3 Y�j�5� @s~ddlZddlZddlZddlZddlmZddlmZddl m Z mZmZddddd d ddd ddddg Z Gdd�de�ZdS)�N)�config)�log)�b2u�u2b�PY2�DefaultZone�MinimalMark� CleanupOnExit�CleanupModulesOnExit�Lockdown� IPv6_rpfilter�IndividualCalls� LogDenied�AutomaticHelpers�FirewallBackend�FlushAllOnReload�RFC3964_IPv4�AllowZoneDriftingc@sLeZdZdd�Zdd�Zdd�Zdd�Zd d �Zdd�Zd d�Z dd�Z dS)�firewalld_confcCsi|_g|_||_|j�dS)N)�_config�_deleted�filename�clear)�selfr�r�$/usr/lib/python3.6/firewalld_conf.py�__init__&szfirewalld_conf.__init__cCsi|_g|_dS)N)rr)rrrrr,szfirewalld_conf.clearcCs|jj�g|_dS)N)rrr)rrrr�cleanup0s zfirewalld_conf.cleanupcCs|jj|j��S)N)r�get�strip)r�keyrrrr4szfirewalld_conf.getcCs8t|j��}t|j��|j|<||jkr4|jj|�dS)N)rrrr�remove)rr �valueZ_keyrrr�set7s zfirewalld_conf.setcCsHd}x2|jj�D]$\}}|r$|d7}|d||f7}qWtrDt|�S|S)N�� z%s=%s)r�itemsrr)r�sr r"rrr�__str__=szfirewalld_conf.__str__cCs�|j�yt|jd�}W�n8tk �rR}�ztjd|j|�|jdtj�|jdt tj ��|jdtjrpdnd�|jdtjr�dnd�|jd tj r�dnd�|jd tjr�dnd�|jdtjr�dnd�|jdtj�|jd tj�|jdtj�|jdtj�r dnd�|jdtj�r"dnd�|jdtj�r:dnd��WYdd}~XnX�x�|D]�}|�shP|j�}t|�dk�s\|dd.k�r��q\dd�|jd�D�}t|�dk�r�tjd|j��q\nr|dtk�r�tjd|j��q\nN|ddk�rtjd|j��q\n*|jj|d�dk �r:tjd|j��q\|d|j|d<�q\W|j�|jd��s�tjdtj�|jdt tj��|jd�}yt|�WnPttfk �r�|dk �r�tj d |�r�|ndtj �|jdt tj ��YnX|jd�}|�s|j!�d/k�rJ|dk �r2tj d#|�r(|ndtj�|jdtj�rDdnd�|jd�}|�sj|j!�d0k�r�|dk �r�tj d$|�r�|ndtj�|jdtj�r�dnd�|jd �}|�s�|j!�d1k�r|dk �r�tj d%|�r�|ndtj �|jd tj �r�dnd�|jd �}|�s"|j!�d2k�r^|dk �rFtj d&|�r<|ndtj�|jd tj�rXdnd�|jd�}|�s~|j!�d3k�r�|dk �r�tj d'|�r�|ndtj�|jdtj�r�dnd�|jd�}|�s�|tj"k�r|dk �r�tj d(|tj�|jdt tj��|jd �}|�s&|j!�tj#k�r\|dk �rJtj d)|�r@|ndtj�|jd t tj��|jd�}|�s~|j!�tj$k�r�|dk �r�tj d*|�r�|ndtj�|jdt tj��|jd�}|�s�|j!�d4k�r |dk �r�tj d+|�r�|ndtj�|jdt tj��|jd�}|�s*|j!�d5k�r`|dk �rNtj d,|�rD|ndtj�|jdt tj��|jd�}|�s�|j!�d6k�r�|dk �r�tj d-|�r�|ndtj�|jdt tj��dS)7N�rzFailed to load '%s': %srrr �yes�nor rrr rrrrrr�r�#�;cSsg|]}|j��qSr)r)�.0�xrrr� bsz'firewalld_conf.read..�=�zInvalid option definition: '%s'zInvalid option: '%s'r$zMissing value: '%s'z!Duplicate option definition: '%s'z0DefaultZone is not set, using default value '%s'z7MinimalMark '%s' is not valid, using default value '%d'�false�truez7CleanupOnExit '%s' is not valid, using default value %sz>CleanupModulesOnExit '%s' is not valid, using default value %sz2Lockdown '%s' is not valid, using default value %sz7IPv6_rpfilter '%s' is not valid, using default value %sz9IndividualCalls '%s' is not valid, using default value %sz3LogDenied '%s' is invalid, using default value '%s'z:AutomaticHelpers '%s' is not valid, using default value %sz9FirewallBackend '%s' is not valid, using default value %sz:FlushAllOnReload '%s' is not valid, using default value %sz6RFC3964_IPv4 '%s' is not valid, using default value %sz;AllowZoneDrifting '%s' is not valid, using default value %s)r-r.)r+r4r*r5)r+r4r*r5)r*r5r+r4)r*r5r+r4)r*r5r+r4)r*r5r+r4)r*r5r+r4)r*r5r+r4)%r�openr� Exceptionr�errorr#rZ FALLBACK_ZONE�strZFALLBACK_MINIMAL_MARKZFALLBACK_CLEANUP_ON_EXITZ FALLBACK_CLEANUP_MODULES_ON_EXITZFALLBACK_LOCKDOWNZFALLBACK_IPV6_RPFILTERZFALLBACK_INDIVIDUAL_CALLSZFALLBACK_LOG_DENIEDZFALLBACK_AUTOMATIC_HELPERSZFALLBACK_FIREWALL_BACKENDZFALLBACK_FLUSH_ALL_ON_RELOADZFALLBACK_RFC3964_IPV4ZFALLBACK_ALLOW_ZONE_DRIFTINGr�len�split� valid_keysrr�close�int� ValueError� TypeErrorZwarning�lowerZLOG_DENIED_VALUESZAUTOMATIC_HELPERS_VALUESZFIREWALL_BACKEND_VALUES)r�f�msg�lineZpairr"rrr�readFs zfirewalld_conf.readc:Cs�t|j�dkrdSg}tjjtj�s2tjtjd�y.tj ddtjj |j�tjj|j�dd�}Wn2t k r�}ztjd|��WYdd}~XnXd}d}ytj|jdd d �}WnPt k �r}z0tjj|j�r�tjd|j|f��nd}WYdd}~X�n6X�x0|D�]&}|�sP|jd�}t|�dk�rH|�s2|jd�d }n�|ddk�rpd}|j|�|jd�n�|jd�}t|�dk�r�d}|j|d��q|dj�} |dj�} | |k�r.| |jk�r�|j| | k�r�d}|jd| |j| f�d }n$| |jk�rd }nd}|j|d�|j| �nd }�qWt|j�dk�r�x^|jj�D]P\} } | |k�rj�qT| dk�rx�qT|�s�|jd�d }|jd| | f�d }�qTW|�r�|j�|j�|�s�tj|j�dStjj|j��r@ytj|jd|j�WnBt k �r>}z$tj|j�td|j|f��WYdd}~XnXytj|j|j�WnBt k �r�}z$tj|j�td|j|f��WYdd}~XnXtj|jd�dS)Nr,i�Zwtz%s.F)�mode�prefix�dir�deletez!Failed to open temporary file: %sZrtzUTF-8)rF�encodingzFailed to open '%s': %sr%Trr-r2r3z%s=%s rrz%s.oldzBackup of '%s' failed: %szFailed to create '%s': %si�)rr) r:r�os�path�existsrZ ETC_FIREWALLD�mkdir�tempfileZNamedTemporaryFile�basenamer�dirnamer7rr8�ior6r�writer;r�appendr&r=r!�name�shutilZcopy2�IOErrorZmove�chmod)r�doneZ temp_filerCZmodified�emptyrBrD�pr r"rrrrS�s� $$zfirewalld_conf.writeN)�__name__� __module__�__qualname__rrrrr#r(rErSrrrrr%s r)Zos.pathrKrRrOrVZfirewallrZfirewall.core.loggerrZfirewall.functionsrrrr<�objectrrrrr�s