a
i_u @ s d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl
m Z d dl m
Z
mZmZmZ d dlmZ d dlmZ G d d
d
e ZdS ) N)config)dbus_to_python%dbus_introspection_prepare_properties!dbus_introspection_add_properties)log)DbusServiceObject)handle_exceptionsdbus_handle_exceptionsdbus_service_methoddbus_polkit_require_auth)errors)
FirewallErrorc s e Zd ZdZdZejjZe fddZ
e dd Z e dd Z
e d d
Zeejd d d
e dddZeejddd
e dddZeejjeejdde dddZejjejdddd Zeejjeejdd e d fd d Zeejjd d e dd!d"Z eejjdd e dd#d$Z eejjd de dd%d&Z eejjdde dd'd(Z eejje dd)d*Z ejjejjdde d+d, Z!eejje dd-d.Z"ejjejjdde d/d0 Z#eejjdde dd1d2Z$ejjejjdde d3d4 Z%eejjdd e dd5d6Z&eejjdde dd7d8Z'eejjdd e dd9d:Z(eejjdde dd;d<Z)eejjdd e dd=d>Z*eejjdde dd?d@Z+eejjdAd e ddBdCZ,eejjdAde ddDdEZ-eejjd de ddFdGZ.eejjd de ddHdIZ/eejjd dJd
e ddKdLZ0eejjdMd e ddNdOZ1eejjdMde ddPdQZ2eejjdde ddRdSZ3eejjdde ddTdUZ4eejjddJd
e ddVdWZ5eejjdAd e ddXdYZ6eejjdAde ddZd[Z7eejjd de dd\d]Z8eejjd de dd^d_Z9eejjd dJd
e dd`daZ:eejjdMd e ddbdcZ;eejjdMde ddddeZeejjddJd
e ddjdkZ?eejjdld e ddmdnZ@eejjdlde ddodpZAeejjddd
e ddqdrZBeejjd de ddsdtZCeejjdde ddudvZDeejjd dJd
e ddwdxZEeejjdMd e ddydzZFeejjdMde dd{d|ZGeejjdde dd}d~ZHeejjdde dddZIeejjddJd
e dddZJ ZKS )FirewallDConfigServicezFirewallD main classTc s` t t| j|i | || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j d S )Nr zconfig.service.%d)
superr __init__parentr objitem_idbusnamepath _log_prefixr dbus DBUS_INTERFACE_CONFIG_SERVICE)selfr Zconfservicer argskwargs __class__ B/usr/lib/python3.9/site-packages/firewall/server/config_service.pyr 2 s
z FirewallDConfigService.__init__c C s d S Nr r r r r! __del__? s z FirewallDConfigService.__del__c C s | d S r" )Zremove_from_connectionr# r r r!
unregisterC s z!FirewallDConfigService.unregisterc C s |dkrt | jjS |dkr,t | jjS |dkrBt | jjS |dkrXt | jjS |dkrnt | jjS t j
d| d S )Nnamefilenamer defaultbuiltinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r Stringr r& r' r ZBooleanr( r)
exceptions
DBusException)r
property_namer r r!
_get_propertyK s z$FirewallDConfigService._get_propertyssv) in_signature
out_signatureNc C sL t |t}t |t}td| j|| |tjjkrBtj d| |
|S )Nz%s.Get('%s', '%s')Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r strr debug1r r r r r+ r, r. )r interface_namer- senderr r r! Get\ s
zFirewallDConfigService.Getsza{sv}c C s` t |t}td| j| |tjjkr6tj d| i }dD ]}|
|||< q>tj |ddS )Nz%s.GetAll('%s')r3 )r& r' r r( r) svZ signature) r r4 r r5 r r r r r+ r, r. Z
Dictionary)r r6 r7 retxr r r! GetAllm s
z FirewallDConfigService.GetAllZssv)r1 c C sl t |t}t |t}t |}td| j||| | j| |tjj krXtj
d| tj
d| d S )Nz%s.Set('%s', '%s', '%s')r3 zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r4 r r5 r r accessCheckr r r r+ r, )r r6 r- Z new_valuer7 r r r! Set~ s$
zFirewallDConfigService.Setzsa{sv}asr; c C s2 t |t}t |}t |}td| j||| d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r4 r r5 r )r r6 Zchanged_propertiesZinvalidated_propertiesr r r! PropertiesChanged s
z(FirewallDConfigService.PropertiesChanged)r2 c s8 t d| j tt| | j| j }t | |t
j j S )Nz%s.Introspect())
r Zdebug2r r r
Introspectr r Zget_busr r r r )r r7 datar r r! rB s
z!FirewallDConfigService.Introspectz(sssa(ss)asa{ss}asa(ss))c C s t d| j | j| jS )!get settings for service
z%s.getSettings())r r5 r r Zget_service_configr r r7 r r r! getSettings s z"FirewallDConfigService.getSettingsc C s t d| j | j| jS )rD z%s.getSettings2())r r5 r r get_service_config_dictr rE r r r! getSettings2 s z#FirewallDConfigService.getSettings2c C sF t |}td| j | j| | j| j|| _| | jj
dS )z$update settings for service
z%s.update('...')N) r r r5 r r r? r Zset_service_configr Updatedr& r settingsr7 r r r! update s
z FirewallDConfigService.updatec C sF t |}td| j | j| | j| j|| _| | jj
d S )Nz%s.update2('...')) r r r5 r r r? r set_service_config_dictr rI r& rJ r r r! update2 s
z FirewallDConfigService.update2c C s< t d| j | j| | j| j| _| | jj dS )z2load default settings for builtin service
z%s.loadDefaults()N)
r r5 r r r? r Zload_service_defaultsr rI r& rE r r r! loadDefaults s z#FirewallDConfigService.loadDefaultsc C s t d| j|f d S )Nz%s.Updated('%s')r r5 r r r& r r r! rI s z FirewallDConfigService.Updatedc C s: t d| j | j| | j| j | j| j dS )zremove service
z%s.removeService()N) r r5 r r r? r Zremove_servicer Z
removeServicerE r r r! remove s z FirewallDConfigService.removec C s t d| j|f d S )Nz%s.Removed('%s')rP rQ r r r! Removed s z FirewallDConfigService.Removedc C sF t |t}td| j| | j| | j| j || _ |
| dS )zrename service
z%s.rename('%s')N) r r4 r r5 r r r? r Zrename_servicer Renamed)r r& r7 r r r! rename s
z FirewallDConfigService.renamec C s t d| j|f d S )Nz%s.Renamed('%s')rP rQ r r r! rT s z FirewallDConfigService.Renamedc C s t d| j | d S )Nz%s.getVersion()r r r5 r rF rE r r r!
getVersion s z!FirewallDConfigService.getVersionc C sH t |t}td| j| | j| t| }||d< | | d S )Nz%s.setVersion('%s')r
r r4 r r5 r r r? listrF rL )r versionr7 rK r r r!
setVersion s
z!FirewallDConfigService.setVersionc C s t d| j | d S )Nz
%s.getShort()r rV rE r r r! getShort s z FirewallDConfigService.getShortc C sH t |t}td| j| | j| t| }||d< | | d S )Nz%s.setShort('%s')r rX )r Zshortr7 rK r r r! setShort$ s
z FirewallDConfigService.setShortc C s t d| j | d S )Nz%s.getDescription() rV rE r r r! getDescription1 s z%FirewallDConfigService.getDescriptionc C sH t |t}td| j| | j| t| }||d< | | d S )Nz%s.setDescription('%s')r^ rX )r descriptionr7 rK r r r! setDescription8 s
z%FirewallDConfigService.setDescriptionza(ss)c C s t d| j | d S )Nz
%s.getPorts() rV rE r r r! getPortsF s z FirewallDConfigService.getPortsc C s g }t |tD ](}t|tr,|t| q|| q|}td| jddd |D | j
| t| }||d< | | d S )Nz%s.setPorts('[%s]'),c s s" | ]}d |d |d f V qdS z ('%s, '%s')r r Nr .0portr r r! Z z2FirewallDConfigService.setPorts..rb
r rY
isinstanceappendtupler r5 r joinr r? rF rL r Zportsr7 Z_portsrh rK r r r! setPortsM s
z FirewallDConfigService.setPortsc C s t |t}t |t}td| j|| | j| t| }||f|d v rbt t
j d||f |d ||f |
| d S )Nz%s.addPort('%s', '%s')rb %s:%sr r4 r r5 r r r? rY rF r
r ALREADY_ENABLEDrm rL r rh protocolr7 rK r r r! addPort` s
z FirewallDConfigService.addPortc C s t |t}t |t}td| j|| | j| t| }||f|d vrbt t
j d||f |d ||f |
| d S )Nz%s.removePort('%s', '%s')rb rr r r4 r r5 r r r? rY rF r
r NOT_ENABLEDrR rL ru r r r!
removePortp s
z!FirewallDConfigService.removePortbc C s: t |t}t |t}td| j|| ||f| d v S )Nz%s.queryPort('%s', '%s')rb r r4 r r5 r rF r rh rv r7 r r r! queryPort s
z FirewallDConfigService.queryPortasc C s t d| j | d S )Nz%s.getProtocols() rV rE r r r! getProtocols s z#FirewallDConfigService.getProtocolsc C sN t |t}td| jd| | j| t| }||d< | | d S )Nz%s.setProtocols('[%s]')rd r )
r rY r r5 r ro r r? rF rL )r Z protocolsr7 rK r r r! setProtocols s
z#FirewallDConfigService.setProtocolsc C sf t |t}td| j| | j| t| }||d v rJt t
j ||d | |
| d S )Nz%s.addProtocol('%s')r rs r rv r7 rK r r r! addProtocol s
z"FirewallDConfigService.addProtocolc C sf t |t}td| j| | j| t| }||d vrJt t
j ||d | |
| d S )Nz%s.removeProtocol('%s')r rx r r r r! removeProtocol s
z%FirewallDConfigService.removeProtocolc C s* t |t}td| j| || d v S )Nz%s.queryProtocol(%s')r r| )r rv r7 r r r!
queryProtocol s
z$FirewallDConfigService.queryProtocolc C s t d| j | d S )Nz%s.getSourcePorts() rV rE r r r! getSourcePorts s z%FirewallDConfigService.getSourcePortsc C s g }t |tD ](}t|tr,|t| q|| q|}td| jddd |D | j
| t| }||d< | | d S )Nz%s.setSourcePorts('[%s]')rd c s s" | ]}d |d |d f V qdS re r rf r r r! ri rj z8FirewallDConfigService.setSourcePorts..r rk rp r r r! setSourcePorts s
z%FirewallDConfigService.setSourcePortsc C s t |t}t |t}td| j|| | j| t| }||f|d v rbt t
j d||f |d ||f |
| d S )Nz %s.addSourcePort('%s', '%s')r rr rs ru r r r!
addSourcePort s
z$FirewallDConfigService.addSourcePortc C s t |t}t |t}td| j|| | j| t| }||f|d vrbt t
j d||f |d ||f |
| d S )Nz %s.removeSourcePort('%s', '%s')r rr rx ru r r r! removeSourcePort s
z'FirewallDConfigService.removeSourcePortc C s: t |t}t |t}td| j|| ||f| d v S )Nz %s.querySourcePort('%s', '%s')r r| r} r r r! querySourcePort s
z&FirewallDConfigService.querySourcePortc C s t d| j | d S )Nz%s.getModules() rV rE r r r!
getModules s z!FirewallDConfigService.getModulesc C s t |t}g }|D ]8}|dr@|dd}d|v r@|dd}|| q|}td| jd| | j
| t| }||d< | | d S )N
nf_conntrack_ _-z%s.setModules('[%s]')rd r )
r rY
startswithreplacerm r r5 r ro r r? rF rL )r modulesr7 Z_modulesmodulerK r r r!
setModules s
z!FirewallDConfigService.setModulesc C s t |t}|dr4|dd}d|v r4|dd}td| j| | j| t |
}||d v rtt t j
||d | | | d S )Nr r r r z%s.addModule('%s')r )r r4 r r r r5 r r r? rY rF r
r rt rm rL r r r7 rK r r r! addModule" s
z FirewallDConfigService.addModulec C s t |t}|dr4|dd}d|v r4|dd}td| j| | j| t |
}||d vrtt t j
||d | | | d S )Nr r r r z%s.removeModule('%s')r )r r4 r r r r5 r r r? rY rF r
r ry rR rL r r r r! removeModule3 s
z#FirewallDConfigService.removeModulec C sT t |t}|dr4|dd}d|v r4|dd}td| j| || d v S )Nr r r r z%s.queryModule('%s')r )r r4 r r r r5 r rF )r r r7 r r r! queryModuleD s
z"FirewallDConfigService.queryModuleza{ss}c C s t d| j | d S )Nz%s.getDestinations() rV rE r r r! getDestinationsR s z&FirewallDConfigService.getDestinationsc C sV t |t}td| j|d|d | j| t| }||d< |
| d S )Nz*%s.setDestinations({ipv4:'%s', ipv6:'%s'})Zipv4Zipv6r ) r dictr r5 r getr r? rY rF rL )r Z destinationsr7 rK r r r! setDestinationsY s
z&FirewallDConfigService.setDestinationsc C sV t |t}td| j| | j| t| }||d vrJt t
j ||d | S )Nz%s.getDestination('%s')r ) r r4 r r5 r r r? rY rF r
r ry r familyr7 rK r r r! getDestinationf s
z%FirewallDConfigService.getDestinationc C s t |t}t |t}td| j|| | j| t| }||d v rn|d | |krnt t
j d||f ||d |< | | d S )Nz %s.setDestination('%s', '%s')r z
'%s': '%s')
r r4 r r5 r r r? rY rF r
r rt rL r r addressr7 rK r r r! setDestinations s
z%FirewallDConfigService.setDestinationc C sb t |t}td| j| | j| t| }||d vrJt t
j ||d |= | | d S )Nz%s.removeDestination('%s')r )
r r4 r r5 r r r? rY rF r
r ry rL r r r r! removeDestination s
z(FirewallDConfigService.removeDestinationc C sJ t |t}t |t}td| j|| | }||d v oH||d | kS )Nz %s.queryDestination('%s', '%s')r r| r r r r! queryDestination s
z'FirewallDConfigService.queryDestinationc C s< t d| j | j| | j| j}d|v r8|d S g S )Nz%s.getIncludes()includes)r r5 r r r? r rG r )r r7 rK r r r! getIncludes s z"FirewallDConfigService.getIncludesc C sZ t |t}td| j| | j| d|d d i}| j| j || _ |
| j j d S )Nz%s.setIncludes('%s')r ) r rY r r5 r r r? r rM r rI r& )r r r7 rK r r r! setIncludes s
z"FirewallDConfigService.setIncludesc C sj t |t}td| j| | j| | j| j }|
dg | | j | j || _ |
| j j d S )Nz%s.addInclude('%s')r )r r4 r r5 r r r? r rG r
setdefaultrm rM rI r& r Zincluder7 rK r r r!
addInclude s
z!FirewallDConfigService.addIncludec C sf t |t}td| j| | j| | j| j }|d
| | j | j || _ | | j j
d S )Nz%s.removeInclude('%s')r )r r4 r r5 r r r? r rG r rR rM rI r& r r r r!
removeInclude s
z$FirewallDConfigService.removeIncludec C s@ t |t}td| j| | j| j}d|v r<||d v S dS )Nz%s.queryInclude('%s')r F)r r4 r r5 r r rG r r r r r! queryInclude s
z#FirewallDConfigService.queryInclude)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)L__name__
__module__ __qualname____doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r r$ r% r. r
ZPROPERTIES_IFACEr8 r> r r@ r signalrA ZPK_ACTION_INFOZINTROSPECTABLE_IFACErB r rF rH rL rN rO rI rR rS rU rT rW r[ r\ r] r_ ra rc rq rw rz r~ r r r r r r r r r r r r r r r r r r r r r r r r r r
__classcell__r r r r! r * s
r )r Z dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.loggerr Zfirewall.server.dbusr Zfirewall.server.decoratorsr r r
r r Zfirewall.errorsr
r r r r r! s