관리-도구
편집 파일: service.cpython-39.pyc
a ���g'0 � @ s� g d �Z ddlmZ ddlZddlZddlZddlmZ ddlm Z m Z m Z m Z m Z mZmZ ddlmZ ddlmZ ddlmZ G dd � d e �ZG d d � d e �Zd d � Zddd�ZdS ))�Service�service_reader�service_writer� N)�config)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator� check_port� check_tcpudp�check_protocol� check_address)�log)�errors)� FirewallErrorc s� e Zd Zdddddgfddgfdddifd dgfd dgfd dgfd dgff Zd dgZdddd�Zddgddgdgdgddgddgdgdgd�Z� fdd�Zd d � Zd d � Z � Z S ) r )�version� )�shortr )� descriptionr �ports)r r �modulesr � destination� protocols� source_ports�includes�helpers�_�-N)r r �service�namer �port�protocol�value�ipv4�ipv6r )r r r �moduler � source-port�include�helperc sN t t| ��� d| _d| _d| _g | _g | _g | _i | _ g | _ g | _ g | _ d S �Nr ) �superr �__init__r r r r r r r r r r ��self�� __class__� �</usr/lib/python3.9/site-packages/firewall/core/io/service.pyr* C s zService.__init__c C sh d| _ d| _d| _| jd d �= | jd d �= | jd d �= | j�� | jd d �= | j d d �= | j d d �= d S r( ) r r r r r r r �clearr r r r+ r/ r/ r0 �cleanupP s zService.cleanupc C sd |dkrH|D ]6}|d dkr6t |d � t|d � q t|d � q �n|dkrd|D ] }t|� qTn�|dkr�|D ] }t |d � t|d � qpn�|dkr�|D ]*}|dvr�ttjd | ��t||| � q�n�|d k�r&|D ]J}|�d ��r |�d d�}d |v �r |�d d �}t |�dk r�ttj |��q�n:|dk�r`|D ]*} | |d v�r4ttj d� | j | ����q4d S )Nr r r � r r r �r" r# z'%s' not in {'ipv4'|'ipv6'}r � nf_conntrack_r r � r Zservicesz.Service '{}': Included service '{}' not found.)r r r r r ZINVALID_DESTINATIONr � startswith�replace�lenZINVALID_MODULE�INVALID_SERVICE�formatr ) r, r �itemZ all_configZall_io_objectsr �protor r$ r& r/ r/ r0 � _check_config\ sL �� ��zService._check_config) �__name__� __module__� __qualname__ZIMPORT_EXPORT_STRUCTUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr* r2 r> � __classcell__r/ r/ r- r0 r % s8 � �� r c @ s e Zd Zdd� ZdS )�service_ContentHandlerc C s, t �| ||� | j�||� |dkrTd|v r<t�d|d � d|v rP|d | j_�n�|dkr`�n�|dkrl�n�|dk�r$|d dkr�t|d � t|d � |d |d f}|| jj vr�| jj � |� nt�d |d |d � nBt |d � |d | jj v�r| jj � |d � nt�d |d � �n|d k�rtt |d � |d | jj v�r`| jj � |d � nt�d |d � �n�|d k�r�t|d � t|d � |d |d f}|| jj v�r�| jj � |� nt�d|d |d � �nJ|dk�r:dD ]J}||v �r�t||| � || jjv �r$t�d|� n|| | jj|< �q�n�|dk�r�|d }|�d��rz|�dd�}d|v �rz|�dd�}|| jjv�r�| jj� |� n t�d|� n�|dk�r�|d | jjv�r�| jj� |d � nt�d|d � n@|dk�r(|d | jjv�r| jj� |d � nt�d|d � d S )Nr r z'Ignoring deprecated attribute name='%s'r r r r r r z#Port '%s/%s' already set, ignoring.z$Protocol '%s' already set, ignoring.r! r% z)SourcePort '%s/%s' already set, ignoring.r r4 z2Destination address for '%s' already set, ignoringr$ r5 r r z"Module '%s' already set, ignoring.r& z#Include '%s' already set, ignoring.r' z"Helper '%s' already set, ignoring.)r � startElementr< Zparser_check_element_attrsr Zwarningr r r r �appendr r r r r r7 r8 r r r )r, r �attrs�entry�xr$ r/ r/ r0 rD � s� � � � � � � � � �z#service_ContentHandler.startElementN)r? r@ rA rD r/ r/ r/ r0 rC � s rC c C s t � }| �d�s ttjd| ��| d d� |_|�|j� | |_||_|� t j �rVdnd|_ |j |_ t|�}t�� }|�|� d|| f }t|d��n}t�d �}|�|� z|�|� W n: tjy� } z ttjd|�� ��W Y d }~n d }~0 0 W d � n1 �s 0 Y ~~|S ) Nz.xmlz'%s' is missing .xml suffix���FT�%s/%s�rbz not a valid service file: %s)r �endswithr r Z INVALID_NAMEr Z check_name�filename�pathr7 r � ETC_FIREWALLDZbuiltin�defaultrC �saxZ make_parserZsetContentHandler�openZ InputSourceZ setByteStream�parseZSAXParseExceptionr: Z getException) rM rN r �handler�parserr �f�source�msgr/ r/ r0 r � s: � ��:r c C sZ |r|n| j }| jr$d|| jf }nd|| jf }tj �|�r�zt�|d| � W n2 ty� } zt� d||� W Y d }~n d }~0 0 tj � |�}|� t j �r�tj �|�s�tj �t j �s�t�t j d� t�|d� tj|ddd�}t|�}|�� i }| j�r| jd k�r| j|d < |�d |� |�d � | j�rt| jd k�rt|�d � |�di � |�| j� |�d� |�d � | j�r�| jd k�r�|�d � |�di � |�| j� |�d� |�d � | jD ]4} |�d � |�d| d | d d�� |�d � �q�| j D ]*} |�d � |�dd| i� |�d � �q | j D ]4} |�d � |�d| d | d d�� |�d � �q2| j D ]*} |�d � |�dd| i� |�d � �qnt | j �dk�r�|�d � |�d| j � |�d � | j!D ]*} |�d � |�dd | i� |�d � �q�| j"D ]*} |�d � |�dd| i� |�d � �q|�d � |�d � |�#� |�$� ~d S ) NrJ z %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si� ZwtzUTF-8)�mode�encodingr r r � z r r r r r3 )r r r r! r% r$ r r r& r' )%rN rM r �os�exists�shutil�copy2� Exceptionr �error�dirnamer7 r rO �mkdir�iorR r Z startDocumentr rD ZignorableWhitespacer Z charactersZ endElementr r Z simpleElementr r r r9 r r r Z endDocument�close)r rN �_pathr rX �dirpathrV rT rF r r r$ r& r' r/ r/ r0 r � s� $ � r )N)�__all__Zxml.saxrQ r\ rd r^ Zfirewallr Zfirewall.core.io.io_objectr r r r r r r Zfirewall.core.loggerr r Zfirewall.errorsr r rC r r r/ r/ r/ r0 �<module> s $ dQ