File: //proc/self/root/lib/python3/dist-packages/firewall/core/io/__pycache__/direct.cpython-310.pyc
o
bhAb�< � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
m Z d dl m
Z
mZmZ d dlmZ d dlmZ d dlmZ d d lmZ d d
lmZ G d d � d e�ZG d
d� de
�ZdS )� N)�config)�LastUpdatedOrderedDict)� splitArgs�joinArgs)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�log)� ipXtables)�ebtables)�errors)�
FirewallErrorc @ s$ e Zd Zdd� Zdd� Zdd� ZdS )�direct_ContentHandlerc C s t �| |� d| _d S )NF)r �__init__�direct)�self�item� r �9/usr/lib/python3/dist-packages/firewall/core/io/direct.pyr ( s
z direct_ContentHandler.__init__c C s` t �| ||� | j�||� |dkr | jrttjd��d| _d S |dkrD| js.t� d� d S |d }|d }|d }| j�
|||� d S |dkr�| jsRt� d � d S |d }|d
vrbttj d | ��|d }|d }zt |d �}W n t
y� t� d
|d � Y d S w ||||g| _d S |dkr�| js�t� d� d S |d }|g| _d S t� d| � d S )Nr zMore than one direct tag.T�chainz$Parse Error: chain outside of direct�ipv�table�rulez#Parse Error: rule outside of direct��ipv4�ipv6�ebz"'%s' not from {'ipv4'|'ipv6'|'eb'}�priorityz'Parse Error: %s is not a valid priority� passthroughz&Parse Error: command outside of directzUnknown XML element %s)r � startElementr �parser_check_element_attrsr r
r � PARSE_ERRORr �error� add_chain� INVALID_IPV�int�
ValueError�_rule� _passthrough)r �name�attrsr r r r r r r r , sX �
� ��
z"direct_ContentHandler.startElementc C s� t �| |� |dkr(| jr | j�t| j�� | jj| j� nt� d� d | _d S |dkrJ| jr@| j
�t| j�� | jj | j
� nt� d� d | _
d S d S )Nr z2Error: rule does not have any arguments, ignoring.r z9Error: passthrough does not have any arguments, ignoring.) r �
endElement�_elementr' �appendr r �add_ruler r" r( �add_passthrough)r r) r r r r+ \ s
�z direct_ContentHandler.endElementN)�__name__�
__module__� __qualname__r r r+ r r r r r ' s 0r c s6 e Zd ZdZddgfddddddgfgfdddgfgffZdZd g d
�g d �d gd
�Zi Z� fdd�Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Zd4d5� Zd6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!� Z"S )B�Directz Direct class �chains)� r5 r5 �rulesr5 r � passthroughsz(a(sss)a(sssias)a(sas))N�r r r �r r r r r )r r r r c s0 t t| ��� || _t� | _t� | _t� | _d S �N)�superr3 r �filenamer r4 r6 r7 )r r< �� __class__r r r � s
zDirect.__init__c C s d S r: r )r �confr �all_conf�all_io_objectsr r r �
_check_config� s zDirect._check_configc C s� g }g }| j D ]}| j | D ]}|�tt|�t|g� �� qq|�|� g }| jD ]"}| j| D ]}|�t|d |d |d |d t|d �f�� q1q*|�|� g }| jD ]}| j| D ]
}|�t|t|�f�� q^qW|�|� t|�S )Nr � � )r4 r- �tuple�listr6 r7 )r �ret�x�keyr r r r r �
export_config� s,
�
��
�
zDirect.export_configc C s� | � � | �|� t| j�D ]6\}\}}|dkr$|| D ]}| j|� q |dkr4|| D ]}| j|� q,|dkrD|| D ]}| j|� q<qd S )Nr4 r6 r7 )�cleanup� check_config� enumerate�IMPORT_EXPORT_STRUCTUREr# r. r/ )r r? rA �i�element�dummyrH r r r �
import_config� s
��zDirect.import_configc C s" | j �� | j�� | j�� d S r: )r4 �clearr6 r7 �r r r r rK � s
zDirect.cleanupc C s� t d� | jD ]}t d|d |d d�| j| �f � qt d� | jD ]&}t d|d |d |d f � | j| D ]\}}t d |d
�|�f � q:q$t d � | jD ]}t d | � | j| D ] }t d
d
�|� � q_qRd S )Nr4 z (%s, %s): %sr rC �,r6 z (%s, %s, %s):rD z (%d, ('%s'))z','r7 z %s:z
('%s'))�printr4 �joinr6 r7 )r rI r �argsr r r �output� s$
�
�
��z
Direct.outputc C s( g d�}||vrt tjd||f ��d S )Nr �'%s' not in '%s')r
r r$ )r r �ipvsr r r �
_check_ipv� s
��zDirect._check_ipvc C sF | � |� |dv rtj�� ntj�� }||vr!ttjd||f ��d S )N)r r rZ )r\ r
�BUILT_IN_CHAINS�keysr r
r �
INVALID_TABLE)r r r �tablesr r r �_check_ipv_table� s
�
��zDirect._check_ipv_tablec C sf | � ||� ||f}|| jvrg | j|< || j| vr%| j| �|� d S t�d|||f d � d S )Nz(Chain '%s' for table '%s' with ipv '%s' �already in list, ignoring)ra r4 r- r �warning�r r r r rI r r r r# � s
�
�zDirect.add_chainc C sp | � ||� ||f}|| jv r/|| j| v r/| j| �|� t| j| �dkr-| j|= d S d S td|||f ��)Nr z4Chain '%s' with table '%s' with ipv '%s' not in list)ra r4 �remove�lenr& rd r r r � remove_chain� s ���zDirect.remove_chainc C s, | � ||� ||f}|| jv o|| j| v S r: )ra r4 rd r r r � query_chain� s zDirect.query_chainc C s8 | � ||� ||f}|| jv r| j| S td||f ��)Nz&No chains for table '%s' with ipv '%s')ra r4 r& )r r r rI r r r �
get_chains� s
�zDirect.get_chainsc C � | j S r: )r4 rT r r r �get_all_chains� � zDirect.get_all_chainsc C s� | � ||� |||f}|| jvrt� | j|< |t|�f}|| j| vr,|| j| |< d S t�dd�|�||f d||f d � d S )N�(Rule '%s' for table '%s' and chain '%s' �',z with ipv '%s' and priority %d rb )ra r6 r rE r rc rW �r r r r r rX rI �valuer r r r. s
�
�
�zDirect.add_rulec C s� | � ||� |||f}|t|�f}|| jv r4|| j| v r4| j| |= t| j| �dkr2| j|= d S d S tdd�|�||f d||f ��)Nr rm rn z)with ipv '%s' and priority %d not in list)ra rE r6 rf r& rW ro r r r � remove_rule s
��
�zDirect.remove_rulec C sf | � ||� |||f}|| jv r/| j| �� D ]}| j| |= qt| j| �dkr1| j|= d S d S d S )Nr )ra r6 r^ rf )r r r r rI rp r r r � remove_rules s
�zDirect.remove_rulesc C s: | � ||� |||f}|t|�f}|| jv o || j| v S r: )ra rE r6 ro r r r �
query_rule' s
zDirect.query_rulec C sB | � ||� |||f}|| jv r| j| S td||f d| ��)Nz'No rules for table '%s' and chain '%s' z
with ipv '%s')ra r6 r& rd r r r � get_rules- s
��zDirect.get_rulesc C rj r: )r6 rT r r r �
get_all_rules6 rl zDirect.get_all_rulesc C s` | � |� || jvrg | j|< || j| vr | j| �|� d S t�dd�|�|f d � d S )N� Passthrough '%s' for ipv '%s'rn rb )r\ r7 r- r rc rW �r r rX r r r r/ ; s
�
�zDirect.add_passthroughc C sn | � |� || jv r*|| j| v r*| j| �|� t| j| �dkr(| j|= d S d S tdd�|�|f d ��)Nr rv rn z not in list)r\ r7 re rf r& rW rw r r r �remove_passthroughE s
� ��zDirect.remove_passthroughc C s" | � |� || jv o|| j| v S r: )r\ r7 rw r r r �query_passthroughO s
zDirect.query_passthroughc C s* | � |� || jv r| j| S td| ��)Nz No passthroughs for ipv '%s')r\ r7 r& )r r r r r �get_passthroughsS s
zDirect.get_passthroughsc C rj r: )r7 rT r r r �get_all_passthroughsZ rl zDirect.get_all_passthroughsc C s� | � � | j�d�sttjd| j ��t| �}t�� }|� |� t
| jd��2}t� d �}|� |� z|�
|� W n tjyO } z
ttjd|�� ��d }~ww W d � d S 1 s[w Y d S )Nz.xmlz'%s' is missing .xml suffix�rbzNot a valid file: %s)rK r< �endswithr
r � INVALID_NAMEr �sax� make_parser�setContentHandler�open� InputSource�
setByteStream�parse�SAXParseException� INVALID_TYPE� getException)r �handler�parser�f�source�msgr r r �read_ s. �
�����"�z Direct.readc
C s t j�| j�r)z t�| jd| j � W n ty( } z td| j|f ��d }~ww t j�tj �s7t �
tj d� t j | jddd�}t
|�}|�� |�di � |�d� | jD ]"}|\}}| j| D ]}|�d � |�d
|||d �� |�d� qaqV| jD ]?}|\}}}| j| D ]2\}} t| �d k r�q�|�d � |�d
|||d| d�� |�tj�t| ��� |�d
� |�d� q�q|| jD ]3}| j| D ]+} t| �d k r�q�|�d � |�dd|i� |�tj�t| ��� |�d� |�d� q�q�|�d� |�d� |�� |� � ~d S )Nz%s.oldzBackup of '%s' failed: %si� �wtzUTF-8)�mode�encodingr �
z r r8 rC r z%dr9 r r ) �os�path�existsr< �shutil�copy2� Exception�IOErrorr �
ETC_FIREWALLD�mkdir�ior� r �
startDocumentr �ignorableWhitespacer4 �
simpleElementr6 rf r �saxutils�escaper r+ r7 � endDocument�close)
r r� r� r� rI r r r r rX r r r �writeq sh ��
� �
�
�
�
z Direct.write)#r0 r1 r2 �__doc__rN �DBUS_SIGNATURE� PARSER_REQUIRED_ELEMENT_ATTRS� PARSER_OPTIONAL_ELEMENT_ATTRSr rB rJ rR rK rY r\ ra r# rg rh ri rk r. rq rr rs rt ru r/ rx ry rz r{ r� r� �
__classcell__r r r= r r3 q sN ��
r3 )�xml.saxr r� r� r� �firewallr �firewall.fw_typesr �firewall.functionsr r �firewall.core.io.io_objectr r r �firewall.core.loggerr �
firewall.corer
r r �firewall.errorsr
r r3 r r r r �<module> s J