관리-도구
편집 파일: service.cpython-36.pyc
3 @)�f�2 � @ s� d ddgZ ddljZddlZddlZddlZddlmZ ddlm Z ddl m Z m Z m Z mZmZmZmZmZ ddlmZ dd lmZ dd lmZ G d d � d e �ZG d d � d e �Zdd� Zddd�ZdS )�Service�service_reader�service_writer� N)�config)� u2b_if_py2)�PY2� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator� check_port� check_tcpudp�check_protocol� check_address)�log)�errors)� FirewallErrorc s� e Zd Zd d!d"dd#gfddgfdddifddgfd d$gfd dgfd dgff Zd d gZdddd�Zddgddgdgdgddgddgdgdgd�Z� fdd�Zdd� Zd d � Z d d � Z � Z S )%r �version� �short� description�ports�modules� destination� protocols� source_ports�includes�helpers�_�-N)r r �service�name�port�protocol�value�ipv4�ipv6r )r r! r" �moduler z source-port�include�helperc sN t t| �j� d| _d| _d| _g | _g | _g | _i | _ g | _ g | _ g | _ d S )Nr ) �superr �__init__r r r r r r r r r r )�self)� __class__� � /usr/lib/python3.6/service.pyr* D s zService.__init__c C sh d| _ d| _d| _| jd d �= | jd d �= | jd d �= | jj� | jd d �= | j d d �= | j d d �= d S )Nr ) r r r r r r r �clearr r r )r+ r- r- r. �cleanupQ s zService.cleanupc C s� t | j�| _t | j�| _t | j�| _dd� | jD �| _dd� | jD �| _dd� | jj� D �| _dd� | jD �| _dd� | j D �| _ dd� | j D �| _ d d� | j D �| _ d S ) z� HACK. I haven't been able to make sax parser return strings encoded (because of python 2) instead of in unicode. Get rid of it once we throw out python 2 support.c S s g | ]\}}t |�t |�f�qS r- )r )�.0�po�prr- r- r. � <listcomp>d s z*Service.encode_strings.<locals>.<listcomp>c S s g | ] }t |��qS r- )r )r1 �mr- r- r. r4 e s c S s i | ]\}}t |�t |��qS r- )r )r1 �k�vr- r- r. � <dictcomp>f s z*Service.encode_strings.<locals>.<dictcomp>c S s g | ] }t |��qS r- )r )r1 r3 r- r- r. r4 g s c S s g | ]\}}t |�t |�f�qS r- )r )r1 r2 r3 r- r- r. r4 h s c S s g | ] }t |��qS r- )r )r1 �sr- r- r. r4 j s c S s g | ] }t |��qS r- )r )r1 r9 r- r- r. r4 k s N) r r r r r r r �itemsr r r r )r+ r- r- r. �encode_strings] s zService.encode_stringsc C s: |dkrJx>|D ]6}|d dkr8t |d � t|d � qt|d � qW n�|dkrjx�|D ] }t|� qXW n�|dkr�x�|D ] }t |d � t|d � qxW n�|dkr�x�|D ]*}|dkr�ttjd | ��t||| � q�W n^|d k�r6xR|D ]J}|jd ��r|jd d�}d |k�r|jd d�}t |�dk r�ttj |��q�W d S )Nr r r � r r r r$ r% z'%s' not in {'ipv4'|'ipv6'}r � nf_conntrack_r r � )r$ r% ) r r r r r ZINVALID_DESTINATIONr � startswith�replace�lenZINVALID_MODULE)r+ r �itemZ all_configr! �protor r& r- r- r. � _check_configm s8 zService._check_config)r r )r r )r r )r r )r r ) �__name__� __module__� __qualname__ZIMPORT_EXPORT_STRUCTUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr* r0 r; rD � __classcell__r- r- )r, r. r & s4 c @ s e Zd Zdd� ZdS )�service_ContentHandlerc C s0 t j| ||� | jj||� |dkrTd|kr<tjd|d � d|krP|d | j_�n�|dkr`�n�|dkrl�n�|dk�r$|d dkr�t|d � t|d � |d |d f}|| jj kr�| jj j |� ntjd |d |d � nBt |d � |d | jj k�r| jj j |d � ntjd |d � �n|d k�rtt |d � |d | jj k�r`| jj j |d � ntjd |d � �n�|d k�r�t|d � t|d � |d |d f}|| jj k�r�| jj j |� ntjd|d |d � �nN|dk�r>xRd D ]J}||k�r�t||| � || jjk�r&tjd|� n|| | jj|< �q�W n�|dk�r�|d }|jd��r~|jdd�}d|k�r~|jdd�}|| jjk�r�| jjj |� n tjd|� n�|dk�r�|d | jjk�r�| jjj |d � ntjd|d � n@|dk�r,|d | jjk�r | jjj |d � ntjd|d � d S ) Nr r z'Ignoring deprecated attribute name='%s'r r r r! r r" z#Port '%s/%s' already set, ignoring.z$Protocol '%s' already set, ignoring.r# z source-portz)SourcePort '%s/%s' already set, ignoring.r r$ r% z2Destination address for '%s' already set, ignoringr& r= r r z"Module '%s' already set, ignoring.r' z#Include '%s' already set, ignoring.r( z"Helper '%s' already set, ignoring.)r$ r% )r � startElementrB Zparser_check_element_attrsr Zwarningr r r r �appendr r r r r r? r@ r r r )r+ r �attrs�entry�xr& r- r- r. rJ � s� z#service_ContentHandler.startElementN)rE rF rG rJ r- r- r- r. rI � s rI c C s t � }| jd�s ttjd| ��| d d � |_|j|j� | |_||_|j t j �rVdnd|_ |j |_ t|�}tj� }|j|� d|| f }t|d��b}tjd �}|j|� y|j|� W n8 tjk r� } zttjd|j� ��W Y d d }~X nX W d Q R X ~~t�r|j� |S ) Nz.xmlz'%s' is missing .xml suffix� FTz%s/%s�rbz not a valid service file: %s���)r �endswithr r Z INVALID_NAMEr Z check_name�filename�pathr? r � ETC_FIREWALLDZbuiltin�defaultrI �saxZ make_parserZsetContentHandler�openZ InputSourceZ setByteStream�parseZSAXParseExceptionZINVALID_SERVICEZ getExceptionr r; ) rS rT r �handler�parserr �f�source�msgr- r- r. r � s8 (c C sr |r|n| j }| jr$d|| jf }nd|| jf }tj j|�r�ytj|d| � W n0 tk r� } ztj d||� W Y d d }~X nX tj j |�}|j t j �r�tj j|� r�tj jt j �s�tjt j d� tj|d� tj|ddd�}t|�}|j� i }| j�r| jd k�r| j|d < |jd |� |jd � | j�rt| jd k�rt|jd � |jdi � |j| j� |jd� |jd � | j�r�| jd k�r�|jd � |jdi � |j| j� |jd� |jd � x>| jD ]4} |jd � |jd| d | d d�� |jd � �q�W x4| j D ]*} |jd � |jdd| i� |jd � �qW x>| j D ]4} |jd � |jd| d | d d�� |jd � �q<W x4| j D ]*} |jd � |jdd| i� |jd � �q|W t | j �dk�r�|jd � |jd| j � |jd � x4| j!D ]*} |jd � |jdd | i� |jd � �q�W x4| j"D ]*} |jd � |jdd| i� |jd � �qW |jd � |jd � |j#� |j$� ~d S ) Nz%s/%sz %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si� ZwtzUTF-8)�mode�encodingr r r � z r r r! r r< )r! r" r" r# z source-portr& r r r' r( )%rT rS r �os�exists�shutilZcopy2� Exceptionr �error�dirnamer? r rU �mkdir�iorX r Z startDocumentr rJ ZignorableWhitespacer Z charactersZ endElementr r Z simpleElementr r r rA r r r Z endDocument�close)r rT �_pathr r^ �dirpathr\ rZ rL r! r" r& r' r( r- r- r. r s� )N) �__all__Zxml.saxrW rb ri rd Zfirewallr Zfirewall.functionsr Zfirewall.core.io.io_objectr r r r r r r r Zfirewall.core.loggerr r Zfirewall.errorsr r rI r r r- r- r- r. �<module> s ( mQ