shell bypass 403
a
���g�� � @ s� d dl Z d dlZ d dlmZ d dlmZmZmZ d dlm Z d dl
m Z d dl m
Z
d dlmZ d dlmZ d d lmZ d d
lmZmZmZmZ d d lmZ d d lmZ d d
l m Z m Z m Z m Z G dd� de�Z!dS )� N)�config)�dbus_to_python�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties)�Zone)�ifcfg_set_zone_of_interface)�DEFAULT_ZONE_TARGET)� Rich_Rule)�log)�DbusServiceObject)�handle_exceptions�dbus_handle_exceptions�dbus_service_method�dbus_polkit_require_auth)�errors)�
FirewallError)�portStr�portInPortRange�coalescePortRange�breakPortRangec s� e Zd ZdZdZejjZe � fdd��Z
e dd� �Z e dd� �Z
e d d
� �Zeejd d d
�e d�dd���Zeejddd
�e d�dd���Zeejj�eejdd�e d�dd����Zejjejdd�dd � �Zeejj�eejdd �e d�� fd d � ���Zeejjd d �e d�d!d"���Z eejjdd �e d�d#d$���Z d%d&� Z eejjd d�e d�d'd(���Z eejjdd�e d�d)d*���Z eejj�e d�d+d,���Z!ejjejjdd�e d-d.� ��Z"eejj�e d�d/d0���Z#ejjejjdd�e d1d2� ��Z$eejjdd�e d�d3d4���Z%ejjejjdd�e d5d6� ��Z&eejjdd �e d�d7d8���Z'eejjdd�e d�d9d:���Z(eejjdd �e d�d;d<���Z)eejjdd�e d�d=d>���Z*eejjdd �e d�d?d@���Z+eejjdd�e d�dAdB���Z,eejjdd �e d�dCdD���Z-eejjdd�e d�dEdF���Z.eejjdGd �e d�dHdI���Z/eejjdGd�e d�dJdK���Z0eejjdd�e d�dLdM���Z1eejjdd�e d�dNdO���Z2eejjddPd
�e d�dQdR���Z3eejjdSd �e d�dTdU���Z4eejjdSd�e d�dVdW���Z5eejjd d�e d�dXdY���Z6eejjd d�e d�dZd[���Z7eejjd dPd
�e d�d\d]���Z8eejjdGd �e d�d^d_���Z9eejjdGd�e d�d`da���Z:eejjdd�e d�dbdc���Z;eejjdd�e d�ddde���Z<eejjddPd
�e d�dfdg���Z=eejjdSd �e d�dhdi���Z>eejjdSd�e d�djdk���Z?eejjd d�e d�dldm���Z@eejjd d�e d�dndo���ZAeejjd dPd
�e d�dpdq���ZBeejjdGd �e d�drds���ZCeejjdGd�e d�dtdu���ZDeejjdd�e d�dvdw���ZEeejjdd�e d�dxdy���ZFeejjddPd
�e d�dzd{���ZGeejjdPd �e d�d|d}���ZHeejjdPd�e d�d~d���ZIeejj�e d�d�d����ZJeejj�e d�d�d����ZKeejjdPd �e d�d�d����ZLeejjdPd �e d�d�d����ZMeejjdPd�e d�d�d����ZNeejj�e d�d�d����ZOeejj�e d�d�d����ZPeejjdPd �e d�d�d����ZQeejjd�d �e d�d�d����ZReejjd�d�e d�d�d����ZSeejjd�d�e d�d�d����ZTeejjd�d�e d�d�d����ZUeejjd�dPd
�e d�d�d����ZVeejjdGd �e d�d�d����ZWeejjdGd�e d�d�d����ZXeejjdd�e d�d�d����ZYeejjdd�e d�d�d����ZZeejjddPd
�e d�d�d����Z[eejjdGd �e d�d�d����Z\eejjdGd�e d�d�d����Z]eejjdd�e d�d�d����Z^eejjdd�e d�d�d����Z_eejjddPd
�e d�d�d����Z`eejjdGd �e d�d�d����ZaeejjdGd�e �d d�d����Zbeejjdd�e �dd�d����Zceejjdd�e �dd�d����ZdeejjddPd
�e �dd�d����Ze� ZfS ( �FirewallDConfigZonezFirewallD main classTc s` t t| �j|i |�� || _|| _|| _|| _|d | _|d | _d| j | _ t
| tj j � d S )Nr � zconfig.zone.%d)
�superr �__init__�parentr �obj�item_id�busname�path� _log_prefixr �dbus�DBUS_INTERFACE_CONFIG_ZONE)�selfr Zconf�zoner �args�kwargs�� __class__� �?/usr/lib/python3.9/site-packages/firewall/server/config_zone.pyr 8 s
�z FirewallDConfigZone.__init__c C s d S �Nr( �r" r( r( r) �__del__E s zFirewallDConfigZone.__del__c C s | � � d S r* )Zremove_from_connectionr+ r( r( r) �
unregisterI s z FirewallDConfigZone.unregisterc C s� |dkrt �| jj�S |dkr,t �| jj�S |dkrBt �| jj�S |dkrXt �| jj�S |dkrnt �| jj�S t j �
d| ��d S )N�name�filenamer �default�builtinzDorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist) r �Stringr r. r/ r ZBooleanr0 r1 �
exceptions�
DBusException)r" �
property_namer( r( r) �
_get_propertyQ s ��z!FirewallDConfigZone._get_property�ss�v)� in_signature�
out_signatureNc C sL t |t�}t |t�}t�d| j||� |tjjkrBtj� d| ��| �
|�S )Nz%s.Get('%s', '%s')�Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist) r �strr
�debug1r r r r! r3 r4 r6 )r" �interface_namer5 �senderr( r( r) �Getb s
� ��zFirewallDConfigZone.Get�sza{sv}c C s` t |t�}t�d| j|� |tjjkr6tj� d| ��i }dD ]}| �
|�||< q>tj |dd�S )Nz%s.GetAll('%s')r; )r. r/ r r0 r1 �sv�Z signature) r r< r
r= r r r r! r3 r4 r6 Z
Dictionary)r" r> r? �ret�xr( r( r) �GetAlls s
��zFirewallDConfigZone.GetAllZssv)r9 c C sl t |t�}t |t�}t |�}t�d| j|||� | j�|� |tjj krXtj
� d| ��tj
� d| ��d S )Nz%s.Set('%s', '%s', '%s')r; zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-only) r r< r
r= r r � accessCheckr r r! r3 r4 )r" r> r5 Z new_valuer? r( r( r) �Set� s$
� ����zFirewallDConfigZone.Setzsa{sv}asrC c C s2 t |t�}t |�}t |�}t�d| j|||� d S )Nz&%s.PropertiesChanged('%s', '%s', '%s'))r r< r
r= r )r" r> Zchanged_propertiesZinvalidated_propertiesr( r( r) �PropertiesChanged� s
�z%FirewallDConfigZone.PropertiesChanged)r: c s8 t �d| j� tt| ��| j| j�� �}t | |t
j j �S )Nz%s.Introspect())
r
Zdebug2r r r �
Introspectr r Zget_busr r r r! )r" r? �datar& r( r) rJ � s
�
�z FirewallDConfigZone.Introspectz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)c C sD t �d| j� | j�| j�}|d tkr@t|�}d|d< t|�}|S )� get settings for zone
z%s.getSettings()� r0 ) r
r= r r Zget_zone_configr r �list�tuple)r" r? �settings� _settingsr( r( r) � getSettings� s z FirewallDConfigZone.getSettingsc C s4 t �d| j� | j�| j�}|d tkr0d|d< |S )rL z%s.getSettings2()�targetr0 )r
r= r r �get_zone_config_dictr r �r" r? rP r( r( r) � getSettings2� s
z FirewallDConfigZone.getSettings2c C s | j �| j�}d|v r"t|d �nt� }d|v r<t|d �nt� }t|t�rzt|t�d� �| }t|t�d� �| }nDd|v r�t|d �nt� }d|v r�t|d �nt� }|| }|| }|D ] } | j� | �r�t
t j | ��q�|D ] }
| j�
|
�r�t
t j |
��q�dS )a
Assignment of interfaces/sources to zones is different from other
zone settings in the sense that particular interface/zone can be
part of only one zone. So make sure added interfaces/sources have
not already been bound to another zone.�
interfaces�sourcesN)r rT r �set�
isinstancerO r Zindex_ofr ZgetZoneOfInterfacer r Z
ZONE_CONFLICTZgetZoneOfSource) r" rP Z old_settingsZ
old_ifacesZ old_sourcesZ added_ifacesZ
added_sourcesZ
new_ifacesZ new_sourcesZiface�sourcer( r( r) � _checkDuplicateInterfacesSources� s
z4FirewallDConfigZone._checkDuplicateInterfacesSourcesc C st t |�}t�d| j� | j�|� |d dkrFt|�}t|d< t|�}| � |� | j
� | j |�| _ | �
| j j� dS )�!update settings for zone
z%s.update('...')rM r0 N)r r
r= r r rG rN r rO r\ r Zset_zone_configr �Updatedr. )r" rP r? rQ r( r( r) �update� s
zFirewallDConfigZone.updatec C sl t |�}t�d| j� | j�|� d|v r>|d dkr>t|d< | �|� | j� | j
|�| _
| � | j
j � dS )r] z%s.update2('...')rS r0 N)
r r
r= r r rG r r\ r Zset_zone_config_dictr r^ r. )r" rP r? r( r( r) �update2� s
zFirewallDConfigZone.update2c C s< t �d| j� | j�|� | j�| j�| _| �| jj � dS )z/load default settings for builtin zone
z%s.loadDefaults()N)
r
r= r r rG r Zload_zone_defaultsr r^ r. �r" r? r( r( r) � loadDefaults s z FirewallDConfigZone.loadDefaultsc C s t �d| j|f � d S )Nz%s.Updated('%s')�r
r= r �r" r. r( r( r) r^
s zFirewallDConfigZone.Updatedc C s: t �d| j� | j�|� | j�| j� | j�| j� dS )zremove zone
z%s.removeZone()N) r
r= r r rG r Z remove_zoner Z
removeZonera r( r( r) �remove s zFirewallDConfigZone.removec C s t �d| j|f � d S )Nz%s.Removed('%s')rc rd r( r( r) �Removed s zFirewallDConfigZone.Removedc C sF t |t�}t�d| j|� | j�|� | j�| j |�| _ | �
|� dS )zrename zone
z%s.rename('%s')N) r r< r
r= r r rG r Z rename_zoner �Renamed)r" r. r? r( r( r) �rename% s
zFirewallDConfigZone.renamec C s t �d| j|f � d S )Nz%s.Renamed('%s')rc rd r( r( r) rg 1 s zFirewallDConfigZone.Renamedc C s t �d| j� | �� d S )Nz%s.getVersion()r �r
r= r rR ra r( r( r) �
getVersion8 s z FirewallDConfigZone.getVersionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setVersion('%s')r �
r r< r
r= r r rG rN rR r_ )r" �versionr? rP r( r( r) �
setVersion? s
z FirewallDConfigZone.setVersionc C s t �d| j� | �� d S )Nz
%s.getShort()r ri ra r( r( r) �getShortL s z FirewallDConfigZone.getShortc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setShort('%s')r rk )r" Zshortr? rP r( r( r) �setShortS s
z FirewallDConfigZone.setShortc C s t �d| j� | �� d S )Nz%s.getDescription()� ri ra r( r( r) �getDescription` s z"FirewallDConfigZone.getDescriptionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setDescription('%s')rp rk )r" � descriptionr? rP r( r( r) �setDescriptiong s
z"FirewallDConfigZone.setDescriptionc C s. t �d| j� | �� }|d tkr*|d S dS )Nz%s.getTarget()rM r0 )r
r= r rR r rU r( r( r) � getTargetw s z FirewallDConfigZone.getTargetc C sT t |t�}t�d| j|� | j�|� t| �� �}|dkr>|nt |d< | �
|� d S )Nz%s.setTarget('%s')r0 rM ) r r< r
r= r r rG rN rR r r_ )r" rS r? rP r( r( r) � setTarget s
z FirewallDConfigZone.setTarget�asc C s t �d| j� | �� d S )Nz%s.getServices()� ri ra r( r( r) � getServices� s z FirewallDConfigZone.getServicesc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setServices('[%s]')�,rw �
r rN r
r= r �joinr rG rR r_ )r" Zservicesr? rP r( r( r) � setServices� s
� z FirewallDConfigZone.setServicesc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t
j |��|d � |� | �
|� d S )Nz%s.addService('%s')rw �r r< r
r= r r rG rN rR r r �ALREADY_ENABLED�appendr_ �r" �servicer? rP r( r( r) �
addService� s
z FirewallDConfigZone.addServicec C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t
j |��|d � |� | �
|� d S )Nz%s.removeService('%s')rw �r r< r
r= r r rG rN rR r r � NOT_ENABLEDre r_ r� r( r( r) �
removeService� s
z!FirewallDConfigZone.removeService�bc C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryService('%s')rw �r r< r
r= r rR )r" r� r? r( r( r) � queryService� s
z FirewallDConfigZone.queryServiceza(ss)c C s t �d| j� | �� d S )Nz
%s.getPorts()� ri ra r( r( r) �getPorts� s z FirewallDConfigZone.getPortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j �
|� t| � � �}||d< | � |� d S )Nz%s.setPorts('[%s]')ry c s s" | ]}d |d |d f V qdS �z ('%s, '%s')r r Nr( ��.0�portr( r( r) � <genexpr>� � z/FirewallDConfigZone.setPorts.<locals>.<genexpr>r� �
r rN rZ r rO r
r= r r{ r rG rR r_ �r" Zportsr? Z_portsr� rP r( r( r) �setPorts� s
� z FirewallDConfigZone.setPortsc
s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]&}t
||d �r\t t j
d|� f ��q\t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S )
Nz%s.addPort('%s', '%s')c s | d � kS �Nr r( �rE ��protocolr( r) �<lambda>� r� z-FirewallDConfigZone.addPort.<locals>.<lambda>r� r �%s:%sc S s g | ] \}}|�qS r( r( �r� �_port� _protocolr( r( r) �
<listcomp>� r� z/FirewallDConfigZone.addPort.<locals>.<listcomp>�-�r r< r
r= r r rG rN rR �filterr r r r~ r re r r r_ �
r" r� r� r? rP Zexisting_port_idsZport_idZ added_rangesZremoved_ranges�ranger( r� r) �addPort� s&
�
�zFirewallDConfigZone.addPortc
s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]}t
||d �r\ q�q\t t j
d|� f ��t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S )
Nz%s.removePort('%s', '%s')c s | d � kS r� r( r� r� r( r) r� � r� z0FirewallDConfigZone.removePort.<locals>.<lambda>r� r r� c S s g | ] \}}|�qS r( r( r� r( r( r) r� r� z2FirewallDConfigZone.removePort.<locals>.<listcomp>r� �r r< r
r= r r rG rN rR r� r r r r� r re r r r_ r� r( r� r) �
removePort� s$
� z FirewallDConfigZone.removePortc C sX t |t�}t |t�}t�d| j||� | �� d D ] \}}t||�r2||kr2 dS q2dS )Nz%s.queryPort('%s', '%s')r� TF�r r< r
r= r rR r �r" r� r� r? r� r� r( r( r) � queryPort
s
�z FirewallDConfigZone.queryPortc C s t �d| j� | �� d S )Nz%s.getProtocols()�
ri ra r( r( r) � getProtocols s z FirewallDConfigZone.getProtocolsc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setProtocols('[%s]')ry r� rz )r" Z protocolsr? rP r( r( r) � setProtocols! s
� z FirewallDConfigZone.setProtocolsc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t
j |��|d � |� | �
|� d S )Nz%s.addProtocol('%s')r� r} �r" r� r? rP r( r( r) � addProtocol- s
z FirewallDConfigZone.addProtocolc C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t
j |��|d � |� | �
|� d S )Nz%s.removeProtocol('%s')r� r� r� r( r( r) �removeProtocol: s
z"FirewallDConfigZone.removeProtocolc C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryProtocol('%s')r� r� )r" r� r? r( r( r) �
queryProtocolG s
z!FirewallDConfigZone.queryProtocolc C s t �d| j� | �� d S )Nz%s.getSourcePorts()� ri ra r( r( r) �getSourcePortsQ s z"FirewallDConfigZone.getSourcePortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j �
|� t| � � �}||d< | � |� d S )Nz%s.setSourcePorts('[%s]')ry c s s" | ]}d |d |d f V qdS r� r( r� r( r( r) r� e r� z5FirewallDConfigZone.setSourcePorts.<locals>.<genexpr>r� r� r� r( r( r) �setSourcePortsX s
� z"FirewallDConfigZone.setSourcePortsc
s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]&}t
||d �r\t t j
d|� f ��q\t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S )
Nz %s.addSourcePort('%s', '%s')c s | d � kS r� r( r� r� r( r) r� u r� z3FirewallDConfigZone.addSourcePort.<locals>.<lambda>r� r r� c S s g | ] \}}|�qS r( r( r� r( r( r) r� z r� z5FirewallDConfigZone.addSourcePort.<locals>.<listcomp>r� r� r� r( r� r) �
addSourcePortk s&
�
�z!FirewallDConfigZone.addSourcePortc
s� t |t�}t � t�� t�d| j|� � | j�|� t| �� �}tt � fdd�|d ��}|D ]}t
||d �r\ q�q\t t j
d|� f ��t|dd� |D ��\}}|D ] } |d �t| d �� f� q�|D ] } |d �t| d �� f� q�| �|� d S )
Nz %s.removeSourcePort('%s', '%s')c s | d � kS r� r( r� r� r( r) r� � r� z6FirewallDConfigZone.removeSourcePort.<locals>.<lambda>r� r r� c S s g | ] \}}|�qS r( r( r� r( r( r) r� � r� z8FirewallDConfigZone.removeSourcePort.<locals>.<listcomp>r� r� r� r( r� r) �removeSourcePort� s$
� z$FirewallDConfigZone.removeSourcePortc C sX t |t�}t |t�}t�d| j||� | �� d D ] \}}t||�r2||kr2 dS q2dS )Nz %s.querySourcePort('%s', '%s')r� TFr� r� r( r( r) �querySourcePort� s
�z#FirewallDConfigZone.querySourcePortc C s t �d| j� | �� d S )Nz%s.getIcmpBlocks()� ri ra r( r( r) �
getIcmpBlocks� s z!FirewallDConfigZone.getIcmpBlocksc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setIcmpBlocks('[%s]')ry r� rz )r" Z icmptypesr? rP r( r( r) �
setIcmpBlocks� s
� z!FirewallDConfigZone.setIcmpBlocksc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t
j |��|d � |� | �
|� d S )Nz%s.addIcmpBlock('%s')r� r} �r" �icmptyper? rP r( r( r) � addIcmpBlock� s
z FirewallDConfigZone.addIcmpBlockc C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t
j |��|d � |� | �
|� d S )Nz%s.removeIcmpBlock('%s')r� r� r� r( r( r) �removeIcmpBlock� s
z#FirewallDConfigZone.removeIcmpBlockc C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryIcmpBlock('%s')r� r� )r" r� r? r( r( r) �queryIcmpBlock� s
z"FirewallDConfigZone.queryIcmpBlockc C s t �d| j� | �� d S )Nz%s.getIcmpBlockInversion()� ri ra r( r( r) �getIcmpBlockInversion� s z)FirewallDConfigZone.getIcmpBlockInversionc C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz %s.setIcmpBlockInversion('%s')r� �
r �boolr
r= r r rG rN rR r_ )r" �flagr? rP r( r( r) �setIcmpBlockInversion� s
z)FirewallDConfigZone.setIcmpBlockInversionc C sP t �d| j� | j�|� t| �� �}|d r:ttj d��d|d< | �
|� d S )Nz%s.addIcmpBlockInversion()r� �icmp-block-inversionT� r
r= r r rG rN rR r r r~ r_ rU r( r( r) �addIcmpBlockInversion� s z)FirewallDConfigZone.addIcmpBlockInversionc C sP t �d| j� | j�|� t| �� �}|d s:ttj d��d|d< | �
|� d S )Nz %s.removeIcmpBlockInversion()r� r� F� r
r= r r rG rN rR r r r� r_ rU r( r( r) �removeIcmpBlockInversion� s z,FirewallDConfigZone.removeIcmpBlockInversionc C s t �d| j� | �� d S )Nz %s.queryIcmpBlockInversion()r� ri ra r( r( r) �queryIcmpBlockInversion s z+FirewallDConfigZone.queryIcmpBlockInversionc C s t �d| j� | �� d S )Nz%s.getMasquerade()� ri ra r( r( r) �
getMasquerade s z!FirewallDConfigZone.getMasqueradec C sH t |t�}t�d| j|� | j�|� t| �� �}||d< | � |� d S )Nz%s.setMasquerade('%s')r� r� )r" �
masquerader? rP r( r( r) �
setMasquerade s
z!FirewallDConfigZone.setMasqueradec C sP t �d| j� | j�|� t| �� �}|d r:ttj d��d|d< | �
|� d S )Nz%s.addMasquerade()r� r� Tr� rU r( r( r) �
addMasquerade" s z!FirewallDConfigZone.addMasqueradec C sP t �d| j� | j�|� t| �� �}|d s:ttj d��d|d< | �
|� d S )Nz%s.removeMasquerade()r� r� Fr� rU r( r( r) �removeMasquerade- s z$FirewallDConfigZone.removeMasqueradec C s t �d| j� | �� d S )Nz%s.queryMasquerade()r� ri ra r( r( r) �queryMasquerade8 s z#FirewallDConfigZone.queryMasqueradeza(ssss)c C s t �d| j� | �� d S )Nz%s.getForwardPorts()� ri ra r( r( r) �getForwardPortsA s z#FirewallDConfigZone.getForwardPortsc C s� g }t |t�D ](}t|t�r,|�t|�� q|�|� q|}t�d| jd�dd� |D ��� | j �
|� t| � � �}||d< | � |� d S )Nz%s.setForwardPorts('[%s]')ry c s s. | ]&}d |d |d |d |d f V qdS )z('%s, '%s', '%s', '%s')r r rp � Nr( r� r( r( r) r� U s � �z6FirewallDConfigZone.setForwardPorts.<locals>.<genexpr>r� r� r� r( r( r) �setForwardPortsH s
�� z#FirewallDConfigZone.setForwardPortsZssssc C s� t |t�}t |t�}t |t�}t |t�}t�d| j||||� | j�|� ||t|�t|�f}t| �� �}||d v r�t t
j d||||f ��|d � |� | �
|� d S )Nz)%s.addForwardPort('%s', '%s', '%s', '%s')r� � %s:%s:%s:%sr} �r" r� r� �toport�toaddrr? �fwp_idrP r( r( r) �addForwardPort\ s$
� ��z"FirewallDConfigZone.addForwardPortc C s� t |t�}t |t�}t |t�}t |t�}t�d| j||||� | j�|� ||t|�t|�f}t| �� �}||d vr�t t
j d||||f ��|d � |� | �
|� d S )Nz,%s.removeForwardPort('%s', '%s', '%s', '%s')r� r� r� r� r( r( r) �removeForwardPortp s$
� ��z%FirewallDConfigZone.removeForwardPortc C sb t |t�}t |t�}t |t�}t |t�}t�d| j||||� ||t|�t|�f}|| �� d v S )Nz+%s.queryForwardPort('%s', '%s', '%s', '%s')r� r� )r" r� r� r� r� r? r� r( r( r) �queryForwardPort� s
�z$FirewallDConfigZone.queryForwardPortc C s t �d| j� | �� d S )Nz%s.getInterfaces()�
ri ra r( r( r) �
getInterfaces� s z!FirewallDConfigZone.getInterfacesc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setInterfaces('[%s]')ry r� rz )r" rW r? rP r( r( r) �
setInterfaces� s
� z!FirewallDConfigZone.setInterfacesc C st t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t
j |��|d � |� | �
|� t| jj|� d S )Nz%s.addInterface('%s')r� )r r< r
r= r r rG rN rR r r r~ r r_ r r r. �r" � interfacer? rP r( r( r) � addInterface� s
z FirewallDConfigZone.addInterfacec C sp t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t
j |��|d � |� | �
|� td|� d S )Nz%s.removeInterface('%s')r� � )r r< r
r= r r rG rN rR r r r� re r_ r r� r( r( r) �removeInterface� s
z#FirewallDConfigZone.removeInterfacec C s* t |t�}t�d| j|� || �� d v S )Nz%s.queryInterface('%s')r� r� )r" r� r? r( r( r) �queryInterface� s
z"FirewallDConfigZone.queryInterfacec C s t �d| j� | �� d S )Nz%s.getSources()� ri ra r( r( r) �
getSources� s z FirewallDConfigZone.getSourcesc C sN t |t�}t�d| jd�|�� | j�|� t| �� �}||d< | � |� d S )Nz%s.setSources('[%s]')ry r� rz )r" rX r? rP r( r( r) �
setSources� s
� z FirewallDConfigZone.setSourcesc C sf t |t�}t�d| j|� | j�|� t| �� �}||d v rJt t
j |��|d � |� | �
|� d S )Nz%s.addSource('%s')r� r} �r" r[ r? rP r( r( r) � addSource� s
z FirewallDConfigZone.addSourcec C sf t |t�}t�d| j|� | j�|� t| �� �}||d vrJt t
j |��|d � |� | �
|� d S )Nz%s.removeSource('%s')r� r� r� r( r( r) � removeSource� s
z FirewallDConfigZone.removeSourcec C s* t |t�}t�d| j|� || �� d v S )Nz%s.querySource('%s')r� r� )r" r[ r? r( r( r) � querySource� s
z FirewallDConfigZone.querySourcec C s t �d| j� | �� d S )Nz%s.getRichRules()� ri ra r( r( r) � getRichRules s z FirewallDConfigZone.getRichRulesc C s\ t |t�}t�d| jd�|�� | j�|� t| �� �}dd� |D �}||d< | � |� d S )Nz%s.setRichRules('[%s]')ry c S s g | ]}t t|d ���qS )��rule_str)r< r )r� �rr( r( r) r� r� z4FirewallDConfigZone.setRichRules.<locals>.<listcomp>r� rz )r" Zrulesr? rP r( r( r) � setRichRules s
� z FirewallDConfigZone.setRichRulesc C st t |t�}t�d| j|� | j�|� t| �� �}tt |d��}||d v rXt
t j |��|d �
|� | �|� d S )Nz%s.addRichRule('%s')r� r� )r r< r
r= r r rG rN rR r r r r~ r r_ �r" �ruler? rP r� r( r( r) � addRichRule s
z FirewallDConfigZone.addRichRulec C st t |t�}t�d| j|� | j�|� t| �� �}tt |d��}||d vrXt
t j |��|d �
|� | �|� d S )Nz%s.removeRichRule('%s')r� r� )r r< r
r= r r rG rN rR r r r r� re r_ r� r( r( r) �removeRichRule) s
z"FirewallDConfigZone.removeRichRulec C s8 t |t�}t�d| j|� tt|d��}|| �� d v S )Nz%s.queryRichRule('%s')r� r� )r r< r
r= r r rR )r" r� r? r� r( r( r) �
queryRichRule7 s
z!FirewallDConfigZone.queryRichRule)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)g�__name__�
__module__� __qualname__�__doc__Z
persistentr r ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr r r
r, r- r6 r ZPROPERTIES_IFACEr@ rF r rH r� �signalrI ZPK_ACTION_INFOZINTROSPECTABLE_IFACErJ r! rR rV r\ r_ r` rb r^ re rf rh rg rj rm rn ro rq rs rt ru rx r| r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� �
__classcell__r( r( r& r) r 0 s�
��
� � ��
� ��
��
��
��
�� �
�
������
�� �
�
������
�� �
�
���
���
������ �� � � ��� �
�
���
� � �r )"r Z dbus.serviceZfirewallr Zfirewall.dbus_utilsr r r Zfirewall.core.io.zoner Zfirewall.core.fw_ifcfgr Zfirewall.core.baser Zfirewall.core.richr Zfirewall.core.loggerr
Zfirewall.server.dbusr Zfirewall.server.decoratorsr r
r r r Zfirewall.errorsr Zfirewall.functionsr r r r r r( r( r( r) �<module> s