a «°iÊã@sJdgZddlmZddlZddlZddlZddlZddlmZddl m Z ddlmZddl mZddlmZdd lmZmZdd lmZmZmZmZmZmZddlmZddlmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%dd l&m'Z'ddl(m)Z)ddl*m+Z+ddl,m-Z-ddl.m/Z/m0Z0ddl1m2Z2ddlm3Z3ddl4m5Z5Gdd„deƒZ6dS)Ú FirewallDé)ÚGLibN)Úconfig)ÚFirewall)Ú Rich_Rule)Úlog)ÚFirewallClientZoneSettings)ÚFirewallDBusExceptionÚDbusServiceObject)Údbus_handle_exceptionsÚdbus_service_methodÚhandle_exceptionsÚdbus_service_method_deprecatedÚdbus_service_signal_deprecatedÚdbus_polkit_require_auth)ÚFirewallDConfig)Údbus_to_pythonÚcommand_of_senderÚcontext_of_senderÚ uid_of_senderÚuser_of_uidÚ%dbus_introspection_prepare_propertiesÚ!dbus_introspection_add_propertiesÚ!dbus_introspection_add_deprecated)Úcheck_on_disk_config)ÚIPSet)ÚIcmpType)ÚHelper)Únm_get_connection_of_interfaceÚnm_set_zone_of_connection)Úifcfg_set_zone_of_interface)Úerrors)Ú FirewallErrorcs!eZdZdZdZejjZe ‡fdd„ƒZ dd„Ze dd„ƒZe d d „ƒZ edd„ƒZed d„ƒZedd„ƒZedd„ƒZedd„ƒZeejddded¯dd„ƒƒZeejddded°dd„ƒƒZeejjƒeejdd ed±d!d"„ƒƒƒZejjejd#d$d%d&„ƒZeejjƒeejdd'ed²‡fd(d)„ ƒƒƒZeejjƒeejj d*d*ded³d+d,„ƒƒƒZ!eejjƒeejj d*d*ded´d-d.„ƒƒƒZ"ej ejj ¡ed/d0„ƒƒZ#eejjƒeejj d*d*ddµd1d2„ƒƒZ$eejjƒeejj d*d*ded¶d3d4„ƒƒƒZ%eejjƒeejj d*d*ded·d5d6„ƒƒƒZ&eejj'ƒeejj(d*d*ded¸d7d8„ƒƒƒZ)eejj'ƒeejj(d*d*ded¹d9d:„ƒƒƒZ*eejj+ƒeejj(d*d;dedºdd?„ƒƒZ-ejjejj(d*d$ed@dA„ƒƒZ.eejj'ƒeejj(dd*ded»dBdC„ƒƒƒZ/eejj'ƒeejj(dd*ded¼dDdE„ƒƒƒZ0eejj+ƒeejj(dd;ded½dFdG„ƒƒƒZ1eejj+ƒeejj(d*dHded¾dIdJ„ƒƒƒZ2ejjejj(dd$edKdL„ƒƒZ3ejjejj(dd$edMdN„ƒƒZ4eejj'ƒeejj(dOd*ded¿dPdQ„ƒƒƒZ5eejj'ƒeejj(dOd*dedÀdRdS„ƒƒƒZ6eejj+ƒeejj(dOd;dedÁdTdU„ƒƒƒZ7eejj+ƒeejj(d*dVdedÂdWdX„ƒƒƒZ8ejjejj(dOd$edYdZ„ƒƒZ9ejjejj(dOd$ed[d\„ƒƒZ:eejj'ƒeejj(dd*dedÃd]d^„ƒƒƒZ;eejj'ƒeejj(dd*dedÄd_d`„ƒƒƒZejjejj(dd$ededf„ƒƒZ?ejjejj(dd$edgdh„ƒƒZ@eejj'ƒeejj(dd*dedÇdidj„ƒƒƒZAeejj'ƒeejj(dd*dedÈdkdl„ƒƒƒZBeejj+ƒeejj(dd;dedÉdmdn„ƒƒƒZCeejj+ƒeejj(d*dHdedÊdodp„ƒƒƒZDejjejj(dd$edqdr„ƒƒZEejjejj(dd$edsdt„ƒƒZFeejjƒeejj d*d*dedËdudv„ƒƒƒZGeejjƒeejj d*d*dedÌdwdx„ƒƒƒZHeejjƒeejj d*d;dedÍdydz„ƒƒƒZIejjejj d*d$ed{d|„ƒƒZJejjejj d*d$ed}d~„ƒƒZKeejjLƒeejj dddedÎd€d„ƒƒƒZMeejjLƒeejjNdddedÏd‚dƒ„ƒƒƒZOeejjLƒeejjNd„d edÐd…d†„ƒƒƒZPejjejjNd„d$ed‡dˆ„ƒƒZQeejjLƒeejjRdddedÑd‰dŠ„ƒƒƒZSeejjLƒeejjRd„d edÒd‹dŒ„ƒƒƒZTejjejjRd„d$eddŽ„ƒƒZUeejjƒeejj d*dHdedÓdd„ƒƒƒZVeejjLƒeejj dd‘dedÔd’d“„ƒƒƒZWeejjLƒeejj dddedÕd”d•„ƒƒƒZXeejjƒeejj d*dHdedÖd–d—„ƒƒƒZYeejjLƒeejj deZj[ded×d˜d™„ƒƒƒZ\eejjLƒeejj d*ddedØdšd›„ƒƒƒZ]eejjƒeejj dd*dedÙdœd„ƒƒƒZ^ejjejj dd$edždŸ„ƒƒZ_eejjLƒeejj d*ddedÚd d¡„ƒƒƒZ`eejjƒeejj dd*dedÛd¢d£„ƒƒƒZaejjejj dd$ed¤d¥„ƒƒZbeejjƒeejj d*ddedÜd¦d§„ƒƒƒZceejjƒeejj dd*dedÝd¨d©„ƒƒƒZdejjejj dd$edªd«„ƒƒZeeejjƒeejjRd*dHdedÞd¬d„ƒƒƒZfeejjƒeejjRd*d®dedßd¯d°„ƒƒƒZgeejjƒeejjNd*dHdedàd±d²„ƒƒƒZheejjƒeejjNd*d®dedád³d´„ƒƒƒZieejjƒeejjNdddedâdµd¶„ƒƒƒZjeejjƒeejjNdddedãd·d¸„ƒƒƒZkeejjLƒeejjNdd;dedäd¹dº„ƒƒƒZleejjƒeejjNdddedåd»d¼„ƒƒƒZmeejjƒeejjNdddedæd½d¾„ƒƒƒZneejjƒeejjNdddedçd¿dÀ„ƒƒƒZoeejjƒeejjNdddedèdÁdÂ„ƒƒƒZpeejjLƒeejjNdd;dedédÃdÄ„ƒƒƒZqeejjLƒeejjNddHdedêdÅdÆ„ƒƒƒZrejjejjNdd$edÇdÈ„ƒƒZsejjejjNdd$edÉdÊ„ƒƒZtejjejjNdd$edËdÌ„ƒƒZuejjejjNdd$edÍdÎ„ƒƒZveejjƒeejjNdddedëdÏdÐ„ƒƒƒZweejjƒeejjNdddedìdÑdÒ„ƒƒƒZxeejjƒeejjNdddedídÓdÔ„ƒƒƒZyeejjLƒeejjNdd;dedîdÕdÖ„ƒƒƒZzeejjLƒeejjNddHdedïd×dØ„ƒƒƒZ{ejjejjNdd$edÙdÚ„ƒƒZ|ejjejjNdd$edÛdÜ„ƒƒZ}ejjejjNdd$edÝdÞ„ƒƒZ~edßdà„ƒZeejjƒeejjNdáddedðdâdã„ƒƒƒZ€eejjƒeejjNdddedñdädå„ƒƒƒZeejjLƒeejjNdd;dedòdædç„ƒƒƒZ‚eejjLƒeejjNddHdedódèdé„ƒƒƒZƒejjejjNdád$edêdë„ƒƒZ„ejjejjNdd$edìdí„ƒƒZ…edîdï„ƒZ†eejjƒeejjNdáddedôdðdñ„ƒƒƒZ‡eejjƒeejjNdddedõdòdó„ƒƒƒZˆeejjLƒeejjNdd;dedödôdõ„ƒƒƒZ‰eejjLƒeejjNddHded÷död÷„ƒƒƒZŠejjejjNdád$edødù„ƒƒZ‹ejjejjNdd$edúdû„ƒƒZŒedüdý„ƒZeejjƒeejjNdþddedødÿd„ƒƒƒZŽeejjƒeejjNdddedùdd„ƒƒƒZeejjLƒeejjNdd;dedúdd„ƒƒƒZeejjLƒeejjNdddedûdd„ƒƒƒZ‘ejjejjNdþd$edüd d„ƒƒZ’ejjejjNdd$edd „ƒƒZ“edd„ƒZ”eejjƒeejjNdáddedýdd„ƒƒƒZ•eejjƒeejjNdddedþdd„ƒƒƒZ–eejjLƒeejjNdd;dedÿdd„ƒƒƒZ—eejjLƒeejjNddHdeddd„ƒƒƒZ˜ejjejjNdád$eddd„ƒƒZ™ejjejjNdd$edd„ƒƒZšedd„ƒZ›eejjƒeejjNdþddeddd„ƒƒƒZœeejjƒeejjNdddedd d!„ƒƒƒZeejjLƒeejjNdd;dedd"d#„ƒƒƒZžeejjLƒeejjNdddedd$d%„ƒƒƒZŸejjejjNdþd$edd&d'„ƒƒZ ejjejjNdd$ed(d)„ƒƒZ¡ed*d+„ƒZ¢eejjƒeejjNd,ddedd-d.„ƒƒƒZ£eejjƒeejjNdddedd/d0„ƒƒƒZ¤eejjLƒeejjNdd;ded d1d2„ƒƒƒZ¥ejjejjNd,d$ed d3d4„ƒƒZ¦ejjejjNdd$ed5d6„ƒƒZ§ed7d8„ƒZ¨eejjƒeejjNd9ddedd:d;„ƒƒƒZ©eejjƒeejjNd„ƒƒƒZªeejjLƒeejjNd|S)NzIntrospect())rZdebug2r*rÚ Introspectr-r,Zget_busrrr&r)rkrrZ deprecatedr)r.rAÚdataÚ interfacer0r2r3rx+s ÿÿýzFirewallD.IntrospectÚcCs*t d¡|j ¡|j ¡| ¡dS)z#Reload the firewall rules. zreload()N©rr8r$ÚreloadrÚReloaded©r.rAr2r2r3r}As zFirewallD.reloadcCs,t d¡|j d¡|j ¡| ¡dS)z˜Completely reload the firewall. Completely reload the firewall: Stops firewall, unloads modules and starts the firewall again. zcompleteReload()TNr|rr2r2r3ÚcompleteReloadPs zFirewallD.completeReloadcCst d¡dS)Nz Reloaded()©rr8r6r2r2r3r~`szFirewallD.ReloadedcCs"t d¡|jj ¡| ¡dS)zbreset to firewall's builtin defaults. Reloads firewalld to apply changes properly zfirewalld.reset_to_defaults()N)rr8r$rZreset_defaultsr}rr2r2r3ÚresetToDefaultses zFirewallD.resetToDefaultscCst d¡t|jƒdS)z&Check permanent configuration zcheckPermanentConfig()N)rr8rr$rr2r2r3ÚcheckPermanentConfigps zFirewallD.checkPermanentConfigcCs¼t d¡|jjdkr"ttjdƒ‚d}|j ¡}|jj ¡D]´}| |¡}zj||vr–|j |¡}| ¡|kr†t d|¡| |¡q²t d|¡nt d|¡|j ||¡Wq<tyî}z"t d||f¡d }WYd }~q¡f}z6|j ¡|krät d¡|j |¡n t d¡Wn8ty(}zt d|¡d }WYd }~n d }~00|jj?j@ A¡}z6|j ¡|krbt d ¡|j B|¡n t d!¡Wn8ty¦}zt d"|¡d }WYd }~n d }~00|r¸ttjCƒ‚d S)#z-Make runtime configuration permanent zcopyRuntimeToPermanent()ZFAILEDzÁSaving runtime to permanent is not allowed while firewalld is in FAILED state. The permanent configuration must be fixed and then firewalld restarted. Try `firewall-offline-cmd --check-config`.FzCopying service '%s' settingsz$Service '%s' is identical, ignoring.zCreating service '%s'z/Runtime To Permanent failed on service '%s': %sTNzCopying icmptype '%s' settingsz%IcmpType '%s' is identical, ignoring.zCreating icmptype '%s'z0Runtime To Permanent failed on icmptype '%s': %szCopying ipset '%s' settingsz"IPSet '%s' is identical, ignoring.zCreating ipset '%s'z-Runtime To Permanent failed on ipset '%s': %szEZone '%s': interface binding for '%s' has been added by NM, ignoring.zCopying zone '%s' settingszCreating zone '%s'z,Runtime To Permanent failed on zone '%s': %szCreating policy '%s'z.Runtime To Permanent failed on policy '%s': %szCopying helper '%s' settingsz#Helper '%s' is identical, ignoring.zCreating helper '%s'z.Runtime To Permanent failed on helper '%s': %szCopying direct configurationz,Direct configuration is identical, ignoring.z7Runtime To Permanent failed on direct configuration: %szCopying policies configurationz.Policies configuration is identical, ignoring.z9Runtime To Permanent failed on policies configuration: %s)Drr8r$Ú_stater"r!ZRUNNING_BUT_FAILEDrZgetServiceNamesr(Úget_servicesÚgetServiceSettingsZgetServiceByNameZgetSettingsÚupdateÚ addServiceÚ ExceptionÚwarningZgetIcmpTypeNamesÚicmptypeÚ get_icmptypesÚgetIcmpTypeSettingsZgetIcmpTypeByNameZaddIcmpTypeZ getIPSetNamesÚipsetÚ get_ipsetsÚgetIPSetSettingsZgetIPSetByNameZaddIPSetZgetZoneNamesrCÚ get_zonesÚgetZoneSettings2rÚcopyÚdeepcopyÚ getInterfacesZ_nm_assigned_interfacesÚremoveInterfacerrZgetSettingsDictr Z getZoneByNameZupdate2ZaddZone2ZgetPolicyNamesÚpolicyÚ"get_policies_not_derived_from_zoneÚgetPolicySettingsZgetPolicyByNameZ addPolicyZgetHelperNamesÚhelperÚget_helpersÚgetHelperSettingsZgetHelperByNameZ addHelperÚdirectÚget_all_chainsÚ get_all_rulesÚget_all_passthroughsr>Úlockdown_whitelistÚ export_configZsetLockdownWhitelistZRT_TO_PERM_FAILED)r.rAr@Zconfig_namesr/ZconfZconf_objÚeÚsettingsZchangedrzZ connectionr2r2r3ÚruntimeToPermanent|sF ÿ ÿÿ ÿÿ ÿÿ ÿÿ ÿÿ ÿÿ þ ÿ ÿÿzFirewallD.runtimeToPermanentcCs,t d¡| |¡|jj ¡| ¡dS)z!Enable lockdown policies zpolicies.enableLockdown()N)rr8rBr$r>Zenable_lockdownÚLockdownEnabledrr2r2r3ÚenableLockdownNs zFirewallD.enableLockdowncCs,t d¡| |¡|jj ¡| ¡dS)z"Disable lockdown policies zpolicies.disableLockdown()N)rr8rBr$r>Zdisable_lockdownÚLockdownDisabledrr2r2r3ÚdisableLockdownZs zFirewallD.disableLockdownÚbcCst d¡|jj ¡S)z,Returns True if lockdown is enabled zpolicies.queryLockdown())rr8r$r>r?rr2r2r3Ú queryLockdownfs zFirewallD.queryLockdowncCst d¡dS)NzLockdownEnabled()rr6r2r2r3r¦qszFirewallD.LockdownEnabledcCst d¡dS)NzLockdownDisabled()rr6r2r2r3r¨vszFirewallD.LockdownDisabledcCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)úAdd lockdown command z*policies.addLockdownWhitelistCommand('%s')N) rrirr8rBr$r>r¡Zadd_commandÚLockdownWhitelistCommandAdded©r.r=rAr2r2r3ÚaddLockdownWhitelistCommands z%FirewallD.addLockdownWhitelistCommandcCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)z Remove lockdown command z-policies.removeLockdownWhitelistCommand('%s')N) rrirr8rBr$r>r¡Zremove_commandÚLockdownWhitelistCommandRemovedr®r2r2r3ÚremoveLockdownWhitelistCommandŒs z(FirewallD.removeLockdownWhitelistCommandcCs(t|tƒ}t d|¡|jjj |¡S)zQuery lockdown command z,policies.queryLockdownWhitelistCommand('%s'))rrirr8r$r>r¡Zhas_commandr®r2r2r3ÚqueryLockdownWhitelistCommand™s z'FirewallD.queryLockdownWhitelistCommandÚascCst d¡|jjj ¡S)r¬z'policies.getLockdownWhitelistCommands())rr8r$r>r¡Zget_commandsrr2r2r3ÚgetLockdownWhitelistCommands¥s z&FirewallD.getLockdownWhitelistCommandscCst d|¡dS)Nz#LockdownWhitelistCommandAdded('%s')r©r.r=r2r2r3r°sz'FirewallD.LockdownWhitelistCommandAddedcCst d|¡dS)Nz%LockdownWhitelistCommandRemoved('%s')rrµr2r2r3r°µsz)FirewallD.LockdownWhitelistCommandRemovedÚicCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)úAdd lockdown uid z&policies.addLockdownWhitelistUid('%s')N) rÚintrr8rBr$r>r¡Zadd_uidÚLockdownWhitelistUidAdded©r.r;rAr2r2r3ÚaddLockdownWhitelistUid¼s z!FirewallD.addLockdownWhitelistUidcCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)zRemove lockdown uid z)policies.removeLockdownWhitelistUid('%s')N) rr¸rr8rBr$r>r¡Z remove_uidÚLockdownWhitelistUidRemovedrºr2r2r3ÚremoveLockdownWhitelistUidÉs z$FirewallD.removeLockdownWhitelistUidcCs(t|tƒ}t d|¡|jjj |¡S)zQuery lockdown uid z(policies.queryLockdownWhitelistUid('%s'))rr¸rr8r$r>r¡Zhas_uidrºr2r2r3ÚqueryLockdownWhitelistUidÖs z#FirewallD.queryLockdownWhitelistUidZaicCst d¡|jjj ¡S)r·z#policies.getLockdownWhitelistUids())rr8r$r>r¡Zget_uidsrr2r2r3ÚgetLockdownWhitelistUidsâs z"FirewallD.getLockdownWhitelistUidscCst d|¡dS)NzLockdownWhitelistUidAdded(%d)r©r.r;r2r2r3r¹ísz#FirewallD.LockdownWhitelistUidAddedcCst d|¡dS)NzLockdownWhitelistUidRemoved(%d)rrÀr2r2r3r¼òsz%FirewallD.LockdownWhitelistUidRemovedcCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)úAdd lockdown user z'policies.addLockdownWhitelistUser('%s')N) rrirr8rBr$r>r¡Zadd_userÚLockdownWhitelistUserAdded©r.r<rAr2r2r3ÚaddLockdownWhitelistUserùs z"FirewallD.addLockdownWhitelistUsercCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)zRemove lockdown user z*policies.removeLockdownWhitelistUser('%s')N) rrirr8rBr$r>r¡Zremove_userÚLockdownWhitelistUserRemovedrÃr2r2r3ÚremoveLockdownWhitelistUsers z%FirewallD.removeLockdownWhitelistUsercCs(t|tƒ}t d|¡|jjj |¡S)zQuery lockdown user z)policies.queryLockdownWhitelistUser('%s'))rrirr8r$r>r¡Zhas_userrÃr2r2r3ÚqueryLockdownWhitelistUsers z$FirewallD.queryLockdownWhitelistUsercCst d¡|jjj ¡S)rÁz$policies.getLockdownWhitelistUsers())rr8r$r>r¡Z get_usersrr2r2r3ÚgetLockdownWhitelistUserss z#FirewallD.getLockdownWhitelistUserscCst d|¡dS)Nz LockdownWhitelistUserAdded('%s')r©r.r<r2r2r3rÂ*sz$FirewallD.LockdownWhitelistUserAddedcCst d|¡dS)Nz"LockdownWhitelistUserRemoved('%s')rrÉr2r2r3rÅ/sz&FirewallD.LockdownWhitelistUserRemovedcCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)úAdd lockdown context z*policies.addLockdownWhitelistContext('%s')N) rrirr8rBr$r>r¡Zadd_contextÚLockdownWhitelistContextAdded©r.r:rAr2r2r3ÚaddLockdownWhitelistContext6s z%FirewallD.addLockdownWhitelistContextcCs@t|tƒ}t d|¡| |¡|jjj |¡| |¡dS)z Remove lockdown context z-policies.removeLockdownWhitelistContext('%s')N) rrirr8rBr$r>r¡Zremove_contextÚLockdownWhitelistContextRemovedrÌr2r2r3ÚremoveLockdownWhitelistContextCs z(FirewallD.removeLockdownWhitelistContextcCs(t|tƒ}t d|¡|jjj |¡S)zQuery lockdown context z,policies.queryLockdownWhitelistContext('%s'))rrirr8r$r>r¡Zhas_contextrÌr2r2r3ÚqueryLockdownWhitelistContextPs z'FirewallD.queryLockdownWhitelistContextcCst d¡|jjj ¡S)rÊz'policies.getLockdownWhitelistContexts())rr8r$r>r¡Zget_contextsrr2r2r3ÚgetLockdownWhitelistContexts\s z&FirewallD.getLockdownWhitelistContextscCst d|¡dS)Nz#LockdownWhitelistContextAdded('%s')r©r.r:r2r2r3rËgsz'FirewallD.LockdownWhitelistContextAddedcCst d|¡dS)Nz%LockdownWhitelistContextRemoved('%s')rrÒr2r2r3rÎlsz)FirewallD.LockdownWhitelistContextRemovedcCs*t d¡| |¡|j ¡| ¡dS)zfEnable panic mode. All ingoing and outgoing connections and packets will be blocked. zenablePanicMode()N)rr8rBr$Zenable_panic_modeÚPanicModeEnabledrr2r2r3ÚenablePanicModeus zFirewallD.enablePanicModecCs*t d¡| |¡|j ¡| ¡dS)z‡Disable panic mode. Enables normal mode: Allowed ingoing and outgoing connections will not be blocked anymore zdisablePanicMode()N)rr8rBr$Zdisable_panic_modeÚPanicModeDisabledrr2r2r3ÚdisablePanicModeƒs zFirewallD.disablePanicModecCst d¡|j ¡S)NzqueryPanicMode())rr8r$Zquery_panic_moderr2r2r3ÚqueryPanicMode’s zFirewallD.queryPanicModecCst d¡dS)NzPanicModeEnabled()rr6r2r2r3rÓ›szFirewallD.PanicModeEnabledcCst d¡dS)NzPanicModeDisabled()rr6r2r2r3rÕ szFirewallD.PanicModeDisabledz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)cCs$t|tƒ}t d|¡|jj |¡S)NzgetZoneSettings(%s))rrirr8r$rCZget_config_with_settings©r.rCrAr2r2r3ÚgetZoneSettings©s zFirewallD.getZoneSettingscCs$t|tƒ}t d|¡|jj |¡S)NzgetZoneSettings2(%s))rrirr8r$rCÚget_config_with_settings_dictrØr2r2r3r’³s zFirewallD.getZoneSettings2zsa{sv}cCsFt|tƒ}t d|¡| |¡|jj |t|ƒ|¡| ||¡dS)NzsetZoneSettings2(%s)) rrirr8rBr$rCÚset_config_with_settings_dictÚZoneUpdated)r.rCr¤rAr2r2r3ÚsetZoneSettings2¼s zFirewallD.setZoneSettings2cCst d||f¡dS)Nzzone.ZoneUpdated('%s', '%s')r)r.rCr¤r2r2r3rÜÆszFirewallD.ZoneUpdatedcCs$t|tƒ}t d|¡|jj |¡S)Nzpolicy.getPolicySettings(%s))rrirr8r$r—rÚ)r.r—rAr2r2r3r™Ës zFirewallD.getPolicySettingscCsFt|tƒ}t d|¡| |¡|jj |t|ƒ|¡| ||¡dS)Nzpolicy.setPolicySettings(%s)) rrirr8rBr$r—rÛÚ PolicyUpdated)r.r—r¤rAr2r2r3ÚsetPolicySettingsÔs zFirewallD.setPolicySettingscCst d||f¡dS)Nz policy.PolicyUpdated('%s', '%s')r)r.r—r¤r2r2r3rÞÞszFirewallD.PolicyUpdatedcCst d¡|jj ¡S)NzlistServices())rr8r$r(r…rr2r2r3ÚlistServicesãs zFirewallD.listServicesz(sssa(ss)asa{ss}asa(ss))c Cs’t|tƒ}t d|¡|jj |¡}| ¡}g}tdƒD]P}|j |d|vrp| t t ||j |dƒ¡¡q8| ||j |d¡q8t|ƒS)NzgetServiceSettings(%s)ér)rrirr8r$r(Úget_serviceÚexport_config_dictÚrangeZIMPORT_EXPORT_STRUCTUREÚappendr“r”ÚgetattrÚtuple)r.r(rAÚobjZ conf_dictZ conf_listr¶r2r2r3r†îs "zFirewallD.getServiceSettingscCs,t|tƒ}t d|¡|jj |¡}| ¡S)NzgetServiceSettings2(%s))rrirr8r$r(rârã)r.r(rArèr2r2r3ÚgetServiceSettings2s zFirewallD.getServiceSettings2cCst d¡|jj ¡S)NzlistIcmpTypes())rr8r$r‹rŒrr2r2r3Ú listIcmpTypess zFirewallD.listIcmpTypescCs(t|tƒ}t d|¡|jj |¡ ¡S)NzgetIcmpTypeSettings(%s))rrirr8r$r‹Zget_icmptyper¢)r.r‹rAr2r2r3rs zFirewallD.getIcmpTypeSettingscCst d¡|j ¡S)NzgetLogDenied())rr8r$Zget_log_deniedrr2r2r3ÚgetLogDenied%s zFirewallD.getLogDeniedcCsXt|tƒ}t d|¡| |¡|j |¡| |¡|j ¡|j ¡| ¡dS)NzsetLogDenied('%s'))rrirr8rBr$Zset_log_deniedÚLogDeniedChangedr}rr~©r.ÚvaluerAr2r2r3ÚsetLogDenied.s zFirewallD.setLogDeniedcCst d|¡dS)NzLogDeniedChanged('%s')r©r.rîr2r2r3rì>szFirewallD.LogDeniedChangedcCst d¡dS)NzgetAutomaticHelpers()rVrrr2r2r3ÚgetAutomaticHelpersGs zFirewallD.getAutomaticHelperscCs&t|tƒ}t d|¡| |¡dS)NzsetAutomaticHelpers('%s'))rrirr8rBrír2r2r3ÚsetAutomaticHelpersRs zFirewallD.setAutomaticHelperscCst d|¡dS)NzAutomaticHelpersChanged('%s')rrðr2r2r3ÚAutomaticHelpersChanged^sz!FirewallD.AutomaticHelpersChangedcCst d¡|j ¡S)NzgetDefaultZone())rr8r$Zget_default_zonerr2r2r3ÚgetDefaultZonegs zFirewallD.getDefaultZonecCs<t|tƒ}t d|¡| |¡|j |¡| |¡dS)NzsetDefaultZone('%s'))rrirr8rBr$Zset_default_zoneÚDefaultZoneChangedrØr2r2r3ÚsetDefaultZoneps zFirewallD.setDefaultZonecCst d|¡dS)NzDefaultZoneChanged('%s')r©r.rCr2r2r3rõ|szFirewallD.DefaultZoneChangedcCst d¡|jj ¡S)Nzpolicy.getPolicies())rr8r$r—r˜rr2r2r3ÚgetPolicies‡s zFirewallD.getPoliciesz a{sa{sas}}cCsXt d¡i}|jj ¡D]8}i||<|jj |¡||d<|jj |¡||d<q|S)Nzpolicy.getActivePolicies()Z ingress_zonesZegress_zones)rr8r$r—Z)get_active_policies_not_derived_from_zoneZlist_ingress_zonesZlist_egress_zones)r.rAr>r—r2r2r3ÚgetActivePoliciess zFirewallD.getActivePoliciescCst d¡|jj ¡S)Nzzone.getZones())rr8r$rCr‘rr2r2r3ÚgetZones¢s zFirewallD.getZonescCsŒt d¡i}|jj ¡D]l}|jj |¡}|jj |¡}t|ƒt|ƒdkri||<t|ƒdkrn|||d<t|ƒdkr|||d<q|S)Nzzone.getActiveZones()rÚ interfacesÚsources)rr8r$rCr‘Úlist_interfacesÚlist_sourcesÚlen)r.rAZzonesrCrûrür2r2r3ÚgetActiveZones¬s zFirewallD.getActiveZonescCs2t|tƒ}t d|¡|jj |¡}|r.|SdS)z¸Return the zone an interface belongs to. :Parameters: `interface` : str Name of the interface :Returns: str. The name of the zone. zzone.getZoneOfInterface('%s')r{)rrirr8r$rCZget_zone_of_interface)r.rzrArCr2r2r3ÚgetZoneOfInterface¿s zFirewallD.getZoneOfInterfacecCs2t|tƒ}t d|¡|jj |¡}|r.|SdS)Nzzone.getZoneOfSource('%s')r{)rrirr8r$rCZget_zone_of_source)r.ÚsourcerArCr2r2r3ÚgetZoneOfSourceÒs zFirewallD.getZoneOfSourcecCsdS)NFr2rØr2r2r3ÚisImmutableßszFirewallD.isImmutablecCsRt|tƒ}t|tƒ}t d||f¡| |¡|jj |||¡}| ||¡|S)zPAdd an interface to a zone. If zone is empty, use default zone. zzone.addInterface('%s', '%s')) rrirr8rBr$rCZ add_interfaceÚInterfaceAdded©r.rCrzrAÚ_zoner2r2r3ÚaddInterfaceës zFirewallD.addInterfacecCs"t|tƒ}t|tƒ}| |||¡S)z£Change a zone an interface is part of. If zone is empty, use default zone. This function is deprecated, use changeZoneOfInterface instead )rriÚchangeZoneOfInterface©r.rCrzrAr2r2r3Ú changeZoneüs zFirewallD.changeZonecCsRt|tƒ}t|tƒ}t d||f¡| |¡|jj |||¡}| ||¡|S)z[Change a zone an interface is part of. If zone is empty, use default zone. z&zone.changeZoneOfInterface('%s', '%s')) rrirr8rBr$rCZchange_zone_of_interfaceÚZoneOfInterfaceChangedrr2r2r3r s zFirewallD.changeZoneOfInterfacecCsPt|tƒ}t|tƒ}t d||f¡| |¡|jj ||¡}| ||¡|S)zkRemove interface from a zone. If zone is empty, remove from zone the interface belongs to. z zone.removeInterface('%s', '%s')) rrirr8rBr$rCZremove_interfaceÚInterfaceRemovedrr2r2r3r–s zFirewallD.removeInterfacecCs6t|tƒ}t|tƒ}t d||f¡|jj ||¡S)z^Return true if an interface is in a zone. If zone is empty, use default zone. zzone.queryInterface('%s', '%s'))rrirr8r$rCZquery_interfacer r2r2r3ÚqueryInterface,s zFirewallD.queryInterfacecCs&t|tƒ}t d|¡|jj |¡S)z]Return the list of interfaces of a zone. If zone is empty, use default zone. zzone.getInterfaces('%s'))rrirr8r$rCrýrØr2r2r3r•9s zFirewallD.getInterfacescCst d||f¡dS)Nzzone.InterfaceAdded('%s', '%s')r©r.rCrzr2r2r3rGszFirewallD.InterfaceAddedcCst d||f¡dS)z, This signal is deprecated. zzone.ZoneChanged('%s', '%s')Nrrr2r2r3ÚZoneChangedLszFirewallD.ZoneChangedcCs"t d||f¡| ||¡dS)Nz'zone.ZoneOfInterfaceChanged('%s', '%s'))rr8rrr2r2r3rTsÿz FirewallD.ZoneOfInterfaceChangedcCst d||f¡dS)Nz!zone.InterfaceRemoved('%s', '%s')rrr2r2r3r [szFirewallD.InterfaceRemovedcCsRt|tƒ}t|tƒ}t d||f¡| |¡|jj |||¡}| ||¡|S)zLAdd a source to a zone. If zone is empty, use default zone. zzone.addSource('%s', '%s')) rrirr8rBr$rCZ add_sourceÚSourceAdded©r.rCrrArr2r2r3Ú addSourceds zFirewallD.addSourcecCsRt|tƒ}t|tƒ}t d||f¡| |¡|jj |||¡}| ||¡|S)zXChange a zone an source is part of. If zone is empty, use default zone. z#zone.changeZoneOfSource('%s', '%s')) rrirr8rBr$rCZchange_zone_of_sourceÚZoneOfSourceChangedrr2r2r3ÚchangeZoneOfSourceus zFirewallD.changeZoneOfSourcecCsPt|tƒ}t|tƒ}t d||f¡| |¡|jj ||¡}| ||¡|S)zeRemove source from a zone. If zone is empty, remove from zone the source belongs to. zzone.removeSource('%s', '%s')) rrirr8rBr$rCZ remove_sourceÚ SourceRemovedrr2r2r3ÚremoveSource†s zFirewallD.removeSourcecCs6t|tƒ}t|tƒ}t d||f¡|jj ||¡S)z[Return true if an source is in a zone. If zone is empty, use default zone. zzone.querySource('%s', '%s'))rrirr8r$rCZquery_source)r.rCrrAr2r2r3ÚquerySource—s zFirewallD.querySourcecCs&t|tƒ}t d|¡|jj |¡S)zZReturn the list of sources of a zone. If zone is empty, use default zone. zzone.getSources('%s'))rrirr8r$rCrþrØr2r2r3Ú getSources¤s zFirewallD.getSourcescCst d||f¡dS)Nzzone.SourceAdded('%s', '%s')r©r.rCrr2r2r3r²szFirewallD.SourceAddedcCst d||f¡dS)Nz$zone.ZoneOfSourceChanged('%s', '%s')rrr2r2r3r·szFirewallD.ZoneOfSourceChangedcCst d||f¡dS)Nzzone.SourceRemoved('%s', '%s')rrr2r2r3r¼szFirewallD.SourceRemovedcCsHt d||f¡|j||=t|d}|jj ||¡| ||¡dS)Nz%zone.disableTimedRichRule('%s', '%s')©Zrule_str)rr8r9rr$rCÚremove_ruleÚRichRuleRemoved)r.rCÚrulerèr2r2r3ÚdisableTimedRichRuleÅs zFirewallD.disableTimedRichRuleZssicCs†t|tƒ}t|tƒ}t|tƒ}t d||f¡t|d}|jj |||¡}|dkrtt ||j||¡}| |||¡| |||¡|S)Nzzone.addRichRule('%s', '%s')rr)rrir¸rr8rr$rCÚadd_rulerÚtimeout_add_secondsrrFÚ RichRuleAdded)r.rCrÚtimeoutrArèrrEr2r2r3ÚaddRichRuleÍs ÿzFirewallD.addRichRulecCs\t|tƒ}t|tƒ}t d||f¡t|d}|jj ||¡}| ||¡| ||¡|S)Nzzone.removeRichRule('%s', '%s')r) rrirr8rr$rCrrIr)r.rCrrArèrr2r2r3ÚremoveRichRuleás zFirewallD.removeRichRulecCs@t|tƒ}t|tƒ}t d||f¡t|d}|jj ||¡S)Nzzone.queryRichRule('%s', '%s')r)rrirr8rr$rCÚ query_rule)r.rCrrArèr2r2r3Ú queryRichRuleïs zFirewallD.queryRichRulecCs&t|tƒ}t d|¡|jj |¡S)Nzzone.getRichRules('%s'))rrirr8r$rCZ list_rulesrØr2r2r3ÚgetRichRulesús zFirewallD.getRichRulescCst d|||f¡dS)Nz"zone.RichRuleAdded('%s', '%s', %d)r)r.rCrr#r2r2r3r"szFirewallD.RichRuleAddedcCst d||f¡dS)Nz zone.RichRuleRemoved('%s', '%s')r)r.rCrr2r2r3rszFirewallD.RichRuleRemovedcCs>t d||f¡|j||=|jj ||¡| ||¡dS)Nz$zone.disableTimedService('%s', '%s'))rr8r9r$rCÚremove_serviceÚServiceRemoved©r.rCr(r2r2r3ÚdisableTimedServiceszFirewallD.disableTimedServicecCsŠt|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj ||||¡}|dkrxt ||j||¡}| |||¡| |||¡|S)Nzzone.addService('%s', '%s', %d)r)rrir¸rr8rBr$rCZadd_servicerr!r,rFÚServiceAdded)r.rCr(r#rArrEr2r2r3rˆs ÿzFirewallD.addServicecCs\t|tƒ}t|tƒ}t d||f¡| |¡|jj ||¡}| ||¡| ||¡|S)Nzzone.removeService('%s', '%s')) rrirr8rBr$rCr)rIr*)r.rCr(rArr2r2r3Ú removeService1s zFirewallD.removeServicecCs6t|tƒ}t|tƒ}t d||f¡|jj ||¡S)Nzzone.queryService('%s', '%s'))rrirr8r$rCZ query_service)r.rCr(rAr2r2r3ÚqueryServiceBs zFirewallD.queryServicecCs&t|tƒ}t d|¡|jj |¡S)Nzzone.getServices('%s'))rrirr8r$rCZ list_servicesrØr2r2r3ÚgetServicesMs zFirewallD.getServicescCst d|||f¡dS)Nz!zone.ServiceAdded('%s', '%s', %d)r)r.rCr(r#r2r2r3r-YsÿzFirewallD.ServiceAddedcCst d||f¡dS)Nzzone.ServiceRemoved('%s', '%s')rr+r2r2r3r*_szFirewallD.ServiceRemovedcCsHt d|||f¡|j|||f=|jj |||¡| |||¡dS)Nz'zone.disableTimedPort('%s', '%s', '%s'))rr8r9r$rCÚremove_portÚPortRemoved©r.rCÚportÚprotocolr2r2r3ÚdisableTimedPorthsÿzFirewallD.disableTimedPortZsssicCsžt|tƒ}t|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj |||||¡}|dkrŠt ||j|||¡}| |||f|¡| ||||¡|S)Nzzone.addPort('%s', '%s', '%s')r)rrir¸rr8rBr$rCZadd_portrr!r6rFÚ PortAdded©r.rCr4r5r#rArrEr2r2r3ÚaddPortps ÿ ÿzFirewallD.addPortZssscCspt|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj |||¡}| |||f¡| |||¡|S)Nz!zone.removePort('%s', '%s', '%s')) rrirr8rBr$rCr1rIr2©r.rCr4r5rArr2r2r3Ú removePort‡s ÿ zFirewallD.removePortcCsDt|tƒ}t|tƒ}t|tƒ}t d|||f¡|jj |||¡S)Nz zone.queryPort('%s', '%s', '%s'))rrirr8r$rCZ query_port©r.rCr4r5rAr2r2r3Ú queryPort™s zFirewallD.queryPortZaascCs&t|tƒ}t d|¡|jj |¡S)Nzzone.getPorts('%s'))rrirr8r$rCZ list_portsrØr2r2r3ÚgetPorts¥s zFirewallD.getPortsrcCst d||||f¡dS)Nz$zone.PortAdded('%s', '%s', '%s', %d)r©r.rCr4r5r#r2r2r3r7±s ÿzFirewallD.PortAddedcCst d|||f¡dS)Nz"zone.PortRemoved('%s', '%s', '%s')rr3r2r2r3r2·sÿzFirewallD.PortRemovedcCs>t d||f¡|j||=|jj ||¡| ||¡dS)Nz%zone.disableTimedProtocol('%s', '%s'))rr8r9r$rCÚremove_protocolÚProtocolRemoved©r.rCr5r2r2r3ÚdisableTimedProtocolÁszFirewallD.disableTimedProtocolcCsˆt|tƒ}t|tƒ}t|tƒ}t d||f¡| |¡|jj ||||¡}|dkrvt ||j||¡}| |||¡| |||¡|S)Nzzone.enableProtocol('%s', '%s')r)rrir¸rr8rBr$rCZadd_protocolrr!rCrFÚ ProtocolAdded)r.rCr5r#rArrEr2r2r3ÚaddProtocolÈs ÿzFirewallD.addProtocolcCs\t|tƒ}t|tƒ}t d||f¡| |¡|jj ||¡}| ||¡| ||¡|S)Nzzone.removeProtocol('%s', '%s')) rrirr8rBr$rCr@rIrA)r.rCr5rArr2r2r3ÚremoveProtocolÝs zFirewallD.removeProtocolcCs6t|tƒ}t|tƒ}t d||f¡|jj ||¡S)Nzzone.queryProtocol('%s', '%s'))rrirr8r$rCZquery_protocol)r.rCr5rAr2r2r3Ú queryProtocolís zFirewallD.queryProtocolcCs&t|tƒ}t d|¡|jj |¡S)Nzzone.getProtocols('%s'))rrirr8r$rCZlist_protocolsrØr2r2r3ÚgetProtocolsøs zFirewallD.getProtocolscCst d|||f¡dS)Nz"zone.ProtocolAdded('%s', '%s', %d)r)r.rCr5r#r2r2r3rDsÿzFirewallD.ProtocolAddedcCst d||f¡dS)Nz zone.ProtocolRemoved('%s', '%s')rrBr2r2r3rA szFirewallD.ProtocolRemovedcCsJt d|||f¡|j|d||f=|jj |||¡| |||¡dS)Nz-zone.disableTimedSourcePort('%s', '%s', '%s')Úsport)rr8r9r$rCÚremove_source_portÚSourcePortRemovedr3r2r2r3ÚdisableTimedSourcePortsÿz FirewallD.disableTimedSourcePortcCs t|tƒ}t|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj |||||¡}|dkrŒt ||j|||¡}| |d||f|¡| ||||¡|S)Nz$zone.addSourcePort('%s', '%s', '%s')rrI)rrir¸rr8rBr$rCZadd_source_portrr!rLrFÚSourcePortAddedr8r2r2r3Ú addSourcePorts$ ÿ ÿ ÿzFirewallD.addSourcePortcCsrt|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj |||¡}| |d||f¡| |||¡|S)Nz'zone.removeSourcePort('%s', '%s', '%s')rI) rrirr8rBr$rCrJrIrKr:r2r2r3ÚremoveSourcePort3s ÿ zFirewallD.removeSourcePortcCsDt|tƒ}t|tƒ}t|tƒ}t d|||f¡|jj |||¡S)Nz&zone.querySourcePort('%s', '%s', '%s'))rrirr8r$rCZquery_source_portr<r2r2r3ÚquerySourcePortEs ÿzFirewallD.querySourcePortcCs&t|tƒ}t d|¡|jj |¡S)Nzzone.getSourcePorts('%s'))rrirr8r$rCZlist_source_portsrØr2r2r3ÚgetSourcePortsRs zFirewallD.getSourcePortscCst d||||f¡dS)Nz*zone.SourcePortAdded('%s', '%s', '%s', %d)rr?r2r2r3rM^s ÿzFirewallD.SourcePortAddedcCst d|||f¡dS)Nz(zone.SourcePortRemoved('%s', '%s', '%s')rr3r2r2r3rKds ÿzFirewallD.SourcePortRemovedcCs(|j|d=|jj |¡| |¡dS)NÚ masquerade)r9r$rCÚremove_masqueradeÚMasqueradeRemovedr÷r2r2r3ÚdisableTimedMasqueradensz FirewallD.disableTimedMasqueradeÚsicCstt|tƒ}t|tƒ}t d|¡| |¡|jj |||¡}|dkrdt ||j|¡}| |d|¡| ||¡|S)Nzzone.addMasquerade('%s')rrR)rrir¸rr8rBr$rCZadd_masqueraderr!rUrFÚMasqueradeAdded)r.rCr#rArrEr2r2r3Ú addMasqueradets ÿzFirewallD.addMasqueradecCsJt|tƒ}t d|¡| |¡|jj |¡}| |d¡| |¡|S)Nzzone.removeMasquerade('%s')rR) rrirr8rBr$rCrSrIrT©r.rCrArr2r2r3ÚremoveMasqueradeˆs zFirewallD.removeMasqueradecCs&t|tƒ}t d|¡|jj |¡S)Nzzone.queryMasquerade('%s'))rrirr8r$rCZquery_masqueraderØr2r2r3ÚqueryMasquerade—s zFirewallD.queryMasqueradecCst d||f¡dS)Nzzone.MasqueradeAdded('%s', %d)r)r.rCr#r2r2r3rW¡szFirewallD.MasqueradeAddedcCst d|¡dS)Nzzone.MasqueradeRemoved('%s')rr÷r2r2r3rT¦szFirewallD.MasqueradeRemovedcCs@|j|||||f=|jj |||||¡| |||||¡dSr4)r9r$rCÚremove_forward_portÚForwardPortRemoved©r.rCr4r5ÚtoportÚtoaddrr2r2r3Údisable_forward_port¯szFirewallD.disable_forward_portZsssssic CsÆt|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}t d|||||f¡| |¡|jj |||||||¡}|dkr®t ||j|||||¡} | |||||f| ¡| ||||||¡|S)Nz1zone.addForwardPort('%s', '%s', '%s', '%s', '%s')r)rrir¸rr8rBr$rCZadd_forward_portrr!rarFÚForwardPortAdded) r.rCr4r5r_r`r#rArrEr2r2r3ÚaddForwardPortµs, ÿ ÿýzFirewallD.addForwardPortZssssscCs”t|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}t d|||||f¡| |¡|jj |||||¡}| |||||f¡| |||||¡|S)Nz4zone.removeForwardPort('%s', '%s', '%s', '%s', '%s')) rrirr8rBr$rCr\rIr])r.rCr4r5r_r`rArr2r2r3ÚremoveForwardPortÒs ÿ ÿzFirewallD.removeForwardPortcCs`t|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}t d|||||f¡|jj |||||¡S)Nz3zone.queryForwardPort('%s', '%s', '%s', '%s', '%s'))rrirr8r$rCZquery_forward_port)r.rCr4r5r_r`rAr2r2r3ÚqueryForwardPortès ÿÿzFirewallD.queryForwardPortcCs&t|tƒ}t d|¡|jj |¡S)Nzzone.getForwardPorts('%s'))rrirr8r$rCZlist_forward_portsrØr2r2r3ÚgetForwardPortsùs zFirewallD.getForwardPortsc Cst d||||||f¡dS)Nz7zone.ForwardPortAdded('%s', '%s', '%s', '%s', '%s', %d)r)r.rCr4r5r_r`r#r2r2r3rbsÿzFirewallD.ForwardPortAddedcCst d|||||f¡dS)Nz5zone.ForwardPortRemoved('%s', '%s', '%s', '%s', '%s')rr^r2r2r3r]sÿzFirewallD.ForwardPortRemovedcCs>t d||f¡|j||=|jj ||¡| ||¡dS)Nz&zone.disableTimedIcmpBlock('%s', '%s'))rr8r9r$rCÚremove_icmp_blockÚIcmpBlockRemoved©r.rCÚicmprAr2r2r3ÚdisableTimedIcmpBlockszFirewallD.disableTimedIcmpBlockcCsŠt|tƒ}t|tƒ}t|tƒ}t d||f¡| |¡|jj ||||¡}|dkrxt ||j|||¡}| |||¡| |||¡|S)Nz zone.enableIcmpBlock('%s', '%s')r)rrir¸rr8rBr$rCZadd_icmp_blockrr!rkrFÚIcmpBlockAdded)r.rCrjr#rArrEr2r2r3ÚaddIcmpBlocks ÿzFirewallD.addIcmpBlockcCs\t|tƒ}t|tƒ}t d||f¡| |¡|jj ||¡}| ||¡| ||¡|S)Nz zone.removeIcmpBlock('%s', '%s')) rrirr8rBr$rCrgrIrh)r.rCrjrArr2r2r3ÚremoveIcmpBlock2s zFirewallD.removeIcmpBlockcCs6t|tƒ}t|tƒ}t d||f¡|jj ||¡S)Nzzone.queryIcmpBlock('%s', '%s'))rrirr8r$rCZquery_icmp_blockrir2r2r3ÚqueryIcmpBlockBs zFirewallD.queryIcmpBlockcCs&t|tƒ}t d|¡|jj |¡S)Nzzone.getIcmpBlocks('%s'))rrirr8r$rCZlist_icmp_blocksrØr2r2r3Ú getIcmpBlocksMs zFirewallD.getIcmpBlockscCst d|||f¡dS)Nz#zone.IcmpBlockAdded('%s', '%s', %d)r)r.rCrjr#r2r2r3rlYsÿzFirewallD.IcmpBlockAddedcCst d||f¡dS)Nz!zone.IcmpBlockRemoved('%s', '%s')r)r.rCrjr2r2r3rh_szFirewallD.IcmpBlockRemovedcCs@t|tƒ}t d|¡| |¡|jj ||¡}| |¡|S)Nz zone.addIcmpBlockInversion('%s')) rrirr8rBr$rCZadd_icmp_block_inversionÚIcmpBlockInversionAddedrYr2r2r3ÚaddIcmpBlockInversionhs zFirewallD.addIcmpBlockInversioncCs>t|tƒ}t d|¡| |¡|jj |¡}| |¡|S)Nz#zone.removeIcmpBlockInversion('%s')) rrirr8rBr$rCZremove_icmp_block_inversionÚIcmpBlockInversionRemovedrYr2r2r3ÚremoveIcmpBlockInversionvs z"FirewallD.removeIcmpBlockInversioncCs&t|tƒ}t d|¡|jj |¡S)Nz"zone.queryIcmpBlockInversion('%s'))rrirr8r$rCZquery_icmp_block_inversionrØr2r2r3ÚqueryIcmpBlockInversion„s z!FirewallD.queryIcmpBlockInversioncCst d|¡dS)Nz"zone.IcmpBlockInversionAdded('%s')rr÷r2r2r3rqŽsz!FirewallD.IcmpBlockInversionAddedcCst d|¡dS)Nz$zone.IcmpBlockInversionRemoved('%s')rr÷r2r2r3rs“sz#FirewallD.IcmpBlockInversionRemovedcCs`t|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj |||¡| |||¡dS)Nz!direct.addChain('%s', '%s', '%s')) rrirr8rBr$rZ add_chainÚ ChainAdded©r.ÚipvÚtableÚchainrAr2r2r3ÚaddChainžs zFirewallD.addChaincCs`t|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj |||¡| |||¡dS)Nz$direct.removeChain('%s', '%s', '%s')) rrirr8rBr$rZremove_chainÚChainRemovedrwr2r2r3ÚremoveChains zFirewallD.removeChaincCsDt|tƒ}t|tƒ}t|tƒ}t d|||f¡|jj |||¡S)Nz#direct.queryChain('%s', '%s', '%s'))rrirr8r$rZquery_chainrwr2r2r3Ú queryChain¼s zFirewallD.queryChaincCs6t|tƒ}t|tƒ}t d||f¡|jj ||¡S)Nzdirect.getChains('%s', '%s'))rrirr8r$rZ get_chains)r.rxryrAr2r2r3Ú getChainsÉs zFirewallD.getChainsza(sss)cCst d¡|jj ¡S)Nzdirect.getAllChains())rr8r$rržrr2r2r3ÚgetAllChainsÕs zFirewallD.getAllChainscCst d|||f¡dS)Nz#direct.ChainAdded('%s', '%s', '%s')r©r.rxryrzr2r2r3rvßszFirewallD.ChainAddedcCst d|||f¡dS)Nz%direct.ChainRemoved('%s', '%s', '%s')rrr2r2r3r|ås ÿzFirewallD.ChainRemovedZsssiasc CsŽt|tƒ}t|tƒ}t|tƒ}t|tƒ}tdd„|Dƒƒ}t d||||d |¡f¡| |¡|jj |||||¡| |||||¡dS)Ncss|]}t|tƒVqdSr4©rri©Ú.0r¶r2r2r3Ú ûóz$FirewallD.addRule..z*direct.addRule('%s', '%s', '%s', %d, '%s')ú',')rrir¸rçrr8ÚjoinrBr$rr Ú RuleAdded©r.rxryrzÚpriorityÚargsrAr2r2r3ÚaddRuleðs ÿ zFirewallD.addRulec CsŽt|tƒ}t|tƒ}t|tƒ}t|tƒ}tdd„|Dƒƒ}t d||||d |¡f¡| |¡|jj |||||¡| |||||¡dS)Ncss|]}t|tƒVqdSr4r‚rƒr2r2r3r… r†z'FirewallD.removeRule..z-direct.removeRule('%s', '%s', '%s', %d, '%s')r‡)rrir¸rçrr8rˆrBr$rrÚRuleRemovedrŠr2r2r3Ú removeRule s ÿ zFirewallD.removeRulecCs„t|tƒ}t|tƒ}t|tƒ}t d|||f¡| |¡|jj |||¡D]0\}}|jj |||||¡| |||||¡qNdS)Nz$direct.removeRules('%s', '%s', '%s')) rrirr8rBr$rÚ get_rulesrrŽ)r.rxryrzrAr‹rŒr2r2r3ÚremoveRules s zFirewallD.removeRulesc Csnt|tƒ}t|tƒ}t|tƒ}t|tƒ}tdd„|Dƒƒ}t d||||d |¡f¡|jj |||||¡S)Ncss|]}t|tƒVqdSr4r‚rƒr2r2r3r…/ r†z&FirewallD.queryRule..z,direct.queryRule('%s', '%s', '%s', %d, '%s')r‡) rrir¸rçrr8rˆr$rr&rŠr2r2r3Ú queryRule$ s ÿzFirewallD.queryRuleza(ias)cCsDt|tƒ}t|tƒ}t|tƒ}t d|||f¡|jj |||¡S)Nz!direct.getRules('%s', '%s', '%s'))rrirr8r$rrrwr2r2r3ÚgetRules4 s zFirewallD.getRulesz a(sssias)cCst d¡|jj ¡S)Nzdirect.getAllRules())rr8r$rrŸrr2r2r3ÚgetAllRulesA s zFirewallD.getAllRulesc Cs"t d||||d |¡f¡dS)Nz,direct.RuleAdded('%s', '%s', '%s', %d, '%s')r‡©rr8rˆ©r.rxryrzr‹rŒr2r2r3r‰K sÿzFirewallD.RuleAddedc Cs"t d||||d |¡f¡dS)Nz.direct.RuleRemoved('%s', '%s', '%s', %d, '%s')r‡r•r–r2r2r3rŽR sÿzFirewallD.RuleRemovedr\c CsØt|tƒ}tdd„|Dƒƒ}t d|d |¡f¡| |¡z|jj ||¡WSt yÒ}zj|dvrvtgd¢ƒ}ntddgƒ}t|ƒ}|jt jkr¼tt|ƒ|@ƒd kr´t |¡t|ƒ‚‚WYd}~n d}~00dS) Ncss|]}t|tƒVqdSr4r‚rƒr2r2r3r…e r†z(FirewallD.passthrough..zdirect.passthrough('%s', '%s')r‡)rPrT)z-Cz--checkú-Lú--listr—r˜r)rrirçrr8rˆrBr$rÚpassthroughr"ÚsetÚcoder!ZCOMMAND_FAILEDrÿrŠr )r.rxrŒrAr@Z query_argsÚmsgr2r2r3r™] s zFirewallD.passthroughcCs\t|ƒ}tdd„|Dƒƒ}t d|d |¡f¡| |¡|jj ||¡| ||¡dS)Ncss|]}t|ƒVqdSr4©rrƒr2r2r3r… r†z+FirewallD.addPassthrough..z!direct.addPassthrough('%s', '%s')r‡) rrçrr8rˆrBr$rZadd_passthroughÚPassthroughAdded©r.rxrŒrAr2r2r3ÚaddPassthroughy sÿ zFirewallD.addPassthroughcCs\t|ƒ}tdd„|Dƒƒ}t d|d |¡f¡| |¡|jj ||¡| ||¡dS)Ncss|]}t|ƒVqdSr4rrƒr2r2r3r… r†z.FirewallD.removePassthrough..z$direct.removePassthrough('%s', '%s')r‡) rrçrr8rˆrBr$rZremove_passthroughÚPassthroughRemovedrŸr2r2r3ÚremovePassthroughˆ sÿ zFirewallD.removePassthroughcCsBt|ƒ}tdd„|Dƒƒ}t d|d |¡f¡|jj ||¡S)Ncss|]}t|ƒVqdSr4rrƒr2r2r3r…Ÿ r†z-FirewallD.queryPassthrough..z#direct.queryPassthrough('%s', '%s')r‡)rrçrr8rˆr$rZquery_passthroughrŸr2r2r3ÚqueryPassthrough— sÿzFirewallD.queryPassthroughza(sas)cCst d¡|jj ¡S)Nzdirect.getAllPassthroughs())rr8r$rr rr2r2r3ÚgetAllPassthroughs¤ s zFirewallD.getAllPassthroughscCs*t d¡t| ¡ƒD]}|j|ŽqdS)Nzdirect.removeAllPassthroughs())rr8Úreversedr¤r¢)r.rAr™r2r2r3ÚremoveAllPassthroughs® s zFirewallD.removeAllPassthroughscCs"t|ƒ}t d|¡|jj |¡S)Nzdirect.getPassthroughs('%s'))rrr8r$rZget_passthroughs)r.rxrAr2r2r3ÚgetPassthroughsº szFirewallD.getPassthroughscCst d|d |¡f¡dS)Nz#direct.PassthroughAdded('%s', '%s')r‡r•©r.rxrŒr2r2r3ržÅ sÿzFirewallD.PassthroughAddedcCst d|d |¡f¡dS)Nz%direct.PassthroughRemoved('%s', '%s')r‡r•r¨r2r2r3r¡Ì sÿzFirewallD.PassthroughRemovedcCsdS)zÈ PK_ACTION_ALL implies all other actions, i.e. once a subject is authorized for PK_ACTION_ALL it's also authorized for any other action. Use-case is GUI (RHBZ#994729). Nr2rr2r2r3ÚauthorizeAllÕ s zFirewallD.authorizeAllcCs$t|ƒ}t d|¡|jj |¡S)Nzipset.queryIPSet('%s'))rrr8r$rŽZquery_ipset©r.rŽrAr2r2r3Ú queryIPSetä szFirewallD.queryIPSetcCst d¡|jj ¡S)Nzipsets.getIPSets())rr8r$rŽrrr2r2r3Ú getIPSetsî s zFirewallD.getIPSetscCs(t|tƒ}t d|¡|jj |¡ ¡S)NzgetIPSetSettings(%s))rrirr8r$rŽZ get_ipsetr¢rªr2r2r3r÷ s zFirewallD.getIPSetSettingscCsLt|ƒ}t|ƒ}t d||f¡| |¡|jj ||¡| ||¡dS)Nzipset.addEntry('%s', '%s'))rrr8rBr$rŽZ add_entryÚ EntryAdded©r.rŽÚentryrAr2r2r3ÚaddEntry s zFirewallD.addEntrycCsLt|ƒ}t|ƒ}t d||f¡| |¡|jj ||¡| ||¡dS)Nzipset.removeEntry('%s', '%s'))rrr8rBr$rŽZremove_entryÚEntryRemovedr®r2r2r3ÚremoveEntry s zFirewallD.removeEntrycCs2t|ƒ}t|ƒ}t d||f¡|jj ||¡S)Nzipset.queryEntry('%s', '%s'))rrr8r$rŽZquery_entryr®r2r2r3Ú queryEntry szFirewallD.queryEntrycCs$t|ƒ}t d|¡|jj |¡S)Nzipset.getEntries('%s'))rrr8r$rŽÚget_entriesrªr2r2r3Ú getEntries( szFirewallD.getEntriescCsŒt|ƒ}t|tƒ}t d|d |¡¡|jj |¡}|jj ||¡t |ƒ}t |ƒ}||D]}| ||¡q\||D]}| ||¡qvdS)Nzipset.setEntries('%s', '[%s]')ú,)rÚlistrr8rˆr$rŽr´Zset_entriesršrr±)r.rŽÚentriesrAZold_entriesZold_entries_setZentries_setr¯r2r2r3Ú setEntries2 s zFirewallD.setEntriescCs&t|ƒ}t|ƒ}t d||f¡dS)Nzipset.EntryAdded('%s', '%s')©rrr8©r.rŽr¯r2r2r3rC szFirewallD.EntryAddedcCs&t|ƒ}t|ƒ}t d||f¡dS)Nzipset.EntryRemoved('%s', '%s')rºr»r2r2r3r±J szFirewallD.EntryRemovedcCst d¡|jj ¡S)Nzhelpers.getHelpers())rr8r$ršr›rr2r2r3Ú getHelpersU s zFirewallD.getHelperscCs(t|tƒ}t d|¡|jj |¡ ¡S)NzgetHelperSettings(%s))rrirr8r$ršZ get_helperr¢)r.ršrAr2r2r3rœ^ s zFirewallD.getHelperSettings)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)r)N)N)N)N)r)N)N)N)N)r)N)N)N)r)N)N)N)N)r)N)N)N)N)r)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)êÚ__name__Ú __module__Ú__qualname__Ú__doc__Z persistentrr&ZPK_ACTION_CONFIGZdefault_polkit_auth_requiredr r+r7r%r5rrBrFrIrKrcrZPROPERTIES_IFACErprurrvr(ÚsignalrwZPK_ACTION_INFOZINTROSPECTABLE_IFACErxr)r}r€r~r‚rƒr¥ZPK_ACTION_POLICIESrlr§r©ZPK_ACTION_POLICIES_INFOr«r¦r¨r¯r±r²r´rr°r»r½r¾r¿r¹r¼rÄrÆrÇrÈrÂrÅrÍrÏrÐrÑrËrÎrÔrÖr×rÓrÕZPK_ACTION_CONFIG_INFOrÙrjr’rÝrÜZDBUS_INTERFACE_POLICYr™rßrÞràr†rérêrZDBUS_SIGNATURErrërïrìrñròrórôrörõrørùrúrrrrrrr r–rr•rrrr rrrrrrrrrr$r%r'r(r"rr,rˆr.r/r0r-r*r6r9r;r=r>r7r2rCrErFrGrHrDrArLrNrOrPrQrMrKrUrXrZr[rWrTrarcrdrerfrbr]rkrmrnrorprlrhrrrtrurqrsZPK_ACTION_DIRECTrrkr{r}ZPK_ACTION_DIRECT_INFOr~rr€rrvr|rrr‘r’r“r”r‰rŽr™r r¢r£r¤r¦r§ržr¡Z PK_ACTION_ALLr©rmr«r¬rrr°r²r³rµr¹rr±r¼rrœÚ __classcell__r2r2r0r3r@sž /ÿÿ " ÿ ÿ ÿ ÿ ÿO ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿÿ ÿÿ ÿÿ ÿÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ ÿ)7Ú__all__Z gi.repositoryrr“r&Zdbus.serviceZdbus.mainloop.glibZfirewallrZfirewall.core.fwrZfirewall.core.richrZfirewall.core.loggerrZfirewall.clientrZfirewall.server.dbusr r Zfirewall.server.decoratorsrrr rrrZfirewall.server.configrZfirewall.dbus_utilsrrrrrrrrZfirewall.core.io.functionsrZfirewall.core.io.ipsetrZfirewall.core.io.icmptyperZfirewall.core.io.helperrZfirewall.core.fw_nmrrZfirewall.core.fw_ifcfgr r!Zfirewall.errorsr"rr2r2r2r3Ús. (