shell bypass 403
a
���gI � @ s� d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl
m Z m Z m
Z
mZ d dlmZ d dlmZ d dlmZmZmZmZ d d lmZ d d
lmZ G d d � d e�ZdS )
� N)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�IPSet)� IPSET_TYPES�normalize_ipset_entry� check_entry_overlaps_existing� check_for_overlapping_entries)�log)�DbusServiceObject)�handle_exceptions�dbus_handle_exceptions�dbus_service_method�dbus_polkit_require_auth)�errors)�
FirewallErrorc s e Zd ZdZdZejjZe � fdd��Z
e dd� �Z e dd� �Z
e d d
� �Zeejd d d
�e dWdd���Zeejddd
�e dXdd���Zeejj�eejdd�e dYdd����Zejjejdd�dd � �Zeejj�eejdd �e dZ� fd d � ���Zeejje j d �e d[d d!���Z eejje j d�e d\d"d#���Z eejj�e d]d$d%���Z ejjejjdd�e d&d'� ��Z!eejj�e d^d(d)���Z"ejjejjdd�e d*d+� ��Z#eejjdd�e d_d,d-���Z$ejjejjdd�e d.d/� ��Z%eejjdd �e d`d0d1���Z&eejjdd�e dad2d3���Z'eejjdd �e dbd4d5���Z(eejjdd�e dcd6d7���Z)eejjdd �e ddd8d9���Z*eejjdd�e ded:d;���Z+eejjdd �e dfd<d=���Z,eejjdd�e dgd>d?���Z-eejjd@d �e dhdAdB���Z.eejjd@d�e didCdD���Z/eejjd d�e djdEdF���Z0eejjdd�e dkdGdH���Z1eejjd dId
�e dldJdK���Z2eejjdLd �e dmdMdN���Z3eejjdLd�e dndOdP���Z4eejjdd�e dodQdR���Z5eejjdd�e dpdSdT���Z6eejjddId
�e dqdUdV���Z7� Z8S )r�FirewallDConfigIPSetzFirewallD main classTc s` t t| �j|i |�� || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j � d S )Nr � zconfig.ipset.%d)
�superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_IPSET)�selfr ZconfZipsetr �args�kwargs�� __class__� �@/usr/lib/python3.9/site-packages/firewall/server/config_ipset.pyr 6 s
�z FirewallDConfigIPSet.__init__c C s d S �Nr$ �r r$ r$ r% �__del__C s z FirewallDConfigIPSet.__del__c C s | � � d S r& )Zremove_from_connectionr' r$ r$ r% �
unregisterG s z FirewallDConfigIPSet.unregisterc C s� |dkrt �| jj�S |dkr,t �| jj�S |dkrBt �| jj�S |dkrXt �| jj�S |dkrnt �| jj�S t j �
d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r* r+ r ZBooleanr, r- �
exceptions�
DBusException)r �
property_namer$ r$ r% �
_get_propertyO s ��z"FirewallDConfigIPSet._get_property�ss�v)� in_signature�
out_signatureNc C sL t |t�}t |t�}t�d| j||� |tjjkrBtj� d| ��| �
|�S )Nz%s.Get('%s', '%s')�Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr �debug1r r r r r/ r0 r2 )r �interface_namer1 �senderr$ r$ r% �Get` s
� ��zFirewallDConfigIPSet.Get�sza{sv}c C s` t |t�}t�d| j|� |tjjkr6tj� d| ��i }dD ]}| �
|�||< q>tj |dd�S )Nz%s.GetAll('%s')r7 )r* r+ r r, r- �sv�Z signature) r r8 r r9 r r r r r/ r0 r2 Z
Dictionary)r r: r; �ret�xr$ r$ r% �GetAllq s
��zFirewallDConfigIPSet.GetAllZssv)r5 c C sl t |t�}t |t�}t |�}t�d| j|||� | j�|� |tjj krXtj
� d| ��tj
� d| ��d S )Nz%s.Set('%s', '%s', '%s')r7 zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r8 r r9 r r � accessCheckr r r r/ r0 )r r: r1 Z new_valuer; r$ r$ r% �Set� s$
� ����zFirewallDConfigIPSet.Setzsa{sv}asr? c C s2 t |t�}t |�}t |�}t�d| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r8 r r9 r )r r: Zchanged_propertiesZinvalidated_propertiesr$ r$ r% �PropertiesChanged� s
�z&FirewallDConfigIPSet.PropertiesChanged)r6 c s8 t �d| j� tt| ��| j| j�� �}t | |t
j j �S )Nz%s.Introspect())
r Zdebug2r r r �
Introspectr r Zget_busr r r r )r r; �datar" r$ r% rF � s
�
�z FirewallDConfigIPSet.Introspectc C s t �d| j� | j�| j�S )z get settings for ipset
z%s.getSettings())r r9 r r Zget_ipset_configr �r r; r$ r$ r% � getSettings� s z FirewallDConfigIPSet.getSettingsc C sF t |�}t�d| j� | j�|� | j�| j|�| _| � | jj
� dS )z"update settings for ipset
z%s.update('...')N) r r r9 r r rC r Zset_ipset_configr �Updatedr* )r �settingsr; r$ r$ r% �update� s
zFirewallDConfigIPSet.updatec C s< t �d| j� | j�|� | j�| j�| _| �| jj � dS )z0load default settings for builtin ipset
z%s.loadDefaults()N)
r r9 r r rC r Zload_ipset_defaultsr rJ r* rH r$ r$ r% � loadDefaults� s z!FirewallDConfigIPSet.loadDefaultsc C s t �d| j|f � d S )Nz%s.Updated('%s')�r r9 r �r r* r$ r$ r% rJ � s z FirewallDConfigIPSet.Updatedc C s: t �d| j� | j�|� | j�| j� | j�| j� dS )zremove ipset
z %s.remove()N) r r9 r r rC r Z remove_ipsetr Z removeIPSetrH r$ r$ r% �remove� s zFirewallDConfigIPSet.removec C s t �d| j|f � d S )Nz%s.Removed('%s')rN rO r$ r$ r% �Removed� s z FirewallDConfigIPSet.Removedc C sF t |t�}t�d| j|� | j�|� | j�| j |�| _ | �
|� dS )zrename ipset
z%s.rename('%s')N) r r8 r r9 r r rC r Z rename_ipsetr �Renamed)r r* r; r$ r$ r% �rename� s
zFirewallDConfigIPSet.renamec C s t �d| j|f � d S )Nz%s.Renamed('%s')rN rO r$ r$ r% rR � s z FirewallDConfigIPSet.Renamedc C s t �d| j� | �� d S )Nz%s.getVersion()r �r r9 r rI rH r$ r$ r% �
getVersion� s z FirewallDConfigIPSet.getVersionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setVersion('%s')r �
r r8 r r9 r r rC �listrI rL )r �versionr; rK r$ r$ r% �
setVersion s
z FirewallDConfigIPSet.setVersionc C s t �d| j� | �� d S )Nz
%s.getShort()r rT rH r$ r$ r% �getShort s z FirewallDConfigIPSet.getShortc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setShort('%s')r rV )r Zshortr; rK r$ r$ r% �setShort s
z FirewallDConfigIPSet.setShortc C s t �d| j� | �� d S )Nz%s.getDescription()� rT rH r$ r$ r% �getDescription# s z#FirewallDConfigIPSet.getDescriptionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setDescription('%s')r\ rV )r � descriptionr; rK r$ r$ r% �setDescription* s
� z#FirewallDConfigIPSet.setDescriptionc C s t �d| j� | �� d S )Nz %s.getType()� rT rH r$ r$ r% �getType8 s z FirewallDConfigIPSet.getTypec C s\ t |t�}t�d| j|� | j�|� |tvr:tt j
|��t | � � �}||d< | �
|� d S )Nz%s.setType('%s')r` )r r8 r r9 r r rC r r r Z INVALID_TYPErW rI rL )r Z
ipset_typer; rK r$ r$ r% �setType? s
z FirewallDConfigIPSet.setTypeza{ss}c C s t �d| j� | �� d S )Nz%s.getOptions()� rT rH r$ r$ r% �
getOptionsN s z FirewallDConfigIPSet.getOptionsc C sL t |t�}t�d| jt|�� | j�|� t| � � �}||d< | �
|� d S )Nz%s.setOptions('[%s]')rc ) r �dictr r9 r �reprr rC rW rI rL )r �optionsr; rK r$ r$ r% �
setOptionsU s
� z FirewallDConfigIPSet.setOptionsc C s� t |t�}t |t�}t�d| j||� | j�|� t| �� �}||d v rn|d | |krnt t
j d||f ��||d |< | � |� d S )Nz%s.addOption('%s', '%s')rc z
'%s': '%s')
r r8 r r9 r r rC rW rI r r �ALREADY_ENABLEDrL �r �key�valuer; rK r$ r$ r% � addOptiona s
� z FirewallDConfigIPSet.addOptionc C sb t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t
j |��|d |= | � |� d S )Nz%s.removeOption('%s')rc )
r r8 r r9 r r rC rW rI r r � NOT_ENABLEDrL )r rk r; rK r$ r$ r% � removeOptionp s
z!FirewallDConfigIPSet.removeOption�bc C sN t |t�}t |t�}t�d| j||� t| �� �}||d v oL|d | |kS )Nz%s.queryOption('%s', '%s')rc )r r8 r r9 r rW rI rj r$ r$ r% � queryOption} s
� z FirewallDConfigIPSet.queryOption�asc C s t �d| j� | �� d S )Nz%s.getEntries()� rT rH r$ r$ r% �
getEntries� s z FirewallDConfigIPSet.getEntriesc C s| t |t�}t|� t�d| jd�|�� | j�|� t| � � �}d|d v rf|d d dkrft
t j ��||d< | �
|� d S )Nz%s.setEntries('[%s]')�,�timeoutrc �0rs )r rW r
r r9 r �joinr rC rI r r �IPSET_WITH_TIMEOUTrL )r �entriesr; rK r$ r$ r% �
setEntries� s
�
z FirewallDConfigIPSet.setEntriesc C s� t |t�}t|�}t�d| j|� | j�|� t| � � �}d|d v r`|d d dkr`t
t j ��||d v rxt
t j
|��t||d � |d �|� | �|� d S )Nz%s.addEntry('%s')rv rc rw rs )r r8 r r r9 r r rC rW rI r r ry ri r �appendrL �r �entryr; rK r$ r$ r% �addEntry� s
z FirewallDConfigIPSet.addEntryc C s� t |t�}t|�}t�d| j|� | j�|� t| � � �}d|d v r`|d d dkr`t
t j ��||d vrxt
t j
|��|d �|� | �|� d S )Nz%s.removeEntry('%s')rv rc rw rs )r r8 r r r9 r r rC rW rI r r ry rn rP rL r} r$ r$ r% � removeEntry� s
z FirewallDConfigIPSet.removeEntryc C s` t |t�}t|�}t�d| j|� t| �� �}d|d v rT|d d dkrTtt j
��||d v S )Nz%s.queryEntry('%s')rv rc rw rs ) r r8 r r r9 r rW rI r r ry r} r$ r$ r% �
queryEntry� s
z FirewallDConfigIPSet.queryEntry)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)9�__name__�
__module__� __qualname__�__doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr
r r r( r) r2 r ZPROPERTIES_IFACEr< rB r rD Zservice�signalrE ZPK_ACTION_INFOZINTROSPECTABLE_IFACErF r r ZDBUS_SIGNATURErI rL rM rJ rP rQ rS rR rU rY rZ r[ r] r_ ra rb rd rh rm ro rq rt r{ r r� r� �
__classcell__r$ r$ r" r% r . s0
��
��
� ��
��
�� �� �� � �
�
�� ��
�r ) r Z dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.ipsetr Zfirewall.core.ipsetr r r r
Zfirewall.core.loggerr Zfirewall.server.dbusr Zfirewall.server.decoratorsr
r r r r Zfirewall.errorsr r r$ r$ r$ r% �<module> s