관리-도구
편집 파일: direct.cpython-39.pyc
a ���g�< � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZ d dl m Z m Z d dl m Z mZmZ d dlmZ d dlmZ d dlmZ d d lmZ d d lmZ G d d � d e�ZG d d� de �ZdS )� N)�config)�LastUpdatedOrderedDict)� splitArgs�joinArgs)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�log)� ipXtables)�ebtables)�errors)� FirewallErrorc @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�direct_ContentHandlerc C s t �| |� d| _d S )NF)r �__init__�direct)�self�item� r �;/usr/lib/python3.9/site-packages/firewall/core/io/direct.pyr ( s z direct_ContentHandler.__init__c C sf t �| ||� | j�||� |dkr@| jr6ttjd��d| _�n"|dkr�| js\t� d� d S |d }|d }|d }| j� |||� n�|dk�r | js�t� d � d S |d }|d vr�ttj d | ��|d }|d }zt |d �}W n( t �y t� d |d � Y d S 0 ||||g| _nD|dk�rP| j�s>t� d� d S |d }|g| _nt� d| � d S d S )Nr zMore than one direct tag.T�chainz$Parse Error: chain outside of direct�ipv�table�rulez#Parse Error: rule outside of direct��ipv4�ipv6Zebz"'%s' not from {'ipv4'|'ipv6'|'eb'}�priorityz'Parse Error: %s is not a valid priority� passthroughz&Parse Error: command outside of directzUnknown XML element %s)r � startElementr Zparser_check_element_attrsr r r Z PARSE_ERRORr �error� add_chain� INVALID_IPV�int� ValueError�_rule� _passthrough)r �name�attrsr r r r r r r r , sV � �� z"direct_ContentHandler.startElementc C s� t �| |� |dkrN| jr<| j�t| j�� | jj| j� n t� d� d | _n@|dkr�| jr~| j �t| j�� | jj | j � n t� d� d | _ d S )Nr z2Error: rule does not have any arguments, ignoring.r z9Error: passthrough does not have any arguments, ignoring.) r � endElementZ_elementr$ �appendr r �add_ruler r r% �add_passthrough)r r& r r r r( \ s z direct_ContentHandler.endElementN)�__name__� __module__� __qualname__r r r( r r r r r ' s 0r c s6 e Zd ZdZddgfddddddgfgfdddgfgffZdZd g d �g d �d gd �Zi Z� fdd�Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Zd4d5� Zd6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!� Z"S )B�Directz Direct class �chains)� r1 r1 �rulesr1 r � passthroughsz(a(sss)a(sssias)a(sas))N�r r r �r r r r r )r r r r c s0 t t| ��� || _t� | _t� | _t� | _d S �N)�superr/ r �filenamer r0 r2 r3 )r r8 �� __class__r r r � s zDirect.__init__c C s d S r6 r )r �confr Zall_conf�all_io_objectsr r r � _check_config� s zDirect._check_configc C s� g }g }| j D ]0}| j | D ] }|�tt|�t|g� �� q q|�|� g }| jD ]D}| j| D ]4}|�t|d |d |d |d t|d �f�� qbqT|�|� g }| jD ]*}| j| D ]}|�t|t|�f�� q�q�|�|� t|�S )Nr � � )r0 r) �tuple�listr2 r3 )r �ret�x�keyr r r r r � export_config� s& � zDirect.export_configc C s� | � � | �|� t| j�D ]l\}\}}|dkrH|| D ]}| j|� q8|dkrh|| D ]}| j|� qX|dkr || D ]}| j|� qxq d S )Nr0 r2 r3 )�cleanupZ check_config� enumerate�IMPORT_EXPORT_STRUCTUREr r* r+ )r r; r< �i�elementZdummyrC r r r � import_config� s zDirect.import_configc C s" | j �� | j�� | j�� d S r6 )r0 �clearr2 r3 �r r r r rF � s zDirect.cleanupc C s� t d� | jD ]*}t d|d |d d�| j| �f � qt d� | jD ]L}t d|d |d |d f � | j| D ] \}}t d |d �|�f � qtqHt d � | jD ]2}t d | � | j| D ]}t d d �|� � q�q�d S )Nr0 z (%s, %s): %sr r> �,r2 z (%s, %s, %s):r? z (%d, ('%s'))z','r3 z %s:z ('%s'))�printr0 �joinr2 r3 )r rD r �argsr r r �output� s � z Direct.outputc C s( g d�}||vr$t tjd||f ��d S )Nr �'%s' not in '%s')r r r! )r r Zipvsr r r � _check_ipv� s �zDirect._check_ipvc C sF | � |� |dv r tj�� ntj�� }||vrBttjd||f ��d S )N)r r rS )rT r ZBUILT_IN_CHAINS�keysr r r Z INVALID_TABLE)r r r Ztablesr r r �_check_ipv_table� s � �zDirect._check_ipv_tablec C sd | � ||� ||f}|| jvr(g | j|< || j| vrH| j| �|� nt�d|||f d � d S )Nz(Chain '%s' for table '%s' with ipv '%s' �already in list, ignoring)rV r0 r) r �warning�r r r r rD r r r r � s ��zDirect.add_chainc C sn | � ||� ||f}|| jv rX|| j| v rX| j| �|� t| j| �dkrj| j|= ntd|||f ��d S )Nr z4Chain '%s' with table '%s' with ipv '%s' not in list)rV r0 �remove�lenr# rY r r r � remove_chain� s ��zDirect.remove_chainc C s, | � ||� ||f}|| jv o*|| j| v S r6 )rV r0 rY r r r � query_chain� s zDirect.query_chainc C s< | � ||� ||f}|| jv r(| j| S td||f ��d S )Nz&No chains for table '%s' with ipv '%s')rV r0 r# )r r r rD r r r � get_chains� s �zDirect.get_chainsc C s | j S r6 )r0 rM r r r �get_all_chains� s zDirect.get_all_chainsc C s� | � ||� |||f}|| jvr,t� | j|< |t|�f}|| j| vrV|| j| |< n*t�dd�|�||f d||f d � d S )N�(Rule '%s' for table '%s' and chain '%s' �',z with ipv '%s' and priority %d rW )rV r2 r r@ r rX rP �r r r r r rQ rD �valuer r r r* s � ��zDirect.add_rulec C s� | � ||� |||f}|t|�f}|| jv rb|| j| v rb| j| |= t| j| �dkr�| j|= n$tdd�|�||f d||f ��d S )Nr r` ra z)with ipv '%s' and priority %d not in list)rV r@ r2 r[ r# rP rb r r r � remove_rule s � �zDirect.remove_rulec C s^ | � ||� |||f}|| jv rZ| j| �� D ]}| j| |= q.t| j| �dkrZ| j|= d S )Nr )rV r2 rU r[ )r r r r rD rc r r r � remove_rules s zDirect.remove_rulesc C s: | � ||� |||f}|t|�f}|| jv o8|| j| v S r6 )rV r@ r2 rb r r r � query_rule' s zDirect.query_rulec C sF | � ||� |||f}|| jv r*| j| S td||f d| ��d S )Nz'No rules for table '%s' and chain '%s' z with ipv '%s')rV r2 r# rY r r r � get_rules- s ��zDirect.get_rulesc C s | j S r6 )r2 rM r r r � get_all_rules6 s zDirect.get_all_rulesc C s^ | � |� || jvr g | j|< || j| vr>| j| �|� n t�dd�|�|f d � d S )N� Passthrough '%s' for ipv '%s'ra rW )rT r3 r) r rX rP �r r rQ r r r r+ ; s ��zDirect.add_passthroughc C sl | � |� || jv rN|| j| v rN| j| �|� t| j| �dkrh| j|= ntdd�|�|f d ��d S )Nr ri ra z not in list)rT r3 rZ r[ r# rP rj r r r �remove_passthroughE s ��zDirect.remove_passthroughc C s" | � |� || jv o || j| v S r6 )rT r3 rj r r r �query_passthroughO s zDirect.query_passthroughc C s. | � |� || jv r | j| S td| ��d S )Nz No passthroughs for ipv '%s')rT r3 r# )r r r r r �get_passthroughsS s zDirect.get_passthroughsc C s | j S r6 )r3 rM r r r �get_all_passthroughsZ s zDirect.get_all_passthroughsc C s� | � � | j�d�s&ttjd| j ��t| �}t�� }|� |� t | jd��n}t� d �}|� |� z|� |� W n: tjy� } z ttjd|�� ��W Y d }~n d }~0 0 W d � n1 s�0 Y d S )Nz.xmlz'%s' is missing .xml suffix�rbzNot a valid file: %s)rF r8 �endswithr r Z INVALID_NAMEr �saxZ make_parserZsetContentHandler�openZ InputSourceZ setByteStream�parseZSAXParseExceptionZ INVALID_TYPEZ getException)r �handler�parser�f�source�msgr r r �read_ s& � ��z Direct.readc C s, t j�| j�r^zt�| jd| j � W n6 ty\ } z td| j|f ��W Y d }~n d }~0 0 t j�tj �szt � tj d� t j | jddd�}t |�}|�� |�di � |�d� | jD ]D}|\}}| j| D ],}|�d � |�d |||d �� |�d� q�q�| jD ]�}|\}}}| j| D ]j\}} t| �d k �r6�q |�d � |�d |||d| d�� |�tj�t| ��� |�d � |�d� �q �q| jD ]n}| j| D ]\} t| �d k �r��q�|�d � |�dd|i� |�tj�t| ��� |�d� |�d� �q��q�|�d� |�d� |�� |� � ~d S )Nz%s.oldzBackup of '%s' failed: %si� ZwtzUTF-8)�mode�encodingr � z r r4 r> r z%dr5 r r ) �os�path�existsr8 �shutil�copy2� Exception�IOErrorr Z ETC_FIREWALLD�mkdir�iorr r Z startDocumentr ZignorableWhitespacer0 Z simpleElementr2 r[ rq Zsaxutils�escaper r( r3 Z endDocument�close) r rx rv rt rD r r r r rQ r r r �writeq s^ ( � � z Direct.write)#r, r- r. �__doc__rH ZDBUS_SIGNATUREZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr r= rE rK rF rR rT rV r r\ r] r^ r_ r* rd re rf rg rh r+ rk rl rm rn ry r� � __classcell__r r r9 r r/ q sL �� r/ )Zxml.saxrq r} r� r� Zfirewallr Zfirewall.fw_typesr Zfirewall.functionsr r Zfirewall.core.io.io_objectr r r Zfirewall.core.loggerr Z firewall.corer r r Zfirewall.errorsr r r/ r r r r �<module> s J