File: //lib/python2.7/site-packages/firewall/core/io/service.pyc
�
�G�`c @ s d d d g Z d d l j Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l
m Z m Z m
Z
m Z m Z m Z m Z m Z d d l m Z d d l m Z d d
l m Z d e f d � � YZ d e
f d
� � YZ d � Z d d � Z d S( t Servicet service_readert service_writeri����N( t config( t
u2b_if_py2( t PY2t IO_Objectt IO_Object_ContentHandlert IO_Object_XMLGeneratort
check_portt check_tcpudpt check_protocolt
check_address( t log( t errors( t
FirewallErrorc
B s� e Z d d d d d g f d d g f d i d d 6f d d g f d d g f f Z d Z d
d g Z i d d 6d d 6d d 6Z i d
d g d 6d d g d 6d g d 6d
g d 6d d g d 6d d g d 6Z d � Z d � Z d � Z
d � Z RS( t versiont t shortt descriptiont portst modulest destinationt protocolst source_portss (sssa(ss)asa{ss}asa(ss))t _t -t servicet namet portt protocolt valuet modulet ipv4t ipv6s source-portc C s_ t t | � j � d | _ d | _ d | _ g | _ g | _ g | _ i | _ g | _
d S( NR ( t superR t __init__R R R R R R R R ( t self( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR$ A s c C sH d | _ d | _ d | _ | j 2| j 2| j 2| j j � | j 2d S( NR ( R R R R R R R t clearR ( R% ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt cleanupL s
c C s t | j � | _ t | j � | _ t | j � | _ g | j D]$ \ } } t | � t | � f ^ q@ | _ g | j D] } t | � ^ qw | _ d � | j j � D� | _ g | j D] } t | � ^ q� | _ g | j D]$ \ } } t | � t | � f ^ q� | _ d S( s� HACK. I haven't been able to make sax parser return
strings encoded (because of python 2) instead of in unicode.
Get rid of it once we throw out python 2 support.c S s+ i | ]! \ } } t | � t | � � q S( ( R ( t .0t kt v( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pys
<dictcomp>_ s N(
R R R R R R R t itemsR R ( R% t pot prt m( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt encode_stringsV s 7% %c C s� | d k r] x�| D]C } | d d k rH t | d � t | d � q t | d � q WnH| d k r� x9| D] } t | � qp Wn | d k r� x| D]" } t | d � t | d � q� Wn� | d k rx� | D]< } | d k rt t j d
| � � n t | | | � q� Wn� | d k r�x} | D]r } | j d � rw| j d d � } d
| k rw| j d
d � } qwn t | � d k r,t t j
| � � q,q,Wn d S( NR i R i R R R R! R" s '%s' not in {'ipv4'|'ipv6'}R t
nf_conntrack_R R i ( R! R" ( R R
R R R t INVALID_DESTINATIONR t
startswitht replacet lent INVALID_MODULE( R% R t itemR t protoR R ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt
_check_configd s8
( s versionR ( s shortR ( s descriptionR ( R R ( R R N( t __name__t
__module__t IMPORT_EXPORT_STRUCTUREt DBUS_SIGNATUREt ADDITIONAL_ALNUM_CHARSt Nonet PARSER_REQUIRED_ELEMENT_ATTRSt PARSER_OPTIONAL_ELEMENT_ATTRSR$ R' R/ R8 ( ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR & s2
t service_ContentHandlerc B s e Z d � Z RS( c C sx t j | | | � | j j | | � | d k rw d | k rU t j d | d � n d | k rt| d | j _ qtn�| d k r� n�| d k r� n�| d k r|| d d k r't | d � t | d � | d | d f } | | j j k r | j j j
| � qyt j d
| d | d � qtt | d � | d | j j k re| j j j
| d � qtt j d | d � n�| d k r�t | d � | d | j j k r�| j j j
| d � qtt j d | d � n�| d
k r_t | d � t | d � | d | d f } | | j j
k rA| j j
j
| � qtt j d | d | d � n| d k r�xd d g D]_ } | | k rxt | | | � | | j j k r�t j d | � q�| | | j j | <qxqxWn� | d k rt| d } | j d � r9| j d d � } d | k r9| j d d � } q9n | | j j k ra| j j j
| � qtt j d | � n d S( NR R s' Ignoring deprecated attribute name='%s'R R R R R R s# Port '%s/%s' already set, ignoring.s$ Protocol '%s' already set, ignoring.R s source-ports) SourcePort '%s/%s' already set, ignoring.R R! R" s2 Destination address for '%s' already set, ignoringR R0 R R s" Module '%s' already set, ignoring.( R t startElementR6 t parser_check_element_attrsR
t warningR R R
R t appendR R R R R R2 R3 R ( R% R t attrst entryt xR ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyRB � st
( R9 R: RB ( ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyRA � s c C sY t � } | j d � s1 t t j d | � � n | d | _ | j | j � | | _ | | _ | j t
j � rx t n t
| _ | j | _ t | � } t j � } | j | � d | | f } t | d � �i } t j d � } | j | � y | j | � Wn2 t j k
r5} t t j d | j � � � n XWd QX~ ~ t rU| j � n | S( Ns .xmls '%s' is missing .xml suffixi����s %s/%st rbs not a valid service file: %s( R t endswithR R t INVALID_NAMER t
check_namet filenamet pathR2 R t
ETC_FIREWALLDt Falset Truet builtint defaultRA t saxt make_parsert setContentHandlert opent InputSourceR> t
setByteStreamt parset SAXParseExceptiont INVALID_SERVICEt getExceptionR R/ ( RM RN R t handlert parserR t ft sourcet msg( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR � s8
!
c
C s� | r | n | j } | j r4 d | | j f } n d | | j f } t j j | � r� y t j | d | � Wq� t k
r� } t j d | | � q� Xn t j j
| � } | j t j
� rt j j | � rt j j t j
� s� t j t j
d � n t j | d � n t j | d d d d �} t | � } | j � i } | j rq| j d
k rq| j | d <n | j d | � | j d
� | j r�| j d
k r�| j d � | j d i � | j | j � | j d � | j d
� n | j rR| j d
k rR| j d � | j d i � | j | j � | j d � | j d
� n xQ | j D]F } | j d � | j d i | d d 6| d d 6� | j d
� q\WxB | j D]7 }
| j d � | j d i |
d 6� | j d
� q�WxQ | j D]F } | j d � | j d i | d d 6| d d 6� | j d
� q�WxB | j D]7 } | j d � | j d i | d 6� | j d
� qIWt | j � d k r�| j d � | j d | j � | j d
� n | j d � | j d
� | j! � | j" � ~ d S( Ns %s/%ss %s/%s.xmls %s.olds Backup of file '%s' failed: %si� t modet wtt encodings UTF-8R R R s
s R R R i i R R s source-portR R R (# RN RM R t ost existst shutilt copy2t ExceptionR
t errort dirnameR2 R RO t mkdirt ioRW R t
startDocumentR RB t ignorableWhitespaceR t
characterst
endElementR R t
simpleElementR R R R4 R t endDocumentt close( R RN t _pathR Rb t dirpathR` R^ RF R R R ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyR � sx %
&
( t __all__t xml.saxRT Rf Rn Rh t firewallR t firewall.functionsR t firewall.core.io.io_objectR R R R R R
R R t firewall.core.loggerR
R t firewall.errorsR R RA R R> R ( ( ( s< /usr/lib/python2.7/site-packages/firewall/core/io/service.pyt <module> s :dE