a
iI @ s d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl
m Z m Z m
Z
mZ d dlmZ d dlmZ d dlmZmZmZmZ d d lmZ d d
lmZ G d d d eZdS )
N)config)dbus_to_python%dbus_introspection_prepare_properties!dbus_introspection_add_properties)IPSet) IPSET_TYPESnormalize_ipset_entry check_entry_overlaps_existing check_for_overlapping_entries)log)DbusServiceObject)handle_exceptionsdbus_handle_exceptionsdbus_service_methoddbus_polkit_require_auth)errors)
FirewallErrorc s e Zd ZdZdZejjZe fddZ
e dd Z e dd Z
e d d
Zeejd d d
e dWddZeejddd
e dXddZeejjeejdde dYddZejjejdddd Zeejjeejdd e dZ fd d Zeejje j d e d[d d!Z eejje j de d\d"d#Z eejje d]d$d%Z ejjejjdde d&d' Z!eejje d^d(d)Z"ejjejjdde d*d+ Z#eejjdde d_d,d-Z$ejjejjdde d.d/ Z%eejjdd e d`d0d1Z&eejjdde dad2d3Z'eejjdd e dbd4d5Z(eejjdde dcd6d7Z)eejjdd e ddd8d9Z*eejjdde ded:d;Z+eejjdd e dfdd?Z-eejjd@d e dhdAdBZ.eejjd@de didCdDZ/eejjd de djdEdFZ0eejjdde dkdGdHZ1eejjd dId
e dldJdKZ2eejjdLd e dmdMdNZ3eejjdLde dndOdPZ4eejjdde dodQdRZ5eejjdde dpdSdTZ6eejjddId
e dqdUdVZ7 Z8S )rFirewallDConfigIPSetzFirewallD main classTc s` t t| j|i | || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j d S )Nr zconfig.ipset.%d)
superr __init__parentr objitem_idbusnamepath _log_prefixr dbusDBUS_INTERFACE_CONFIG_IPSET)selfr ZconfZipsetr argskwargs __class__ @/usr/lib/python3.9/site-packages/firewall/server/config_ipset.pyr 6 s
z FirewallDConfigIPSet.__init__c C s d S Nr$ r r$ r$ r% __del__C s z FirewallDConfigIPSet.__del__c C s | d S r& )Zremove_from_connectionr' r$ r$ r%
unregisterG s z FirewallDConfigIPSet.unregisterc C s |dkrt | jjS |dkr,t | jjS |dkrBt | jjS |dkrXt | jjS |dkrnt | jjS t j
d| d S )Nnamefilenamer defaultbuiltinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r Stringr r* r+ r ZBooleanr, r-
exceptions
DBusException)r
property_namer$ r$ r%
_get_propertyO s z"FirewallDConfigIPSet._get_propertyssv) in_signature
out_signatureNc C sL t |t}t |t}td| j|| |tjjkrBtj d| |
|S )Nz%s.Get('%s', '%s')Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r strr debug1r r r r r/ r0 r2 )r interface_namer1 senderr$ r$ r% Get` s
zFirewallDConfigIPSet.Getsza{sv}c C s` t |t}td| j| |tjjkr6tj d| i }dD ]}|
|||< q>tj |ddS )Nz%s.GetAll('%s')r7 )r* r+ r r, r- svZ signature) r r8 r r9 r r r r r/ r0 r2 Z
Dictionary)r r: r; retxr$ r$ r% GetAllq s
zFirewallDConfigIPSet.GetAllZssv)r5 c C sl t |t}t |t}t |}td| j||| | j| |tjj krXtj
d| tj
d| d S )Nz%s.Set('%s', '%s', '%s')r7 zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r8 r r9 r r accessCheckr r r r/ r0 )r r: r1 Z new_valuer; r$ r$ r% Set s$
zFirewallDConfigIPSet.Setzsa{sv}asr? c C s2 t |t}t |}t |}td| j||| d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r8 r r9 r )r r: Zchanged_propertiesZinvalidated_propertiesr$ r$ r% PropertiesChanged s
z&FirewallDConfigIPSet.PropertiesChanged)r6 c s8 t d| j tt| | j| j }t | |t
j j S )Nz%s.Introspect())
r Zdebug2r r r
Introspectr r Zget_busr r r r )r r; datar" r$ r% rF s
z FirewallDConfigIPSet.Introspectc C s t d| j | j| jS )z get settings for ipset
z%s.getSettings())r r9 r r Zget_ipset_configr r r; r$ r$ r% getSettings s z FirewallDConfigIPSet.getSettingsc C sF t |}td| j | j| | j| j|| _| | jj
dS )z"update settings for ipset
z%s.update('...')N) r r r9 r r rC r Zset_ipset_configr Updatedr* )r settingsr; r$ r$ r% update s
zFirewallDConfigIPSet.updatec C s< t d| j | j| | j| j| _| | jj dS )z0load default settings for builtin ipset
z%s.loadDefaults()N)
r r9 r r rC r Zload_ipset_defaultsr rJ r* rH r$ r$ r% loadDefaults s z!FirewallDConfigIPSet.loadDefaultsc C s t d| j|f d S )Nz%s.Updated('%s')r r9 r r r* r$ r$ r% rJ s z FirewallDConfigIPSet.Updatedc C s: t d| j | j| | j| j | j| j dS )zremove ipset
z %s.remove()N) r r9 r r rC r Z remove_ipsetr Z removeIPSetrH r$ r$ r% remove s zFirewallDConfigIPSet.removec C s t d| j|f d S )Nz%s.Removed('%s')rN rO r$ r$ r% Removed s z FirewallDConfigIPSet.Removedc C sF t |t}td| j| | j| | j| j || _ |
| dS )zrename ipset
z%s.rename('%s')N) r r8 r r9 r r rC r Z rename_ipsetr Renamed)r r* r; r$ r$ r% rename s
zFirewallDConfigIPSet.renamec C s t d| j|f d S )Nz%s.Renamed('%s')rN rO r$ r$ r% rR s z FirewallDConfigIPSet.Renamedc C s t d| j | d S )Nz%s.getVersion()r r r9 r rI rH r$ r$ r%
getVersion s z FirewallDConfigIPSet.getVersionc C sH t |t}td| j| | j| t| }||d< | | d S )Nz%s.setVersion('%s')r
r r8 r r9 r r rC listrI rL )r versionr; rK r$ r$ r%
setVersion s
z FirewallDConfigIPSet.setVersionc C s t d| j | d S )Nz
%s.getShort()r rT rH r$ r$ r% getShort s z FirewallDConfigIPSet.getShortc C sH t |t}td| j| | j| t| }||d< | | d S )Nz%s.setShort('%s')r rV )r Zshortr; rK r$ r$ r% setShort s
z FirewallDConfigIPSet.setShortc C s t d| j | d S )Nz%s.getDescription() rT rH r$ r$ r% getDescription# s z#FirewallDConfigIPSet.getDescriptionc C sH t |t}td| j| | j| t| }||d< | | d S )Nz%s.setDescription('%s')r\ rV )r descriptionr; rK r$ r$ r% setDescription* s
z#FirewallDConfigIPSet.setDescriptionc C s t d| j | d S )Nz %s.getType() rT rH r$ r$ r% getType8 s z FirewallDConfigIPSet.getTypec C s\ t |t}td| j| | j| |tvr:tt j
|t | }||d< |
| d S )Nz%s.setType('%s')r` )r r8 r r9 r r rC r r r Z INVALID_TYPErW rI rL )r Z
ipset_typer; rK r$ r$ r% setType? s
z FirewallDConfigIPSet.setTypeza{ss}c C s t d| j | d S )Nz%s.getOptions() rT rH r$ r$ r%
getOptionsN s z FirewallDConfigIPSet.getOptionsc C sL t |t}td| jt| | j| t| }||d< |
| d S )Nz%s.setOptions('[%s]')rc ) r dictr r9 r reprr rC rW rI rL )r optionsr; rK r$ r$ r%
setOptionsU s
z FirewallDConfigIPSet.setOptionsc C s t |t}t |t}td| j|| | j| t| }||d v rn|d | |krnt t
j d||f ||d |< | | d S )Nz%s.addOption('%s', '%s')rc z
'%s': '%s')
r r8 r r9 r r rC rW rI r r ALREADY_ENABLEDrL r keyvaluer; rK r$ r$ r% addOptiona s
z FirewallDConfigIPSet.addOptionc C sb t |t}td| j| | j| t| }||d vrJt t
j ||d |= | | d S )Nz%s.removeOption('%s')rc )
r r8 r r9 r r rC rW rI r r NOT_ENABLEDrL )r rk r; rK r$ r$ r% removeOptionp s
z!FirewallDConfigIPSet.removeOptionbc C sN t |t}t |t}td| j|| t| }||d v oL|d | |kS )Nz%s.queryOption('%s', '%s')rc )r r8 r r9 r rW rI rj r$ r$ r% queryOption} s
z FirewallDConfigIPSet.queryOptionasc C s t d| j | d S )Nz%s.getEntries() rT rH r$ r$ r%
getEntries s z FirewallDConfigIPSet.getEntriesc C s| t |t}t| td| jd| | j| t| }d|d v rf|d d dkrft
t j ||d< |
| d S )Nz%s.setEntries('[%s]'),timeoutrc 0rs )r rW r
r r9 r joinr rC rI r r IPSET_WITH_TIMEOUTrL )r entriesr; rK r$ r$ r%
setEntries s
z FirewallDConfigIPSet.setEntriesc C s t |t}t|}td| j| | j| t| }d|d v r`|d d dkr`t
t j ||d v rxt
t j
|t||d |d | | | d S )Nz%s.addEntry('%s')rv rc rw rs )r r8 r r r9 r r rC rW rI r r ry ri r appendrL r entryr; rK r$ r$ r% addEntry s
z FirewallDConfigIPSet.addEntryc C s t |t}t|}td| j| | j| t| }d|d v r`|d d dkr`t
t j ||d vrxt
t j
||d | | | d S )Nz%s.removeEntry('%s')rv rc rw rs )r r8 r r r9 r r rC rW rI r r ry rn rP rL r} r$ r$ r% removeEntry s
z FirewallDConfigIPSet.removeEntryc C s` t |t}t|}td| j| t| }d|d v rT|d d dkrTtt j
||d v S )Nz%s.queryEntry('%s')rv rc rw rs ) r r8 r r r9 r rW rI r r ry r} r$ r$ r%
queryEntry s
z FirewallDConfigIPSet.queryEntry)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)9__name__
__module__ __qualname____doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr
r r r( r) r2 r ZPROPERTIES_IFACEr< rB r rD ZservicesignalrE ZPK_ACTION_INFOZINTROSPECTABLE_IFACErF r r ZDBUS_SIGNATURErI rL rM rJ rP rQ rS rR rU rY rZ r[ r] r_ ra rb rd rh rm ro rq rt r{ r r r
__classcell__r$ r$ r" r% r . s0
r ) r Z dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.ipsetr Zfirewall.core.ipsetr r r r
Zfirewall.core.loggerr Zfirewall.server.dbusr Zfirewall.server.decoratorsr
r r r r Zfirewall.errorsr r r$ r$ r$ r% s