3 Y�j�2�@s�dddgZddljZddlZddlZddlZddlmZddlm Z ddl mZmZm Z mZmZmZmZmZddlmZdd lmZdd lmZGdd�de�ZGdd �d e �Zdd�Zddd�ZdS)�Service�service_reader�service_writer�N)�config)� u2b_if_py2)�PY2� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator� check_port�check_tcpudp�check_protocol� check_address)�log)�errors)� FirewallErrorcs�eZdZd d!d"dd#gfddgfdddifddgfd d$gfd dgfddgff Zdd gZdddd�Zddgddgdgdgddgddgdgdgd�Z�fdd�Zdd�Zdd�Z dd�Z �ZS)%r�version��short�description�ports�modules�destination� protocols�source_ports�includes�helpers�_�-N)rr�service�name�port�protocol�value�ipv4�ipv6r)rr!r"�modulerzsource-port�include�helpercsNtt|�j�d|_d|_d|_g|_g|_g|_i|_ g|_ g|_g|_dS)Nr) �superr�__init__rrrrrrrrrr)�self)� __class__��/usr/lib/python3.6/service.pyr*DszService.__init__cCshd|_d|_d|_|jdd�=|jdd�=|jdd�=|jj�|jdd�=|j dd�=|j dd�=dS)Nr)rrrrrrr�clearrrr)r+r-r-r.�cleanupQs zService.cleanupcCs�t|j�|_t|j�|_t|j�|_dd�|jD�|_dd�|jD�|_dd�|jj�D�|_dd�|jD�|_dd�|j D�|_ dd�|j D�|_ d d�|jD�|_d S)z� HACK. I haven't been able to make sax parser return strings encoded (because of python 2) instead of in unicode. Get rid of it once we throw out python 2 support.cSs g|]\}}t|�t|�f�qSr-)r)�.0�po�prr-r-r.� dsz*Service.encode_strings..cSsg|]}t|��qSr-)r)r1�mr-r-r.r4escSsi|]\}}t|�t|��qSr-)r)r1�k�vr-r-r.� fsz*Service.encode_strings..cSsg|]}t|��qSr-)r)r1r3r-r-r.r4gscSs g|]\}}t|�t|�f�qSr-)r)r1r2r3r-r-r.r4hscSsg|]}t|��qSr-)r)r1�sr-r-r.r4jscSsg|]}t|��qSr-)r)r1r9r-r-r.r4ksN)rrrrrrr�itemsrrrr)r+r-r-r.�encode_strings]szService.encode_stringscCs:|dkrJx>|D]6}|ddkr8t|d�t|d�qt|d�qWn�|dkrjx�|D]}t|�qXWn�|dkr�x�|D]}t|d�t|d�qxWn�|dkr�x�|D]*}|dkr�ttjd |��t|||�q�Wn^|dk�r6xR|D]J}|jd��r|jdd�}d |k�r|jd d�}t |�dkr�ttj |��q�WdS)Nrrr�rrrr$r%z'%s' not in {'ipv4'|'ipv6'}r� nf_conntrack_rr�)r$r%)rrr rrZINVALID_DESTINATIONr� startswith�replace�lenZINVALID_MODULE)r+r�itemZ all_configr!�protorr&r-r-r.� _check_configms8 zService._check_config)rr)rr)rr)rr)rr)�__name__� __module__�__qualname__ZIMPORT_EXPORT_STRUCTUREZADDITIONAL_ALNUM_CHARSZPARSER_REQUIRED_ELEMENT_ATTRSZPARSER_OPTIONAL_ELEMENT_ATTRSr*r0r;rD� __classcell__r-r-)r,r.r&s4 c@seZdZdd�ZdS)�service_ContentHandlercCs0tj|||�|jj||�|dkrTd|krxRdD]J}||k�r�t|||�||jjk�r&tjd|�n|||jj|<�q�Wn�|dk�r�|d}|jd��r~|jdd�}d|k�r~|jdd�}||jjk�r�|jjj |�ntjd|�n�|dk�r�|d|jjk�r�|jjj |d�ntjd|d�n@|dk�r,|d|jjk�r|jjj |d�ntjd|d�dS)Nrr z'Ignoring deprecated attribute name='%s'rrrr!rr"z#Port '%s/%s' already set, ignoring.z$Protocol '%s' already set, ignoring.r#zsource-portz)SourcePort '%s/%s' already set, ignoring.rr$r%z2Destination address for '%s' already set, ignoringr&r=rrz"Module '%s' already set, ignoring.r'z#Include '%s' already set, ignoring.r(z"Helper '%s' already set, ignoring.)r$r%)r �startElementrBZparser_check_element_attrsrZwarningrrrr�appendr rrrrr?r@rrr)r+r �attrs�entry�xr&r-r-r.rJ�s� z#service_ContentHandler.startElementN)rErFrGrJr-r-r-r.rI�srIc Cst�}|jd�s ttjd|��|dd �|_|j|j�||_||_|j t j�rVdnd|_|j|_ t|�}tj�}|j|�d||f}t|d��b}tjd�}|j|�y|j|�Wn8tjk r�}zttjd|j��WYdd}~XnXWdQRX~~t�r|j�|S) Nz.xmlz'%s' is missing .xml suffix�FTz%s/%s�rbznot a valid service file: %s��)r�endswithrrZINVALID_NAMEr Z check_name�filename�pathr?r� ETC_FIREWALLDZbuiltin�defaultrI�saxZmake_parserZsetContentHandler�openZInputSourceZ setByteStream�parseZSAXParseExceptionZINVALID_SERVICEZgetExceptionrr;) rSrTr�handler�parserr �f�source�msgr-r-r.r�s8 (cCsr|r|n|j}|jr$d||jf}nd||jf}tjj|�r�ytj|d|�Wn0tk r�}ztj d||�WYdd}~XnXtjj |�}|jtj �r�tjj|�r�tjjtj �s�tjtj d�tj|d�tj|ddd�}t|�}|j�i}|j�r|jd k�r|j|d <|jd|�|jd�|j�rt|jd k�rt|jd �|jdi�|j|j�|jd�|jd�|j�r�|jd k�r�|jd �|jdi�|j|j�|jd�|jd�x>|jD]4} |jd �|jd| d| dd��|jd��q�Wx4|jD]*} |jd �|jdd| i�|jd��qWx>|jD]4} |jd �|jd| d| dd��|jd��qs (mQ