a
«°it ã @ sL d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dl m
Z
d dl m Z d dl
mZmZmZmZmZmZ d dlmZ d d lmZ d d
lmZ d d lmZ d d l m Z d d
l m Z d dl m!Z! d dl"m#Z# d dl$m%Z% d dl&m'Z' d dl(m)Z) d dl*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2 d dlm3Z3 d dl4m5Z5 G dd„ de ƒZ6dS )é N)Úconfig)ÚDEFAULT_ZONE_TARGET)ÚWatcher)Úlog)ÚDbusServiceObject)Úhandle_exceptionsÚdbus_handle_exceptionsÚdbus_service_methodÚ dbus_service_method_deprecatedÚ dbus_service_signal_deprecatedÚdbus_polkit_require_auth)ÚFirewallDConfigIcmpType)ÚFirewallDConfigService)ÚFirewallDConfigZone)ÚFirewallDConfigPolicy)ÚFirewallDConfigIPSet)ÚFirewallDConfigHelper)ÚIcmpType)ÚIPSet)ÚHelper)ÚLockdownWhitelist)ÚDirect)Údbus_to_pythonÚcommand_of_senderÚcontext_of_senderÚ
uid_of_senderÚ user_of_uidÚ%dbus_introspection_prepare_propertiesÚ!dbus_introspection_add_propertiesÚ!dbus_introspection_add_deprecated)Úerrors)Ú
FirewallErrorc s e Zd ZdZdZejjZe ‡ fdd„ƒZ
e dd„ ƒZ e dd„ ƒZ e d d
„ ƒZ
e d d „ ƒZe d
d„ ƒZe dd„ ƒZe dd„ ƒZe dd„ ƒZe dd„ ƒZe dd„ ƒZe dd„ ƒZe dd „ ƒZe d d „ ƒZe d d „ ƒZe d!d"„ ƒZe d#d$„ ƒZe d%d&„ ƒZe d'd(„ ƒZ e d)d*„ ƒZ e d+d,„ ƒZ e d-d.„ ƒZ e d/d0„ ƒZ e!d1d2„ ƒZ"e!d3d4„ ƒZ#e!d5d6„ ƒZ$e%ej&d7d8d9e!dîd;d<„ƒƒZ'e%ej&d=d>d9e!dïd?d@„ƒƒZ(e)ejjƒe%ej&dAdBe!dðdCdD„ƒƒƒZ*ej+j,ej&dEdFdGdH„ ƒZ-e)ejj.ƒe%ej/d=dIe!dñ‡ fdJdK„ ƒƒƒZ0e%ejj1e2j3dIe!dòdLdM„ƒƒZ4e%ejj1e2j3dBe!dódNdO„ƒƒZ5ej+ ,ejj1¡e!dPdQ„ ƒƒZ6e%ejj1d=dBe!dôdRdS„ƒƒZ7e%ejj1d=dBe!dõdTdU„ƒƒZ8e%ejj1d=dVd9e!dödWdX„ƒƒZ9e%ejj1dYdIe!d÷dZd[„ƒƒZ:e%ejj1d=dBe!død\d]„ƒƒZ;e%ejj1d=dBe!dùd^d_„ƒƒZe%ejj1d=dBe!düddde„ƒƒZ?e%ejj1d=dBe!dýdfdg„ƒƒZ@e%ejj1d=dVd9e!dþdhdi„ƒƒZAe%ejj1dYdIe!dÿdjdk„ƒƒZBe%ejj1dldBe!d dmdn„ƒƒZCe%ejj1dldBe!ddodp„ƒƒZDe%ejj1dldVd9e!ddqdr„ƒƒZEe%ejj1dsdIe!ddtdu„ƒƒZFe%ejjGdvdIe!ddwdx„ƒƒZHe%ejjGdYdIe!ddydz„ƒƒZIe%ejjGd=d{d9e!dd|d}„ƒƒZJe%ejjGd=eKj3 d{d9e!dd~d„ƒƒZLej+j,ejjGd=dFe!d€d„ ƒƒZMe%ejjGdvdIe!dd‚dƒ„ƒƒZNe%ejjGdYdIe!d d„d…„ƒƒZOe%ejjGd=d{d9e!d
d†d‡„ƒƒZPe%ejjGd=eQj3 d{d9e!d dˆd‰„ƒƒZRej+j,ejjGd=dFe!dŠd‹„ ƒƒZSe%ejjGdvdIe!d dŒd„ƒƒZTe%ejjGdYdIe!d
dŽd„ƒƒZUe%ejjGd=d{d9e!ddd‘„ƒƒZVe%ejjGd’d{d9e!dd“d”„ƒƒZWe%ejjGd•d{d9e!dd–d—„ƒƒZXej+j,ejjGd=dFe!d˜d™„ ƒƒZYe%ejjGdvdIe!ddšd›„ƒƒZZe%ejjGdYdIe!ddœd„ƒƒZ[e%ejjGd=d{d9e!ddždŸ„ƒƒZ\e%ejjGd=d=d9e!dd d¡„ƒƒZ]e%ejjGd=d=d9e!dd¢d£„ƒƒZ^e%ejjGd¤d{d9e!dd¥d¦„ƒƒZ_e%ejjGd•d{d9e!dd§d¨„ƒƒZ`ej+j,ejjGd=dFe!d©dª„ ƒƒZae%ejjGdvdIe!dd«d¬„ƒƒZbe%ejjGdYdIe!ddd®„ƒƒZce%ejjGd=d{d9e!dd¯d°„ƒƒZde%ejjGd•d{d9e!dd±d²„ƒƒZeej+j,ejjGd=dFe!d³d´„ ƒƒZfe%ejjGdvdIe!d dµd¶„ƒƒZge%ejjGdYdIe!d d·d¸„ƒƒZhe%ejjGd=d{d9e!d d¹dº„ƒƒZie%ejjGd=ejj3 d{d9e!d d»d¼„ƒƒZkej+j,ejjGd=dFe!d½d¾„ ƒƒZlemejjnƒe%ejjneoj3dIe!d d¿dÀ„ƒƒƒZpemejjnƒe%ejjneoj3dBe!d!dÁd„ƒƒƒZqerejjnƒej+ ,ejjn¡e!dÃdÄ„ ƒƒƒZsemejjnƒe%ejjndÅdBe!d"dÆdÇ„ƒƒƒZtemejjnƒe%ejjndÅdBe!d#dÈdÉ„ƒƒƒZuemejjnƒe%ejjndÅdVd9e!d$dÊdË„ƒƒƒZvemejjnƒe%ejjnd7dYd9e!d%dÌdÍ„ƒƒƒZwemejjnƒe%ejjndÎdÏd9e!d&dÐdÑ„ƒƒƒZxemejjnƒe%ejjndÒdBe!d'dÓdÔ„ƒƒƒZyemejjnƒe%ejjndÒdBe!d(dÕdÖ„ƒƒƒZzemejjnƒe%ejjndÒdVd9e!d)d×dØ„ƒƒƒZ{emejjnƒe%ejjndÅdBe!d*dÙdÚ„ƒƒƒZ|emejjnƒe%ejjndÅdÛd9e!d+dÜdÝ„ƒƒƒZ}emejjnƒe%ejjndÎdÞd9e!d,dßdà„ƒƒƒZ~emejjnƒe%ejjndádBe!d-dâd㄃ƒƒZemejjnƒe%ejjndádBe!d.däd儃ƒƒZ€emejjnƒe%ejjndádVd9e!d/dæd焃ƒƒZemejjnƒe%ejjnd=dèd9e!d0dédꄃƒƒZ‚emejjnƒe%ejjndëdIe!d1dìd턃ƒƒZƒ‡ Z„S (2 ÚFirewallDConfigzFirewallD main classTc sš t t| ƒj|i |¤Ž || _|d | _|d | _| ¡ t| jdƒ| _ | j
tj ¡ | j
tj ¡ | j
tj
¡ | j
tj¡ | j
tj¡ | j
tj¡ | j
tj¡ | j
tj¡ | j
tj¡ | j
tj¡ | j
tj¡ | j
tj¡ tj tj¡r>tt tj¡ƒD ].}dtj|f }tj |¡r| j
|¡ q| j tj ¡ | j tj ¡ | j tj ¡ t | tj!j"dddddddddddddddœƒ d S )Nr é é z%s/%sZ readwrite)Ú
CleanupOnExitÚCleanupModulesOnExitÚ
IPv6_rpfilterÚIPv6_rpfilter2ÚLockdownÚ MinimalMarkÚIndividualCallsÚ LogDeniedÚAutomaticHelpersÚFirewallBackendÚFlushAllOnReloadÚ RFC3964_IPv4ÚAllowZoneDriftingÚNftablesTableOwner)#Úsuperr" Ú__init__r ÚbusnameÚpathÚ
_init_varsr Ú
watch_updaterÚwatcherÚ
add_watch_dirÚFIREWALLD_IPSETSÚETC_FIREWALLD_IPSETSÚFIREWALLD_ICMPTYPESÚETC_FIREWALLD_ICMPTYPESÚFIREWALLD_HELPERSÚETC_FIREWALLD_HELPERSÚFIREWALLD_SERVICESÚETC_FIREWALLD_SERVICESÚFIREWALLD_ZONESÚETC_FIREWALLD_ZONESÚFIREWALLD_POLICIESÚETC_FIREWALLD_POLICIESÚosÚexistsÚsortedÚlistdirÚisdirZadd_watch_fileÚLOCKDOWN_WHITELISTÚFIREWALLD_DIRECTÚFIREWALLD_CONFr ÚdbusÚDBUS_INTERFACE_CONFIG)ÚselfZconfÚargsÚkwargsÚfilenamer6 ©Ú __class__© ú:/usr/lib/python3.9/site-packages/firewall/server/config.pyr4 D sV
òÿzFirewallDConfig.__init__c C s g | _ d| _g | _d| _g | _d| _g | _d| _g | _d| _ g | _
d| _ | j
¡ D ]}| | j |¡¡ qR| j ¡ D ]}| | j |¡¡ qt| j ¡ D ]}| | j |¡¡ q–| j ¡ D ]}| | j |¡¡ q¸| j ¡ D ]}| | j |¡¡ qÚ| j ¡ D ]}| | j |¡¡ qüd S ©Nr ) ÚipsetsÚ ipset_idxÚ icmptypesÚ icmptype_idxÚservicesÚ service_idxÚzonesÚzone_idxÚhelpersÚ
helper_idxÚpolicy_objectsÚpolicy_object_idxr Z
get_ipsetsÚ _addIPSetZ get_ipsetZ
get_icmptypesÚ _addIcmpTypeZ get_icmptypeZ get_servicesÚ _addServiceZ get_serviceZ get_zonesÚ_addZoneZget_zoneZ get_helpersÚ
_addHelperZ
get_helperZget_policy_objectsÚ
_addPolicyZget_policy_object)rQ ÚipsetÚicmptypeÚserviceÚzoneÚhelperÚpolicyrW rW rX r7 u s0 zFirewallDConfig._init_varsc C s d S ©NrW ©rQ rW rW rX Ú__del__‘ s zFirewallDConfig.__del__c C sä t | jƒdkr$| j ¡ }| ¡ ~q t | jƒdkrH| j ¡ }| ¡ ~q$t | jƒdkrl| j ¡ }| ¡ ~qHt | jƒdkr| j ¡ }| ¡ ~qlt | jƒdkr´| j ¡ }| ¡ ~qt | jƒdkrØ| j ¡ }| ¡ ~q´| ¡ d S rY )
ÚlenrZ ÚpopÚ
unregisterr\ r^ r` rb rd r7 )rQ ÚitemrW rW rX Úreload• s2
zFirewallDConfig.reloadc
C s~ |t jkrÒ| t jj¡}t dt j¡ z| j ¡ W n8 tyl } z t d||f ¡ W Y d }~d S d }~0 0 | t jj¡
¡ }t | ¡ ƒD ]"}||v rŒ|| || krŒ||= qŒt
|ƒdkrÎ| t jj|g ¡ d S | t j¡sì| t j¡rŒ| d¡rŒz| j |¡\}}W n: tyF } z t d||f ¡ W Y d }~d S d }~0 0 |dkr^| |¡ n*|dkrt| |¡ n|dkrz| |¡ nî| t j¡s¨| t j¡rH| d¡rHz| j |¡\}}W n: ty } z t d ||f ¡ W Y d }~d S d }~0 0 |dkr| |¡ n*|dkr0| |¡ n|dkrz| |¡ n2| t j ¡sd| t j ¡rˆ| d¡rz| j |¡\}}W n: ty¾ } z t d
||f ¡ W Y d }~d S d }~0 0 |dkrÖ| |¡ n*|dkrì| !|¡ n|dkr„| "|¡ n‚| t j ¡rz| #t j d ¡ $d ¡}t
|ƒd
k s¡sÞ| t j?¡rz| d¡rzz| j @|¡\}}W n: ty8 } z t d||f ¡ W Y d }~d S d }~0 0 |dkrP| A|¡ n*|dkrf| B|¡ n|dkrz| C|¡ d S )Nz,config: Reloading firewalld config file '%s'z+Failed to load firewalld.conf file '%s': %sr z.xmlz%Failed to load icmptype file '%s': %sÚnewÚremoveÚupdatez$Failed to load service file '%s': %sz!Failed to load zone file '%s': %sÚ ú/r# z"Failed to load ipset file '%s': %sz#Failed to load helper file '%s': %sz/Failed to load lockdown whitelist file '%s': %sz)Failed to load direct rules file '%s': %sz#Failed to load policy file '%s': %s)Dr rN ÚGetAllrO rP r Údebug1Zupdate_firewalld_confÚ ExceptionÚerrorÚcopyÚlistÚkeysru ÚPropertiesChangedÚ
startswithr= r> ÚendswithZupdate_icmptype_from_pathrg ÚremoveIcmpTypeÚ_updateIcmpTyperA rB Zupdate_service_from_pathrh Ú
removeServiceÚ_updateServicerC rD Zupdate_zone_from_pathri Ú
removeZoneÚ _updateZoneÚreplaceÚstriprG r6 rK r9 Z has_watchr: Z remove_watchr; r< Zupdate_ipset_from_pathrf Ú removeIPSetÚ _updateIPSetr? r@ Zupdate_helper_from_pathrj Ú removeHelperÚ
_updateHelperrL Zupdate_lockdown_whitelistÚLockdownWhitelistUpdatedrM Z
update_directÚUpdatedrE rF Z update_policy_object_from_pathrk Ú removePolicyÚ
_updatePolicy) rQ ÚnameZ old_propsÚmsgZpropsÚkeyZwhatÚobjÚ_namerW rW rX r8 ± s&
ÿÿ
ÿ
ÿþ
ÿþ
ÿ
ÿþÿ
ÿþÿ
ÿ ÿ
ÿþ
z FirewallDConfig.watch_updaterc C sP t | | j|| j| jdtjj| jf ƒ}| j |¡ | jd7 _| |j ¡ |S ©Nz%s/%dr# )
r
r r] r5 rO ZDBUS_PATH_CONFIG_ICMPTYPEr\ ÚappendÚ
IcmpTypeAddedr™ )rQ rœ Úconfig_icmptyperW rW rX rg B s ÿþ z FirewallDConfig._addIcmpTypec C sL | j D ]@}|jj|jkr|jj|jkr|jj|jkr||_| |j¡ qd S rr )r\ rœ r™ r6 rT r– )rQ rœ rm rW rW rX rŠ N s
ÿ þz FirewallDConfig._updateIcmpTypec C sì d}| j D ]J}| ¡ }|j|| v r
|| |j¡ | j |j|¡|_| |jj¡ q
| jD ]R}| ¡ }d|v r\|j|d v r\|d |j¡ | j |j|¡|_| |jj¡ q\| j
D ]0}|j|kr¶| |j¡ | ¡ | j
|¡ ~q¶d S )Né Z icmp_blocks)
r` Ú getSettingsr™ r{ r Úset_zone_configrœ r– rd Ú set_policy_object_config_dictr\ ÚRemovedrw )rQ rœ Úindexro Úsettingsrq rm rW rW rX r‰ W s&
z FirewallDConfig.removeIcmpTypec C sP t | | j|| j| jdtjj| jf ƒ}| j |¡ | jd7 _| |j ¡ |S rž )
r r r_ r5 rO ZDBUS_PATH_CONFIG_SERVICEr^ rŸ Ú ServiceAddedr™ )rQ rœ Úconfig_servicerW rW rX rh q s þ zFirewallDConfig._addServicec C sL | j D ]@}|jj|jkr|jj|jkr|jj|jkr||_| |j¡ qd S rr )r^ rœ r™ r6 rT r– )rQ rœ rn rW rW rX rŒ | s
ÿ þz FirewallDConfig._updateServicec C sì d}| j D ]J}| ¡ }|j|| v r
|| |j¡ | j |j|¡|_| |jj¡ q
| jD ]R}| ¡ }d|v r\|j|d v r\|d |j¡ | j |j|¡|_| |jj¡ q\| j
D ]0}|j|kr¶| |j¡ | ¡ | j
|¡ ~q¶d S )Nr$ r^ )
r` r£ r™ r{ r r¤ rœ r– rd r¥ r^ r¦ rw )rQ rœ r§ ro r¨ rq rn rW rW rX r‹ … s&
z FirewallDConfig.removeServicec C sP t | | j|| j| jdtjj| jf ƒ}| j |¡ | jd7 _| |j ¡ |S rž )
r r ra r5 rO ZDBUS_PATH_CONFIG_ZONEr` rŸ Ú ZoneAddedr™ )rQ rœ Ú config_zonerW rW rX ri Ÿ s þ zFirewallDConfig._addZonec C sL | j D ]@}|jj|jkr|jj|jkr|jj|jkr||_| |j¡ qd S rr )r` rœ r™ r6 rT r– ©rQ rœ ro rW rW rX rŽ ª s
ÿzFirewallDConfig._updateZonec C s< | j D ]0}|j|kr| |j¡ | ¡ | j |¡ ~qd S rr )r` rœ r¦ r™ rw r{ r rW rW rX r ² s
zFirewallDConfig.removeZonec C sP t | | j|| j| jdtjj| jf ƒ}| j |¡ | jd7 _| |j ¡ |S rž )
r r re r5 rO ZDBUS_PATH_CONFIG_POLICYrd rŸ Ú PolicyAddedr™ )rQ rœ Ú
config_policyrW rW rX rk » s þ zFirewallDConfig._addPolicyc C sL | j D ]@}|jj|jkr|jj|jkr|jj|jkr||_| |j¡ qd S rr )rd rœ r™ r6 rT r– ©rQ rœ rq rW rW rX r˜ Æ s
ÿz FirewallDConfig._updatePolicyc C s< | j D ]0}|j|kr| |j¡ | ¡ | j |¡ ~qd S rr )rd rœ r¦ r™ rw r{ r° rW rW rX r— Î s
z FirewallDConfig.removePolicyc C sP t | | j|| j| jdtjj| jf ƒ}| j |¡ | jd7 _| |j ¡ |S rž )
r r r[ r5 rO ZDBUS_PATH_CONFIG_IPSETrZ rŸ Ú
IPSetAddedr™ )rQ rœ Ú config_ipsetrW rW rX rf × s þ zFirewallDConfig._addIPSetc C sL | j D ]@}|jj|jkr|jj|jkr|jj|jkr||_| |j¡ qd S rr )rZ rœ r™ r6 rT r– ©rQ rœ rl rW rW rX r’ â s
ÿz FirewallDConfig._updateIPSetc C s< | j D ]0}|j|kr| |j¡ | ¡ | j |¡ ~qd S rr )rZ rœ r¦ r™ rw r{ r³ rW rW rX r‘ ê s
zFirewallDConfig.removeIPSetc C sP t | | j|| j| jdtjj| jf ƒ}| j |¡ | jd7 _| |j ¡ |S rž )
r r rc r5 rO ZDBUS_PATH_CONFIG_HELPERrb rŸ Ú HelperAddedr™ )rQ rœ Ú
config_helperrW rW rX rj õ s þ zFirewallDConfig._addHelperc C sL | j D ]@}|jj|jkr|jj|jkr|jj|jkr||_| |j¡ qd S rr )rb rœ r™ r6 rT r– ©rQ rœ rp rW rW rX r” s
ÿz FirewallDConfig._updateHelperc C s< | j D ]0}|j|kr| |j¡ | ¡ | j |¡ ~qd S rr )rb rœ r¦ r™ rw r{ r¶ rW rW rX r“ s
z FirewallDConfig.removeHelperc C sÀ | j jjdkrttjdƒ‚| j ¡ r¼|d u r:t d¡ d S t
¡ }t ||ƒ}| j d|¡r^d S t
||ƒ}| j d|¡rzd S t|ƒ}| j d|¡r”d S t||ƒ}| j d|¡r°d S ttjdƒ‚d S ) NZFAILEDzÆChanging permanent configuration is not allowed while firewalld is in FAILED state. The permanent configuration must be fixed and then firewalld restarted. Try `firewall-offline-cmd --check-config`.z&Lockdown not possible, sender not set.ÚcontextÚuidÚuserÚcommandzlockdown is enabled)r Z_fwÚ_stater! r ZRUNNING_BUT_FAILEDZlockdown_enabledr r‚ rO Z SystemBusr Z access_checkr r r Z
ACCESS_DENIED)rQ ÚsenderZbusr· r¸ r¹ rº rW rW rX Ú accessCheck s, ÿ
zFirewallDConfig.accessCheckc C sš |dvrt j d| ¡‚| j ¡ |¡}|dkrH|d u r>tj}t |¡S |dkrr|d u r`tj}nt |ƒ}t
|¡S |dkrš|d u rtj rŒdnd}t |¡S |dkrÂ|d u r¸tj r´dnd}t |¡S |d krê|d u ràtj
rÜdnd}t |¡S |d
kr |d u s|dkrt d¡S t d¡S nv|d krD|d u r:tj}t |¡S |d krr|d u rhtjrddnd}t |¡S |d
kr–|d u rŒtj}t |¡S |dkrº|d u r°tj}t |¡S |dkrÞ|d u rÔtj}t |¡S |dkr |d u rtjrþdnd}t |¡S |dkr:|d u r0tjr,dnd}t |¡S |dkrh|d u r^tjrZdnd}t |¡S |dkr–|d u rŒtjrˆdnd}t |¡S d S )N©Ú DefaultZoner* r% r& r) r' r+ r, r- r. r/ r0 r1 r( r2 úDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not existr¿ r* r% ÚyesÚnor& r) r' r( r+ r, r- r. r/ r0 r1 r2 )rO Ú
exceptionsÚ
DBusExceptionr Úget_firewalld_confÚgetZ
FALLBACK_ZONEÚStringZFALLBACK_MINIMAL_MARKÚintÚInt32ZFALLBACK_CLEANUP_ON_EXITZ FALLBACK_CLEANUP_MODULES_ON_EXITZFALLBACK_LOCKDOWNZFALLBACK_IPV6_RPFILTERZFALLBACK_INDIVIDUAL_CALLSZFALLBACK_LOG_DENIEDZFALLBACK_AUTOMATIC_HELPERSZFALLBACK_FIREWALL_BACKENDZ FALLBACK_FLUSH_ALL_ON_RELOADZFALLBACK_RFC3964_IPV4Z FALLBACK_ALLOW_ZONE_DRIFTINGZ FALLBACK_NFTABLES_TABLE_OWNER)rQ ÚpropÚvaluerW rW rX Ú
_get_property3 sˆ ÿÿ
z FirewallDConfig._get_propertyc C sˆ |dkrt | |¡¡S |dkr0t | |¡¡S |dkrHt | |¡¡S |dkr`t | |¡¡S |dkrxt | |¡¡S |dkrt | |¡¡S |dkr¨t | |¡¡S |dkrÀt | |¡¡S |d krØt | |¡¡S |d
k ròt | |¡¡S |d kr t | |¡¡S |d kr&t | |¡¡S |d
kr@t | |¡¡S |dkrZt | |¡¡S |dkrtt | |¡¡S t j d| ¡‚d S )Nr¿ r* r% r& r) r' r( r+ r, r- r. r/ r0 r1 r2 rÀ )rO rÇ rÌ rÉ rà rÄ )rQ rÊ rW rW rX Ú_get_dbus_property€ sF
ÿÿz"FirewallDConfig._get_dbus_propertyÚssÚv)Ú in_signatureÚ
out_signatureNc C sr t |tƒ}t |tƒ}t d||¡ |tjjkr8| |¡S |tjjtjj fv r^tj
d| ¡‚ntj
d| ¡‚d S )Nzconfig.Get('%s', '%s')rÀ úJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r Ústrr r€ r rO rP rÍ Ú DBUS_INTERFACE_CONFIG_DIRECTÚ DBUS_INTERFACE_CONFIG_POLICIESrà rÄ )rQ Úinterface_nameÚ
property_namer¼ rW rW rX ÚGet¥ s$
ÿÿÿÿÿzFirewallDConfig.GetÚsza{sv}c C st t |tƒ}t d|¡ i }|tjjkr@dD ]}| |¡||< q*n&|tjjtjj fv rVntj
d| ¡‚tj |ddS )Nzconfig.GetAll('%s')r¾ rÒ Úsv©Z signature)
r rÓ r r€ r rO rP rÌ rÔ rÕ rà rÄ Z
Dictionary)rQ rÖ r¼ ÚretÚxrW rW rX r º s
ÿÿÿzFirewallDConfig.GetAllZssv)rÐ c C sŽ t |tƒ}t |tƒ}t |ƒ}t d|||¡ | |¡ |tjjkrR|dv r4|dv rx| ¡ dvrvt t
j d||f ƒ‚nˆ|dkr |tj vržt t
j d||f ƒ‚n`|dkrÈ|tj
vrÆt t
j d||f ƒ‚n8|dkrð|tjvrît t
j d||f ƒ‚ntj d | ¡‚| j ¡ ||¡ | j ¡ ¡ | |||ig ¡ n |d
v r@ntj d | ¡‚n8|tjjtjjfv rztj d | ¡‚ntj d | ¡‚d S ) Nz config.Set('%s', '%s', '%s')) r% r& r) r' r+ r, r. r/ r0 r( r2 )r% r& r) r' r+ r/ r0 r2 )rÁ r ÚtrueZfalsez '%s' for %sr, r. r( rÀ )r* r- r1 rÒ )r rÓ r r€ r½ r rO rP Úlowerr! r Z
INVALID_VALUEZLOG_DENIED_VALUESZFIREWALL_BACKEND_VALUESZIPV6_RPFILTER_VALUESrà rÄ rÅ ÚsetÚwriter† rÔ rÕ )rQ rÖ r× Z new_valuer¼ rW rW rX ÚSetÓ s„
ÿ
ÿÿ
ÿÿ
ÿÿ
þÿÿÿ
ÿÿÿÿÿÿÿzFirewallDConfig.Setzsa{sv}asrÛ c C s. t |tƒ}t |ƒ}t |ƒ}t d|||¡ d S )Nz*config.PropertiesChanged('%s', '%s', '%s')©r rÓ r r€ )rQ rÖ Zchanged_propertiesZinvalidated_propertiesrW rW rX r† s
ÿz!FirewallDConfig.PropertiesChanged)rÑ c s` t d¡ tt| ƒ | j| j ¡ ¡}t| |t j
j ƒ}t j
j fD ] }t
| ||tƒ jtƒ jƒ}q>|S )Nzconfig.Introspect())r Zdebug2r3 r" Ú
Introspectr6 r5 Zget_busr r rO rP rÔ r r
Z
deprecatedr )rQ r¼ ÚdataZ interfacerU rW rX rä " s
ÿ
ÿýzFirewallDConfig.Introspectc C s t d¡ | j ¡ j ¡ S )Nz&config.policies.getLockdownWhitelist())r r€ r Ú get_policiesÚlockdown_whitelistÚ
export_config©rQ r¼ rW rW rX ÚgetLockdownWhitelist9 s
z$FirewallDConfig.getLockdownWhitelistc C sB t d¡ t|ƒ}| j ¡ j |i ¡ | j ¡ j ¡ | ¡ d S )Nz)config.policies.setLockdownWhitelist(...)) r r€ r r ræ rç Ú
import_configrá r• ©rQ r¨ r¼ rW rW rX ÚsetLockdownWhitelist@ s
z$FirewallDConfig.setLockdownWhitelistc C s t d¡ d S )Nz*config.policies.LockdownWhitelistUpdated()©r r€ rs rW rW rX r• J s z(FirewallDConfig.LockdownWhitelistUpdatedc C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d v rBttj|ƒ‚|d |¡ |
|¡ d S )Nz1config.policies.addLockdownWhitelistCommand('%s')r © r r r€ r½ r„ rê r! r ÚALREADY_ENABLEDrŸ rí ©rQ rº r¼ r¨ rW rW rX ÚaddLockdownWhitelistCommandQ s
z+FirewallDConfig.addLockdownWhitelistCommandc C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d vrBttj|ƒ‚|d |¡ |
|¡ d S )Nz4config.policies.removeLockdownWhitelistCommand('%s')r © r r r€ r½ r„ rê r! r Ú NOT_ENABLEDr{ rí rñ rW rW rX Ú removeLockdownWhitelistCommand^ s ÿ
z.FirewallDConfig.removeLockdownWhitelistCommandÚbc C s$ t |ƒ}t d|¡ || ¡ d v S )Nz3config.policies.queryLockdownWhitelistCommand('%s')r ©r r r€ rê )rQ rº r¼ rW rW rX Ú queryLockdownWhitelistCommandl s
ÿz-FirewallDConfig.queryLockdownWhitelistCommandÚasc C s t d¡ | ¡ d S )Nz.config.policies.getLockdownWhitelistCommands()r ©r r€ rê ré rW rW rX Ú getLockdownWhitelistCommandsu s
z,FirewallDConfig.getLockdownWhitelistCommandsc C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d v rBttj|ƒ‚|d |¡ |
|¡ d S )Nz1config.policies.addLockdownWhitelistContext('%s')r# rï ©rQ r· r¼ r¨ rW rW rX ÚaddLockdownWhitelistContext~ s
z+FirewallDConfig.addLockdownWhitelistContextc C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d vrBttj|ƒ‚|d |¡ |
|¡ d S )Nz4config.policies.removeLockdownWhitelistContext('%s')r# ró rü rW rW rX Ú removeLockdownWhitelistContext‹ s ÿ
z.FirewallDConfig.removeLockdownWhitelistContextc C s$ t |ƒ}t d|¡ || ¡ d v S )Nz3config.policies.queryLockdownWhitelistContext('%s')r# r÷ )rQ r· r¼ rW rW rX Ú queryLockdownWhitelistContext™ s
ÿz-FirewallDConfig.queryLockdownWhitelistContextc C s t d¡ | ¡ d S )Nz.config.policies.getLockdownWhitelistContexts()r# rú ré rW rW rX Ú getLockdownWhitelistContexts¢ s
z,FirewallDConfig.getLockdownWhitelistContextsc C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d v rBttj|ƒ‚|d |¡ |
|¡ d S )Nz.config.policies.addLockdownWhitelistUser('%s')é rï ©rQ r¹ r¼ r¨ rW rW rX ÚaddLockdownWhitelistUser« s
z(FirewallDConfig.addLockdownWhitelistUserc C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d vrBttj|ƒ‚|d |¡ |
|¡ d S )Nz1config.policies.removeLockdownWhitelistUser('%s')r ró r rW rW rX ÚremoveLockdownWhitelistUser¸ s
z+FirewallDConfig.removeLockdownWhitelistUserc C s$ t |ƒ}t d|¡ || ¡ d v S )Nz0config.policies.queryLockdownWhitelistUser('%s')r r÷ )rQ r¹ r¼ rW rW rX ÚqueryLockdownWhitelistUserÅ s z*FirewallDConfig.queryLockdownWhitelistUserc C s t d¡ | ¡ d S )Nz+config.policies.getLockdownWhitelistUsers()r rú ré rW rW rX ÚgetLockdownWhitelistUsersÍ s
z)FirewallDConfig.getLockdownWhitelistUsersÚic C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d v rBttj|ƒ‚|d |¡ |
|¡ d S )Nz+config.policies.addLockdownWhitelistUid(%d)é rï ©rQ r¸ r¼ r¨ rW rW rX ÚaddLockdownWhitelistUidÖ s
z'FirewallDConfig.addLockdownWhitelistUidc C s^ t |ƒ}t d|¡ | |¡ t| ¡ ƒ}||d vrBttj|ƒ‚|d |¡ |
|¡ d S )Nz.config.policies.removeLockdownWhitelistUid(%d)r ró r rW rW rX ÚremoveLockdownWhitelistUidã s
z*FirewallDConfig.removeLockdownWhitelistUidc C s$ t |ƒ}t d|¡ || ¡ d v S )Nz-config.policies.queryLockdownWhitelistUid(%d)r r÷ )rQ r¸ r¼ rW rW rX ÚqueryLockdownWhitelistUidð s z)FirewallDConfig.queryLockdownWhitelistUidZaic C s t d¡ | ¡ d S )Nz*config.policies.getLockdownWhitelistUids()r rú ré rW rW rX ÚgetLockdownWhitelistUidsø s
z(FirewallDConfig.getLockdownWhitelistUidsZaoc C s t d¡ | jS )z"list ipsets objects paths
zconfig.listIPSets())r r€ rZ ré rW rW rX Ú
listIPSets s
zFirewallDConfig.listIPSetsc C s0 t d¡ g }| jD ]}| |jj¡ qt|ƒS )zget ipset names
zconfig.getIPSetNames())r r€ rZ rŸ rœ r™ rI )rQ r¼ rZ rœ rW rW rX Ú
getIPSetNames s
z FirewallDConfig.getIPSetNamesÚoc C sF t |tƒ}t d|¡ | jD ]}|jj|kr | S q ttj |ƒ‚dS )z-object path of ipset with given name
zconfig.getIPSetByName('%s')N)
r rÓ r r€ rZ rœ r™ r! r Z
INVALID_IPSET)rQ rl r¼ rœ rW rW rX ÚgetIPSetByName s
z FirewallDConfig.getIPSetByNamec C sD t |tƒ}t |ƒ}t d|¡ | |¡ | j ||¡}| |¡}|S )z/add ipset with given name and settings
zconfig.addIPSet('%s'))r rÓ r r€ r½ r Z new_ipsetrf )rQ rl r¨ r¼ rœ r² rW rW rX ÚaddIPSet# s
zFirewallDConfig.addIPSetc C s t |tƒ}t d| ¡ d S )Nzconfig.IPSetAdded('%s')rã )rQ rl rW rW rX r± 2 s
zFirewallDConfig.IPSetAddedc C s t d¡ | jS )z%list icmptypes objects paths
zconfig.listIcmpTypes())r r€ r\ ré rW rW rX Ú
listIcmpTypes: s
z FirewallDConfig.listIcmpTypesc C s0 t d¡ g }| jD ]}| |jj¡ qt|ƒS )zget icmptype names
zconfig.getIcmpTypeNames())r r€ r\ rŸ rœ r™ rI )rQ r¼ r\ rœ rW rW rX ÚgetIcmpTypeNamesB s
z FirewallDConfig.getIcmpTypeNamesc C sF t |tƒ}t d|¡ | jD ]}|jj|kr | S q ttj |ƒ‚dS )z0object path of icmptype with given name
z config.getIcmpTypeByName('%s')N)
r rÓ r r€ r\ rœ r™ r! r ZINVALID_ICMPTYPE)rQ rm r¼ rœ rW rW rX ÚgetIcmpTypeByNameM s
z!FirewallDConfig.getIcmpTypeByNamec C sD t |tƒ}t |ƒ}t d|¡ | |¡ | j ||¡}| |¡}|S )z2add icmptype with given name and settings
zconfig.addIcmpType('%s'))r rÓ r r€ r½ r Z new_icmptyperg )rQ rm r¨ r¼ rœ r¡ rW rW rX Ú addIcmpTypeZ s
zFirewallDConfig.addIcmpTypec C s t d| ¡ d S )Nzconfig.IcmpTypeAdded('%s')rî )rQ rm rW rW rX r i s z FirewallDConfig.IcmpTypeAddedc C s t d¡ | jS )z$list services objects paths
zconfig.listServices())r r€ r^ ré rW rW rX Ú listServicesp s
z FirewallDConfig.listServicesc C s0 t d¡ g }| jD ]}| |jj¡ qt|ƒS )zget service names
zconfig.getServiceNames())r r€ r^ rŸ rœ r™ rI )rQ r¼ r^ rœ rW rW rX ÚgetServiceNamesx s
z FirewallDConfig.getServiceNamesc C sF t |tƒ}t d|¡ | jD ]}|jj|kr | S q ttj |ƒ‚dS )z/object path of service with given name
z config.getServiceByName('%s')N)
r rÓ r r€ r^ rœ r™ r! r ZINVALID_SERVICE)rQ rn r¼ rœ rW rW rX ÚgetServiceByNameƒ s
z FirewallDConfig.getServiceByNamezs(sssa(ss)asa{ss}asa(ss))c C sD t |tƒ}t |ƒ}t d|¡ | |¡ | j ||¡}| |¡}|S )ú1add service with given name and settings
zconfig.addService('%s'))r rÓ r r€ r½ r Z new_servicerh ©rQ rn r¨ r¼ rœ rª rW rW rX Ú
addService s
zFirewallDConfig.addServicezsa{sv}c C sD t |tƒ}t |ƒ}t d|¡ | |¡ | j ||¡}| |¡}|S )r zconfig.addService2('%s'))r rÓ r r€ r½ r Znew_service_dictrh r rW rW rX Ú addService2Ÿ s
zFirewallDConfig.addService2c C s t d| ¡ d S )Nzconfig.ServiceAdded('%s')rî )rQ rn rW rW rX r© ® s z FirewallDConfig.ServiceAddedc C s t d¡ | jS )z!list zones objects paths
zconfig.listZones())r r€ r` ré rW rW rX Ú listZonesµ s
zFirewallDConfig.listZonesc C s0 t d¡ g }| jD ]}| |jj¡ qt|ƒS )zget zone names
zconfig.getZoneNames())r r€ r` rŸ rœ r™ rI )rQ r¼ r` rœ rW rW rX Ú getZoneNames½ s
z FirewallDConfig.getZoneNamesc C sF t |tƒ}t d|¡ | jD ]}|jj|kr | S q ttj |ƒ‚dS )z,object path of zone with given name
zconfig.getZoneByName('%s')N)
r rÓ r r€ r` rœ r™ r! r Z INVALID_ZONE)rQ ro r¼ rœ rW rW rX Ú
getZoneByNameÈ s
z FirewallDConfig.getZoneByNamec C sv t |tƒ}t d|¡ g }| jD ] }||jjv r | |jj¡ q t |ƒdkrfd
|¡d|t |ƒf S |rr|d S dS )z4name of zone the given interface belongs to
z config.getZoneOfInterface('%s')r# ú zE (ERROR: interface '%s' is in %s zone XML files, can be only in one)r r} ) r rÓ r r€ r` rœ Z
interfacesrŸ r™ ru Újoin)rQ Zifacer¼ rÜ rœ rW rW rX ÚgetZoneOfInterfaceÕ s
ÿÿz"FirewallDConfig.getZoneOfInterfacec C sv t |tƒ}t d|¡ g }| jD ] }||jjv r | |jj¡ q t |ƒdkrfd
|¡d|t |ƒf S |rr|d S dS )z1name of zone the given source belongs to
z config.getZoneOfSource('%s')r# r! zB (ERROR: source '%s' is in %s zone XML files, can be only in one)r r} ) r rÓ r r€ r` rœ ZsourcesrŸ r™ ru r" )rQ Úsourcer¼ rÜ rœ rW rW rX ÚgetZoneOfSourceé s
ÿÿz FirewallDConfig.getZoneOfSourcez's(sssbsasa(ss)asba(ssss)asasasasa(ss)b)c C sh t |tƒ}t |ƒ}t d|¡ | |¡ |d dkrLt|ƒ}t|d< t|ƒ}| j ||¡}|
|¡}|S )ú.add zone with given name and settings
úconfig.addZone('%s')é Údefault) r rÓ r r€ r½ r„ r Útupler Znew_zoneri )rQ ro r¨ r¼ Z _settingsrœ r¬ rW rW rX ÚaddZoneý s
zFirewallDConfig.addZonec C s` t |tƒ}t |ƒ}t d|¡ | |¡ d|v rD|d dkrDt|d< | j ||¡}| |¡}|S )r& r' Útargetr) ) r rÓ r r€ r½ r r Z
new_zone_dictri )rQ ro r¨ r¼ rœ r¬ rW rW rX ÚaddZone2 s
zFirewallDConfig.addZone2c C s t d| ¡ d S )Nzconfig.ZoneAdded('%s')rî )rQ ro rW rW rX r« " s zFirewallDConfig.ZoneAddedc C s t d¡ | jS )z$list policies objects paths
zconfig.listPolicies())r r€ rd ré rW rW rX Ú listPolicies) s
z FirewallDConfig.listPoliciesc C s0 t d¡ g }| jD ]}| |jj¡ qt|ƒS )zget policy names
zconfig.getPolicyNames())r r€ rd rŸ rœ r™ rI )rQ r¼ Zpoliciesrœ rW rW rX ÚgetPolicyNames1 s
z FirewallDConfig.getPolicyNamesc C sF t |tƒ}t d|¡ | jD ]}|jj|kr | S q ttj |ƒ‚dS )z.object path of policy with given name
z config.getPolicyByName('%s')N)
r rÓ r r€ rd rœ r™ r! r ZINVALID_POLICY)rQ rq r¼ rœ rW rW rX ÚgetPolicyByName< s
z FirewallDConfig.getPolicyByNamec C sD t |tƒ}t |ƒ}t d|¡ | |¡ | j ||¡}| |¡}|S )z0add policy with given name and settings
zconfig.addPolicy('%s'))r rÓ r r€ r½ r Znew_policy_object_dictrk )rQ rq r¨ r¼ rœ r¯ rW rW rX Ú addPolicyI s
zFirewallDConfig.addPolicyc C s t d| ¡ d S )Nzconfig.PolicyAdded('%s')rî )rQ rq rW rW rX r® X s zFirewallDConfig.PolicyAddedc C s t d¡ | jS )z#list helpers objects paths
zconfig.listHelpers())r r€ rb ré rW rW rX Ú listHelpersa s
zFirewallDConfig.listHelpersc C s0 t d¡ g }| jD ]}| |jj¡ qt|ƒS )zget helper names
zconfig.getHelperNames())r r€ rb rŸ rœ r™ rI )rQ r¼ rb rœ rW rW rX ÚgetHelperNamesi s
z FirewallDConfig.getHelperNamesc C sF t |tƒ}t d|¡ | jD ]}|jj|kr | S q ttj |ƒ‚dS )z.object path of helper with given name
z config.getHelperByName('%s')N)
r rÓ r r€ rb rœ r™ r! r ZINVALID_HELPER)rQ rp r¼ rœ rW rW rX ÚgetHelperByNamet s
z FirewallDConfig.getHelperByNamec C sD t |tƒ}t |ƒ}t d|¡ | |¡ | j ||¡}| |¡}|S )z0add helper with given name and settings
zconfig.addHelper('%s'))r rÓ r r€ r½ r Z
new_helperrj )rQ rp r¨ r¼ rœ rµ rW rW rX Ú addHelper s
zFirewallDConfig.addHelperc C s t |tƒ}t d| ¡ d S )Nzconfig.HelperAdded('%s')rã )rQ rp rW rW rX r´ s
zFirewallDConfig.HelperAddedc C s t d¡ | j ¡ ¡ S )Nzconfig.direct.getSettings())r r€ r Ú
get_directrè ré rW rW rX r£ ™ s
zFirewallDConfig.getSettingsc C s> t d¡ t|ƒ}| j ¡ |i ¡ | j ¡ ¡ | ¡ d S )Nzconfig.direct.update())r r€ r r r6 rë rá r– rì rW rW rX r| ¢ s
zFirewallDConfig.updatec C s t d¡ d S )Nzconfig.direct.Updated()rî rs rW rW rX r– ® s zFirewallDConfig.UpdatedZsssc C sŽ t |ƒ}t |ƒ}t |ƒ}t d|||f ¡ | |¡ t|||fƒ}t| ¡ ƒ}||d v rrttj d|||f ƒ‚|d
|¡ | |¡ d S )Nz(config.direct.addChain('%s', '%s', '%s')r z chain '%s' already is in '%s:%s') r r r€ r½ r* r„ r£ r! r rð rŸ r| ©rQ ÚipvÚtableÚchainr¼ Úidxr¨ rW rW rX ÚaddChain¶ s" ÿ
ÿÿzFirewallDConfig.addChainc C sŽ t |ƒ}t |ƒ}t |ƒ}t d|||f ¡ | |¡ t|||fƒ}t| ¡ ƒ}||d vrrttj d|||f ƒ‚|d
|¡ | |¡ d S )Nz+config.direct.removeChain('%s', '%s', '%s')r z chain '%s' is not in '%s:%s') r r r€ r½ r* r„ r£ r! r rô r{ r| r7 rW rW rX Ú removeChainÊ s" ÿ
ÿÿzFirewallDConfig.removeChainc C sJ t |ƒ}t |ƒ}t |ƒ}t d|||f ¡ t|||fƒ}|| ¡ d v S )Nz*config.direct.queryChain('%s', '%s', '%s')r )r r r€ r* r£ )rQ r8 r9 r: r¼ r; rW rW rX Ú
queryChainÞ s ÿzFirewallDConfig.queryChainc C sb t |ƒ}t |ƒ}t d||f ¡ g }| ¡ d D ]*}|d |kr2|d |kr2| |d ¡ q2|S )Nz#config.direct.getChains('%s', '%s')r r# r ©r r r€ r£ rŸ )rQ r8 r9 r¼ rÜ r; rW rW rX Ú getChainsë s zFirewallDConfig.getChainsr} za(sss)c C s t d¡ | ¡ d S )Nz config.direct.getAllChains()r ©r r€ r£ ré rW rW rX Ú getAllChainsù s
z FirewallDConfig.getAllChainsZsssiasc
C s® t |ƒ}t |ƒ}t |ƒ}t |ƒ}t |ƒ}t d||||d |¡f ¡ | |¡ |||||f}t| ¡ ƒ}||d v rŽttj d||||f ƒ‚|d
|¡ | t |ƒ¡ d S )Nz1config.direct.addRule('%s', '%s', '%s', %d, '%s')ú','r# z"rule '%s' already is in '%s:%s:%s')
r r r€ r" r½ r„ r£ r! r rð rŸ r| r* © rQ r8 r9 r: ÚpriorityrR r¼ r; r¨ rW rW rX ÚaddRule s& ÿ
ÿÿzFirewallDConfig.addRulec
C s® t |ƒ}t |ƒ}t |ƒ}t |ƒ}t |ƒ}t d||||d |¡f ¡ | |¡ |||||f}t| ¡ ƒ}||d vrŽttj d||||f ƒ‚|d
|¡ | t |ƒ¡ d S )Nz4config.direct.removeRule('%s', '%s', '%s', %d, '%s')rC r# z rule '%s' is not in '%s:%s:%s')
r r r€ r" r½ r„ r£ r! r rô r{ r| r* rD rW rW rX Ú
removeRule s& ÿ
ÿÿzFirewallDConfig.removeRulec
C sd t |ƒ}t |ƒ}t |ƒ}t |ƒ}t |ƒ}t d||||d |¡f ¡ |||||f}|| ¡ d v S )Nz3config.direct.queryRule('%s', '%s', '%s', %d, '%s')rC r# ©r r r€ r" r£ )rQ r8 r9 r: rE rR r¼ r; rW rW rX Ú queryRule/ s ÿzFirewallDConfig.queryRulec C s˜ t |ƒ}t |ƒ}t |ƒ}t d|||f ¡ | |¡ t| ¡ ƒ}|d d d … D ]2}|||f|d |d |d fkrR|d |¡ qR| t|ƒ¡ d S )Nz+config.direct.removeRules('%s', '%s', '%s')r# r r ) r r r€ r½ r„ r£ r{ r| r* )rQ r8 r9 r: r¼ r¨ ZrulerW rW rX Ú removeRules> s ÿ
zFirewallDConfig.removeRulesza(ias)c C s€ t |ƒ}t |ƒ}t |ƒ}t d|||f ¡ g }| ¡ d D ]>}|d |kr<|d |kr<|d |kr<| |d |d f¡ q<|S )Nz(config.direct.getRules('%s', '%s', '%s')r# r r r r( r? )rQ r8 r9 r: r¼ rÜ r; rW rW rX ÚgetRulesO s ÿ$zFirewallDConfig.getRulesz a(sssias)c C s t d¡ | ¡ d S )Nzconfig.direct.getAllRules()r# rA ré rW rW rX Ú getAllRules_ s
zFirewallDConfig.getAllRulesZsasc C s‚ t |ƒ}t |ƒ}t d|d |¡f ¡ | |¡ ||f}t| ¡ ƒ}||d v rfttj d||f ƒ‚|d
|¡ | |¡ d S )Nz(config.direct.addPassthrough('%s', '%s')rC r úpassthrough '%s', '%s') r r r€ r" r½ r„ r£ r! r rð rŸ r| ©rQ r8 rR r¼ r; r¨ rW rW rX ÚaddPassthroughi s ÿ
ÿz FirewallDConfig.addPassthroughc C s‚ t |ƒ}t |ƒ}t d|d |¡f ¡ | |¡ ||f}t| ¡ ƒ}||d vrfttj d||f ƒ‚|d
|¡ | |¡ d S )Nz+config.direct.removePassthrough('%s', '%s')rC r rM ) r r r€ r" r½ r„ r£ r! r rô r{ r| rN rW rW rX ÚremovePassthrough| s ÿ
ÿz!FirewallDConfig.removePassthroughc C s@ t |ƒ}t |ƒ}t d|d |¡f ¡ ||f}|| ¡ d v S )Nz*config.direct.queryPassthrough('%s', '%s')rC r rH )rQ r8 rR r¼ r; rW rW rX ÚqueryPassthroughŽ s ÿz FirewallDConfig.queryPassthroughZaasc C sJ t |ƒ}t d| ¡ g }| ¡ d D ] }|d |kr&| |d ¡ q&|S )Nz#config.direct.getPassthroughs('%s')r r r# r? )rQ r8 r¼ rÜ r; rW rW rX ÚgetPassthroughsš s z FirewallDConfig.getPassthroughsza(sas)c C s t d¡ | ¡ d S )Nz"config.direct.getAllPassthroughs()r rA ré rW rW rX ÚgetAllPassthroughs§ s
z"FirewallDConfig.getAllPassthroughs)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)…Ú__name__Ú
__module__Ú __qualname__Ú__doc__Z
persistentr rO ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r4 r7 rt ry r8 rg rŠ r‰ rh rŒ r‹ ri rŽ r rk r˜ r— rf r’ r‘ rj r” r“ r r½ rÌ rÍ r ZPROPERTIES_IFACErØ r r râ rn Úsignalr† ZPK_ACTION_INFOZINTROSPECTABLE_IFACErä rÕ r ZDBUS_SIGNATURErê rí r• rò rõ rø rû rý rþ rÿ r r r r r r
r r r
rP r r r r r r± r r r r r r r r r r r r© r r r r# r% r+ r- r« r. r/ r0 r1 r® r2 r3 r4 r r5 r´ r
rÔ r r£ r| r r– r< r= r> r@ rB rF rG rI rJ rK rL rO rP rQ rR rS Ú
__classcell__rW rW rU rX r" < sN 0
L
$ÿÿ
C
ÿÿ ÿ
ÿ ÿÿÿ
ÿ ÿÿÿ
ÿ
ÿÿÿ
ÿ
ÿÿ
ÿ
þ
ÿ
þ
ÿ
þ þ
ÿ
ÿ
ÿþþ
ÿ
þ
ÿ
þ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿ
ÿr" )7rG rO Z dbus.serviceZfirewallr Zfirewall.core.baser Zfirewall.core.watcherr Zfirewall.core.loggerr Zfirewall.server.dbusr Zfirewall.server.decoratorsr r r r
r r Z firewall.server.config_icmptyper
Z firewall.server.config_servicer Zfirewall.server.config_zoner Z firewall.server.config_policyr Z firewall.server.config_ipsetr Z firewall.server.config_helperr Zfirewall.core.io.icmptyper Zfirewall.core.io.ipsetr Zfirewall.core.io.helperr Z#firewall.core.io.lockdown_whitelistr Zfirewall.core.io.directr Zfirewall.dbus_utilsr r r r r r r r r Zfirewall.errorsr! r" rW rW rW rX Ú s. (