Your IP : 3.12.147.12
3
@)�fW� � @ s� d dl mZ d dlZeejd< d dlZd dlZd dlZd dlZd dl m
Z
d dl m Z m
Z
mZ d dlmZ d dlmZ d dlmZ d d lmZ d d
lmZ d d lmZmZm Z d d l m Z d d
l m Z d dl m!Z!m"Z"m#Z#m$Z$ G dd� dejj%j&�Z'dS )� )�GObjectNZgobject)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�Zone)�ifcfg_set_zone_of_interface)�DEFAULT_ZONE_TARGET)� Rich_Rule)�log)�handle_exceptions�dbus_handle_exceptions�dbus_service_method)�errors)�
FirewallError)�portStr�portInPortRange�coalescePortRange�breakPortRangec s� e Zd ZdZdZejjZe � fdd��Z
e dd� �Z e dd� �Z
e d d
� �Zeejd d d
�e d�dd���Zeejddd
�e d�dd���Zejjjejj�eejdd�e d�dd����Zejjejdd�dd � �Zejjjejj�eejdd �e d�� fd d � ���Z eejj d d �e d�d!d"���Z eejj dd �e d�d#d$���Z d%d&� Z eejj d d�e d�d'd(���Z!eejj dd�e d�d)d*���Z"eejj �e d�d+d,���Z#ejjejj dd�e d-d.� ��Z$eejj �e d�d/d0���Z%ejjejj dd�e d1d2� ��Z&eejj dd�e d�d3d4���Z'ejjejj dd�e d5d6� ��Z(eejj dd �e d�d7d8���Z)eejj dd�e d�d9d:���Z*eejj dd �e d�d;d<���Z+eejj dd�e d�d=d>���Z,eejj dd �e d�d?d@���Z-eejj dd�e d�dAdB���Z.eejj dd �e d�dCdD���Z/eejj dd�e d�dEdF���Z0eejj dGd �e d�dHdI���Z1eejj dGd�e d�dJdK���Z2eejj dd�e d�dLdM���Z3eejj dd�e d�dNdO���Z4eejj ddPd
�e d�dQdR���Z5eejj dSd �e d�dTdU���Z6eejj dSd�e d�dVdW���Z7eejj d d�e d�dXdY���Z8eejj d d�e d�dZd[���Z9eejj d dPd
�e d�d\d]���Z:eejj dGd �e d�d^d_���Z;eejj dGd�e d�d`da���Z<eejj dd�e d�dbdc���Z=eejj dd�e d�ddde���Z>eejj ddPd
�e d�dfdg���Z?eejj dSd �e d�dhdi���Z@eejj dSd�e d�djdk���ZAeejj d d�e d�dldm���ZBeejj d d�e d�dndo���ZCeejj d dPd
�e d�dpdq���ZDeejj dGd �e d�drds���ZEeejj dGd�e d�dtdu���ZFeejj dd�e d�dvdw���ZGeejj dd�e d�dxdy���ZHeejj ddPd
�e d�dzd{���ZIeejj dPd �e d�d|d}���ZJeejj dPd�e d�d~d���ZKeejj �e d�d�d����ZLeejj �e d�d�d����ZMeejj dPd �e d�d�d����ZNeejj dPd �e d�d�d����ZOeejj dPd�e d�d�d����ZPeejj �e d�d�d����ZQeejj �e d�d�d����ZReejj dPd �e d�d�d����ZSeejj d�d �e d�d�d����ZTeejj d�d�e d�d�d����ZUeejj d�d�e d�d�d����ZVeejj d�d�e d�d�d����ZWeejj d�dPd
�e d�d�d����ZXeejj dGd �e d�d�d����ZYeejj dGd�e d�d�d����ZZeejj dd�e d�d�d����Z[eejj dd�e d�d�d����Z\eejj ddPd
�e d�d�d����Z]eejj dGd �e d�d�d����Z^eejj dGd�e d�d�d����Z_eejj dd�e d�d�d����Z`eejj dd�e d�d�d����Zaeejj ddPd
�e d�d�d����Zbeejj dGd �e d�d�d����Zceejj dGd�e �d d�d����Zdeejj dd�e �dd�d����Zeeejj dd�e �dd�d����Zfeejj ddPd
�e �dd�d����Zg� ZhS ( �FirewallDConfigZonezFirewallD main classTc s\ t t| �j||� || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j � d S )Nr � zconfig.zone.%d)
�superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_ZONE)�selfr ZconfZzoner �args�kwargs)� __class__� �!/usr/lib/python3.6/config_zone.pyr = s
z FirewallDConfigZone.__init__c C s d S )Nr% )r! r% r% r& �__del__J s zFirewallDConfigZone.__del__c C s | j � d S )N)Zremove_from_connection)r! r% r% r& �
unregisterN s z FirewallDConfigZone.unregisterc C s� |dkrt j| jj�S |dkr,t j| jj�S |dkrBt j| jj�S |dkrXt j| jj�S |dkrnt j| jj�S t j j
d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r) r* r ZBooleanr+ r, �
exceptions�
DBusException)r! �
property_namer% r% r& �
_get_propertyV s z!FirewallDConfigZone._get_propertyZss�v)� in_signature�
out_signatureNc C sL t |t�}t |t�}tjd| j||� |tjjkrBtjj d| ��| j
|�S )Nz%s.Get('%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r r. r/ r1 )r! �interface_namer0 �senderr% r% r& �Getg s
zFirewallDConfigZone.Get�sza{sv}c C sd t |t�}tjd| j|� |tjjkr6tjj d| ��i }xd
D ]}| j
|�||< q@W tj |dd �S ) Nz%s.GetAll('%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existr) r* r r+ r, Zsv)� signature)r) r* r r+ r, ) r r5 r r6 r r r r r. r/ r1 Z
Dictionary)r! r7 r8 �ret�xr% r% r& �GetAllx s
zFirewallDConfigZone.GetAllZssv)r3 c C sl t |t�}t |t�}t |�}tjd| j|||� | jj|� |tjj krXtj
j d| ��tj
j d| ��d S )Nz%s.Set('%s', '%s', '%s')zJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existzGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r5 r r6 r r � accessCheckr r r r. r/ )r! r7 r0 Z new_valuer8 r% r% r& �Set� s
zFirewallDConfigZone.Setzsa{sv}as)r; c C s2 t |t�}t |�}t |�}tjd| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r5 r r6 r )r! r7 Zchanged_propertiesZinvalidated_propertiesr% r% r& �PropertiesChanged� s
z%FirewallDConfigZone.PropertiesChanged)r4 c s8 t jd| j� tt| �j| j| jj� �}t | |t
j j �S )Nz%s.Introspect())
r Zdebug2r r r �
Introspectr r Zget_busr r r r )r! r8 �data)r$ r% r& rB � s
z FirewallDConfigZone.Introspectz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)c C sD t jd| j� | jj| j�}|d tkr@t|�}d|d< t|�}|S )z get settings for zone
z%s.getSettings()� r+ ) r r6 r r Zget_zone_configr r �list�tuple)r! r8 �settings� _settingsr% r% r& � getSettings� s z FirewallDConfigZone.getSettingsc C s4 t jd| j� | jj| j�}|d tkr0d|d< |S )z get settings for zone
z%s.getSettings2()�targetr+ )r r6 r r �get_zone_config_dictr r )r! r8 rG r% r% r& � getSettings2� s
z FirewallDConfigZone.getSettings2c C s | j j| j�}d|kr"t|d �nt� }d|kr<t|d �nt� }t|t�rzt|tjd� �| }t|tjd� �| }nDd|kr�t|d �nt� }d|kr�t|d �nt� }|| }|| }x$|D ] } | jj | �r�t
t j | ��q�W x$|D ] }
| jj
|
�r�t
t j |
��q�W dS )a
Assignment of interfaces/sources to zones is different from other
zone settings in the sense that particular interface/zone can be
part of only one zone. So make sure added interfaces/sources have
not already been bound to another zone.�
interfaces�sourcesN)r rK r �set�
isinstancerF r Zindex_ofr ZgetZoneOfInterfacer r Z
ZONE_CONFLICTZgetZoneOfSource) r! rG Z old_settingsZ
old_ifacesZ old_sourcesZ added_ifacesZ
added_sourcesZ
new_ifacesZ new_sourcesZiface�sourcer% r% r& � _checkDuplicateInterfacesSources� s
z4FirewallDConfigZone._checkDuplicateInterfacesSourcesc C st t |�}tjd| j� | jj|� |d dkrFt|�}t|d< t|�}| j |� | j
j | j |�| _ | j
| j j� dS )z!update settings for zone
z%s.update('...')rD r+ N)r r r6 r r r? rE r rF rR r Zset_zone_configr �Updatedr) )r! rG r8 rH r% r% r& �update� s
zFirewallDConfigZone.updatec C sl t |�}tjd| j� | jj|� d|kr>|d dkr>t|d< | j|� | jj | j
|�| _
| j | j
j � dS )z!update settings for zone
z%s.update2('...')rJ r+ N)
r r r6 r r r? r rR r Zset_zone_config_dictr rS r) )r! rG r8 r% r% r& �update2� s
zFirewallDConfigZone.update2c C s< t jd| j� | jj|� | jj| j�| _| j| jj � dS )z/load default settings for builtin zone
z%s.loadDefaults()N)
r r6 r r r? r Zload_zone_defaultsr rS r) )r! r8 r% r% r& � loadDefaults s z FirewallDConfigZone.loadDefaultsc C s t jd| j|f � d S )Nz%s.Updated('%s'))r r6 r )r! r) r% r% r& rS s zFirewallDConfigZone.Updatedc C s: t jd| j� | jj|� | jj| j� | jj| j� dS )zremove zone
z%s.removeZone()N) r r6 r r r? r Z remove_zoner Z
removeZone)r! r8 r% r% r& �remove s zFirewallDConfigZone.removec C s t jd| j|f � d S )Nz%s.Removed('%s'))r r6 r )r! r) r% r% r& �Removed# s zFirewallDConfigZone.Removedc C sF t |t�}tjd| j|� | jj|� | jj| j |�| _ | j
|� dS )zrename zone
z%s.rename('%s')N) r r5 r r6 r r r? r Z rename_zoner �Renamed)r! r) r8 r% r% r& �rename* s
zFirewallDConfigZone.renamec C s t jd| j|f � d S )Nz%s.Renamed('%s'))r r6 r )r! r) r% r% r& rY 6 s zFirewallDConfigZone.Renamedc C s t jd| j� | j� d S )Nz%s.getVersion()r )r r6 r rI )r! r8 r% r% r& �
getVersion= s z FirewallDConfigZone.getVersionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setVersion('%s')r )
r r5 r r6 r r r? rE rI rT )r! �versionr8 rG r% r% r& �
setVersionD s
z FirewallDConfigZone.setVersionc C s t jd| j� | j� d S )Nz
%s.getShort()r )r r6 r rI )r! r8 r% r% r& �getShortQ s z FirewallDConfigZone.getShortc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setShort('%s')r )
r r5 r r6 r r r? rE rI rT )r! Zshortr8 rG r% r% r& �setShortX s
z FirewallDConfigZone.setShortc C s t jd| j� | j� d S )Nz%s.getDescription()� )r r6 r rI )r! r8 r% r% r& �getDescriptione s z"FirewallDConfigZone.getDescriptionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setDescription('%s')r` )
r r5 r r6 r r r? rE rI rT )r! � descriptionr8 rG r% r% r& �setDescriptionl s
z"FirewallDConfigZone.setDescriptionc C s. t jd| j� | j� }|d tkr*|d S dS )Nz%s.getTarget()rD r+ )r r6 r rI r )r! r8 rG r% r% r& � getTarget| s z FirewallDConfigZone.getTargetc C sT t |t�}tjd| j|� | jj|� t| j� �}|dkr>|nt |d< | j
|� d S )Nz%s.setTarget('%s')r+ rD ) r r5 r r6 r r r? rE rI r rT )r! rJ r8 rG r% r% r& � setTarget� s
z FirewallDConfigZone.setTarget�asc C s t jd| j� | j� d S )Nz%s.getServices()� )r r6 r rI )r! r8 r% r% r& � getServices� s z FirewallDConfigZone.getServicesc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setServices('[%s]')�,rg )
r rE r r6 r �joinr r? rI rT )r! Zservicesr8 rG r% r% r& � setServices� s
z FirewallDConfigZone.setServicesc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.addService('%s')rg )r r5 r r6 r r r? rE rI r r �ALREADY_ENABLED�appendrT )r! �servicer8 rG r% r% r& �
addService� s
z FirewallDConfigZone.addServicec C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.removeService('%s')rg )r r5 r r6 r r r? rE rI r r � NOT_ENABLEDrW rT )r! rn r8 rG r% r% r& �
removeService� s
z!FirewallDConfigZone.removeService�bc C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryService('%s')rg )r r5 r r6 r rI )r! rn r8 r% r% r& � queryService� s
z FirewallDConfigZone.queryServiceza(ss)c C s t jd| j� | j� d S )Nz
%s.getPorts()� )r r6 r rI )r! r8 r% r% r& �getPorts� s z FirewallDConfigZone.getPortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j
|� t| j � �}||d< | j |� d S )Nz%s.setPorts('[%s]')ri c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr% )�.0�portr% r% r& � <genexpr>� s z/FirewallDConfigZone.setPorts.<locals>.<genexpr>rt )
r rE rP rm rF r r6 r rj r r? rI rT )r! �portsr8 �_portsrw rG r% r% r& �setPorts� s
z FirewallDConfigZone.setPortsc
s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x.|D ]&}t
||d �r^t t j
d|� f ��q^W t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S )
Nz%s.addPort('%s', '%s')c s | d � kS )Nr r% )r= )�protocolr% r& �<lambda>� s z-FirewallDConfigZone.addPort.<locals>.<lambda>rt r z%s:%sc S s g | ] \}}|�qS r% r% )rv �_port� _protocolr% r% r& �
<listcomp>� s z/FirewallDConfigZone.addPort.<locals>.<listcomp>�-)r r5 r r6 r r r? rE rI �filterr r r rl r rW r rm rT )
r! rw r| r8 rG �existing_port_ids�port_id� added_ranges�removed_ranges�ranger% )r| r& �addPort� s"
zFirewallDConfigZone.addPortc
s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x0|D ]}t
||d �r^P q^W t t j
d|� f ��t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S )
Nz%s.removePort('%s', '%s')c s | d � kS )Nr r% )r= )r| r% r& r} s z0FirewallDConfigZone.removePort.<locals>.<lambda>rt r z%s:%sc S s g | ] \}}|�qS r% r% )rv r~ r r% r% r& r� s z2FirewallDConfigZone.removePort.<locals>.<listcomp>r� )r r5 r r6 r r r? rE rI r� r r r rp r rW r rm rT )
r! rw r| r8 rG r� r� r� r� r� r% )r| r& �
removePort� s"
z FirewallDConfigZone.removePortc C sZ t |t�}t |t�}tjd| j||� x.| j� d D ] \}}t||�r4||kr4dS q4W dS )Nz%s.queryPort('%s', '%s')rt TF)r r5 r r6 r rI r )r! rw r| r8 r~ r r% r% r& � queryPort s
z FirewallDConfigZone.queryPortc C s t jd| j� | j� d S )Nz%s.getProtocols()�
)r r6 r rI )r! r8 r% r% r& � getProtocols s z FirewallDConfigZone.getProtocolsc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setProtocols('[%s]')ri r� )
r rE r r6 r rj r r? rI rT )r! Z protocolsr8 rG r% r% r& � setProtocols& s
z FirewallDConfigZone.setProtocolsc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.addProtocol('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT )r! r| r8 rG r% r% r& � addProtocol2 s
z FirewallDConfigZone.addProtocolc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.removeProtocol('%s')r� )r r5 r r6 r r r? rE rI r r rp rW rT )r! r| r8 rG r% r% r& �removeProtocol? s
z"FirewallDConfigZone.removeProtocolc C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryProtocol('%s')r� )r r5 r r6 r rI )r! r| r8 r% r% r& �
queryProtocolL s
z!FirewallDConfigZone.queryProtocolc C s t jd| j� | j� d S )Nz%s.getSourcePorts()� )r r6 r rI )r! r8 r% r% r& �getSourcePortsV s z"FirewallDConfigZone.getSourcePortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j
|� t| j � �}||d< | j |� d S )Nz%s.setSourcePorts('[%s]')ri c s s" | ]}d |d |d f V qdS )z ('%s, '%s')r r Nr% )rv rw r% r% r& rx j s z5FirewallDConfigZone.setSourcePorts.<locals>.<genexpr>r� )
r rE rP rm rF r r6 r rj r r? rI rT )r! ry r8 rz rw rG r% r% r& �setSourcePorts] s
z"FirewallDConfigZone.setSourcePortsc
s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x.|D ]&}t
||d �r^t t j
d|� f ��q^W t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S )
Nz %s.addSourcePort('%s', '%s')c s | d � kS )Nr r% )r= )r| r% r& r} z s z3FirewallDConfigZone.addSourcePort.<locals>.<lambda>r� r z%s:%sc S s g | ] \}}|�qS r% r% )rv r~ r r% r% r& r� s z5FirewallDConfigZone.addSourcePort.<locals>.<listcomp>r� )r r5 r r6 r r r? rE rI r� r r r rl r rW r rm rT )
r! rw r| r8 rG r� r� r� r� r� r% )r| r& �
addSourcePortp s"
z!FirewallDConfigZone.addSourcePortc
s� t |t�}t � t�� tjd| j|� � | jj|� t| j� �}tt � fdd�|d ��}x0|D ]}t
||d �r^P q^W t t j
d|� f ��t|dd� |D ��\}}x$|D ] } |d jt| d �� f� q�W x$|D ] } |d jt| d �� f� q�W | j|� d S )
Nz %s.removeSourcePort('%s', '%s')c s | d � kS )Nr r% )r= )r| r% r& r} � s z6FirewallDConfigZone.removeSourcePort.<locals>.<lambda>r� r z%s:%sc S s g | ] \}}|�qS r% r% )rv r~ r r% r% r& r� � s z8FirewallDConfigZone.removeSourcePort.<locals>.<listcomp>r� )r r5 r r6 r r r? rE rI r� r r r rp r rW r rm rT )
r! rw r| r8 rG r� r� r� r� r� r% )r| r& �removeSourcePort� s"
z$FirewallDConfigZone.removeSourcePortc C sZ t |t�}t |t�}tjd| j||� x.| j� d D ] \}}t||�r4||kr4dS q4W dS )Nz %s.querySourcePort('%s', '%s')r� TF)r r5 r r6 r rI r )r! rw r| r8 r~ r r% r% r& �querySourcePort� s
z#FirewallDConfigZone.querySourcePortc C s t jd| j� | j� d S )Nz%s.getIcmpBlocks()� )r r6 r rI )r! r8 r% r% r& �
getIcmpBlocks� s z!FirewallDConfigZone.getIcmpBlocksc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setIcmpBlocks('[%s]')ri r� )
r rE r r6 r rj r r? rI rT )r! Z icmptypesr8 rG r% r% r& �
setIcmpBlocks� s
z!FirewallDConfigZone.setIcmpBlocksc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.addIcmpBlock('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT )r! �icmptyper8 rG r% r% r& � addIcmpBlock� s
z FirewallDConfigZone.addIcmpBlockc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.removeIcmpBlock('%s')r� )r r5 r r6 r r r? rE rI r r rp rW rT )r! r� r8 rG r% r% r& �removeIcmpBlock� s
z#FirewallDConfigZone.removeIcmpBlockc C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryIcmpBlock('%s')r� )r r5 r r6 r rI )r! r� r8 r% r% r& �queryIcmpBlock� s
z"FirewallDConfigZone.queryIcmpBlockc C s t jd| j� | j� d S )Nz%s.getIcmpBlockInversion()� )r r6 r rI )r! r8 r% r% r& �getIcmpBlockInversion� s z)FirewallDConfigZone.getIcmpBlockInversionc C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz %s.setIcmpBlockInversion('%s')r� )
r �boolr r6 r r r? rE rI rT )r! �flagr8 rG r% r% r& �setIcmpBlockInversion� s
z)FirewallDConfigZone.setIcmpBlockInversionc C sP t jd| j� | jj|� t| j� �}|d r:ttj d��d|d< | j
|� d S )Nz%s.addIcmpBlockInversion()r� zicmp-block-inversionT) r r6 r r r? rE rI r r rl rT )r! r8 rG r% r% r& �addIcmpBlockInversion� s z)FirewallDConfigZone.addIcmpBlockInversionc C sP t jd| j� | jj|� t| j� �}|d s:ttj d��d|d< | j
|� d S )Nz %s.removeIcmpBlockInversion()r� zicmp-block-inversionF) r r6 r r r? rE rI r r rp rT )r! r8 rG r% r% r& �removeIcmpBlockInversion s z,FirewallDConfigZone.removeIcmpBlockInversionc C s t jd| j� | j� d S )Nz %s.queryIcmpBlockInversion()r� )r r6 r rI )r! r8 r% r% r& �queryIcmpBlockInversion s z+FirewallDConfigZone.queryIcmpBlockInversionc C s t jd| j� | j� d S )Nz%s.getMasquerade()� )r r6 r rI )r! r8 r% r% r& �
getMasquerade s z!FirewallDConfigZone.getMasqueradec C sH t |t�}tjd| j|� | jj|� t| j� �}||d< | j |� d S )Nz%s.setMasquerade('%s')r� )
r r� r r6 r r r? rE rI rT )r! �
masquerader8 rG r% r% r& �
setMasquerade s
z!FirewallDConfigZone.setMasqueradec C sP t jd| j� | jj|� t| j� �}|d r:ttj d��d|d< | j
|� d S )Nz%s.addMasquerade()r� r� T) r r6 r r r? rE rI r r rl rT )r! r8 rG r% r% r& �
addMasquerade' s z!FirewallDConfigZone.addMasqueradec C sP t jd| j� | jj|� t| j� �}|d s:ttj d��d|d< | j
|� d S )Nz%s.removeMasquerade()r� r� F) r r6 r r r? rE rI r r rp rT )r! r8 rG r% r% r& �removeMasquerade2 s z$FirewallDConfigZone.removeMasqueradec C s t jd| j� | j� d S )Nz%s.queryMasquerade()r� )r r6 r rI )r! r8 r% r% r& �queryMasquerade= s z#FirewallDConfigZone.queryMasqueradeza(ssss)c C s t jd| j� | j� d S )Nz%s.getForwardPorts()� )r r6 r rI )r! r8 r% r% r& �getForwardPortsF s z#FirewallDConfigZone.getForwardPortsc C s� g }x6t |t�D ](}t|t�r.|jt|�� q|j|� qW |}tjd| jdjdd� |D ��� | j j
|� t| j � �}||d< | j |� d S )Nz%s.setForwardPorts('[%s]')ri c s s. | ]&}d |d |d |d |d f V qdS )z('%s, '%s', '%s', '%s')r r r` � Nr% )rv rw r% r% r& rx Z s z6FirewallDConfigZone.setForwardPorts.<locals>.<genexpr>r� )
r rE rP rm rF r r6 r rj r r? rI rT )r! ry r8 rz rw rG r% r% r& �setForwardPortsM s
z#FirewallDConfigZone.setForwardPortsZssssc C s� t |t�}t |t�}t |t�}t |t�}tjd| j||||� | jj|� ||t|�t|�f}t| j� �}||d kr�t t
j d||||f ��|d j |� | j
|� d S )Nz)%s.addForwardPort('%s', '%s', '%s', '%s')r� z %s:%s:%s:%s)r r5 r r6 r r r? rE rI r r rl rm rT )r! rw r| �toport�toaddrr8 �fwp_idrG r% r% r& �addForwardPorta s
z"FirewallDConfigZone.addForwardPortc C s� t |t�}t |t�}t |t�}t |t�}tjd| j||||� | jj|� ||t|�t|�f}t| j� �}||d kr�t t
j d||||f ��|d j |� | j
|� d S )Nz,%s.removeForwardPort('%s', '%s', '%s', '%s')r� z %s:%s:%s:%s)r r5 r r6 r r r? rE rI r r rp rW rT )r! rw r| r� r� r8 r� rG r% r% r& �removeForwardPortu s
z%FirewallDConfigZone.removeForwardPortc C sb t |t�}t |t�}t |t�}t |t�}tjd| j||||� ||t|�t|�f}|| j� d kS )Nz+%s.queryForwardPort('%s', '%s', '%s', '%s')r� )r r5 r r6 r rI )r! rw r| r� r� r8 r� r% r% r& �queryForwardPort� s
z$FirewallDConfigZone.queryForwardPortc C s t jd| j� | j� d S )Nz%s.getInterfaces()�
)r r6 r rI )r! r8 r% r% r& �
getInterfaces� s z!FirewallDConfigZone.getInterfacesc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setInterfaces('[%s]')ri r� )
r rE r r6 r rj r r? rI rT )r! rM r8 rG r% r% r& �
setInterfaces� s
z!FirewallDConfigZone.setInterfacesc C st t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� t| jj|� d S )Nz%s.addInterface('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT r r r) )r! � interfacer8 rG r% r% r& � addInterface� s
z FirewallDConfigZone.addInterfacec C sp t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� td|� d S )Nz%s.removeInterface('%s')r� � )r r5 r r6 r r r? rE rI r r rp rW rT r )r! r� r8 rG r% r% r& �removeInterface� s
z#FirewallDConfigZone.removeInterfacec C s* t |t�}tjd| j|� || j� d kS )Nz%s.queryInterface('%s')r� )r r5 r r6 r rI )r! r� r8 r% r% r& �queryInterface� s
z"FirewallDConfigZone.queryInterfacec C s t jd| j� | j� d S )Nz%s.getSources()� )r r6 r rI )r! r8 r% r% r& �
getSources� s z FirewallDConfigZone.getSourcesc C sN t |t�}tjd| jdj|�� | jj|� t| j� �}||d< | j |� d S )Nz%s.setSources('[%s]')ri r� )
r rE r r6 r rj r r? rI rT )r! rN r8 rG r% r% r& �
setSources� s
z FirewallDConfigZone.setSourcesc C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.addSource('%s')r� )r r5 r r6 r r r? rE rI r r rl rm rT )r! rQ r8 rG r% r% r& � addSource� s
z FirewallDConfigZone.addSourcec C sf t |t�}tjd| j|� | jj|� t| j� �}||d krJt t
j |��|d j |� | j
|� d S )Nz%s.removeSource('%s')r� )r r5 r r6 r r r? rE rI r r rp rW rT )r! rQ r8 rG r% r% r& � removeSource� s
z FirewallDConfigZone.removeSourcec C s* t |t�}tjd| j|� || j� d kS )Nz%s.querySource('%s')r� )r r5 r r6 r rI )r! rQ r8 r% r% r& � querySource s
z FirewallDConfigZone.querySourcec C s t jd| j� | j� d S )Nz%s.getRichRules()� )r r6 r rI )r! r8 r% r% r& � getRichRules s z FirewallDConfigZone.getRichRulesc C s\ t |t�}tjd| jdj|�� | jj|� t| j� �}dd� |D �}||d< | j |� d S )Nz%s.setRichRules('[%s]')ri c S s g | ]}t t|d ���qS ))�rule_str)r5 r
)rv �rr% r% r& r� s z4FirewallDConfigZone.setRichRules.<locals>.<listcomp>r� )
r rE r r6 r rj r r? rI rT )r! Zrulesr8 rG r% r% r& � setRichRules s
z FirewallDConfigZone.setRichRulesc C st t |t�}tjd| j|� | jj|� t| j� �}tt |d��}||d krXt
t j |��|d j
|� | j|� d S )Nz%s.addRichRule('%s'))r� r� )r r5 r r6 r r r? rE rI r
r r rl rm rT )r! �ruler8 rG r� r% r% r& � addRichRule s
z FirewallDConfigZone.addRichRulec C st t |t�}tjd| j|� | jj|� t| j� �}tt |d��}||d krXt
t j |��|d j
|� | j|� d S )Nz%s.removeRichRule('%s'))r� r� )r r5 r r6 r r r? rE rI r
r r rp rW rT )r! r� r8 rG r� r% r% r& �removeRichRule. s
z"FirewallDConfigZone.removeRichRulec C s8 t |t�}tjd| j|� tt|d��}|| j� d kS )Nz%s.queryRichRule('%s'))r� r� )r r5 r r6 r r
rI )r! r� r8 r� r% r% r& �
queryRichRule< s
z!FirewallDConfigZone.queryRichRule)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)i�__name__�
__module__� __qualname__�__doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r
r' r( r1 r ZPROPERTIES_IFACEr9 r> �slipZpolkitZ require_authr@ rn �signalrA ZPK_ACTION_INFOZINTROSPECTABLE_IFACErB r rI rL rR rT rU rV rS rW rX rZ rY r[ r] r^ r_ ra rc rd re rh rk ro rq rs ru r{ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� �
__classcell__r% r% )r$ r& r 5 sf
r )(Z
gi.repositoryr �sys�modulesr Z dbus.serviceZ slip.dbusr� Zslip.dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.zoner Zfirewall.core.fw_ifcfgr Zfirewall.core.baser Zfirewall.core.richr
Zfirewall.core.loggerr Zfirewall.server.decoratorsr r
r r Zfirewall.errorsr Zfirewall.functionsr r r r rn ZObjectr r% r% r% r& �<module> s$