a
i2 @ s g d Z ddlmZ ddlZddlZddlZddlmZ ddlm Z m
Z
m Z m Z m
Z
ddlmZ ddlmZ ddlmZ G dd d e ZG d
d d e
Zd d
ZdddZdS ))Helper
helper_reader
helper_writer N)config) IO_ObjectIO_Object_ContentHandlerIO_Object_XMLGenerator
check_port check_tcpudp)log)errors)
FirewallErrorc sv e Zd ZdddddddgffZdZd d
gZd d d gd
Zg dddgdZ fddZdd Z dd Z
dd Z Z S )r )version )shortr ) descriptionr )familyr )moduler ports)r r z (sssssa(ss))-.Nr )r r helper)namer r portprotocol)r r c s6 t t| d| _d| _d| _d| _d| _g | _d S Nr ) superr __init__r r r r r r self __class__ ;/usr/lib/python3.9/site-packages/firewall/core/io/helper.pyr : s zHelper.__init__c C s. d| _ d| _d| _d| _d| _| jd d = d S r )r r r r r r r r" r" r# cleanupC s zHelper.cleanupc C s( ddg}||vr$t tjd||f d S )NZipv4Zipv6z'%s' not in '%s')r
r Z INVALID_IPV)r ZipvZipvsr" r" r# check_ipvK s
zHelper.check_ipvc C sv |dkr,|D ] }t |d t|d q nF|dkrr|dsNttjd| t|dddk rrttjd| d S ) Nr r r
nf_conntrack_('%s' does not start with 'nf_conntrack_'r Module name '%s' too short)r r
startswithr
r INVALID_MODULElenreplace)r r itemZ
all_configZall_io_objectsr r" r" r#
_check_configQ s
zHelper._check_config)
__name__
__module__ __qualname__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr r$ r% r/
__classcell__r" r" r r# r % s( r c @ s e Zd Zdd ZdS )helper_ContentHandlerc C s> t | || | j|| |dkrd|v r8|d | j_d|v r\| j|d |d | j_d|v r|d dstt j
d|d t |d dddk rtt j
d |d |d | j_
nz|d
krnp|d krnf|d kr:t|d t|d
|d |d
f}|| jjvr$| jj| ntd|d |d
d S )Nr r r r r' r( r r& r) r r r r z#Port '%s/%s' already set, ignoring.)r startElementr. Zparser_check_element_attrsr r% r r* r
r r+ r, r- r r r
r appendr Zwarning)r r attrsentryr" r" r# r5 b sF
z"helper_ContentHandler.startElementN)r0 r1 r2 r5 r" r" r" r# r4 a s r4 c C s t }| ds ttjd| | d d |_||j | |_||_| t
j rVdnd|_ |j |_
t|}t }|| d|| f }t|dn}td }|| z|| W n: tjy } z ttjd| W Y d }~n
d }~0 0 W d n1 s
0 Y ~~|S ) Nz.xmlz'%s' is missing .xml suffixFT%s/%srbznot a valid helper file: %s)r endswithr
r Z INVALID_NAMEr Z
check_namefilenamepathr* r
ETC_FIREWALLDZbuiltindefaultr4 saxZ make_parserZsetContentHandleropenZ InputSourceZ
setByteStreamparseZSAXParseExceptionZINVALID_HELPERZ getException) r= r> r handlerparserr fsourcemsgr" r" r# r s:
:r c
C sL |r|n| j }| jr$d|| jf }nd|| jf }tj |rzt|d| W n2 ty } zt d|| W Y d }~n
d }~0 0 tj
|}| t j
rtj |stj t j
stt j
d t|d tj|ddd}t|}| i }| j|d < | jr | jd
kr | j|d < | jr<| jd
kr<| j|d < |d
| |d | jr| jd
kr|d |di || j |d |d | jr| jd
kr|d |di || j |d |d | j D ]4} |d | d| d | d d |d q|d
|d | | ~d S )Nr: z %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si ZwtzUTF-8)modeencodingr r r r r
z r r r r r& )r r ) r> r= r osexistsshutilcopy2 Exceptionr errordirnamer* r r? mkdiriorB r Z
startDocumentr r r r5 ZignorableWhitespacer Z
charactersZ
endElementr r Z
simpleElementZ endDocumentclose)
r r> _pathr rH dirpathrF rD r7 r r" r" r# r s\ $
r )N)__all__Zxml.saxrA rL rT rN Zfirewallr Zfirewall.core.io.io_objectr r r r r
Zfirewall.core.loggerr r Zfirewall.errorsr
r r4 r r r" r" r" r# s <#