File: //usr/local/CyberCP/plogical/__pycache__/firewallUtilities.cpython-310.pyc
o
��h� � @ s� d dl Z d dlZ d dlZd dlZej�d� e j�dd� ze�� W n Y d dl m
Z d dl Z d dl
mZ G dd� d�Zdd � Zed
krLe� dS dS ) � Nz/usr/local/CyberCP�DJANGO_SETTINGS_MODULEzCyberCP.settings)�ProcessUtilitiesc @ sd e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zedd d
��Z eddd��Z
d S )�FirewallUtilitiesc C sT t �� t jkst �� t jkr| dkrdS t �� t jks"t �� t jkr(| dkr(dS dS )Nr T� F)r � decideDistro�ubuntu�ubuntu20�centos�cent8)�res� r �0/usr/local/CyberCP/plogical/firewallUtilities.py� resFailed s
$$zFirewallUtilities.resFailedc
C s� z t �| �}|dkrtj�d| d t|� � W dS W dS ty> } ztj�d| d t|� � W Y d }~dS d }~w ty_ } ztj�d| d t|� d� W Y d }~dS d }~ww )Nr zFailed to apply rule: z Error #z Error: r )r � executioner�logging�CyberCPLogFileWriter� writeToFile�str�OSError�
ValueError)�commandr �msgr r r
� doCommand s
�
� � ��zFirewallUtilities.doCommandc C � d}d| d }d| d }d| d }d| d | d | d | d d }t �|� d }d
}d| d | d | d | d d }t �|� d }t �|� d S )
N�rule family="ipv4"�source address="�"�port protocol="�port="z8firewall-cmd --permanent --zone=public --add-rich-rule='� �accept'�rule family="ipv6"� �firewall-cmd --reloadr �r r ��proto�port� ipAddress�
ruleFamily�
sourceAddress� ruleProtocol�rulePortr r r r
�addRule. � (
(
zFirewallUtilities.addRulec C r )
Nr r r r r z;firewall-cmd --permanent --zone=public --remove-rich-rule='r r r! r" r# r r$ r% r r r
�
deleteRuleF r. z FirewallUtilities.deleteRulec
C s& zw| dkrud| }t �|� t�d|d� |dkr d}nd}d| d }d }t|d
��� }t|d �}|D ].}|�d �d
krP|�d�d
ksI|�d�rO|�|� q4q4|�d�d
kr]|�|� q4|�|� q4|�� d}t �|� t d� W d S W d S t
y� } zt dt |� � W Y d }~d S d }~ww )N�1z&semanage port -a -t ssh_port_t -p tcp �tcpz 0.0.0.0/0zPermitRootLogin yes
zPermitRootLogin no
zPort �
z/etc/ssh/sshd_config�r�w�PermitRootLogin����Yes�yes�Portzsystemctl restart sshd�1,None�0,) r �normalExecutionerr r- �open� readlines�find�
writelines�close�print�
BaseExceptionr ) �type�sshPort� rootLoginr � pathToSSH�datar �itemsr r r r
�saveSSHConfigs^ s<
�
�% ��z FirewallUtilities.saveSSHConfigsNc
C s@ z�t | d��� }|d kr d}d}tj�|�rnt�|� n|}tj�|�r&nt |d�}|�d� |�� d}zt |d��� }|D ] }|� |�dkrKd}q@W n Y |dkrst |d �} | �d
� | �d � | �|� | �d � | �� tj�
| �r~t� | � t d � W d S t
y� }
zt d
t|
� � W Y d }
~
d S d }
~
ww )Nr3 z
/root/.ssh�/root/.ssh/authorized_keysr4 z#Created by CyberPanel
r r6 r �az#Added by CyberPanel
r2 r: r; )r= �read�os�path�exists�mkdirr@ rA r> r? �split�removerB rC r ) �tempPathrO �key�sshDirrG �sshFile�
presenseCheckrH rI r r r r r
� addSSHKey� sL
��
��zFirewallUtilities.addSSHKeyc
C s� z@| � d�d }|d krd}n|}t|d��� }t|d�}|D ]}|�d�dkr0|�|�dkr0q |�|� q |�� td� W d S ty[ } ztd t|� � W Y d }~d S d }~ww )
Nr r rK r3 r4 zssh-rsar6 r: r; ) rR r= r> r? r@ rA rB rC r )rU rO �keyPartrG rH r rI r r r r
� deleteSSHKey� s"
��z FirewallUtilities.deleteSSHKey)N) �__name__�
__module__� __qualname__� staticmethodr r r- r/ rJ rY r[ r r r r
r s
* /r c C s t jdd�} | jddd� | jddd� | jdd d� | jd
d d� | jd d
d� | jddd� | jddd� | �� }|jdkrLt�|j|j|j � d S |jdkrf|j
s\t� |j � d S t� |j |j
� d S |jdkr�|j
svt�
|j� d S t�
|j|j
� d S d S )NzCyberPanel Installer)� description�functionz Specific a function to call!)�helpz
--tempPathz1Temporary path to file where PHP is storing data!z--type�Typez --sshPortzSSH Portz --rootLoginz
Root Loginz--key�Keyz--pathzPath to key file.rJ rY r[ )�argparse�ArgumentParser� add_argument�
parse_argsra r rJ rD rE rF rO rY rT r[ rU )�parser�argsr r r
�main� s(
�rk �__main__)rN �os.path�sys�djangorO �append�environ�
setdefault�setup� plogical.CyberCPLogFileWriterr r re �plogical.processUtilitiesr r rk r\ r r r r
�<module> s& C!
�