c`c @ s d g Z d d l m Z m Z d d l Z e e j d <d d l Z d d l Z d d l Z d d l
Z d d l m Z d d l
m Z d d l m Z d d l m Z d d l m Z d d
l m Z m Z m Z m Z d d l m Z d d l m Z m Z m Z m Z m! Z! m" Z" m# Z# d d
l$ m% Z% d d l& m' Z' d d l( m) Z) d d l* m+ Z+ d d l, m- Z- d d l. m/ Z/ d d l0 m1 Z1 m2 Z2 m3 Z3 d d l4 m5 Z5 d d l m6 Z6 d d l7 m8 Z8 d e j j9 j: f d YZ; d S( t FirewallDi( t GLibt GObjectNt gobject( t config( t Firewall( t Rich_Rule( t log( t FirewallClientZoneSettings( t dbus_handle_exceptionst dbus_service_methodt handle_exceptionst FirewallDBusException( t FirewallDConfig( t dbus_to_pythont command_of_sendert context_of_sendert
uid_of_sendert user_of_uidt% dbus_introspection_prepare_propertiest! dbus_introspection_add_properties( t check_config( t Zone( t IPSet( t Service( t IcmpType( t Helper( t nm_get_bus_namet nm_get_connection_of_interfacet nm_set_zone_of_connection( t ifcfg_set_zone_of_interface( t errors( t
FirewallErrorc B s, e Z d Z e Z e j j Z e d Z
d Z e d Z e d Z
e d Z e d Z e d Z e d Z e d Z e e j d
d d d
e d d Z e e j d
d d d e d d Z e j j j e j j e e j d
d e d d Z e j j e j d d d Z e j j j e j j e e j! d d e d d Z" e j j j e j j e e j j# d
d d d e d d Z$ e j j j e j j e e j j# d
d d d e d d Z% e j j e j j# e d Z& e j j j e j j e e j j# d
d d d e d d Z' e j j j e j j e e j j# d
d d d e d d Z( e j j j e j j) e e j j* d
d d d e d d Z+ e j j j e j j) e e j j* d
d d d e d d Z, e j j j e j j- e e j j* d
d d d e d d! Z. e j j e j j* d d e d" Z/ e j j e j j* d d e d# Z0 e j j j e j j) e e j j* d
d d d e d d$ Z1 e j j j e j j) e e j j* d
d d d e d d% Z2 e j j j e j j- e e j j* d
d d d e d d& Z3 e j j j e j j- e e j j* d
d d d' e d d( Z4 e j j e j j* d d e d) Z5 e j j e j j* d d e d* Z6 e j j j e j j) e e j j* d
d+ d d e d d, Z7 e j j j e j j) e e j j* d
d+ d d e d d- Z8 e j j j e j j- e e j j* d
d+ d d e d d. Z9 e j j j e j j- e e j j* d
d d d/ e d d0 Z: e j j e j j* d d+ e d1 Z; e j j e j j* d d+ e d2 Z< e j j j e j j) e e j j* d
d d d e d d3 Z= e j j j e j j) e e j j* d
d d d e d d4 Z> e j j j e j j- e e j j* d
d d d e d d5 Z? e j j j e j j- e e j j* d
d d d' e d d6 Z@ e j j e j j* d d e d7 ZA e j j e j j* d d e d8 ZB e j j j e j j) e e j j* d
d d d e d d9 ZC e j j j e j j) e e j j* d
d d d e d d: ZD e j j j e j j- e e j j* d
d d d e d d; ZE e j j j e j j- e e j j* d
d d d' e d d< ZF e j j e j j* d d e d= ZG e j j e j j* d d e d> ZH e j j j e j j e e j j# d
d d d e d d? ZI e j j j e j j e e j j# d
d d d e d d@ ZJ e j j j e j j e e j j# d
d d d e d dA ZK e j j e j j# d d e dB ZL e j j e j j# d d e dC ZM e j j j e j jN e e j j# d
d d eO jP e d dD ZQ e j j j e j j e e j j# d
d d d' e d dE ZR e j j j e j jN e e j j# d
d d eS jP e d dF ZT e j j j e j j e e j j# d
d d d' e d dG ZU e j j j e j jN e e j j# d
d d eV jP e d dH ZW e j j j e j jN e e j j# d
d d d e d dI ZX e j j j e j j e e j j# d
d d d e d dJ ZY e j j e j j# d d e dK ZZ e j j j e j jN e e j j# d
d d d e d dL Z[ e j j j e j j e e j j# d
d d d e d dM Z\ e j j e j j# d d e dN Z] e j j j e j j e e j j# d
d d d e d dO Z^ e j j j e j j e e j j# d
d d d e d dP Z_ e j j e j j# d d e dQ Z` e j j j e j j e e j ja d
d d d' e d dR Zb e j j j e j j e e j ja d
d d dS e d dT Zc e j j j e j j e e j ja d
d d d e d dU Zd e j j j e j j e e j ja d
d d d e d dV Ze e j j j e j jN e e j ja d
d d d e d dW Zf e j j j e j j e e j ja d
d d d e d dX Zg e j j j e j j e e j ja d
d d d e d dY Zh e j j j e j j e e j ja d
d d d e d dZ Zi e j j j e j j e e j ja d
d d d e d d[ Zj e j j j e j jN e e j ja d
d d d e d d\ Zk e j j j e j jN e e j ja d
d d d' e d d] Zl e j j e j ja d d e d^ Zm e j j e j ja d d e d_ Zn e j j e j ja d d e d` Zo e j j e j ja d d e da Zp e j j j e j j e e j ja d
d d d e d db Zq e j j j e j j e e j ja d
d d d e d dc Zr e j j j e j j e e j ja d
d d d e d dd Zs e j j j e j jN e e j ja d
d d d e d de Zt e j j j e j jN e e j ja d
d d d' e d df Zu e j j e j ja d d e dg Zv e j j e j ja d d e dh Zw e j j e j ja d d e di Zx e dj Zy e j j j e j j e e j ja d
dk d d e d dl Zz e j j j e j j e e j ja d
d d d e d dm Z{ e j j j e j jN e e j ja d
d d d e d dn Z| e j j j e j jN e e j ja d
d d d' e d do Z} e j j e j ja d dk e dp Z~ e j j e j ja d d e dq Z e dr Z e j j j e j j e e j ja d
dk d d e d ds Z e j j j e j j e e j ja d
d d d e d dt Z e j j j e j jN e e j ja d
d d d e d du Z e j j j e j jN e e j ja d
d d d' e d dv Z e j j e j ja d dk e dw Z e j j e j ja d d e dx Z e dy Z e j j j e j j e e j ja d
dz d d e d d{ Z e j j j e j j e e j ja d
d| d d e d d} Z e j j j e j jN e e j ja d
d| d d e d d~ Z e j j j e j jN e e j ja d
d d d e d d Z e j j e j ja d dz e d d Z e j j e j ja d d| e d Z e d Z e j j j e j j e e j ja d
dk d d e d d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d' e d d Z e j j e j ja d dk e d d Z e j j e j ja d d e d Z e d Z e j j j e j j e e j ja d
dz d d e d d Z e j j j e j j e e j ja d
d| d d e d d Z e j j j e j jN e e j ja d
d| d d e d d Z e j j j e j jN e e j ja d
d d d e d d Z e j j e j ja d dz e d d Z e j j e j ja d d| e d Z e d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d e d d Z e j j e j ja d d e d d Z e j j e j ja d d e d Z e d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d e d d Z e j j e j ja d d e d d Z e j j e j ja d d e d Z e d Z e j j j e j j e e j ja d
dk d d e d d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d' e d d Z e j j e j ja d dk e d d Z e j j e j ja d d e d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j j e e j ja d
d d d e d d Z e j j j e j jN e e j ja d
d d d e d d Z e j j e j ja d d e d Z e j j e j ja d d e d Z e j j j e j j e e j j d
d| d d e d d Z e j j j e j j e e j j d
d| d d e d d Z e j j j e j j e e j j d
d| d d e d d Z e j j j e j j e e j j d
d d d' e d d Z e j j j e j j e e j j d
d d d e d d Z e j j e j j d d| e d Z e j j e j j d d| e d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d| d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d| d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j e j j d d e d Z e j j e j j d d e d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j e j j d d e d Z e j j e j j d d e d Z e j j j e j j e e j j# d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d' e d d Z e j j j e j jN e e j j d
d d e jP e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d e d d Z e j j j e j j e e j j d
d d d' e d d Z e j j j e j j e e j j d
d e d d Z e j j e j j d d e d Z e j j e j j d d e d Z e j j j e j j e e j j# d
d d d' e d d Z e j j j e j jN e e j j# d
d d e jP e d d Z RS( s FirewallD main classc O s t t | j | | t | _ | d | _ | d | _ | j t | t j
j t | j j | j t j
j
| _ d S( Ni i ( t superR t __init__R t fwt busnamet patht startR R t dbust DBUS_INTERFACER
t DBUS_PATH_CONFIG( t selft argst kwargs( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR" J s
c C s | j d S( N( t stop( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt __del__U s c C s# t j d i | _ | j j S( Ns start()( R t debug1t _timeoutsR# R& ( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR& X s
c C s t j d | j j S( Ns stop()( R R/ R# R- ( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR- ` s
c C s | j j j r | d k r/ t j d d St j } t | | } | j j j d | rf d St
| | } | j j j d | r d St | } | j j j d | r d St | | } | j j j d | r d St
t j d n d S( Ns& Lockdown not possible, sender not set.t contextt uidt usert commands lockdown is enabled( R# t policiest query_lockdownt NoneR t errorR' t SystemBusR t access_checkR R R R R t
ACCESS_DENIED( R* t sendert busR1 R2 R3 R4 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt accessChecki s$
c C s4 | | j k r i | j | <n | | j | | <d S( N( R0 ( R* t zonet xt tag( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
addTimeout s c C sO | | j k rK | | j | k rK t j | j | | | j | | =n d S( N( R0 R t
source_remove( R* R? R@ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
removeTimeout s "c C sf xR | j D]G } x- | j | D] } t j | j | | q W| j | j q
W| j j d S( N( R0 R RC t clear( R* R? R@ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt cleanup_timeouts s
c C s | d k r t j t j S| d k rK t j d t j j t j j f S| d k rm t j | j j S| d k r t j | j j S| d k r t j
| j j d S| d k r t j | j j S| d k r t j | j j
S| d
k rt j
| j j d S| d k r-t j | j j S| d k rLt j | j j S| d
k rnt j
| j j d S| d k rt j | j j d k S| d k rt j i d S| d k rt j i d St j j d | d S( Nt versiont interface_versions %d.%dt statet IPv4t
IPv4ICMPTypest st IPv6t
IPv6_rpfiltert
IPv6ICMPTypest BRIDGER t
IPSetTypest nf_conntrack_helper_settingi t nf_conntrack_helperst sast nf_nat_helperssD org.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist( R' t StringR t VERSIONt DBUS_INTERFACE_VERSIONt DBUS_INTERFACE_REVISIONR# t get_statet Booleant ip4tables_enabledt Arrayt ip4tables_supported_icmp_typest ip6tables_enabledt ipv6_rpfilter_enabledt ip6tables_supported_icmp_typest ebtables_enabledt
ipset_enabledt ipset_supported_typesRR t
Dictionaryt
exceptionst
DBusException( R* t prop( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
_get_property s@ t in_signaturet sst
out_signaturet vc C s t | t } t | t } t j d | | | t j j k rP | j | S| t j j t j j t j j
t j j g k r t j j
d | n t j j
d | d S( Ns Get('%s', '%s')sD org.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not existsJ org.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist( R t strR R/ R R' R( Ri t DBUS_INTERFACE_ZONEt DBUS_INTERFACE_DIRECTt DBUS_INTERFACE_POLICIESt DBUS_INTERFACE_IPSETRf Rg ( R* t interface_namet
property_nameR< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt Get s
RL s a{sv}c C s t | t } t j d | i } | t j j k r x d d d d d d d d d
d d d
d d g D] } | j | | | <qh WnI | t j j t j j t j j
t j j g k r n t j j
d | t j | d d S( Ns GetAll('%s')RG RH RI RJ RM RN RP R RQ RR RS RU RK RO sJ org.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existt signaturet sv( R Rn R R/ R R' R( Ri Ro Rp Rq Rr Rf Rg Re ( R* Rs R< t retR@ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt GetAll s&
t ssvc C s t | t } t | t } t | } t j d | | | | j | | t j j k r | d k r t j j d | q t j j d | n_ | t j j
t j j t j j t j j
g k r t j j d | n t j j d | d S( Ns Set('%s', '%s', '%s')RG RH RI RJ RM RN RP R RQ RR RS RU RK RO sG org.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-onlysD org.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not existsJ org.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist( s versions interface_versions states IPv4s IPv6s
IPv6_rpfilters BRIDGEs IPSets
IPSetTypess nf_conntrack_helper_settings nf_conntrack_helperss nf_nat_helperss
IPv4ICMPTypess
IPv6ICMPTypes( R Rn R R/ R> R R' R( Rf Rg Ro Rp Rq Rr ( R* Rs Rt t new_valueR< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt Set s:
Rv s sa{sv}asc C sA t | t } t | } t | } t j d | | | d S( Ns# PropertiesChanged('%s', '%s', '%s')( R Rn R R/ ( R* Rs t changed_propertiest invalidated_properties( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt PropertiesChanged s
c C sJ t j d t t | j | j | j j } t | | t j
j S( Ns Introspect()( R t debug2R! R t
IntrospectR% R$ t get_busR R R' R( ( R* R< t data( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR ' s
t c C s5 t j d | j j | j j | j d S( s# Reload the firewall rules.
s reload()N( R R/ R# t reloadR t Reloaded( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR 5 s
c C s8 t j d | j j t | j j | j d S( s Completely reload the firewall.
Completely reload the firewall: Stops firewall, unloads modules and
starts the firewall again.
s completeReload()N( R R/ R# R t TrueR R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt completeReloadD s
c C s t j d d S( Ns
Reloaded()( R R/ ( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR T s c C s t j d t | j d S( s& Check permanent configuration
s checkPermanentConfig()N( R R/ R R# ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt checkPermanentConfigY s
c
C so t j d t } | j j } x | j j j D] } | j | } y | | k r | j j | } | j
| k r t j d | | j | q t j d | n$ t j d | | j j | | Wq5 t
k
r } t j d | | f t } q5 Xq5 W| j j } x | j j j D] } | j | } y | | k r| j j | } | j
| k rt j d | | j | qt j d | n$ t j d | | j j | | Wq0t
k
r} t j d | | f t } q0Xq0W| j j } x | j j j D] } y | j | } | | k r| j j | } | j
| k rt j d
| | j | qt j d | n$ t j d | | j j | | Wq+t
k
r} t j d
| | f t } q+Xq+W| j j } t } x | j j j D]} | j | } t! | } | d k rBt }
x_ | j# D]Q } | j j j$ | | | k rot j d | | f | j% | t }
qoqoWxc | j# D]U } y; t& | } | rt' | | r| j% | t }
n Wqt
k
r%qXqW|
rB~ | j( } qBn x! | j# D] } t) | | qOWy | | k r| j j* | } | j
| k rt j d | | j | qt j d | n$ t j d | | j j+ | | Wq/t
k
r%} t j d | | f t } q/Xq/W| j j, } x | j j- j. D] } | j/ | } y | | k r| j j0 | } | j
| k rt j d | | j | qt j d | n$ t j d | | j j1 | | WqLt
k
r } t j d | | f t } qLXqLW| j j2 j3 | j j2 j4 | j j2 j5 f } yF | j j
| k rt j d | j j | n
t j d Wn* t
k
r} t j d | t } n X| j j6 j7 j8 } yF | j j
| k rt j d | j j9 | n
t j d Wn* t
k
rR} t j d | t } n X| rkt: t; j< n d S( s- Make runtime configuration permanent
s copyRuntimeToPermanent()s Copying service '%s' settingss$ Service '%s' is identical, ignoring.s Creating service '%s's/ Runtime To Permanent failed on service '%s': %ss Copying icmptype '%s' settingss% IcmpType '%s' is identical, ignoring.s Creating icmptype '%s's0 Runtime To Permanent failed on icmptype '%s': %ss Copying ipset '%s' settingss" IPSet '%s' is identical, ignoring.s Creating ipset '%s's- Runtime To Permanent failed on ipset '%s': %ssE Zone '%s': interface binding for '%s' has been added by NM, ignoring.s Copying zone '%s' settingss! Zone '%s' is identical, ignoring.s Creating zone '%s's, Runtime To Permanent failed on zone '%s': %ss Copying helper '%s' settingss# Helper '%s' is identical, ignoring.s Creating helper '%s's. Runtime To Permanent failed on helper '%s': %ss Copying direct configurations, Direct configuration is identical, ignoring.s7 Runtime To Permanent failed on direct configuration: %ss Copying policies configurations. Policies configuration is identical, ignoring.s9 Runtime To Permanent failed on policies configuration: %sN(= R R/ t FalseR t getServiceNamesR# t servicet get_servicest getServiceSettingst getServiceByNamet getSettingst updatet
addServicet Exceptiont warningR t getIcmpTypeNamest icmptypet
get_icmptypest getIcmpTypeSettingst getIcmpTypeByNamet addIcmpTypet
getIPSetNamest ipsett
get_ipsetst getIPSetSettingst getIPSetByNamet addIPSett getZoneNamesR R? t get_zonest getZoneSettingsR R7 t
getInterfacest interface_get_sendert removeInterfaceR R t settingsR t
getZoneByNamet addZonet getHelperNamest helpert get_helperst getHelperSettingst getHelperByNamet addHelpert directt get_all_chainst
get_all_rulest get_all_passthroughsR5 t lockdown_whitelistt
export_configt setLockdownWhitelistR R t RT_TO_PERM_FAILED(
R* R< R8 t config_namest namet conft conf_objt et nm_bus_nameR t changedt interfacet
connection( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt runtimeToPermanente s
c C s8 t j d | j | | j j j | j d S( s! Enable lockdown policies
s policies.enableLockdown()N( R R/ R> R# R5 t enable_lockdownt LockdownEnabled( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt enableLockdown$ s
c C s8 t j d | j | | j j j | j d S( s" Disable lockdown policies
s policies.disableLockdown()N( R R/ R> R# R5 t disable_lockdownt LockdownDisabled( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableLockdown0 s
t bc C s t j d | j j j S( s+ Retuns True if lockdown is enabled
s policies.queryLockdown()( R R/ R# R5 R6 ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
queryLockdown< s
c C s t j d d S( Ns LockdownEnabled()( R R/ ( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR G s c C s t j d d S( Ns LockdownDisabled()( R R/ ( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR L s c C sT t | t } t j d | | j | | j j j j | | j | d S( s Add lockdown command
s* policies.addLockdownWhitelistCommand('%s')N(
R Rn R R/ R> R# R5 R t add_commandt LockdownWhitelistCommandAdded( R* R4 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addLockdownWhitelistCommandU s
c C sT t | t } t j d | | j | | j j j j | | j | d S( s Remove lockdown command
s- policies.removeLockdownWhitelistCommand('%s')N(
R Rn R R/ R> R# R5 R t remove_commandt LockdownWhitelistCommandRemoved( R* R4 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeLockdownWhitelistCommandb s
c C s6 t | t } t j d | | j j j j | S( s Query lockdown command
s, policies.queryLockdownWhitelistCommand('%s')( R Rn R R/ R# R5 R t has_command( R* R4 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryLockdownWhitelistCommando s t asc C s t j d | j j j j S( s Add lockdown command
s' policies.getLockdownWhitelistCommands()( R R/ R# R5 R t get_commands( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getLockdownWhitelistCommands{ s
c C s t j d | d S( Ns# LockdownWhitelistCommandAdded('%s')( R R/ ( R* R4 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | d S( Ns% LockdownWhitelistCommandRemoved('%s')( R R/ ( R* R4 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s t ic C sT t | t } t j d | | j | | j j j j | | j | d S( s Add lockdown uid
s& policies.addLockdownWhitelistUid('%s')N(
R t intR R/ R> R# R5 R t add_uidt LockdownWhitelistUidAdded( R* R2 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addLockdownWhitelistUid s
c C sT t | t } t j d | | j | | j j j j | | j | d S( s Remove lockdown uid
s) policies.removeLockdownWhitelistUid('%s')N(
R R R R/ R> R# R5 R t
remove_uidt LockdownWhitelistUidRemoved( R* R2 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeLockdownWhitelistUid s
c C s6 t | t } t j d | | j j j j | S( s Query lockdown uid
s( policies.queryLockdownWhitelistUid('%s')( R R R R/ R# R5 R t has_uid( R* R2 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryLockdownWhitelistUid s t aic C s t j d | j j j j S( s Add lockdown uid
s# policies.getLockdownWhitelistUids()( R R/ R# R5 R t get_uids( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getLockdownWhitelistUids s
c C s t j d | d S( Ns LockdownWhitelistUidAdded(%d)( R R/ ( R* R2 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | d S( Ns LockdownWhitelistUidRemoved(%d)( R R/ ( R* R2 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C sT t | t } t j d | | j | | j j j j | | j | d S( s Add lockdown user
s' policies.addLockdownWhitelistUser('%s')N(
R Rn R R/ R> R# R5 R t add_usert LockdownWhitelistUserAdded( R* R3 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addLockdownWhitelistUser s
c C sT t | t } t j d | | j | | j j j j | | j | d S( s Remove lockdown user
s* policies.removeLockdownWhitelistUser('%s')N(
R Rn R R/ R> R# R5 R t remove_usert LockdownWhitelistUserRemoved( R* R3 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeLockdownWhitelistUser s
c C s6 t | t } t j d | | j j j j | S( s Query lockdown user
s) policies.queryLockdownWhitelistUser('%s')( R Rn R R/ R# R5 R t has_user( R* R3 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryLockdownWhitelistUser s c C s t j d | j j j j S( s Add lockdown user
s$ policies.getLockdownWhitelistUsers()( R R/ R# R5 R t get_users( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getLockdownWhitelistUsers s
c C s t j d | d S( Ns LockdownWhitelistUserAdded('%s')( R R/ ( R* R3 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | d S( Ns" LockdownWhitelistUserRemoved('%s')( R R/ ( R* R3 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C sT t | t } t j d | | j | | j j j j | | j | d S( s Add lockdown context
s* policies.addLockdownWhitelistContext('%s')N(
R Rn R R/ R> R# R5 R t add_contextt LockdownWhitelistContextAdded( R* R1 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addLockdownWhitelistContext s
c C sT t | t } t j d | | j | | j j j j | | j | d S( s Remove lockdown context
s- policies.removeLockdownWhitelistContext('%s')N(
R Rn R R/ R> R# R5 R t remove_contextt LockdownWhitelistContextRemoved( R* R1 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeLockdownWhitelistContext s
c C s6 t | t } t j d | | j j j j | S( s Query lockdown context
s, policies.queryLockdownWhitelistContext('%s')( R Rn R R/ R# R5 R t has_context( R* R1 R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryLockdownWhitelistContext& s c C s t j d | j j j j S( s Add lockdown context
s' policies.getLockdownWhitelistContexts()( R R/ R# R5 R t get_contexts( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getLockdownWhitelistContexts2 s
c C s t j d | d S( Ns# LockdownWhitelistContextAdded('%s')( R R/ ( R* R1 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR = s c C s t j d | d S( Ns% LockdownWhitelistContextRemoved('%s')( R R/ ( R* R1 ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR B s c C s5 t j d | j | | j j | j d S( sn Enable panic mode.
All ingoing and outgoing connections and packets will be blocked.
s enablePanicMode()N( R R/ R> R# t enable_panic_modet PanicModeEnabled( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt enablePanicModeK s
c C s5 t j d | j | | j j | j d S( s Disable panic mode.
Enables normal mode: Allowed ingoing and outgoing connections
will not be blocked anymore
s disablePanicMode()N( R R/ R> R# t disable_panic_modet PanicModeDisabled( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disablePanicModeY s
c C s t j d | j j S( Ns queryPanicMode()( R R/ R# t query_panic_mode( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryPanicModeh s
c C s t j d d S( Ns PanicModeEnabled()( R R/ ( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR q s c C s t j d d S( Ns PanicModeDisabled()( R R/ ( R* ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR v s c C s2 t | t } t j d | | j j j | S( Ns getZoneSettings(%s)( R Rn R R/ R# R? t get_config_with_settings( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | j j j S( Ns listServices()( R R/ R# R R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt listServices s
c C s8 t | t } t j d | | j j j | j S( Ns getServiceSettings(%s)( R Rn R R/ R# R t get_serviceR ( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | j j j S( Ns listIcmpTypes()( R R/ R# R R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
listIcmpTypes s
c C s8 t | t } t j d | | j j j | j S( Ns getIcmpTypeSettings(%s)( R Rn R R/ R# R t get_icmptypeR ( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | j j S( Ns getLogDenied()( R R/ R# t get_log_denied( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getLogDenied s
c C sr t | t } t j d | | j | | j j | | j | | j j | j j | j
d S( Ns setLogDenied('%s')( R Rn R R/ R> R# t set_log_deniedt LogDeniedChangedR R R ( R* t valueR< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt setLogDenied s
c C s t j d | d S( Ns LogDeniedChanged('%s')( R R/ ( R* R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | j j S( Ns getAutomaticHelpers()( R R/ R# t get_automatic_helpers( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getAutomaticHelpers s
c C sr t | t } t j d | | j | | j j | | j | | j j | j j | j
d S( Ns setAutomaticHelpers('%s')( R Rn R R/ R> R# t set_automatic_helperst AutomaticHelpersChangedR R R ( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt setAutomaticHelpers s
c C s t j d | d S( Ns AutomaticHelpersChanged('%s')( R R/ ( R* R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | j j S( Ns getDefaultZone()( R R/ R# t get_default_zone( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getDefaultZone s
c C sN t | t } t j d | | j | | j j | | j | d S( Ns setDefaultZone('%s')( R Rn R R/ R> R# t set_default_zonet DefaultZoneChanged( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt setDefaultZone s
c C s t j d | d S( Ns DefaultZoneChanged('%s')( R R/ ( R* R? ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | j j j S( Ns zone.getZones()( R R/ R# R? R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getZones s
s
a{sa{sas}}c C s t j d i } x | j j j D] } | j j j | } | j j j | } t | t | d k r& i | | <t | d k r | | | d <n t | d k r | | | d <q q& q& W| S( Ns zone.getActiveZones()i t
interfacest sources( R R/ R# R? R t list_interfacest list_sourcest len( R* R< t zonesR? R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getActiveZones% s
c C sC t | t } t j d | | j j j | } | r? | Sd S( s Return the zone an interface belongs to.
:Parameters:
`interface` : str
Name of the interface
:Returns: str. The name of the zone.
s zone.getZoneOfInterface('%s')R ( R Rn R R/ R# R? t get_zone_of_interface( R* R R< R? ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getZoneOfInterface8 s c C sC t | t } t j d | | j j j | } | r? | Sd S( Ns zone.getZoneOfSource('%s')R ( R Rn R R/ R# R? t get_zone_of_source( R* t sourceR< R? ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getZoneOfSourceK s c C s t S( N( R ( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt isImmutableX s c C sq t | t } t | t } t j d | | f | j | | j j j | | | } | j | | | S( sP Add an interface to a zone.
If zone is empty, use default zone.
s zone.addInterface('%s', '%s')( R Rn R R/ R> R# R? t
add_interfacet InterfaceAdded( R* R? R R< t _zone( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addInterfaced s
c C s1 t | t } t | t } | j | | | S( s Change a zone an interface is part of.
If zone is empty, use default zone.
This function is deprecated, use changeZoneOfInterface instead
( R Rn t changeZoneOfInterface( R* R? R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
changeZoneu s
c C sq t | t } t | t } t j d | | f | j | | j j j | | | } | j | | | S( s[ Change a zone an interface is part of.
If zone is empty, use default zone.
s& zone.changeZoneOfInterface('%s', '%s')( R Rn R R/ R> R# R? t change_zone_of_interfacet ZoneOfInterfaceChanged( R* R? R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR% s
c C sn t | t } t | t } t j d | | f | j | | j j j | | } | j | | | S( sk Remove interface from a zone.
If zone is empty, remove from zone the interface belongs to.
s zone.removeInterface('%s', '%s')( R Rn R R/ R> R# R? t remove_interfacet InterfaceRemoved( R* R? R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s
c C sK t | t } t | t } t j d | | f | j j j | | S( s^ Return true if an interface is in a zone.
If zone is empty, use default zone.
s zone.queryInterface('%s', '%s')( R Rn R R/ R# R? t query_interface( R* R? R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryInterface s c C s3 t | t } t j d | | j j j | S( s] Return the list of interfaces of a zone.
If zone is empty, use default zone.
s zone.getInterfaces('%s')( R Rn R R/ R# R? R ( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s
c C s t j d | | f d S( Ns zone.InterfaceAdded('%s', '%s')( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR" s c C s t j d | | f d S( s,
This signal is deprecated.
s zone.ZoneChanged('%s', '%s')N( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt ZoneChanged s c C s+ t j d | | f | j | | d S( Ns' zone.ZoneOfInterfaceChanged('%s', '%s')( R R/ R- ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR( s c C s t j d | | f d S( Ns! zone.InterfaceRemoved('%s', '%s')( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR* s c C sq t | t } t | t } t j d | | f | j | | j j j | | | } | j | | | S( sL Add a source to a zone.
If zone is empty, use default zone.
s zone.addSource('%s', '%s')( R Rn R R/ R> R# R? t
add_sourcet SourceAdded( R* R? R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addSource s
c C sq t | t } t | t } t j d | | f | j | | j j j | | | } | j | | | S( sX Change a zone an source is part of.
If zone is empty, use default zone.
s# zone.changeZoneOfSource('%s', '%s')( R Rn R R/ R> R# R? t change_zone_of_sourcet ZoneOfSourceChanged( R* R? R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt changeZoneOfSource s
c C sn t | t } t | t } t j d | | f | j | | j j j | | } | j | | | S( se Remove source from a zone.
If zone is empty, remove from zone the source belongs to.
s zone.removeSource('%s', '%s')( R Rn R R/ R> R# R? t
remove_sourcet
SourceRemoved( R* R? R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeSource s
c C sK t | t } t | t } t j d | | f | j j j | | S( s[ Return true if an source is in a zone.
If zone is empty, use default zone.
s zone.querySource('%s', '%s')( R Rn R R/ R# R? t query_source( R* R? R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt querySource s c C s3 t | t } t j d | | j j j | S( sZ Return the list of sources of a zone.
If zone is empty, use default zone.
s zone.getSources('%s')( R Rn R R/ R# R? R ( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
getSources s
c C s t j d | | f d S( Ns zone.SourceAdded('%s', '%s')( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR/ + s c C s t j d | | f d S( Ns$ zone.ZoneOfSourceChanged('%s', '%s')( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR2 0 s c C s t j d | | f d S( Ns zone.SourceRemoved('%s', '%s')( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR5 5 s c C s^ t j d | | f | j | | =t d | } | j j j | | | j | | d S( Ns% zone.disableTimedRichRule('%s', '%s')t rule_str( R R/ R0 R R# R? t remove_rulet RichRuleRemoved( R* R? t rulet obj( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableTimedRichRule> s
t ssic C s t | t } t | t } t | t } t j d | | f t d | } | j j j | | | } | d k r t j
| | j | | } | j | | | n | j
| | | | S( Ns zone.addRichRule('%s', '%s')R: i ( R Rn R R R/ R R# R? t add_ruleR t timeout_add_secondsR? RB t
RichRuleAdded( R* R? R= t timeoutR< R> R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addRichRuleF s c C s t | t } t | t } t j d | | f t d | } | j j j | | } | j | | | j | | | S( Ns zone.removeRichRule('%s', '%s')R: (
R Rn R R/ R R# R? R; RD R< ( R* R? R= R< R> R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeRichRuleZ s c C sZ t | t } t | t } t j d | | f t d | } | j j j | | S( Ns zone.queryRichRule('%s', '%s')R: ( R Rn R R/ R R# R? t
query_rule( R* R? R= R< R> ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
queryRichRuleh s
c C s3 t | t } t j d | | j j j | S( Ns zone.getRichRules('%s')( R Rn R R/ R# R? t
list_rules( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getRichRuless s c C s t j d | | | f d S( Ns" zone.RichRuleAdded('%s', '%s', %d)( R R/ ( R* R? R= RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRC s c C s t j d | | f d S( Ns zone.RichRuleRemoved('%s', '%s')( R R/ ( R* R? R= ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR< s c C sO t j d | | f | j | | =| j j j | | | j | | d S( Ns$ zone.disableTimedService('%s', '%s')( R R/ R0 R# R? t remove_servicet ServiceRemoved( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableTimedService s c C s t | t } t | t } t | t } t j d | | | f | j | | j j j | | | | } | d k r t j
| | j | | } | j | | | n | j
| | | | S( Ns zone.addService('%s', '%s', %d)i ( R Rn R R R/ R> R# R? t add_serviceR RB RM RB t ServiceAdded( R* R? R RD R< R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s
c C s~ t | t } t | t } t j d | | f | j | | j j j | | } | j | | | j | | | S( Ns zone.removeService('%s', '%s')(
R Rn R R/ R> R# R? RK RD RL ( R* R? R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
removeService s
c C sK t | t } t | t } t j d | | f | j j j | | S( Ns zone.queryService('%s', '%s')( R Rn R R/ R# R? t
query_service( R* R? R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryService s c C s3 t | t } t j d | | j j j | S( Ns zone.getServices('%s')( R Rn R R/ R# R? t
list_services( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getServices s c C s t j d | | | f d S( Ns! zone.ServiceAdded('%s', '%s', %d)( R R/ ( R* R? R RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRO s c C s t j d | | f d S( Ns zone.ServiceRemoved('%s', '%s')( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRL s c C s^ t j d | | | f | j | | | f =| j j j | | | | j | | | d S( Ns' zone.disableTimedPort('%s', '%s', '%s')( R R/ R0 R# R? t remove_portt PortRemoved( R* R? t portt protocol( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableTimedPort s
t sssic C s t | t } t | t } t | t } t | t } t j d | | | f | j | | j j j | | | | | } | d k r t j
| | j | | | } | j | | | f | n | j
| | | | | S( Ns zone.addPort('%s', '%s', '%s')i ( R Rn R R R/ R> R# R? t add_portR RB RY RB t PortAdded( R* R? RW RX RD R< R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addPort s
! t sssc C s t | t } t | t } t | t } t j d | | | f | j | | j j j | | | } | j | | | f | j | | | | S( Ns! zone.removePort('%s', '%s', '%s')(
R Rn R R/ R> R# R? RU RD RV ( R* R? RW RX R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
removePort s
c C s` t | t } t | t } t | t } t j d | | | f | j j j | | | S( Ns zone.queryPort('%s', '%s', '%s')( R Rn R R/ R# R? t
query_port( R* R? RW RX R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryPort s
t aasc C s3 t | t } t j d | | j j j | S( Ns zone.getPorts('%s')( R Rn R R/ R# R? t
list_ports( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getPorts s i c C s! t j d | | | | f d S( Ns$ zone.PortAdded('%s', '%s', '%s', %d)( R R/ ( R* R? RW RX RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR\ * s c C s t j d | | | f d S( Ns" zone.PortRemoved('%s', '%s', '%s')( R R/ ( R* R? RW RX ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRV 0 s c C sO t j d | | f | j | | =| j j j | | | j | | d S( Ns% zone.disableTimedProtocol('%s', '%s')( R R/ R0 R# R? t remove_protocolt ProtocolRemoved( R* R? RX ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableTimedProtocol: s c C s t | t } t | t } t | t } t j d | | f | j | | j j j | | | | } | d k r t j
| | j | | } | j | | | n | j
| | | | S( Ns zone.enableProtocol('%s', '%s')i ( R Rn R R R/ R> R# R? t add_protocolR RB Rg RB t
ProtocolAdded( R* R? RX RD R< R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addProtocolA s
c C s~ t | t } t | t } t j d | | f | j | | j j j | | } | j | | | j | | | S( Ns zone.removeProtocol('%s', '%s')(
R Rn R R/ R> R# R? Re RD Rf ( R* R? RX R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeProtocolV s
c C sK t | t } t | t } t j d | | f | j j j | | S( Ns zone.queryProtocol('%s', '%s')( R Rn R R/ R# R? t query_protocol( R* R? RX R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
queryProtocolf s c C s3 t | t } t j d | | j j j | S( Ns zone.getProtocols('%s')( R Rn R R/ R# R? t list_protocols( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getProtocolsq s c C s t j d | | | f d S( Ns" zone.ProtocolAdded('%s', '%s', %d)( R R/ ( R* R? RX RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRi } s c C s t j d | | f d S( Ns zone.ProtocolRemoved('%s', '%s')( R R/ ( R* R? RX ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRf s c C sa t j d | | | f | j | d | | f =| j j j | | | | j | | | d S( Ns- zone.disableTimedSourcePort('%s', '%s', '%s')t sport( R R/ R0 R# R? t remove_source_portt SourcePortRemoved( R* R? RW RX ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableTimedSourcePort s
c C s t | t } t | t } t | t } t | t } t j d | | | f | j | | j j j | | | | | } | d k r t j
| | j | | | } | j | d | | f | n | j
| | | | | S( Ns$ zone.addSourcePort('%s', '%s', '%s')i Rp ( R Rn R R R/ R> R# R? t add_source_portR RB Rs RB t SourcePortAdded( R* R? RW RX RD R< R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
addSourcePort s
c C s t | t } t | t } t | t } t j d | | | f | j | | j j j | | | } | j | d | | f | j | | | | S( Ns' zone.removeSourcePort('%s', '%s', '%s')Rp (
R Rn R R/ R> R# R? Rq RD Rr ( R* R? RW RX R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeSourcePort s
c C s` t | t } t | t } t | t } t j d | | | f | j j j | | | S( Ns& zone.querySourcePort('%s', '%s', '%s')( R Rn R R/ R# R? t query_source_port( R* R? RW RX R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt querySourcePort s c C s3 t | t } t j d | | j j j | S( Ns zone.getSourcePorts('%s')( R Rn R R/ R# R? t list_source_ports( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getSourcePorts s c C s! t j d | | | | f d S( Ns* zone.SourcePortAdded('%s', '%s', '%s', %d)( R R/ ( R* R? RW RX RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRu s c C s t j d | | | f d S( Ns( zone.SourcePortRemoved('%s', '%s', '%s')( R R/ ( R* R? RW RX ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyRr s c C s2 | j | d =| j j j | | j | d S( Nt
masquerade( R0 R# R? t remove_masqueradet MasqueradeRemoved( R* R? ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableTimedMasquerade s t sic C s t | t } t | t } t j d | | j | | j j j | | | } | d k r t j
| | j | } | j | d | n | j
| | | S( Ns zone.addMasquerade('%s')i R| ( R Rn R R R/ R> R# R? t add_masqueradeR RB R RB t MasqueradeAdded( R* R? RD R< R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
addMasquerade s
c C sc t | t } t j d | | j | | j j j | } | j | d | j | | S( Ns zone.removeMasquerade('%s')R| (
R Rn R R/ R> R# R? R} RD R~ ( R* R? R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeMasquerade s
c C s3 t | t } t j d | | j j j | S( Ns zone.queryMasquerade('%s')( R Rn R R/ R# R? t query_masquerade( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryMasquerade s c C s t j d | | f d S( Ns zone.MasqueradeAdded('%s', %d)( R R/ ( R* R? RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | d S( Ns zone.MasqueradeRemoved('%s')( R R/ ( R* R? ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR~ s c C sV | j | | | | | f =| j j j | | | | | | j | | | | | d S( N( R0 R# R? t remove_forward_portt ForwardPortRemoved( R* R? RW RX t toportt toaddr( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disable_forward_port( s t sssssic
C s t | t } t | t } t | t } t | t } t | t } t | t } t j d | | | | | f | j | | j j j | | | | | | | } | d k r t j
| | j | | | | | } | j | | | | | f | n | j
| | | | | | | S( Ns1 zone.addForwardPort('%s', '%s', '%s', '%s', '%s')i ( R Rn R R R/ R> R# R? t add_forward_portR RB R RB t ForwardPortAdded(
R* R? RW RX R R RD R< R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addForwardPort. s&
" t sssssc C s t | t } t | t } t | t } t | t } t | t } t j d | | | | | f | j | | j j j | | | | | } | j | | | | | f | j | | | | | | S( Ns4 zone.removeForwardPort('%s', '%s', '%s', '%s', '%s')(
R Rn R R/ R> R# R? R RD R ( R* R? RW RX R R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeForwardPortK s
c C s t | t } t | t } t | t } t | t } t | t } t j d | | | | | f | j j j | | | | | S( Ns3 zone.queryForwardPort('%s', '%s', '%s', '%s', '%s')( R Rn R R/ R# R? t query_forward_port( R* R? RW RX R R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryForwardPorta s c C s3 t | t } t j d | | j j j | S( Ns zone.getForwardPorts('%s')( R Rn R R/ R# R? t list_forward_ports( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getForwardPortsr s c C s' t j d | | | | | | f d S( Ns7 zone.ForwardPortAdded('%s', '%s', '%s', '%s', '%s', %d)( R R/ ( R* R? RW RX R R RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR ~ s c C s$ t j d | | | | | f d S( Ns5 zone.ForwardPortRemoved('%s', '%s', '%s', '%s', '%s')( R R/ ( R* R? RW RX R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C sO t j d | | f | j | | =| j j j | | | j | | d S( Ns& zone.disableTimedIcmpBlock('%s', '%s')( R R/ R0 R# R? t remove_icmp_blockt IcmpBlockRemoved( R* R? t icmpR< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt disableTimedIcmpBlock s c C s t | t } t | t } t | t } t j d | | f | j | | j j j | | | | } | d k r t j
| | j | | | } | j | | | n | j
| | | | S( Ns zone.enableIcmpBlock('%s', '%s')i ( R Rn R R R/ R> R# R? t add_icmp_blockR RB R RB t IcmpBlockAdded( R* R? R RD R< R# RA ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addIcmpBlock s
c C s~ t | t } t | t } t j d | | f | j | | j j j | | } | j | | | j | | | S( Ns zone.removeIcmpBlock('%s', '%s')(
R Rn R R/ R> R# R? R RD R ( R* R? R R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeIcmpBlock s
c C sK t | t } t | t } t j d | | f | j j j | | S( Ns zone.queryIcmpBlock('%s', '%s')( R Rn R R/ R# R? t query_icmp_block( R* R? R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryIcmpBlock s c C s3 t | t } t j d | | j j j | S( Ns zone.getIcmpBlocks('%s')( R Rn R R/ R# R? t list_icmp_blocks( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
getIcmpBlocks s c C s t j d | | | f d S( Ns# zone.IcmpBlockAdded('%s', '%s', %d)( R R/ ( R* R? R RD ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | | f d S( Ns! zone.IcmpBlockRemoved('%s', '%s')( R R/ ( R* R? R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C sV t | t } t j d | | j | | j j j | | } | j | | S( Ns zone.addIcmpBlockInversion('%s')( R Rn R R/ R> R# R? t add_icmp_block_inversiont IcmpBlockInversionAdded( R* R? R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addIcmpBlockInversion s
c C sS t | t } t j d | | j | | j j j | } | j | | S( Ns# zone.removeIcmpBlockInversion('%s')( R Rn R R/ R> R# R? t remove_icmp_block_inversiont IcmpBlockInversionRemoved( R* R? R< R# ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeIcmpBlockInversion s
c C s3 t | t } t j d | | j j j | S( Ns" zone.queryIcmpBlockInversion('%s')( R Rn R R/ R# R? t query_icmp_block_inversion( R* R? R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryIcmpBlockInversion s c C s t j d | d S( Ns" zone.IcmpBlockInversionAdded('%s')( R R/ ( R* R? ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | d S( Ns$ zone.IcmpBlockInversionRemoved('%s')( R R/ ( R* R? ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t | t } t | t } t | t } t j d | | | f | j | | j j j | | | | j | | | d S( Ns! direct.addChain('%s', '%s', '%s')( R Rn R R/ R> R# R t add_chaint
ChainAdded( R* t ipvt tablet chainR< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addChain s
c C s t | t } t | t } t | t } t j d | | | f | j | | j j j | | | | j | | | d S( Ns$ direct.removeChain('%s', '%s', '%s')( R Rn R R/ R> R# R t remove_chaint ChainRemoved( R* R R R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeChain% s
c C s` t | t } t | t } t | t } t j d | | | f | j j j | | | S( Ns# direct.queryChain('%s', '%s', '%s')( R Rn R R/ R# R t query_chain( R* R R R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
queryChain3 s
c C sK t | t } t | t } t j d | | f | j j j | | S( Ns direct.getChains('%s', '%s')( R Rn R R/ R# R t
get_chains( R* R R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getChains? s s a(sss)c C s t j d | j j j S( Ns direct.getAllChains()( R R/ R# R R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getAllChainsJ s
c C s t j d | | | f d S( Ns# direct.ChainAdded('%s', '%s', '%s')( R R/ ( R* R R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR S s c C s t j d | | | f d S( Ns% direct.ChainRemoved('%s', '%s', '%s')( R R/ ( R* R R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR X s t sssiasc C s t | t } t | t } t | t } t | t } t d | D } t j d | | | | d j | f | j | | j j j
| | | | | | j | | | | | d S( Nc s s | ] } t | t Vq d S( N( R Rn ( t .0R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pys <genexpr>l s s* direct.addRule('%s', '%s', '%s', %d, '%s')s ','( R Rn R t tupleR R/ t joinR> R# R RA t RuleAdded( R* R R R t priorityR+ R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addRuleb s
c C s t | t } t | t } t | t } t | t } t d | D } t j d | | | | d j | f | j | | j j j
| | | | | | j | | | | | d S( Nc s s | ] } t | t Vq d S( N( R Rn ( R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pys <genexpr>} s s- direct.removeRule('%s', '%s', '%s', %d, '%s')s ','( R Rn R R R R/ R R> R# R R; t RuleRemoved( R* R R R R R+ R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
removeRules s
c C s t | t } t | t } t | t } t j d | | | f | j | xa | j j j | | | D]D \ } } | j j j | | | | | | j | | | | | qp Wd S( Ns$ direct.removeRules('%s', '%s', '%s')(
R Rn R R/ R> R# R t get_rulesR; R ( R* R R R R< R R+ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeRules s
( c C s t | t } t | t } t | t } t | t } t d | D } t j d | | | | d j | f | j j j | | | | | S( Nc s s | ] } t | t Vq d S( N( R Rn ( R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pys <genexpr> s s, direct.queryRule('%s', '%s', '%s', %d, '%s')s ','(
R Rn R R R R/ R R# R RG ( R* R R R R R+ R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryRule s s a(ias)c C s` t | t } t | t } t | t } t j d | | | f | j j j | | | S( Ns! direct.getRules('%s', '%s', '%s')( R Rn R R/ R# R R ( R* R R R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getRules s
s a(sssias)c C s t j d | j j j S( Ns direct.getAllRules()( R R/ R# R R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getAllRules s
c C s- t j d | | | | d j | f d S( Ns, direct.RuleAdded('%s', '%s', '%s', %d, '%s')s ','( R R/ R ( R* R R R R R+ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s- t j d | | | | d j | f d S( Ns. direct.RuleRemoved('%s', '%s', '%s', %d, '%s')s ','( R R/ R ( R* R R R R R+ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s RT c C s t | t } t d | D } t j d | d j | f | j | y | j j j | | SWn t
k
r} | d k r t d d d d g } n t d d g } t | } | j t
j k rt t | | @ d
k rt j | n t | n n Xd S( Nc s s | ] } t | t Vq d S( N( R Rn ( R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pys <genexpr> s s direct.passthrough('%s', '%s')s ','t ipv4t ipv6s -Cs --checks -Ls --listi ( R R ( R Rn R R R/ R R> R# R t passthroughR t sett codeR t COMMAND_FAILEDR R R ( R* R R+ R< R8 t
query_argst msg( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s"
c C sy t | } t d | D } t j d | d j | f | j | | j j j | | | j | | d S( Nc s s | ] } t | Vq d S( N( R ( R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pys <genexpr> s s! direct.addPassthrough('%s', '%s')s ','(
R R R R/ R R> R# R t add_passthrought PassthroughAdded( R* R R+ R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addPassthrough s
c C sy t | } t d | D } t j d | d j | f | j | | j j j | | | j | | d S( Nc s s | ] } t | Vq d S( N( R ( R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pys <genexpr> s s$ direct.removePassthrough('%s', '%s')s ','(
R R R R/ R R> R# R t remove_passthrought PassthroughRemoved( R* R R+ R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removePassthrough s
c C sX t | } t d | D } t j d | d j | f | j j j | | S( Nc s s | ] } t | Vq d S( N( R ( R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pys <genexpr> s s# direct.queryPassthrough('%s', '%s')s ','( R R R R/ R R# R t query_passthrough( R* R R+ R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt queryPassthrough s
s a(sas)c C s t j d | j j j S( Ns direct.getAllPassthroughs()( R R/ R# R R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getAllPassthroughs
s
c C s; t j d x' t | j D] } | j | q Wd S( Ns direct.removeAllPassthroughs()( R R/ t reversedR R ( R* R< R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeAllPassthroughs s
c C s/ t | } t j d | | j j j | S( Ns direct.getPassthroughs('%s')( R R R/ R# R t get_passthroughs( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getPassthroughs s c C s$ t j d | d j | f d S( Ns# direct.PassthroughAdded('%s', '%s')s ','( R R/ R ( R* R R+ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR ( s c C s$ t j d | d j | f d S( Ns% direct.PassthroughRemoved('%s', '%s')s ','( R R/ R ( R* R R+ ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR . s c C s d S( s PK_ACTION_ALL implies all other actions, i.e. once a subject is
authorized for PK_ACTION_ALL it's also authorized for any other action.
Use-case is GUI (RHBZ#994729).
N( ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt authorizeAll6 s c C s0 t | } t j d | | j j j | S( Ns ipset.queryIPSet('%s')( R R R/ R# R t query_ipset( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
queryIPSetE s c C s t j d | j j j S( Ns ipsets.getIPSets()( R R/ R# R R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt getIPSetsO s
c C s8 t | t } t j d | | j j j | j S( Ns getIPSetSettings(%s)( R Rn R R/ R# R t get_ipsetR ( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR X s c C sf t | } t | } t j d | | f | j | | j j j | | | j | | d S( Ns ipset.addEntry('%s', '%s')( R R R/ R> R# R t add_entryt
EntryAdded( R* R t entryR< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt addEntryd s
c C sf t | } t | } t j d | | f | j | | j j j | | | j | | d S( Ns ipset.removeEntry('%s', '%s')( R R R/ R> R# R t remove_entryt EntryRemoved( R* R R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt removeEntryq s
c C sE t | } t | } t j d | | f | j j j | | S( Ns ipset.queryEntry('%s', '%s')( R R R/ R# R t query_entry( R* R R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
queryEntry~ s c C s0 t | } t j d | | j j j | S( Ns ipset.getEntries('%s')( R R R/ R# R t get_entries( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
getEntries s c C s t | } t | t } t j d | d j | | j j j | } | j j j | | t | } t | } x" | | D] } | j
| | q Wx" | | D] } | j | | q Wd S( Ns ipset.setEntries('%s', '[%s]')t ,( R t listR R/ R R# R R t set_entriesR R R ( R* R t entriesR< t old_entriest old_entries_sett entries_setR ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
setEntries s c C s3 t | } t | } t j d | | f d S( Ns ipset.EntryAdded('%s', '%s')( R R R/ ( R* R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s3 t | } t | } t j d | | f d S( Ns ipset.EntryRemoved('%s', '%s')( R R R/ ( R* R R ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s c C s t j d | j j j S( Ns helpers.getHelpers()( R R/ R# R R ( R* R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt
getHelpers s
c C s8 t | t } t j d | | j j j | j S( Ns getHelperSettings(%s)( R Rn R R/ R# R t
get_helperR ( R* R R< ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR s N( t __name__t
__module__t __doc__R t
persistentR R' t PK_ACTION_CONFIGt default_polkit_auth_requiredR R" R. R& R- R R> RB RD RF Ri R
t PROPERTIES_IFACER7 Ru Ry t slipt polkitt require_authR| R t signalR t PK_ACTION_INFOt INTROSPECTABLE_IFACER R( R R R R R t PK_ACTION_POLICIESRq R R t PK_ACTION_POLICIES_INFOR R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R t PK_ACTION_CONFIG_INFOR t DBUS_SIGNATURER R R R R R R R R R R
R
R R R R Ro R R R R R R$ R& R% R R, R R" R- R( R* R0 R3 R6 R8 R9 R/ R2 R5 R? RE RF RH RJ RC R< RM R RP RR RT RO RL RY R] R_ Ra Rd R\ RV Rg Rj Rk Rm Ro Ri Rf Rs Rv Rw Ry R{ Ru Rr R R R R R R~ R R R R R R R R R R R R R R R R R R R t PK_ACTION_DIRECTRp R R t PK_ACTION_DIRECT_INFOR R R R R R R R R R R R R R R R R R R R R R t
PK_ACTION_ALLR Rr R R R R R R R R R R R R R R ( ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyR B s 0"$
(< t __all__t
gi.repositoryR R t syst modulesR' t dbus.servicet slip.dbusR t slip.dbus.servicet firewallR t firewall.core.fwR t firewall.core.richR t firewall.core.loggerR t firewall.clientR t firewall.server.decoratorsR R
R R t firewall.server.configR
t firewall.dbus_utilsR R R R R R R t firewall.core.io.functionsR t firewall.core.io.zoneR t firewall.core.io.ipsetR t firewall.core.io.serviceR t firewall.core.io.icmptypeR t firewall.core.io.helperR t firewall.core.fw_nmR R R t firewall.core.fw_ifcfgR R t firewall.errorsR R t ObjectR ( ( ( s= /usr/lib/python2.7/site-packages/firewall/server/firewalld.pyt <module> s4
"4