ruạṛ
3 Y�jW� � @ s� d dl mZ d dlZeejd< d dlZd dlZd dlZd dlZd dl m Z d dl m Z m Z mZ d dlmZ d dlmZ d dlmZ d d lmZ d d lmZ d d lmZmZm Z d d l m Z d d l m Z d dl m!Z!m"Z"m#Z#m$Z$ G dd� dejj%j&�Z'dS )� )�GObjectNZgobject)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�Zone)�ifcfg_set_zone_of_interface)�DEFAULT_ZONE_TARGET)� Rich_Rule)�log)�handle_exceptions�dbus_handle_exceptions�dbus_service_method)�errors)� FirewallError)�portStr�portInPortRange�coalescePortRange�breakPortRangec s� e Zd ZdZdZejjZe � fdd��Z e dd� �Z e dd� �Z e d d � �Zeejd d d �e d�dd���Zeejddd �e d�dd���Zejjjejj�eejdd�e d�dd����Zejjejdd�dd � �Zejjjejj�eejdd �e d�� fd d � ���Z eejj d d �e d�d!d"���Z eejj dd �e d�d#d$���Z d%d&� Z eejj d d�e d�d'd(���Z!eejj dd�e d�d)d*���Z"eejj �e d�d+d,���Z#ejjejj dd�e d-d.� ��Z$eejj �e d�d/d0���Z%ejjejj dd�e d1d2� ��Z&eejj dd�e d�d3d4���Z'ejjejj dd�e d5d6� ��Z(eejj dd �e d�d7d8���Z)eejj dd�e d�d9d:���Z*eejj dd �e d�d;d<���Z+eejj dd�e d�d=d>���Z,eejj dd �e d�d?d@���Z-eejj dd�e d�dAdB���Z.eejj dd �e d�dCdD���Z/eejj dd�e d�dEdF���Z0eejj dGd �e d�dHdI���Z1eejj dGd�e d�dJdK���Z2eejj dd�e d�dLdM���Z3eejj dd�e d�dNdO���Z4eejj ddPd �e d�dQdR���Z5eejj dSd �e d�dTdU���Z6eejj dSd�e d�dVdW���Z7eejj d d�e d�dXdY���Z8eejj d d�e d�dZd[���Z9eejj d dPd �e d�d\d]���Z:eejj dGd �e d�d^d_���Z;eejj dGd�e d�d`da���Z<eejj dd�e d�dbdc���Z=eejj dd�e d�ddde���Z>eejj ddPd �e d�dfdg���Z?eejj dSd �e d�dhdi���Z@eejj dSd�e d�djdk���ZAeejj d d�e d�dldm���ZBeejj d d�e d�dndo���ZCeejj d dPd �e d�dpdq���ZDeejj dGd �e d�drds���ZEeejj dGd�e d�dtdu���ZFeejj dd�e d�dvdw���ZGeejj dd�e d�dxdy���ZHeejj ddPd �e d�dzd{���ZIeejj dPd �e d�d|d}���ZJeejj dPd�e d�d~d���ZKeejj �e d�d�d����ZLeejj �e d�d�d����ZMeejj dPd �e d�d�d����ZNeejj dPd �e d�d�d����ZOeejj dPd�e d�d�d����ZPeejj �e d�d�d����ZQeejj �e d�d�d����ZReejj dPd �e d�d�d����ZSeejj d�d �e d�d�d����ZTeejj d�d�e d�d�d����ZUeejj d�d�e d�d�d����ZVeejj d�d�e d�d�d����ZWeejj d�dPd �e d�d�d����ZXeejj dGd �e d�d�d����ZYeejj dGd�e d�d�d����ZZeejj dd�e d�d�d����Z[eejj dd�e d�d�d����Z\eejj ddPd �e d�d�d����Z]eejj dGd �e d�d�d����Z^eejj dGd�e d�d�d����Z_eejj dd�e d�d�d����Z`eejj dd�e d�d�d����Zaeejj ddPd �e d�d�d����Zbeejj dGd �e d�d�d����Zceejj dGd�e �d d�d����Zdeejj dd�e �dd�d����Zeeejj dd�e �dd�d����Zfeejj ddPd �e �dd�d����Zg� ZhS ( �FirewallDConfigZonezFirewallD main classTc s\ t t| �j||� || _|| _|| _|| _|d | _|d | _d| j | _ t | tj j � d S )Nr � zconfig.zone.%d) �superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_ZONE)�selfr ZconfZzoner �args�kwargs)� __class__� �!/usr/lib/python3.6/config_zone.pyr = s z FirewallDConfigZone.__init__c C s d S )Nr% )r! r% r% r& �__del__J s zFirewallDConfigZone.__del__c C s | j � d S )N)Zremove_from_connection)r! r% r% r& � unregisterN s z FirewallDConfigZone.unregisterc C s� |dkrt j| jj�S |dkr,t j| jj�S |dkrBt j| jj�S |dkrXt j| jj�S |dkrnt j| jj�S t j j d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r) r* r ZBooleanr+ r, � exceptions� DBusException)r! � property_namer% r% r& � _get_propertyV s z!FirewallDConfigZone._get_propertyZss�v)� in_signature� out_signatureNc C sL t |t�}t |t�}tjd| j||� |tjjkrBtjj d| ��| j |�S )Nz%s.Get('%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r r. r/ r1 )r! �interface_namer0 �senderr% r% r& �Getg s zFirewallDConfigZone.Get�sza{sv}c C sd t |t�}tjd| j|� |tjjkr6tjj d| ��i }xd D ]}| j |�||< q@W tj |dd �S ) Nz%s.GetAll('%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existr) r* r r+ r, Zsv)� signature)r) r* r r+ r, ) r r5 r r6 r r r r r. r/ r1 Z Dictionary)r! r7 r8 �ret�xr% r% r& �GetAllx s zFirewallDConfigZone.GetAllZssv)r3 c C sl t |t�}t |t�}t |�}tjd| j|||� | jj|� |tjj krXtj j d| ��tj j d| ��d S )Nz%s.Set('%s', '%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existzGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r5 r r6 r r � accessCheckr r r r. r/ )r! r7 r0 Z new_valuer8 r% r% r& �Set� s zFirewallDConfigZone.Setzsa{sv}as)r; c C s2 t |t�}t |�}t |�}tjd| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r5 r r6 r )r! r7 Zchanged_propertiesZinvalidated_propertiesr% r% r& �PropertiesChanged� s z%FirewallDConfigZone.PropertiesChanged)r4 c s8 t jd| j� tt| �j| j| jj� �}t | |t j j �S )Nz%s.Introspect()) r Zdebug2r r r � Introspectr r Zget_busr r r r )r! r8 �data)r$ r% r& rB � s z FirewallDConfigZone.Introspectz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)c C sD t jd| j� | jj| j�}|d tkr@t|�}d|d< t|�}|S )z get settings for zone z%s.getSettings()� r+ ) r r6 r r Zget_zone_configr r �list�tuple)r! r8 �settings� _settingsr% r% r& � getSettings� s z FirewallDConfigZone.getSettingsc C s4 t jd| j� | jj| j�}|d tkr0d|d< |S )z get settings for zone z%s.getSettings2()�targetr+ )r r6 r r �get_zone_config_dictr r )r! r8 rG r% r% r& � getSettings2� s z FirewallDConfigZone.getSettings2c C s | j j| j�}d|kr"t|d �nt� }d|kr<t|d �nt� }t|t�rzt|tjd� �| }t|tjd� �| }nDd|kr�t|d �nt� }d|kr�t|d �nt� }|| }|| }x$|D ] } | jj | �r�t t j | ��q�W x$|D ] } | jj | �r�t t j | ��q�W dS )a Assignment of interfaces/sources to zones is different from other zone settings in the sense that particular interface/zone can be part of only one zone. So make sure added interfaces/sources have not already been bound to another zone.� interfaces�sourcesN)r rK r �set� isinstancerF r Zindex_ofr ZgetZoneOfInterfacer r Z ZONE_CONFLICTZgetZoneOfSource) r! rG Z old_settingsZ old_ifacesZ old_sourcesZ added_ifacesZ added_sourcesZ new_ifacesZ new_sourcesZiface�sourcer% r% r& � _checkDuplicateInterfacesSources� s z4FirewallDConfigZone._checkDuplicateInterfacesSourcesc C st t |�}tjd| j� | jj|� |d dkrFt|�}t|d< t|�}| j |� | j j | j |�| _ | j | j j� dS )z!update settings for zone z%s.update('...')rD r+ N)r r r6 r r r? rE r rF rR r Zset_zone_configr �Updatedr) )r! rG r8 rH r% r% r& �update� s zFirewallDConfigZone.updatec C sl t |�}tjd| j� | jj|� d|kr>|d dkr>t|d< | j|� | jj | j |�| _ | j | j j � dS )z!update settings for zone z%s.update2('...')rJ r+ N) r r r6 r r r? r rR r Zset_zone_config_dictr rS r) )r! rG r8 r% r% r& �update2� s zFirewallDConfigZone.update2c C s< t jd| j� | jj|� | jj| j�| _| j| jj � dS )z/load default settings for builtin zone z%s.loadDefaults()N) r r6 r r r? r Zload_zone_defaultsr rS r) )r! r8 r% r% r& � loadDefaults s z FirewallDConfigZone.loadDefaultsc C s t jd| j|f � d S )Nz%s.Updated('%s'))r r6 r )r! r) r% r% r& rS s zFirewallDConfigZone.Updatedc C s: t jd| j� | jj|� | jj| j� | jj| j� dS )zremove zone z%s.removeZone()N) r r6 r r r? r Z remove_zoner Z removeZone)r! r8 r% r% r& �remove s zFirewallDConfigZone.removec C s t jd| j|f � d S )Nz%s.Removed('%s'))r r6 r )r! r) r% r% r& �Removed# s zFirewallDConfigZone.Removedc C sF t |t�}tjd| j|� | jj|� | jj| j |�| _ | j |� dS )zrename zone z%s.rename('%s')N) r r5 r r6 r r r? r Z rename_zoner �Renamed)r! r) r8 r% r% r& �rename* s zFirewallDConfigZone.renamec C s t jd| j|f � d S )Nz%s.Renamed('%s'))r r6 r )r! r) r% r% r& rY 6 s zFirewallDConfigZone.Renamedc C s t jd| j� | j� d S )Nz%s.getVersion()r )r r6 r rI )r! r8 r% r% r& � getVersion= s z FirewallDConfigZone.getVersionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setVersion('%s')r ) r r5 r r6 r r r? rE rI rT )r! �versionr8 rG r% r% r& � setVersionD s z FirewallDConfigZone.setVersionc C s t jd| j� | j� d S )Nz %s.getShort()r )r r6 r rI )r! r8 r% r% r& �getShortQ s z FirewallDConfigZone.getShortc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setShort('%s')r ) r r5 r r6 r r r? rE rI rT )r! Zshortr8 rG r% r% r& �setShortX s z FirewallDConfigZone.setShortc C s t jd| j� | j� d S )Nz%s.getDescription()� )r r6 r rI )r! r8 r% r% r& �getDescriptione s z"FirewallDConfigZone.getDescriptionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setDescription('%s')r` ) r r5 r r6 r r r? rE rI rT )r! � descriptionr8 rG r% r% r& �setDescriptionl s z"FirewallDConfigZone.setDescriptionc C s. t jd| j� | j� }|d tkr*|d S dS )Nz%s.getTarget()rD r+ )r r6 r rI r )r! r8 rG r% r% r& � getTarget| s z FirewallDConfigZone.getTargetc C sT t |t�}tjd| j|� | jj|� t| j� �}|dkr>|nt |d< | j |� d S )Nz%s.setTarget('%s')r+ rD ) r r5 r r6 r r r? rE rI r rT )r! rJ r8 rG r% r% r& � setTarget� s z FirewallDConfigZone.setTarget�asc C s t jd| j� | j� d S )Nz%s.getServices()� )r r6 r rI )r! r8 r% r% r& � getServices� s z FirewallDConfigZone.getServicesc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setServices('[%s]')�,rg ) r rE r r6 r �joinr r? rI rT )r! Zservicesr8 rG r% r% r& � setServices� s z FirewallDConfigZone.setServicesc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.addService('%s')rg )r r5 r r6 r r r? rE rI r r �ALREADY_ENABLED�appendrT )r! �servicer8 rG r% r% r& � addService� s z FirewallDConfigZone.addServicec C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.removeService('%s')rg )r r5 r r6 r r r? rE rI r r � NOT_ENABLEDrW rT )r! rn r8 rG r% r% r& � removeService� s z!FirewallDConfigZone.removeService�bc C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryService('%s')rg )r r5 r r6 r rI )r! rn r8 r% r% r& � queryService� s z FirewallDConfigZone.queryServiceza(ss)c C s t jd| j� | j� d S )Nz %s.getPorts()� )r r6 r rI )r! r8 r% r% r& �getPorts� s z FirewallDConfigZone.getPortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j |� t| j � �}||d< | j |� d S )Nz%s.setPorts('[%s]')ri c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr% )�.0�portr% r% r& � <genexpr>� s z/FirewallDConfigZone.setPorts.<locals>.<genexpr>rt ) r rE rP rm rF r r6 r rj r r? rI rT )r! �portsr8 �_portsrw rG r% r% r& �setPorts� s z FirewallDConfigZone.setPortsc s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x.|D ]&}t ||d �r^t t j d|� f ��q^W t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S ) Nz%s.addPort('%s', '%s')c s | d � kS )Nr r% )r= )�protocolr% r& �<lambda>� s z-FirewallDConfigZone.addPort.<locals>.<lambda>rt r z%s:%sc S s g | ] \}}|�qS r% r% )rv �_port� _protocolr% r% r& � <listcomp>� s z/FirewallDConfigZone.addPort.<locals>.<listcomp>�-)r r5 r r6 r r r? rE rI �filterr r r rl r rW r rm rT ) r! rw r| r8 rG �existing_port_ids�port_id� added_ranges�removed_ranges�ranger% )r| r& �addPort� s" zFirewallDConfigZone.addPortc s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x0|D ]}t ||d �r^P q^W t t j d|� f ��t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S ) Nz%s.removePort('%s', '%s')c s | d � kS )Nr r% )r= )r| r% r& r} s z0FirewallDConfigZone.removePort.<locals>.<lambda>rt r z%s:%sc S s g | ] \}}|�qS r% r% )rv r~ r r% r% r& r� s z2FirewallDConfigZone.removePort.<locals>.<listcomp>r� )r r5 r r6 r r r? rE rI r� r r r rp r rW r rm rT ) r! rw r| r8 rG r� r� r� r� r� r% )r| r& � removePort� s" z FirewallDConfigZone.removePortc C sZ t |t�}t |t�}tjd| j||� x.| j� d D ] \}}t||�r4||kr4dS q4W dS )Nz%s.queryPort('%s', '%s')rt TF)r r5 r r6 r rI r )r! rw r| r8 r~ r r% r% r& � queryPort s z FirewallDConfigZone.queryPortc C s t jd| j� | j� d S )Nz%s.getProtocols()� )r r6 r rI )r! r8 r% r% r& � getProtocols s z FirewallDConfigZone.getProtocolsc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setProtocols('[%s]')ri r� ) r rE r r6 r rj r r? rI rT )r! Z protocolsr8 rG r% r% r& � setProtocols& s z FirewallDConfigZone.setProtocolsc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.addProtocol('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT )r! r| r8 rG r% r% r& � addProtocol2 s z FirewallDConfigZone.addProtocolc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.removeProtocol('%s')r� )r r5 r r6 r r r? rE rI r r rp rW rT )r! r| r8 rG r% r% r& �removeProtocol? s z"FirewallDConfigZone.removeProtocolc C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryProtocol('%s')r� )r r5 r r6 r rI )r! r| r8 r% r% r& � queryProtocolL s z!FirewallDConfigZone.queryProtocolc C s t jd| j� | j� d S )Nz%s.getSourcePorts()� )r r6 r rI )r! r8 r% r% r& �getSourcePortsV s z"FirewallDConfigZone.getSourcePortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j |� t| j � �}||d< | j |� d S )Nz%s.setSourcePorts('[%s]')ri c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr% )rv rw r% r% r& rx j s z5FirewallDConfigZone.setSourcePorts.<locals>.<genexpr>r� ) r rE rP rm rF r r6 r rj r r? rI rT )r! ry r8 rz rw rG r% r% r& �setSourcePorts] s z"FirewallDConfigZone.setSourcePortsc s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x.|D ]&}t ||d �r^t t j d|� f ��q^W t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S ) Nz %s.addSourcePort('%s', '%s')c s | d � kS )Nr r% )r= )r| r% r& r} z s z3FirewallDConfigZone.addSourcePort.<locals>.<lambda>r� r z%s:%sc S s g | ] \}}|�qS r% r% )rv r~ r r% r% r& r� s z5FirewallDConfigZone.addSourcePort.<locals>.<listcomp>r� )r r5 r r6 r r r? rE rI r� r r r rl r rW r rm rT ) r! rw r| r8 rG r� r� r� r� r� r% )r| r& � addSourcePortp s" z!FirewallDConfigZone.addSourcePortc s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x0|D ]}t ||d �r^P q^W t t j d|� f ��t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S ) Nz %s.removeSourcePort('%s', '%s')c s | d � kS )Nr r% )r= )r| r% r& r} � s z6FirewallDConfigZone.removeSourcePort.<locals>.<lambda>r� r z%s:%sc S s g | ] \}}|�qS r% r% )rv r~ r r% r% r& r� � s z8FirewallDConfigZone.removeSourcePort.<locals>.<listcomp>r� )r r5 r r6 r r r? rE rI r� r r r rp r rW r rm rT ) r! rw r| r8 rG r� r� r� r� r� r% )r| r& �removeSourcePort� s" z$FirewallDConfigZone.removeSourcePortc C sZ t |t�}t |t�}tjd| j||� x.| j� d D ] \}}t||�r4||kr4dS q4W dS )Nz %s.querySourcePort('%s', '%s')r� TF)r r5 r r6 r rI r )r! rw r| r8 r~ r r% r% r& �querySourcePort� s z#FirewallDConfigZone.querySourcePortc C s t jd| j� | j� d S )Nz%s.getIcmpBlocks()� )r r6 r rI )r! r8 r% r% r& � getIcmpBlocks� s z!FirewallDConfigZone.getIcmpBlocksc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setIcmpBlocks('[%s]')ri r� ) r rE r r6 r rj r r? rI rT )r! Z icmptypesr8 rG r% r% r& � setIcmpBlocks� s z!FirewallDConfigZone.setIcmpBlocksc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.addIcmpBlock('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT )r! �icmptyper8 rG r% r% r& � addIcmpBlock� s z FirewallDConfigZone.addIcmpBlockc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.removeIcmpBlock('%s')r� )r r5 r r6 r r r? rE rI r r rp rW rT )r! r� r8 rG r% r% r& �removeIcmpBlock� s z#FirewallDConfigZone.removeIcmpBlockc C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryIcmpBlock('%s')r� )r r5 r r6 r rI )r! r� r8 r% r% r& �queryIcmpBlock� s z"FirewallDConfigZone.queryIcmpBlockc C s t jd| j� | j� d S )Nz%s.getIcmpBlockInversion()� )r r6 r rI )r! r8 r% r% r& �getIcmpBlockInversion� s z)FirewallDConfigZone.getIcmpBlockInversionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz %s.setIcmpBlockInversion('%s')r� ) r �boolr r6 r r r? rE rI rT )r! �flagr8 rG r% r% r& �setIcmpBlockInversion� s z)FirewallDConfigZone.setIcmpBlockInversionc C sP t jd| j� | jj|� t| j� �}|d r:ttj d��d|d< | j |� d S )Nz%s.addIcmpBlockInversion()r� zicmp-block-inversionT) r r6 r r r? rE rI r r rl rT )r! r8 rG r% r% r& �addIcmpBlockInversion� s z)FirewallDConfigZone.addIcmpBlockInversionc C sP t jd| j� | jj|� t| j� �}|d s:ttj d��d|d< | j |� d S )Nz %s.removeIcmpBlockInversion()r� zicmp-block-inversionF) r r6 r r r? rE rI r r rp rT )r! r8 rG r% r% r& �removeIcmpBlockInversion s z,FirewallDConfigZone.removeIcmpBlockInversionc C s t jd| j� | j� d S )Nz %s.queryIcmpBlockInversion()r� )r r6 r rI )r! r8 r% r% r& �queryIcmpBlockInversion s z+FirewallDConfigZone.queryIcmpBlockInversionc C s t jd| j� | j� d S )Nz%s.getMasquerade()� )r r6 r rI )r! r8 r% r% r& � getMasquerade s z!FirewallDConfigZone.getMasqueradec C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setMasquerade('%s')r� ) r r� r r6 r r r? rE rI rT )r! � masquerader8 rG r% r% r& � setMasquerade s z!FirewallDConfigZone.setMasqueradec C sP t jd| j� | jj|� t| j� �}|d r:ttj d��d|d< | j |� d S )Nz%s.addMasquerade()r� r� T) r r6 r r r? rE rI r r rl rT )r! r8 rG r% r% r& � addMasquerade' s z!FirewallDConfigZone.addMasqueradec C sP t jd| j� | jj|� t| j� �}|d s:ttj d��d|d< | j |� d S )Nz%s.removeMasquerade()r� r� F) r r6 r r r? rE rI r r rp rT )r! r8 rG r% r% r& �removeMasquerade2 s z$FirewallDConfigZone.removeMasqueradec C s t jd| j� | j� d S )Nz%s.queryMasquerade()r� )r r6 r rI )r! r8 r% r% r& �queryMasquerade= s z#FirewallDConfigZone.queryMasqueradeza(ssss)c C s t jd| j� | j� d S )Nz%s.getForwardPorts()� )r r6 r rI )r! r8 r% r% r& �getForwardPortsF s z#FirewallDConfigZone.getForwardPortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j |� t| j � �}||d< | j |� d S )Nz%s.setForwardPorts('[%s]')ri c s s. | ]&}d |d |d |d |d f V qdS )z('%s, '%s', '%s', '%s')r r r` � Nr% )rv rw r% r% r& rx Z s z6FirewallDConfigZone.setForwardPorts.<locals>.<genexpr>r� ) r rE rP rm rF r r6 r rj r r? rI rT )r! ry r8 rz rw rG r% r% r& �setForwardPortsM s z#FirewallDConfigZone.setForwardPortsZssssc C s� t |t�}t |t�}t |t�}t |t�}tjd| j||||� | jj|� ||t|�t|�f}t| j� �}||d kr�t t j d||||f ��|d j |� | j |� d S )Nz)%s.addForwardPort('%s', '%s', '%s', '%s')r� z %s:%s:%s:%s)r r5 r r6 r r r? rE rI r r rl rm rT )r! rw r| �toport�toaddrr8 �fwp_idrG r% r% r& �addForwardPorta s z"FirewallDConfigZone.addForwardPortc C s� t |t�}t |t�}t |t�}t |t�}tjd| j||||� | jj|� ||t|�t|�f}t| j� �}||d kr�t t j d||||f ��|d j |� | j |� d S )Nz,%s.removeForwardPort('%s', '%s', '%s', '%s')r� z %s:%s:%s:%s)r r5 r r6 r r r? rE rI r r rp rW rT )r! rw r| r� r� r8 r� rG r% r% r& �removeForwardPortu s z%FirewallDConfigZone.removeForwardPortc C sb t |t�}t |t�}t |t�}t |t�}tjd| j||||� ||t|�t|�f}|| j� d kS )Nz+%s.queryForwardPort('%s', '%s', '%s', '%s')r� )r r5 r r6 r rI )r! rw r| r� r� r8 r� r% r% r& �queryForwardPort� s z$FirewallDConfigZone.queryForwardPortc C s t jd| j� | j� d S )Nz%s.getInterfaces()� )r r6 r rI )r! r8 r% r% r& � getInterfaces� s z!FirewallDConfigZone.getInterfacesc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setInterfaces('[%s]')ri r� ) r rE r r6 r rj r r? rI rT )r! rM r8 rG r% r% r& � setInterfaces� s z!FirewallDConfigZone.setInterfacesc C st t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� t| jj|� d S )Nz%s.addInterface('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT r r r) )r! � interfacer8 rG r% r% r& � addInterface� s z FirewallDConfigZone.addInterfacec C sp t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� td|� d S )Nz%s.removeInterface('%s')r� � )r r5 r r6 r r r? rE rI r r rp rW rT r )r! r� r8 rG r% r% r& �removeInterface� s z#FirewallDConfigZone.removeInterfacec C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryInterface('%s')r� )r r5 r r6 r rI )r! r� r8 r% r% r& �queryInterface� s z"FirewallDConfigZone.queryInterfacec C s t jd| j� | j� d S )Nz%s.getSources()� )r r6 r rI )r! r8 r% r% r& � getSources� s z FirewallDConfigZone.getSourcesc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setSources('[%s]')ri r� ) r rE r r6 r rj r r? rI rT )r! rN r8 rG r% r% r& � setSources� s z FirewallDConfigZone.setSourcesc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.addSource('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT )r! rQ r8 rG r% r% r& � addSource� s z FirewallDConfigZone.addSourcec C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t j |��|d j |� | j |� d S )Nz%s.removeSource('%s')r� )r r5 r r6 r r r? rE rI r r rp rW rT )r! rQ r8 rG r% r% r& � removeSource� s z FirewallDConfigZone.removeSourcec C s* t |t�}tjd| j|� || j� d kS )Nz%s.querySource('%s')r� )r r5 r r6 r rI )r! rQ r8 r% r% r& � querySource s z FirewallDConfigZone.querySourcec C s t jd| j� | j� d S )Nz%s.getRichRules()� )r r6 r rI )r! r8 r% r% r& � getRichRules s z FirewallDConfigZone.getRichRulesc C s\ t |t�}tjd| jdj|�� | jj|� t| j� �}dd� |D �}||d< | j |� d S )Nz%s.setRichRules('[%s]')ri c S s g | ]}t t|d ���qS ))�rule_str)r5 r )rv �rr% r% r& r� s z4FirewallDConfigZone.setRichRules.<locals>.<listcomp>r� ) r rE r r6 r rj r r? rI rT )r! Zrulesr8 rG r% r% r& � setRichRules s z FirewallDConfigZone.setRichRulesc C st t |t�}tjd| j|� | jj|� t| j� �}tt |d��}||d krXt t j |��|d j |� | j|� d S )Nz%s.addRichRule('%s'))r� r� )r r5 r r6 r r r? rE rI r r r rl rm rT )r! �ruler8 rG r� r% r% r& � addRichRule s z FirewallDConfigZone.addRichRulec C st t |t�}tjd| j|� | jj|� t| j� �}tt |d��}||d krXt t j |��|d j |� | j|� d S )Nz%s.removeRichRule('%s'))r� r� )r r5 r r6 r r r? rE rI r r r rp rW rT )r! r� r8 rG r� r% r% r& �removeRichRule. s z"FirewallDConfigZone.removeRichRulec C s8 t |t�}tjd| j|� tt|d��}|| j� d kS )Nz%s.queryRichRule('%s'))r� r� )r r5 r r6 r r rI )r! r� r8 r� r% r% r& � queryRichRule< s z!FirewallDConfigZone.queryRichRule)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)i�__name__� __module__� __qualname__�__doc__Z persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r r' r( r1 r ZPROPERTIES_IFACEr9 r> �slipZpolkitZ require_authr@ rn �signalrA ZPK_ACTION_INFOZINTROSPECTABLE_IFACErB r rI rL rR rT rU rV rS rW rX rZ rY r[ r] r^ r_ ra rc rd re rh rk ro rq rs ru r{ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� � __classcell__r% r% )r$ r& r 5 sf r )(Z gi.repositoryr �sys�modulesr Z dbus.serviceZ slip.dbusr� Zslip.dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.zoner Zfirewall.core.fw_ifcfgr Zfirewall.core.baser Zfirewall.core.richr Zfirewall.core.loggerr Zfirewall.server.decoratorsr r r r Zfirewall.errorsr Zfirewall.functionsr r r r rn ZObjectr r% r% r% r& �<module> s$
cải xoăn