3
Yju @ s d dl mZ d dlZeejd< d dlZd dlZd dlZd dlZd dl m
Z
d dl m Z m
Z
mZ d dlmZ d dlmZmZmZ d dl mZ d d lmZ G d
d d ejjjZdS ) )GObjectNZgobject)config)dbus_to_python%dbus_introspection_prepare_properties!dbus_introspection_add_properties)log)handle_exceptionsdbus_handle_exceptionsdbus_service_method)errors)
FirewallErrorc s e Zd ZdZdZejjZe fddZ
e dd Z e dd Z
e d d
Zeejd d d
e dddZeejddd
e dddZejjjejjeejdde dddZejjejdddd Zejjjejjeejdd e d fd d Z eejj d d e dd!d"Z eejj dd e dd#d$Z eejj d de dd%d&Z eejj dde dd'd(Z!eejj e dd)d*Z"ejjejj dde d+d, Z#eejj e dd-d.Z$ejjejj dde d/d0 Z%eejj dde dd1d2Z&ejjejj dde d3d4 Z'eejj dd e dd5d6Z(eejj dde dd7d8Z)eejj dd e dd9d:Z*eejj dde dd;d<Z+eejj dd e dd=d>Z,eejj dde dd?d@Z-eejj dAd e ddBdCZ.eejj dAde ddDdEZ/eejj d de ddFdGZ0eejj d de ddHdIZ1eejj d dJd
e ddKdLZ2eejj dMd e ddNdOZ3eejj dMde ddPdQZ4eejj dde ddRdSZ5eejj dde ddTdUZ6eejj ddJd
e ddVdWZ7eejj dAd e ddXdYZ8eejj dAde ddZd[Z9eejj d de dd\d]Z:eejj d de dd^d_Z;eejj d dJd
e dd`daZeejj dde ddfdgZ?eejj dde ddhdiZ@eejj ddJd
e ddjdkZAeejj dld e ddmdnZBeejj dlde ddodpZCeejj ddd
e ddqdrZDeejj d de ddsdtZEeejj dde ddudvZFeejj d dJd
e ddwdxZGeejj dMd e ddydzZHeejj dMde dd{d|ZIeejj dde dd}d~ZJeejj dde dddZKeejj ddJd
e dddZL ZMS )FirewallDConfigServicezFirewallD main classTc s\ t t| j|| || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j d S )Nr zconfig.service.%d)
superr
__init__parentr objitem_idbusnamepath _log_prefixr dbus DBUS_INTERFACE_CONFIG_SERVICE)selfr Zconfservicer argskwargs) __class__ $/usr/lib/python3.6/config_service.pyr 7 s
z FirewallDConfigService.__init__c C s d S )Nr )r r r r __del__D s z FirewallDConfigService.__del__c C s | j d S )N)Zremove_from_connection)r r r r
unregisterH s z!FirewallDConfigService.unregisterc C s |dkrt j| jjS |dkr,t j| jjS |dkrBt j| jjS |dkrXt j| jjS |dkrnt j| jjS t j j
d| d S )Nnamefilenamer defaultbuiltinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r Stringr r" r# r ZBooleanr$ r%
exceptions
DBusException)r
property_namer r r
_get_propertyP s z$FirewallDConfigService._get_propertyZssv) in_signature
out_signatureNc C sL t |t}t |t}tjd| j|| |tjjkrBtjj d| | j
|S )Nz%s.Get('%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r strr debug1r r r r r' r( r* )r interface_namer) senderr r r Geta s
zFirewallDConfigService.Getsza{sv}c C sd t |t}tjd| j| |tjjkr6tjj d| i }xd
D ]}| j
|||< q@W tj |dd S ) Nz%s.GetAll('%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existr" r# r r$ r% Zsv) signature)r" r# r r$ r% ) r r. r r/ r r r r r' r( r* Z
Dictionary)r r0 r1 retxr r r GetAllr s
z FirewallDConfigService.GetAllZssv)r, c C sl t |t}t |t}t |}tjd| j||| | jj| |tjj krXtj
j d| tj
j d| d S )Nz%s.Set('%s', '%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existzGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r. r r/ r r accessCheckr r r r' r( )r r0 r) Z new_valuer1 r r r Set s
zFirewallDConfigService.Setzsa{sv}as)r4 c C s2 t |t}t |}t |}tjd| j||| d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r. r r/ r )r r0 Zchanged_propertiesZinvalidated_propertiesr r r PropertiesChanged s
z(FirewallDConfigService.PropertiesChanged)r- c s8 t jd| j tt| j| j| jj }t | |t
j j S )Nz%s.Introspect())
r Zdebug2r r r
Introspectr r Zget_busr r r r )r r1 data)r r r r; s
z!FirewallDConfigService.Introspectz(sssa(ss)asa{ss}asa(ss))c C s t jd| j | jj| jS )z!get settings for service
z%s.getSettings())r r/ r r Zget_service_configr )r r1 r r r getSettings s z"FirewallDConfigService.getSettingsc C s t jd| j | jj| jS )z!get settings for service
z%s.getSettings2())r r/ r r get_service_config_dictr )r r1 r r r getSettings2 s z#FirewallDConfigService.getSettings2c C sF t |}tjd| j | jj| | jj| j|| _| j | jj
dS )z$update settings for service
z%s.update('...')N) r r r/ r r r8 r Zset_service_configr Updatedr" )r settingsr1 r r r update s
z FirewallDConfigService.updatec C sF t |}tjd| j | jj| | jj| j|| _| j | jj
d S )Nz%s.update2('...')) r r r/ r r r8 r set_service_config_dictr r@ r" )r rA r1 r r r update2 s
z FirewallDConfigService.update2c C s< t jd| j | jj| | jj| j| _| j| jj dS )z2load default settings for builtin service
z%s.loadDefaults()N)
r r/ r r r8 r Zload_service_defaultsr r@ r" )r r1 r r r loadDefaults s z#FirewallDConfigService.loadDefaultsc C s t jd| j|f d S )Nz%s.Updated('%s'))r r/ r )r r" r r r r@ s z FirewallDConfigService.Updatedc C s: t jd| j | jj| | jj| j | jj| j dS )zremove service
z%s.removeService()N) r r/ r r r8 r Zremove_servicer Z
removeService)r r1 r r r remove s z FirewallDConfigService.removec C s t jd| j|f d S )Nz%s.Removed('%s'))r r/ r )r r" r r r Removed s z FirewallDConfigService.Removedc C sF t |t}tjd| j| | jj| | jj| j || _ | j
| dS )zrename service
z%s.rename('%s')N) r r. r r/ r r r8 r Zrename_servicer Renamed)r r" r1 r r r rename s
z FirewallDConfigService.renamec C s t jd| j|f d S )Nz%s.Renamed('%s'))r r/ r )r r" r r r rH s z FirewallDConfigService.Renamedc C s t jd| j | j d S )Nz%s.getVersion()r )r r/ r r= )r r1 r r r
getVersion s z!FirewallDConfigService.getVersionc C sH t |t}tjd| j| | jj| t| j }||d< | j | d S )Nz%s.setVersion('%s')r )
r r. r r/ r r r8 listr= rB )r versionr1 rA r r r
setVersion s
z!FirewallDConfigService.setVersionc C s t jd| j | j d S )Nz
%s.getShort()r )r r/ r r= )r r1 r r r getShort" s z FirewallDConfigService.getShortc C sH t |t}tjd| j| | jj| t| j }||d< | j | d S )Nz%s.setShort('%s')r )
r r. r r/ r r r8 rK r= rB )r Zshortr1 rA r r r setShort) s
z FirewallDConfigService.setShortc C s t jd| j | j d S )Nz%s.getDescription() )r r/ r r= )r r1 r r r getDescription6 s z%FirewallDConfigService.getDescriptionc C sH t |t}tjd| j| | jj| t| j }||d< | j | d S )Nz%s.setDescription('%s')rP )
r r. r r/ r r r8 rK r= rB )r descriptionr1 rA r r r setDescription= s
z%FirewallDConfigService.setDescriptionza(ss)c C s t jd| j | j d S )Nz
%s.getPorts() )r r/ r r= )r r1 r r r getPortsK s z FirewallDConfigService.getPortsc C s g }x6t |tD ](}t|tr.|jt| q|j| qW |}tjd| jdjdd |D | j j
| t| j }||d< | j | d S )Nz%s.setPorts('[%s]'),c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr ).0portr r r _ s z2FirewallDConfigService.setPorts..rT )
r rK
isinstanceappendtupler r/ r joinr r8 r= rB )r portsr1 _portsrX rA r r r setPortsR s
z FirewallDConfigService.setPortsc C s t |t}t |t}tjd| j|| | jj| t| j }||f|d krbt t
j d||f |d j ||f | j
| d S )Nz%s.addPort('%s', '%s')rT z%s:%s)r r. r r/ r r r8 rK r= r r ALREADY_ENABLEDr[ rB )r rX protocolr1 rA r r r addPorte s
z FirewallDConfigService.addPortc C s t |t}t |t}tjd| j|| | jj| t| j }||f|d krbt t
j d||f |d j ||f | j
| d S )Nz%s.removePort('%s', '%s')rT z%s:%s)r r. r r/ r r r8 rK r= r r NOT_ENABLEDrF rB )r rX rb r1 rA r r r
removePortu s
z!FirewallDConfigService.removePortbc C s: t |t}t |t}tjd| j|| ||f| j d kS )Nz%s.queryPort('%s', '%s')rT )r r. r r/ r r= )r rX rb r1 r r r queryPort s
z FirewallDConfigService.queryPortasc C s t jd| j | j d S )Nz%s.getProtocols() )r r/ r r= )r r1 r r r getProtocols s z#FirewallDConfigService.getProtocolsc C sN t |t}tjd| jdj| | jj| t| j }||d< | j | d S )Nz%s.setProtocols('[%s]')rV ri )
r rK r r/ r r] r r8 r= rB )r Z protocolsr1 rA r r r setProtocols s
z#FirewallDConfigService.setProtocolsc C sf t |t}tjd| j| | jj| t| j }||d krJt t
j ||d j | | j
| d S )Nz%s.addProtocol('%s')ri )r r. r r/ r r r8 rK r= r r ra r[ rB )r rb r1 rA r r r addProtocol s
z"FirewallDConfigService.addProtocolc C sf t |t}tjd| j| | jj| t| j }||d krJt t
j ||d j | | j
| d S )Nz%s.removeProtocol('%s')ri )r r. r r/ r r r8 rK r= r r rd rF rB )r rb r1 rA r r r removeProtocol s
z%FirewallDConfigService.removeProtocolc C s* t |t}tjd| j| || j d kS )Nz%s.queryProtocol(%s')ri )r r. r r/ r r= )r rb r1 r r r
queryProtocol s
z$FirewallDConfigService.queryProtocolc C s t jd| j | j d S )Nz%s.getSourcePorts() )r r/ r r= )r r1 r r r getSourcePorts s z%FirewallDConfigService.getSourcePortsc C s g }x6t |tD ](}t|tr.|jt| q|j| qW |}tjd| jdjdd |D | j j
| t| j }||d< | j | d S )Nz%s.setSourcePorts('[%s]')rV c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr )rW rX r r r rY s z8FirewallDConfigService.setSourcePorts..ro )
r rK rZ r[ r\ r r/ r r] r r8 r= rB )r r^ r1 r_ rX rA r r r setSourcePorts s
z%FirewallDConfigService.setSourcePortsc C s t |t}t |t}tjd| j|| | jj| t| j }||f|d krbt t
j d||f |d j ||f | j
| d S )Nz %s.addSourcePort('%s', '%s')ro z%s:%s)r r. r r/ r r r8 rK r= r r ra r[ rB )r rX rb r1 rA r r r
addSourcePort s
z$FirewallDConfigService.addSourcePortc C s t |t}t |t}tjd| j|| | jj| t| j }||f|d krbt t
j d||f |d j ||f | j
| d S )Nz %s.removeSourcePort('%s', '%s')ro z%s:%s)r r. r r/ r r r8 rK r= r r rd rF rB )r rX rb r1 rA r r r removeSourcePort s
z'FirewallDConfigService.removeSourcePortc C s: t |t}t |t}tjd| j|| ||f| j d kS )Nz %s.querySourcePort('%s', '%s')ro )r r. r r/ r r= )r rX rb r1 r r r querySourcePort s
z&FirewallDConfigService.querySourcePortc C s t jd| j | j d S )Nz%s.getModules() )r r/ r r= )r r1 r r r
getModules s z!FirewallDConfigService.getModulesc C s t |t}g }x@|D ]8}|jdrB|jdd}d|krB|jdd}|j| qW |}tjd| jdj| | j j
| t| j }||d< | j | d S )N
nf_conntrack_ _-z%s.setModules('[%s]')rV ru )
r rK
startswithreplacer[ r r/ r r] r r8 r= rB )r modulesr1 Z_modulesmodulerA r r r
setModules s
z!FirewallDConfigService.setModulesc C s t |t}|jdr4|jdd}d|kr4|jdd}tjd| j| | jj| t | j
}||d krtt t j
||d j| | j| d S )Nrw rx ry rz z%s.addModule('%s')ru )r r. r{ r| r r/ r r r8 rK r= r r ra r[ rB )r r~ r1 rA r r r addModule' s
z FirewallDConfigService.addModulec C s t |t}|jdr4|jdd}d|kr4|jdd}tjd| j| | jj| t | j
}||d krtt t j
||d j| | j| d S )Nrw rx ry rz z%s.removeModule('%s')ru )r r. r{ r| r r/ r r r8 rK r= r r rd rF rB )r r~ r1 rA r r r removeModule8 s
z#FirewallDConfigService.removeModulec C sT t |t}|jdr4|jdd}d|kr4|jdd}tjd| j| || j d kS )Nrw rx ry rz z%s.queryModule('%s')ru )r r. r{ r| r r/ r r= )r r~ r1 r r r queryModuleI s
z"FirewallDConfigService.queryModuleza{ss}c C s t jd| j | j d S )Nz%s.getDestinations() )r r/ r r= )r r1 r r r getDestinationsW s z&FirewallDConfigService.getDestinationsc C sV t |t}tjd| j|jd|jd | jj| t| j }||d< | j
| d S )Nz*%s.setDestinations({ipv4:'%s', ipv6:'%s'})Zipv4Zipv6r ) r dictr r/ r getr r8 rK r= rB )r Z destinationsr1 rA r r r setDestinations^ s
z&FirewallDConfigService.setDestinationsc C sV t |t}tjd| j| | jj| t| j }||d krJt t
j ||d | S )Nz%s.getDestination('%s')r ) r r. r r/ r r r8 rK r= r r rd )r familyr1 rA r r r getDestinationk s
z%FirewallDConfigService.getDestinationc C s t |t}t |t}tjd| j|| | jj| t| j }||d krn|d | |krnt t
j d||f ||d |< | j | d S )Nz %s.setDestination('%s', '%s')r z
'%s': '%s')
r r. r r/ r r r8 rK r= r r ra rB )r r addressr1 rA r r r setDestinationx s
z%FirewallDConfigService.setDestinationc C sb t |t}tjd| j| | jj| t| j }||d krJt t
j ||d |= | j | d S )Nz%s.removeDestination('%s')r )
r r. r r/ r r r8 rK r= r r rd rB )r r r1 rA r r r removeDestination s
z(FirewallDConfigService.removeDestinationc C sJ t |t}t |t}tjd| j|| | j }||d koH||d | kS )Nz %s.queryDestination('%s', '%s')r )r r. r r/ r r= )r r r r1 rA r r r queryDestination s
z'FirewallDConfigService.queryDestinationc C s< t jd| j | jj| | jj| j}d|kr8|d S g S )Nz%s.getIncludes()includes)r r/ r r r8 r r> r )r r1 rA r r r getIncludes s z"FirewallDConfigService.getIncludesc C sZ t |t}tjd| j| | jj| d|d d i}| jj| j || _ | j
| j j d S )Nz%s.setIncludes('%s')r ) r rK r r/ r r r8 r rC r r@ r" )r r r1 rA r r r setIncludes s
z"FirewallDConfigService.setIncludesc C sj t |t}tjd| j| | jj| | jj| j }|j
dg j | | jj | j || _ | j
| j j d S )Nz%s.addInclude('%s')r )r r. r r/ r r r8 r r> r
setdefaultr[ rC r@ r" )r includer1 rA r r r
addInclude s
z!FirewallDConfigService.addIncludec C sf t |t}tjd| j| | jj| | jj| j }|d j
| | jj | j || _ | j | j j
d S )Nz%s.removeInclude('%s')r )r r. r r/ r r r8 r r> r rF rC r@ r" )r r r1 rA r r r
removeInclude s
z$FirewallDConfigService.removeIncludec C s@ t |t}tjd| j| | jj| j}d|kr<||d kS dS )Nz%s.queryInclude('%s')r F)r r. r r/ r r r> r )r r r1 rA r r r queryInclude s
z#FirewallDConfigService.queryInclude)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N__name__
__module__ __qualname____doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r r r! r* r
ZPROPERTIES_IFACEr2 r7 slipZpolkitZ require_authr9 r signalr: ZPK_ACTION_INFOZINTROSPECTABLE_IFACEr; r r= r? rB rD rE r@ rF rG rI rH rJ rM rN rO rQ rS rU r` rc re rg rj rk rl rm rn rp rq rr rs rt rv r r r r r r r r r r r r r r r
__classcell__r r )r r r
/ s
r
)Z
gi.repositoryr sysr} r Z dbus.serviceZ slip.dbusr Zslip.dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.loggerr Zfirewall.server.decoratorsr r r
r Zfirewall.errorsr r ZObjectr
r r r r s