3
��g�
� @ sV d gZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z G dd � d e
�Z dS ) �FirewallPolicies� )�config)�log)�LockdownWhitelist)�errors)�
FirewallErrorc @ sD e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dS )r c C s d| _ ttj�| _d S )NF)� _lockdownr r ZLOCKDOWN_WHITELIST�lockdown_whitelist)�self� r �!/usr/lib/python3.6/fw_policies.py�__init__ s zFirewallPolicies.__init__c C s d| j | j| jf S )Nz
%s(%r, %r))� __class__r r )r
r r r �__repr__# s
zFirewallPolicies.__repr__c C s d| _ | jj� d S )NF)r r �cleanup)r
r r r r ' s zFirewallPolicies.cleanupc C s� |dkr2t jd| � | jj|�r�t jd� dS n�|dkrdt jd| � | jj|�r�t jd� dS nb|dkr�t jd | � | jj|�r�t jd
� dS n0|d kr�t jd | � | jj|�r�t jd
� dS dS )N�contextz#Doing access check for context "%s"zcontext matches.TZuidz Doing access check for uid %dz uid matches.�userz Doing access check for user "%s"z
user matches.Zcommandz#Doing access check for command "%s"zcommand matches.F)r Zdebug2r Z
match_contextZdebug3Z match_uidZ
match_userZ
match_command)r
�key�valuer r r � access_check- s*
z FirewallPolicies.access_checkc C s | j rttjd��d| _ d S )Nzenable_lockdown()T)r r r ZALREADY_ENABLED)r
r r r �enable_lockdownD s z FirewallPolicies.enable_lockdownc C s | j sttjd��d| _ d S )Nzdisable_lockdown()F)r r r Z NOT_ENABLED)r
r r r �disable_lockdownI s z!FirewallPolicies.disable_lockdownc C s | j S )N)r )r
r r r �query_lockdownN s z FirewallPolicies.query_lockdownN)
�__name__�
__module__� __qualname__r
r r r r r r r r r r r s N) �__all__Zfirewallr Zfirewall.core.loggerr Z#firewall.core.io.lockdown_whitelistr r Zfirewall.errorsr �objectr r r r r �<module> s