File: //lib/python3/dist-packages/firewall/server/__pycache__/config_zone.cpython-310.pyc
o
bhAb�� � @ s� d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl
m Z d dl m
Z
d dlmZ d dlmZ d d lmZ d d
lmZmZmZmZ d d lmZ d d lmZ d d
l m Z m Z m Z m Z G dd� de�Z!dS )� N)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�Zone)�ifcfg_set_zone_of_interface)�DEFAULT_ZONE_TARGET)� Rich_Rule)�log)�DbusServiceObject)�handle_exceptions�dbus_handle_exceptions�dbus_service_method�dbus_polkit_require_auth)�errors)�
FirewallError)�portStr�portInPortRange�coalescePortRange�breakPortRangec s� e Zd ZdZdZ ejjZ e � fdd��Z
e dd� �Z e dd� �Z
e d d
� �Zeejd d d
�e d�dd���Zeejddd
�e d�dd���Zeejj�eejdd�e d�dd����Zejjejdd�dd � �Zeejj�eejdd �e d�� fd d � ���Zeejjd d �e d�d!d"���Z eejjdd �e d�d#d$���Z d%d&� Z eejjd d�e d�d'd(���Z eejjdd�e d�d)d*���Z eejj�e d�d+d,���Z!ejjejjdd�e d-d.� ��Z"eejj�e d�d/d0���Z#ejjejjdd�e d1d2� ��Z$eejjdd�e d�d3d4���Z%ejjejjdd�e d5d6� ��Z&eejjdd �e d�d7d8���Z'eejjdd�e d�d9d:���Z(eejjdd �e d�d;d<���Z)eejjdd�e d�d=d>���Z*eejjdd �e d�d?d@���Z+eejjdd�e d�dAdB���Z,eejjdd �e d�dCdD���Z-eejjdd�e d�dEdF���Z.eejjdGd �e d�dHdI���Z/eejjdGd�e d�dJdK���Z0eejjdd�e d�dLdM���Z1eejjdd�e d�dNdO���Z2eejjddPd
�e d�dQdR���Z3eejjdSd �e d�dTdU���Z4eejjdSd�e d�dVdW���Z5eejjd d�e d�dXdY���Z6eejjd d�e d�dZd[���Z7eejjd dPd
�e d�d\d]���Z8eejjdGd �e d�d^d_���Z9eejjdGd�e d�d`da���Z:eejjdd�e d�dbdc���Z;eejjdd�e d�ddde���Z<eejjddPd
�e d�dfdg���Z=eejjdSd �e d�dhdi���Z>eejjdSd�e d�djdk���Z?eejjd d�e d�dldm���Z@eejjd d�e d�dndo���ZAeejjd dPd
�e d�dpdq���ZBeejjdGd �e d�drds���ZCeejjdGd�e d�dtdu���ZDeejjdd�e d�dvdw���ZEeejjdd�e d�dxdy���ZFeejjddPd
�e d�dzd{���ZGeejjdPd �e d�d|d}���ZHeejjdPd�e d�d~d���ZIeejj�e d�d�d����ZJeejj�e d�d�d����ZKeejjdPd �e d�d�d����ZLeejjdPd �e d�d�d����ZMeejjdPd�e d�d�d����ZNeejj�e d�d�d����ZOeejj�e d�d�d����ZPeejjdPd �e d�d�d����ZQeejjd�d �e d�d�d����ZReejjd�d�e d�d�d����ZSeejjd�d�e d�d�d����ZTeejjd�d�e d�d�d����ZUeejjd�dPd
�e d�d�d����ZVeejjdGd �e d�d�d����ZWeejjdGd�e d�d�d����ZXeejjdd�e d�d�d����ZYeejjdd�e d�d�d����ZZeejjddPd
�e d�d�d����Z[eejjdGd �e d�d�d����Z\eejjdGd�e d�d�d����Z]eejjdd�e d�d�d����Z^eejjdd�e d�d�d����Z_eejjddPd
�e d�d�d����Z`eejjdGd �e d�d�d����ZaeejjdGd�e d�d�d����Zbeejjdd�e d�d�d����Zceejjdd�e d�d�d����ZdeejjddPd
�e d�d�d����Ze� ZfS )��FirewallDConfigZonezFirewallD main classTc s` t t| �j|i |�� || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j � d S )Nr � zconfig.zone.%d)
�superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_ZONE)�selfr �conf�zoner �args�kwargs�� __class__� �=/usr/lib/python3/dist-packages/firewall/server/config_zone.pyr 8 s
�z FirewallDConfigZone.__init__c C s d S �Nr) �r" r) r) r* �__del__E s zFirewallDConfigZone.__del__c C s | � � d S r+ )�remove_from_connectionr, r) r) r* �
unregisterI s z FirewallDConfigZone.unregisterc C s~ |dkr t �| jj�S |dkrt �| jj�S |dkr!t �| jj�S |dkr,t �| jj�S |dkr7t �| jj�S t j �
d| ��)N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r0 r1 r �Booleanr2 r3 �
exceptions�
DBusException)r" �
property_namer) r) r* �
_get_propertyQ s ��z!FirewallDConfigZone._get_property�ss�v)� in_signature�
out_signatureNc C sL t |t�}t |t�}t�d| j||� |tjjkr!tj� d| ��| �
|�S )Nz%s.Get('%s', '%s')�Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr
�debug1r r r r! r6 r7 r9 )r" �interface_namer8 �senderr) r) r* �Getb s
� ��
zFirewallDConfigZone.Get�sza{sv}c C s` t |t�}t�d| j|� |tjjkrtj� d| ��i }dD ] }| �
|�||< q tj |dd�S )Nz%s.GetAll('%s')r> )r0 r1 r r2 r3 �sv�� signature) r r? r
r@ r r r r! r6 r7 r9 �
Dictionary)r" rA rB �ret�xr) r) r* �GetAlls s
��zFirewallDConfigZone.GetAll�ssv)r< c C sh t |t�}t |t�}t |�}t�d| j|||� | j�|� |tjj kr,tj
� d| ��tj
� d| ��)Nz%s.Set('%s', '%s', '%s')r> zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r? r
r@ r r � accessCheckr r r! r6 r7 )r" rA r8 � new_valuerB r) r) r* �Set� s$
� ����zFirewallDConfigZone.Setzsa{sv}asrF c C s2 t |t�}t |�}t |�}t�d| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r? r
r@ r )r" rA �changed_properties�invalidated_propertiesr) r) r* �PropertiesChanged� s
�z%FirewallDConfigZone.PropertiesChanged)r= c s8 t �d| j� tt| ��| j| j�� �}t | |t
j j �S )Nz%s.Introspect())
r
�debug2r r r �
Introspectr r �get_busr r r r! )r" rB �datar' r) r* rT � s
�
�z FirewallDConfigZone.Introspectz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)c C sD t �d| j� | j�| j�}|d tkr t|�}d|d< t|�}|S )� get settings for zone
z%s.getSettings()� r2 ) r
r@ r r �get_zone_configr r �list�tuple)r" rB �settings� _settingsr) r) r* � getSettings� s z FirewallDConfigZone.getSettingsc C s4 t �d| j� | j�| j�}|d tkrd|d< |S )rW z%s.getSettings2()�targetr2 )r
r@ r r �get_zone_config_dictr r �r" rB r\ r) r) r* � getSettings2� s
z FirewallDConfigZone.getSettings2c C s | j �| j�}d|v rt|d �nt� }d|v r t|d �nt� }t|t�r=t|t�d� �| }t|t�d� �| }n"d|v rGt|d �nt� }d|v rTt|d �nt� }|| }|| }|D ]} | j� | �rot
t j | ��qa|D ]}
| j�
|
�r�t
t j |
��qrdS )a
Assignment of interfaces/sources to zones is different from other
zone settings in the sense that particular interface/zone can be
part of only one zone. So make sure added interfaces/sources have
not already been bound to another zone.�
interfaces�sourcesN)r r` r �set�
isinstancer[ r �index_ofr �getZoneOfInterfacer r �
ZONE_CONFLICT�getZoneOfSource) r" r\ � old_settings�
old_ifaces� old_sources� added_ifaces�
added_sources�
new_ifaces� new_sources�iface�sourcer) r) r* � _checkDuplicateInterfacesSources� s&
� ��z4FirewallDConfigZone._checkDuplicateInterfacesSourcesc C st t |�}t�d| j� | j�|� |d dkr#t|�}t|d< t|�}| � |� | j
� | j |�| _ | �
| j j� dS )�!update settings for zone
z%s.update('...')rX r2 N)r r
r@ r r rM rZ r r[ rt r �set_zone_configr �Updatedr0 )r" r\ rB r] r) r) r* �update� s
zFirewallDConfigZone.updatec C sl t |�}t�d| j� | j�|� d|v r |d dkr t|d< | �|� | j� | j
|�| _
| � | j
j � dS )ru z%s.update2('...')r_ r2 N)
r r
r@ r r rM r rt r �set_zone_config_dictr rw r0 )r" r\ rB r) r) r* �update2� s
zFirewallDConfigZone.update2c C s< t �d| j� | j�|� | j�| j�| _| �| jj � dS )z/load default settings for builtin zone
z%s.loadDefaults()N)
r
r@ r r rM r �load_zone_defaultsr rw r0 �r" rB r) r) r* � loadDefaults s z FirewallDConfigZone.loadDefaultsc C � t �d| j|f � d S )Nz%s.Updated('%s')�r
r@ r �r" r0 r) r) r* rw
� zFirewallDConfigZone.Updatedc C s: t �d| j� | j�|� | j�| j� | j�| j� dS )zremove zone
z%s.removeZone()N) r
r@ r r rM r � remove_zoner �
removeZoner| r) r) r* �remove s zFirewallDConfigZone.removec C r~ )Nz%s.Removed('%s')r r� r) r) r* �Removed r� zFirewallDConfigZone.Removedc C sF t |t�}t�d| j|� | j�|� | j�| j |�| _ | �
|� dS )zrename zone
z%s.rename('%s')N) r r? r
r@ r r rM r � rename_zoner �Renamed)r" r0 rB r) r) r* �rename% s
zFirewallDConfigZone.renamec C r~ )Nz%s.Renamed('%s')r r� r) r) r* r� 1 r� zFirewallDConfigZone.Renamedc C � t �d| j� | �� d S )Nz%s.getVersion()r �r
r@ r r^ r| r) r) r* �
getVersion8 � z FirewallDConfigZone.getVersionc C �H t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setVersion('%s')r �
r r? r
r@ r r rM rZ r^ rx )r" �versionrB r\ r) r) r* �
setVersion? �
z FirewallDConfigZone.setVersionc C r� )Nz
%s.getShort()r r� r| r) r) r* �getShortL r� z FirewallDConfigZone.getShortc C r� )Nz%s.setShort('%s')r r� )r" �shortrB r\ r) r) r* �setShortS r� z FirewallDConfigZone.setShortc C r� )Nz%s.getDescription()� r� r| r) r) r* �getDescription` r� z"FirewallDConfigZone.getDescriptionc C r� )Nz%s.setDescription('%s')r� r� )r" � descriptionrB r\ r) r) r* �setDescriptiong r� z"FirewallDConfigZone.setDescriptionc C s. t �d| j� | �� }|d tkr|d S dS )Nz%s.getTarget()rX r2 )r
r@ r r^ r ra r) r) r* � getTargetw s z FirewallDConfigZone.getTargetc C sT t |t�}t�d| j|� | j�|� t| �� �}|dkr |nt |d< | �
|� d S )Nz%s.setTarget('%s')r2 rX ) r r? r
r@ r r rM rZ r^ r rx )r" r_ rB r\ r) r) r* � setTarget s
z FirewallDConfigZone.setTarget�asc C r� )Nz%s.getServices()� r� r| r) r) r* � getServices� r� z FirewallDConfigZone.getServicesc C �N t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setServices('[%s]')�,r� �
r rZ r
r@ r �joinr rM r^ rx )r" �servicesrB r\ r) r) r* � setServices� �
� z FirewallDConfigZone.setServicesc C �f t |t�}t�d| j|� | j�|� t| �� �}||d v r%t t
j |��|d � |� | �
|� d S )Nz%s.addService('%s')r� �r r? r
r@ r r rM rZ r^ r r �ALREADY_ENABLED�appendrx �r" �servicerB r\ r) r) r* �
addService� �
z FirewallDConfigZone.addServicec C �f t |t�}t�d| j|� | j�|� t| �� �}||d vr%t t
j |��|d � |� | �
|� d S )Nz%s.removeService('%s')r� �r r? r
r@ r r rM rZ r^ r r � NOT_ENABLEDr� rx r� r) r) r* �
removeService� r� z!FirewallDConfigZone.removeService�bc C �* t |t�}t�d| j|� || �� d v S )Nz%s.queryService('%s')r� �r r? r
r@ r r^ )r" r� rB r) r) r* � queryService� �
z FirewallDConfigZone.queryServiceza(ss)c C r� )Nz
%s.getPorts()� r� r| r) r) r* �getPorts� r� z FirewallDConfigZone.getPortsc C � g }t |t�D ]}t|t�r|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j �
|� t| � � �}||d< | � |� d S )Nz%s.setPorts('[%s]')r� c s �$ � | ]
}d |d |d f V qdS �z ('%s, '%s')r r Nr) ��.0�portr) r) r* � <genexpr>� � �" z/FirewallDConfigZone.setPorts.<locals>.<genexpr>r� �
r rZ rf r� r[ r
r@ r r� r rM r^ rx �r" �portsrB �_portsr� r\ r) r) r* �setPorts� �
� z FirewallDConfigZone.setPortsc
�� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]}t
||d �rAt t j
d|� f ��q.t|dd� |D ��\}}|D ]} |d �t| d �� f� qP|D ]} |d �t| d �� f� qa| �|� d S )
Nz%s.addPort('%s', '%s')c � | d � kS �Nr r) �rJ ��protocolr) r* �<lambda>� � z-FirewallDConfigZone.addPort.<locals>.<lambda>r� r �%s:%sc S � g | ]\}}|�qS r) r) �r� �_port� _protocolr) r) r* �
<listcomp>� � z/FirewallDConfigZone.addPort.<locals>.<listcomp>�-�r r? r
r@ r r rM rZ r^ �filterr r r r� r r� r r� rx �
r" r� r� rB r\ �existing_port_ids�port_id� added_ranges�removed_ranges�ranger) r� r* �addPort� �(
�
��zFirewallDConfigZone.addPortc
�� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ] }t
||d �r9 n q.t t j
d|� f ��t|dd� |D ��\}}|D ]} |d �t| d �� f� qR|D ]} |d �t| d �� f� qc| �|� d S )
Nz%s.removePort('%s', '%s')c r� r� r) r� r� r) r* r� � r� z0FirewallDConfigZone.removePort.<locals>.<lambda>r� r r� c S r� r) r) r� r) r) r* r� r� z2FirewallDConfigZone.removePort.<locals>.<listcomp>r� �r r? r
r@ r r rM rZ r^ r� r r r r� r r� r r� rx r� r) r� r* �
removePort� �&
� �z FirewallDConfigZone.removePortc C �X t |t�}t |t�}t�d| j||� | �� d D ]\}}t||�r)||kr) dS qdS )Nz%s.queryPort('%s', '%s')r� TF�r r? r
r@ r r^ r �r" r� r� rB r� r� r) r) r* � queryPort
�
��z FirewallDConfigZone.queryPortc C r� )Nz%s.getProtocols()�
r� r| r) r) r* � getProtocols r� z FirewallDConfigZone.getProtocolsc C r� )Nz%s.setProtocols('[%s]')r� r� r� )r" � protocolsrB r\ r) r) r* � setProtocols! r� z FirewallDConfigZone.setProtocolsc C r� )Nz%s.addProtocol('%s')r� r� �r" r� rB r\ r) r) r* � addProtocol- r� z FirewallDConfigZone.addProtocolc C r� )Nz%s.removeProtocol('%s')r� r� r� r) r) r* �removeProtocol: r� z"FirewallDConfigZone.removeProtocolc C r� )Nz%s.queryProtocol('%s')r� r� )r" r� rB r) r) r* �
queryProtocolG r� z!FirewallDConfigZone.queryProtocolc C r� )Nz%s.getSourcePorts()� r� r| r) r) r* �getSourcePortsQ r� z"FirewallDConfigZone.getSourcePortsc C r� )Nz%s.setSourcePorts('[%s]')r� c s r� r� r) r� r) r) r* r� e r� z5FirewallDConfigZone.setSourcePorts.<locals>.<genexpr>r� r� r� r) r) r* �setSourcePortsX r� z"FirewallDConfigZone.setSourcePortsc
r� )
Nz %s.addSourcePort('%s', '%s')c r� r� r) r� r� r) r* r� u r� z3FirewallDConfigZone.addSourcePort.<locals>.<lambda>r� r r� c S r� r) r) r� r) r) r* r� z r� z5FirewallDConfigZone.addSourcePort.<locals>.<listcomp>r� r� r� r) r� r* �
addSourcePortk r� z!FirewallDConfigZone.addSourcePortc
r� )
Nz %s.removeSourcePort('%s', '%s')c r� r� r) r� r� r) r* r� � r� z6FirewallDConfigZone.removeSourcePort.<locals>.<lambda>r� r r� c S r� r) r) r� r) r) r* r� � r� z8FirewallDConfigZone.removeSourcePort.<locals>.<listcomp>r� r� r� r) r� r* �removeSourcePort� r� z$FirewallDConfigZone.removeSourcePortc C r� )Nz %s.querySourcePort('%s', '%s')r� TFr� r� r) r) r* �querySourcePort� r� z#FirewallDConfigZone.querySourcePortc C r� )Nz%s.getIcmpBlocks()� r� r| r) r) r* �
getIcmpBlocks� r� z!FirewallDConfigZone.getIcmpBlocksc C r� )Nz%s.setIcmpBlocks('[%s]')r� r� r� )r" � icmptypesrB r\ r) r) r* �
setIcmpBlocks� r� z!FirewallDConfigZone.setIcmpBlocksc C r� )Nz%s.addIcmpBlock('%s')r� r� �r" �icmptyperB r\ r) r) r* � addIcmpBlock� r� z FirewallDConfigZone.addIcmpBlockc C r� )Nz%s.removeIcmpBlock('%s')r� r� r� r) r) r* �removeIcmpBlock� r� z#FirewallDConfigZone.removeIcmpBlockc C r� )Nz%s.queryIcmpBlock('%s')r� r� )r" r� rB r) r) r* �queryIcmpBlock� r� z"FirewallDConfigZone.queryIcmpBlockc C r� )Nz%s.getIcmpBlockInversion()� r� r| r) r) r* �getIcmpBlockInversion� r� z)FirewallDConfigZone.getIcmpBlockInversionc C r� )Nz %s.setIcmpBlockInversion('%s')r �
r �boolr
r@ r r rM rZ r^ rx )r" �flagrB r\ r) r) r* �setIcmpBlockInversion� r� z)FirewallDConfigZone.setIcmpBlockInversionc C �P t �d| j� | j�|� t| �� �}|d r ttj d��d|d< | �
|� d S )Nz%s.addIcmpBlockInversion()r �icmp-block-inversionT� r
r@ r r rM rZ r^ r r r� rx ra r) r) r* �addIcmpBlockInversion� � z)FirewallDConfigZone.addIcmpBlockInversionc C �P t �d| j� | j�|� t| �� �}|d s ttj d��d|d< | �
|� d S )Nz %s.removeIcmpBlockInversion()r r F� r
r@ r r rM rZ r^ r r r� rx ra r) r) r* �removeIcmpBlockInversion� r
z,FirewallDConfigZone.removeIcmpBlockInversionc C r� )Nz %s.queryIcmpBlockInversion()r r� r| r) r) r* �queryIcmpBlockInversion r� z+FirewallDConfigZone.queryIcmpBlockInversionc C r� )Nz%s.getMasquerade()� r� r| r) r) r* �
getMasquerade r� z!FirewallDConfigZone.getMasqueradec C r� )Nz%s.setMasquerade('%s')r r )r" �
masqueraderB r\ r) r) r* �
setMasquerade r� z!FirewallDConfigZone.setMasqueradec C r )Nz%s.addMasquerade()r r Tr ra r) r) r* �
addMasquerade" r
z!FirewallDConfigZone.addMasqueradec C r )Nz%s.removeMasquerade()r r Fr ra r) r) r* �removeMasquerade- r
z$FirewallDConfigZone.removeMasqueradec C r� )Nz%s.queryMasquerade()r r� r| r) r) r* �queryMasquerade8 r� z#FirewallDConfigZone.queryMasqueradeza(ssss)c C r� )Nz%s.getForwardPorts()� r� r| r) r) r* �getForwardPortsA r� z#FirewallDConfigZone.getForwardPortsc C r� )Nz%s.setForwardPorts('[%s]')r� c s s0 � | ]}d |d |d |d |d f V qdS )z('%s, '%s', '%s', '%s')r r r� � Nr) r� r) r) r* r� U s � � �z6FirewallDConfigZone.setForwardPorts.<locals>.<genexpr>r r� r� r) r) r* �setForwardPortsH s
�� z#FirewallDConfigZone.setForwardPorts�ssssc C s� t |t�}t |t�}t |t�}t |t�}t�d| j||||� | j�|� ||t|�t|�f}t| �� �}||d v rGt t
j d||||f ��|d � |� | �
|� d S )Nz)%s.addForwardPort('%s', '%s', '%s', '%s')r � %s:%s:%s:%sr� �r" r� r� �toport�toaddrrB �fwp_idr\ r) r) r* �addForwardPort\ �$
� ��z"FirewallDConfigZone.addForwardPortc C s� t |t�}t |t�}t |t�}t |t�}t�d| j||||� | j�|� ||t|�t|�f}t| �� �}||d vrGt t
j d||||f ��|d � |� | �
|� d S )Nz,%s.removeForwardPort('%s', '%s', '%s', '%s')r r r� r r) r) r* �removeForwardPortp r! z%FirewallDConfigZone.removeForwardPortc C sb t |t�}t |t�}t |t�}t |t�}t�d| j||||� ||t|�t|�f}|| �� d v S )Nz+%s.queryForwardPort('%s', '%s', '%s', '%s')r r� )r" r� r� r r rB r r) r) r* �queryForwardPort� s
�z$FirewallDConfigZone.queryForwardPortc C r� )Nz%s.getInterfaces()�
r� r| r) r) r* �
getInterfaces� r� z!FirewallDConfigZone.getInterfacesc C r� )Nz%s.setInterfaces('[%s]')r� r$ r� )r" rc rB r\ r) r) r* �
setInterfaces� r� z!FirewallDConfigZone.setInterfacesc C st t |t�}t�d| j|� | j�|� t| �� �}||d v r%t t
j |��|d � |� | �
|� t| jj|� d S )Nz%s.addInterface('%s')r$ )r r? r
r@ r r rM rZ r^ r r r� r� rx r r r0 �r" � interfacerB r\ r) r) r* � addInterface� s
z FirewallDConfigZone.addInterfacec C sp t |t�}t�d| j|� | j�|� t| �� �}||d vr%t t
j |��|d � |� | �
|� td|� d S )Nz%s.removeInterface('%s')r$ � )r r? r
r@ r r rM rZ r^ r r r� r� rx r r' r) r) r* �removeInterface� s
z#FirewallDConfigZone.removeInterfacec C r� )Nz%s.queryInterface('%s')r$ r� )r" r( rB r) r) r* �queryInterface� s
z"FirewallDConfigZone.queryInterfacec C r� )Nz%s.getSources()� r� r| r) r) r* �
getSources� r� z FirewallDConfigZone.getSourcesc C r� )Nz%s.setSources('[%s]')r� r- r� )r" rd rB r\ r) r) r* �
setSources� r� z FirewallDConfigZone.setSourcesc C r� )Nz%s.addSource('%s')r- r� �r" rs rB r\ r) r) r* � addSource� r� z FirewallDConfigZone.addSourcec C r� )Nz%s.removeSource('%s')r- r� r0 r) r) r* � removeSource� r� z FirewallDConfigZone.removeSourcec C r� )Nz%s.querySource('%s')r- r� )r" rs rB r) r) r* � querySource� r� z FirewallDConfigZone.querySourcec C r� )Nz%s.getRichRules()� r� r| r) r) r* � getRichRules r� z FirewallDConfigZone.getRichRulesc C s\ t |t�}t�d| jd�|�� | j�|� t| �� �}dd� |D �}||d< | � |� d S )Nz%s.setRichRules('[%s]')r� c S s g | ] }t t|d ���qS )��rule_str)r? r )r� �rr) r) r* r� s z4FirewallDConfigZone.setRichRules.<locals>.<listcomp>r4 r� )r" �rulesrB r\ r) r) r* � setRichRules s
� z FirewallDConfigZone.setRichRulesc C st t |t�}t�d| j|� | j�|� t| �� �}tt |d��}||d v r,t
t j |��|d �
|� | �|� d S )Nz%s.addRichRule('%s')r6 r4 )r r? r
r@ r r rM rZ r^ r r r r� r� rx �r" �rulerB r\ r7 r) r) r* � addRichRule �
z FirewallDConfigZone.addRichRulec C st t |t�}t�d| j|� | j�|� t| �� �}tt |d��}||d vr,t
t j |��|d �
|� | �|� d S )Nz%s.removeRichRule('%s')r6 r4 )r r? r
r@ r r rM rZ r^ r r r r� r� rx r; r) r) r* �removeRichRule) r> z"FirewallDConfigZone.removeRichRulec C s8 t |t�}t�d| j|� tt|d��}|| �� d v S )Nz%s.queryRichRule('%s')r6 r4 )r r? r
r@ r r r^ )r" r< rB r7 r) r) r* �
queryRichRule7 s
z!FirewallDConfigZone.queryRichRuler+ )g�__name__�
__module__� __qualname__�__doc__�
persistentr r �PK_ACTION_CONFIG� default_polkit_auth_requiredr r r
r- r/ r9 r �PROPERTIES_IFACErC rK r rO r� �signalrR �PK_ACTION_INFO�INTROSPECTABLE_IFACErT r! r^ rb rt rx rz r} rw r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r
r r r r r r r r r r" r# r% r& r) r+ r, r. r/ r1 r2 r3 r5 r: r= r? r@ �
__classcell__r) r) r' r* r 0 s
��
� � ��
� ��
��
��
��
�� �
�
������
�� �
�
������
�� �
�
���
���
������ �� � � ��� �
�
���
� � �r )"r � dbus.service�firewallr �firewall.dbus_utilsr r r �firewall.core.io.zoner �firewall.core.fw_ifcfgr �firewall.core.baser �firewall.core.richr �firewall.core.loggerr
�firewall.server.dbusr �firewall.server.decoratorsr r
r r r �firewall.errorsr �firewall.functionsr r r r r r) r) r) r* �<module> s