�
�c�`c @ s� d d l j Z d d l Z d d l Z d d l Z d d l m Z d d l m Z m Z m
Z
m Z d d l m
Z
d d l m Z m Z m Z m Z m Z m Z d d l m Z d d l m Z d e
f d � � YZ d
e f d � � YZ d S( i����N( t config( t PY2t IO_Objectt IO_Object_ContentHandlert IO_Object_XMLGenerator( t log( t uniqifyt checkUsert checkUidt checkCommandt checkContextt
u2b_if_py2( t errors( t
FirewallErrort! lockdown_whitelist_ContentHandlerc B s e Z d � Z d � Z RS( c C s t j | | � t | _ d S( N( R t __init__t Falset whitelist( t selft item( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR % s c C s� t j | | | � | j j | | � | d k r\ | j rP t t j d � � n t | _ n[| d k r� | j s� t j
d � d S| d } | j j | � n| d k rH| j s� t j
d � d Sd | k r"y t | d � } Wn' t
k
rt j
d | d � d SX| j j | � q�d | k r�| j j | d � q�no | d
k r�| j snt j
d � d Sd | k r�t j
d
� d S| j j | d � n t j
d | � d Sd S( NR s More than one whitelist.t commands) Parse Error: command outside of whitelistt namet users& Parse Error: user outside of whitelistt ids" Parse Error: %s is not a valid uidt selinuxs) Parse Error: selinux outside of whitelistt contexts Parse Error: no contexts Unknown XML element %s( R t startElementR t parser_check_element_attrsR R
R t PARSE_ERRORt TrueR t errort add_commandt intt
ValueErrort add_uidt add_usert add_context( R R t attrsR t uid( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR ) sJ
( t __name__t
__module__R R ( ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR $ s t LockdownWhitelistc B sx e Z d Z d d g f d d g f d d g f d d g f f Z d Z d g Z i d* d 6d
g d 6d* d 6d
g d 6Z i d d
g d 6Z d � Z d � Z
d � Z d � Z d � Z
d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d! � Z d" � Z d# � Z d$ � Z d% � Z d& � Z d' � Z d( � Z! d) � Z" RS(+ s LockdownWhitelist class t commandst t contextst userst uidsi s
(asasasai)t _R R R R R R R c C sM t t | � j � | | _ d | _ g | _ g | _ g | _ g | _ d S( N(
t superR) R t filenamet Nonet parserR* R, R- R. ( R R1 ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR n s c C s� | d
k r4 x� | D] } | j | | d � q Wn� | d k rd t | � s� t t j | � � q� n� | d k r� t | � s� t t j | � � q� n` | d k r� t | � s� t t j | � � q� n0 | d k r� t | � s� t t j
| � � q� n d S( NR* R, R- R. i����R R R R& ( s commandss contextss userss uids( t
_check_configR R
R t INVALID_COMMANDR
t INVALID_CONTEXTR t INVALID_USERR t INVALID_UID( R R R t x( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR4 y s
c C s | j 2| j 2| j 2| j 2d S( N( R* R, R- R. ( R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt cleanup� s c C ss g | j D] } t | � ^ q
| _ g | j D] } t | � ^ q/ | _ g | j D] } t | � ^ qT | _ d S( s� HACK. I haven't been able to make sax parser return
strings encoded (because of python 2) instead of in unicode.
Get rid of it once we throw out python 2 support.N( R* R R, R- ( R R9 ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt encode_strings� s %%c C s] t | � s! t t j | � � n | | j k rC | j j | � n t t j d | � � d S( Ns! Command "%s" already in whitelist( R R
R R5 R* t appendt ALREADY_ENABLED( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR � s c C s< | | j k r" | j j | � n t t j d | � � d S( Ns Command "%s" not in whitelist.( R* t removeR
R t NOT_ENABLED( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt remove_command� s c C s
| | j k S( N( R* ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt has_command� s c C sQ xJ | j D]? } | j d � r9 | j | d � rI t Sq
| | k r
t Sq
Wt S( Nt *i����( R* t endswitht
startswithR R ( R R t _command( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt
match_command� s c C s | j S( N( R* ( R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt get_commands� s c C sc t | � s' t t j t | � � � n | | j k rI | j j | � n t t j d | � � d S( Ns Uid "%s" already in whitelist( R R
R R8 t strR. R< R= ( R R& ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR" � s c C s< | | j k r" | j j | � n t t j d | � � d S( Ns Uid "%s" not in whitelist.( R. R> R
R R? ( R R& ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt
remove_uid� s c C s
| | j k S( N( R. ( R R& ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt has_uid� s c C s
| | j k S( N( R. ( R R& ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt match_uid� s c C s | j S( N( R. ( R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt get_uids� s c C s] t | � s! t t j | � � n | | j k rC | j j | � n t t j d | � � d S( Ns User "%s" already in whitelist( R R
R R7 R- R< R= ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR# � s c C s< | | j k r" | j j | � n t t j d | � � d S( Ns User "%s" not in whitelist.( R- R> R
R R? ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt remove_user� s c C s
| | j k S( N( R- ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt has_user� s c C s
| | j k S( N( R- ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt
match_user� s c C s | j S( N( R- ( R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt get_users� s c C s] t | � s! t t j | � � n | | j k rC | j j | � n t t j d | � � d S( Ns! Context "%s" already in whitelist( R
R
R R6 R, R< R= ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR$ " s c C s< | | j k r" | j j | � n t t j d | � � d S( Ns Context "%s" not in whitelist.( R, R> R
R R? ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt remove_context, s c C s
| | j k S( N( R, ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt has_context3 s c C s
| | j k S( N( R, ( R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt
match_context6 s c C s | j S( N( R, ( R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt get_contexts9 s c C s� | j � | j j d � s8 t t j d | j � � n t | � } t j � } | j | � y | j
| j � Wn2 t j k
r� } t t j d | j
� � � n X~ ~ t r� | j � n d S( Ns .xmls '%s' is missing .xml suffixs Not a valid file: %s( R: R1 RC R
R t INVALID_NAMER t saxt make_parsert setContentHandlert parset SAXParseExceptiont INVALID_TYPEt getExceptionR R; ( R t handlerR3 t msg( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt read> s"
c C sH t j j | j � re y t j | j d | j � Wqe t k
ra } t d | j | f � � qe Xn t j j t j � s� t j
t j d � n t j | j d d d d �} t
| � } | j � | j d i � | j d � xH t | j � D]7 } | j d
� | j d i | d 6� | j d � q� WxN t | j � D]= } | j d
� | j d
i t | � d 6� | j d � q<WxH t | j � D]7 } | j d
� | j d
i | d 6� | j d � q�WxH t | j � D]7 } | j d
� | j d i | d 6� | j d � q�W| j d � | j d � | j � | j � ~ d S( Ns %s.olds Backup of '%s' failed: %si� t modet wtt encodings UTF-8R s
s R R R R R R ( t ost patht existsR1 t shutilt copy2t Exceptiont IOErrorR t
ETC_FIREWALLDt mkdirt iot openR t
startDocumentR t ignorableWhitespaceR R* t
simpleElementR. RH R- R, t
endElementt endDocumentt close( R R^ t fR] R R& R R ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt writeQ sB
N(# R' R( t __doc__t IMPORT_EXPORT_STRUCTUREt DBUS_SIGNATUREt ADDITIONAL_ALNUM_CHARSR2 t PARSER_REQUIRED_ELEMENT_ATTRSt PARSER_OPTIONAL_ELEMENT_ATTRSR R4 R: R; R R@ RA RF RG R" RI RJ RK RL R# RM RN RO RP R$ RQ RR RS RT R_ Ru ( ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyR) W sP
1
( t xml.saxRV Rc Rl Rf t firewallR t firewall.core.io.io_objectR R R R t firewall.core.loggerR t firewall.functionsR R R R R
R R t firewall.errorsR
R R) ( ( ( sG /usr/lib/python2.7/site-packages/firewall/core/io/lockdown_whitelist.pyt <module> s ".3| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| .__init__.pyo.40009 | File | 946 B | 0644 |
|
| .direct.pyo.40009 | File | 14.45 KB | 0644 |
|
| .firewalld_conf.pyo.40009 | File | 7.81 KB | 0644 |
|
| .functions.pyo.40009 | File | 2.69 KB | 0644 |
|
| .helper.pyo.40009 | File | 7.2 KB | 0644 |
|
| .icmptype.pyo.40009 | File | 6.08 KB | 0644 |
|
| .ifcfg.pyo.40009 | File | 5.02 KB | 0644 |
|
| .io_object.pyo.40009 | File | 13.13 KB | 0644 |
|
| .ipset.pyo.40009 | File | 13.51 KB | 0644 |
|
| .lockdown_whitelist.pyo.40009 | File | 11.62 KB | 0644 |
|
| .service.pyo.40009 | File | 8.9 KB | 0644 |
|
| .zone.pyo.40009 | File | 23.71 KB | 0644 |
|
| __init__.py | File | 1.56 KB | 0644 |
|
| __init__.pyc | File | 946 B | 0644 |
|
| __init__.pyo | File | 946 B | 0644 |
|
| direct.py | File | 15.46 KB | 0644 |
|
| direct.pyc | File | 14.45 KB | 0644 |
|
| direct.pyo | File | 14.45 KB | 0644 |
|
| firewalld_conf.py | File | 11.1 KB | 0644 |
|
| firewalld_conf.pyc | File | 7.81 KB | 0644 |
|
| firewalld_conf.pyo | File | 7.81 KB | 0644 |
|
| functions.py | File | 3.65 KB | 0644 |
|
| functions.pyc | File | 2.69 KB | 0644 |
|
| functions.pyo | File | 2.69 KB | 0644 |
|
| helper.py | File | 8.16 KB | 0644 |
|
| helper.pyc | File | 7.2 KB | 0644 |
|
| helper.pyo | File | 7.2 KB | 0644 |
|
| icmptype.py | File | 6.65 KB | 0644 |
|
| icmptype.pyc | File | 6.08 KB | 0644 |
|
| icmptype.pyo | File | 6.08 KB | 0644 |
|
| ifcfg.py | File | 6.22 KB | 0644 |
|
| ifcfg.pyc | File | 5.02 KB | 0644 |
|
| ifcfg.pyo | File | 5.02 KB | 0644 |
|
| io_object.py | File | 11.95 KB | 0644 |
|
| io_object.pyc | File | 13.13 KB | 0644 |
|
| io_object.pyo | File | 13.13 KB | 0644 |
|
| ipset.py | File | 20.62 KB | 0644 |
|
| ipset.pyc | File | 13.51 KB | 0644 |
|
| ipset.pyo | File | 13.51 KB | 0644 |
|
| lockdown_whitelist.py | File | 12.39 KB | 0644 |
|
| lockdown_whitelist.pyc | File | 11.62 KB | 0644 |
|
| lockdown_whitelist.pyo | File | 11.62 KB | 0644 |
|
| service.py | File | 11.59 KB | 0644 |
|
| service.pyc | File | 8.9 KB | 0644 |
|
| service.pyo | File | 8.9 KB | 0644 |
|
| zone.py | File | 38.78 KB | 0644 |
|
| zone.pyc | File | 23.71 KB | 0644 |
|
| zone.pyo | File | 23.71 KB | 0644 |
|