관리-도구
편집 파일: config_service.cpython-39.pyc
a ���g_u � @ s� d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl m Z d dl m Z mZmZmZ d dlmZ d dlmZ G d d � d e �ZdS ) � N)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�log)�DbusServiceObject)�handle_exceptions�dbus_handle_exceptions�dbus_service_method�dbus_polkit_require_auth)�errors)� FirewallErrorc s� e Zd ZdZdZejjZe � fdd��Z e dd� �Z e dd� �Z e d d � �Zeejd d d �e d�dd���Zeejddd �e d�dd���Zeejj�eejdd�e d�dd����Zejjejdd�dd � �Zeejj�eejdd �e d�� fd d � ���Zeejjd d �e d�d!d"���Z eejjdd �e d�d#d$���Z eejjd d�e d�d%d&���Z eejjdd�e d�d'd(���Z eejj�e d�d)d*���Z ejjejjdd�e d+d,� ��Z!eejj�e d�d-d.���Z"ejjejjdd�e d/d0� ��Z#eejjdd�e d�d1d2���Z$ejjejjdd�e d3d4� ��Z%eejjdd �e d�d5d6���Z&eejjdd�e d�d7d8���Z'eejjdd �e d�d9d:���Z(eejjdd�e d�d;d<���Z)eejjdd �e d�d=d>���Z*eejjdd�e d�d?d@���Z+eejjdAd �e d�dBdC���Z,eejjdAd�e d�dDdE���Z-eejjd d�e d�dFdG���Z.eejjd d�e d�dHdI���Z/eejjd dJd �e d�dKdL���Z0eejjdMd �e d�dNdO���Z1eejjdMd�e d�dPdQ���Z2eejjdd�e d�dRdS���Z3eejjdd�e d�dTdU���Z4eejjddJd �e d�dVdW���Z5eejjdAd �e d�dXdY���Z6eejjdAd�e d�dZd[���Z7eejjd d�e d�d\d]���Z8eejjd d�e d�d^d_���Z9eejjd dJd �e d�d`da���Z:eejjdMd �e d�dbdc���Z;eejjdMd�e d�ddde���Z<eejjdd�e d�dfdg���Z=eejjdd�e d�dhdi���Z>eejjddJd �e d�djdk���Z?eejjdld �e d�dmdn���Z@eejjdld�e d�dodp���ZAeejjddd �e d�dqdr���ZBeejjd d�e d�dsdt���ZCeejjdd�e d�dudv���ZDeejjd dJd �e d�dwdx���ZEeejjdMd �e d�dydz���ZFeejjdMd�e d�d{d|���ZGeejjdd�e d�d}d~���ZHeejjdd�e d�dd����ZIeejjddJd �e d�d�d����ZJ� ZKS )��FirewallDConfigServicezFirewallD main classTc s` t t| �j|i |�� || _|| _|| _|| _|d | _|d | _d| j | _ t | tj j � d S )Nr � zconfig.service.%d) �superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus� DBUS_INTERFACE_CONFIG_SERVICE)�selfr Zconf�servicer �args�kwargs�� __class__� �B/usr/lib/python3.9/site-packages/firewall/server/config_service.pyr 2 s �z FirewallDConfigService.__init__c C s d S �Nr �r r r r! �__del__? s z FirewallDConfigService.__del__c C s | � � d S r" )Zremove_from_connectionr# r r r! � unregisterC s z!FirewallDConfigService.unregisterc C s� |dkrt �| jj�S |dkr,t �| jj�S |dkrBt �| jj�S |dkrXt �| jj�S |dkrnt �| jj�S t j � d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r& r' r ZBooleanr( r) � exceptions� DBusException)r � property_namer r r! � _get_propertyK s ��z$FirewallDConfigService._get_property�ss�v)� in_signature� out_signatureNc C sL t |t�}t |t�}t�d| j||� |tjjkrBtj� d| ��| � |�S )Nz%s.Get('%s', '%s')�Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r r+ r, r. )r �interface_namer- �senderr r r! �Get\ s � ��zFirewallDConfigService.Get�sza{sv}c C s` t |t�}t�d| j|� |tjjkr6tj� d| ��i }dD ]}| � |�||< q>tj |dd�S )Nz%s.GetAll('%s')r3 )r& r' r r( r) �sv�Z signature) r r4 r r5 r r r r r+ r, r. Z Dictionary)r r6 r7 �ret�xr r r! �GetAllm s ��z FirewallDConfigService.GetAllZssv)r1 c C sl t |t�}t |t�}t |�}t�d| j|||� | j�|� |tjj krXtj � d| ��tj � d| ��d S )Nz%s.Set('%s', '%s', '%s')r3 zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r4 r r5 r r � accessCheckr r r r+ r, )r r6 r- Z new_valuer7 r r r! �Set~ s$ � ����zFirewallDConfigService.Setzsa{sv}asr; c C s2 t |t�}t |�}t |�}t�d| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r4 r r5 r )r r6 Zchanged_propertiesZinvalidated_propertiesr r r! �PropertiesChanged� s �z(FirewallDConfigService.PropertiesChanged)r2 c s8 t �d| j� tt| ��| j| j�� �}t | |t j j �S )Nz%s.Introspect()) r Zdebug2r r r � Introspectr r Zget_busr r r r )r r7 �datar r r! rB � s � �z!FirewallDConfigService.Introspectz(sssa(ss)asa{ss}asa(ss))c C s t �d| j� | j�| j�S )�!get settings for service z%s.getSettings())r r5 r r Zget_service_configr �r r7 r r r! � getSettings� s z"FirewallDConfigService.getSettingsc C s t �d| j� | j�| j�S )rD z%s.getSettings2())r r5 r r �get_service_config_dictr rE r r r! � getSettings2� s z#FirewallDConfigService.getSettings2c C sF t |�}t�d| j� | j�|� | j�| j|�| _| � | jj � dS )z$update settings for service z%s.update('...')N) r r r5 r r r? r Zset_service_configr �Updatedr& �r �settingsr7 r r r! �update� s z FirewallDConfigService.updatec C sF t |�}t�d| j� | j�|� | j�| j|�| _| � | jj � d S )Nz%s.update2('...')) r r r5 r r r? r �set_service_config_dictr rI r& rJ r r r! �update2� s z FirewallDConfigService.update2c C s< t �d| j� | j�|� | j�| j�| _| �| jj � dS )z2load default settings for builtin service z%s.loadDefaults()N) r r5 r r r? r Zload_service_defaultsr rI r& rE r r r! � loadDefaults� s z#FirewallDConfigService.loadDefaultsc C s t �d| j|f � d S )Nz%s.Updated('%s')�r r5 r �r r& r r r! rI � s z FirewallDConfigService.Updatedc C s: t �d| j� | j�|� | j�| j� | j�| j� dS )zremove service z%s.removeService()N) r r5 r r r? r Zremove_servicer Z removeServicerE r r r! �remove� s z FirewallDConfigService.removec C s t �d| j|f � d S )Nz%s.Removed('%s')rP rQ r r r! �Removed� s z FirewallDConfigService.Removedc C sF t |t�}t�d| j|� | j�|� | j�| j |�| _ | � |� dS )zrename service z%s.rename('%s')N) r r4 r r5 r r r? r Zrename_servicer �Renamed)r r& r7 r r r! �rename� s z FirewallDConfigService.renamec C s t �d| j|f � d S )Nz%s.Renamed('%s')rP rQ r r r! rT s z FirewallDConfigService.Renamedc C s t �d| j� | �� d S )Nz%s.getVersion()r �r r5 r rF rE r r r! � getVersion s z!FirewallDConfigService.getVersionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setVersion('%s')r � r r4 r r5 r r r? �listrF rL )r �versionr7 rK r r r! � setVersion s z!FirewallDConfigService.setVersionc C s t �d| j� | �� d S )Nz %s.getShort()r rV rE r r r! �getShort s z FirewallDConfigService.getShortc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setShort('%s')r rX )r Zshortr7 rK r r r! �setShort$ s z FirewallDConfigService.setShortc C s t �d| j� | �� d S )Nz%s.getDescription()� rV rE r r r! �getDescription1 s z%FirewallDConfigService.getDescriptionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setDescription('%s')r^ rX )r � descriptionr7 rK r r r! �setDescription8 s � z%FirewallDConfigService.setDescriptionza(ss)c C s t �d| j� | �� d S )Nz %s.getPorts()� rV rE r r r! �getPortsF s z FirewallDConfigService.getPortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j � |� t| � � �}||d< | � |� d S )Nz%s.setPorts('[%s]')�,c s s" | ]}d |d |d f V qdS �z ('%s, '%s')r r Nr ��.0�portr r r! � <genexpr>Z � z2FirewallDConfigService.setPorts.<locals>.<genexpr>rb � r rY � isinstance�append�tupler r5 r �joinr r? rF rL �r Zportsr7 Z_portsrh rK r r r! �setPortsM s � z FirewallDConfigService.setPortsc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||f|d v rbt t j d||f ��|d � ||f� | � |� d S )Nz%s.addPort('%s', '%s')rb �%s:%s�r r4 r r5 r r r? rY rF r r �ALREADY_ENABLEDrm rL �r rh �protocolr7 rK r r r! �addPort` s � �z FirewallDConfigService.addPortc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||f|d vrbt t j d||f ��|d � ||f� | � |� d S )Nz%s.removePort('%s', '%s')rb rr �r r4 r r5 r r r? rY rF r r � NOT_ENABLEDrR rL ru r r r! � removePortp s � z!FirewallDConfigService.removePort�bc C s: t |t�}t |t�}t�d| j||� ||f| �� d v S )Nz%s.queryPort('%s', '%s')rb �r r4 r r5 r rF �r rh rv r7 r r r! � queryPort s �z FirewallDConfigService.queryPort�asc C s t �d| j� | �� d S )Nz%s.getProtocols()� rV rE r r r! � getProtocols� s z#FirewallDConfigService.getProtocolsc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setProtocols('[%s]')rd r� ) r rY r r5 r ro r r? rF rL )r Z protocolsr7 rK r r r! � setProtocols� s � z#FirewallDConfigService.setProtocolsc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t j |��|d � |� | � |� d S )Nz%s.addProtocol('%s')r� rs �r rv r7 rK r r r! � addProtocol� s z"FirewallDConfigService.addProtocolc C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d � |� | � |� d S )Nz%s.removeProtocol('%s')r� rx r� r r r! �removeProtocol� s z%FirewallDConfigService.removeProtocolc C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryProtocol(%s')r� r| )r rv r7 r r r! � queryProtocol� s z$FirewallDConfigService.queryProtocolc C s t �d| j� | �� d S )Nz%s.getSourcePorts()� rV rE r r r! �getSourcePorts� s z%FirewallDConfigService.getSourcePortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j � |� t| � � �}||d< | � |� d S )Nz%s.setSourcePorts('[%s]')rd c s s" | ]}d |d |d f V qdS re r rf r r r! ri � rj z8FirewallDConfigService.setSourcePorts.<locals>.<genexpr>r� rk rp r r r! �setSourcePorts� s � z%FirewallDConfigService.setSourcePortsc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||f|d v rbt t j d||f ��|d � ||f� | � |� d S )Nz %s.addSourcePort('%s', '%s')r� rr rs ru r r r! � addSourcePort� s � �z$FirewallDConfigService.addSourcePortc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||f|d vrbt t j d||f ��|d � ||f� | � |� d S )Nz %s.removeSourcePort('%s', '%s')r� rr rx ru r r r! �removeSourcePort� s � z'FirewallDConfigService.removeSourcePortc C s: t |t�}t |t�}t�d| j||� ||f| �� d v S )Nz %s.querySourcePort('%s', '%s')r� r| r} r r r! �querySourcePort� s �z&FirewallDConfigService.querySourcePortc C s t �d| j� | �� d S )Nz%s.getModules()� rV rE r r r! � getModules s z!FirewallDConfigService.getModulesc C s� t |t�}g }|D ]8}|�d�r@|�dd�}d|v r@|�dd�}|�|� q|}t�d| jd�|�� | j � |� t| � � �}||d< | � |� d S )N� nf_conntrack_� �_�-z%s.setModules('[%s]')rd r� ) r rY � startswith�replacerm r r5 r ro r r? rF rL )r �modulesr7 Z_modules�modulerK r r r! � setModules s � z!FirewallDConfigService.setModulesc C s� t |t�}|�d�r4|�dd�}d|v r4|�dd�}t�d| j|� | j�|� t | � � �}||d v rtt t j |��|d �|� | �|� d S )Nr� r� r� r� z%s.addModule('%s')r� )r r4 r� r� r r5 r r r? rY rF r r rt rm rL �r r� r7 rK r r r! � addModule" s z FirewallDConfigService.addModulec C s� t |t�}|�d�r4|�dd�}d|v r4|�dd�}t�d| j|� | j�|� t | � � �}||d vrtt t j |��|d �|� | �|� d S )Nr� r� r� r� z%s.removeModule('%s')r� )r r4 r� r� r r5 r r r? rY rF r r ry rR rL r� r r r! � removeModule3 s z#FirewallDConfigService.removeModulec C sT t |t�}|�d�r4|�dd�}d|v r4|�dd�}t�d| j|� || �� d v S )Nr� r� r� r� z%s.queryModule('%s')r� )r r4 r� r� r r5 r rF )r r� r7 r r r! � queryModuleD s z"FirewallDConfigService.queryModuleza{ss}c C s t �d| j� | �� d S )Nz%s.getDestinations()� rV rE r r r! �getDestinationsR s z&FirewallDConfigService.getDestinationsc C sV t |t�}t�d| j|�d�|�d�� | j�|� t| � � �}||d< | � |� d S )Nz*%s.setDestinations({ipv4:'%s', ipv6:'%s'})Zipv4Zipv6r� ) r �dictr r5 r �getr r? rY rF rL )r Z destinationsr7 rK r r r! �setDestinationsY s � z&FirewallDConfigService.setDestinationsc C sV t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d | S )Nz%s.getDestination('%s')r� ) r r4 r r5 r r r? rY rF r r ry �r �familyr7 rK r r r! �getDestinationf s � z%FirewallDConfigService.getDestinationc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||d v rn|d | |krnt t j d||f ��||d |< | � |� d S )Nz %s.setDestination('%s', '%s')r� z '%s': '%s') r r4 r r5 r r r? rY rF r r rt rL �r r� �addressr7 rK r r r! �setDestinations s � � z%FirewallDConfigService.setDestinationc C sb t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t j |��|d |= | � |� d S )Nz%s.removeDestination('%s')r� ) r r4 r r5 r r r? rY rF r r ry rL r� r r r! �removeDestination� s � z(FirewallDConfigService.removeDestinationc C sJ t |t�}t |t�}t�d| j||� | �� }||d v oH||d | kS )Nz %s.queryDestination('%s', '%s')r� r| r� r r r! �queryDestination� s � �z'FirewallDConfigService.queryDestinationc C s< t �d| j� | j�|� | j�| j�}d|v r8|d S g S )Nz%s.getIncludes()�includes)r r5 r r r? r rG r )r r7 rK r r r! � getIncludes� s z"FirewallDConfigService.getIncludesc C sZ t |t�}t�d| j|� | j�|� d|d d � i}| j�| j |�| _ | � | j j � d S )Nz%s.setIncludes('%s')r� ) r rY r r5 r r r? r rM r rI r& )r r� r7 rK r r r! � setIncludes� s z"FirewallDConfigService.setIncludesc C sj t |t�}t�d| j|� | j�|� | j�| j �}|� dg �� |� | j� | j |�| _ | � | j j� d S )Nz%s.addInclude('%s')r� )r r4 r r5 r r r? r rG r � setdefaultrm rM rI r& �r Zincluder7 rK r r r! � addInclude� s z!FirewallDConfigService.addIncludec C sf t |t�}t�d| j|� | j�|� | j�| j �}|d � |� | j� | j |�| _ | � | j j � d S )Nz%s.removeInclude('%s')r� )r r4 r r5 r r r? r rG r rR rM rI r& r� r r r! � removeInclude� s z$FirewallDConfigService.removeIncludec C s@ t |t�}t�d| j|� | j�| j�}d|v r<||d v S dS )Nz%s.queryInclude('%s')r� F)r r4 r r5 r r rG r r� r r r! � queryInclude� s z#FirewallDConfigService.queryInclude)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)L�__name__� __module__� __qualname__�__doc__Z persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r r$ r% r. r ZPROPERTIES_IFACEr8 r> r r@ r �signalrA ZPK_ACTION_INFOZINTROSPECTABLE_IFACErB r rF rH rL rN rO rI rR rS rU rT rW r[ r\ r] r_ ra rc rq rw rz r~ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� � __classcell__r r r r! r * s �� ��� � � � � � �� �� �� ��� � � �� � � ���� � � ����� �� � � � � ��� � �r )r Z dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.loggerr Zfirewall.server.dbusr Zfirewall.server.decoratorsr r r r r Zfirewall.errorsr r r r r r! �<module> s