File: //lib/python3/dist-packages/firewall/server/__pycache__/config_ipset.cpython-310.pyc
o
bhAbI � @ s� d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl
m Z m Z m
Z
mZ d dlmZ d dlmZ d dlmZmZmZmZ d d lmZ d d
lmZ G d d � d e�ZdS )
� N)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�IPSet)� IPSET_TYPES�normalize_ipset_entry� check_entry_overlaps_existing� check_for_overlapping_entries)�log)�DbusServiceObject)�handle_exceptions�dbus_handle_exceptions�dbus_service_method�dbus_polkit_require_auth)�errors)�
FirewallErrorc s e Zd ZdZdZ ejjZ e � fdd��Z
e dd� �Z e dd� �Z
e d d
� �Zeejd d d
�e dWdd���Zeejddd
�e dWdd���Zeejj�eejdd�e dWdd����Zejjejdd�dd � �Zeejj�eejdd �e dW� fd d � ���Zeejje j d �e dWd d!���Z eejje j d�e dWd"d#���Z eejj�e dWd$d%���Z ejjejjdd�e d&d'� ��Z!eejj�e dWd(d)���Z"ejjejjdd�e d*d+� ��Z#eejjdd�e dWd,d-���Z$ejjejjdd�e d.d/� ��Z%eejjdd �e dWd0d1���Z&eejjdd�e dWd2d3���Z'eejjdd �e dWd4d5���Z(eejjdd�e dWd6d7���Z)eejjdd �e dWd8d9���Z*eejjdd�e dWd:d;���Z+eejjdd �e dWd<d=���Z,eejjdd�e dWd>d?���Z-eejjd@d �e dWdAdB���Z.eejjd@d�e dWdCdD���Z/eejjd d�e dWdEdF���Z0eejjdd�e dWdGdH���Z1eejjd dId
�e dWdJdK���Z2eejjdLd �e dWdMdN���Z3eejjdLd�e dWdOdP���Z4eejjdd�e dWdQdR���Z5eejjdd�e dWdSdT���Z6eejjddId
�e dWdUdV���Z7� Z8S )X�FirewallDConfigIPSetzFirewallD main classTc s` t t| �j|i |�� || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j � d S )Nr � zconfig.ipset.%d)
�superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_IPSET)�selfr �conf�ipsetr �args�kwargs�� __class__� �>/usr/lib/python3/dist-packages/firewall/server/config_ipset.pyr 6 s
�z FirewallDConfigIPSet.__init__c C s d S �Nr& �r r& r& r' �__del__C s z FirewallDConfigIPSet.__del__c C s | � � d S r( )�remove_from_connectionr) r& r& r' �
unregisterG s z FirewallDConfigIPSet.unregisterc C s~ |dkr t �| jj�S |dkrt �| jj�S |dkr!t �| jj�S |dkr,t �| jj�S |dkr7t �| jj�S t j �
d| ��)N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r- r. r �Booleanr/ r0 �
exceptions�
DBusException)r �
property_namer& r& r' �
_get_propertyO s ��z"FirewallDConfigIPSet._get_property�ss�v)� in_signature�
out_signatureNc C sL t |t�}t |t�}t�d| j||� |tjjkr!tj� d| ��| �
|�S )Nz%s.Get('%s', '%s')�Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r r3 r4 r6 )r �interface_namer5 �senderr& r& r' �Get` s
� ��
zFirewallDConfigIPSet.Get�sza{sv}c C s` t |t�}t�d| j|� |tjjkrtj� d| ��i }dD ] }| �
|�||< q tj |dd�S )Nz%s.GetAll('%s')r; )r- r. r r/ r0 �sv�� signature) r r< r r= r r r r r3 r4 r6 �
Dictionary)r r> r? �ret�xr& r& r' �GetAllq s
��zFirewallDConfigIPSet.GetAll�ssv)r9 c C sh t |t�}t |t�}t |�}t�d| j|||� | j�|� |tjj kr,tj
� d| ��tj
� d| ��)Nz%s.Set('%s', '%s', '%s')r; zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r< r r= r r � accessCheckr r r r3 r4 )r r> r5 � new_valuer? r& r& r' �Set� s$
� ����zFirewallDConfigIPSet.Setzsa{sv}asrC c C s2 t |t�}t |�}t |�}t�d| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r< r r= r )r r> �changed_properties�invalidated_propertiesr& r& r' �PropertiesChanged� s
�z&FirewallDConfigIPSet.PropertiesChanged)r: c s8 t �d| j� tt| ��| j| j�� �}t | |t
j j �S )Nz%s.Introspect())
r �debug2r r r �
Introspectr r �get_busr r r r )r r? �datar$ r& r' rQ � s
�
�z FirewallDConfigIPSet.Introspectc C s t �d| j� | j�| j�S )z get settings for ipset
z%s.getSettings())r r= r r �get_ipset_configr �r r? r& r& r' � getSettings� s z FirewallDConfigIPSet.getSettingsc C sF t |�}t�d| j� | j�|� | j�| j|�| _| � | jj
� dS )z"update settings for ipset
z%s.update('...')N) r r r= r r rJ r �set_ipset_configr �Updatedr- )r �settingsr? r& r& r' �update� s
zFirewallDConfigIPSet.updatec C s< t �d| j� | j�|� | j�| j�| _| �| jj � dS )z0load default settings for builtin ipset
z%s.loadDefaults()N)
r r= r r rJ r �load_ipset_defaultsr rX r- rU r& r& r' � loadDefaults� s z!FirewallDConfigIPSet.loadDefaultsc C � t �d| j|f � d S )Nz%s.Updated('%s')�r r= r �r r- r& r& r' rX � � z FirewallDConfigIPSet.Updatedc C s: t �d| j� | j�|� | j�| j� | j�| j� dS )zremove ipset
z %s.remove()N) r r= r r rJ r � remove_ipsetr � removeIPSetrU r& r& r' �remove� s zFirewallDConfigIPSet.removec C r] )Nz%s.Removed('%s')r^ r_ r& r& r' �Removed� r` z FirewallDConfigIPSet.Removedc C sF t |t�}t�d| j|� | j�|� | j�| j |�| _ | �
|� dS )zrename ipset
z%s.rename('%s')N) r r< r r= r r rJ r � rename_ipsetr �Renamed)r r- r? r& r& r' �rename� s
zFirewallDConfigIPSet.renamec C r] )Nz%s.Renamed('%s')r^ r_ r& r& r' rf � r` z FirewallDConfigIPSet.Renamedc C � t �d| j� | �� d S )Nz%s.getVersion()r �r r= r rV rU r& r& r' �
getVersion� � z FirewallDConfigIPSet.getVersionc C �H t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setVersion('%s')r �
r r< r r= r r rJ �listrV rZ )r �versionr? rY r& r& r' �
setVersion �
z FirewallDConfigIPSet.setVersionc C rh )Nz
%s.getShort()r ri rU r& r& r' �getShort rk z FirewallDConfigIPSet.getShortc C rl )Nz%s.setShort('%s')r rm )r �shortr? rY r& r& r' �setShort rq z FirewallDConfigIPSet.setShortc C rh )Nz%s.getDescription()� ri rU r& r& r' �getDescription# rk z#FirewallDConfigIPSet.getDescriptionc C rl )Nz%s.setDescription('%s')ru rm )r � descriptionr? rY r& r& r' �setDescription* s
� z#FirewallDConfigIPSet.setDescriptionc C rh )Nz %s.getType()� ri rU r& r& r' �getType8 rk z FirewallDConfigIPSet.getTypec C s\ t |t�}t�d| j|� | j�|� |tvr tt j
|��t | � � �}||d< | �
|� d S )Nz%s.setType('%s')ry )r r< r r= r r rJ r r r � INVALID_TYPErn rV rZ )r �
ipset_typer? rY r& r& r' �setType? s
z FirewallDConfigIPSet.setTypeza{ss}c C rh )Nz%s.getOptions()� ri rU r& r& r' �
getOptionsN rk z FirewallDConfigIPSet.getOptionsc C sL t |t�}t�d| jt|�� | j�|� t| � � �}||d< | �
|� d S )Nz%s.setOptions('[%s]')r~ ) r �dictr r= r �reprr rJ rn rV rZ )r �optionsr? rY r& r& r' �
setOptionsU s
� z FirewallDConfigIPSet.setOptionsc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||d v r7|d | |kr7t t
j d||f ��||d |< | � |� d S )Nz%s.addOption('%s', '%s')r~ z
'%s': '%s')
r r< r r= r r rJ rn rV r r �ALREADY_ENABLEDrZ �r �key�valuer? rY r& r& r' � addOptiona s
� z FirewallDConfigIPSet.addOptionc C sb t |t�}t�d| j|� | j�|� t| �� �}||d vr%t t
j |��|d |= | � |� d S )Nz%s.removeOption('%s')r~ )
r r< r r= r r rJ rn rV r r � NOT_ENABLEDrZ )r r� r? rY r& r& r' � removeOptionp s
z!FirewallDConfigIPSet.removeOption�bc C sN t |t�}t |t�}t�d| j||� t| �� �}||d v o&|d | |kS )Nz%s.queryOption('%s', '%s')r~ )r r< r r= r rn rV r� r& r& r' � queryOption} s
� z FirewallDConfigIPSet.queryOption�asc C rh )Nz%s.getEntries()� ri rU r& r& r' �
getEntries� rk z FirewallDConfigIPSet.getEntriesc C s| t |t�}t|� t�d| jd�|�� | j�|� t| � � �}d|d v r3|d d dkr3t
t j ��||d< | �
|� d S )Nz%s.setEntries('[%s]')�,�timeoutr~ �0r� )r rn r
r r= r �joinr rJ rV r r �IPSET_WITH_TIMEOUTrZ )r �entriesr? rY r& r& r' �
setEntries� s
�
z FirewallDConfigIPSet.setEntriesc C s� t |t�}t|�}t�d| j|� | j�|� t| � � �}d|d v r0|d d dkr0t
t j ��||d v r<t
t j
|��t||d � |d �|� | �|� d S )Nz%s.addEntry('%s')r� r~ r� r� )r r< r r r= r r rJ rn rV r r r� r� r �appendrZ �r �entryr? rY r& r& r' �addEntry� s
z FirewallDConfigIPSet.addEntryc C s� t |t�}t|�}t�d| j|� | j�|� t| � � �}d|d v r0|d d dkr0t
t j ��||d vr<t
t j
|��|d �|� | �|� d S )Nz%s.removeEntry('%s')r� r~ r� r� )r r< r r r= r r rJ rn rV r r r� r� rc rZ r� r& r& r' � removeEntry� s
z FirewallDConfigIPSet.removeEntryc C s` t |t�}t|�}t�d| j|� t| �� �}d|d v r*|d d dkr*tt j
��||d v S )Nz%s.queryEntry('%s')r� r~ r� r� ) r r< r r r= r rn rV r r r� r� r& r& r' �
queryEntry� s
z FirewallDConfigIPSet.queryEntryr( )9�__name__�
__module__� __qualname__�__doc__�
persistentr r �PK_ACTION_CONFIG� default_polkit_auth_requiredr
r r r* r, r6 r �PROPERTIES_IFACEr@ rH r rL �service�signalrO �PK_ACTION_INFO�INTROSPECTABLE_IFACErQ r r �DBUS_SIGNATURErV rZ r\ rX rc rd rg rf rj rp rr rt rv rx rz r} r r� r� r� r� r� r� r� r� r� �
__classcell__r& r& r$ r' r . s6
��
��
� ��
��
�� �� �� � �
�
�� ��
�r ) r � dbus.service�firewallr �firewall.dbus_utilsr r r �firewall.core.io.ipsetr �firewall.core.ipsetr r r r
�firewall.core.loggerr �firewall.server.dbusr �firewall.server.decoratorsr
r r r r �firewall.errorsr r r& r& r& r' �<module> s