Your IP : 18.217.241.235
3
@)�f�u � @ s� d dl mZ d dlZeejd< d dlZd dlZd dlZd dlZd dl m
Z
d dl m Z m
Z
mZ d dlmZ d dlmZmZmZ d dl mZ d d lmZ G d
d � d ejjj�ZdS ) � )�GObjectNZgobject)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�log)�handle_exceptions�dbus_handle_exceptions�dbus_service_method)�errors)�
FirewallErrorc s� e Zd ZdZdZejjZe � fdd��Z
e dd� �Z e dd� �Z
e d d
� �Zeejd d d
�e d�dd���Zeejddd
�e d�dd���Zejjjejj�eejdd�e d�dd����Zejjejdd�dd � �Zejjjejj�eejdd �e d�� fd d � ���Z eejj d d �e d�d!d"���Z eejj dd �e d�d#d$���Z eejj d d�e d�d%d&���Z eejj dd�e d�d'd(���Z!eejj �e d�d)d*���Z"ejjejj dd�e d+d,� ��Z#eejj �e d�d-d.���Z$ejjejj dd�e d/d0� ��Z%eejj dd�e d�d1d2���Z&ejjejj dd�e d3d4� ��Z'eejj dd �e d�d5d6���Z(eejj dd�e d�d7d8���Z)eejj dd �e d�d9d:���Z*eejj dd�e d�d;d<���Z+eejj dd �e d�d=d>���Z,eejj dd�e d�d?d@���Z-eejj dAd �e d�dBdC���Z.eejj dAd�e d�dDdE���Z/eejj d d�e d�dFdG���Z0eejj d d�e d�dHdI���Z1eejj d dJd
�e d�dKdL���Z2eejj dMd �e d�dNdO���Z3eejj dMd�e d�dPdQ���Z4eejj dd�e d�dRdS���Z5eejj dd�e d�dTdU���Z6eejj ddJd
�e d�dVdW���Z7eejj dAd �e d�dXdY���Z8eejj dAd�e d�dZd[���Z9eejj d d�e d�d\d]���Z:eejj d d�e d�d^d_���Z;eejj d dJd
�e d�d`da���Z<eejj dMd �e d�dbdc���Z=eejj dMd�e d�ddde���Z>eejj dd�e d�dfdg���Z?eejj dd�e d�dhdi���Z@eejj ddJd
�e d�djdk���ZAeejj dld �e d�dmdn���ZBeejj dld�e d�dodp���ZCeejj ddd
�e d�dqdr���ZDeejj d d�e d�dsdt���ZEeejj dd�e d�dudv���ZFeejj d dJd
�e d�dwdx���ZGeejj dMd �e d�dydz���ZHeejj dMd�e d�d{d|���ZIeejj dd�e d�d}d~���ZJeejj dd�e d�dd����ZKeejj ddJd
�e d�d�d����ZL� ZMS )��FirewallDConfigServicezFirewallD main classTc s\ t t| �j||� || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j � d S )Nr � zconfig.service.%d)
�superr
�__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus� DBUS_INTERFACE_CONFIG_SERVICE)�selfr Zconf�servicer �args�kwargs)� __class__� �$/usr/lib/python3.6/config_service.pyr 7 s
z FirewallDConfigService.__init__c C s d S )Nr )r r r r �__del__D s z FirewallDConfigService.__del__c C s | j � d S )N)Zremove_from_connection)r r r r �
unregisterH s z!FirewallDConfigService.unregisterc C s� |dkrt j| jj�S |dkr,t j| jj�S |dkrBt j| jj�S |dkrXt j| jj�S |dkrnt j| jj�S t j j
d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r" r# r ZBooleanr$ r% �
exceptions�
DBusException)r �
property_namer r r �
_get_propertyP s z$FirewallDConfigService._get_propertyZss�v)� in_signature�
out_signatureNc C sL t |t�}t |t�}tjd| j||� |tjjkrBtjj d| ��| j
|�S )Nz%s.Get('%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r r' r( r* )r �interface_namer) �senderr r r �Geta s
zFirewallDConfigService.Get�sza{sv}c C sd t |t�}tjd| j|� |tjjkr6tjj d| ��i }xd
D ]}| j
|�||< q@W tj |dd �S ) Nz%s.GetAll('%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existr" r# r r$ r% Zsv)� signature)r" r# r r$ r% ) r r. r r/ r r r r r' r( r* Z
Dictionary)r r0 r1 �ret�xr r r �GetAllr s
z FirewallDConfigService.GetAllZssv)r, c C sl t |t�}t |t�}t |�}tjd| j|||� | jj|� |tjj krXtj
j d| ��tj
j d| ��d S )Nz%s.Set('%s', '%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existzGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r. r r/ r r � accessCheckr r r r' r( )r r0 r) Z new_valuer1 r r r �Set� s
zFirewallDConfigService.Setzsa{sv}as)r4 c C s2 t |t�}t |�}t |�}tjd| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r. r r/ r )r r0 Zchanged_propertiesZinvalidated_propertiesr r r �PropertiesChanged� s
z(FirewallDConfigService.PropertiesChanged)r- c s8 t jd| j� tt| �j| j| jj� �}t | |t
j j �S )Nz%s.Introspect())
r Zdebug2r r r
�
Introspectr r Zget_busr r r r )r r1 �data)r r r r; � s
z!FirewallDConfigService.Introspectz(sssa(ss)asa{ss}asa(ss))c C s t jd| j� | jj| j�S )z!get settings for service
z%s.getSettings())r r/ r r Zget_service_configr )r r1 r r r � getSettings� s z"FirewallDConfigService.getSettingsc C s t jd| j� | jj| j�S )z!get settings for service
z%s.getSettings2())r r/ r r �get_service_config_dictr )r r1 r r r � getSettings2� s z#FirewallDConfigService.getSettings2c C sF t |�}tjd| j� | jj|� | jj| j|�| _| j | jj
� dS )z$update settings for service
z%s.update('...')N) r r r/ r r r8 r Zset_service_configr �Updatedr" )r �settingsr1 r r r �update� s
z FirewallDConfigService.updatec C sF t |�}tjd| j� | jj|� | jj| j|�| _| j | jj
� d S )Nz%s.update2('...')) r r r/ r r r8 r �set_service_config_dictr r@ r" )r rA r1 r r r �update2� s
z FirewallDConfigService.update2c C s< t jd| j� | jj|� | jj| j�| _| j| jj � dS )z2load default settings for builtin service
z%s.loadDefaults()N)
r r/ r r r8 r Zload_service_defaultsr r@ r" )r r1 r r r � loadDefaults� s z#FirewallDConfigService.loadDefaultsc C s t jd| j|f � d S )Nz%s.Updated('%s'))r r/ r )r r" r r r r@ � s z FirewallDConfigService.Updatedc C s: t jd| j� | jj|� | jj| j� | jj| j� dS )zremove service
z%s.removeService()N) r r/ r r r8 r Zremove_servicer Z
removeService)r r1 r r r �remove� s z FirewallDConfigService.removec C s t jd| j|f � d S )Nz%s.Removed('%s'))r r/ r )r r" r r r �Removed� s z FirewallDConfigService.Removedc C sF t |t�}tjd| j|� | jj|� | jj| j |�| _ | j
|� dS )zrename service
z%s.rename('%s')N) r r. r r/ r r r8 r Zrename_servicer �Renamed)r r" r1 r r r �rename� s
z FirewallDConfigService.renamec C s t jd| j|f � d S )Nz%s.Renamed('%s'))r r/ r )r r" r r r rH s z FirewallDConfigService.Renamedc C s t jd| j� | j� d S )Nz%s.getVersion()r )r r/ r r= )r r1 r r r �
getVersion s z!FirewallDConfigService.getVersionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setVersion('%s')r )
r r. r r/ r r r8 �listr= rB )r �versionr1 rA r r r �
setVersion s
z!FirewallDConfigService.setVersionc C s t jd| j� | j� d S )Nz
%s.getShort()r )r r/ r r= )r r1 r r r �getShort" s z FirewallDConfigService.getShortc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setShort('%s')r )
r r. r r/ r r r8 rK r= rB )r Zshortr1 rA r r r �setShort) s
z FirewallDConfigService.setShortc C s t jd| j� | j� d S )Nz%s.getDescription()� )r r/ r r= )r r1 r r r �getDescription6 s z%FirewallDConfigService.getDescriptionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setDescription('%s')rP )
r r. r r/ r r r8 rK r= rB )r � descriptionr1 rA r r r �setDescription= s
z%FirewallDConfigService.setDescriptionza(ss)c C s t jd| j� | j� d S )Nz
%s.getPorts()� )r r/ r r= )r r1 r r r �getPortsK s z FirewallDConfigService.getPortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j
|� t| j � �}||d< | j |� d S )Nz%s.setPorts('[%s]')�,c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr )�.0�portr r r � <genexpr>_ s z2FirewallDConfigService.setPorts.<locals>.<genexpr>rT )
r rK �
isinstance�append�tupler r/ r �joinr r8 r= rB )r �portsr1 �_portsrX rA r r r �setPortsR s
z FirewallDConfigService.setPortsc C s� t |t�}t |t�}tjd| j||� | jj|� t| j� �}||f|d krbt t
j d||f ��|d j ||f� | j
|� d S )Nz%s.addPort('%s', '%s')rT z%s:%s)r r. r r/ r r r8 rK r= r r �ALREADY_ENABLEDr[ rB )r rX �protocolr1 rA r r r �addPorte s
z FirewallDConfigService.addPortc C s� t |t�}t |t�}tjd| j||� | jj|� t| j� �}||f|d krbt t
j d||f ��|d j ||f� | j
|� d S )Nz%s.removePort('%s', '%s')rT z%s:%s)r r. r r/ r r r8 rK r= r r � NOT_ENABLEDrF rB )r rX rb r1 rA r r r �
removePortu s
z!FirewallDConfigService.removePort�bc C s: t |t�}t |t�}tjd| j||� ||f| j� d kS )Nz%s.queryPort('%s', '%s')rT )r r. r r/ r r= )r rX rb r1 r r r � queryPort� s
z FirewallDConfigService.queryPort�asc C s t jd| j� | j� d S )Nz%s.getProtocols()� )r r/ r r= )r r1 r r r � getProtocols� s z#FirewallDConfigService.getProtocolsc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setProtocols('[%s]')rV ri )
r rK r r/ r r] r r8 r= rB )r Z protocolsr1 rA r r r � setProtocols� s
z#FirewallDConfigService.setProtocolsc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.addProtocol('%s')ri )r r. r r/ r r r8 rK r= r r ra r[ rB )r rb r1 rA r r r � addProtocol� s
z"FirewallDConfigService.addProtocolc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.removeProtocol('%s')ri )r r. r r/ r r r8 rK r= r r rd rF rB )r rb r1 rA r r r �removeProtocol� s
z%FirewallDConfigService.removeProtocolc C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryProtocol(%s')ri )r r. r r/ r r= )r rb r1 r r r �
queryProtocol� s
z$FirewallDConfigService.queryProtocolc C s t jd| j� | j� d S )Nz%s.getSourcePorts()� )r r/ r r= )r r1 r r r �getSourcePorts� s z%FirewallDConfigService.getSourcePortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j
|� t| j � �}||d< | j |� d S )Nz%s.setSourcePorts('[%s]')rV c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr )rW rX r r r rY � s z8FirewallDConfigService.setSourcePorts.<locals>.<genexpr>ro )
r rK rZ r[ r\ r r/ r r] r r8 r= rB )r r^ r1 r_ rX rA r r r �setSourcePorts� s
z%FirewallDConfigService.setSourcePortsc C s� t |t�}t |t�}tjd| j||� | jj|� t| j� �}||f|d krbt t
j d||f ��|d j ||f� | j
|� d S )Nz %s.addSourcePort('%s', '%s')ro z%s:%s)r r. r r/ r r r8 rK r= r r ra r[ rB )r rX rb r1 rA r r r �
addSourcePort� s
z$FirewallDConfigService.addSourcePortc C s� t |t�}t |t�}tjd| j||� | jj|� t| j� �}||f|d krbt t
j d||f ��|d j ||f� | j
|� d S )Nz %s.removeSourcePort('%s', '%s')ro z%s:%s)r r. r r/ r r r8 rK r= r r rd rF rB )r rX rb r1 rA r r r �removeSourcePort� s
z'FirewallDConfigService.removeSourcePortc C s: t |t�}t |t�}tjd| j||� ||f| j� d kS )Nz %s.querySourcePort('%s', '%s')ro )r r. r r/ r r= )r rX rb r1 r r r �querySourcePort s
z&FirewallDConfigService.querySourcePortc C s t jd| j� | j� d S )Nz%s.getModules()� )r r/ r r= )r r1 r r r �
getModules s z!FirewallDConfigService.getModulesc C s� t |t�}g }x@|D ]8}|jd�rB|jdd�}d|krB|jdd�}|j|� qW |}tjd| jdj|�� | j j
|� t| j � �}||d< | j |� d S )N�
nf_conntrack_� �_�-z%s.setModules('[%s]')rV ru )
r rK �
startswith�replacer[ r r/ r r] r r8 r= rB )r �modulesr1 Z_modules�modulerA r r r �
setModules s
z!FirewallDConfigService.setModulesc C s� t |t�}|jd�r4|jdd�}d|kr4|jdd�}tjd| j|� | jj|� t | j
� �}||d krtt t j
|��|d j|� | j|� d S )Nrw rx ry rz z%s.addModule('%s')ru )r r. r{ r| r r/ r r r8 rK r= r r ra r[ rB )r r~ r1 rA r r r � addModule' s
z FirewallDConfigService.addModulec C s� t |t�}|jd�r4|jdd�}d|kr4|jdd�}tjd| j|� | jj|� t | j
� �}||d krtt t j
|��|d j|� | j|� d S )Nrw rx ry rz z%s.removeModule('%s')ru )r r. r{ r| r r/ r r r8 rK r= r r rd rF rB )r r~ r1 rA r r r � removeModule8 s
z#FirewallDConfigService.removeModulec C sT t |t�}|jd�r4|jdd�}d|kr4|jdd�}tjd| j|� || j� d kS )Nrw rx ry rz z%s.queryModule('%s')ru )r r. r{ r| r r/ r r= )r r~ r1 r r r � queryModuleI s
z"FirewallDConfigService.queryModuleza{ss}c C s t jd| j� | j� d S )Nz%s.getDestinations()� )r r/ r r= )r r1 r r r �getDestinationsW s z&FirewallDConfigService.getDestinationsc C sV t |t�}tjd| j|jd�|jd�� | jj|� t| j � �}||d< | j
|� d S )Nz*%s.setDestinations({ipv4:'%s', ipv6:'%s'})Zipv4Zipv6r� ) r �dictr r/ r �getr r8 rK r= rB )r Z destinationsr1 rA r r r �setDestinations^ s
z&FirewallDConfigService.setDestinationsc C sV t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d | S )Nz%s.getDestination('%s')r� ) r r. r r/ r r r8 rK r= r r rd )r �familyr1 rA r r r �getDestinationk s
z%FirewallDConfigService.getDestinationc C s� t |t�}t |t�}tjd| j||� | jj|� t| j� �}||d krn|d | |krnt t
j d||f ��||d |< | j |� d S )Nz %s.setDestination('%s', '%s')r� z
'%s': '%s')
r r. r r/ r r r8 rK r= r r ra rB )r r� �addressr1 rA r r r �setDestinationx s
z%FirewallDConfigService.setDestinationc C sb t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d |= | j |� d S )Nz%s.removeDestination('%s')r� )
r r. r r/ r r r8 rK r= r r rd rB )r r� r1 rA r r r �removeDestination� s
z(FirewallDConfigService.removeDestinationc C sJ t |t�}t |t�}tjd| j||� | j� }||d koH||d | kS )Nz %s.queryDestination('%s', '%s')r� )r r. r r/ r r= )r r� r� r1 rA r r r �queryDestination� s
z'FirewallDConfigService.queryDestinationc C s< t jd| j� | jj|� | jj| j�}d|kr8|d S g S )Nz%s.getIncludes()�includes)r r/ r r r8 r r> r )r r1 rA r r r � getIncludes� s z"FirewallDConfigService.getIncludesc C sZ t |t�}tjd| j|� | jj|� d|d d � i}| jj| j |�| _ | j
| j j � d S )Nz%s.setIncludes('%s')r� ) r rK r r/ r r r8 r rC r r@ r" )r r� r1 rA r r r � setIncludes� s
z"FirewallDConfigService.setIncludesc C sj t |t�}tjd| j|� | jj|� | jj| j �}|j
dg �j |� | jj | j |�| _ | j
| j j� d S )Nz%s.addInclude('%s')r� )r r. r r/ r r r8 r r> r �
setdefaultr[ rC r@ r" )r �includer1 rA r r r �
addInclude� s
z!FirewallDConfigService.addIncludec C sf t |t�}tjd| j|� | jj|� | jj| j �}|d j
|� | jj | j |�| _ | j | j j
� d S )Nz%s.removeInclude('%s')r� )r r. r r/ r r r8 r r> r rF rC r@ r" )r r� r1 rA r r r �
removeInclude� s
z$FirewallDConfigService.removeIncludec C s@ t |t�}tjd| j|� | jj| j�}d|kr<||d kS dS )Nz%s.queryInclude('%s')r� F)r r. r r/ r r r> r )r r� r1 rA r r r � queryInclude� s
z#FirewallDConfigService.queryInclude)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N�__name__�
__module__� __qualname__�__doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r r r! r* r
ZPROPERTIES_IFACEr2 r7 �slipZpolkitZ require_authr9 r �signalr: ZPK_ACTION_INFOZINTROSPECTABLE_IFACEr; r r= r? rB rD rE r@ rF rG rI rH rJ rM rN rO rQ rS rU r` rc re rg rj rk rl rm rn rp rq rr rs rt rv r r� r� r� r� r� r� r� r� r� r� r� r� r� r� �
__classcell__r r )r r r
/ s�
r
)Z
gi.repositoryr �sysr} r Z dbus.serviceZ slip.dbusr� Zslip.dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.loggerr Zfirewall.server.decoratorsr r r
r Zfirewall.errorsr r ZObjectr
r r r r �<module> s