%PDF-
%PDF-
Mini Shell
Mini Shell
�
�I�d� � �v � d dl Z d dlmZmZ d dlmZ d dlmZ d dlZd dl m
Z
d dl m Z d� Z
d� Z G d � d
e
� Zy) � N)�Popen�PIPE)�blake2b)�which)�
gp_pol_ext)�logc �� � t d� }|�T|g}|j t | � � t |t t �� }|j � \ }}|j |fS y)Nz firewall-cmd)�stdout�stderr)���zfirewall-cmd not found)r �extend�listr r � communicate�
returncode)�args�fw_cmd�cmd�p�
stdoutdata�_s �;/usr/lib/python3/dist-packages/samba/gp/gp_firewalld_ext.py� firewall_cmdr sX � �
�>�
"�F�
���h�� �
�
�4��:� � �#�d�4� 0���
�
��
�
�A��|�|�Z�'�'�+� c � � t |t � r
| �d|��dz S | �ddj |j � D ��cg c] \ }}|�d|���� c}}� �d�S c c}}w )N�=� )�
isinstance�str�join�items)�name� rule_segment�k�vs r �rule_segment_parser% % sW � ��,��$� � �.�#�5�5� � �H�H�<�3E�3E�3G�H�4�1�a��A�&�H� I�K� K��Hs �Ac �* � e Zd Zd� Zd� Zd� Zd� Zd� Zy)�gp_firewalld_extc � � y)NzSecurity/Firewalld� )�selfs r �__str__zgp_firewalld_ext.__str__- s � �#r c �� � t dd|z � d }|dk7 rt j d|� n)| j j t | � d|z |� t d� \ }}|dk7 rt j d|� |j
� j � D ]? }t dd|z d |j � z � }|dk7 s�*t j d|� �A y )
N� --permanentz
--new-zone=%sr zFailed to add new zonezzone:%sz--list-interfacesz!Failed to set interfaces for zone� --zone=%sz--add-interface=%s) r r �error�gp_db�storer �strip�split�decode)r* �zone�ret�out� interfaces r �
apply_zonezgp_firewalld_ext.apply_zone0 s� � ��=�/�D�*@�A�!�D�� �!�8� �I�I�.�� 5� �J�J� � �S��Y� �D�(8�$� ?� � 3�4���S� �!�8� �I�I�9�4� @� ����*�*�,� E�I� �}�k�D�.@� 3�i�6F�6F�6H� H�J�C��a�x�� � �=�t�D� Er c
�L � |j � D �]� \ }}|D �] }d|v rt d|d � }nd}dD ]J }|j � D �cg c] }|j |� s�|�� }}|D ] } |t | || � z
}� �L t g d�� }
t |j � � } |
j | � } t
| � dk( r+|t t | � d |t | � d � z
}nt j d� t dd |z d
|j � � d }
|
dk7 rt j d |� ��-t |j � � j � }| j j! t# | � d |�d
|��|� ��� ��� y c c}w )N�rulezrule ) �source� destination�service�port�protocolz
icmp-block�
masqueradez icmp-typez forward-portz source-portr �audit)�accept�reject�drop�mark� r z Invalid firewall rule syntaxr- r. z--add-rich-rulezFailed to add firewall rulezrule:�:)r r% �keys�
startswith�set� intersection�lenr r r/ r r2 r �encode� hexdigestr0 r1 r )r* � rule_dictr5 �rulesr; � rule_parsed�segment�s�namesr! �actions�segments�actionr6 �rhashs r � apply_rulesz gp_firewalld_ext.apply_rules@ s� � �$�?�?�,� 2�K�D�%� �
2���T�>�"4�V�T�&�\�"J�K�")�K� 0� L�G� )-� � � � M�1�q�|�|�G�7L�Q� M�E� M� %� L��#�'9�$��T�
�'K�K� �L� L� � B�C�� �t�y�y�{�+�� �-�-�h�7���v�;�!�#� �#5�d�6�l�1�o�6:�4��<��?�6K�$M� M�K� �I�I� <�=�"�=�+��2D�#4�k�6G�6G�6I�K�KL�N���!�8��I�I� ;�[�I� #�K�$6�$6�$8� 9� C� C� E�E��J�J�$�$�S��Y��e�0L�%0�2�5
2� 2�� Ns � F!
�"F!
c �V � |D �]N \ }}| j j |� t | � |v �r|t | � j � D ]� \ }}|j d� rTt dd|z � d }|dk7 rt
j d|� �E| j j t | � |� �k|j d� s�}|j d� \ }} }t dd| z d |� d }|dk7 rt
j d
|� ��| j j t | � |� �� | j j � ��Q |D �]O }
|
j s�d } | j j |
j � d } t j j |
j | � }
| j! |
� }|s�x|j" D ]� }|j$ j | � s� |j$ j' d
� r/| j) t+ j, |j. � � �i|j$ j' d� s��|j0 dk( r��| j3 |j. � �� | j j � ��R y )Nr5 r- z--delete-zone=%sr zFailed to remove zoner; rH r. z--remove-rich-rulez Failed to remove firewall rule�/Software\Policies\Samba\Unix Settings\Firewalld�MACHINE/Registry.pol�Rules�Zones�
**delvals.)r0 �set_guidr r rJ r r r/ �deleter3 �commit�
file_sys_pathr! �os�pathr �parse�entries�keyname�endswithrZ �json�loads�data� valuenamer9 )r* �deleted_gpo_list�changed_gpo_list�guid�settings� attribute�valuer6 r r5 �gpo�section�pol_filerf �pol_conf�es r �process_group_policyz%gp_firewalld_ext.process_group_policy_ s8 � � .� �N�D�(� �J�J� � �� %��4�y�H�$�(0��T��(;�(A�(A�(C� D�$�I�u� �+�+�F�3� *�=�+=��+E� G�GH� J�� �!�8� �I�I�&=�u� E� �J�J� -� -�c�$�i�� C�"�-�-�f�5�%.�_�_�S�%9�
��4�� *�=�+��:L�+?�� H�HI� K�� �!�8� �I�I�&F�� N� �J�J� -� -�c�$�i�� C� D�
�J�J� � � �' �* $� $�C�� � �O���
�
�#�#�C�H�H�-�1���w�w�|�|�C�$5�$5�x�@�� �:�:�d�+�� � �!�)�)� 4�A��y�y�+�+�G�4� �9�9�-�-�g�6� � ,� ,�T�Z�Z����-?� @� �Y�Y� /� /�� 8� �{�{�l� :� (� �O�O�A�F�F� 3�4� �
�
�!�!�#�# $r c � � i }d}d}|j �r1t j j |j |� }| j |� }|s|S |j
D ]� }|j j |� s� |j j d� rF|j dk( r�Jd|j � vrg |d< |d j |j � ��|j j d� s��d|j � vrg |d< |d j t j |j � � �� |S )Nr] r\ r_ r` r^ )rd re rf r rg rh ri rJ rj rn rI �appendrm rk rl )r* ru �outputrw rv rf rx ry s r �rsopzgp_firewalld_ext.rsop� s � ���)��G�� � � ��7�7�<�<�� 1� 1�8�<�D��z�z�$�'�H�� �
� �%�%�
C���9�9�'�'��0��y�y�)�)�'�2� �;�;�,�6� $�"�&�+�+�-�7�.0�F�7�O� �w��.�.�q�v�v�6����+�+�G�4�"�&�+�+�-�7�.0�F�7�O� �w��.�.�t�z�z�!�&�&�/A�B�
C� �
r N)�__name__�
__module__� __qualname__r+ r9 rZ rz r~ r) r r r' r' , s � �$�E� 2�>'$�Rr r' )re �
subprocessr r �hashlibr �shutilr rk �samba.gp.gpclassr �samba.gp.util.loggingr r r% r' r) r r �<module>r� s5 ��"
� "� � � � '� %�
,�K�q�z� qr
Zerion Mini Shell 1.0