3 Y�j� �@s�dddgZddljZddlZddlZddlZddlmZddlm Z ddl mZmZm Z mZmZmZddlmZdd lmZdd lmZGdd�de�ZGdd �d e �Zdd�Zddd�ZdS)�Helper� helper_reader� helper_writer�N)�config)� u2b_if_py2)�PY2� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator� check_port�check_tcpudp)�log)�errors)� FirewallErrorcs�eZdZddddddd gffZdZd d gZdddgd�Zd ddgddgd�Z�fdd�Zdd�Z dd�Z dd�Zdd�Z�Z S)!r�version��short�description�family�module�portsz(sssssa(ss))�-�.N)rr�helper�name�port�protocol)rrcs6tt|�j�d|_d|_d|_d|_d|_g|_dS)Nr) �superr�__init__rrrrrr)�self)� __class__��/usr/lib/python3.6/helper.pyr;szHelper.__init__cCs.d|_d|_d|_d|_d|_|jdd�=dS)Nr)rrrrrr)rr!r!r"�cleanupDszHelper.cleanupcCsRt|j�|_t|j�|_t|j�|_t|j�|_t|j�|_dd�|jD�|_dS)z� HACK. I haven't been able to make sax parser return strings encoded (because of python 2) instead of in unicode. Get rid of it once we throw out python 2 support.cSs g|]\}}t|�t|�f�qSr!)r)�.0ZpoZprr!r!r"� Usz)Helper.encode_strings..N)rrrrrrr)rr!r!r"�encode_stringsLszHelper.encode_stringscCs(ddg}||kr$ttjd||f��dS)NZipv4Zipv6z'%s' not in '%s')rrZINVALID_IPV)rZipvZipvsr!r!r"� check_ipvWszHelper.check_ipvcCsz|dkr0xl|D]}t|d�t|d�qWnF|dkrv|jd�sRttjd|��t|jdd��dkrvttjd|��dS) Nrr�r� nf_conntrack_z('%s' does not start with 'nf_conntrack_'rzModule name '%s' too short)rr� startswithrr�INVALID_MODULE�len�replace)rr�itemZ all_configrr!r!r"� _check_config]s zHelper._check_config)rr)rr)rr)rr)rr)rr)�__name__� __module__�__qualname__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZPARSER_REQUIRED_ELEMENT_ATTRSZPARSER_OPTIONAL_ELEMENT_ATTRSrr#r&r'r/� __classcell__r!r!)r r"r&s$ c@seZdZdd�ZdS)�helper_ContentHandlercCs>tj|||�|jj||�|dkr�d|kr8|d|j_d|kr\|jj|d�|d|j_d|kr�|djd�s�tt j d|d��t|djdd��dkr�tt j d |d��|d|j_ nz|d kr�np|dkr�nf|dk�r:t|d�t|d �|d|d f}||jjk�r$|jjj|�ntjd|d|d �dS)Nrrrrr)z('%s' does not start with 'nf_conntrack_'rr(zModule name '%s' too shortrrrrz#Port '%s/%s' already set, ignoring.)r �startElementr.Zparser_check_element_attrsrr'rr*rrr+r,r-rrrr�appendr Zwarning)rr�attrs�entryr!r!r"r5ns> z"helper_ContentHandler.startElementN)r0r1r2r5r!r!r!r"r4msr4c Cst�}|jd�s ttjd|��|dd �|_|j|j�||_||_|j t j�rVdnd|_|j|_ t|�}tj�}|j|�d||f}t|d��b}tjd�}|j|�y|j|�Wn8tjk r�}zttjd|j��WYdd}~XnXWdQRX~~t�r|j�|S) Nz.xmlz'%s' is missing .xml suffix�FTz%s/%s�rbznot a valid helper file: %s��)r�endswithrrZINVALID_NAMErZ check_name�filename�pathr*r� ETC_FIREWALLDZbuiltin�defaultr4�saxZmake_parserZsetContentHandler�openZInputSourceZ setByteStream�parseZSAXParseExceptionZINVALID_HELPERZgetExceptionrr&) r=r>r�handler�parserr�f�source�msgr!r!r"r�s8 (c CsP|r|n|j}|jr$d||jf}nd||jf}tjj|�r�ytj|d|�Wn0tk r�}ztj d||�WYdd}~XnXtjj |�}|jtj �r�tjj|�r�tjjtj �s�tjtj d�tj|d�tj|ddd�}t|�}|j�i}|j|d <|j�r|jd k�r|j|d<|j�r<|jd k�r<|j|d<|jd |�|jd�|j�r�|jd k�r�|jd�|jdi�|j|j�|jd�|jd�|j�r�|jd k�r�|jd�|jdi�|j|j�|jd�|jd�x>|jD]4} |jd�|jd| d| dd��|jd��q�W|jd �|jd�|j�|j�~dS)Nz%s/%sz %s/%s.xmlz%s.oldzBackup of file '%s' failed: %si�ZwtzUTF-8)�mode�encodingrrrrr� z rrrrr()rr) r>r=r�os�exists�shutilZcopy2� Exceptionr �error�dirnamer*rr?�mkdir�iorBr Z startDocumentrrrr5ZignorableWhitespacerZ charactersZ endElementrrZ simpleElementZendDocument�close) rr>�_pathrrH�dirpathrFrDr7rr!r!r"r�s\ )N)�__all__Zxml.saxrArLrSrNZfirewallrZfirewall.functionsrZfirewall.core.io.io_objectrrr r rrZfirewall.core.loggerr rZfirewall.errorsrrr4rrr!r!r!r"�s G#