz+%s.queryForwardPort('%s', '%s', '%s', '%s')r� r� )r" r� r� r� r� r? r� r( r( r) �queryForwardPort� s �z$FirewallDConfigZone.queryForwardPortc C s t �d| j� | �� d S )Nz%s.getInterfaces()� ri ra r( r( r) � getInterfaces� s z!FirewallDConfigZone.getInterfacesc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setInterfaces('[%s]')ry r� rz )r" rW r? rP r( r( r) � setInterfaces� s � z!FirewallDConfigZone.setInterfacesc C st t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t j |��|d � |� | � |� t| jj|� d S )Nz%s.addInterface('%s')r� )r r< r r= r r rG rN rR r r r~ r r_ r r r. �r" � interfacer? rP r( r( r) � addInterface� s z FirewallDConfigZone.addInterfacec C sp t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d � |� | � |� td|� d S )Nz%s.removeInterface('%s')r� � )r r< r r= r r rG rN rR r r r� re r_ r r� r( r( r) �removeInterface� s z#FirewallDConfigZone.removeInterfacec C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryInterface('%s')r� r� )r" r� r? r( r( r) �queryInterface� s z"FirewallDConfigZone.queryInterfacec C s t �d| j� | �� d S )Nz%s.getSources()� ri ra r( r( r) � getSources� s z FirewallDConfigZone.getSourcesc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setSources('[%s]')ry r� rz )r" rX r? rP r( r( r) � setSources� s � z FirewallDConfigZone.setSourcesc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t j |��|d � |� | � |� d S )Nz%s.addSource('%s')r� r} �r" r[ r? rP r( r( r) � addSource� s z FirewallDConfigZone.addSourcec C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d � |� | � |� d S )Nz%s.removeSource('%s')r� r� r� r( r( r) � removeSource� s z FirewallDConfigZone.removeSourcec C s* t |t�}t�d| j|� || �� d v S )Nz%s.querySource('%s')r� r� )r" r[ r? r( r( r) � querySource� s z FirewallDConfigZone.querySourcec C s t �d| j� | �� d S )Nz%s.getRichRules()� ri ra r( r( r) � getRichRules s z FirewallDConfigZone.getRichRulesc C s\ t |t�}t�d| jd�|�� | j�|� t| �� �}dd� |D �}||d< | � |� d S )Nz%s.setRichRules('[%s]')ry c S s g | ]}t t|d ���qS )��rule_str)r< r )r� �rr( r( r) r� r� z4FirewallDConfigZone.setRichRules.<locals>.<listcomp>r� rz )r" Zrulesr? rP r( r( r) � setRichRules s � z FirewallDConfigZone.setRichRulesc C st t |t�}t�d| j|� | j�|� t| �� �}tt |d��}||d v rXt t j |��|d � |� | �|� d S )Nz%s.addRichRule('%s')r� r� )r r< r r= r r rG rN rR r r r r~ r r_ �r" �ruler? rP r� r( r( r) � addRichRule s z FirewallDConfigZone.addRichRulec C st t |t�}t�d| j|� | j�|� t| �� �}tt |d��}||d vrXt t j |��|d � |� | �|� d S )Nz%s.removeRichRule('%s')r� r� )r r< r r= r r rG rN rR r r r r� re r_ r� r( r( r) �removeRichRule) s z"FirewallDConfigZone.removeRichRulec C s8 t |t�}t�d| j|� tt|d��}|| �� d v S )Nz%s.queryRichRule('%s')r� r� )r r< r r= r r rR )r" r� r? r� r( r( r) � queryRichRule7 s z!FirewallDConfigZone.queryRichRule)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)g�__name__� __module__� __qualname__�__doc__Z persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r r, r- r6 r ZPROPERTIES_IFACEr@ rF r rH r� �signalrI ZPK_ACTION_INFOZINTROSPECTABLE_IFACErJ r! rR rV r\ r_ r` rb r^ re rf rh rg rj rm rn ro rq rs rt ru rx r| r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� � __classcell__r( r( r& r) r 0 s� �� � � �� � �� �� �� �� �� � � ������ �� � � ������ �� � � ��� ��� ������ �� � � ��� � � ��� � � �r )"r Z dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.zoner Zfirewall.core.fw_ifcfgr Zfirewall.core.baser Zfirewall.core.richr Zfirewall.core.loggerr Zfirewall.server.dbusr Zfirewall.server.decoratorsr r r r r Zfirewall.errorsr Zfirewall.functionsr r r r r r( r( r( r) �<module> s