509318396 ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ 3 ³Y„jbÀã@sVdgZddlmZmZddlZeejd<ddlZddlZddlZddl Z ddlZ ddlm Z ddlmZddlmZddlmZdd lmZdd lmZmZmZmZddlmZddlmZmZm Z m!Z!m"Z"m#Z#m$Z$dd l%m&Z&ddl'm(Z(ddl)m*Z*ddl+m,Z,ddl-m.Z.m/Z/m0Z0ddl1m2Z2ddlm3Z3ddl4m5Z5Gdd„de jj6j7ƒZ8dS)Ú FirewallDé)ÚGLibÚGObjectNZgobject)Úconfig)ÚFirewall)Ú Rich_Rule)Úlog)ÚFirewallClientZoneSettings)Údbus_handle_exceptionsÚdbus_service_methodÚhandle_exceptionsÚFirewallDBusException)ÚFirewallDConfig)Údbus_to_pythonÚcommand_of_senderÚcontext_of_senderÚ uid_of_senderÚuser_of_uidÚ%dbus_introspection_prepare_propertiesÚ!dbus_introspection_add_properties)Úcheck_config)ÚIPSet)ÚIcmpType)ÚHelper)Únm_get_bus_nameÚnm_get_connection_of_interfaceÚnm_set_zone_of_connection)Úifcfg_set_zone_of_interface)Úerrors)Ú FirewallErrorcs”"eZdZdZdZejjZe ‡fdd„ƒZ dd„Ze dd„ƒZe d d „ƒZ edd„ƒZed d„ƒZedd„ƒZedd„ƒZedd„ƒZeejdddeddd„ƒƒZeejddded®dd„ƒƒZejjjejjƒeejdd ed¯d!d"„ƒƒƒZejjejd#d$d%d&„ƒZejjjejjƒeej dd'ed°‡fd(d)„ ƒƒƒZ!ejjjejjƒeejj"d*d*ded±d+d,„ƒƒƒZ#ejjjejjƒeejj"d*d*ded²d-d.„ƒƒƒZ$ejjejj"ƒed/d0„ƒƒZ%ejjjejjƒeejj"d*d*ded³d1d2„ƒƒƒZ&ejjjejjƒeejj"d*d*ded´d3d4„ƒƒƒZ'ejjjejj(ƒeejj)d*d*dedµd5d6„ƒƒƒZ*ejjjejj(ƒeejj)d*d*ded¶d7d8„ƒƒƒZ+ejjjejj,ƒeejj)d*d9ded·d:d;„ƒƒƒZ-ejjejj)d*d$edd?„ƒƒZ/ejjjejj(ƒeejj)dd*ded¸d@dA„ƒƒƒZ0ejjjejj(ƒeejj)dd*ded¹dBdC„ƒƒƒZ1ejjjejj,ƒeejj)dd9dedºdDdE„ƒƒƒZ2ejjjejj,ƒeejj)d*dFded»dGdH„ƒƒƒZ3ejjejj)dd$edIdJ„ƒƒZ4ejjejj)dd$edKdL„ƒƒZ5ejjjejj(ƒeejj)dMd*ded¼dNdO„ƒƒƒZ6ejjjejj(ƒeejj)dMd*ded½dPdQ„ƒƒƒZ7ejjjejj,ƒeejj)dMd9ded¾dRdS„ƒƒƒZ8ejjjejj,ƒeejj)d*dTded¿dUdV„ƒƒƒZ9ejjejj)dMd$edWdX„ƒƒZ:ejjejj)dMd$edYdZ„ƒƒZ;ejjjejj(ƒeejj)dd*dedÀd[d\„ƒƒƒZejjjejj,ƒeejj)d*dFdedÃdadb„ƒƒƒZ?ejjejj)dd$edcdd„ƒƒZ@ejjejj)dd$ededf„ƒƒZAejjjejj(ƒeejj)dd*dedÄdgdh„ƒƒƒZBejjjejj(ƒeejj)dd*dedÅdidj„ƒƒƒZCejjjejj,ƒeejj)dd9dedÆdkdl„ƒƒƒZDejjjejj,ƒeejj)d*dFdedÇdmdn„ƒƒƒZEejjejj)dd$edodp„ƒƒZFejjejj)dd$edqdr„ƒƒZGejjjejjƒeejj"d*d*dedÈdsdt„ƒƒƒZHejjjejjƒeejj"d*d*dedÉdudv„ƒƒƒZIejjjejjƒeejj"d*d9dedÊdwdx„ƒƒƒZJejjejj"d*d$edydz„ƒƒZKejjejj"d*d$ed{d|„ƒƒZLejjjejjMƒeejj"dd}dedËd~d„ƒƒƒZNejjjejjMƒeejjOdddedÌd€d„ƒƒƒZPejjjejjMƒeejjOd‚d edÍdƒd„„ƒƒƒZQejjejjOd‚d$ed…d†„ƒƒZRejjjejjMƒeejjSdddedÎd‡dˆ„ƒƒƒZTejjjejjMƒeejjSd‚d edÏd‰dŠ„ƒƒƒZUejjejjSd‚d$ed‹dŒ„ƒƒZVejjjejjƒeejj"d*dFdedÐddŽ„ƒƒƒZWejjjejjMƒeejj"dddedÑdd‘„ƒƒƒZXejjjejjMƒeejj"dddedÒd’d“„ƒƒƒZYejjjejjƒeejj"d*dFdedÓd”d•„ƒƒƒZZejjjejjMƒeejj"de[j\dedÔd–d—„ƒƒƒZ]ejjjejjMƒeejj"d*ddedÕd˜d™„ƒƒƒZ^ejjjejjƒeejj"dd*dedÖdšd›„ƒƒƒZ_ejjejj"dd$edœd„ƒƒZ`ejjjejjMƒeejj"d*dded×dždŸ„ƒƒƒZaejjjejjƒeejj"dd*dedØd d¡„ƒƒƒZbejjejj"dd$ed¢d£„ƒƒZcejjjejjƒeejj"d*ddedÙd¤d¥„ƒƒƒZdejjjejjƒeejj"dd*dedÚd¦d§„ƒƒƒZeejjejj"dd$ed¨d©„ƒƒZfejjjejjƒeejjSd*dFdedÛdªd«„ƒƒƒZgejjjejjƒeejjSd*d¬dedÜdd®„ƒƒƒZhejjjejjƒeejjOd*dFdedÝd¯d°„ƒƒƒZiejjjejjƒeejjOd*d¬dedÞd±d²„ƒƒƒZjejjjejjƒeejjOdddedßd³d´„ƒƒƒZkejjjejjƒeejjOdddedàdµd¶„ƒƒƒZlejjjejjMƒeejjOdd9dedád·d¸„ƒƒƒZmejjjejjƒeejjOdddedâd¹dº„ƒƒƒZnejjjejjƒeejjOdddedãd»d¼„ƒƒƒZoejjjejjƒeejjOdddedäd½d¾„ƒƒƒZpejjjejjƒeejjOdddedåd¿dÀ„ƒƒƒZqejjjejjMƒeejjOdd9dedædÁdÂ„ƒƒƒZrejjjejjMƒeejjOddFdedçdÃdÄ„ƒƒƒZsejjejjOdd$edÅdÆ„ƒƒZtejjejjOdd$edÇdÈ„ƒƒZuejjejjOdd$edÉdÊ„ƒƒZvejjejjOdd$edËdÌ„ƒƒZwejjjejjƒeejjOdddedèdÍdÎ„ƒƒƒZxejjjejjƒeejjOdddedédÏdÐ„ƒƒƒZyejjjejjƒeejjOdddedêdÑdÒ„ƒƒƒZzejjjejjMƒeejjOdd9dedëdÓdÔ„ƒƒƒZ{ejjjejjMƒeejjOddFdedìdÕdÖ„ƒƒƒZ|ejjejjOdd$ed×dØ„ƒƒZ}ejjejjOdd$edÙdÚ„ƒƒZ~ejjejjOdd$edÛdÜ„ƒƒZedÝdÞ„ƒZ€ejjjejjƒeejjOdßddedídàdá„ƒƒƒZejjjejjƒeejjOdddedîdâdã„ƒƒƒZ‚ejjjejjMƒeejjOdd9dedïdädå„ƒƒƒZƒejjjejjMƒeejjOddFdedðdædç„ƒƒƒZ„ejjejjOdßd$edèdé„ƒƒZ…ejjejjOdd$edêdë„ƒƒZ†edìdí„ƒZ‡ejjjejjƒeejjOdßddedñdîdï„ƒƒƒZˆejjjejjƒeejjOdddedòdðdñ„ƒƒƒZ‰ejjjejjMƒeejjOdd9dedódòdó„ƒƒƒZŠejjjejjMƒeejjOddFdedôdôdõ„ƒƒƒZ‹ejjejjOdßd$edöd÷„ƒƒZŒejjejjOdd$edødù„ƒƒZedúdû„ƒZŽejjjejjƒeejjOdüddedõdýdþ„ƒƒƒZejjjejjƒeejjOdÿddedödd„ƒƒƒZejjjejjMƒeejjOdÿd9ded÷dd„ƒƒƒZ‘ejjjejjMƒeejjOdddedødd„ƒƒƒZ’ejjejjOdüd$edùdd „ƒƒZ“ejjejjOdÿd$ed d„ƒƒZ”edd „ƒZ•ejjjejjƒeejjOdßddedúdd„ƒƒƒZ–ejjjejjƒeejjOdddedûdd„ƒƒƒZ—ejjjejjMƒeejjOdd9dedüdd„ƒƒƒZ˜ejjjejjMƒeejjOddFdedýdd„ƒƒƒZ™ejjejjOdßd$edþdd„ƒƒZšejjejjOdd$edd„ƒƒZ›edd„ƒZœejjjejjƒeejjOdüddedÿdd„ƒƒƒZejjjejjƒeejjOdÿddeddd„ƒƒƒZžejjjejjMƒeejjOdÿd9dedd d!„ƒƒƒZŸejjjejjMƒeejjOdddedd"d#„ƒƒƒZ ejjejjOdüd$edd$d%„ƒƒZ¡ejjejjOdÿd$ed&d'„ƒƒZ¢ed(d)„ƒZ£ejjjejjƒeejjOd*ddedd+d,„ƒƒƒZ¤ejjjejjƒeejjOdddedd-d.„ƒƒƒZ¥ejjjejjMƒeejjOdd9dedd/d0„ƒƒƒZ¦ejjejjOd*d$edd1d2„ƒƒZ§ejjejjOdd$ed3d4„ƒƒZ¨ed5d6„ƒZ©ejjjejjƒeejjOd7ddedd8d9„ƒƒƒZªejjjejjƒeejjOd:dded d;d<„ƒƒƒZ«ejjjejjMƒeejjOd:d9ded d=d>„ƒƒƒZ¬ejjjejjMƒeejjOdddedd?d@„ƒƒƒZejjejjOd7d$eddAdB„ƒƒZ®ejjejjOd:d$edCdD„ƒƒZ¯edEdF„ƒZ°ejjjejjƒeejjOdßdded dGdH„ƒƒƒZ±ejjjejjƒeejjOdddeddIdJ„ƒƒƒZ²ejjjejjMƒeejjOdd9deddKdL„ƒƒƒZ³ejjjejjMƒeejjOddFdeddMdN„ƒƒƒZ´ejjejjOdßd$eddOdP„ƒƒZµejjejjOdd$edQdR„ƒƒZ¶ejjjejjƒeejjOdddeddSdT„ƒƒƒZ·ejjjejjƒeejjOdddeddUdV„ƒƒƒZ¸ejjjejjMƒeejjOdd9deddWdX„ƒƒƒZ¹ejjejjOdd$edYdZ„ƒƒZºejjejjOdd$ed[d\„ƒƒZ»ejjjejj¼ƒeejj½dÿd*dedd]d^„ƒƒƒZ¾ejjjejj¼ƒeejj½dÿd*dedd_d`„ƒƒƒZ¿ejjjejjÀƒeejj½dÿd9deddadb„ƒƒƒZÁejjjejjÀƒeejj½ddFdeddcdd„ƒƒƒZÂejjjejjÀƒeejj½d*dededdfdg„ƒƒƒZÃejjejj½dÿd$edhdi„ƒƒZÄejjejj½dÿd$edjdk„ƒƒZÅejjjejj¼ƒeejj½dld*deddmdn„ƒƒƒZÆejjjejj¼ƒeejj½dld*deddodp„ƒƒƒZÇejjjejj¼ƒeejj½dÿd*deddqdr„ƒƒƒZÈejjjejjÀƒeejj½dld9deddsdt„ƒƒƒZÉejjjejjÀƒeejj½dÿdudeddvdw„ƒƒƒZÊejjjejjÀƒeejj½d*dxdeddydz„ƒƒƒZËejjejj½dld$ed{d|„ƒƒZÌejjejj½dld$ed}d~„ƒƒZÍejjjejj¼ƒeejj½ddded d€d„ƒƒƒZÎejjjejj¼ƒeejj½dd*ded!d‚dƒ„ƒƒƒZÏejjjejj¼ƒeejj½dd*ded"d„d…„ƒƒƒZÐejjjejjÀƒeejj½dd9ded#d†d‡„ƒƒƒZÑejjjejjÀƒeejj½d*dˆded$d‰dŠ„ƒƒƒZÒejjjejj¼ƒeejj½d*d*ded%d‹dŒ„ƒƒƒZÓejjjejjÀƒeejj½ddded&ddŽ„ƒƒƒZÔejjejj½dd$edd„ƒƒZÕejjejj½dd$ed‘d’„ƒƒZÖejjjejj×ƒeejj"d*d*ded'd“d”„ƒƒƒZØejjjejjƒeejjÙdd9ded(d•d–„ƒƒƒZÚejjjejjƒeejjÙd*dFded)d—d˜„ƒƒƒZÛejjjejjMƒeejjÙdeÜj\ded*d™dš„ƒƒƒZÝejjjejjƒeejjÙdd*ded+d›dœ„ƒƒƒZÞejjjejjƒeejjÙdd*ded,ddž„ƒƒƒZßejjjejjƒeejjÙdd9ded-dŸd „ƒƒƒZàejjjejjƒeejjÙddFded.d¡d¢„ƒƒƒZáejjjejjƒeejjÙdd ed/d£d¤„ƒƒƒZâejjejjÙdd$ed¥d¦„ƒƒZãejjejjÙdd$ed§d¨„ƒƒZäejjjejjƒeejj"d*dFded0d©dª„ƒƒƒZåejjjejjMƒeejj"deæj\ded1d«d¬„ƒƒƒZç‡ZèS(2rzFirewallD main classTcs`tt|ƒj||Žtƒ|_|d|_|d|_|jƒt|t j jƒt|jj |jt j j ƒ|_ dS)Nré)ÚsuperrÚ__init__rÚfwÚbusnameÚpathÚstartrrÚdbusÚDBUS_INTERFACErZDBUS_PATH_CONFIG)ÚselfÚargsÚkwargs)Ú __class__©ú/usr/lib/python3.6/firewalld.pyr"Is zFirewallD.__init__cCs|jƒdS)N)Ústop)r)r-r-r.Ú__del__TszFirewallD.__del__cCstjdƒi|_|jjƒS)Nzstart())rÚdebug1Ú _timeoutsr#r&)r)r-r-r.r&Ws zFirewallD.startcCstjdƒ|jjƒS)Nzstop())rr1r#r/)r)r-r-r.r/_s zFirewallD.stopcCs°|jjjƒr¬|dkr"tjdƒdStjƒ}t||ƒ}|jjjd|ƒrHdSt ||ƒ}|jjjd|ƒrfdSt |ƒ}|jjjd|ƒr‚dSt||ƒ}|jjjd|ƒr dStt jdƒ‚dS)Nz&Lockdown not possible, sender not set.ÚcontextÚuidÚuserÚcommandzlockdown is enabled)r#ÚpoliciesÚquery_lockdownrÚerrorr'Z SystemBusrZaccess_checkrrrrrZ ACCESS_DENIED)r)ÚsenderZbusr3r4r5r6r-r-r.ÚaccessCheckhs$ zFirewallD.accessCheckcCs&||jkri|j|<||j||<dS)N)r2)r)ÚzoneÚxÚtagr-r-r.Ú addTimeouts zFirewallD.addTimeoutcCs<||jkr8||j|kr8tj|j||ƒ|j||=dS)N)r2rÚ source_remove)r)r<r=r-r-r.Ú removeTimeout…szFirewallD.removeTimeoutcCsTxD|jD]:}x&|j|D]}tj|j||ƒqW|j|jƒqW|jjƒdS)N)r2rr@Úclear)r)r<r=r-r-r.Úcleanup_timeouts‹s zFirewallD.cleanup_timeoutscCsd|dkrtjtjƒS|dkr6tjdtjjtjjfƒS|dkrNtj|jjƒƒS|dkrhtj|jj dƒƒS|dkr€tj |jjdƒS|d krštj|jj d ƒƒS|dkr°tj|jjƒS|dkrÈtj |jj dƒS|d krÞtj|jjƒS|dkrötj|jjƒS|dkrtj |jjdƒS|dkr$tjdƒS|dkr:tjidƒS|dkrPtjidƒStjjd|ƒ‚dS)NÚversionÚinterface_versionz%d.%dÚstateÚIPv4Úipv4Ú IPv4ICMPTypesÚsÚIPv6Úipv6Ú IPv6_rpfilterÚ IPv6ICMPTypesÚBRIDGErÚ IPSetTypesÚnf_conntrack_helper_settingFÚnf_conntrack_helpersÚsasÚnf_nat_helperszDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist)r'ÚStringrÚVERSIONZDBUS_INTERFACE_VERSIONZDBUS_INTERFACE_REVISIONr#Z get_stateZBooleanZis_ipv_enabledZArrayZipv4_supported_icmp_typesZipv6_rpfilter_enabledZipv6_supported_icmp_typesZebtables_enabledZ ipset_enabledZipset_supported_typesÚ DictionaryÚ exceptionsÚ DBusException)r)Zpropr-r-r.Ú _get_property–s@ zFirewallD._get_propertyZssÚv)Úin_signatureÚ out_signatureNcCs~t|tƒ}t|tƒ}tjd||ƒ|tjjkr8|j|ƒS|tjjtjj tjj tjjgkrjtjj d|ƒ‚ntjj d|ƒ‚dS)NzGet('%s', '%s')zDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not existzJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist)rÚstrrr1rr'r(rZÚDBUS_INTERFACE_ZONEÚDBUS_INTERFACE_DIRECTÚDBUS_INTERFACE_POLICIESÚDBUS_INTERFACE_IPSETrXrY)r)Úinterface_nameÚ property_namer:r-r-r.ÚGetÆs z FirewallD.GetrJza{sv}cCs„t|tƒ}tjd|ƒi}|tjjkrDxNdD]}|j|ƒ||<q,Wn2|tjjtjj tjj tjjgkrfntjj d|ƒ‚tj|ddS)NzGetAll('%s')rDrErFrGrKrMrOrrPrQrRrTrIrNzJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not existZsv)Ú signature)rDrErFrGrKrMrOrrPrQrRrTrIrN)rr^rr1rr'r(rZr_r`rarbrXrYrW)r)rcr:Úretr=r-r-r.ÚGetAllÝs& zFirewallD.GetAllZssv)r\cCs´t|tƒ}t|tƒ}t|ƒ}tjd|||ƒ|j|ƒ|tjjkrn|dkr\tjj d|ƒ‚q°tjj d|ƒ‚nB|tjj tjjtjjtjj gkr tjj d|ƒ‚ntjj d|ƒ‚dS)NzSet('%s', '%s', '%s')rDrErFrGrKrMrOrrPrQrRrTrIrNzGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-onlyzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not existzJorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist)rDrErFrGrKrMrOrrPrQrRrTrIrN)rr^rr1r;rr'r(rXrYr_r`rarb)r)rcrdZ new_valuer:r-r-r.ÚSetøs: z FirewallD.Setzsa{sv}as)rfcCs.t|tƒ}t|ƒ}t|ƒ}tjd|||ƒdS)Nz#PropertiesChanged('%s', '%s', '%s'))rr^rr1)r)rcZchanged_propertiesZinvalidated_propertiesr-r-r.ÚPropertiesChangeds zFirewallD.PropertiesChanged)r]cs4tjdƒtt|ƒj|j|jjƒƒ}t||t j jƒS)NzIntrospect())rZdebug2r!rÚ Introspectr%r$Zget_busrrr'r()r)r:Údata)r,r-r.rk&s zFirewallD.IntrospectÚcCs*tjdƒ|jjƒ|jjƒ|jƒdS)z#Reload the firewall rules. zreload()N)rr1r#ÚreloadrÚReloaded)r)r:r-r-r.rn4s zFirewallD.reloadcCs,tjdƒ|jjdƒ|jjƒ|jƒdS)z™Completely reload the firewall. Completely reload the firewall: Stops firewall, unloads modules and starts the firewall again. zcompleteReload()TN)rr1r#rnrro)r)r:r-r-r.ÚcompleteReloadCs zFirewallD.completeReloadcCstjdƒdS)Nz Reloaded())rr1)r)r-r-r.roSszFirewallD.ReloadedcCstjdƒt|jƒdS)z&Check permanent configuration zcheckPermanentConfig()N)rr1rr#)r)r:r-r-r.ÚcheckPermanentConfigXs zFirewallD.checkPermanentConfigc CsÎtjdƒd}|jjƒ}xÂ|jjjƒD]²}|j|ƒ}yj||kr€|jj|ƒ}|j ƒ|krptjd|ƒ|j |ƒqœtjd|ƒntjd|ƒ|jj||ƒWq&tk rÖ}ztj d||fƒd}WYdd}~Xq&Xq&W|jjƒ}xÈ|jjjƒD]¸}|j|ƒ}yn||krR|jj|ƒ}|j ƒ|krBtjd |ƒ|j |ƒntjd |ƒntjd|ƒ|jj||ƒWqôtk rª}ztj d||fƒd}WYdd}~XqôXqôW|jjƒ}xÊ|jjjƒD]º}yx|j|ƒ}||kr&|jj|ƒ}|j ƒ|krtjd |ƒ|j |ƒntjd|ƒntjd|ƒ|jj||ƒWn:tk r~}ztj d||fƒd}WYdd}~XnXqÈW|jjƒ}tƒ}x”|jjjƒD]‚}|j|ƒ}t|ƒ} |dk r~d} xH| j ƒD]<}|jjj!||ƒ|krÖtjd||fƒ| j"|ƒd} qÖWxV| j ƒD]J}y,t#|ƒ}|rNt$||ƒrN| j"|ƒd} Wntk rfYnXq W| r~~| j%ƒ}x| j ƒD]}t&||ƒqˆWyP||krÎ|jj'|ƒ}tjd|ƒ|j(|ƒntjd|ƒ|jj)||ƒWn:tk r&}ztj d||fƒd}WYdd}~XnXq¦W|jj*ƒ}xž|jj+j,ƒD]Ž}|j-|ƒ}yB||krx|jj.|ƒ}|j |ƒntjd|ƒ|jj/||ƒWn:tk rÐ}ztj d||fƒd}WYdd}~XnXqFW|jj0ƒ}xÊ|jj1j2ƒD]º}|j3|ƒ}yn||krN|jj4|ƒ}|j ƒ|kr>tjd|ƒ|j |ƒntjd|ƒntjd|ƒ|jj5||ƒWn:tk r¦}ztj d||fƒd}WYdd}~XnXqðW|jj6j7ƒ|jj6j8ƒ|jj6j9ƒf}y6|jj ƒ|krútjdƒ|jj |ƒn tjdƒWn6tk r<}ztj d|ƒd}WYdd}~XnX|jj:j;j<ƒ}y6|jj ƒ|krvtjdƒ|jj=|ƒn tjdƒWn6tk r¸}ztj d |ƒd}WYdd}~XnX|rÊt>t?j@ƒ‚dS)!z-Make runtime configuration permanent zcopyRuntimeToPermanent()FzCopying service '%s' settingsz$Service '%s' is identical, ignoring.zCreating service '%s'z/Runtime To Permanent failed on service '%s': %sTNzCopying icmptype '%s' settingsz%IcmpType '%s' is identical, ignoring.zCreating icmptype '%s'z0Runtime To Permanent failed on icmptype '%s': %szCopying ipset '%s' settingsz"IPSet '%s' is identical, ignoring.zCreating ipset '%s'z-Runtime To Permanent failed on ipset '%s': %szEZone '%s': interface binding for '%s' has been added by NM, ignoring.zCopying zone '%s' settingszCreating zone '%s'z,Runtime To Permanent failed on zone '%s': %szCreating policy '%s'z.Runtime To Permanent failed on policy '%s': %szCopying helper '%s' settingsz#Helper '%s' is identical, ignoring.zCreating helper '%s'z.Runtime To Permanent failed on helper '%s': %szCopying direct configurationz,Direct configuration is identical, ignoring.z7Runtime To Permanent failed on direct configuration: %szCopying policies configurationz.Policies configuration is identical, ignoring.z9Runtime To Permanent failed on policies configuration: %s)Arr1rZgetServiceNamesr#ÚserviceÚget_servicesÚgetServiceSettingsZgetServiceByNameZgetSettingsÚupdateÚ addServiceÚ ExceptionÚwarningZgetIcmpTypeNamesÚicmptypeÚ get_icmptypesÚgetIcmpTypeSettingsZgetIcmpTypeByNameZaddIcmpTypeZ getIPSetNamesÚipsetÚ get_ipsetsÚgetIPSetSettingsZgetIPSetByNameZaddIPSetZgetZoneNamesrr<Ú get_zonesÚgetZoneSettings2r Ú getInterfacesZinterface_get_senderÚremoveInterfacerrZgetSettingsDictrZ getZoneByNameZupdate2ZaddZone2ZgetPolicyNamesÚpolicyÚ"get_policies_not_derived_from_zoneÚgetPolicySettingsZgetPolicyByNameZ addPolicyZgetHelperNamesÚhelperÚget_helpersÚgetHelperSettingsZgetHelperByNameZ addHelperÚdirectÚget_all_chainsÚ get_all_rulesÚget_all_passthroughsr7Úlockdown_whitelistÚ export_configZsetLockdownWhitelistrrZRT_TO_PERM_FAILED) r)r:r9Zconfig_namesÚnameZconfZconf_objÚeZnm_bus_nameÚsettingsZchangedÚ interfaceZ connectionr-r-r.ÚruntimeToPermanentds$ zFirewallD.runtimeToPermanentcCs,tjdƒ|j|ƒ|jjjƒ|jƒdS)z!Enable lockdown policies zpolicies.enableLockdown()N)rr1r;r#r7Zenable_lockdownÚLockdownEnabled)r)r:r-r-r.ÚenableLockdown2s zFirewallD.enableLockdowncCs,tjdƒ|j|ƒ|jjjƒ|jƒdS)z"Disable lockdown policies zpolicies.disableLockdown()N)rr1r;r#r7Zdisable_lockdownÚLockdownDisabled)r)r:r-r-r.ÚdisableLockdown>s zFirewallD.disableLockdownÚbcCstjdƒ|jjjƒS)z+Retuns True if lockdown is enabled zpolicies.queryLockdown())rr1r#r7r8)r)r:r-r-r.Ú queryLockdownJs zFirewallD.queryLockdowncCstjdƒdS)NzLockdownEnabled())rr1)r)r-r-r.r”UszFirewallD.LockdownEnabledcCstjdƒdS)NzLockdownDisabled())rr1)r)r-r-r.r–ZszFirewallD.LockdownDisabledcCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)zAdd lockdown command z*policies.addLockdownWhitelistCommand('%s')N) rr^rr1r;r#r7rZadd_commandÚLockdownWhitelistCommandAdded)r)r6r:r-r-r.ÚaddLockdownWhitelistCommandcs z%FirewallD.addLockdownWhitelistCommandcCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)z Remove lockdown command z-policies.removeLockdownWhitelistCommand('%s')N) rr^rr1r;r#r7rZremove_commandÚLockdownWhitelistCommandRemoved)r)r6r:r-r-r.ÚremoveLockdownWhitelistCommandps z(FirewallD.removeLockdownWhitelistCommandcCs(t|tƒ}tjd|ƒ|jjjj|ƒS)zQuery lockdown command z,policies.queryLockdownWhitelistCommand('%s'))rr^rr1r#r7rZhas_command)r)r6r:r-r-r.ÚqueryLockdownWhitelistCommand}s z'FirewallD.queryLockdownWhitelistCommandÚascCstjdƒ|jjjjƒS)zAdd lockdown command z'policies.getLockdownWhitelistCommands())rr1r#r7rZget_commands)r)r:r-r-r.ÚgetLockdownWhitelistCommands‰s z&FirewallD.getLockdownWhitelistCommandscCstjd|ƒdS)Nz#LockdownWhitelistCommandAdded('%s'))rr1)r)r6r-r-r.rš”sz'FirewallD.LockdownWhitelistCommandAddedcCstjd|ƒdS)Nz%LockdownWhitelistCommandRemoved('%s'))rr1)r)r6r-r-r.rœ™sz)FirewallD.LockdownWhitelistCommandRemovedÚicCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)zAdd lockdown uid z&policies.addLockdownWhitelistUid('%s')N) rÚintrr1r;r#r7rZadd_uidÚLockdownWhitelistUidAdded)r)r4r:r-r-r.ÚaddLockdownWhitelistUid s z!FirewallD.addLockdownWhitelistUidcCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)zRemove lockdown uid z)policies.removeLockdownWhitelistUid('%s')N) rr¢rr1r;r#r7rZ remove_uidÚLockdownWhitelistUidRemoved)r)r4r:r-r-r.ÚremoveLockdownWhitelistUids z$FirewallD.removeLockdownWhitelistUidcCs(t|tƒ}tjd|ƒ|jjjj|ƒS)zQuery lockdown uid z(policies.queryLockdownWhitelistUid('%s'))rr¢rr1r#r7rZhas_uid)r)r4r:r-r-r.ÚqueryLockdownWhitelistUidºs z#FirewallD.queryLockdownWhitelistUidZaicCstjdƒ|jjjjƒS)zAdd lockdown uid z#policies.getLockdownWhitelistUids())rr1r#r7rZget_uids)r)r:r-r-r.ÚgetLockdownWhitelistUidsÆs z"FirewallD.getLockdownWhitelistUidscCstjd|ƒdS)NzLockdownWhitelistUidAdded(%d))rr1)r)r4r-r-r.r£Ñsz#FirewallD.LockdownWhitelistUidAddedcCstjd|ƒdS)NzLockdownWhitelistUidRemoved(%d))rr1)r)r4r-r-r.r¥Ösz%FirewallD.LockdownWhitelistUidRemovedcCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)zAdd lockdown user z'policies.addLockdownWhitelistUser('%s')N) rr^rr1r;r#r7rZadd_userÚLockdownWhitelistUserAdded)r)r5r:r-r-r.ÚaddLockdownWhitelistUserÝs z"FirewallD.addLockdownWhitelistUsercCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)zRemove lockdown user z*policies.removeLockdownWhitelistUser('%s')N) rr^rr1r;r#r7rZremove_userÚLockdownWhitelistUserRemoved)r)r5r:r-r-r.ÚremoveLockdownWhitelistUserês z%FirewallD.removeLockdownWhitelistUsercCs(t|tƒ}tjd|ƒ|jjjj|ƒS)zQuery lockdown user z)policies.queryLockdownWhitelistUser('%s'))rr^rr1r#r7rZhas_user)r)r5r:r-r-r.ÚqueryLockdownWhitelistUser÷s z$FirewallD.queryLockdownWhitelistUsercCstjdƒ|jjjjƒS)zAdd lockdown user z$policies.getLockdownWhitelistUsers())rr1r#r7rZ get_users)r)r:r-r-r.ÚgetLockdownWhitelistUserss z#FirewallD.getLockdownWhitelistUserscCstjd|ƒdS)Nz LockdownWhitelistUserAdded('%s'))rr1)r)r5r-r-r.r©sz$FirewallD.LockdownWhitelistUserAddedcCstjd|ƒdS)Nz"LockdownWhitelistUserRemoved('%s'))rr1)r)r5r-r-r.r«sz&FirewallD.LockdownWhitelistUserRemovedcCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)zAdd lockdown context z*policies.addLockdownWhitelistContext('%s')N) rr^rr1r;r#r7rZadd_contextÚLockdownWhitelistContextAdded)r)r3r:r-r-r.ÚaddLockdownWhitelistContexts z%FirewallD.addLockdownWhitelistContextcCs@t|tƒ}tjd|ƒ|j|ƒ|jjjj|ƒ|j |ƒdS)z Remove lockdown context z-policies.removeLockdownWhitelistContext('%s')N) rr^rr1r;r#r7rZremove_contextÚLockdownWhitelistContextRemoved)r)r3r:r-r-r.ÚremoveLockdownWhitelistContext's z(FirewallD.removeLockdownWhitelistContextcCs(t|tƒ}tjd|ƒ|jjjj|ƒS)zQuery lockdown context z,policies.queryLockdownWhitelistContext('%s'))rr^rr1r#r7rZhas_context)r)r3r:r-r-r.ÚqueryLockdownWhitelistContext4s z'FirewallD.queryLockdownWhitelistContextcCstjdƒ|jjjjƒS)zAdd lockdown context z'policies.getLockdownWhitelistContexts())rr1r#r7rZget_contexts)r)r:r-r-r.ÚgetLockdownWhitelistContexts@s z&FirewallD.getLockdownWhitelistContextscCstjd|ƒdS)Nz#LockdownWhitelistContextAdded('%s'))rr1)r)r3r-r-r.r¯Ksz'FirewallD.LockdownWhitelistContextAddedcCstjd|ƒdS)Nz%LockdownWhitelistContextRemoved('%s'))rr1)r)r3r-r-r.r±Psz)FirewallD.LockdownWhitelistContextRemovedcCs*tjdƒ|j|ƒ|jjƒ|jƒdS)znEnable panic mode. All ingoing and outgoing connections and packets will be blocked. zenablePanicMode()N)rr1r;r#Zenable_panic_modeÚPanicModeEnabled)r)r:r-r-r.ÚenablePanicModeYs zFirewallD.enablePanicModecCs*tjdƒ|j|ƒ|jjƒ|jƒdS)zˆDisable panic mode. Enables normal mode: Allowed ingoing and outgoing connections will not be blocked anymore zdisablePanicMode()N)rr1r;r#Zdisable_panic_modeÚPanicModeDisabled)r)r:r-r-r.ÚdisablePanicModegs zFirewallD.disablePanicModecCstjdƒ|jjƒS)NzqueryPanicMode())rr1r#Zquery_panic_mode)r)r:r-r-r.ÚqueryPanicModevs zFirewallD.queryPanicModecCstjdƒdS)NzPanicModeEnabled())rr1)r)r-r-r.rµszFirewallD.PanicModeEnabledcCstjdƒdS)NzPanicModeDisabled())rr1)r)r-r-r.r·„szFirewallD.PanicModeDisabledz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)cCs$t|tƒ}tjd|ƒ|jjj|ƒS)NzgetZoneSettings(%s))rr^rr1r#r<Zget_config_with_settings)r)r<r:r-r-r.ÚgetZoneSettingss zFirewallD.getZoneSettingscCs$t|tƒ}tjd|ƒ|jjj|ƒS)NzgetZoneSettings2(%s))rr^rr1r#r<Úget_config_with_settings_dict)r)r<r:r-r-r.r€—s zFirewallD.getZoneSettings2zsa{sv}cCsBt|tƒ}tjd|ƒ|j|ƒ|jjj|||ƒ|j||ƒdS)NzsetZoneSettings2(%s)) rr^rr1r;r#r<Úset_config_with_settings_dictÚZoneUpdated)r)r<r‘r:r-r-r.ÚsetZoneSettings2 s zFirewallD.setZoneSettings2cCstjd||fƒdS)Nzzone.ZoneUpdated('%s', '%s'))rr1)r)r<r‘r-r-r.r½ªszFirewallD.ZoneUpdatedcCs$t|tƒ}tjd|ƒ|jjj|ƒS)Nzpolicy.getPolicySettings(%s))rr^rr1r#rƒr»)r)rƒr:r-r-r.r…¯s zFirewallD.getPolicySettingscCsBt|tƒ}tjd|ƒ|j|ƒ|jjj|||ƒ|j||ƒdS)Nzpolicy.setPolicySettings(%s)) rr^rr1r;r#rƒr¼Ú PolicyUpdated)r)rƒr‘r:r-r-r.ÚsetPolicySettings¸s zFirewallD.setPolicySettingscCstjd||fƒdS)Nz policy.PolicyUpdated('%s', '%s'))rr1)r)rƒr‘r-r-r.r¿ÂszFirewallD.PolicyUpdatedcCstjdƒ|jjjƒS)NzlistServices())rr1r#rrrs)r)r:r-r-r.ÚlistServicesÇs zFirewallD.listServicesz(sssa(ss)asa{ss}asa(ss))cCs–t|tƒ}tjd|ƒ|jjj|ƒ}|jƒ}g}x\tdƒD]P}|j |d|krr|j tjt ||j |dƒƒƒq:|j ||j |dƒq:Wt|ƒS)NzgetServiceSettings(%s)ér)rr^rr1r#rrÚget_serviceÚexport_config_dictÚrangeZIMPORT_EXPORT_STRUCTUREÚappendÚcopyÚdeepcopyÚgetattrÚtuple)r)rrr:ÚobjZ conf_dictZ conf_listr¡r-r-r.rtÒs "zFirewallD.getServiceSettingscCs,t|tƒ}tjd|ƒ|jjj|ƒ}|jƒS)NzgetServiceSettings2(%s))rr^rr1r#rrrÃrÄ)r)rrr:rËr-r-r.ÚgetServiceSettings2æs zFirewallD.getServiceSettings2cCstjdƒ|jjjƒS)NzlistIcmpTypes())rr1r#ryrz)r)r:r-r-r.Ú listIcmpTypesðs zFirewallD.listIcmpTypescCs(t|tƒ}tjd|ƒ|jjj|ƒjƒS)NzgetIcmpTypeSettings(%s))rr^rr1r#ryZget_icmptyperŽ)r)ryr:r-r-r.r{ûs zFirewallD.getIcmpTypeSettingscCstjdƒ|jjƒS)NzgetLogDenied())rr1r#Zget_log_denied)r)r:r-r-r.ÚgetLogDenied s zFirewallD.getLogDeniedcCsXt|tƒ}tjd|ƒ|j|ƒ|jj|ƒ|j|ƒ|jjƒ|j jƒ|j ƒdS)NzsetLogDenied('%s'))rr^rr1r;r#Zset_log_deniedÚLogDeniedChangedrnrro)r)Úvaluer:r-r-r.ÚsetLogDenieds zFirewallD.setLogDeniedcCstjd|ƒdS)NzLogDeniedChanged('%s'))rr1)r)rÐr-r-r.rÏ"szFirewallD.LogDeniedChangedcCstjdƒdS)NzgetAutomaticHelpers()Úno)rr1)r)r:r-r-r.ÚgetAutomaticHelpers+s zFirewallD.getAutomaticHelperscCs&t|tƒ}tjd|ƒ|j|ƒdS)NzsetAutomaticHelpers('%s'))rr^rr1r;)r)rÐr:r-r-r.ÚsetAutomaticHelpers6s zFirewallD.setAutomaticHelperscCstjd|ƒdS)NzAutomaticHelpersChanged('%s'))rr1)r)rÐr-r-r.ÚAutomaticHelpersChangedBsz!FirewallD.AutomaticHelpersChangedcCstjdƒ|jjƒS)NzgetDefaultZone())rr1r#Zget_default_zone)r)r:r-r-r.ÚgetDefaultZoneKs zFirewallD.getDefaultZonecCs<t|tƒ}tjd|ƒ|j|ƒ|jj|ƒ|j|ƒdS)NzsetDefaultZone('%s'))rr^rr1r;r#Zset_default_zoneÚDefaultZoneChanged)r)r<r:r-r-r.ÚsetDefaultZoneTs zFirewallD.setDefaultZonecCstjd|ƒdS)NzDefaultZoneChanged('%s'))rr1)r)r<r-r-r.r×`szFirewallD.DefaultZoneChangedcCstjdƒ|jjjƒS)Nzpolicy.getPolicies())rr1r#rƒr„)r)r:r-r-r.ÚgetPoliciesks zFirewallD.getPoliciesz a{sa{sas}}cCs\tjdƒi}xH|jjjƒD]8}i||<|jjj|ƒ||d<|jjj|ƒ||d<qW|S)Nzpolicy.getActivePolicies()Z ingress_zonesZegress_zones)rr1r#rƒZ)get_active_policies_not_derived_from_zoneZlist_ingress_zonesZlist_egress_zones)r)r:r7rƒr-r-r.ÚgetActivePoliciesss zFirewallD.getActivePoliciescCstjdƒ|jjjƒS)Nzzone.getZones())rr1r#r<r)r)r:r-r-r.ÚgetZones†s zFirewallD.getZonescCstjdƒi}x||jjjƒD]l}|jjj|ƒ}|jjj|ƒ}t|ƒt|ƒdkri||<t|ƒdkrp|||d<t|ƒdkr|||d<qW|S)Nzzone.getActiveZones()rÚ interfacesÚsources)rr1r#r<rÚlist_interfacesÚlist_sourcesÚlen)r)r:Zzonesr<rÜrÝr-r-r.ÚgetActiveZoness zFirewallD.getActiveZonescCs2t|tƒ}tjd|ƒ|jjj|ƒ}|r.|SdS)z¸Return the zone an interface belongs to. :Parameters: `interface` : str Name of the interface :Returns: str. The name of the zone. zzone.getZoneOfInterface('%s')rm)rr^rr1r#r<Zget_zone_of_interface)r)r’r:r<r-r-r.ÚgetZoneOfInterface£s zFirewallD.getZoneOfInterfacecCs2t|tƒ}tjd|ƒ|jjj|ƒ}|r.|SdS)Nzzone.getZoneOfSource('%s')rm)rr^rr1r#r<Zget_zone_of_source)r)Úsourcer:r<r-r-r.ÚgetZoneOfSource¶s zFirewallD.getZoneOfSourcecCsdS)NFr-)r)r<r:r-r-r.ÚisImmutableÃszFirewallD.isImmutablecCsRt|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj|||ƒ}|j||ƒ|S)zPAdd an interface to a zone. If zone is empty, use default zone. zzone.addInterface('%s', '%s')) rr^rr1r;r#r<Z add_interfaceÚInterfaceAdded)r)r<r’r:Ú_zoner-r-r.ÚaddInterfaceÏs zFirewallD.addInterfacecCs"t|tƒ}t|tƒ}|j|||ƒS)z£Change a zone an interface is part of. If zone is empty, use default zone. This function is deprecated, use changeZoneOfInterface instead )rr^ÚchangeZoneOfInterface)r)r<r’r:r-r-r.Ú changeZoneàs zFirewallD.changeZonecCsRt|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj|||ƒ}|j||ƒ|S)z[Change a zone an interface is part of. If zone is empty, use default zone. z&zone.changeZoneOfInterface('%s', '%s')) rr^rr1r;r#r<Zchange_zone_of_interfaceÚZoneOfInterfaceChanged)r)r<r’r:rçr-r-r.réîs zFirewallD.changeZoneOfInterfacecCsPt|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj||ƒ}|j||ƒ|S)zkRemove interface from a zone. If zone is empty, remove from zone the interface belongs to. z zone.removeInterface('%s', '%s')) rr^rr1r;r#r<Zremove_interfaceÚInterfaceRemoved)r)r<r’r:rçr-r-r.r‚ÿs zFirewallD.removeInterfacecCs6t|tƒ}t|tƒ}tjd||fƒ|jjj||ƒS)z^Return true if an interface is in a zone. If zone is empty, use default zone. zzone.queryInterface('%s', '%s'))rr^rr1r#r<Zquery_interface)r)r<r’r:r-r-r.ÚqueryInterfaces zFirewallD.queryInterfacecCs&t|tƒ}tjd|ƒ|jjj|ƒS)z]Return the list of interfaces of a zone. If zone is empty, use default zone. zzone.getInterfaces('%s'))rr^rr1r#r<rÞ)r)r<r:r-r-r.rs zFirewallD.getInterfacescCstjd||fƒdS)Nzzone.InterfaceAdded('%s', '%s'))rr1)r)r<r’r-r-r.ræ+szFirewallD.InterfaceAddedcCstjd||fƒdS)z, This signal is deprecated. zzone.ZoneChanged('%s', '%s')N)rr1)r)r<r’r-r-r.ÚZoneChanged0szFirewallD.ZoneChangedcCs"tjd||fƒ|j||ƒdS)Nz'zone.ZoneOfInterfaceChanged('%s', '%s'))rr1rî)r)r<r’r-r-r.rë8s z FirewallD.ZoneOfInterfaceChangedcCstjd||fƒdS)Nz!zone.InterfaceRemoved('%s', '%s'))rr1)r)r<r’r-r-r.rì?szFirewallD.InterfaceRemovedcCsRt|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj|||ƒ}|j||ƒ|S)zLAdd a source to a zone. If zone is empty, use default zone. zzone.addSource('%s', '%s')) rr^rr1r;r#r<Z add_sourceÚSourceAdded)r)r<rãr:rçr-r-r.Ú addSourceHs zFirewallD.addSourcecCsRt|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj|||ƒ}|j||ƒ|S)zXChange a zone an source is part of. If zone is empty, use default zone. z#zone.changeZoneOfSource('%s', '%s')) rr^rr1r;r#r<Zchange_zone_of_sourceÚZoneOfSourceChanged)r)r<rãr:rçr-r-r.ÚchangeZoneOfSourceYs zFirewallD.changeZoneOfSourcecCsPt|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj||ƒ}|j||ƒ|S)zeRemove source from a zone. If zone is empty, remove from zone the source belongs to. zzone.removeSource('%s', '%s')) rr^rr1r;r#r<Z remove_sourceÚ SourceRemoved)r)r<rãr:rçr-r-r.ÚremoveSourcejs zFirewallD.removeSourcecCs6t|tƒ}t|tƒ}tjd||fƒ|jjj||ƒS)z[Return true if an source is in a zone. If zone is empty, use default zone. zzone.querySource('%s', '%s'))rr^rr1r#r<Zquery_source)r)r<rãr:r-r-r.ÚquerySource{s zFirewallD.querySourcecCs&t|tƒ}tjd|ƒ|jjj|ƒS)zZReturn the list of sources of a zone. If zone is empty, use default zone. zzone.getSources('%s'))rr^rr1r#r<rß)r)r<r:r-r-r.Ú getSourcesˆs zFirewallD.getSourcescCstjd||fƒdS)Nzzone.SourceAdded('%s', '%s'))rr1)r)r<rãr-r-r.rï–szFirewallD.SourceAddedcCstjd||fƒdS)Nz$zone.ZoneOfSourceChanged('%s', '%s'))rr1)r)r<rãr-r-r.rñ›szFirewallD.ZoneOfSourceChangedcCstjd||fƒdS)Nzzone.SourceRemoved('%s', '%s'))rr1)r)r<rãr-r-r.ró szFirewallD.SourceRemovedcCsHtjd||fƒ|j||=t|d}|jjj||ƒ|j||ƒdS)Nz%zone.disableTimedRichRule('%s', '%s'))Úrule_str)rr1r2rr#r<Úremove_ruleÚRichRuleRemoved)r)r<ÚrulerËr-r-r.ÚdisableTimedRichRule©s zFirewallD.disableTimedRichRuleZssicCs†t|tƒ}t|tƒ}t|tƒ}tjd||fƒt|d}|jjj|||ƒ}|dkrtt j ||j||ƒ}|j|||ƒ|j |||ƒ|S)Nzzone.addRichRule('%s', '%s'))r÷r)rr^r¢rr1rr#r<Úadd_rulerÚtimeout_add_secondsrûr?Ú RichRuleAdded)r)r<rúÚtimeoutr:rËrçr>r-r-r.ÚaddRichRule±s zFirewallD.addRichRulecCs\t|tƒ}t|tƒ}tjd||fƒt|d}|jjj||ƒ}|j||ƒ|j ||ƒ|S)Nzzone.removeRichRule('%s', '%s'))r÷) rr^rr1rr#r<rørArù)r)r<rúr:rËrçr-r-r.ÚremoveRichRuleÅs zFirewallD.removeRichRulecCs@t|tƒ}t|tƒ}tjd||fƒt|d}|jjj||ƒS)Nzzone.queryRichRule('%s', '%s'))r÷)rr^rr1rr#r<Ú query_rule)r)r<rúr:rËr-r-r.Ú queryRichRuleÓs zFirewallD.queryRichRulecCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.getRichRules('%s'))rr^rr1r#r<Z list_rules)r)r<r:r-r-r.ÚgetRichRulesÞs zFirewallD.getRichRulescCstjd|||fƒdS)Nz"zone.RichRuleAdded('%s', '%s', %d))rr1)r)r<rúrÿr-r-r.rþêszFirewallD.RichRuleAddedcCstjd||fƒdS)Nz zone.RichRuleRemoved('%s', '%s'))rr1)r)r<rúr-r-r.rùïszFirewallD.RichRuleRemovedcCs>tjd||fƒ|j||=|jjj||ƒ|j||ƒdS)Nz$zone.disableTimedService('%s', '%s'))rr1r2r#r<Úremove_serviceÚServiceRemoved)r)r<rrr-r-r.ÚdisableTimedServiceøszFirewallD.disableTimedServicecCsŠt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒ|jjj||||ƒ}|dkrxt j ||j||ƒ}|j|||ƒ|j |||ƒ|S)Nzzone.addService('%s', '%s', %d)r)rr^r¢rr1r;r#r<Zadd_servicerrýrr?ÚServiceAdded)r)r<rrrÿr:rçr>r-r-r.rvÿs zFirewallD.addServicecCs\t|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj||ƒ}|j||ƒ|j ||ƒ|S)Nzzone.removeService('%s', '%s')) rr^rr1r;r#r<rrAr)r)r<rrr:rçr-r-r.Ú removeServices zFirewallD.removeServicecCs6t|tƒ}t|tƒ}tjd||fƒ|jjj||ƒS)Nzzone.queryService('%s', '%s'))rr^rr1r#r<Z query_service)r)r<rrr:r-r-r.ÚqueryService&s zFirewallD.queryServicecCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.getServices('%s'))rr^rr1r#r<Z list_services)r)r<r:r-r-r.ÚgetServices1s zFirewallD.getServicescCstjd|||fƒdS)Nz!zone.ServiceAdded('%s', '%s', %d))rr1)r)r<rrrÿr-r-r.r=szFirewallD.ServiceAddedcCstjd||fƒdS)Nzzone.ServiceRemoved('%s', '%s'))rr1)r)r<rrr-r-r.rCszFirewallD.ServiceRemovedcCsHtjd|||fƒ|j|||f=|jjj|||ƒ|j|||ƒdS)Nz'zone.disableTimedPort('%s', '%s', '%s'))rr1r2r#r<Úremove_portÚPortRemoved)r)r<ÚportÚprotocolr-r-r.ÚdisableTimedPortLs zFirewallD.disableTimedPortZsssicCsžt|tƒ}t|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒ|jjj|||||ƒ}|dkrŠt j ||j|||ƒ}|j|||f|ƒ|j ||||ƒ|S)Nzzone.addPort('%s', '%s', '%s')r)rr^r¢rr1r;r#r<Zadd_portrrýrr?Ú PortAdded)r)r<rrrÿr:rçr>r-r-r.ÚaddPortTs zFirewallD.addPortZssscCspt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒ|jjj|||ƒ}|j|||fƒ|j |||ƒ|S)Nz!zone.removePort('%s', '%s', '%s')) rr^rr1r;r#r<rrAr )r)r<rrr:rçr-r-r.Ú removePortks zFirewallD.removePortcCsDt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|jjj|||ƒS)Nz zone.queryPort('%s', '%s', '%s'))rr^rr1r#r<Z query_port)r)r<rrr:r-r-r.Ú queryPort}s zFirewallD.queryPortZaascCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.getPorts('%s'))rr^rr1r#r<Z list_ports)r)r<r:r-r-r.ÚgetPorts‰s zFirewallD.getPortsrcCstjd||||fƒdS)Nz$zone.PortAdded('%s', '%s', '%s', %d))rr1)r)r<rrrÿr-r-r.r•szFirewallD.PortAddedcCstjd|||fƒdS)Nz"zone.PortRemoved('%s', '%s', '%s'))rr1)r)r<rrr-r-r.r ›szFirewallD.PortRemovedcCs>tjd||fƒ|j||=|jjj||ƒ|j||ƒdS)Nz%zone.disableTimedProtocol('%s', '%s'))rr1r2r#r<Úremove_protocolÚProtocolRemoved)r)r<rr-r-r.ÚdisableTimedProtocol¥szFirewallD.disableTimedProtocolcCsˆt|tƒ}t|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj||||ƒ}|dkrvt j ||j||ƒ}|j|||ƒ|j |||ƒ|S)Nzzone.enableProtocol('%s', '%s')r)rr^r¢rr1r;r#r<Zadd_protocolrrýrr?Ú ProtocolAdded)r)r<rrÿr:rçr>r-r-r.ÚaddProtocol¬s zFirewallD.addProtocolcCs\t|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj||ƒ}|j||ƒ|j ||ƒ|S)Nzzone.removeProtocol('%s', '%s')) rr^rr1r;r#r<rrAr)r)r<rr:rçr-r-r.ÚremoveProtocolÁs zFirewallD.removeProtocolcCs6t|tƒ}t|tƒ}tjd||fƒ|jjj||ƒS)Nzzone.queryProtocol('%s', '%s'))rr^rr1r#r<Zquery_protocol)r)r<rr:r-r-r.Ú queryProtocolÑs zFirewallD.queryProtocolcCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.getProtocols('%s'))rr^rr1r#r<Zlist_protocols)r)r<r:r-r-r.ÚgetProtocolsÜs zFirewallD.getProtocolscCstjd|||fƒdS)Nz"zone.ProtocolAdded('%s', '%s', %d))rr1)r)r<rrÿr-r-r.rèszFirewallD.ProtocolAddedcCstjd||fƒdS)Nz zone.ProtocolRemoved('%s', '%s'))rr1)r)r<rr-r-r.rîszFirewallD.ProtocolRemovedcCsJtjd|||fƒ|j|d||f=|jjj|||ƒ|j|||ƒdS)Nz-zone.disableTimedSourcePort('%s', '%s', '%s')Úsport)rr1r2r#r<Úremove_source_portÚSourcePortRemoved)r)r<rrr-r-r.ÚdisableTimedSourcePort÷s z FirewallD.disableTimedSourcePortcCs t|tƒ}t|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒ|jjj|||||ƒ}|dkrŒt j ||j|||ƒ}|j|d||f|ƒ|j ||||ƒ|S)Nz$zone.addSourcePort('%s', '%s', '%s')rr)rr^r¢rr1r;r#r<Zadd_source_portrrýr!r?ÚSourcePortAdded)r)r<rrrÿr:rçr>r-r-r.Ú addSourcePortÿs zFirewallD.addSourcePortcCsrt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒ|jjj|||ƒ}|j|d||fƒ|j |||ƒ|S)Nz'zone.removeSourcePort('%s', '%s', '%s')r) rr^rr1r;r#r<rrAr )r)r<rrr:rçr-r-r.ÚremoveSourcePorts zFirewallD.removeSourcePortcCsDt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|jjj|||ƒS)Nz&zone.querySourcePort('%s', '%s', '%s'))rr^rr1r#r<Zquery_source_port)r)r<rrr:r-r-r.ÚquerySourcePort)s zFirewallD.querySourcePortcCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.getSourcePorts('%s'))rr^rr1r#r<Zlist_source_ports)r)r<r:r-r-r.ÚgetSourcePorts6s zFirewallD.getSourcePortscCstjd||||fƒdS)Nz*zone.SourcePortAdded('%s', '%s', '%s', %d))rr1)r)r<rrrÿr-r-r.r"BszFirewallD.SourcePortAddedcCstjd|||fƒdS)Nz(zone.SourcePortRemoved('%s', '%s', '%s'))rr1)r)r<rrr-r-r.r Hs zFirewallD.SourcePortRemovedcCs(|j|d=|jjj|ƒ|j|ƒdS)NÚ masquerade)r2r#r<Úremove_masqueradeÚMasqueradeRemoved)r)r<r-r-r.ÚdisableTimedMasqueradeRsz FirewallD.disableTimedMasqueradeZsicCstt|tƒ}t|tƒ}tjd|ƒ|j|ƒ|jjj|||ƒ}|dkrdt j ||j|ƒ}|j|d|ƒ|j ||ƒ|S)Nzzone.addMasquerade('%s')rr')rr^r¢rr1r;r#r<Zadd_masqueraderrýr*r?ÚMasqueradeAdded)r)r<rÿr:rçr>r-r-r.Ú addMasqueradeXs zFirewallD.addMasqueradecCsJt|tƒ}tjd|ƒ|j|ƒ|jjj|ƒ}|j|dƒ|j |ƒ|S)Nzzone.removeMasquerade('%s')r') rr^rr1r;r#r<r(rAr))r)r<r:rçr-r-r.ÚremoveMasqueradels zFirewallD.removeMasqueradecCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.queryMasquerade('%s'))rr^rr1r#r<Zquery_masquerade)r)r<r:r-r-r.ÚqueryMasquerade{s zFirewallD.queryMasqueradecCstjd||fƒdS)Nzzone.MasqueradeAdded('%s', %d))rr1)r)r<rÿr-r-r.r+…szFirewallD.MasqueradeAddedcCstjd|ƒdS)Nzzone.MasqueradeRemoved('%s'))rr1)r)r<r-r-r.r)ŠszFirewallD.MasqueradeRemovedcCs@|j|||||f=|jjj|||||ƒ|j|||||ƒdS)N)r2r#r<Úremove_forward_portÚForwardPortRemoved)r)r<rrÚtoportÚtoaddrr-r-r.Údisable_forward_port“szFirewallD.disable_forward_portZsssssic CsÆt|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}tjd|||||fƒ|j|ƒ|jjj|||||||ƒ}|dkr®t j ||j|||||ƒ} |j|||||f| ƒ|j ||||||ƒ|S)Nz1zone.addForwardPort('%s', '%s', '%s', '%s', '%s')r)rr^r¢rr1r;r#r<Zadd_forward_portrrýr3r?ÚForwardPortAdded) r)r<rrr1r2rÿr:rçr>r-r-r.ÚaddForwardPort™s& zFirewallD.addForwardPortZssssscCs”t|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}tjd|||||fƒ|j|ƒ|jjj|||||ƒ}|j|||||fƒ|j |||||ƒ|S)Nz4zone.removeForwardPort('%s', '%s', '%s', '%s', '%s')) rr^rr1r;r#r<r/rAr0)r)r<rrr1r2r:rçr-r-r.ÚremoveForwardPort¶s zFirewallD.removeForwardPortcCs`t|tƒ}t|tƒ}t|tƒ}t|tƒ}t|tƒ}tjd|||||fƒ|jjj|||||ƒS)Nz3zone.queryForwardPort('%s', '%s', '%s', '%s', '%s'))rr^rr1r#r<Zquery_forward_port)r)r<rrr1r2r:r-r-r.ÚqueryForwardPortÌs zFirewallD.queryForwardPortcCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.getForwardPorts('%s'))rr^rr1r#r<Zlist_forward_ports)r)r<r:r-r-r.ÚgetForwardPortsÝs zFirewallD.getForwardPortscCstjd||||||fƒdS)Nz7zone.ForwardPortAdded('%s', '%s', '%s', '%s', '%s', %d))rr1)r)r<rrr1r2rÿr-r-r.r4észFirewallD.ForwardPortAddedcCstjd|||||fƒdS)Nz5zone.ForwardPortRemoved('%s', '%s', '%s', '%s', '%s'))rr1)r)r<rrr1r2r-r-r.r0ðszFirewallD.ForwardPortRemovedcCs>tjd||fƒ|j||=|jjj||ƒ|j||ƒdS)Nz&zone.disableTimedIcmpBlock('%s', '%s'))rr1r2r#r<Úremove_icmp_blockÚIcmpBlockRemoved)r)r<Úicmpr:r-r-r.ÚdisableTimedIcmpBlockúszFirewallD.disableTimedIcmpBlockcCsŠt|tƒ}t|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj||||ƒ}|dkrxt j ||j|||ƒ}|j|||ƒ|j |||ƒ|S)Nz zone.enableIcmpBlock('%s', '%s')r)rr^r¢rr1r;r#r<Zadd_icmp_blockrrýr<r?ÚIcmpBlockAdded)r)r<r;rÿr:rçr>r-r-r.ÚaddIcmpBlocks zFirewallD.addIcmpBlockcCs\t|tƒ}t|tƒ}tjd||fƒ|j|ƒ|jjj||ƒ}|j||ƒ|j ||ƒ|S)Nz zone.removeIcmpBlock('%s', '%s')) rr^rr1r;r#r<r9rAr:)r)r<r;r:rçr-r-r.ÚremoveIcmpBlocks zFirewallD.removeIcmpBlockcCs6t|tƒ}t|tƒ}tjd||fƒ|jjj||ƒS)Nzzone.queryIcmpBlock('%s', '%s'))rr^rr1r#r<Zquery_icmp_block)r)r<r;r:r-r-r.ÚqueryIcmpBlock&s zFirewallD.queryIcmpBlockcCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nzzone.getIcmpBlocks('%s'))rr^rr1r#r<Zlist_icmp_blocks)r)r<r:r-r-r.Ú getIcmpBlocks1s zFirewallD.getIcmpBlockscCstjd|||fƒdS)Nz#zone.IcmpBlockAdded('%s', '%s', %d))rr1)r)r<r;rÿr-r-r.r==szFirewallD.IcmpBlockAddedcCstjd||fƒdS)Nz!zone.IcmpBlockRemoved('%s', '%s'))rr1)r)r<r;r-r-r.r:CszFirewallD.IcmpBlockRemovedcCs@t|tƒ}tjd|ƒ|j|ƒ|jjj||ƒ}|j|ƒ|S)Nz zone.addIcmpBlockInversion('%s')) rr^rr1r;r#r<Zadd_icmp_block_inversionÚIcmpBlockInversionAdded)r)r<r:rçr-r-r.ÚaddIcmpBlockInversionLs zFirewallD.addIcmpBlockInversioncCs>t|tƒ}tjd|ƒ|j|ƒ|jjj|ƒ}|j|ƒ|S)Nz#zone.removeIcmpBlockInversion('%s')) rr^rr1r;r#r<Zremove_icmp_block_inversionÚIcmpBlockInversionRemoved)r)r<r:rçr-r-r.ÚremoveIcmpBlockInversionZs z"FirewallD.removeIcmpBlockInversioncCs&t|tƒ}tjd|ƒ|jjj|ƒS)Nz"zone.queryIcmpBlockInversion('%s'))rr^rr1r#r<Zquery_icmp_block_inversion)r)r<r:r-r-r.ÚqueryIcmpBlockInversionhs z!FirewallD.queryIcmpBlockInversioncCstjd|ƒdS)Nz"zone.IcmpBlockInversionAdded('%s'))rr1)r)r<r-r-r.rBrsz!FirewallD.IcmpBlockInversionAddedcCstjd|ƒdS)Nz$zone.IcmpBlockInversionRemoved('%s'))rr1)r)r<r-r-r.rDwsz#FirewallD.IcmpBlockInversionRemovedcCs`t|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒ|jjj|||ƒ|j|||ƒdS)Nz!direct.addChain('%s', '%s', '%s')) rr^rr1r;r#r‰Z add_chainÚ ChainAdded)r)ÚipvÚtableÚchainr:r-r-r.ÚaddChain‚s zFirewallD.addChaincCs`t|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒ|jjj|||ƒ|j|||ƒdS)Nz$direct.removeChain('%s', '%s', '%s')) rr^rr1r;r#r‰Zremove_chainÚChainRemoved)r)rHrIrJr:r-r-r.ÚremoveChains zFirewallD.removeChaincCsDt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|jjj|||ƒS)Nz#direct.queryChain('%s', '%s', '%s'))rr^rr1r#r‰Zquery_chain)r)rHrIrJr:r-r-r.Ú queryChainžs zFirewallD.queryChaincCs6t|tƒ}t|tƒ}tjd||fƒ|jjj||ƒS)Nzdirect.getChains('%s', '%s'))rr^rr1r#r‰Z get_chains)r)rHrIr:r-r-r.Ú getChainsªs zFirewallD.getChainsza(sss)cCstjdƒ|jjjƒS)Nzdirect.getAllChains())rr1r#r‰rŠ)r)r:r-r-r.ÚgetAllChainsµs zFirewallD.getAllChainscCstjd|||fƒdS)Nz#direct.ChainAdded('%s', '%s', '%s'))rr1)r)rHrIrJr-r-r.rG¾szFirewallD.ChainAddedcCstjd|||fƒdS)Nz%direct.ChainRemoved('%s', '%s', '%s'))rr1)r)rHrIrJr-r-r.rLÃs zFirewallD.ChainRemovedZsssiascCsŽt|tƒ}t|tƒ}t|tƒ}t|tƒ}tdd„|Dƒƒ}tjd||||dj|ƒfƒ|j|ƒ|jj j |||||ƒ|j|||||ƒdS)Ncss|]}t|tƒVqdS)N)rr^)Ú.0r¡r-r-r.ú ×sz$FirewallD.addRule..z*direct.addRule('%s', '%s', '%s', %d, '%s')z',')rr^r¢rÊrr1Újoinr;r#r‰rüÚ RuleAdded)r)rHrIrJÚpriorityr*r:r-r-r.ÚaddRuleÍs zFirewallD.addRulecCsŽt|tƒ}t|tƒ}t|tƒ}t|tƒ}tdd„|Dƒƒ}tjd||||dj|ƒfƒ|j|ƒ|jj j |||||ƒ|j|||||ƒdS)Ncss|]}t|tƒVqdS)N)rr^)rQr¡r-r-r.rRèsz'FirewallD.removeRule..z-direct.removeRule('%s', '%s', '%s', %d, '%s')z',')rr^r¢rÊrr1rSr;r#r‰røÚRuleRemoved)r)rHrIrJrUr*r:r-r-r.Ú removeRuleÞs zFirewallD.removeRulecCsˆt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|j|ƒxF|jjj|||ƒD]0\}}|jjj|||||ƒ|j |||||ƒqPWdS)Nz$direct.removeRules('%s', '%s', '%s')) rr^rr1r;r#r‰Ú get_rulesrørW)r)rHrIrJr:rUr*r-r-r.ÚremoveRulesïs zFirewallD.removeRulescCsnt|tƒ}t|tƒ}t|tƒ}t|tƒ}tdd„|Dƒƒ}tjd||||dj|ƒfƒ|jjj |||||ƒS)Ncss|]}t|tƒVqdS)N)rr^)rQr¡r-r-r.rR sz&FirewallD.queryRule..z,direct.queryRule('%s', '%s', '%s', %d, '%s')z',') rr^r¢rÊrr1rSr#r‰r)r)rHrIrJrUr*r:r-r-r.Ú queryRuleþs zFirewallD.queryRuleza(ias)cCsDt|tƒ}t|tƒ}t|tƒ}tjd|||fƒ|jjj|||ƒS)Nz!direct.getRules('%s', '%s', '%s'))rr^rr1r#r‰rY)r)rHrIrJr:r-r-r.ÚgetRules s zFirewallD.getRulesz a(sssias)cCstjdƒ|jjjƒS)Nzdirect.getAllRules())rr1r#r‰r‹)r)r:r-r-r.ÚgetAllRules s zFirewallD.getAllRulescCs"tjd||||dj|ƒfƒdS)Nz,direct.RuleAdded('%s', '%s', '%s', %d, '%s')z',')rr1rS)r)rHrIrJrUr*r-r-r.rT" szFirewallD.RuleAddedcCs"tjd||||dj|ƒfƒdS)Nz.direct.RuleRemoved('%s', '%s', '%s', %d, '%s')z',')rr1rS)r)rHrIrJrUr*r-r-r.rW( szFirewallD.RuleRemovedrScCsØt|tƒ}tdd„|Dƒƒ}tjd|dj|ƒfƒ|j|ƒy|jjj ||ƒSt k rÒ}zh|dkrztddd d gƒ}ntd d gƒ}t|ƒ}|jt jkrÀtt|ƒ|@ƒdkr¸tj|ƒt|ƒ‚‚WYdd}~XnXdS) Ncss|]}t|tƒVqdS)N)rr^)rQr¡r-r-r.rR9 sz(FirewallD.passthrough..zdirect.passthrough('%s', '%s')z','rHrLz-Cz--checkz-Lz--listr)rHrL)rr^rÊrr1rSr;r#r‰ÚpassthroughrÚsetÚcoderZCOMMAND_FAILEDràrxr )r)rHr*r:r9Z query_argsÚmsgr-r-r.r^2 s" zFirewallD.passthroughcCs\t|ƒ}tdd„|Dƒƒ}tjd|dj|ƒfƒ|j|ƒ|jjj||ƒ|j ||ƒdS)Ncss|]}t|ƒVqdS)N)r)rQr¡r-r-r.rRT sz+FirewallD.addPassthrough..z!direct.addPassthrough('%s', '%s')z',') rrÊrr1rSr;r#r‰Zadd_passthroughÚPassthroughAdded)r)rHr*r:r-r-r.ÚaddPassthroughM s zFirewallD.addPassthroughcCs\t|ƒ}tdd„|Dƒƒ}tjd|dj|ƒfƒ|j|ƒ|jjj||ƒ|j ||ƒdS)Ncss|]}t|ƒVqdS)N)r)rQr¡r-r-r.rRb sz.FirewallD.removePassthrough..z$direct.removePassthrough('%s', '%s')z',') rrÊrr1rSr;r#r‰Zremove_passthroughÚPassthroughRemoved)r)rHr*r:r-r-r.ÚremovePassthrough[ s zFirewallD.removePassthroughcCsBt|ƒ}tdd„|Dƒƒ}tjd|dj|ƒfƒ|jjj||ƒS)Ncss|]}t|ƒVqdS)N)r)rQr¡r-r-r.rRp sz-FirewallD.queryPassthrough..z#direct.queryPassthrough('%s', '%s')z',')rrÊrr1rSr#r‰Zquery_passthrough)r)rHr*r:r-r-r.ÚqueryPassthroughi s zFirewallD.queryPassthroughza(sas)cCstjdƒ|jjjƒS)Nzdirect.getAllPassthroughs())rr1r#r‰rŒ)r)r:r-r-r.ÚgetAllPassthroughsu s zFirewallD.getAllPassthroughscCs.tjdƒxt|jƒƒD]}|j|ŽqWdS)Nzdirect.removeAllPassthroughs())rr1Úreversedrgre)r)r:r^r-r-r.ÚremoveAllPassthroughs~ s zFirewallD.removeAllPassthroughscCs"t|ƒ}tjd|ƒ|jjj|ƒS)Nzdirect.getPassthroughs('%s'))rrr1r#r‰Zget_passthroughs)r)rHr:r-r-r.ÚgetPassthroughs‰ szFirewallD.getPassthroughscCstjd|dj|ƒfƒdS)Nz#direct.PassthroughAdded('%s', '%s')z',')rr1rS)r)rHr*r-r-r.rb“ szFirewallD.PassthroughAddedcCstjd|dj|ƒfƒdS)Nz%direct.PassthroughRemoved('%s', '%s')z',')rr1rS)r)rHr*r-r-r.rd™ szFirewallD.PassthroughRemovedcCsdS)zÈ PK_ACTION_ALL implies all other actions, i.e. once a subject is authorized for PK_ACTION_ALL it's also authorized for any other action. Use-case is GUI (RHBZ#994729). Nr-)r)r:r-r-r.ÚauthorizeAll¡ s zFirewallD.authorizeAllcCs$t|ƒ}tjd|ƒ|jjj|ƒS)Nzipset.queryIPSet('%s'))rrr1r#r|Zquery_ipset)r)r|r:r-r-r.Ú queryIPSet° szFirewallD.queryIPSetcCstjdƒ|jjjƒS)Nzipsets.getIPSets())rr1r#r|r})r)r:r-r-r.Ú getIPSetsº s zFirewallD.getIPSetscCs(t|tƒ}tjd|ƒ|jjj|ƒjƒS)NzgetIPSetSettings(%s))rr^rr1r#r|Z get_ipsetrŽ)r)r|r:r-r-r.r~Ã s zFirewallD.getIPSetSettingscCsLt|ƒ}t|ƒ}tjd||fƒ|j|ƒ|jjj||ƒ|j||ƒdS)Nzipset.addEntry('%s', '%s'))rrr1r;r#r|Z add_entryÚ EntryAdded)r)r|Úentryr:r-r-r.ÚaddEntryÏ s zFirewallD.addEntrycCsLt|ƒ}t|ƒ}tjd||fƒ|j|ƒ|jjj||ƒ|j||ƒdS)Nzipset.removeEntry('%s', '%s'))rrr1r;r#r|Zremove_entryÚEntryRemoved)r)r|ror:r-r-r.ÚremoveEntryÜ s zFirewallD.removeEntrycCs2t|ƒ}t|ƒ}tjd||fƒ|jjj||ƒS)Nzipset.queryEntry('%s', '%s'))rrr1r#r|Zquery_entry)r)r|ror:r-r-r.Ú queryEntryé szFirewallD.queryEntrycCs$t|ƒ}tjd|ƒ|jjj|ƒS)Nzipset.getEntries('%s'))rrr1r#r|Úget_entries)r)r|r:r-r-r.Ú getEntriesô szFirewallD.getEntriescCs”t|ƒ}t|tƒ}tjd|dj|ƒƒ|jjj|ƒ}|jjj||ƒt |ƒ}t |ƒ}x||D]}|j ||ƒq^Wx||D]}|j||ƒq|WdS)Nzipset.setEntries('%s', '[%s]')ú,)rÚlistrr1rSr#r|rtZset_entriesr_rnrq)r)r|Zentriesr:Zold_entriesZold_entries_setZentries_setror-r-r.Ú setEntriesþ s zFirewallD.setEntriescCs&t|ƒ}t|ƒ}tjd||fƒdS)Nzipset.EntryAdded('%s', '%s'))rrr1)r)r|ror-r-r.rn szFirewallD.EntryAddedcCs&t|ƒ}t|ƒ}tjd||fƒdS)Nzipset.EntryRemoved('%s', '%s'))rrr1)r)r|ror-r-r.rq szFirewallD.EntryRemovedcCstjdƒ|jjjƒS)Nzhelpers.getHelpers())rr1r#r†r‡)r)r:r-r-r.Ú getHelpers! s zFirewallD.getHelperscCs(t|tƒ}tjd|ƒ|jjj|ƒjƒS)NzgetHelperSettings(%s))rr^rr1r#r†Z get_helperrŽ)r)r†r:r-r-r.rˆ* s zFirewallD.getHelperSettings)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)r)N)N)N)N)r)N)N)N)N)r)N)N)N)r)N)N)N)N)r)N)N)N)N)r)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)éÚ__name__Ú __module__Ú__qualname__Ú__doc__Z persistentrr'ZPK_ACTION_CONFIGZdefault_polkit_auth_requiredrr"r0r&r/r r;r?rArCrZrZPROPERTIES_IFACErerhÚslipZpolkitZrequire_authrirrÚsignalrjZPK_ACTION_INFOZINTROSPECTABLE_IFACErkr(rnrprorqr“ZPK_ACTION_POLICIESrar•r—ZPK_ACTION_POLICIES_INFOr™r”r–r›rržr ršrœr¤r¦r§r¨r£r¥rªr¬rr®r©r«r°r²r³r´r¯r±r¶r¸r¹rµr·ZPK_ACTION_CONFIG_INFOrºr_r€r¾r½ZDBUS_INTERFACE_POLICYr…rÀr¿rÁrtrÌrÍrZDBUS_SIGNATUREr{rÎrÑrÏrÓrÔrÕrÖrØr×rÙrÚrÛrárârärårèrêrér‚rírrærîrërìrðròrôrõrörïrñrórûrrrrrþrùrrvr r rrrrrrrrrr rrrrrrrr!r#r$r%r&r"r r*r,r-r.r+r)r3r5r6r7r8r4r0r<r>r?r@rAr=r:rCrErFrBrDZPK_ACTION_DIRECTr`rKrMZPK_ACTION_DIRECT_INFOrNrOrPrGrLrVrXrZr[r\r]rTrWr^rcrerfrgrirjrbrdZ PK_ACTION_ALLrkrbrlrmrr~rprrrsrurxrnrqryrrˆÚ __classcell__r-r-)r,r.rAsì 0" K )9Ú__all__Z gi.repositoryrrÚsysÚmodulesrÇr'Zdbus.serviceZ slip.dbusr~Zslip.dbus.serviceZfirewallrZfirewall.core.fwrZfirewall.core.richrZfirewall.core.loggerrZfirewall.clientr Zfirewall.server.decoratorsr rrr Zfirewall.server.configrZfirewall.dbus_utilsrrrrrrrZfirewall.core.io.functionsrZfirewall.core.io.ipsetrZfirewall.core.io.icmptyperZfirewall.core.io.helperrZfirewall.core.fw_nmrrrZfirewall.core.fw_ifcfgrrZfirewall.errorsrrrZObjectrr-r-r-r.Ús2 $