🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-06-14 14:34:05 | PHP 8.1.34
📂
/ (Root)
/
usr
/
lib
/
python3.9
/
site-packages
/
firewall
/
core
/
__pycache__
📍 /usr/lib/python3.9/site-packages/firewall/core/__pycache__
🔄 Refresh
✏️
Editing: fw_config.cpython-39.pyc
Read Only
a ��i�� � @ s� d gZ ddlZddlZddlZddlZddlmZmZ ddlm Z ddl m Z ddl m Z ddlmZmZmZ ddlmZmZmZ dd lmZmZmZ dd lmZm Z m Z dd l m Z m Z m!Z! dd l"m#Z#m$Z$m%Z% dd lm&Z& ddl'm(Z( G dd � d e)�Z*dS )�FirewallConfig� N)�Dict�List)�config)�log)� IO_Object)�IcmpType�icmptype_reader�icmptype_writer)�Service�service_reader�service_writer)�Zone� zone_reader� zone_writer)�IPSet� ipset_reader� ipset_writer)�Helper� helper_reader� helper_writer)�Policy� policy_reader� policy_writer)�errors)� FirewallErrorc @ sR e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zi fee e e f d �d d �Z dd� Z dd� Zdd� Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Z d.d/� Z d0d1� Z d2d3� Z d4d5� Z d6d7� Z!d8d9� Z"d:d;� Z#d<d=� Z$d>d?� Z%d@dA� Z&dBdC� Z'dDdE� Z(dFdG� Z)dHdI� Z*dJdK� Z+dLdM� Z,dNdO� Z-dPdQ� Z.dRdS� Z/dTdU� Z0dVdW� Z1dXdY� Z2dZd[� Z3d\d]� Z4d^d_� Z5d`da� Z6dbdc� Z7ddde� Z8dfdg� Z9dhdi� Z:djdk� Z;dldm� Z<dndo� Z=dpdq� Z>drds� Z?dtdu� Z@dvdw� ZAdxdy� ZBdzd{� ZCd|d}� ZDd~d� ZEd�d�� ZFd�d�� ZGd�d�� ZHd�d�� ZId�d�� ZJd�d�� ZKd�d�� ZLd�d�� ZMd�d�� ZNd�d�� ZOd�d�� ZPd�d�� ZQd�d�� ZRd�d�� ZSd�d�� ZTd�d�� ZUd�d�� ZVd�d�� ZWd�d�� ZXd�d�� ZYd�d�� ZZd�d�� Z[d�d�� Z\d�d�� Z]d�d�� Z^d�d�� Z_d�d�� Z`d�d�� Zad�d�� Zbd�d�� Zcd�d�� Zdd�d�� Zed�d�� Zfd�dÄ Zgd�dń Zhd�dDŽ Zid�dɄ Zjd�d˄ Zkd�d̈́ Zld�S )�r c C s || _ | �� d S �N)�_fw�_FirewallConfig__init_vars)�self�fw� r! �;/usr/lib/python3.9/site-packages/firewall/core/fw_config.py�__init__* s zFirewallConfig.__init__c C sH d| j | j| j| j| j| j| j| j| j| j | j | j | j | j | j| jf S )Nz>%s(%r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r))� __class__�_ipsets� _icmptypes� _services�_zones�_helpersZpolicy_objects�_builtin_ipsets�_builtin_icmptypes�_builtin_services�_builtin_zones�_builtin_helpers�_builtin_policy_objects�_firewalld_conf� _policies�_direct�r r! r! r" �__repr__. s ��zFirewallConfig.__repr__c C s^ i | _ i | _i | _i | _i | _i | _i | _i | _i | _i | _ i | _ i | _ d | _ d | _ d | _d S r )r% r& r' r( r) �_policy_objectsr* r+ r, r- r. r/ r0 r1 r2 r3 r! r! r" Z __init_vars8 s zFirewallConfig.__init_varsc C s t | j�� �D ]}| j| �� | j|= qt | j�� �D ]}| j| �� | j|= q8t | j�� �D ]}| j| �� | j|= qbt | j�� �D ]}| j| �� | j|= q�t | j�� �D ]}| j| �� | j|= q�t | j�� �D ]}| j| �� | j|= q�t | j �� �D ] }| j | �� | j |= �q t | j �� �D ] }| j | �� | j |= �q6t | j �� �D ] }| j | �� | j |= �qbt | j �� �D ] }| j | �� | j |= �q�| j �r�| j �� | ` d | _ | j�r�| j�� | `d | _| j�r | j�� | `d | _| �� d S r )�listr* �keys�cleanupr% r+ r& r, r' r- r( r. r) r0 r1 r2 r )r �xr! r! r" r8 I sV zFirewallConfig.cleanupc s� i }� fdd�� � � D �|d< � fdd�� �� D �|d< � fdd�� �� D �|d< � fdd�� �� D �|d < � fd d�� �� D �|d < � fd d�� �� D �|d < i |d< � j�d�|d d< |S )zJ Returns a dict of dicts of all permanent config objects. c s i | ]}|� � |��qS r! )� get_ipset)�.0Zipsetr3 r! r" � <dictcomp>� � z:FirewallConfig.get_all_io_objects_dict.<locals>.<dictcomp>�ipsetsc s i | ]}|� � |��qS r! )� get_helper)r; �helperr3 r! r" r< � r= �helpersc s i | ]}|� � |��qS r! )� get_icmptype)r; Zicmptyper3 r! r" r< � r= � icmptypesc s i | ]}|� � |��qS r! )� get_service)r; Zservicer3 r! r" r< � r= �servicesc s i | ]}|� � |��qS r! )�get_zone)r; �zoner3 r! r" r< � r= �zonesc s i | ]}|� � |��qS r! )�get_policy_object)r; Zpolicyr3 r! r" r< � r= �policies�confZFirewallBackend)� get_ipsets� get_helpers� get_icmptypes� get_services� get_zones�get_policy_objectsr0 �get)r � conf_dictr! r3 r" �get_all_io_objects_dict~ s z&FirewallConfig.get_all_io_objects_dict)�extra_io_objectsc C sn | � � }|D ] }|| D ]}||| |j< qq g d�}|D ].}|| }|�� D ]\}} | �| �� |� qNq:d S )N)r> rA rC rE rH rJ )rT �name�itemsZcheck_config_dict�export_config_dict) r rU Zall_io_objectsZtype_key�obj�orderZ io_obj_typeZio_objsrV Zio_objr! r! r" �full_check_config� s z FirewallConfig.full_check_configc C s | j j�� S r )r rJ Zquery_lockdownr3 r! r! r" �lockdown_enabled� s z FirewallConfig.lockdown_enabledc C s | j j�||�S r )r rJ � access_check)r �key�valuer! r! r" r] � s zFirewallConfig.access_checkc C s || _ d S r �r0 )r rK r! r! r" �set_firewalld_conf� s z!FirewallConfig.set_firewalld_confc C s | j S r r` r3 r! r! r" �get_firewalld_conf� s z!FirewallConfig.get_firewalld_confc C s( t j�tj�s| j�� n | j�� d S r )�os�path�existsr ZFIREWALLD_CONFr0 �clear�readr3 r! r! r" �update_firewalld_conf� s z$FirewallConfig.update_firewalld_confc C s� | j | j| j| j| j| jg}|D ]�}t�|�}|D ]v}|| }tj� |j|j �}zt � |d| � W n< t y� } z$t�d||� t�|� W Y d }~n d }~0 0 ||= q2q | j�� | j�� d S )N�%s.old� Backup of file '%s' failed: %s)r( r5 r% r' r) r& �copyrc rd �join�filename�shutil�move� Exceptionr �error�remover0 � set_defaults�write)r rZ Z io_obj_dictZ dict_copyZobj_namerY rV �msgr! r! r" �reset_defaults� s � z FirewallConfig.reset_defaultsc C s || _ d S r �r1 )r rJ r! r! r" � set_policies� s zFirewallConfig.set_policiesc C s | j S r rw r3 r! r! r" � get_policies� s zFirewallConfig.get_policiesc C s, t j�tj�s | jj�� n | jj�� d S r ) rc rd re r ZLOCKDOWN_WHITELISTr1 Zlockdown_whitelistr8 rg r3 r! r! r" �update_lockdown_whitelist� s z(FirewallConfig.update_lockdown_whitelistc C s || _ d S r �r2 )r Zdirectr! r! r" � set_direct� s zFirewallConfig.set_directc C s | j S r r{ r3 r! r! r" � get_direct� s zFirewallConfig.get_directc C s( t j�tj�s| j�� n | j�� d S r )rc rd re r ZFIREWALLD_DIRECTr2 r8 rg r3 r! r! r" � update_direct� s z FirewallConfig.update_directc C s$ t tt| j�� �t| j�� � ��S r )�sorted�setr6 r% r7 r* r3 r! r! r" rL � s �zFirewallConfig.get_ipsetsc C s$ |j r|| j|j< n || j|j< d S r )�builtinr* rV r% �r rY r! r! r" � add_ipset� s zFirewallConfig.add_ipsetc C s8 || j v r| j | S || jv r(| j| S ttj|��d S r )r% r* r r � INVALID_IPSET�r rV r! r! r" r: � s zFirewallConfig.get_ipsetc C st |j | jvr ttj|j ��nB| j|j |kr@ttjd|j ��n |j | jvr^ttjd|j ��| �|� | j|j S )Nzself._ipsets[%s] != objz'%s' not a built-in ipset)rV r% r r � NO_DEFAULTSr* � _remove_ipsetr� r! r! r" �load_ipset_defaults� s � � z"FirewallConfig.load_ipset_defaultsc C s |� � S r �� export_configr� r! r! r" �get_ipset_config s z FirewallConfig.get_ipset_configc C sf t � |�}|jr0tj|_d|_|j|jkr0d|_|�|| �� � | �d|gi� | � |� t |� |S )NFr> ) rk r� r �ETC_FIREWALLD_IPSETSrd �default� import_configrT r[ r� r �r rY rK r9 r! r! r" �set_ipset_config s z FirewallConfig.set_ipset_configc C s� || j v s|| jv r$ttjd| ��t� }|�|� ||_d| |_t j |_ d|_ d|_ |�|| �� � | �d|gi� | �|� t|� |S )Nznew_ipset(): '%s'�%s.xmlFTr> )r% r* r r � NAME_CONFLICTr � check_namerV rm r r� rd r� r� r� rT r[ r� r �r rV rK r9 r! r! r" � new_ipset s � zFirewallConfig.new_ipsetc C s� t j�|�}t j�|�}t j�|�s�|tjkr�| j�� D ]L}| j| }|j |kr8| j|= |j | j v rxd| j |j f S d|f S q8nJ| j �� D ]>}| j | }|j |kr�| j |= |j | jvr�d|f S dS q�dS t � d|� zt||�}W n6 t�y& } z t �d||� W Y d }~dS d }~0 0 |j | j v�rV|j | jv�rV| �|� d|fS |tjk�r�|j | jv �r�| j|j j|_|| j|j < d|fS |j | j v �r�| j |j = || j |j < |j | jv�r�d|fS dS dS )N�updaterr �NNzLoading ipset file '%s'z"Failed to load ipset file '%s': %s�new)rc rd �basename�dirnamere r r� r% r7 rm rV r* r �debug1r rp rq r� r� �r rV rm rd r9 rY ru r! r! r" �update_ipset_from_path' sP z%FirewallConfig.update_ipset_from_pathc C s� |j | jvrttj|j ��|jtjkr>ttjd|jtjf ��d|j|j f }zt � |d| � W n< t y� } z$t � d||� t�|� W Y d }~n d }~0 0 | j|j = d S �Nz '%s' != '%s'� %s/%s.xmlri rj )rV r% r r r� rd r r� �INVALID_DIRECTORYrn ro rp r rq rc rr �r rY rV ru r! r! r" r� l s �� z FirewallConfig._remove_ipsetc C s" |j s |js ttjd|j ��d S )Nz'%s' is built-in ipset)r� r� r r Z BUILTIN_IPSETrV r� r! r! r" �check_builtin_ipset} s �z"FirewallConfig.check_builtin_ipsetc C s | � |� | �|� d S r )r� r� r� r! r! r" � remove_ipset� s zFirewallConfig.remove_ipsetc C s$ | � |� | �||�}| �|� |S r )r� � _copy_ipsetr� )r rY rV r� r! r! r" � rename_ipset� s zFirewallConfig.rename_ipsetc C s | � ||�� �S r )r� r� �r rY rV r! r! r" r� � s zFirewallConfig._copy_ipsetc C s$ t tt| j�� �t| j�� � ��S r )r r� r6 r& r7 r+ r3 r! r! r" rN � s �z FirewallConfig.get_icmptypesc C s$ |j r|| j|j< n || j|j< d S r )r� r+ rV r& r� r! r! r" � add_icmptype� s zFirewallConfig.add_icmptypec C s8 || j v r| j | S || jv r(| j| S ttj|��d S r )r& r+ r r �INVALID_ICMPTYPEr� r! r! r" rB � s zFirewallConfig.get_icmptypec C st |j | jvr ttj|j ��nB| j|j |kr@ttjd|j ��n |j | jvr^ttjd|j ��| �|� | j|j S )Nzself._icmptypes[%s] != objz '%s' not a built-in icmptype)rV r& r r r� r+ �_remove_icmptyper� r! r! r" �load_icmptype_defaults� s � � z%FirewallConfig.load_icmptype_defaultsc C s |� � S r r� r� r! r! r" �get_icmptype_config� s z"FirewallConfig.get_icmptype_configc C sf t � |�}|jr0tj|_d|_|j|jkr0d|_|�|| �� � | �d|gi� | � |� t |� |S )NFrC ) rk r� r �ETC_FIREWALLD_ICMPTYPESrd r� r� rT r[ r� r r� r! r! r" �set_icmptype_config� s z"FirewallConfig.set_icmptype_configc C s� || j v s|| jv r$ttjd| ��t� }|�|� ||_d| |_t j |_ d|_ d|_ |�|| �� � | �d|gi� | �|� t|� |S )Nznew_icmptype(): '%s'r� FTrC )r& r+ r r r� r r� rV rm r r� rd r� r� r� rT r[ r� r r� r! r! r" � new_icmptype� s � zFirewallConfig.new_icmptypec C s� t j�|�}t j�|�}t j�|�s�|tjkr�| j�� D ]L}| j| }|j |kr8| j|= |j | j v rxd| j |j f S d|f S q8nJ| j �� D ]>}| j | }|j |kr�| j |= |j | jvr�d|f S dS q�dS t � d|� zt||�}W n6 t�y& } z t �d||� W Y d }~dS d }~0 0 |j | j v�rV|j | jv�rV| �|� d|fS |tjk�r�|j | jv �r�| j|j j|_|| j|j < d|fS |j | j v �r�| j |j = || j |j < |j | jv�r�d|fS dS dS )Nr� rr r� zLoading icmptype file '%s'z%Failed to load icmptype file '%s': %sr� )rc rd r� r� re r r� r& r7 rm rV r+ r r� r rp rq r� r� r� r! r! r" �update_icmptype_from_path� sP z(FirewallConfig.update_icmptype_from_pathc C s� |j | jvrttj|j ��|jtjkr>ttjd|jtjf ��d|j|j f }zt � |d| � W n< t y� } z$t � d||� t�|� W Y d }~n d }~0 0 | j|j = d S r� )rV r& r r r� rd r r� r� rn ro rp r rq rc rr r� r! r! r" r� s �� z FirewallConfig._remove_icmptypec C s" |j s |js ttjd|j ��d S )Nz'%s' is built-in icmp type)r� r� r r ZBUILTIN_ICMPTYPErV r� r! r! r" �check_builtin_icmptype) s �z%FirewallConfig.check_builtin_icmptypec C s | � |� | �|� d S r )r� r� r� r! r! r" �remove_icmptype. s z FirewallConfig.remove_icmptypec C s$ | � |� | �||�}| �|� |S r )r� �_copy_icmptyper� )r rY rV r� r! r! r" �rename_icmptype2 s z FirewallConfig.rename_icmptypec C s | � ||�� �S r )r� r� r� r! r! r" r� 8 s z FirewallConfig._copy_icmptypec C s$ t tt| j�� �t| j�� � ��S r )r r� r6 r' r7 r, r3 r! r! r" rO = s �zFirewallConfig.get_servicesc C s$ |j r|| j|j< n || j|j< d S r )r� r, rV r' r� r! r! r" � add_serviceA s zFirewallConfig.add_servicec C s< || j v r| j | S || jv r(| j| S ttjd| ��d S )Nzget_service(): '%s')r' r, r r �INVALID_SERVICEr� r! r! r" rD G s zFirewallConfig.get_servicec C st |j | jvr ttj|j ��nB| j|j |kr@ttjd|j ��n |j | jvr^ttjd|j ��| �|� | j|j S )Nzself._services[%s] != objz'%s' not a built-in service)rV r' r r r� r, �_remove_servicer� r! r! r" �load_service_defaultsN s � � z$FirewallConfig.load_service_defaultsc C sn |� � }g }td�D ]P}|j| d |vrL|�t�t||j| d ��� q|�||j| d � qt|�S )N� r �rX �range�IMPORT_EXPORT_STRUCTURE�appendrk �deepcopy�getattr�tuple�r rY rS Z conf_list�ir! r! r" �get_service_configZ s "z!FirewallConfig.get_service_configc C s |� � S r �rX r� r! r! r" �get_service_config_dictf s z&FirewallConfig.get_service_config_dictc C s4 i }t |�D ]\}}|||j| d < q | �||�S �Nr )� enumerater� �set_service_config_dict�r rY rK rS r� r_ r! r! r" �set_service_configi s z!FirewallConfig.set_service_configc C sf t � |�}|jr0tj|_d|_|j|jkr0d|_|�|| �� � | �d|gi� | � |� t |� |S )NFrE ) rk r� r �ETC_FIREWALLD_SERVICESrd r� �import_config_dictrT r[ r� r r� r! r! r" r� p s z&FirewallConfig.set_service_config_dictc C sX || j v s|| jv r$ttjd| ��i }t|�D ]\}}||tj| d < q0| �||�S )N�new_service(): '%s'r ) r' r, r r r� r� r r� �new_service_dict�r rV rK rS r� r_ r! r! r" � new_service~ s �zFirewallConfig.new_servicec C s� || j v s|| jv r$ttjd| ��t� }|�|� ||_d| |_t j |_ d|_ d|_ |�|| �� � | �d|gi� | �|� t|� |S )Nr� r� FTrE )r' r, r r r� r r� rV rm r r� rd r� r� r� rT r[ r� r r� r! r! r" r� � s � z FirewallConfig.new_service_dictc C s� t j�|�}t j�|�}t j�|�s�|tjkr�| j�� D ]L}| j| }|j |kr8| j|= |j | j v rxd| j |j f S d|f S q8nJ| j �� D ]>}| j | }|j |kr�| j |= |j | jvr�d|f S dS q�dS t � d|� zt||�}W n6 t�y& } z t �d||� W Y d }~dS d }~0 0 |j | j v�rV|j | jv�rV| �|� d|fS |tjk�r�|j | jv �r�| j|j j|_|| j|j < d|fS |j | j v �r�| j |j = || j |j < |j | jv�r�d|fS dS dS )Nr� rr r� zLoading service file '%s'z$Failed to load service file '%s': %sr� )rc rd r� r� re r r� r' r7 rm rV r, r r� r rp rq r� r� r� r! r! r" �update_service_from_path� sP z'FirewallConfig.update_service_from_pathc C s� |j | jvrttj|j ��|jtjkr>ttjd|jtjf ��d|j|j f }zt � |d| � W n< t y� } z$t � d||� t�|� W Y d }~n d }~0 0 | j|j = d S r� )rV r' r r r� rd r r� r� rn ro rp r rq rc rr r� r! r! r" r� � s �� z FirewallConfig._remove_servicec C s" |j s |js ttjd|j ��d S )Nz'%s' is built-in service)r� r� r r ZBUILTIN_SERVICErV r� r! r! r" �check_builtin_service� s �z$FirewallConfig.check_builtin_servicec C s | � |� | �|� d S r )r� r� r� r! r! r" �remove_service� s z FirewallConfig.remove_servicec C s$ | � |� | �||�}| �|� |S r )r� � _copy_servicer� )r rY rV r� r! r! r" �rename_service� s z FirewallConfig.rename_servicec C s | � ||�� �S r )r� rX r� r! r! r" r� s z FirewallConfig._copy_servicec C s$ t tt| j�� �t| j�� � ��S r )r r� r6 r( r7 r- r3 r! r! r" rP s �zFirewallConfig.get_zonesc C s$ |j r|| j|j< n || j|j< d S r )r� r- rV r( r� r! r! r" �add_zone s zFirewallConfig.add_zonec C s( || j v r| j |= || jv r$| j|= d S r )r- r( r� r! r! r" � forget_zone s zFirewallConfig.forget_zonec C s< || j v r| j | S || jv r(| j| S ttjd| ��d S )Nzget_zone(): %s)r( r- r r � INVALID_ZONEr� r! r! r" rF s zFirewallConfig.get_zonec C st |j | jvr ttj|j ��nB| j|j |kr@ttjd|j ��n |j | jvr^ttjd|j ��| �|� | j|j S )Nzself._zones[%s] != objz'%s' not a built-in zone)rV r( r r r� r- � _remove_zoner� r! r! r" �load_zone_defaults s � � z!FirewallConfig.load_zone_defaultsc C sn |� � }g }td�D ]P}|j| d |vrL|�t�t||j| d ��� q|�||j| d � qt|�S )N� r r� r� r! r! r" �get_zone_config* s "z FirewallConfig.get_zone_configc C s |� � S r r� r� r! r! r" �get_zone_config_dict6 s z#FirewallConfig.get_zone_config_dictc C s4 i }t |�D ]\}}|||j| d < q | �||�S r� )r� r� �set_zone_config_dictr� r! r! r" �set_zone_config9 s z FirewallConfig.set_zone_configc C sf t � |�}|jr0tj|_d|_|j|jkr0d|_|�|| �� � | �d|gi� | � |� t |� |S )NFrH ) rk r� r �ETC_FIREWALLD_ZONESrd r� r� rT r[ r� r r� r! r! r" r� @ s z#FirewallConfig.set_zone_config_dictc C sX || j v s|| jv r$ttjd| ��i }t|�D ]\}}||tj| d < q0| �||�S )N�new_zone(): '%s'r ) r( r- r r r� r� r r� � new_zone_dictr� r! r! r" �new_zoneN s zFirewallConfig.new_zonec C s� || j v s|| jv r$ttjd| ��t� }|�|� ||_d| |_t j |_ d|_ d|_ |�|| �� � | �d|gi� | �|� t|� |S )Nr� r� FTrH )r( r- r r r� r r� rV rm r r� rd r� r� r� rT r[ r� r r� r! r! r" r� X s z FirewallConfig.new_zone_dictc C s" t j�|�}t j�|�}t j�|�s�|�tj�r�| j� � D ]L}| j| }|j |kr:| j|= |j | j v rzd| j |j f S d|f S q:nJ| j � � D ]>}| j | }|j |kr�| j |= |j | jvr�d|f S dS q�dS t �d|� zt||�}W n6 t�y( } z t �d||� W Y d }~dS d }~0 0 |�tj��rrt|�ttj�k�rrdt j�|�t j�|�dd� f |_ |j | j v�r�|j | jv�r�| �|� d |fS |�tj��r�|j | jv �r�| j|j j|_|| j|j < d|fS |j | j v �r | j |j = || j |j < |j | jv�rd|fS dS dS ) Nr� rr r� zLoading zone file '%s'z!Failed to load zone file '%s': %s�%s/%sr ���r� )rc rd r� r� re � startswithr r� r( r7 rm rV r- r r� r rp rq �lenr� r� r� r! r! r" �update_zone_from_pathk s\ � � z$FirewallConfig.update_zone_from_pathc C s� |j | jvrttj|j ��|j�tj�s@ttj d|jtjf ��d|j|j f }zt � |d| � W n< t y� } z$t �d||� t�|� W Y d }~n d }~0 0 | j|j = d S �Nz '%s' doesn't start with '%s'r� ri rj )rV r( r r r� rd r� r r� r� rn ro rp r rq rc rr r� r! r! r" r� � s �� zFirewallConfig._remove_zonec C s" |j s |js ttjd|j ��d S )Nz'%s' is built-in zone)r� r� r r Z BUILTIN_ZONErV r� r! r! r" �check_builtin_zone� s �z!FirewallConfig.check_builtin_zonec C s | � |� | �|� d S r )r� r� r� r! r! r" � remove_zone� s zFirewallConfig.remove_zonec C sN | � |� |�� }| �|� z| �||�}W n | �|j|� � Y n0 |S r )r� rX r� r� rV )r rY rV Zobj_confr� r! r! r" � rename_zone� s zFirewallConfig.rename_zonec C s$ t tt| j�� �t| j�� � ��S r )r r� r6 r5 r7 r/ r3 r! r! r" rQ � s �z!FirewallConfig.get_policy_objectsc C s$ |j r|| j|j< n || j|j< d S r )r� r/ rV r5 r� r! r! r" �add_policy_object� s z FirewallConfig.add_policy_objectc C s< || j v r| j | S || jv r(| j| S ttjd| ��d S )Nzget_policy_object(): %s)r5 r/ r r �INVALID_POLICYr� r! r! r" rI � s z FirewallConfig.get_policy_objectc C st |j | jvr ttj|j ��nB| j|j |kr@ttjd|j ��n |j | jvr^ttjd|j ��| �|� | j|j S )Nz self._policy_objects[%s] != objz'%s' not a built-in policy)rV r5 r r r� r/ �_remove_policy_objectr� r! r! r" �load_policy_object_defaults� s � � z*FirewallConfig.load_policy_object_defaultsc C s |� � S r r� r� r! r! r" � get_policy_object_config_dict� s z,FirewallConfig.get_policy_object_config_dictc C sf t � |�}|jr0tj|_d|_|j|jkr0d|_|�|| �� � | �d|gi� | � |� t |� |S )NFrJ ) rk r� r �ETC_FIREWALLD_POLICIESrd r� r� rT r[ r� r r� r! r! r" � set_policy_object_config_dict� s z,FirewallConfig.set_policy_object_config_dictc C s� || j v s|| jv r$ttjd| ��t� }|�|� ||_d| |_t j |_ d|_ d|_ |�|| �� � | �d|gi� | �|� t|� |S )Nznew_policy_object(): '%s'r� FTrJ )r5 r/ r r r� r r� rV rm r r� rd r� r� r� rT r[ r� r r� r! r! r" �new_policy_object_dict s z%FirewallConfig.new_policy_object_dictc C s" t j�|�}t j�|�}t j�|�s�|�tj�r�| j� � D ]L}| j| }|j |kr:| j|= |j | j v rzd| j |j f S d|f S q:nJ| j � � D ]>}| j | }|j |kr�| j |= |j | jvr�d|f S dS q�dS t �d|� zt||�}W n6 t�y( } z t �d||� W Y d }~dS d }~0 0 |�tj��rrt|�ttj�k�rrdt j�|�t j�|�dd� f |_ |j | j v�r�|j | jv�r�| �|� d |fS |�tj��r�|j | jv �r�| j|j j|_|| j|j < d|fS |j | j v �r | j |j = || j |j < |j | jv�rd|fS dS dS ) Nr� rr r� zLoading policy file '%s'z#Failed to load policy file '%s': %sr� r r� r� )rc rd r� r� re r� r r� r5 r7 rm rV r/ r r� r rp rq r� r� r� r� r! r! r" � update_policy_object_from_path s\ � � z-FirewallConfig.update_policy_object_from_pathc C s� |j | jvrttj|j ��|j�tj�s@ttj d|jtjf ��d|j|j f }zt � |d| � W n< t y� } z$t �d||� t�|� W Y d }~n d }~0 0 | j|j = d S r� )rV r5 r r r� rd r� r r� r� rn ro rp r rq rc rr r� r! r! r" r� j s �� z$FirewallConfig._remove_policy_objectc C s" |j s |js ttjd|j ��d S )Nz'%s' is built-in policy)r� r� r r ZBUILTIN_POLICYrV r� r! r! r" �check_builtin_policy_object{ s �z*FirewallConfig.check_builtin_policy_objectc C s | � |� | �|� d S r )r� r� r� r! r! r" �remove_policy_object� s z#FirewallConfig.remove_policy_objectc C s$ | � |� | �||�}| �|� |S r )r� �_copy_policy_objectr� )r rY rV Znew_policy_objectr! r! r" �rename_policy_object� s z#FirewallConfig.rename_policy_objectc C s | � ||�� �S r )r� rX r� r! r! r" r� � s z"FirewallConfig._copy_policy_objectc C s$ t tt| j�� �t| j�� � ��S r )r r� r6 r) r7 r. r3 r! r! r" rM � s �zFirewallConfig.get_helpersc C s$ |j r|| j|j< n || j|j< d S r )r� r. rV r) r� r! r! r" � add_helper� s zFirewallConfig.add_helperc C s8 || j v r| j | S || jv r(| j| S ttj|��d S r )r) r. r r �INVALID_HELPERr� r! r! r" r? � s zFirewallConfig.get_helperc C st |j | jvr ttj|j ��nB| j|j |kr@ttjd|j ��n |j | jvr^ttjd|j ��| �|� | j|j S )Nzself._helpers[%s] != objz'%s' not a built-in helper)rV r) r r r� r. �_remove_helperr� r! r! r" �load_helper_defaults� s � � z#FirewallConfig.load_helper_defaultsc C s |� � S r r� r� r! r! r" �get_helper_config� s z FirewallConfig.get_helper_configc C sf t � |�}|jr0tj|_d|_|j|jkr0d|_|�|| �� � | �d|gi� | � |� t |� |S )NFrA ) rk r� r �ETC_FIREWALLD_HELPERSrd r� r� rT r[ r� r r� r! r! r" �set_helper_config� s z FirewallConfig.set_helper_configc C s� || j v s|| jv r$ttjd| ��t� }|�|� ||_d| |_t j |_ d|_ d|_ |�|| �� � | �d|gi� | �|� t|� |S )Nznew_helper(): '%s'r� FTrA )r) r. r r r� r r� rV rm r r� rd r� r� r� rT r[ r� r r� r! r! r" � new_helper� s � zFirewallConfig.new_helperc C s� t j�|�}t j�|�}t j�|�s�|tjkr�| j�� D ]L}| j| }|j |kr8| j|= |j | j v rxd| j |j f S d|f S q8nJ| j �� D ]>}| j | }|j |kr�| j |= |j | jvr�d|f S dS q�dS t � d|� zt||�}W n6 t�y& } z t �d||� W Y d }~dS d }~0 0 |j | j v�rV|j | jv�rV| �|� d|fS |tjk�r�|j | jv �r�| j|j j|_|| j|j < d|fS |j | j v �r�| j |j = || j |j < |j | jv�r�d|fS dS dS )Nr� rr r� zLoading helper file '%s'z#Failed to load helper file '%s': %sr� )rc rd r� r� re r r� r) r7 rm rV r. r r� r rp rq r� r� r� r! r! r" �update_helper_from_path� sP z&FirewallConfig.update_helper_from_pathc C s� |j | jvrttj|j ��|jtjkr>ttjd|jtjf ��d|j|j f }zt � |d| � W n< t y� } z$t � d||� t�|� W Y d }~n d }~0 0 | j|j = d S r� )rV r) r r r� rd r r� r� rn ro rp r rq rc rr r� r! r! r" r� s �� z FirewallConfig._remove_helperc C s" |j s |js ttjd|j ��d S )Nz'%s' is built-in helper)r� r� r r ZBUILTIN_HELPERrV r� r! r! r" �check_builtin_helper' s �z#FirewallConfig.check_builtin_helperc C s | � |� | �|� d S r )r r� r� r! r! r" � remove_helper, s z FirewallConfig.remove_helperc C s$ | � |� | �||�}| �|� |S r )r � _copy_helperr� )r rY rV r r! r! r" � rename_helper0 s z FirewallConfig.rename_helperc C s | � ||�� �S r )r r� r� r! r! r" r 6 s zFirewallConfig._copy_helperN)m�__name__� __module__� __qualname__r# r4 r r8 rT r �strr r r[ r\ r] ra rb rh rv rx ry rz r| r} r~ rL r� r: r� r� r� r� r� r� r� r� r� r� rN r� rB r� r� r� r� r� r� r� r� r� r� rO r� rD r� r� r� r� r� r� r� r� r� r� r� r� r� rP r� r� rF r� r� r� r� r� r� r� r� r� r� r� r� rQ r� rI r� r� r� r� r� r� r� r� r� r� rM r� r? r� r� r� r r r� r r r r r! r! r! r" r ) s� 5 E E E K K E)+�__all__rk rc Zos.pathrn �typingr r Zfirewallr Zfirewall.core.loggerr Zfirewall.core.io.io_objectr Zfirewall.core.io.icmptyper r r Zfirewall.core.io.servicer r r Zfirewall.core.io.zoner r r Zfirewall.core.io.ipsetr r r Zfirewall.core.io.helperr r r Zfirewall.core.io.policyr r r r Zfirewall.errorsr �objectr r! r! r! r" �<module> s"
💾 Save Changes
❌ Cancel