????
Your IP : 3.144.158.54
a
���g� � @ s� d dl mZ d dlZd dlZd dlmZ d dlmZm Z m
Z
d dl m Z d dl
mZ d dlmZmZmZ d dlmZ d d lmZ d dlZd dlZdad
ad d � ZG d
d� de�ZG dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z G dd� de�Z!G dd � d e�Z"G d d � d e�Z#G d d � d e�Z$G d!d"� d"e�Z%G d#d$� d$e�Z&G d%d&� d&e�Z'G d'd(� d(e�Z(G d)d*� d*e�Z)G d+d,� d,e�Z*G d-d.� d.e�Z+G d/d0� d0e�Z,dS )1� )�GLibN)�config)�DEFAULT_ZONE_TARGET�DEFAULT_POLICY_TARGET�DEFAULT_POLICY_PRIORITY��dbus_to_python)� Rich_Rule)�normalize_ipset_entry� check_entry_overlaps_existing� check_for_overlapping_entries)�errors)�
FirewallErrorFc s t �� �� fdd��}|S )z#Decorator to handle exceptions
c
s d}|�s z� | i |��W S t jjy� } zd|�� }|�� }tsD� d|v rVtd� n0d|v rht|� n d}|rzt|� n tt|�� W Y d }~ndd }~0 ty� } z ts�� n tt|�� W Y d }~n.d }~0 ty� ts� n tt �
� � Y n0 t s�q qd S )NFZNotAuthorizedExceptionzorg.freedesktop.DBus.ErrorT) �dbus�
exceptions�
DBusException�get_dbus_messageZ
get_dbus_name�exception_handler�strr � Exception� traceback�
format_exc�not_authorized_loop)�args�kwargsZ
authorized�eZ dbus_messageZ dbus_name��func� �3/usr/lib/python3.9/site-packages/firewall/client.py�_impl- s6
z handle_exceptions.<locals>._impl)� functools�wraps)r r r r r �handle_exceptions* s !r# c @ s� e Zd Zed�dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �Zed*d+� �Zed,d-� �Zed.d/� �Zed0d1� �Zed2d3� �Z ed4d5� �Z ed6d7� �Z ed8d9� �Z ed:d;� �Z ed<d=� �Z!ed>d?� �Z"ed@dA� �Z#edBdC� �Z$edDdE� �Z%edFdG� �Z&edHdI� �Z'edJdK� �Z(edLdM� �Z)edNdO� �Z*edPdQ� �Z+edRdS� �Z,edTdU� �Z-edVdW� �Z.edXdY� �Z/edZd[� �Z0ed\d]� �Z1ed^d_� �Z2ed`da� �Z3edbdc� �Z4eddde� �Z5edfdg� �Z6edhdi� �Z7edjdk� �Z8edldm� �Z9edndo� �Z:edpdq� �Z;edrds� �Z<edtdu� �Z=edvdw� �Z>edxdy� �Z?edzd{� �Z@ed|d}� �ZAed~d� �ZBed�d�� �ZCed�d�� �ZDed�d�� �ZEed�d�� �ZFed�d�� �ZGed�d�� �ZHed�d�� �ZIed�d�� �ZJed�d�� �ZKed�d�� �ZLed�d�� �ZMed�d�� �ZNdS )��FirewallClientZoneSettingsNc C s� ddddt g g g dg g g g g g ddg| _g d�| _g d�| _|r~t|t�rjt|�D ]\}}|| | j|< qRt|t�r~| �|� d S )N� F)�version�short� description�UNUSED�target�services�ports� icmp_blocks�
masquerade�
forward_ports�
interfaces�sourcesZ rules_str� protocols� source_portsZicmp_block_inversion�forward)�sr5 r5 �br5 r5 �(ss)r5 r6 �(ssss)r5 r5 r5 r5 r7 r6 r6 ) r �settings�
settings_name�settings_dbus_type�
isinstance�list� enumerate�dict�setSettingsDict��selfr9 �i�vr r r �__init__T s �
z#FirewallClientZoneSettings.__init__c C s d| j | jf S �Nz%s(%r)�� __class__r9 �rB r r r �__repr__k s z#FirewallClientZoneSettings.__repr__c C s2 i }t | j| j�D ]\}}|dkr$q|||< q|S )Nr) ��zipr: r9 �rB r9 �key�valuer r r �getSettingsDicto s
z*FirewallClientZoneSettings.getSettingsDictc C s$ |D ]}|| | j | j�|�< qd S �N�r9 r: �index�rB r9 rN r r r r@ w s z*FirewallClientZoneSettings.setSettingsDictc C sx i }t | j| j| j�D ]\\}}}|dkr*qt|�tu rJtj||d�||< qt|�tu rjtj ||d�||< q|||< q|S )Nr) �Z signature�
rL r: r9 r; �typer= r �Arrayr? �
Dictionary�rB r9 rN rO �sigr r r �getSettingsDbusDict{ s
z.FirewallClientZoneSettings.getSettingsDbusDictc C s$ | � � }|d= |d= |d= |d= |S �Nr& r' r( r* )rP �rB r9 r r r �getRuntimeSettingsDict� s z1FirewallClientZoneSettings.getRuntimeSettingsDictc C s$ | � � }|d= |d= |d= |d= |S r] �r\ r^ r r r �getRuntimeSettingsDbusDict� s z5FirewallClientZoneSettings.getRuntimeSettingsDbusDictc C s
| j d S �Nr �r9 rI r r r �
getVersion� s z%FirewallClientZoneSettings.getVersionc C s || j d< d S rb rc �rB r& r r r �
setVersion� s z%FirewallClientZoneSettings.setVersionc C s
| j d S �N� rc rI r r r �getShort� s z#FirewallClientZoneSettings.getShortc C s || j d< d S rg rc �rB r' r r r �setShort� s z#FirewallClientZoneSettings.setShortc C s
| j d S �N� rc rI r r r �getDescription� s z)FirewallClientZoneSettings.getDescriptionc C s || j d< d S rl rc �rB r( r r r �setDescription� s z)FirewallClientZoneSettings.setDescriptionc C s | j d tkr| j d S dS )N� �default)r9 r rI r r r � getTarget� s z$FirewallClientZoneSettings.getTargetc C s |dkr |nt | jd< d S )Nrr rq )r r9 �rB r* r r r � setTarget� s z$FirewallClientZoneSettings.setTargetc C s
| j d S �N� rc rI r r r � getServices� s z&FirewallClientZoneSettings.getServicesc C s || j d< d S rv rc �rB r+ r r r � setServices� s z&FirewallClientZoneSettings.setServicesc C s0 || j d vr | j d �|� n ttj|��d S rv �r9 �appendr r
�ALREADY_ENABLED�rB �servicer r r �
addService� s z%FirewallClientZoneSettings.addServicec C s0 || j d v r | j d �|� n ttj|��d S rv �r9 �remover r
� NOT_ENABLEDr~ r r r �
removeService� s z(FirewallClientZoneSettings.removeServicec C s || j d v S rv rc r~ r r r � queryService� s z'FirewallClientZoneSettings.queryServicec C s
| j d S �N� rc rI r r r �getPorts� s z#FirewallClientZoneSettings.getPortsc C s || j d< d S r� rc �rB r, r r r �setPorts� s z#FirewallClientZoneSettings.setPortsc C s@ ||f| j d vr(| j d �||f� nttjd||f ��d S �Nr� �'%s:%s'r{ �rB �port�protocolr r r �addPort� s
�z"FirewallClientZoneSettings.addPortc C s@ ||f| j d v r(| j d �||f� nttjd||f ��d S r� r� r� r r r �
removePort� s
�z%FirewallClientZoneSettings.removePortc C s ||f| j d v S r� rc r� r r r � queryPort� s z$FirewallClientZoneSettings.queryPortc C s
| j d S �N�
rc rI r r r � getProtocols� s z'FirewallClientZoneSettings.getProtocolsc C s || j d< d S r� rc �rB r2 r r r � setProtocols� s z'FirewallClientZoneSettings.setProtocolsc C s0 || j d vr | j d �|� n ttj|��d S r� r{ �rB r� r r r � addProtocol� s z&FirewallClientZoneSettings.addProtocolc C s0 || j d v r | j d �|� n ttj|��d S r� r� r� r r r �removeProtocol� s z)FirewallClientZoneSettings.removeProtocolc C s || j d v S r� rc r� r r r �
queryProtocol� s z(FirewallClientZoneSettings.queryProtocolc C s
| j d S �N� rc rI r r r �getSourcePorts� s z)FirewallClientZoneSettings.getSourcePortsc C s || j d< d S r� rc r� r r r �setSourcePorts s z)FirewallClientZoneSettings.setSourcePortsc C s@ ||f| j d vr(| j d �||f� nttjd||f ��d S �Nr� r� r{ r� r r r �
addSourcePort s
�z(FirewallClientZoneSettings.addSourcePortc C s@ ||f| j d v r(| j d �||f� nttjd||f ��d S r� r� r� r r r �removeSourcePort s
�z+FirewallClientZoneSettings.removeSourcePortc C s ||f| j d v S r� rc r� r r r �querySourcePort s z*FirewallClientZoneSettings.querySourcePortc C s
| j d S �N� rc rI r r r �
getIcmpBlocks s z(FirewallClientZoneSettings.getIcmpBlocksc C s || j d< d S r� rc �rB Z
icmpblocksr r r �
setIcmpBlocks s z(FirewallClientZoneSettings.setIcmpBlocksc C s0 || j d vr | j d �|� n ttj|��d S r� r{ �rB Zicmptyper r r � addIcmpBlock s z'FirewallClientZoneSettings.addIcmpBlockc C s0 || j d v r | j d �|� n ttj|��d S r� r� r� r r r �removeIcmpBlock" s z*FirewallClientZoneSettings.removeIcmpBlockc C s || j d v S r� rc r� r r r �queryIcmpBlock( s z)FirewallClientZoneSettings.queryIcmpBlockc C s
| j d S �N� rc rI r r r �getIcmpBlockInversion, s z0FirewallClientZoneSettings.getIcmpBlockInversionc C s || j d< d S r� rc )rB �flagr r r �setIcmpBlockInversion/ s z0FirewallClientZoneSettings.setIcmpBlockInversionc C s& | j d sd| j d< n ttjd��d S )Nr� T�icmp-block-inversion�r9 r r
r} rI r r r �addIcmpBlockInversion2 s
z0FirewallClientZoneSettings.addIcmpBlockInversionc C s& | j d rd| j d< n ttjd��d S )Nr� Fr� �r9 r r
r� rI r r r �removeIcmpBlockInversion8 s
z3FirewallClientZoneSettings.removeIcmpBlockInversionc C s
| j d S r� rc rI r r r �queryIcmpBlockInversion> s z2FirewallClientZoneSettings.queryIcmpBlockInversionc C s
| j d S �N� rc rI r r r �
getForwardB s z%FirewallClientZoneSettings.getForwardc C s || j d< d S r� rc �rB r4 r r r �
setForwardE s z%FirewallClientZoneSettings.setForwardc C s& | j d sd| j d< n ttjd��d S )Nr� Tr4 r� rI r r r �
addForwardH s
z%FirewallClientZoneSettings.addForwardc C s& | j d rd| j d< n ttjd��d S )Nr� Fr4 r� rI r r r �
removeForwardN s
z(FirewallClientZoneSettings.removeForwardc C s
| j d S r� rc rI r r r � queryForwardT s z'FirewallClientZoneSettings.queryForwardc C s
| j d S �N� rc rI r r r �
getMasqueradeX s z(FirewallClientZoneSettings.getMasqueradec C s || j d< d S r� rc �rB r. r r r �
setMasquerade[ s z(FirewallClientZoneSettings.setMasqueradec C s& | j d sd| j d< n ttjd��d S )Nr� Tr. r� rI r r r �
addMasquerade^ s
z(FirewallClientZoneSettings.addMasqueradec C s& | j d rd| j d< n ttjd��d S )Nr� Fr. r� rI r r r �removeMasqueraded s
z+FirewallClientZoneSettings.removeMasqueradec C s
| j d S r� rc rI r r r �queryMasqueradej s z*FirewallClientZoneSettings.queryMasqueradec C s
| j d S �N� rc rI r r r �getForwardPortsn s z*FirewallClientZoneSettings.getForwardPortsc C s || j d< d S r� rc r� r r r �setForwardPortsq s z*FirewallClientZoneSettings.setForwardPortsc C sd |d u r d}|d u rd}||||f| j d vrH| j d �||||f� nttjd||||f ��d S �Nr% r� �
'%s:%s:%s:%s'r{ �rB r� r� Zto_portZto_addrr r r �addForwardPortt s
�z)FirewallClientZoneSettings.addForwardPortc C sd |d u r d}|d u rd}||||f| j d v rH| j d �||||f� nttjd||||f ��d S r� r� r� r r r �removeForwardPort s
�z,FirewallClientZoneSettings.removeForwardPortc C s. |d u r d}|d u rd}||||f| j d v S )Nr% r� rc r� r r r �queryForwardPort� s
z+FirewallClientZoneSettings.queryForwardPortc C s
| j d S �N�
rc rI r r r �
getInterfaces� s z(FirewallClientZoneSettings.getInterfacesc C s || j d< d S r� rc �rB r0 r r r �
setInterfaces� s z(FirewallClientZoneSettings.setInterfacesc C s0 || j d vr | j d �|� n ttj|��d S r� r{ �rB � interfacer r r � addInterface� s z'FirewallClientZoneSettings.addInterfacec C s0 || j d v r | j d �|� n ttj|��d S r� r� r� r r r �removeInterface� s z*FirewallClientZoneSettings.removeInterfacec C s || j d v S r� rc r� r r r �queryInterface� s z)FirewallClientZoneSettings.queryInterfacec C s
| j d S �N� rc rI r r r �
getSources� s z%FirewallClientZoneSettings.getSourcesc C s || j d< d S r� rc �rB r1 r r r �
setSources� s z%FirewallClientZoneSettings.setSourcesc C s0 || j d vr | j d �|� n ttj|��d S r� r{ �rB �sourcer r r � addSource� s z$FirewallClientZoneSettings.addSourcec C s0 || j d v r | j d �|� n ttj|��d S r� r� r� r r r � removeSource� s z'FirewallClientZoneSettings.removeSourcec C s || j d v S r� rc r� r r r � querySource� s z&FirewallClientZoneSettings.querySourcec C s
| j d S )N� rc rI r r r � getRichRules� s z'FirewallClientZoneSettings.getRichRulesc C s dd� |D �}|| j d< d S )Nc S s g | ]}t t|d ���qS ��Zrule_str�r r ��.0�rr r r �
<listcomp>� � z;FirewallClientZoneSettings.setRichRules.<locals>.<listcomp>r� rc �rB Zrulesr r r � setRichRules� s z'FirewallClientZoneSettings.setRichRulesc C s> t t|d��}|| jd vr.| jd �|� n ttj|��d S �Nr� r� �r r r9 r| r r
r} �rB �ruler r r � addRichRule� s z&FirewallClientZoneSettings.addRichRulec C s> t t|d��}|| jd v r.| jd �|� n ttj|��d S r� �r r r9 r� r r
r� r� r r r �removeRichRule� s z)FirewallClientZoneSettings.removeRichRulec C s t t|d��}|| jd v S r� �r r r9 r� r r r �
queryRichRule� s z(FirewallClientZoneSettings.queryRichRule)N)O�__name__�
__module__� __qualname__r# rE rJ rP r@ r\ r_ ra rd rf ri rk rn rp rs ru rx rz r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r$ S s,
r$ c @ s� e Zd Zdd� Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zed'd(� �Zed)d*� �Zed+d,� �Zed-d.� �Zed/d0� �Zed1d2� �Z ed3d4� �Z ed5d6� �Z ed7d8� �Z ed9d:� �Z ed;d<� �Z!ed=d>� �Z"ed?d@� �Z#edAdB� �Z$edCdD� �Z%edEdF� �Z&edGdH� �Z'edIdJ� �Z(edKdL� �Z)edMdN� �Z*edOdP� �Z+edQdR� �Z,edSdT� �Z-edUdV� �Z.edWdX� �Z/edYdZ� �Z0ed[d\� �Z1ed]d^� �Z2ed_d`� �Z3edadb� �Z4edcdd� �Z5ededf� �Z6edgdh� �Z7edidj� �Z8edkdl� �Z9edmdn� �Z:edodp� �Z;edqdr� �Z<edsdt� �Z=edudv� �Z>edwdx� �Z?edydz� �Z@ed{d|� �ZAed}d~� �ZBedd�� �ZCed�d�� �ZDed�d�� �ZEed�d�� �ZFed�d�� �ZGed�d�� �ZHed�d�� �ZIed�d�� �ZJed�d�� �ZKed�d�� �ZLed�d�� �ZMed�d�� �ZNed�d�� �ZOed�d�� �ZPd�S )��FirewallClientConfigZonec C sL || _ || _| j �tjj|�| _tj| jtjjd�| _ tj| jdd�| _
d S �N��dbus_interface� org.freedesktop.DBus.Properties) �bus�path�
get_objectr r �DBUS_INTERFACE�dbus_obj� Interface�DBUS_INTERFACE_CONFIG_ZONE�fw_zone�
fw_properties�rB r r r r r rE � s ��z!FirewallClientConfigZone.__init__c C s t | j�tjj|��S rQ )r r �Getr r r �rB �propr r r � get_property� s �z%FirewallClientConfigZone.get_propertyc C s t | j�tjj��S rQ )r r �GetAllr r r rI r r r �get_properties� s �z'FirewallClientConfigZone.get_propertiesc C s | j �tjj||� d S rQ )r �Setr r r �rB r rO r r r � set_property� s �z%FirewallClientConfigZone.set_propertyc C s t t| j�� ��S rQ )r$ r r
� getSettings2rI r r r � getSettings� s z$FirewallClientConfigZone.getSettingsc C s | j �|�� � d S rQ )r
�update2r\ r^ r r r �update� s z FirewallClientConfigZone.updatec C s | j �� d S rQ )r
� loadDefaultsrI r r r r � s z%FirewallClientConfigZone.loadDefaultsc C s | j �� d S rQ )r
r� rI r r r r� s z FirewallClientConfigZone.removec C s | j �|� d S rQ )r
�rename�rB �namer r r r s z FirewallClientConfigZone.renamec C s
| j �� S rQ )r
rd rI r r r rd
s z#FirewallClientConfigZone.getVersionc C s | j �|� d S rQ )r
rf re r r r rf s z#FirewallClientConfigZone.setVersionc C s
| j �� S rQ )r
ri rI r r r ri s z!FirewallClientConfigZone.getShortc C s | j �|� d S rQ )r
rk rj r r r rk s z!FirewallClientConfigZone.setShortc C s
| j �� S rQ )r
rn rI r r r rn ! s z'FirewallClientConfigZone.getDescriptionc C s | j �|� d S rQ )r
rp ro r r r rp % s z'FirewallClientConfigZone.setDescriptionc C s
| j �� S rQ )r
rs rI r r r rs + s z"FirewallClientConfigZone.getTargetc C s | j �|� d S rQ )r
ru rt r r r ru / s z"FirewallClientConfigZone.setTargetc C s
| j �� S rQ )r
rx rI r r r rx 5 s z$FirewallClientConfigZone.getServicesc C s | j �|� d S rQ )r
rz ry r r r rz 9 s z$FirewallClientConfigZone.setServicesc C s | j �|� d S rQ )r
r� r~ r r r r� = s z#FirewallClientConfigZone.addServicec C s | j �|� d S rQ )r
r� r~ r r r r� A s z&FirewallClientConfigZone.removeServicec C s | j �|�S rQ )r
r� r~ r r r r� E s z%FirewallClientConfigZone.queryServicec C s
| j �� S rQ )r
r� rI r r r r� K s z!FirewallClientConfigZone.getPortsc C s | j �|� d S rQ )r
r� r� r r r r� O s z!FirewallClientConfigZone.setPortsc C s | j �||� d S rQ )r
r� r� r r r r� S s z FirewallClientConfigZone.addPortc C s | j �||� d S rQ )r
r� r� r r r r� W s z#FirewallClientConfigZone.removePortc C s | j �||�S rQ )r
r� r� r r r r� [ s z"FirewallClientConfigZone.queryPortc C s
| j �� S rQ )r
r� rI r r r r� a s z%FirewallClientConfigZone.getProtocolsc C s | j �|� d S rQ )r
r� r� r r r r� e s z%FirewallClientConfigZone.setProtocolsc C s | j �|� d S rQ )r
r� r� r r r r� i s z$FirewallClientConfigZone.addProtocolc C s | j �|� d S rQ )r
r� r� r r r r� m s z'FirewallClientConfigZone.removeProtocolc C s | j �|�S rQ )r
r� r� r r r r� q s z&FirewallClientConfigZone.queryProtocolc C s
| j �� S rQ )r
r� rI r r r r� w s z'FirewallClientConfigZone.getSourcePortsc C s | j �|� d S rQ )r
r� r� r r r r� { s z'FirewallClientConfigZone.setSourcePortsc C s | j �||� d S rQ )r
r� r� r r r r� s z&FirewallClientConfigZone.addSourcePortc C s | j �||� d S rQ )r
r� r� r r r r� � s z)FirewallClientConfigZone.removeSourcePortc C s | j �||�S rQ )r
r� r� r r r r� � s z(FirewallClientConfigZone.querySourcePortc C s
| j �� S rQ )r
r� rI r r r r� � s z&FirewallClientConfigZone.getIcmpBlocksc C s | j �|� d S rQ )r
r� )rB Z icmptypesr r r r� � s z&FirewallClientConfigZone.setIcmpBlocksc C s | j �|� d S rQ )r
r� r� r r r r� � s z%FirewallClientConfigZone.addIcmpBlockc C s | j �|� d S rQ )r
r� r� r r r r� � s z(FirewallClientConfigZone.removeIcmpBlockc C s | j �|�S rQ )r
r� r� r r r r� � s z'FirewallClientConfigZone.queryIcmpBlockc C s
| j �� S rQ )r
r� rI r r r r� � s z.FirewallClientConfigZone.getIcmpBlockInversionc C s | j �|� d S rQ )r
r� )rB Z inversionr r r r� � s z.FirewallClientConfigZone.setIcmpBlockInversionc C s | j �� d S rQ )r
r� rI r r r r� � s z.FirewallClientConfigZone.addIcmpBlockInversionc C s | j �� d S rQ )r
r� rI r r r r� � s z1FirewallClientConfigZone.removeIcmpBlockInversionc C s
| j �� S rQ )r
r� rI r r r r� � s z0FirewallClientConfigZone.queryIcmpBlockInversionc C s | j �� d S �Nr4 �r
r rI r r r r� � s z#FirewallClientConfigZone.getForwardc C s | j �d|i� d S r �r
r r� r r r r� � s z#FirewallClientConfigZone.setForwardc C s | j �ddi� d S �Nr4 Tr rI r r r r� � s z#FirewallClientConfigZone.addForwardc C s | j �ddi� d S �Nr4 Fr rI r r r r� � s z&FirewallClientConfigZone.removeForwardc C s | j �� d S r r rI r r r r� � s z%FirewallClientConfigZone.queryForwardc C s
| j �� S rQ )r
r� rI r r r r� � s z&FirewallClientConfigZone.getMasqueradec C s | j �|� d S rQ )r
r� r� r r r r� � s z&FirewallClientConfigZone.setMasqueradec C s | j �� d S rQ )r
r� rI r r r r� � s z&FirewallClientConfigZone.addMasqueradec C s | j �� d S rQ )r
r� rI r r r r� � s z)FirewallClientConfigZone.removeMasqueradec C s
| j �� S rQ )r
r� rI r r r r� � s z(FirewallClientConfigZone.queryMasqueradec C s
| j �� S rQ )r
r� rI r r r r� � s z(FirewallClientConfigZone.getForwardPortsc C s | j �|� d S rQ )r
r� r� r r r r� � s z(FirewallClientConfigZone.setForwardPortsc C s. |d u r d}|d u rd}| j �||||� d S �Nr% )r
r� �rB r� r� �toport�toaddrr r r r� � s
z'FirewallClientConfigZone.addForwardPortc C s. |d u r d}|d u rd}| j �||||� d S r# )r
r� r$ r r r r� � s
z*FirewallClientConfigZone.removeForwardPortc C s* |d u r d}|d u rd}| j �||||�S r# )r
r� r$ r r r r� � s
z)FirewallClientConfigZone.queryForwardPortc C s
| j �� S rQ )r
r� rI r r r r� s z&FirewallClientConfigZone.getInterfacesc C s | j �|� d S rQ )r
r� r� r r r r� s z&FirewallClientConfigZone.setInterfacesc C s | j �|� d S rQ )r
r� r� r r r r� s z%FirewallClientConfigZone.addInterfacec C s | j �|� d S rQ )r
r� r� r r r r� s z(FirewallClientConfigZone.removeInterfacec C s | j �|�S rQ )r
r� r� r r r r� s z'FirewallClientConfigZone.queryInterfacec C s
| j �� S rQ )r
r� rI r r r r� s z#FirewallClientConfigZone.getSourcesc C s | j �|� d S rQ )r
r� r� r r r r� ! s z#FirewallClientConfigZone.setSourcesc C s | j �|� d S rQ )r
r� r� r r r r� % s z"FirewallClientConfigZone.addSourcec C s | j �|� d S rQ )r
r� r� r r r r� ) s z%FirewallClientConfigZone.removeSourcec C s | j �|�S rQ )r
r� r� r r r r� - s z$FirewallClientConfigZone.querySourcec C s
| j �� S rQ )r
r� rI r r r r� 3 s z%FirewallClientConfigZone.getRichRulesc C s | j �|� d S rQ )r
r� r� r r r r� 7 s z%FirewallClientConfigZone.setRichRulesc C s | j �|� d S rQ )r
r� r� r r r r� ; s z$FirewallClientConfigZone.addRichRulec C s | j �|� d S rQ )r
r� r� r r r r� ? s z'FirewallClientConfigZone.removeRichRulec C s | j �|�S rQ )r
r� r� r r r r� C s z&FirewallClientConfigZone.queryRichRuleN)Qr� r� r� rE r# r r r r r r r� r rd rf ri rk rn rp rs ru rx rz r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r� � s2
r� c @ s" e Zd Zed�dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zd d
� Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �Zed*d+� �Zed,d-� �Zed.d/� �Zed0d1� �Zed2d3� �Z ed4d5� �Z ed6d7� �Z ed8d9� �Z ed:d;� �Z ed<d=� �Z!ed>d?� �Z"ed@dA� �Z#edBdC� �Z$edDdE� �Z%edFdG� �Z&edHdI� �Z'edJdK� �Z(edLdM� �Z)edNdO� �Z*edPdQ� �Z+edRdS� �Z,edTdU� �Z-edVdW� �Z.edXdY� �Z/edZd[� �Z0ed\d]� �Z1ed^d_� �Z2ed`da� �Z3edbdc� �Z4eddde� �Z5edfdg� �Z6edhdi� �Z7edjdk� �Z8edldm� �Z9edndo� �Z:edpdq� �Z;edrds� �Z<edtdu� �Z=edvdw� �Z>edxdy� �Z?edzd{� �Z@ed|d}� �ZAed~d� �ZBed�d�� �ZCed�d�� �ZDed�d�� �ZEdS )�� FirewallClientPolicySettingsNc C sB dg g g g dg t g g g dg tdd�| _g d�| _|r>| �|� d S )Nr% F)r( � egress_zonesr/ r- �
ingress_zonesr. r, �priorityr2 �
rich_rulesr+ r' r3 r* r& )r5 r5 r8 r5 r5 r6 r7 rC r5 r5 r5 r5 r7 r5 r5 )r r r9 r; r@ r^ r r r rE H s& �
z%FirewallClientPolicySettings.__init__c C s d| j | jf S rF rG rI r r r rJ b s z%FirewallClientPolicySettings.__repr__c C s | j S rQ rc rI r r r rP f s z,FirewallClientPolicySettings.getSettingsDictc C s |D ]}|| | j |< qd S rQ rc rT r r r r@ i s z,FirewallClientPolicySettings.setSettingsDictc C sr i }t | j| j�D ]Z\}}| j| }t|�tu rDtj||d�||< qt|�tu rdtj||d�||< q|||< q|S �NrU ) rL r9 r; rW r= r rX r? rY )rB r9 rN r[ rO r r r r\ m s
z0FirewallClientPolicySettings.getSettingsDbusDictc C s | � � }dD ]
}||= q |S )N)r& r' r( r* r` rT r r r ra y s z7FirewallClientPolicySettings.getRuntimeSettingsDbusDictc C s
| j d S �Nr& rc rI r r r rd s z'FirewallClientPolicySettings.getVersionc C s || j d< d S r- rc re r r r rf � s z'FirewallClientPolicySettings.setVersionc C s
| j d S �Nr' rc rI r r r ri � s z%FirewallClientPolicySettings.getShortc C s || j d< d S r. rc rj r r r rk � s z%FirewallClientPolicySettings.setShortc C s
| j d S �Nr( rc rI r r r rn � s z+FirewallClientPolicySettings.getDescriptionc C s || j d< d S r/ rc ro r r r rp � s z+FirewallClientPolicySettings.setDescriptionc C s
| j d S �Nr* rc rI r r r rs � s z&FirewallClientPolicySettings.getTargetc C s || j d< d S r0 rc rt r r r ru � s z&FirewallClientPolicySettings.setTargetc C s
| j d S �Nr+ rc rI r r r rx � s z(FirewallClientPolicySettings.getServicesc C s || j d< d S r1 rc ry r r r rz � s z(FirewallClientPolicySettings.setServicesc C s0 || j d vr | j d �|� n ttj|��d S r1 r{ r~ r r r r� � s z'FirewallClientPolicySettings.addServicec C s0 || j d v r | j d �|� n ttj|��d S r1 r� r~ r r r r� � s z*FirewallClientPolicySettings.removeServicec C s || j d v S r1 rc r~ r r r r� � s z)FirewallClientPolicySettings.queryServicec C s
| j d S �Nr, rc rI r r r r� � s z%FirewallClientPolicySettings.getPortsc C s || j d< d S r2 rc r� r r r r� � s z%FirewallClientPolicySettings.setPortsc C s@ ||f| j d vr(| j d �||f� nttjd||f ��d S �Nr, r� r{ r� r r r r� � s
�z$FirewallClientPolicySettings.addPortc C s@ ||f| j d v r(| j d �||f� nttjd||f ��d S r3 r� r� r r r r� � s
�z'FirewallClientPolicySettings.removePortc C s ||f| j d v S r2 rc r� r r r r� � s z&FirewallClientPolicySettings.queryPortc C s
| j d S �Nr2 rc rI r r r r� � s z)FirewallClientPolicySettings.getProtocolsc C s || j d< d S r4 rc r� r r r r� � s z)FirewallClientPolicySettings.setProtocolsc C s0 || j d vr | j d �|� n ttj|��d S r4 r{ r� r r r r� � s z(FirewallClientPolicySettings.addProtocolc C s0 || j d v r | j d �|� n ttj|��d S r4 r� r� r r r r� � s z+FirewallClientPolicySettings.removeProtocolc C s || j d v S r4 rc r� r r r r� � s z*FirewallClientPolicySettings.queryProtocolc C s
| j d S �Nr3 rc rI r r r r� � s z+FirewallClientPolicySettings.getSourcePortsc C s || j d< d S r5 rc r� r r r r� � s z+FirewallClientPolicySettings.setSourcePortsc C s@ ||f| j d vr(| j d �||f� nttjd||f ��d S �Nr3 r� r{ r� r r r r� � s
�z*FirewallClientPolicySettings.addSourcePortc C s@ ||f| j d v r(| j d �||f� nttjd||f ��d S r6 r� r� r r r r� � s
�z-FirewallClientPolicySettings.removeSourcePortc C s ||f| j d v S r5 rc r� r r r r� � s z,FirewallClientPolicySettings.querySourcePortc C s
| j d S �Nr- rc rI r r r r� � s z*FirewallClientPolicySettings.getIcmpBlocksc C s || j d< d S r7 rc r� r r r r� � s z*FirewallClientPolicySettings.setIcmpBlocksc C s0 || j d vr | j d �|� n ttj|��d S r7 r{ r� r r r r� � s z)FirewallClientPolicySettings.addIcmpBlockc C s0 || j d v r | j d �|� n ttj|��d S r7 r� r� r r r r� s z,FirewallClientPolicySettings.removeIcmpBlockc C s || j d v S r7 rc r� r r r r� s z+FirewallClientPolicySettings.queryIcmpBlockc C s
| j d S �Nr. rc rI r r r r�
s z*FirewallClientPolicySettings.getMasqueradec C s || j d< d S r8 rc r� r r r r� s z*FirewallClientPolicySettings.setMasqueradec C s& | j d sd| j d< n ttjd��d S )Nr. Tr� rI r r r r� s
z*FirewallClientPolicySettings.addMasqueradec C s& | j d rd| j d< n ttjd��d S )Nr. Fr� rI r r r r� s
z-FirewallClientPolicySettings.removeMasqueradec C s
| j d S r8 rc rI r r r r� s z,FirewallClientPolicySettings.queryMasqueradec C s
| j d S �Nr/ rc rI r r r r� # s z,FirewallClientPolicySettings.getForwardPortsc C s || j d< d S r9 rc r� r r r r� & s z,FirewallClientPolicySettings.setForwardPortsc C sd |d u r d}|d u rd}||||f| j d vrH| j d �||||f� nttjd||||f ��d S �Nr% r/ r� r{ r� r r r r� ) s
�z+FirewallClientPolicySettings.addForwardPortc C sd |d u r d}|d u rd}||||f| j d v rH| j d �||||f� nttjd||||f ��d S r: r� r� r r r r� 4 s
�z.FirewallClientPolicySettings.removeForwardPortc C s. |d u r d}|d u rd}||||f| j d v S )Nr% r/ rc r� r r r r� ? s
z-FirewallClientPolicySettings.queryForwardPortc C s
| j d S )Nr+ rc rI r r r r� G s z)FirewallClientPolicySettings.getRichRulesc C s dd� |D �}|| j d< d S )Nc S s g | ]}t t|d ���qS r� r� r� r r r r� L r� z=FirewallClientPolicySettings.setRichRules.<locals>.<listcomp>r+ rc r� r r r r� J s z)FirewallClientPolicySettings.setRichRulesc C s> t t|d��}|| jd vr.| jd �|� n ttj|��d S �Nr� r+ r� r� r r r r� N s z(FirewallClientPolicySettings.addRichRulec C s> t t|d��}|| jd v r.| jd �|� n ttj|��d S r; r� r� r r r r� U s z+FirewallClientPolicySettings.removeRichRulec C s t t|d��}|| jd v S r; r� r� r r r r� \ s z*FirewallClientPolicySettings.queryRichRulec C s
| j d S �Nr) rc rI r r r �getIngressZonesa s z,FirewallClientPolicySettings.getIngressZonesc C s || j d< d S r< rc )rB r) r r r �setIngressZonesd s z,FirewallClientPolicySettings.setIngressZonesc C s0 || j d vr | j d �|� n ttj|��d S r< r{ �rB Z ingress_zoner r r �addIngressZoneg s z+FirewallClientPolicySettings.addIngressZonec C s0 || j d v r | j d �|� n ttj|��d S r< r� r? r r r �removeIngressZonem s z.FirewallClientPolicySettings.removeIngressZonec C s || j d v S r< rc r? r r r �queryIngressZones s z-FirewallClientPolicySettings.queryIngressZonec C s
| j d S �Nr( rc rI r r r �getEgressZonesw s z+FirewallClientPolicySettings.getEgressZonesc C s || j d< d S rC rc )rB r( r r r �setEgressZonesz s z+FirewallClientPolicySettings.setEgressZonesc C s0 || j d vr | j d �|� n ttj|��d S rC r{ �rB Z egress_zoner r r �
addEgressZone} s z*FirewallClientPolicySettings.addEgressZonec C s0 || j d v r | j d �|� n ttj|��d S rC r� rF r r r �removeEgressZone� s z-FirewallClientPolicySettings.removeEgressZonec C s || j d v S rC rc rF r r r �queryEgressZone� s z,FirewallClientPolicySettings.queryEgressZonec C s
| j d S �Nr* rc rI r r r � getPriority� s z(FirewallClientPolicySettings.getPriorityc C s t |�| jd< d S rJ )�intr9 )rB r* r r r � setPriority� s z(FirewallClientPolicySettings.setPriority)N)Fr� r� r� r# rE rJ rP r@ r\ ra rd rf ri rk rn rp rs ru rx rz r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r= r> r@ rA rB rD rE rG rH rI rK rM r r r r r' G s
r' c @ st e Zd Zdd� Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z dS )�FirewallClientConfigPolicyc C sL || _ || _| j �tjj|�| _tj| jtjjd�| _ tj| jdd�| _
d S r� ) r r r r r r r r � DBUS_INTERFACE_CONFIG_POLICY� fw_policyr r r r r rE � s ��z#FirewallClientConfigPolicy.__init__c C s t | j�tjj|��S rQ )r r r
r r rO r r r r r � s �z'FirewallClientConfigPolicy.get_propertyc C s t | j�tjj��S rQ )r r r r r rO rI r r r r � s �z)FirewallClientConfigPolicy.get_propertiesc C s | j �tjj||� d S rQ )r r r r rO r r r r r � s �z'FirewallClientConfigPolicy.set_propertyc C s t t| j�� ��S rQ )r' r rP r rI r r r r � s z&FirewallClientConfigPolicy.getSettingsc C s | j �|�� � d S rQ )rP r r\ r^ r r r r � s z!FirewallClientConfigPolicy.updatec C s | j �� d S rQ )rP r rI r r r r � s z'FirewallClientConfigPolicy.loadDefaultsc C s | j �� d S rQ )rP r� rI r r r r� � s z!FirewallClientConfigPolicy.removec C s | j �|� d S rQ )rP r r r r r r � s z!FirewallClientConfigPolicy.renameN)
r� r� r� rE r# r r r r r r r� r r r r r rN � s"
rN c @ s8 e Zd Zed^dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �Zed*d+� �Zed,d-� �Zed.d/� �Zed0d1� �Zed2d3� �Z ed4d5� �Z ed6d7� �Z ed8d9� �Z ed:d;� �Z ed<d=� �Z!ed>d?� �Z"ed@dA� �Z#edBdC� �Z$edDdE� �Z%ed_dFdG��Z&edHdI� �Z'edJdK� �Z(edLdM� �Z)edNdO� �Z*edPdQ� �Z+edRdS� �Z,edTdU� �Z-edVdW� �Z.edXdY� �Z/edZd[� �Z0ed\d]� �Z1dS )`� FirewallClientServiceSettingsNc
C sz dddg g i g g g g g
| _ g d�| _g d�| _|rvt|�tu r`t|�D ]\}}|| | j |< qFnt|�tu rv| �|� d S )Nr% )
r& r' r( r, �modules� destinationr2 r3 �includes�helpers)
r5 r5 r5 r7 r5 �ssr5 r7 r5 r5 )r9 r: r; rW r= r> r? r@ rA r r r rE � s
z&FirewallClientServiceSettings.__init__c C s d| j | jf S rF rG rI r r r rJ � s z&FirewallClientServiceSettings.__repr__c C s( i }t | j| j�D ]\}}|||< q|S rQ rK rM r r r rP � s
z-FirewallClientServiceSettings.getSettingsDictc C s$ |D ]}|| | j | j�|�< qd S rQ rR rT r r r r@ � s z-FirewallClientServiceSettings.setSettingsDictc C sn i }t | j| j| j�D ]R\}}}t|�tu r@tj||d�||< qt|�tu r`tj ||d�||< q|||< q|S r, rV rZ r r r r\ � s
z1FirewallClientServiceSettings.getSettingsDbusDictc C s
| j d S rb rc rI r r r rd � s z(FirewallClientServiceSettings.getVersionc C s || j d< d S rb rc re r r r rf � s z(FirewallClientServiceSettings.setVersionc C s
| j d S rg rc rI r r r ri � s z&FirewallClientServiceSettings.getShortc C s || j d< d S rg rc rj r r r rk � s z&FirewallClientServiceSettings.setShortc C s
| j d S rl rc rI r r r rn � s z,FirewallClientServiceSettings.getDescriptionc C s || j d< d S rl rc ro r r r rp s z,FirewallClientServiceSettings.setDescriptionc C s
| j d S �N� rc rI r r r r� s z&FirewallClientServiceSettings.getPortsc C s || j d< d S rW rc r� r r r r� s z&FirewallClientServiceSettings.setPortsc C s@ ||f| j d vr(| j d �||f� nttjd||f ��d S �NrX r� r{ r� r r r r�
s
�z%FirewallClientServiceSettings.addPortc C s@ ||f| j d v r(| j d �||f� nttjd||f ��d S rY r� r� r r r r� s
�z(FirewallClientServiceSettings.removePortc C s ||f| j d v S rW rc r� r r r r� s z'FirewallClientServiceSettings.queryPortc C s
| j d S r� rc rI r r r r� s z*FirewallClientServiceSettings.getProtocolsc C s || j d< d S r� rc r� r r r r� s z*FirewallClientServiceSettings.setProtocolsc C s0 || j d vr | j d �|� n ttj|��d S r� r{ r� r r r r� " s z)FirewallClientServiceSettings.addProtocolc C s0 || j d v r | j d �|� n ttj|��d S r� r� r� r r r r� ( s z,FirewallClientServiceSettings.removeProtocolc C s || j d v S r� rc r� r r r r� . s z+FirewallClientServiceSettings.queryProtocolc C s
| j d S r� rc rI r r r r� 2 s z,FirewallClientServiceSettings.getSourcePortsc C s || j d< d S r� rc r� r r r r� 5 s z,FirewallClientServiceSettings.setSourcePortsc C s@ ||f| j d vr(| j d �||f� nttjd||f ��d S �Nr� r� r{ r� r r r r� 8 s
�z+FirewallClientServiceSettings.addSourcePortc C s@ ||f| j d v r(| j d �||f� nttjd||f ��d S rZ r� r� r r r r� ? s
�z.FirewallClientServiceSettings.removeSourcePortc C s ||f| j d v S r� rc r� r r r r� F s z-FirewallClientServiceSettings.querySourcePortc C s
| j d S �Nrq rc rI r r r �
getModulesJ s z(FirewallClientServiceSettings.getModulesc C s || j d< d S r[ rc �rB rR r r r �
setModulesM s z(FirewallClientServiceSettings.setModulesc C s0 || j d vr | j d �|� n ttj|��d S r[ r{ �rB �moduler r r � addModuleP s z'FirewallClientServiceSettings.addModulec C s0 || j d v r | j d �|� n ttj|��d S r[ r� r_ r r r � removeModuleV s z*FirewallClientServiceSettings.removeModulec C s || j d v S r[ rc r_ r r r � queryModule\ s z)FirewallClientServiceSettings.queryModulec C s
| j d S rv rc rI r r r �getDestinations` s z-FirewallClientServiceSettings.getDestinationsc C s || j d< d S rv rc �rB Z destinationsr r r �setDestinationsc s z-FirewallClientServiceSettings.setDestinationsc C sH || j d vs | j d | |kr0|| j d |< nttjd||f ��d S �Nrw r� r� �rB Z dest_type�addressr r r �setDestinationf s ��z,FirewallClientServiceSettings.setDestinationc C s^ || j d v rJ|d ur<| j d | |kr<ttjd||f ��| j d |= nttjd| ��d S )Nrw r� z'%s'r� rh r r r �removeDestinationn s �z/FirewallClientServiceSettings.removeDestinationc C s || j d v o || j d | kS rv rc rh r r r �queryDestinationw s �z.FirewallClientServiceSettings.queryDestinationc C s
| j d S r� rc rI r r r � getIncludes| s z)FirewallClientServiceSettings.getIncludesc C s || j d< d S r� rc �rB rT r r r � setIncludes s z)FirewallClientServiceSettings.setIncludesc C s0 || j d vr | j d �|� n ttj|��d S r� r{ �rB Zincluder r r �
addInclude� s z(FirewallClientServiceSettings.addIncludec C s0 || j d v r | j d �|� n ttj|��d S r� r� rp r r r �
removeInclude� s z+FirewallClientServiceSettings.removeIncludec C s || j d v S r� rc rp r r r � queryInclude� s z*FirewallClientServiceSettings.queryIncludec C s
| j d S r� rc rI r r r �
getHelpers� s z(FirewallClientServiceSettings.getHelpersc C s || j d< d S r� rc )rB rU r r r �
setHelpers� s z(FirewallClientServiceSettings.setHelpersc C s0 || j d vr | j d �|� n ttj|��d S r� r{ �rB �helperr r r � addHelper� s z'FirewallClientServiceSettings.addHelperc C s0 || j d v r | j d �|� n ttj|��d S r� r� rv r r r � removeHelper� s z*FirewallClientServiceSettings.removeHelperc C s || j d v S r� rc rv r r r � queryHelper� s z)FirewallClientServiceSettings.queryHelper)N)N)2r� r� r� r# rE rJ rP r@ r\ rd rf ri rk rn rp r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r\ r^ ra rb rc rd rf rj rk rl rm ro rq rr rs rt ru rx ry rz r r r r rQ � s�
rQ c @ s� e Zd Zed*dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �ZdS )+�FirewallClientIPSetSettingsNc C s" |r || _ nddddi g g| _ d S r# rc r^ r r r rE � s z$FirewallClientIPSetSettings.__init__c C s d| j | jf S rF rG rI r r r rJ � s z$FirewallClientIPSetSettings.__repr__c C s
| j d S rb rc rI r r r rd � s z&FirewallClientIPSetSettings.getVersionc C s || j d< d S rb rc re r r r rf � s z&FirewallClientIPSetSettings.setVersionc C s
| j d S rg rc rI r r r ri � s z$FirewallClientIPSetSettings.getShortc C s || j d< d S rg rc rj r r r rk � s z$FirewallClientIPSetSettings.setShortc C s
| j d S rl rc rI r r r rn � s z*FirewallClientIPSetSettings.getDescriptionc C s || j d< d S rl rc ro r r r rp � s z*FirewallClientIPSetSettings.setDescriptionc C s
| j d S rW rc rI r r r �getType� s z#FirewallClientIPSetSettings.getTypec C s || j d< d S rW rc )rB Z
ipset_typer r r �setType� s z#FirewallClientIPSetSettings.setTypec C s
| j d S r[ rc rI r r r �
getOptions� s z&FirewallClientIPSetSettings.getOptionsc C s || j d< d S r[ rc )rB �optionsr r r �
setOptions� s z&FirewallClientIPSetSettings.setOptionsc C sP || j d vs | j d | |kr0|| j d |< n ttj|rFd||f n|��d S )Nrq z'%s=%s'r� �rB rN rO r r r � addOption� s ��z%FirewallClientIPSetSettings.addOptionc C s, || j d v r | j d |= n ttj|��d S r[ r� )rB rN r r r � removeOption� s z(FirewallClientIPSetSettings.removeOptionc C s || j d v o | j d | |kS r[ rc r� r r r � queryOption� s z'FirewallClientIPSetSettings.queryOptionc C s
| j d S rv rc rI r r r �
getEntries� s z&FirewallClientIPSetSettings.getEntriesc C s@ d| j d v r*| j d d dkr*ttj��t|� || j d< d S �N�timeoutrq �0rw )r9 r r
�IPSET_WITH_TIMEOUTr �rB �entriesr r r �
setEntries� s �
z&FirewallClientIPSetSettings.setEntriesc C sr d| j d v r*| j d d dkr*ttj��t|�}|| j d vrbt|| j d � | j d �|� n ttj|��d S r� )r9 r r
r� r
r r| r} �rB �entryr r r �addEntry� s �
z$FirewallClientIPSetSettings.addEntryc C sb d| j d v r*| j d d dkr*ttj��t|�}|| j d v rR| j d �|� n ttj|��d S r� )r9 r r
r� r
r� r� r� r r r � removeEntry� s �
z'FirewallClientIPSetSettings.removeEntryc C s@ d| j d v r*| j d d dkr*ttj��t|�}|| j d v S r� )r9 r r
r� r
r� r r r �
queryEntry s �
z&FirewallClientIPSetSettings.queryEntry)N)r� r� r� r# rE rJ rd rf ri rk rn rp r| r} r~ r� r� r� r� r� r� r� r� r� r r r r r{ � sP
r{ c @ s� e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zed'd(� �Zd)S )*�FirewallClientConfigIPSetc C sL || _ || _| j �tjj|�| _tj| jtjjd�| _ tj| jdd�| _
d S r� ) r r r r r r r r �DBUS_INTERFACE_CONFIG_IPSET�fw_ipsetr r r r r rE s ��z"FirewallClientConfigIPSet.__init__c C s t | j�tjj|��S rQ )r r r
r r r� r r r r r s �z&FirewallClientConfigIPSet.get_propertyc C s t | j�tjj��S rQ )r r r r r r� rI r r r r # s �z(FirewallClientConfigIPSet.get_propertiesc C s | j �tjj||� d S rQ )r r r r r� r r r r r ( s �z&FirewallClientConfigIPSet.set_propertyc C s t tt| j�� ���S rQ )r{ r= r r� r rI r r r r - s �z%FirewallClientConfigIPSet.getSettingsc C s | j �t|j�� d S rQ )r� r �tupler9 r^ r r r r 2 s z FirewallClientConfigIPSet.updatec C s | j �� d S rQ )r� r rI r r r r 6 s z&FirewallClientConfigIPSet.loadDefaultsc C s | j �� d S rQ )r� r� rI r r r r� : s z FirewallClientConfigIPSet.removec C s | j �|� d S rQ )r� r r r r r r > s z FirewallClientConfigIPSet.renamec C s
| j �� S rQ )r� rd rI r r r rd D s z$FirewallClientConfigIPSet.getVersionc C s | j �|� d S rQ )r� rf re r r r rf H s z$FirewallClientConfigIPSet.setVersionc C s
| j �� S rQ )r� ri rI r r r ri N s z"FirewallClientConfigIPSet.getShortc C s | j �|� d S rQ )r� rk rj r r r rk R s z"FirewallClientConfigIPSet.setShortc C s
| j �� S rQ )r� rn rI r r r rn X s z(FirewallClientConfigIPSet.getDescriptionc C s | j �|� d S rQ )r� rp ro r r r rp \ s z(FirewallClientConfigIPSet.setDescriptionc C s
| j �� S rQ �r� r� rI r r r r� b s z$FirewallClientConfigIPSet.getEntriesc C s | j �|� d S rQ �r� r� r� r r r r� f s z$FirewallClientConfigIPSet.setEntriesc C s | j �|� d S rQ �r� r� r� r r r r� j s z"FirewallClientConfigIPSet.addEntryc C s | j �|� d S rQ �r� r� r� r r r r� n s z%FirewallClientConfigIPSet.removeEntryc C s | j �|�S rQ )r� r� r� r r r r� r s z$FirewallClientConfigIPSet.queryEntryN)r� r� r� r# rE r r r r r r r� r rd rf ri rk rn rp r� r� r� r� r� r r r r r� sP
r� c @ s� e Zd Zed$dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �ZdS )%� FirewallClientHelperSettingsNc C s" |r || _ ndddddg g| _ d S r# rc r^ r r r rE y s z%FirewallClientHelperSettings.__init__c C s d| j | jf S rF rG rI r r r rJ � s z%FirewallClientHelperSettings.__repr__c C s
| j d S rb rc rI r r r rd � s z'FirewallClientHelperSettings.getVersionc C s || j d< d S rb rc re r r r rf � s z'FirewallClientHelperSettings.setVersionc C s
| j d S rg rc rI r r r ri � s z%FirewallClientHelperSettings.getShortc C s || j d< d S rg rc rj r r r rk � s z%FirewallClientHelperSettings.setShortc C s
| j d S rl rc rI r r r rn � s z+FirewallClientHelperSettings.getDescriptionc C s || j d< d S rl rc ro r r r rp � s z+FirewallClientHelperSettings.setDescriptionc C s
| j d S rW rc rI r r r � getFamily� s z&FirewallClientHelperSettings.getFamilyc C s |d u rd| j d< || j d< d S )Nr% rX rc �rB �ipvr r r � setFamily� s
z&FirewallClientHelperSettings.setFamilyc C s
| j d S r[ rc rI r r r � getModule� s z&FirewallClientHelperSettings.getModulec C s || j d< d S r[ rc r_ r r r � setModule� s z&FirewallClientHelperSettings.setModulec C s
| j d S rv rc rI r r r r� � s z%FirewallClientHelperSettings.getPortsc C s || j d< d S rv rc r� r r r r� � s z%FirewallClientHelperSettings.setPortsc C s@ ||f| j d vr(| j d �||f� nttjd||f ��d S rg r{ r� r r r r� � s
�z$FirewallClientHelperSettings.addPortc C s@ ||f| j d v r(| j d �||f� nttjd||f ��d S rg r� r� r r r r� � s
�z'FirewallClientHelperSettings.removePortc C s ||f| j d v S rv rc r� r r r r� � s z&FirewallClientHelperSettings.queryPort)N)r� r� r� r# rE rJ rd rf ri rk rn rp r� r� r� r� r� r� r� r� r� r r r r r� x sD
r� c @ s, e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zed'd(� �Zed)d*� �Zed+d,� �Zed-d.� �Zed/d0� �Zd1S )2�FirewallClientConfigHelperc C sL || _ || _| j �tjj|�| _tj| jtjjd�| _ tj| jdd�| _
d S r� ) r r r r r r r r � DBUS_INTERFACE_CONFIG_HELPER� fw_helperr r r r r rE � s ��z#FirewallClientConfigHelper.__init__c C s t | j�tjj|��S rQ )r r r
r r r� r r r r r � s �z'FirewallClientConfigHelper.get_propertyc C s t | j�tjj��S rQ )r r r r r r� rI r r r r � s �z)FirewallClientConfigHelper.get_propertiesc C s | j �tjj||� d S rQ )r r r r r� r r r r r � s �z'FirewallClientConfigHelper.set_propertyc C s t tt| j�� ���S rQ )r� r= r r� r rI r r r r � s �z&FirewallClientConfigHelper.getSettingsc C s | j �t|j�� d S rQ )r� r r� r9 r^ r r r r � s z!FirewallClientConfigHelper.updatec C s | j �� d S rQ )r� r rI r r r r � s z'FirewallClientConfigHelper.loadDefaultsc C s | j �� d S rQ )r� r� rI r r r r� � s z!FirewallClientConfigHelper.removec C s | j �|� d S rQ )r� r r r r r r � s z!FirewallClientConfigHelper.renamec C s
| j �� S rQ )r� rd rI r r r rd � s z%FirewallClientConfigHelper.getVersionc C s | j �|� d S rQ )r� rf re r r r rf � s z%FirewallClientConfigHelper.setVersionc C s
| j �� S rQ )r� ri rI r r r ri � s z#FirewallClientConfigHelper.getShortc C s | j �|� d S rQ )r� rk rj r r r rk s z#FirewallClientConfigHelper.setShortc C s
| j �� S rQ )r� rn rI r r r rn s z)FirewallClientConfigHelper.getDescriptionc C s | j �|� d S rQ )r� rp ro r r r rp
s z)FirewallClientConfigHelper.setDescriptionc C s
| j �� S rQ )r� r� rI r r r r� s z#FirewallClientConfigHelper.getPortsc C s | j �|� d S rQ )r� r� r� r r r r� s z#FirewallClientConfigHelper.setPortsc C s | j �||� d S rQ )r� r� r� r r r r� s z"FirewallClientConfigHelper.addPortc C s | j �||� d S rQ )r� r� r� r r r r� s z%FirewallClientConfigHelper.removePortc C s | j �||�S rQ )r� r� r� r r r r� # s z$FirewallClientConfigHelper.queryPortc C s
| j �� S rQ )r� r� rI r r r r� ) s z$FirewallClientConfigHelper.getFamilyc C s$ |d u r| j �d� | j �|� d S r# )r� r� r� r r r r� - s z$FirewallClientConfigHelper.setFamilyc C s
| j �� S rQ )r� r� rI r r r r� 5 s z$FirewallClientConfigHelper.getModulec C s | j �|� d S rQ )r� r� r_ r r r r� 9 s z$FirewallClientConfigHelper.setModuleN) r� r� r� r# rE r r r r r r r� r rd rf ri rk rn rp r� r� r� r� r� r� r� r� r� r r r r r� � s`
r� c @ s6 e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zed'd(� �Zed)d*� �Zed+d,� �Zed-d.� �Zed/d0� �Zed1d2� �Z ed3d4� �Z ed5d6� �Z ed7d8� �Z ed9d:� �Z ed;d<� �Z!ed=d>� �Z"ed?d@� �Z#edAdB� �Z$edCdD� �Z%edEdF� �Z&edGdH� �Z'edIdJ� �Z(edKdL� �Z)edMdN� �Z*ed^dPdQ��Z+edRdS� �Z,edTdU� �Z-edVdW� �Z.edXdY� �Z/edZd[� �Z0ed\d]� �Z1dOS )_�FirewallClientConfigServicec C sL || _ || _| j �tjj|�| _tj| jtjjd�| _ tj| jdd�| _
d S r� ) r r r r r r r r � DBUS_INTERFACE_CONFIG_SERVICE�
fw_servicer r r r r rE @ s ��z$FirewallClientConfigService.__init__c C s t | j�tjj|��S rQ )r r r
r r r� r r r r r K s �z(FirewallClientConfigService.get_propertyc C s t | j�tjj��S rQ )r r r r r r� rI r r r r P s �z*FirewallClientConfigService.get_propertiesc C s | j �tjj||� d S rQ )r r r r r� r r r r r U s �z(FirewallClientConfigService.set_propertyc C s t t| j�� ��S rQ )rQ r r� r rI r r r r Z s �z'FirewallClientConfigService.getSettingsc C s | j �|�� � d S rQ )r� r r\ r^ r r r r _ s z"FirewallClientConfigService.updatec C s | j �� d S rQ )r� r rI r r r r c s z(FirewallClientConfigService.loadDefaultsc C s | j �� d S rQ )r� r� rI r r r r� g s z"FirewallClientConfigService.removec C s | j �|� d S rQ )r� r r r r r r k s z"FirewallClientConfigService.renamec C s
| j �� S rQ )r� rd rI r r r rd q s z&FirewallClientConfigService.getVersionc C s | j �|� d S rQ )r� rf re r r r rf u s z&FirewallClientConfigService.setVersionc C s
| j �� S rQ )r� ri rI r r r ri { s z$FirewallClientConfigService.getShortc C s | j �|� d S rQ )r� rk rj r r r rk s z$FirewallClientConfigService.setShortc C s
| j �� S rQ )r� rn rI r r r rn � s z*FirewallClientConfigService.getDescriptionc C s | j �|� d S rQ )r� rp ro r r r rp � s z*FirewallClientConfigService.setDescriptionc C s
| j �� S rQ )r� r� rI r r r r� � s z$FirewallClientConfigService.getPortsc C s | j �|� d S rQ )r� r� r� r r r r� � s z$FirewallClientConfigService.setPortsc C s | j �||� d S rQ )r� r� r� r r r r� � s z#FirewallClientConfigService.addPortc C s | j �||� d S rQ )r� r� r� r r r r� � s z&FirewallClientConfigService.removePortc C s | j �||�S rQ )r� r� r� r r r r� � s z%FirewallClientConfigService.queryPortc C s
| j �� S rQ )r� r� rI r r r r� � s z(FirewallClientConfigService.getProtocolsc C s | j �|� d S rQ )r� r� r� r r r r� � s z(FirewallClientConfigService.setProtocolsc C s | j �|� d S rQ )r� r� r� r r r r� � s z'FirewallClientConfigService.addProtocolc C s | j �|� d S rQ )r� r� r� r r r r� � s z*FirewallClientConfigService.removeProtocolc C s | j �|�S rQ )r� r� r� r r r r� � s z)FirewallClientConfigService.queryProtocolc C s
| j �� S rQ )r� r� rI r r r r� � s z*FirewallClientConfigService.getSourcePortsc C s | j �|� d S rQ )r� r� r� r r r r� � s z*FirewallClientConfigService.setSourcePortsc C s | j �||� d S rQ )r� r� r� r r r r� � s z)FirewallClientConfigService.addSourcePortc C s | j �||� d S rQ )r� r� r� r r r r� � s z,FirewallClientConfigService.removeSourcePortc C s | j �||�S rQ )r� r� r� r r r r� � s z+FirewallClientConfigService.querySourcePortc C s
| j �� S rQ )r� r\ rI r r r r\ � s z&FirewallClientConfigService.getModulesc C s | j �|� d S rQ )r� r^ r] r r r r^ � s z&FirewallClientConfigService.setModulesc C s | j �|� d S rQ )r� ra r_ r r r ra � s z%FirewallClientConfigService.addModulec C s | j �|� d S rQ )r� rb r_ r r r rb � s z(FirewallClientConfigService.removeModulec C s | j �|�S rQ )r� rc r_ r r r rc � s z'FirewallClientConfigService.queryModulec C s
| j �� S rQ )r� rd rI r r r rd � s z+FirewallClientConfigService.getDestinationsc C s | j �|� d S rQ )r� rf re r r r rf � s z+FirewallClientConfigService.setDestinationsc C s | j �|�S rQ )r� �getDestination�rB rS r r r r� � s z*FirewallClientConfigService.getDestinationc C s | j �||� d S rQ )r� rj �rB rS ri r r r rj � s z*FirewallClientConfigService.setDestinationNc C s: |d ur*| � |�|kr*ttjd||f ��| j�|� d S )Nr� )r� r r
r� r� rk r� r r r rk � s
�z-FirewallClientConfigService.removeDestinationc C s | j �||�S rQ )r� rl r� r r r rl � s z,FirewallClientConfigService.queryDestinationc C s
| j �� S rQ )r� rm rI r r r rm s z'FirewallClientConfigService.getIncludesc C s | j �|� d S rQ )r� ro rn r r r ro s z'FirewallClientConfigService.setIncludesc C s | j �|� d S rQ )r� rq rp r r r rq s z&FirewallClientConfigService.addIncludec C s | j �|� d S rQ )r� rr rp r r r rr s z)FirewallClientConfigService.removeIncludec C s | j �|�S rQ )r� rs rp r r r rs s z(FirewallClientConfigService.queryInclude)N)2r� r� r� r# rE r r r r r r r� r rd rf ri rk rn rp r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r\ r^ ra rb rc rd rf r� rj rk rl rm ro rq rr rs r r r r r� ? s�
r� c @ s� e Zd Zed dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �ZdS ) � FirewallClientIcmpTypeSettingsNc C s |r || _ ndddg g| _ d S r# rc r^ r r r rE s z'FirewallClientIcmpTypeSettings.__init__c C s d| j | jf S rF rG rI r r r rJ # s z'FirewallClientIcmpTypeSettings.__repr__c C s
| j d S rb rc rI r r r rd ' s z)FirewallClientIcmpTypeSettings.getVersionc C s || j d< d S rb rc re r r r rf * s z)FirewallClientIcmpTypeSettings.setVersionc C s
| j d S rg rc rI r r r ri . s z'FirewallClientIcmpTypeSettings.getShortc C s || j d< d S rg rc rj r r r rk 1 s z'FirewallClientIcmpTypeSettings.setShortc C s
| j d S rl rc rI r r r rn 5 s z-FirewallClientIcmpTypeSettings.getDescriptionc C s || j d< d S rl rc ro r r r rp 8 s z-FirewallClientIcmpTypeSettings.setDescriptionc C s
| j d S rW rc rI r r r rd < s z.FirewallClientIcmpTypeSettings.getDestinationsc C s || j d< d S rW rc re r r r rf ? s z.FirewallClientIcmpTypeSettings.setDestinationsc C sH | j d sttj|��n,|| j d vr8| j d �|� n ttj|��d S rW )r9 r r
r} r| r� r r r �addDestinationB s
z-FirewallClientIcmpTypeSettings.addDestinationc C s\ || j d v r | j d �|� n8| j d sL| �ttddg�t|g� �� n ttj|��d S )NrX Zipv4Zipv6)r9 r� rf r= �setr r
r� r� r r r rk K s
�
z0FirewallClientIcmpTypeSettings.removeDestinationc C s | j d p|| j d v S rW rc r� r r r rl V s �z/FirewallClientIcmpTypeSettings.queryDestination)N)r� r� r� r# rE rJ rd rf ri rk rn rp rd rf r� rk rl r r r r r� s4
r� c @ s� e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zed'd(� �Zd)S )*� FirewallClientConfigIcmpTypec C sL || _ || _| j �tjj|�| _tj| jtjjd�| _ tj| jdd�| _
d S r� ) r r r r r r r r � DBUS_INTERFACE_CONFIG_ICMPTYPE� fw_icmptyper r r r r rE _ s ��z%FirewallClientConfigIcmpType.__init__c C s t | j�tjj|��S rQ )r r r
r r r� r r r r r j s �z)FirewallClientConfigIcmpType.get_propertyc C s t | j�tjj��S rQ )r r r r r r� rI r r r r o s �z+FirewallClientConfigIcmpType.get_propertiesc C s | j �tjj||� d S rQ )r r r r r� r r r r r t s �z)FirewallClientConfigIcmpType.set_propertyc C s t tt| j�� ���S rQ )r� r= r r� r rI r r r r y s �z(FirewallClientConfigIcmpType.getSettingsc C s | j �t|j�� d S rQ )r� r r� r9 r^ r r r r ~ s z#FirewallClientConfigIcmpType.updatec C s | j �� d S rQ )r� r rI r r r r � s z)FirewallClientConfigIcmpType.loadDefaultsc C s | j �� d S rQ )r� r� rI r r r r� � s z#FirewallClientConfigIcmpType.removec C s | j �|� d S rQ )r� r r r r r r � s z#FirewallClientConfigIcmpType.renamec C s
| j �� S rQ )r� rd rI r r r rd � s z'FirewallClientConfigIcmpType.getVersionc C s | j �|� d S rQ )r� rf re r r r rf � s z'FirewallClientConfigIcmpType.setVersionc C s
| j �� S rQ )r� ri rI r r r ri � s z%FirewallClientConfigIcmpType.getShortc C s | j �|� d S rQ )r� rk rj r r r rk � s z%FirewallClientConfigIcmpType.setShortc C s
| j �� S rQ )r� rn rI r r r rn � s z+FirewallClientConfigIcmpType.getDescriptionc C s | j �|� d S rQ )r� rp ro r r r rp � s z+FirewallClientConfigIcmpType.setDescriptionc C s
| j �� S rQ )r� rd rI r r r rd � s z,FirewallClientConfigIcmpType.getDestinationsc C s | j �|� d S rQ )r� rf re r r r rf � s z,FirewallClientConfigIcmpType.setDestinationsc C s | j �|� d S rQ )r� r� r� r r r r� � s z+FirewallClientConfigIcmpType.addDestinationc C s | j �|� d S rQ )r� rk r� r r r rk � s z.FirewallClientConfigIcmpType.removeDestinationc C s | j �|�S rQ )r� rl r� r r r rl � s z-FirewallClientConfigIcmpType.queryDestinationN)r� r� r� r# rE r r r r r r r� r rd rf ri rk rn rp rd rf r� rk rl r r r r r� ^ sP
r� c @ s e Zd Zed.dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �Zed*d+� �Zed,d-� �ZdS )/�'FirewallClientPoliciesLockdownWhitelistNc C s |r || _ ng g g g g| _ d S rQ rc r^ r r r rE � s z0FirewallClientPoliciesLockdownWhitelist.__init__c C s d| j | jf S rF rG rI r r r rJ � s z0FirewallClientPoliciesLockdownWhitelist.__repr__c C s
| j d S rb rc rI r r r � getCommands� s z3FirewallClientPoliciesLockdownWhitelist.getCommandsc C s || j d< d S rb rc )rB Zcommandsr r r � setCommands� s z3FirewallClientPoliciesLockdownWhitelist.setCommandsc C s" || j d vr | j d �|� d S rb �r9 r| �rB Zcommandr r r �
addCommand� s z2FirewallClientPoliciesLockdownWhitelist.addCommandc C s" || j d v r | j d �|� d S rb �r9 r� r� r r r �
removeCommand� s z5FirewallClientPoliciesLockdownWhitelist.removeCommandc C s || j d v S rb rc r� r r r � queryCommand� s z4FirewallClientPoliciesLockdownWhitelist.queryCommandc C s
| j d S rg rc rI r r r � getContexts� s z3FirewallClientPoliciesLockdownWhitelist.getContextsc C s || j d< d S rg rc )rB Zcontextsr r r � setContexts� s z3FirewallClientPoliciesLockdownWhitelist.setContextsc C s" || j d vr | j d �|� d S rg r� �rB �contextr r r �
addContext� s z2FirewallClientPoliciesLockdownWhitelist.addContextc C s" || j d v r | j d �|� d S rg r� r� r r r �
removeContext� s z5FirewallClientPoliciesLockdownWhitelist.removeContextc C s || j d v S rg rc r� r r r � queryContext� s z4FirewallClientPoliciesLockdownWhitelist.queryContextc C s
| j d S rl rc rI r r r �getUsers� s z0FirewallClientPoliciesLockdownWhitelist.getUsersc C s || j d< d S rl rc )rB Zusersr r r �setUsers� s z0FirewallClientPoliciesLockdownWhitelist.setUsersc C s" || j d vr | j d �|� d S rl r� �rB �userr r r �addUser� s z/FirewallClientPoliciesLockdownWhitelist.addUserc C s" || j d v r | j d �|� d S rl r� r� r r r �
removeUser� s z2FirewallClientPoliciesLockdownWhitelist.removeUserc C s || j d v S rl rc r� r r r � queryUser s z1FirewallClientPoliciesLockdownWhitelist.queryUserc C s
| j d S rW rc rI r r r �getUids s z/FirewallClientPoliciesLockdownWhitelist.getUidsc C s || j d< d S rW rc �rB Zuidsr r r �setUids
s z/FirewallClientPoliciesLockdownWhitelist.setUidsc C s" || j d vr | j d �|� d S rW r� �rB �uidr r r �addUid
s z.FirewallClientPoliciesLockdownWhitelist.addUidc C s" || j d v r | j d �|� d S rW r� r� r r r � removeUid s z1FirewallClientPoliciesLockdownWhitelist.removeUidc C s || j d v S rW rc r� r r r �queryUid s z0FirewallClientPoliciesLockdownWhitelist.queryUid)N)r� r� r� r# rE rJ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r� � sX
r� c @ s� e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zed'd(� �Zd)S )*� FirewallClientConfigPoliciesc C s8 || _ | j �tjjtjj�| _tj| jtjjd�| _ d S �Nr )
r r r r r �DBUS_PATH_CONFIGr r � DBUS_INTERFACE_CONFIG_POLICIES� fw_policies�rB r r r r rE s ��z%FirewallClientConfigPolicies.__init__c C s t tt| j�� ���S rQ )r� r= r r� �getLockdownWhitelistrI r r r r� % s �z1FirewallClientConfigPolicies.getLockdownWhitelistc C s | j �t|j�� d S rQ )r� �setLockdownWhitelistr� r9 r^ r r r r� * s z1FirewallClientConfigPolicies.setLockdownWhitelistc C s | j �|� d S rQ �r� �addLockdownWhitelistCommandr� r r r r� 0 s z8FirewallClientConfigPolicies.addLockdownWhitelistCommandc C s | j �|� d S rQ �r� � removeLockdownWhitelistCommandr� r r r r� 4 s z;FirewallClientConfigPolicies.removeLockdownWhitelistCommandc C s t | j�|��S rQ �r r� � queryLockdownWhitelistCommandr� r r r r� 8 s z:FirewallClientConfigPolicies.queryLockdownWhitelistCommandc C s t | j�� �S rQ �r r� � getLockdownWhitelistCommandsrI r r r r� < s z9FirewallClientConfigPolicies.getLockdownWhitelistCommandsc C s | j �|� d S rQ �r� �addLockdownWhitelistContextr� r r r r� B s z8FirewallClientConfigPolicies.addLockdownWhitelistContextc C s | j �|� d S rQ �r� � removeLockdownWhitelistContextr� r r r r� F s z;FirewallClientConfigPolicies.removeLockdownWhitelistContextc C s t | j�|��S rQ �r r� � queryLockdownWhitelistContextr� r r r r� J s z:FirewallClientConfigPolicies.queryLockdownWhitelistContextc C s t | j�� �S rQ �r r� � getLockdownWhitelistContextsrI r r r r� N s z9FirewallClientConfigPolicies.getLockdownWhitelistContextsc C s | j �|� d S rQ �r� �addLockdownWhitelistUserr� r r r r� T s z5FirewallClientConfigPolicies.addLockdownWhitelistUserc C s | j �|� d S rQ �r� �removeLockdownWhitelistUserr� r r r r� X s z8FirewallClientConfigPolicies.removeLockdownWhitelistUserc C s t | j�|��S rQ �r r� �queryLockdownWhitelistUserr� r r r r� \ s z7FirewallClientConfigPolicies.queryLockdownWhitelistUserc C s t | j�� �S rQ �r r� �getLockdownWhitelistUsersrI r r r r� ` s z6FirewallClientConfigPolicies.getLockdownWhitelistUsersc C s t | j�� �S rQ �r r� �getLockdownWhitelistUidsrI r r r r� f s z5FirewallClientConfigPolicies.getLockdownWhitelistUidsc C s | j �|� d S rQ )r� �setLockdownWhitelistUidsr� r r r r� j s z5FirewallClientConfigPolicies.setLockdownWhitelistUidsc C s | j �|� d S rQ �r� �addLockdownWhitelistUidr� r r r r� n s z4FirewallClientConfigPolicies.addLockdownWhitelistUidc C s | j �|� d S rQ �r� �removeLockdownWhitelistUidr� r r r r� r s z7FirewallClientConfigPolicies.removeLockdownWhitelistUidc C s t | j�|��S rQ �r r� �queryLockdownWhitelistUidr� r r r r� v s z6FirewallClientConfigPolicies.queryLockdownWhitelistUidN)r� r� r� r# rE r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r� sP
r� c @ s e Zd Zed.dd��Zedd� �Zedd� �Zedd � �Zed
d � �Zed d
� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �Zed*d+� �Zed,d-� �ZdS )/�FirewallClientDirectNc C s |r || _ n g g g g| _ d S rQ rc r^ r r r rE } s z FirewallClientDirect.__init__c C s d| j | jf S rF rG rI r r r rJ � s z FirewallClientDirect.__repr__c C s
| j d S rb rc rI r r r � getAllChains� s z!FirewallClientDirect.getAllChainsc s � �fdd�| j d D �S )Nc s, g | ]$}|d � kr|d �kr|d �qS )r rh rm r �r� r� �r� �tabler r r� � s �z2FirewallClientDirect.getChains.<locals>.<listcomp>r rc �rB r� r� r r� r � getChains� s z FirewallClientDirect.getChainsc C s || j d< d S rb rc )rB Zchainsr r r � setAllChains� s z!FirewallClientDirect.setAllChainsc C s, |||f}|| j d vr(| j d �|� d S rb r� �rB r� r� �chain�idxr r r �addChain� s
z FirewallClientDirect.addChainc C s, |||f}|| j d v r(| j d �|� d S rb r� r r r r � removeChain� s
z FirewallClientDirect.removeChainc C s |||f}|| j d v S rb rc r r r r �
queryChain� s
z FirewallClientDirect.queryChainc C s
| j d S rg rc rI r r r � getAllRules� s z FirewallClientDirect.getAllRulesc s � ��fdd�| j d D �S )Nc s< g | ]4}|d �kr|d �kr|d � kr|dd� �qS )r rh rm rX Nr r� �r r� r� r r r� � s �z1FirewallClientDirect.getRules.<locals>.<listcomp>rh rc �rB r� r� r r r r �getRules� s z FirewallClientDirect.getRulesc C s || j d< d S rg rc r� r r r � setAllRules� s z FirewallClientDirect.setAllRulesc C s0 |||||f}|| j d vr,| j d �|� d S rg r� �rB r� r� r r* r r r r r �addRule� s z FirewallClientDirect.addRulec C s0 |||||f}|| j d v r,| j d �|� d S rg r� r r r r �
removeRule� s z FirewallClientDirect.removeRulec C sL t | jd �D ]8}|d |kr|d |kr|d |kr| jd �|� qd S )Nrh r rm )r= r9 r� r r r r � removeRules� s $z FirewallClientDirect.removeRulesc C s |||||f}|| j d v S rg rc r r r r � queryRule� s z FirewallClientDirect.queryRulec C s
| j d S rl rc rI r r r �getAllPassthroughs� s z'FirewallClientDirect.getAllPassthroughsc C s || j d< d S rl rc )rB Z passthroughsr r r �setAllPassthroughs� s z'FirewallClientDirect.setAllPassthroughsc C s g | j d< d S rl rc rI r r r �removeAllPassthroughs� s z*FirewallClientDirect.removeAllPassthroughsc s � fdd�| j d D �S )Nc s g | ]}|d � kr|d �qS )r rh r r� �r� r r r� � s �z8FirewallClientDirect.getPassthroughs.<locals>.<listcomp>rm rc r� r r r �getPassthroughs� s z$FirewallClientDirect.getPassthroughsc C s* ||f}|| j d vr&| j d �|� d S rl r� �rB r� r r r r r �addPassthrough� s z#FirewallClientDirect.addPassthroughc C s* ||f}|| j d v r&| j d �|� d S rl r� r r r r �removePassthrough� s z&FirewallClientDirect.removePassthroughc C s ||f}|| j d v S rl rc r r r r �queryPassthrough� s z%FirewallClientDirect.queryPassthrough)N)r� r� r� r# rE rJ r� r� r� r r r r r r
r r
r r r r r r r r r r r r r r� | sX
r� c @ s� e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zd'S )(�FirewallClientConfigDirectc C s8 || _ | j �tjjtjj�| _tj| jtjjd�| _ d S r� )
r r r r r r� r r � DBUS_INTERFACE_CONFIG_DIRECT� fw_directr� r r r rE � s ��z#FirewallClientConfigDirect.__init__c C s t tt| j�� ���S rQ )r� r= r r r rI r r r r � s �z&FirewallClientConfigDirect.getSettingsc C s | j �t|j�� d S rQ )r r r� r9 r^ r r r r � s z!FirewallClientConfigDirect.updatec C s | j �|||� d S rQ �r r r r r r r � s z#FirewallClientConfigDirect.addChainc C s | j �|||� d S rQ �r r r r r r r � s z&FirewallClientConfigDirect.removeChainc C s t | j�|||��S rQ �r r r r r r r r � s z%FirewallClientConfigDirect.queryChainc C s t | j�||��S rQ �r r r� r� r r r r� � s z$FirewallClientConfigDirect.getChainsc C s t | j�� �S rQ �r r r� rI r r r r�
s z'FirewallClientConfigDirect.getAllChainsc C s | j �|||||� d S rQ �r r �rB r� r� r r* r r r r r
s z"FirewallClientConfigDirect.addRulec C s | j �|||||� d S rQ �r r
r" r r r r
s z%FirewallClientConfigDirect.removeRulec C s | j �|||� d S rQ �r r r r r r r
s z&FirewallClientConfigDirect.removeRulesc C s t | j�|||||��S rQ �r r r r" r r r r
s z$FirewallClientConfigDirect.queryRulec C s t | j�|||��S rQ �r r r r r r r r
s z#FirewallClientConfigDirect.getRulesc C s t | j�� �S rQ �r r r rI r r r r
s z&FirewallClientConfigDirect.getAllRulesc C s | j �||� d S rQ �r r �rB r� r r r r r #
s z)FirewallClientConfigDirect.addPassthroughc C s | j �||� d S rQ �r r r) r r r r '
s z,FirewallClientConfigDirect.removePassthroughc C s t | j�||��S rQ �r r r r) r r r r +
s z+FirewallClientConfigDirect.queryPassthroughc C s t | j�|��S rQ �r r r r� r r r r /
s z*FirewallClientConfigDirect.getPassthroughsc C s t | j�� �S rQ �r r r rI r r r r 3
s z-FirewallClientConfigDirect.getAllPassthroughsN)r� r� r� r# rE r r r r r r� r� r r
r r r r r r r r r r r r r r � sL
r c @ s� e Zd Zedd� �Zedd� �Zedd� �Zedd� �Zed d
� �Zed d � �Z ed
d� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zedd� �Zedd � �Zed d � �Zed d � �Zed!d"� �Zed#d$� �Zed%d&� �Zed'd(� �Zed)d*� �Zed+d,� �Zed-d.� �Zed/d0� �Zed1d2� �Z ed3d4� �Z ed5d6� �Z ed7d8� �Z ed9d:� �Z ed;d<� �Z!ed=d>� �Z"ed?d@� �Z#edAdB� �Z$edCdD� �Z%edEdF� �Z&edGdH� �Z'edIdJ� �Z(edKdL� �Z)dMS )N�FirewallClientConfigc C sb || _ | j �tjjtjj�| _tj| jtjjd�| _ tj| jdd�| _
t | j �| _ t
| j �| _d S r� )r r r r r r� r r �DBUS_INTERFACE_CONFIG� fw_configr r� � _policiesr �_directr� r r r rE :
s ��� z FirewallClientConfig.__init__c C s t | j�tjj|��S rQ )r r r
r r r/ r r r r r I
s �z!FirewallClientConfig.get_propertyc C s t | j�tjj��S rQ )r r r r r r/ rI r r r r N
s �z#FirewallClientConfig.get_propertiesc C s | j �tjj||� d S rQ )r r r r r/ r r r r r S
s z!FirewallClientConfig.set_propertyc C s t | j�� �S rQ )r r0 �
getIPSetNamesrI r r r r3 Y
s z"FirewallClientConfig.getIPSetNamesc C s t | j�� �S rQ )r r0 �
listIPSetsrI r r r r4 ]
s z FirewallClientConfig.listIPSetsc C s t | j|�S rQ )r� r �rB r r r r �getIPSeta
s z FirewallClientConfig.getIPSetc C s t | j�|��}t| j|�S rQ )r r0 �getIPSetByNamer� r �rB r r r r r r7 e
s z#FirewallClientConfig.getIPSetByNamec C s> t |t�r | j�|t|j��}n| j�|t|��}t| j|�S rQ )r< r{ r0 �addIPSetr� r9 r� r �rB r r9 r r r r r9 j
s
z FirewallClientConfig.addIPSetc C s t | j�� �S rQ )r r0 � getZoneNamesrI r r r r; t
s z!FirewallClientConfig.getZoneNamesc C s t | j�� �S rQ )r r0 � listZonesrI r r r r< x
s z FirewallClientConfig.listZonesc C s t | j|�S rQ )r� r r5 r r r �getZone|
s z FirewallClientConfig.getZonec C s t | j�|��}t| j|�S rQ )r r0 �
getZoneByNamer� r r8 r r r r> �
s z"FirewallClientConfig.getZoneByNamec C s t | j�|��S rQ )r r0 �getZoneOfInterface)rB Zifacer r r r? �
s z'FirewallClientConfig.getZoneOfInterfacec C s t | j�|��S rQ )r r0 �getZoneOfSourcer� r r r r@ �
s z$FirewallClientConfig.getZoneOfSourcec C s^ t |t�r | j�||�� �}n4t |t�r8| j�||�}n| j�|t|d d� ��}t| j |�S r� )
r< r$ r0 ZaddZone2r\ r? �addZoner� r� r r: r r r rA �
s
z FirewallClientConfig.addZonec C s t | j�� �S rQ )r r0 �getPolicyNamesrI r r r rB �
s z#FirewallClientConfig.getPolicyNamesc C s t | j�� �S rQ )r r0 � listPoliciesrI r r r rC �
s z!FirewallClientConfig.listPoliciesc C s t | j|�S rQ )rN r r5 r r r � getPolicy�
s z FirewallClientConfig.getPolicyc C s t | j�|��}t| j|�S rQ )r r0 �getPolicyByNamerN r r8 r r r rE �
s z$FirewallClientConfig.getPolicyByNamec C s8 t |t�r | j�||�� �}n| j�||�}t| j|�S rQ )r< r' r0 � addPolicyr\ rN r r: r r r rF �
s
z FirewallClientConfig.addPolicyc C s t | j�� �S rQ )r r0 �getServiceNamesrI r r r rG �
s z$FirewallClientConfig.getServiceNamesc C s t | j�� �S rQ )r r0 � listServicesrI r r r rH �
s z!FirewallClientConfig.listServicesc C s t | j|�S rQ )r� r r5 r r r �
getService�
s z FirewallClientConfig.getServicec C s t | j�|��}t| j|�S rQ )r r0 �getServiceByNamer� r r8 r r r rJ �
s z%FirewallClientConfig.getServiceByNamec C s` t |t�r | j�||�� �}n6t|�tu r:| j�||�}n| j�|t|d d� ��}t | j
|�S r� ) r< rQ r0 Z addService2r\ rW r? r� r� r� r r: r r r r� �
s
z FirewallClientConfig.addServicec C s t | j�� �S rQ )r r0 �getIcmpTypeNamesrI r r r rK �
s z%FirewallClientConfig.getIcmpTypeNamesc C s t | j�� �S rQ )r r0 �
listIcmpTypesrI r r r rL �
s z"FirewallClientConfig.listIcmpTypesc C s t | j|�S rQ )r� r r5 r r r � getIcmpType�
s z FirewallClientConfig.getIcmpTypec C s t | j�|��}t| j|�S rQ )r r0 �getIcmpTypeByNamer� r r8 r r r rN �
s z&FirewallClientConfig.getIcmpTypeByNamec C s> t |t�r | j�|t|j��}n| j�|t|��}t| j|�S rQ )r< r� r0 � addIcmpTyper� r9 r� r r: r r r rO �
s
z FirewallClientConfig.addIcmpTypec C s | j S rQ )r1 rI r r r �policies�
s z FirewallClientConfig.policiesc C s | j S rQ )r2 rI r r r �direct�
s zFirewallClientConfig.directc C s t | j�� �S rQ )r r0 �getHelperNamesrI r r r rR �
s z#FirewallClientConfig.getHelperNamesc C s t | j�� �S rQ )r r0 � listHelpersrI r r r rS �
s z FirewallClientConfig.listHelpersc C s t | j|�S rQ )r� r r5 r r r � getHelper s z FirewallClientConfig.getHelperc C s t | j�|��}t| j|�S rQ )r r0 �getHelperByNamer� r r8 r r r rU s z$FirewallClientConfig.getHelperByNamec C s> t |t�r | j�|t|j��}n| j�|t|��}t| j|�S rQ )r< r� r0 rx r� r9 r� r r: r r r rx s
z FirewallClientConfig.addHelperN)*r� r� r� r# rE r r r r3 r4 r6 r7 r9 r; r< r= r> r? r@ rA rB rC rD rE rF rG rH rI rJ r� rK rL rM rN rO rP rQ rR rS rT rU rx r r r r r. 9
s�
r. c @ s� e Zd Ze�d dd��Zedd� �Zedd � �Zed
d � �Zed d
� �Zedd� �Z edd� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zedd� �Zed d � �Zed d � �Zed d!� �Zed"d#� �Zed$d%� �Zed&d'� �Zed(d)� �Zed*d+� �Zed,d-� �Zed.d/� �Zed0d1� �Zed2d3� �Zed4d5� �Z ed6d7� �Z ed8d9� �Z ed:d;� �Z ed<d=� �Z ed>d?� �Z!ed@dA� �Z"edBdC� �Z#edDdE� �Z$edFdG� �Z%edHdI� �Z&edJdK� �Z'edLdM� �Z(edNdO� �Z)edPdQ� �Z*edRdS� �Z+edTdU� �Z,edVdW� �Z-edXdY� �Z.edZd[� �Z/ed\d]� �Z0ed^d_� �Z1ed`da� �Z2edbdc� �Z3eddde� �Z4edfdg� �Z5edhdi� �Z6edjdk� �Z7edldm� �Z8edndo� �Z9edpdq� �Z:edrds� �Z;edtdu� �Z<edvdw� �Z=edxdy� �Z>edzd{� �Z?ed|d}� �Z@ed~d� �ZAed�d�� �ZBed�d�� �ZCed�d�� �ZDe�d d�d���ZEed�d�� �ZFed�d�� �ZGed�d�� �ZHe�d d�d���ZIed�d�� �ZJed�d�� �ZKed�d�� �ZLe�d d�d���ZMed�d�� �ZNed�d�� �ZOed�d�� �ZPe�d d�d���ZQed�d�� �ZRed�d�� �ZSed�d�� �ZTed�d�� �ZUed�d�� �ZVed�d�� �ZWe�d!d�d���ZXed�d�� �ZYed�d�� �ZZe�d"d�d���Z[ed�d�� �Z\ed�d�� �Z]ed�d�� �Z^e�d#d�d���Z_ed�d�� �Z`ed�d�� �Zaed�d�� �Zbe�d$d�dÄ�Zced�dń �Zded�dDŽ �Zeed�dɄ �Zfed�d˄ �Zged�d̈́ �Zhed�dτ �Zied�dф �Zjed�dӄ �Zked�dՄ �Zled�dׄ �Zmed�dل �Zned�dۄ �Zoed�d݄ �Zped�d߄ �Zqed�d� �Zred�d� �Zsed�d� �Zted�d� �Zued�d� �Zved�d� �Zwed�d� �Zxed�d� �Zyed�d� �Zzed�d� �Z{ed�d�� �Z|ed�d�� �Z}ed�d�� �Z~ed�d�� �Zed�d�� �Z�ed�d�� �Z�e�d �d� �Z�e�d�d� �Z�e�d�d� �Z�e�d�d� �Z�e�d�d � �Z�e�d
�d � �Z�e�d �d
� �Z�e�d�d� �Z�e�d�d� �Z�e�d�d� �Z�e�d�d� �Z�e�d�d� �Z�e�d�d� �Z�e�d�d� �Z�dS (% �FirewallClientNr Tc P C s� |s^t jjjdd� zt �� | _W qd t jjyZ } z tt j
|� � ��W Y d }~qdd }~0 0 n|| _| jj | j
ddtj jd� tj jtj jtj jtj jtj jtj jtj jtj jtj jtj jtj jtj jtj jtj j tj j fD ] }| jj | j |dddd � q�i | _ d
d d d
ddddddddddddddd d d d d d!d"d#d$d%d&d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdX�O| _ | �!� || _"|dYk�r�t#�$|| j%� n| �%� d S )ZNT)Zset_as_defaultZNameOwnerChangedzorg.freedesktop.DBus)Zhandler_functionZ signal_namer Zarg0r� �memberr )r Zinterface_keywordZmember_keywordZ path_keyword�connection-changed�connection-established�connection-lostZLogDeniedChangedZDefaultZoneChangedZPanicModeEnabledZPanicModeDisabledZReloadedZ ServiceAddedZServiceRemovedZ PortAddedZ PortRemovedZSourcePortAddedZSourcePortRemovedZ
ProtocolAddedZProtocolRemovedZMasqueradeAddedZMasqueradeRemovedZForwardPortAddedZForwardPortRemovedZIcmpBlockAddedZIcmpBlockRemovedZIcmpBlockInversionAddedZIcmpBlockInversionRemovedZ
RichRuleAddedZRichRuleRemovedZInterfaceAddedZInterfaceRemovedZZoneOfInterfaceChangedZ SourceAddedZ
SourceRemovedZZoneOfSourceChangedZ ZoneUpdatedZ
PolicyUpdatedZ
EntryAddedZ EntryRemovedZ
ChainAddedZ ChainRemovedZ RuleAddedZ RuleRemovedZPassthroughAddedZPassthroughRemovedzconfig:direct:UpdatedZLockdownEnabledZLockdownDisabledZ LockdownWhitelistCommandAddedZ LockdownWhitelistCommandRemovedZ LockdownWhitelistContextAddedZ LockdownWhitelistContextRemovedZLockdownWhitelistUidAddedZLockdownWhitelistUidRemovedZLockdownWhitelistUserAddedZ LockdownWhitelistUserRemovedz(config:policies:LockdownWhitelistUpdatedzconfig:IPSetAddedzconfig:IPSetUpdatedzconfig:IPSetRemovedzconfig:IPSetRenamedzconfig:ZoneAddedzconfig:ZoneUpdatedzconfig:ZoneRemovedzconfig:ZoneRenamedzconfig:PolicyAddedzconfig:PolicyUpdatedzconfig:PolicyRemovedzconfig:PolicyRenamedzconfig:ServiceAddedzconfig:ServiceUpdatedzconfig:ServiceRemovedzconfig:ServiceRenamedzconfig:IcmpTypeAddedzconfig:IcmpTypeUpdatedzconfig:IcmpTypeRemovedzconfig:IcmpTypeRenamedzconfig:HelperAddedzconfig:HelperUpdatedzconfig:HelperRemovedzconfig:HelperRenamed)OrX rY rZ zlog-denied-changedzdefault-zone-changedzpanic-mode-enabledzpanic-mode-disabledZreloadedz
service-addedzservice-removedz
port-addedz port-removedzsource-port-addedzsource-port-removedzprotocol-addedzprotocol-removedzmasquerade-addedzmasquerade-removedzforward-port-addedzforward-port-removedzicmp-block-addedzicmp-block-removedzicmp-block-inversion-addedz icmp-block-inversion-removedzrichrule-addedzrichrule-removedzinterface-addedzinterface-removedz zone-changedzzone-of-interface-changedz source-addedzsource-removedzzone-of-source-changedz zone-updatedzpolicy-updatedzipset-entry-addedzipset-entry-removedzdirect:chain-addedzdirect:chain-removedzdirect:rule-addedzdirect:rule-removedzdirect:passthrough-addedzdirect:passthrough-removedzconfig:direct:updatedzlockdown-enabledzlockdown-disabledz lockdown-whitelist-command-addedz"lockdown-whitelist-command-removedz lockdown-whitelist-context-addedz"lockdown-whitelist-context-removedz lockdown-whitelist-uid-addedz lockdown-whitelist-uid-removedz lockdown-whitelist-user-addedz lockdown-whitelist-user-removedz*config:policies:lockdown-whitelist-updatedzconfig:ipset-addedzconfig:ipset-updatedzconfig:ipset-removedzconfig:ipset-renamedzconfig:zone-addedzconfig:zone-updatedzconfig:zone-removedzconfig:zone-renamedzconfig:policy-addedzconfig:policy-updatedzconfig:policy-removedzconfig:policy-renamedzconfig:service-addedzconfig:service-updatedzconfig:service-removedzconfig:service-renamedzconfig:icmptype-addedzconfig:icmptype-updatedzconfig:icmptype-removedzconfig:icmptype-renamedzconfig:helper-addedzconfig:helper-updatedzconfig:helper-removedzconfig:helper-renamedr )&r ZmainloopZglibZ
DBusGMainLoopZ SystemBusr r r r r
Z
DBUS_ERRORr Zadd_signal_receiver�_dbus_connection_changedr r �DBUS_INTERFACE_IPSET�DBUS_INTERFACE_ZONE�DBUS_INTERFACE_POLICY�DBUS_INTERFACE_DIRECT�DBUS_INTERFACE_POLICIESr/ r� r rO r� r� r r� r� �_signal_receiver� _callback�
_callbacks�
_init_vars�quietr Ztimeout_add_seconds�_connection_established)rB r �waitre r r� r r r rE s� � ��
��Y
zFirewallClient.__init__c C s: d | _ d | _d | _d | _d | _d | _d | _d | _d| _d S )NF) �fwr� r
rP r� r r �_config� connectedrI r r r rd � s zFirewallClient._init_varsc C s t S rQ �r rI r r r �getExceptionHandler� s z"FirewallClient.getExceptionHandlerc C s |a d S rQ rk )rB Zhandlerr r r �setExceptionHandler� s z"FirewallClient.setExceptionHandlerc C s t S rQ �r rI r r r �getNotAuthorizedLoop� s z#FirewallClient.getNotAuthorizedLoopc C s |a d S rQ rn )rB �enabler r r �setNotAuthorizedLoop� s z#FirewallClient.setNotAuthorizedLoopc G s0 || j v r ||f| j| j | < n td| ��d S )NzUnknown callback name '%s')rc rb �
ValueError)rB r �callbackr r r r �connect� s
zFirewallClient.connectc C s* |t jjkrd S |r | �� n| �� d S rQ )r r r rf �_connection_lost)rB r Z old_ownerZ new_ownerr r r r[ � s
z'FirewallClient._dbus_connection_changedc
C sd z�| j �tjjtjj�| _tj| jtjjd�| _tj| jtjj d�| _
tj| jtjj d�| _ tj| jtjj
d�| _tj| jtjjd�| _tj| jtjjd�| _tj| jdd�| _W nv tjjy� } z"| js�td|�� � W Y d }~d S d }~0 t�y( } z | j�std|� W Y d }~d S d }~0 0 t| j �| _d| _ | j dtjjd� | j dtjjd� d S ) Nr r r r TrY �rW r� rX ) r r r r r Z DBUS_PATHr r rh r\ r� r] r
r^ rP r_ r r` r� r r r re �printr r r. ri rj ra )rB r r r r rf � sX ��
���
���
��z&FirewallClient._connection_establishedc C s0 | � � | jdtjjd� | jdtjjd� d S )NrZ rv rX )rd ra r r r rI r r r ru � s ��z FirewallClient._connection_lostc
O s� d|vsd|vrd S |d }|d }|� tjj�r:d| }|� tjj�rRd| }n�|� tjj�rjd| }n�|� tjj�r�d| }np|� tjj�r�d| }nX|� tjj�r�d| }n@|tjj kr�d | }n*|tjj
kr�d
| }n|tjj kr�d | }d }| j D ]2}| j | |kr�| j | | j
v r�| j
| j | }q�|d u �r>d S d d
� |D �}z(|d �rf|�|d � |d |� W n. t�y� } zt|� W Y d }~n
d }~0 0 d S )NrW r� z config:Zonez
config:Policyz config:IPSetzconfig:Servicezconfig:IcmpTypez
config:Helperzconfig:zconfig:policies:zconfig:direct:c S s g | ] }t |��qS r r )r� �argr r r r� % r� z3FirewallClient._signal_receiver.<locals>.<listcomp>rh r )�
startswithr r r rO r� r� r� r� r/ r� r rc rb �extendr rw ) rB r r �signalr� �cbrs Zcb_args�msgr r r ra � sJ
�
z FirewallClient._signal_receiverc C s | j S rQ )ri rI r r r r / s zFirewallClient.configc C s | j �� d S rQ )rh �reloadrI r r r r~ 3 s zFirewallClient.reloadc C s | j �� d S rQ )rh �resetToDefaultsrI r r r r 7 s z FirewallClient.resetToDefaultsc C s | j �� d S rQ )rh ZcompleteReloadrI r r r �complete_reload; s z FirewallClient.complete_reloadc C s | j �� d S rQ )rh �runtimeToPermanentrI r r r r� ? s z!FirewallClient.runtimeToPermanentc C s | j �� d S rQ )rh �checkPermanentConfigrI r r r r� C s z#FirewallClient.checkPermanentConfigc C s t | j�tjj|��S rQ )r r r
r r r r r r r r G s �zFirewallClient.get_propertyc C s t | j�tjj��S rQ )r r r r r r rI r r r r L s �z FirewallClient.get_propertiesc C s | j �tjj||� d S rQ )r r r r r r r r r r Q s zFirewallClient.set_propertyc C s | j �� d S rQ )rh �enablePanicModerI r r r r� W s z FirewallClient.enablePanicModec C s | j �� d S rQ )rh �disablePanicModerI r r r r� [ s z FirewallClient.disablePanicModec C s t | j�� �S rQ )r rh �queryPanicModerI r r r r� _ s z FirewallClient.queryPanicModec C s t t| j�|���S rQ )r$ r r
�getZoneSettings2�rB �zoner r r �getZoneSettingse s z FirewallClient.getZoneSettingsc C s t | j�� �S rQ )r r� � getIPSetsrI r r r r� i s zFirewallClient.getIPSetsc C s t tt| j�|����S rQ )r{ r= r r� �getIPSetSettings�rB �ipsetr r r r� m s
�z FirewallClient.getIPSetSettingsc C s | j �||� d S rQ r� �rB r� r� r r r r� r s zFirewallClient.addEntryc C s | j �|�S rQ r� r� r r r r� v s zFirewallClient.getEntriesc C s | j �||�S rQ r� )rB r� r� r r r r� z s zFirewallClient.setEntriesc C s | j �||� d S rQ r� r� r r r r� ~ s zFirewallClient.removeEntryc C s t | j�||��S rQ )r r� r� r� r r r r� � s zFirewallClient.queryEntryc C s t | j�� �S rQ )r rh rH rI r r r rH � s zFirewallClient.listServicesc C s t t| j�|���S rQ )rQ r rh ZgetServiceSettings2r~ r r r �getServiceSettings� s
�z!FirewallClient.getServiceSettingsc C s t | j�� �S rQ )r rh rL rI r r r rL � s z FirewallClient.listIcmpTypesc C s t tt| j�|����S rQ )r� r= r rh �getIcmpTypeSettingsr� r r r r� � s
�z"FirewallClient.getIcmpTypeSettingsc C s t | j�� �S rQ )r rh rt rI r r r rt � s zFirewallClient.getHelpersc C s t tt| j�|����S rQ )r� r= r rh �getHelperSettingsrv r r r r� � s
�z FirewallClient.getHelperSettingsc C s t | j�� �S rQ )r rh �getAutomaticHelpersrI r r r r� � s z"FirewallClient.getAutomaticHelpersc C s | j �|� d S rQ )rh �setAutomaticHelpers�rB rO r r r r� � s z"FirewallClient.setAutomaticHelpersc C s t | j�� �S rQ )r rh � getLogDeniedrI r r r r� � s zFirewallClient.getLogDeniedc C s | j �|� d S rQ )rh � setLogDeniedr� r r r r� � s zFirewallClient.setLogDeniedc C s t | j�� �S rQ )r rh �getDefaultZonerI r r r r� � s z FirewallClient.getDefaultZonec C s | j �|� d S rQ )rh �setDefaultZoner� r r r r� � s z FirewallClient.setDefaultZonec C s | j �||�� � d S rQ )r
�setZoneSettings2ra )rB r� r9 r r r �setZoneSettings� s z FirewallClient.setZoneSettingsc C s t | j�� �S rQ )r r
�getZonesrI r r r r� � s zFirewallClient.getZonesc C s t | j�� �S rQ )r r
�getActiveZonesrI r r r r� � s z FirewallClient.getActiveZonesc C s t | j�|��S rQ )r r
r? r� r r r r? � s z!FirewallClient.getZoneOfInterfacec C s t | j�|��S rQ )r r
r@ r� r r r r@ � s z FirewallClient.getZoneOfSourcec C s t | j�|��S rQ )r r
� isImmutabler� r r r r� � s zFirewallClient.isImmutablec C s t t| j�|���S rQ )r' r rP �getPolicySettings�rB �policyr r r r� � s z FirewallClient.getPolicySettingsc C s | j �||�� � d S rQ )rP �setPolicySettingsra )rB r� r9 r r r r� � s z FirewallClient.setPolicySettingsc C s t | j�� �S rQ )r rP � getPoliciesrI r r r r� � s zFirewallClient.getPoliciesc C s t | j�� �S rQ )r rP �getActivePoliciesrI r r r r� � s z FirewallClient.getActivePoliciesc C s t | j�|��S rQ )r rP r� r� r r r �isPolicyImmutable� s z FirewallClient.isPolicyImmutablec C s t | j�||��S rQ )r r
r� �rB r� r� r r r r� � s zFirewallClient.addInterfacec C s t | j�||��S rQ )r r
�
changeZoner� r r r r� � s zFirewallClient.changeZonec C s t | j�||��S rQ )r r
�changeZoneOfInterfacer� r r r r� � s
�z$FirewallClient.changeZoneOfInterfacec C s t | j�|��S rQ )r r
r� r� r r r r� � s z FirewallClient.getInterfacesc C s t | j�||��S rQ )r r
r� r� r r r r�
s z FirewallClient.queryInterfacec C s t | j�||��S rQ )r r
r� r� r r r r�
s z FirewallClient.removeInterfacec C s t | j�||��S rQ )r r
r� �rB r� r� r r r r�
s zFirewallClient.addSourcec C s t | j�||��S rQ )r r
�changeZoneOfSourcer� r r r r�
s z!FirewallClient.changeZoneOfSourcec C s t | j�|��S rQ )r r
r� r� r r r r�
s zFirewallClient.getSourcesc C s t | j�||��S rQ )r r
r� r� r r r r�
s zFirewallClient.querySourcec C s t | j�||��S rQ )r r
r� r� r r r r�
s zFirewallClient.removeSourcec C s t | j�|||��S rQ )r r
r� )rB r� r� r� r r r r� "
s zFirewallClient.addRichRulec C s t | j�|��S rQ )r r
r� r� r r r r� &
s zFirewallClient.getRichRulesc C s t | j�||��S rQ )r r
r� �rB r� r� r r r r� *
s z FirewallClient.queryRichRulec C s t | j�||��S rQ )r r
r� r� r r r r� .
s z FirewallClient.removeRichRulec C s t | j�|||��S rQ )r r
r� )rB r� r r� r r r r� 4
s zFirewallClient.addServicec C s t | j�|��S rQ )r r
rx r� r r r rx 8
s zFirewallClient.getServicesc C s t | j�||��S rQ )r r
r� �rB r� r r r r r� <
s zFirewallClient.queryServicec C s t | j�||��S rQ )r r
r� r� r r r r� @
s z FirewallClient.removeServicec C s t | j�||||��S rQ )r r
r� �rB r� r� r� r� r r r r� F
s zFirewallClient.addPortc C s t | j�|��S rQ )r r
r� r� r r r r� J
s zFirewallClient.getPortsc C s t | j�|||��S rQ )r r
r� �rB r� r� r� r r r r� N
s zFirewallClient.queryPortc C s t | j�|||��S rQ )r r
r� r� r r r r� R
s zFirewallClient.removePortc C s t | j�|||��S rQ )r r
r� )rB r� r� r� r r r r� X
s zFirewallClient.addProtocolc C s t | j�|��S rQ )r r
r� r� r r r r� \
s zFirewallClient.getProtocolsc C s t | j�||��S rQ )r r
r� �rB r� r� r r r r� `
s z FirewallClient.queryProtocolc C s t | j�||��S rQ )r r
r� r� r r r r� d
s z FirewallClient.removeProtocolc C s | j �|ddi� d S r! �r
r� r� r r r r� j
s zFirewallClient.addForwardc C s t | j�|��d S r )r r
r� r� r r r r� n
s zFirewallClient.queryForwardc C s | j �|ddi� d S r" r� r� r r r r� r
s z FirewallClient.removeForwardc C s t | j�||��S rQ )r r
r� )rB r� r� r r r r� x
s z FirewallClient.addMasqueradec C s t | j�|��S rQ )r r
r� r� r r r r� |
s z FirewallClient.queryMasqueradec C s t | j�|��S rQ )r r
r� r� r r r r� �
s z FirewallClient.removeMasqueradec C s2 |d u r d}|d u rd}t | j�||||||��S r# )r r
r� )rB r� r� r� r% r& r� r r r r� �
s �z FirewallClient.addForwardPortc C s t | j�|��S rQ )r r
r� r� r r r r� �
s z FirewallClient.getForwardPortsc C s0 |d u r d}|d u rd}t | j�|||||��S r# )r r
r� �rB r� r� r� r% r& r r r r� �
s
�z FirewallClient.queryForwardPortc C s0 |d u r d}|d u rd}t | j�|||||��S r# )r r
r� r� r r r r� �
s
�z FirewallClient.removeForwardPortc C s t | j�||||��S rQ )r r
r� r� r r r r� �
s �z FirewallClient.addSourcePortc C s t | j�|��S rQ )r r
r� r� r r r r� �
s z FirewallClient.getSourcePortsc C s t | j�|||��S rQ )r r
r� r� r r r r� �
s z FirewallClient.querySourcePortc C s t | j�|||��S rQ )r r
r� r� r r r r� �
s �z FirewallClient.removeSourcePortc C s t | j�|||��S rQ )r r
r� )rB r� �icmpr� r r r r� �
s zFirewallClient.addIcmpBlockc C s t | j�|��S rQ )r r
r� r� r r r r� �
s z FirewallClient.getIcmpBlocksc C s t | j�||��S rQ )r r
r� �rB r� r� r r r r� �
s z FirewallClient.queryIcmpBlockc C s t | j�||��S rQ )r r
r� r� r r r r� �
s z FirewallClient.removeIcmpBlockc C s t | j�|��S rQ )r r
r� r� r r r r� �
s z$FirewallClient.addIcmpBlockInversionc C s t | j�|��S rQ )r r
r� r� r r r r� �
s z&FirewallClient.queryIcmpBlockInversionc C s t | j�|��S rQ )r r
r� r� r r r r� �
s z'FirewallClient.removeIcmpBlockInversionc C s | j �|||� d S rQ r r r r r r �
s zFirewallClient.addChainc C s | j �|||� d S rQ r r r r r r �
s zFirewallClient.removeChainc C s t | j�|||��S rQ r r r r r r �
s zFirewallClient.queryChainc C s t | j�||��S rQ r r� r r r r� �
s zFirewallClient.getChainsc C s t | j�� �S rQ r rI r r r r� �
s zFirewallClient.getAllChainsc C s | j �|||||� d S rQ r! r" r r r r �
s zFirewallClient.addRulec C s | j �|||||� d S rQ r# r" r r r r
�
s zFirewallClient.removeRulec C s | j �|||� d S rQ r$ r r r r r �
s zFirewallClient.removeRulesc C s t | j�|||||��S rQ r% r" r r r r s zFirewallClient.queryRulec C s t | j�|||��S rQ r& r r r r r s zFirewallClient.getRulesc C s t | j�� �S rQ r' rI r r r r s zFirewallClient.getAllRulesc C s t | j�||��S rQ )r r � passthroughr) r r r r� s zFirewallClient.passthroughc C s t | j�� �S rQ r- rI r r r r s z!FirewallClient.getAllPassthroughsc C s | j �� d S rQ )r r rI r r r r s z$FirewallClient.removeAllPassthroughsc C s t | j�|��S rQ r, r� r r r r s z FirewallClient.getPassthroughsc C s | j �||� d S rQ r( r) r r r r ! s z FirewallClient.addPassthroughc C s | j �||� d S rQ r* r) r r r r % s z FirewallClient.removePassthroughc C s t | j�||��S rQ r+ r) r r r r ) s z FirewallClient.queryPassthroughc C s | j �� d S rQ )r� �enableLockdownrI r r r r� / s z FirewallClient.enableLockdownc C s | j �� d S rQ )r� �disableLockdownrI r r r r� 3 s z FirewallClient.disableLockdownc C s t | j�� �S rQ )r r� �
queryLockdownrI r r r r� 7 s z FirewallClient.queryLockdownc C s | j �|� d S rQ r� r� r r r r� ? s z*FirewallClient.addLockdownWhitelistCommandc C s t | j�� �S rQ r� rI r r r r� C s z+FirewallClient.getLockdownWhitelistCommandsc C s t | j�|��S rQ r� r� r r r r� G s z,FirewallClient.queryLockdownWhitelistCommandc C s | j �|� d S rQ r� r� r r r r� K s z-FirewallClient.removeLockdownWhitelistCommandc C s | j �|� d S rQ r� r� r r r r� Q s z*FirewallClient.addLockdownWhitelistContextc C s t | j�� �S rQ r� rI r r r r� U s z+FirewallClient.getLockdownWhitelistContextsc C s t | j�|��S rQ r� r� r r r r� Y s z,FirewallClient.queryLockdownWhitelistContextc C s | j �|� d S rQ r� r� r r r r� ] s z-FirewallClient.removeLockdownWhitelistContextc C s | j �|� d S rQ r� r� r r r r� c s z&FirewallClient.addLockdownWhitelistUidc C s t | j�� �S rQ r� rI r r r r� g s z'FirewallClient.getLockdownWhitelistUidsc C s t | j�|��S rQ r� r� r r r r� k s z(FirewallClient.queryLockdownWhitelistUidc C s | j �|� d S rQ r� r� r r r r� o s z)FirewallClient.removeLockdownWhitelistUidc C s | j �|� d S rQ r� r� r r r r� u s z'FirewallClient.addLockdownWhitelistUserc C s t | j�� �S rQ r� rI r r r r� y s z(FirewallClient.getLockdownWhitelistUsersc C s t | j�|��S rQ r� r� r r r r� } s z)FirewallClient.queryLockdownWhitelistUserc C s | j �|� d S rQ r� r� r r r r� � s z*FirewallClient.removeLockdownWhitelistUserc C s | j �� dS )z( Authorize once for all polkit actions. N)rh � authorizeAllrI r r r r� � s zFirewallClient.authorizeAll)Nr T)r )r )r )r )r )r )r )r )�r� r� r� r# rE rd rl rm ro rq rt r[ rf ru ra r r~ r r� r� r� r r r r� r� r� r� r� r� r� r� r� r� r� rH r� rL r� rt r� r� r� r� r� r� r� r� r� r� r? r@ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� rx r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r� r� r r
r r r r r� r r r r r r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r rV s4
%
/
�
rV )-Z
gi.repositoryr Zdbus.mainloop.glibr r! Zfirewallr Zfirewall.core.baser r r Zfirewall.dbus_utilsr Zfirewall.core.richr Zfirewall.core.ipsetr
r r r
Zfirewall.errorsr r r r r# �objectr$ r� r' rN rQ r{ r� r� r� r� r� r� r� r� r� r r. rV r r r r �<module> sT ) n O0 ghfK| ]CgVab[ [