3
��g�5 �
@ s~ d dl Zd dlZd dlZd dlZd dlmZ d dlmZ d dl m
Z
m Z m Z ddddd d
d d d
ddddg
Z
G dd� de�ZdS )� N)�config)�log)�b2u�u2b�PY2� DefaultZone� MinimalMark�
CleanupOnExit�CleanupModulesOnExit�Lockdown�
IPv6_rpfilter�IndividualCalls� LogDenied�AutomaticHelpers�FirewallBackend�FlushAllOnReload� RFC3964_IPv4�AllowZoneDriftingc @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dS )�firewalld_confc C s i | _ g | _|| _| j� d S )N)�_config�_deleted�filename�clear)�selfr � r �$/usr/lib/python3.6/firewalld_conf.py�__init__& s zfirewalld_conf.__init__c C s i | _ g | _d S )N)r r )r r r r r , s zfirewalld_conf.clearc C s | j j� g | _d S )N)r r r )r r r r �cleanup0 s
zfirewalld_conf.cleanupc C s | j j|j� �S )N)r �get�strip)r �keyr r r r 4 s zfirewalld_conf.getc C s8 t |j� �}t |j� �| j|< || jkr4| jj|� d S )N)r r r r �remove)r r �valueZ_keyr r r �set7 s
zfirewalld_conf.setc C sH d}x2| j j� D ]$\}}|r$|d7 }|d||f 7 }qW trDt|�S |S )N� �
z%s=%s)r �itemsr r )r �sr r" r r r �__str__= s zfirewalld_conf.__str__c C s� | j � yt| jd�}W �n8 tk
�rR } �ztjd| j|� | jdtj� | jdt tj
�� | jdtj rpdnd� | jdtj r�dnd� | jd tj
r�dnd� | jd
tjr�dnd� | jd tjr�dnd� | jd tj� | jd
tj� | jdtj� | jdtj�r
dnd� | jdtj�r"dnd� | jdtj�r:dnd� � W Y d d }~X nX � x�|D ]�}|�shP |j� }t|�dk �s\|d d.k�r��q\dd� |jd�D �}t|�dk�r�tjd|j� � �q\nr|d tk�r�tjd|j� � �q\nN|d d k�rtjd |j� � �q\n*| jj|d �d k �r:tjd |j� � �q\|d | j|d < �q\W |j � | jd��s�tjd tj� | jdt tj�� | jd�}y t |� W nP t t fk
�r� |d k �r�tj d |�r�|nd tj
� | jdt tj
�� Y nX | jd�}| �s|j!� d/k�rJ|d k �r2tj d#|�r(|nd tj � | jdtj �rDdnd� | jd�}| �sj|j!� d0k�r�|d k �r�tj d$|�r�|nd tj � | jdtj �r�dnd� | jd �}| �s�|j!� d1k�r|d k �r�tj d%|�r�|nd tj
� | jd tj
�r�dnd� | jd
�}| �s"|j!� d2k�r^|d k �rFtj d&|�r<|nd tj� | jd
tj�rXdnd� | jd �}| �s~|j!� d3k�r�|d k �r�tj d'|�r�|nd tj� | jd tj�r�dnd� | jd �}| �s�|tj"k�r|d k �r�tj d(|tj� | jd t tj�� | jd
�}| �s&|j!� tj#k�r\|d k �rJtj d)|�r@|nd tj� | jd
t tj�� | jd�}| �s~|j!� tj$k�r�|d k �r�tj d*|�r�|nd tj� | jdt tj�� | jd�}| �s�|j!� d4k�r
|d k �r�tj d+|�r�|nd tj� | jdt tj�� | jd�}| �s*|j!� d5k�r`|d k �rNtj d,|�rD|nd tj� | jdt tj�� | jd�}| �s�|j!� d6k�r�|d k �r�tj d-|�r�|nd tj� | jdt tj�� d S )7N�rzFailed to load '%s': %sr r r �yes�nor
r r r
r r r r r r � r �#�;c S s g | ] }|j � �qS r )r )�.0�xr r r �
<listcomp>b s z'firewalld_conf.read.<locals>.<listcomp>�=� z Invalid option definition: '%s'zInvalid option: '%s'r$ zMissing value: '%s'z!Duplicate option definition: '%s'z0DefaultZone is not set, using default value '%s'z7MinimalMark '%s' is not valid, using default value '%d'�false�truez7CleanupOnExit '%s' is not valid, using default value %sz>CleanupModulesOnExit '%s' is not valid, using default value %sz2Lockdown '%s' is not valid, using default value %sz7IPv6_rpfilter '%s' is not valid, using default value %sz9IndividualCalls '%s' is not valid, using default value %sz3LogDenied '%s' is invalid, using default value '%s'z:AutomaticHelpers '%s' is not valid, using default value %sz9FirewallBackend '%s' is not valid, using default value %sz:FlushAllOnReload '%s' is not valid, using default value %sz6RFC3964_IPv4 '%s' is not valid, using default value %sz;AllowZoneDrifting '%s' is not valid, using default value %s)r- r. )r+ r4 r* r5 )r+ r4 r* r5 )r* r5 r+ r4 )r* r5 r+ r4 )r* r5 r+ r4 )r* r5 r+ r4 )r* r5 r+ r4 )r* r5 r+ r4 )%r �openr � Exceptionr �errorr# r Z
FALLBACK_ZONE�strZFALLBACK_MINIMAL_MARKZFALLBACK_CLEANUP_ON_EXITZ FALLBACK_CLEANUP_MODULES_ON_EXITZFALLBACK_LOCKDOWNZFALLBACK_IPV6_RPFILTERZFALLBACK_INDIVIDUAL_CALLSZFALLBACK_LOG_DENIEDZFALLBACK_AUTOMATIC_HELPERSZFALLBACK_FIREWALL_BACKENDZ FALLBACK_FLUSH_ALL_ON_RELOADZFALLBACK_RFC3964_IPV4Z FALLBACK_ALLOW_ZONE_DRIFTINGr �len�split�
valid_keysr r �close�int�
ValueError� TypeErrorZwarning�lowerZLOG_DENIED_VALUESZAUTOMATIC_HELPERS_VALUESZFIREWALL_BACKEND_VALUES)r �f�msg�lineZpairr" r r r �readF s
zfirewalld_conf.readc : C s� t | j�dk rd S g }tjjtj�s2tjtjd� y.tj ddtjj
| j � tjj | j �dd�}W n2 t
k
r� } ztjd| � � W Y d d }~X nX d}d}ytj| j dd d
�}W nP t
k
�r } z0tjj| j �r�tjd | j |f � � nd }W Y d d }~X �n6X �x0|D �]&}|�sP |jd �}t |�dk �rH|�s2|jd � d
}n�|d dk�rpd}|j|� |jd � n�|jd�}t |�dk�r�d}|j|d � �q |d j� } |d j� }
| |k�r.| | jk�r�| j| |
k�r�d}|jd| | j| f � d
}n$| | jk�rd
}nd}|j|d � |j| � nd
}�q W t | j�dk�r�x^| jj� D ]P\} }
| |k�rj�qT| dk�rx�qT|�s�|jd � d
}|jd| |
f � d
}�qTW |�r�|j� |j� |�s�tj|j� d S tjj| j ��r@ytj | j d| j � W nB t
k
�r> } z$tj|j� t d| j |f ��W Y d d }~X nX ytj |j| j � W nB t
k
�r� } z$tj|j� t d| j |f ��W Y d d }~X nX tj | j d� d S )Nr, i� Zwtz%s.F)�mode�prefix�dir�deletez!Failed to open temporary file: %sZrtzUTF-8)rF �encodingzFailed to open '%s': %sr% Tr r- r2 r3 z%s=%s
r r z%s.oldzBackup of '%s' failed: %szFailed to create '%s': %si� )r r ) r: r �os�path�existsr Z
ETC_FIREWALLD�mkdir�tempfileZNamedTemporaryFile�basenamer �dirnamer7 r r8 �ior6 r �writer; r �appendr& r= r! �name�shutilZcopy2�IOErrorZmove�chmod) r �doneZ temp_filerC Zmodified�emptyrB rD �pr r" r r r rS � s�
$ $zfirewalld_conf.writeN) �__name__�
__module__� __qualname__r r r r r# r( rE rS r r r r r % s r )Zos.pathrK rR rO rV Zfirewallr Zfirewall.core.loggerr Zfirewall.functionsr r r r< �objectr r r r r �<module> s