3
YjzI @ s d dl mZ d dlZeejd< d dlZd dlZd dlZd dlZd dl m
Z
d dl m Z m
Z
mZ d dlmZ d dlmZmZmZmZ d dlmZ d d lmZmZmZ d d
l m Z d d l m Z G d d
d
ejj j Z!dS ) )GObjectNZgobject)config)dbus_to_python%dbus_introspection_prepare_properties!dbus_introspection_add_properties)IPSet) IPSET_TYPESnormalize_ipset_entry check_entry_overlaps_existing check_for_overlapping_entries)log)handle_exceptionsdbus_handle_exceptionsdbus_service_method)errors)
FirewallErrorc s e Zd ZdZdZejjZe fddZ
e dd Z e dd Z
e d d
Zeejd d d
e dWddZeejddd
e dXddZejjjejjeejdde dYddZejjejdddd Zejjjejjeejdd e dZ fd d Z eejj e j d e d[d d!Z eejj e j de d\d"d#Z!eejj e d]d$d%Z"ejjejj dde d&d' Z#eejj e d^d(d)Z$ejjejj dde d*d+ Z%eejj dde d_d,d-Z&ejjejj dde d.d/ Z'eejj dd e d`d0d1Z(eejj dde dad2d3Z)eejj dd e dbd4d5Z*eejj dde dcd6d7Z+eejj dd e ddd8d9Z,eejj dde ded:d;Z-eejj dd e dfdd?Z/eejj d@d e dhdAdBZ0eejj d@de didCdDZ1eejj d de djdEdFZ2eejj dde dkdGdHZ3eejj d dId
e dldJdKZ4eejj dLd e dmdMdNZ5eejj dLde dndOdPZ6eejj dde dodQdRZ7eejj dde dpdSdTZ8eejj ddId
e dqdUdVZ9 Z:S )rFirewallDConfigIPSetzFirewallD main classTc s\ t t| j|| || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j d S )Nr zconfig.ipset.%d)
superr __init__parentr objitem_idbusnamepath _log_prefixr dbusDBUS_INTERFACE_CONFIG_IPSET)selfr ZconfZipsetr argskwargs) __class__ "/usr/lib/python3.6/config_ipset.pyr ; s
z FirewallDConfigIPSet.__init__c C s d S )Nr" )r r" r" r# __del__H s z FirewallDConfigIPSet.__del__c C s | j d S )N)Zremove_from_connection)r r" r" r#
unregisterL s z FirewallDConfigIPSet.unregisterc C s |dkrt j| jjS |dkr,t j| jjS |dkrBt j| jjS |dkrXt j| jjS |dkrnt j| jjS t j j
d| d S )Nnamefilenamer defaultbuiltinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r Stringr r& r' r ZBooleanr( r)
exceptions
DBusException)r
property_namer" r" r#
_get_propertyT s z"FirewallDConfigIPSet._get_propertyZssv) in_signature
out_signatureNc C sL t |t}t |t}tjd| j|| |tjjkrBtjj d| | j
|S )Nz%s.Get('%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r strr debug1r r r r r+ r, r. )r interface_namer- senderr" r" r# Gete s
zFirewallDConfigIPSet.Getsza{sv}c C sd t |t}tjd| j| |tjjkr6tjj d| i }xd
D ]}| j
|||< q@W tj |dd S ) Nz%s.GetAll('%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existr& r' r r( r) Zsv) signature)r& r' r r( r) ) r r2 r r3 r r r r r+ r, r. Z
Dictionary)r r4 r5 retxr" r" r# GetAllv s
zFirewallDConfigIPSet.GetAllZssv)r0 c C sl t |t}t |t}t |}tjd| j||| | jj| |tjj krXtj
j d| tj
j d| d S )Nz%s.Set('%s', '%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existzGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r2 r r3 r r accessCheckr r r r+ r, )r r4 r- Z new_valuer5 r" r" r# Set s
zFirewallDConfigIPSet.Setzsa{sv}as)r8 c C s2 t |t}t |}t |}tjd| j||| d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r2 r r3 r )r r4 Zchanged_propertiesZinvalidated_propertiesr" r" r# PropertiesChanged s
z&FirewallDConfigIPSet.PropertiesChanged)r1 c s8 t jd| j tt| j| j| jj }t | |t
j j S )Nz%s.Introspect())
r Zdebug2r r r
Introspectr r Zget_busr r r r )r r5 data)r! r" r# r? s
z FirewallDConfigIPSet.Introspectc C s t jd| j | jj| jS )z get settings for ipset
z%s.getSettings())r r3 r r Zget_ipset_configr )r r5 r" r" r# getSettings s z FirewallDConfigIPSet.getSettingsc C sF t |}tjd| j | jj| | jj| j|| _| j | jj
dS )z"update settings for ipset
z%s.update('...')N) r r r3 r r r< r Zset_ipset_configr Updatedr& )r settingsr5 r" r" r# update s
zFirewallDConfigIPSet.updatec C s< t jd| j | jj| | jj| j| _| j| jj dS )z0load default settings for builtin ipset
z%s.loadDefaults()N)
r r3 r r r< r Zload_ipset_defaultsr rB r& )r r5 r" r" r# loadDefaults s z!FirewallDConfigIPSet.loadDefaultsc C s t jd| j|f d S )Nz%s.Updated('%s'))r r3 r )r r& r" r" r# rB s z FirewallDConfigIPSet.Updatedc C s: t jd| j | jj| | jj| j | jj| j dS )zremove ipset
z %s.remove()N) r r3 r r r< r Z remove_ipsetr Z removeIPSet)r r5 r" r" r# remove s zFirewallDConfigIPSet.removec C s t jd| j|f d S )Nz%s.Removed('%s'))r r3 r )r r& r" r" r# Removed s z FirewallDConfigIPSet.Removedc C sF t |t}tjd| j| | jj| | jj| j || _ | j
| dS )zrename ipset
z%s.rename('%s')N) r r2 r r3 r r r< r Z rename_ipsetr Renamed)r r& r5 r" r" r# rename s
zFirewallDConfigIPSet.renamec C s t jd| j|f d S )Nz%s.Renamed('%s'))r r3 r )r r& r" r" r# rH s z FirewallDConfigIPSet.Renamedc C s t jd| j | j d S )Nz%s.getVersion()r )r r3 r rA )r r5 r" r" r#
getVersion s z FirewallDConfigIPSet.getVersionc C sH t |t}tjd| j| | jj| t| j }||d< | j | d S )Nz%s.setVersion('%s')r )
r r2 r r3 r r r< listrA rD )r versionr5 rC r" r" r#
setVersion s
z FirewallDConfigIPSet.setVersionc C s t jd| j | j d S )Nz
%s.getShort()r )r r3 r rA )r r5 r" r" r# getShort s z FirewallDConfigIPSet.getShortc C sH t |t}tjd| j| | jj| t| j }||d< | j | d S )Nz%s.setShort('%s')r )
r r2 r r3 r r r< rK rA rD )r Zshortr5 rC r" r" r# setShort s
z FirewallDConfigIPSet.setShortc C s t jd| j | j d S )Nz%s.getDescription() )r r3 r rA )r r5 r" r" r# getDescription( s z#FirewallDConfigIPSet.getDescriptionc C sH t |t}tjd| j| | jj| t| j }||d< | j | d S )Nz%s.setDescription('%s')rP )
r r2 r r3 r r r< rK rA rD )r descriptionr5 rC r" r" r# setDescription/ s
z#FirewallDConfigIPSet.setDescriptionc C s t jd| j | j d S )Nz %s.getType() )r r3 r rA )r r5 r" r" r# getType= s z FirewallDConfigIPSet.getTypec C s\ t |t}tjd| j| | jj| |tkr:tt j
|t | j }||d< | j
| d S )Nz%s.setType('%s')rT )r r2 r r3 r r r< r r r Z INVALID_TYPErK rA rD )r Z
ipset_typer5 rC r" r" r# setTypeD s
z FirewallDConfigIPSet.setTypeza{ss}c C s t jd| j | j d S )Nz%s.getOptions() )r r3 r rA )r r5 r" r" r#
getOptionsS s z FirewallDConfigIPSet.getOptionsc C sL t |t}tjd| jt| | jj| t| j }||d< | j
| d S )Nz%s.setOptions('[%s]')rW ) r dictr r3 r reprr r< rK rA rD )r Zoptionsr5 rC r" r" r#
setOptionsZ s
z FirewallDConfigIPSet.setOptionsc C s t |t}t |t}tjd| j|| | jj| t| j }||d krn|d | |krnt t
j d||f ||d |< | j | d S )Nz%s.addOption('%s', '%s')rW z
'%s': '%s')
r r2 r r3 r r r< rK rA r r ALREADY_ENABLEDrD )r keyvaluer5 rC r" r" r# addOptionf s
z FirewallDConfigIPSet.addOptionc C sb t |t}tjd| j| | jj| t| j }||d krJt t
j ||d |= | j | d S )Nz%s.removeOption('%s')rW )
r r2 r r3 r r r< rK rA r r NOT_ENABLEDrD )r r] r5 rC r" r" r# removeOptionu s
z!FirewallDConfigIPSet.removeOptionbc C sN t |t}t |t}tjd| j|| t| j }||d koL|d | |kS )Nz%s.queryOption('%s', '%s')rW )r r2 r r3 r rK rA )r r] r^ r5 rC r" r" r# queryOption s
z FirewallDConfigIPSet.queryOptionasc C s t jd| j | j d S )Nz%s.getEntries() )r r3 r rA )r r5 r" r" r#
getEntries s z FirewallDConfigIPSet.getEntriesc C s| t |t}t| tjd| jdj| | jj| t| j }d|d krf|d d dkrft
t j ||d< | j
| d S )Nz%s.setEntries('[%s]'),timeoutrW 0re )r rK r r r3 r joinr r< rA r r IPSET_WITH_TIMEOUTrD )r Zentriesr5 rC r" r" r#
setEntries s
z FirewallDConfigIPSet.setEntriesc C s t |t}t|}tjd| j| | jj| t| j }d|d kr`|d d dkr`t
t j ||d krxt
t j
|t||d |d j| | j| d S )Nz%s.addEntry('%s')rh rW ri re )r r2 r r r3 r r r< rK rA r r rk r\ r
appendrD )r entryr5 rC r" r" r# addEntry s
z FirewallDConfigIPSet.addEntryc C s t |t}t|}tjd| j| | jj| t| j }d|d kr`|d d dkr`t
t j ||d krxt
t j
||d j| | j| d S )Nz%s.removeEntry('%s')rh rW ri re )r r2 r r r3 r r r< rK rA r r rk r` rF rD )r rn r5 rC r" r" r# removeEntry s
z FirewallDConfigIPSet.removeEntryc C s` t |t}t|}tjd| j| t| j }d|d krT|d d dkrTtt j
||d kS )Nz%s.queryEntry('%s')rh rW ri re ) r r2 r r r3 r rK rA r r rk )r rn r5 rC r" r" r#
queryEntry s
z FirewallDConfigIPSet.queryEntry)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N);__name__
__module__ __qualname____doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr
r r r$ r% r. r ZPROPERTIES_IFACEr6 r; slipZpolkitZ require_authr= servicesignalr> ZPK_ACTION_INFOZINTROSPECTABLE_IFACEr? r r ZDBUS_SIGNATURErA rD rE rB rF rG rI rH rJ rM rN rO rQ rS rU rV rX r[ r_ ra rc rf rl ro rp rq
__classcell__r" r" )r! r# r 3 s
r )"Z
gi.repositoryr sysmodulesr Z dbus.serviceZ slip.dbusrv Zslip.dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.ipsetr Zfirewall.core.ipsetr r r
r Zfirewall.core.loggerr Zfirewall.server.decoratorsr
r r r Zfirewall.errorsr rw ZObjectr r" r" r" r# s