File: //usr/lib/python3.9/site-packages/firewall/server/__pycache__/firewalld.cpython-39.opt-1.pyc
a
7Irj%� � @ sJ d gZ ddlmZ ddlZddlZddlZddlZddlmZ ddl m
Z
ddl m Z ddl
mZ ddlmZ dd lmZmZ dd
lmZmZmZmZmZmZ dd lm Z dd l m Z m Z m Z m!Z!m"Z"m#Z#m$Z$m%Z% dd
l&m'Z' ddl(m)Z) ddl*m+Z+ ddl,m-Z- ddl.m/Z/m0Z0 ddl1m2Z2 ddlm3Z3 ddl4m5Z5 G dd � d e�Z6dS )� FirewallD� )�GLibN)�config)�Firewall)� Rich_Rule)�log)�FirewallClientZoneSettings)�FirewallDBusException�DbusServiceObject)�dbus_handle_exceptions�dbus_service_method�handle_exceptions� dbus_service_method_deprecated� dbus_service_signal_deprecated�dbus_polkit_require_auth)�FirewallDConfig)�dbus_to_python�command_of_sender�context_of_sender�
uid_of_sender� user_of_uid�%dbus_introspection_prepare_properties�!dbus_introspection_add_properties�!dbus_introspection_add_deprecated)�check_on_disk_config)�IPSet)�IcmpType)�Helper)� nm_get_connection_of_interface�nm_set_zone_of_connection)�ifcfg_set_zone_of_interface)�errors)�
FirewallErrorc sV e Zd ZdZdZejjZe � fdd��Z
dd� Z e dd� �Z e d d
� �Z
ed d � �Zed
d� �Zeejddd�e�d�dd���Zeejddd�e�d�dd���Zeejj�eejdd�e�d�dd ����Zejjejd d �d d � �Zeejj�eejdd!�e�d�� fd"d#� ���Z eejj�eejj d$d$d�e�d�d%d&����Z eejj�eejj d$d$d�e�d�d'd(����Z ej�ejj �ed)d*� ��Z eejj�eejj d$d$d��d�d+d,���Z!eejj�eejj d$d$d�e�d�d-d.����Z"eejj�eejj d$d$d�e�d�d/d0����Z#eejj$�eejj%d$d$d�e�d�d1d2����Z&eejj$�eejj%d$d$d�e�d�d3d4����Z'eejj(�eejj%d$d5d�e�d�d6d7����Z)ejjejj%d$d �ed8d9� ��Z*ejjejj%d$d �ed:d;� ��Z+eejj$�eejj%dd$d�e�d�d<d=����Z,eejj$�eejj%dd$d�e�d�d>d?����Z-eejj(�eejj%dd5d�e�d�d@dA����Z.eejj(�eejj%d$dBd�e�d�dCdD����Z/ejjejj%dd �edEdF� ��Z0ejjejj%dd �edGdH� ��Z1eejj$�eejj%dId$d�e�d�dJdK����Z2eejj$�eejj%dId$d�e�d�dLdM����Z3eejj(�eejj%dId5d�e�d�dNdO����Z4eejj(�eejj%d$dPd�e�d�dQdR����Z5ejjejj%dId �edSdT� ��Z6ejjejj%dId �edUdV� ��Z7eejj$�eejj%dd$d�e�d�dWdX����Z8eejj$�eejj%dd$d�e�d�dYdZ����Z9eejj(�eejj%dd5d�e�d�d[d\����Z:eejj(�eejj%d$dBd�e�d�d]d^����Z;ejjejj%dd �ed_d`� ��Z<ejjejj%dd �edadb� ��Z=eejj$�eejj%dd$d�e�d�dcdd����Z>eejj$�eejj%dd$d�e�d�dedf����Z?eejj(�eejj%dd5d�e�d�dgdh����Z@eejj(�eejj%d$dBd�e�d�didj����ZAejjejj%dd �edkdl� ��ZBejjejj%dd �edmdn� ��ZCeejj�eejj d$d$d�e�d�dodp����ZDeejj�eejj d$d$d�e�d�dqdr����ZEeejj�eejj d$d5d�e�d�dsdt����ZFejjejj d$d �edudv� ��ZGejjejj d$d �edwdx� ��ZHeejjI�eejj ddyd�e�d�dzd{����ZJeejjI�eejjKddd�e�d�d|d}����ZLeejjI�eejjKd~d�e�d�dd�����ZMejjejjKd~d �ed�d�� ��ZNd�d�� ZOeejjI�eejjPddd�e�d�d�d�����ZQeejjI�eejjPd~d�e�d�d�d�����ZRejjejjPd~d �ed�d�� ��ZSd�d�� ZTeejj�eejj d$dBd�e�d�d�d�����ZUeejjI�eejj dd�d�e�d�d�d�����ZVeejjI�eejj ddd�e�d�d�d�����ZWeejj�eejj d$dBd�e�d�d�d�����ZXeejjI�eejj deYjZd�e�d�d�d�����Z[eejjI�eejj d$dd�e�d�d�d�����Z\eejj�eejj dd$d�e�d�d�d�����Z]ejjejj dd �ed�d�� ��Z^eejjI�eejj d$dd�e�d�d�d�����Z_eejj�eejj dd$d�e�d�d�d�����Z`ejjejj dd �ed�d�� ��Zaeejj�eejj d$dd�e�d�d�d�����Zbeejj�eejj dd$d�e�d�d�d�����Zcejjejj dd �ed�d�� ��Zdeejj�eejjPd$dBd�e�d�d�d�����Zeeejj�eejjPd$d�d�e�d�d�d�����Zfeejj�eejjKd$dBd�e�d�d�d�����Zgeejj�eejjKd$d�d�e�d�d�d�����Zheejj�eejjKddd�e�d�d�d�����Zieejj�eejjKddd�e�d�d�d�����ZjeejjI�eejjKdd5d�e�d�d�d�����Zkeejj�eejjKddd�e�d�d�d�����Zleejj�eejjKddd�e�d�d�d�����Zmeejj�eejjKddd�e�d�d�d�����Zneejj�eejjKddd�e�d�d�d�����ZoeejjI�eejjKdd5d�e�d�d�d���ZpeejjI�eejjKddBd�e�d�d�dĄ���ZqejjejjKdd �ed�dƄ ��ZrejjejjKdd �ed�dȄ ��ZsejjejjKdd �ed�dʄ ��ZtejjejjKdd �ed�d̄ ��Zueejj�eejjKddd�e�d�d�d΄���Zveejj�eejjKddd�e�d�d�dЄ���Zweejj�eejjKddd�e�d�d�d҄���ZxeejjI�eejjKdd5d�e�d�d�dԄ���ZyeejjI�eejjKddBd�e�d�d�dք���ZzejjejjKdd �ed�d ��Z{ejjejjKdd �ed�dڄ ��Z|ejjejjKdd �ed�d܄ ��Z}eejj�eejjKd�dd�e�d�d�d߄���Z~eejj�eejjKddd�e�d�d�d����ZeejjI�eejjKdd5d�e�d�d�d����Z�eejjI�eejjKddBd�e�d�d�d����Z�ejjejjKd�d �ed�d� ��Z�ejjejjKdd �ed�d� ��Z�eejj�eejjKd�dd�e�d�d�d����Z�eejj�eejjKddd�e�d�d�d����Z�eejjI�eejjKdd5d�e�d�d�d����Z�eejjI�eejjKddBd�e�d�d�d����Z�ejjejjKd�d �ed�d� ��Z�ejjejjKdd �ed�d�� ��Z�eejj�eejjKd�dd�e�d�d�d�����Z�eejj�eejjKd�dd�e�d�d�d�����Z�eejjI�eejjKd�d5d�e�d�d�d�����Z�eejjI�eejjKdd�d�e�d�d��d ����Z�ejjejjKd�d �e�d�d�d���Z�ejjejjKd�d �e�d�d� ��Z�eejj�eejjKd�dd�e�d�d�d����Z�eejj�eejjKddd�e�d�d�d ����Z�eejjI�eejjKdd5d�e�d�d
�d ����Z�eejjI�eejjKddBd�e�d�d �d
����Z�ejjejjKd�d �e�d�d�d���Z�ejjejjKdd �e�d�d� ��Z�eejj�eejjKd�dd�e�d�d�d����Z�eejj�eejjKd�dd�e�d�d�d����Z�eejjI�eejjKd�d5d�e�d�d�d����Z�eejjI�eejjKdd�d�e�d�d�d����Z�ejjejjKd�d �e�d�d�d���Z�ejjejjKd�d �e�d �d � ��Z�eejj�eejjK�d dd�e�d��d �d ����Z�eejj�eejjKddd�e�d��d!�d"����Z�eejjI�eejjKdd5d�e�d��d#�d$����Z�ejjejjK�d d �e�d��d%�d&���Z�ejjejjKdd �e�d'�d(� ��Z�eejj�eejjK�d)dd�e�d��d*�d+����Z�eejj�eejjK�d,dd�e�d��d-�d.����Z�eejjI�eejjK�d,d5d�e�d��d/�d0����Z�eejjI�eejjKdd�d�e�d��d1�d2����Z�ejjejjK�d)d �e�d��d3�d4���Z�ejjejjK�d,d �e�d5�d6� ��Z�eejj�eejjKd�dd�e�d��d7�d8����Z�eejj�eejjKddd�e�d��d9�d:����Z�eejjI�eejjKdd5d�e�d �d;�d<����Z�eejjI�eejjKddBd�e�d�d=�d>����Z�ejjejjKd�d �e�d�d?�d@���Z�ejjejjKdd �e�dA�dB� ��Z�eejj�eejjKddd�e�d�dC�dD����Z�eejj�eejjKddd�e�d�dE�dF����Z�eejjI�eejjKdd5d�e�d�dG�dH����Z�ejjejjKdd �e�dI�dJ� ��Z�ejjejjKdd �e�dK�dL� ��Z�eejj��e�ejj��eejj�d�d$d�e�d�dM�dN�����Z�eejj��e�ejj��eejj�d�d$d�e�d�dO�dP�����Z�eejj��e�ejj��eejj�d�d5d�e�d�dQ�dR�����Z�eejj��e�ejj��eejj�ddBd�e�d �dS�dT�����Z�eejj��e�ejj��eejj�d$�dUd�e�d
�dV�dW�����Z�e�ejj��ejjejj�d�d �e�dX�dY� ���Z�e�ejj��ejjejj�d�d �e�dZ�d[� ���Z�eejj��e�ejj��eejj��d\d$d�e�d �d]�d^�����Z�eejj��e�ejj��eejj��d\d$d�e�d �d_�d`�����Z�eejj��e�ejj��eejj�d�d$d�e�d
�da�db�����Z�eejj��e�ejj��eejj��d\d5d�e�d�dc�dd�����Z�eejj��e�ejj��eejj�d��ded�e�d�df�dg�����Z�eejj��e�ejj��eejj�d$�dhd�e�d�di�dj�����Z�e�ejj��ejjejj��d\d �e�dk�dl� ���Z�e�ejj��ejjejj��d\d �e�dm�dn� ���Z�eejj��e�ejj��eejj��dodd�e�d�dp�dq�����Z�eejj��e�ejj��eejj��dod$d�e�d�dr�ds�����Z�eejj��e�ejj��eejj��dod$d�e�d�dt�du�����Z�eejj��e�ejj��eejj��dod5d�e�d�dv�dw�����Z�eejj��e�ejj��eejj�d$�dxd�e�d�dy�dz�����Z�eejj��e�ejj��eejj�d$d$d�e�d�d{�d|�����Z�eejj��e�ejj��eejj�dd�d�e�d�d}�d~�����Z�e�ejj��ejjejj��dod �e�d�d�� ���Z�e�ejj��ejjejj��dod �e�d��d�� ���Z�eejjσeejj d$d$d�e�d�d��d�����Z�eejj�eejj�dd5d�e�d�d��d�����Z�eejj�eejj�d$dBd�e�d�d��d�����Z�eejjI�eejj�de�jZd�e�d�d��d�����Z�eejj�eejj�dd$d�e�d �d��d�����Z�eejj�eejj�dd$d�e�d �d��d�����Z�eejj�eejj�dd5d�e�d �d��d�����Z�eejj�eejj�ddBd�e�d �d��d�����Z�eejj�eejjѐdod�e�d �d��d�����Z�ejjejj�dd �e�d��d�� ��Z�ejjejj�dd �e�d��d�� ��Z�eejj�eejj d$dBd�e�d!�d��d�����Z�eejjI�eejj de�jZd�e�d"�d��d�����Z߇ Z�S (# r zFirewallD main classTc s� t � | _| �� tjjjdd� t�� }tjj t
jj |d�}t t
| ��|t
jj� || _t
jj| _t| t
jj � t| jj
| jt
jj�| _
d S )NT)Zset_as_default)�bus)r �fw�start�dbusZmainloopZglibZ
DBusGMainLoop� SystemBus�serviceZBusNamer �DBUS_INTERFACE�superr �__init__Z DBUS_PATH�busname�pathr r ZDBUS_PATH_CONFIG)�selfr# �name�� __class__� �=/usr/lib/python3.9/site-packages/firewall/server/firewalld.pyr+ H s
�zFirewallD.__init__c C s | � � d S �N)�stop�r. r2 r2 r3 �__del__Y s zFirewallD.__del__c C s t �d� i | _| j�� S )Nzstart())r �debug1Z _timeoutsr$ r% r6 r2 r2 r3 r% \ s
zFirewallD.startc C s t �d� | j�� S )Nzstop())r r8 r$ r5 r6 r2 r2 r3 r5 d s
zFirewallD.stopc C s� | j j�� r�|d u r"t�d� d S t�� }t||�}| j j�d|�rHd S t ||�}| j j�d|�rfd S t
|�}| j j�d|�r�d S t ||�}| j j�d|�r�d S t t
jd��d S )Nz&Lockdown not possible, sender not set.�context�uid�user�commandzlockdown is enabled)r$ �policies�query_lockdownr �errorr& r' r Z access_checkr r r r" r! Z
ACCESS_DENIED)r. �senderr# r9 r: r; r< r2 r2 r3 � accessCheckm s$
zFirewallD.accessCheckc C sr |dkrt �tj�S |dkr6t �dtj jtj jf �S |dkrNt �| j�� �S |dkrht �| j� d��S |dkr�t �
| jj d�S |d kr�t �| j� d
��S |d kr�t �| jj d kr�d
nd�S |dkr�t �
| jj
d�S |dk� r�t �| jj�S |dk�rt �| jj�S |dk�r t �
| jjd�S |dk�r2t �d
�S |dk�rHt �i d�S |dk�r^t �i d�S t j�d| ��d S )N�version�interface_versionz%d.%d�state�IPv4�ipv4�
IPv4ICMPTypes�s�IPv6�ipv6�
IPv6_rpfilter�noFT�
IPv6ICMPTypes�BRIDGEr �
IPSetTypes�nf_conntrack_helper_setting�nf_conntrack_helpers�sas�nf_nat_helpers�Dorg.freedesktop.DBus.Error.InvalidArgs: Property '%s' does not exist)r& �Stringr ZVERSIONZDBUS_INTERFACE_VERSIONZDBUS_INTERFACE_REVISIONr$ Z get_stateZBooleanZis_ipv_enabledZArrayZipv4_supported_icmp_typesZ_ipv6_rpfilterZipv6_supported_icmp_typesZebtables_enabledZ
ipset_enabledZipset_supported_types�
Dictionary�
exceptions�
DBusException)r. Zpropr2 r2 r3 �
_get_property� sF �
��zFirewallD._get_property�ss�v)� in_signature�
out_signatureNc C s~ t |t�}t |t�}t�d||� |tjjkr8| �|�S |tjjtjj tjj
tjj fv rjtj �
d| ��ntj �
d| ��d S )NzGet('%s', '%s')rT �Jorg.freedesktop.DBus.Error.UnknownInterface: Interface '%s' does not exist)r �strr r8 r r& r) rY �DBUS_INTERFACE_ZONE�DBUS_INTERFACE_DIRECT�DBUS_INTERFACE_POLICIES�DBUS_INTERFACE_IPSETrW rX )r. �interface_name�
property_namer@ r2 r2 r3 �Get� s(
�����z
FirewallD.GetrH za{sv}c C s� t |t�}t�d|� i }|tjjkr@dD ]}| �|�||< q*n2|tjjtjj tjj
tjj fv rbntj �
d| ��tj|dd�S )Nz GetAll('%s')�rB rC rD rE rI rK rN r rO rP rQ rS rG rM r^ �sv�Z signature)r r_ r r8 r r& r) rY r` ra rb rc rW rX rV )r. rd r@ �ret�xr2 r2 r3 �GetAll� s$
���zFirewallD.GetAllZssv)r\ c C s� t |t�}t |t�}t |�}t�d|||� | �|� |tjjkrn|dv r\tj� d| ��q�tj� d| ��nB|tjj
tjj tjj tjj
fv r�tj� d| ��ntj� d| ��d S )NzSet('%s', '%s', '%s')rg zGorg.freedesktop.DBus.Error.PropertyReadOnly: Property '%s' is read-onlyrT r^ )r r_ r r8 rA r r& r) rW rX r` ra rb rc )r. rd re Z new_valuer@ r2 r2 r3 �Set� sD
�
���������z
FirewallD.Setzsa{sv}asri c C s. t |t�}t |�}t |�}t�d|||� d S )Nz#PropertiesChanged('%s', '%s', '%s'))r r_ r r8 )r. rd Zchanged_propertiesZinvalidated_propertiesr2 r2 r3 �PropertiesChanged s
�zFirewallD.PropertiesChanged)r] c s` t �d� tt| ��| j| j�� �}t| |t j
j �}t j
j fD ] }t
| ||t� jt� j�}q>|S )Nz Introspect())r Zdebug2r* r �
Introspectr- r, Zget_busr r r& r) ra r r Z
deprecatedr )r. r@ �data� interfacer0 r2 r3 ro s
���zFirewallD.Introspect� c C s* t �d� | j�� | j�� | �� dS )z#Reload the firewall rules.
zreload()N�r r8 r$ �reloadr �Reloaded�r. r@ r2 r2 r3 rt * s
zFirewallD.reloadc C s, t �d� | j�d� | j�� | �� dS )z�Completely reload the firewall.
Completely reload the firewall: Stops firewall, unloads modules and
starts the firewall again.
zcompleteReload()TNrs rv r2 r2 r3 �completeReload9 s
zFirewallD.completeReloadc C s t �d� d S )Nz
Reloaded()�r r8 r6 r2 r2 r3 ru I s zFirewallD.Reloadedc C s" t �d� | jj�� | �� dS )zbreset to firewall's builtin defaults.
Reloads firewalld to apply changes properly
z firewalld.reset_to_defaults()N)r r8 r$ r Zreset_defaultsrt rv r2 r2 r3 �resetToDefaultsN s
zFirewallD.resetToDefaultsc C s t �d� t| j� dS )z&Check permanent configuration
zcheckPermanentConfig()N)r r8 r r$ rv r2 r2 r3 �checkPermanentConfigY s
z FirewallD.checkPermanentConfigc C s� t �d� | jjdkr"ttjd��d}| j�� }| jj �
� D ]�}| � |�}zj||v r�| j� |�}|�
� |kr�t �d| � |�|� q�t �d| � n t �d| � | j�||� W q< ty� } z"t �d||f � d }W Y d
}~q<d
}~0 0 q<| j�� }| jj�� D ]�}| �|�}zn||v �rf| j�|�}|�
� |k�rVt �d | � |�|� nt �d | � n t �d
| � | j�||� W n< t�y� } z"t �d||f � d }W Y d
}~n
d
}~0 0 �q| j�� }| jj�� D ]�}zx| �|�}||v �r:| j� |�}|�
� |k�r*t �d| � |�|� nt �d| � n t �d| � | j� ||� W n< t�y� } z"t �d||f � d }W Y d
}~n
d
}~0 0 �q�| j� � }| jj � � D �]h}| �!|�}t"t#�$|��}d} |�%� D ]4}
|
| jj&v �r�t �d||
f � |�'|
� d } �q�|�%� D ]H}
z,t(|
�} | �rFt)|| ��rF|�'|
� d } W n t�y\ Y n0 �q| �rp|�*� }|�%� D ]}
t+||
� �qxzP||v �r�| j�,|�}t �d| � |�-|� n t �d| � | j�.||� W n< t�y } z"t �d||f � d }W Y d
}~n
d
}~0 0 �q�| j�/� }| jj0�1� D ]�}| �2|�}zB||v �rd| j�3|�}|�|� n t �d| � | j�4||� W n< t�y� } z"t �d||f � d }W Y d
}~n
d
}~0 0 �q2| j�5� }| jj6�7� D ]�}| �8|�}zn||v �r8| j�9|�}|�
� |k�r(t �d| � |�|� nt �d| � n t �d| � | j�:||� W n< t�y� } z"t �d ||f � d }W Y d
}~n
d
}~0 0 �q�| jj;�<� | jj;�=� | jj;�>� f}z6| j�
� |k�r�t �d � | j�|� n
t �d � W n8 t�y( } z t �d | � d }W Y d
}~n
d
}~0 0 | jj?j@�A� }z6| j�
� |k�rbt �d � | j�B|� n
t �d!� W n8 t�y� } z t �d"| � d }W Y d
}~n
d
}~0 0 |�r�ttjC��d
S )#z-Make runtime configuration permanent
zcopyRuntimeToPermanent()ZFAILEDz�Saving runtime to permanent is not allowed while firewalld is in FAILED state. The permanent configuration must be fixed and then firewalld restarted. Try `firewall-offline-cmd --check-config`.Fz Copying service '%s' settingsz$Service '%s' is identical, ignoring.zCreating service '%s'z/Runtime To Permanent failed on service '%s': %sTNz Copying icmptype '%s' settingsz%IcmpType '%s' is identical, ignoring.zCreating icmptype '%s'z0Runtime To Permanent failed on icmptype '%s': %szCopying ipset '%s' settingsz"IPSet '%s' is identical, ignoring.zCreating ipset '%s'z-Runtime To Permanent failed on ipset '%s': %szEZone '%s': interface binding for '%s' has been added by NM, ignoring.zCopying zone '%s' settingszCreating zone '%s'z,Runtime To Permanent failed on zone '%s': %szCreating policy '%s'z.Runtime To Permanent failed on policy '%s': %sz Copying helper '%s' settingsz#Helper '%s' is identical, ignoring.zCreating helper '%s'z.Runtime To Permanent failed on helper '%s': %sz Copying direct configurationz,Direct configuration is identical, ignoring.z7Runtime To Permanent failed on direct configuration: %sz Copying policies configurationz.Policies configuration is identical, ignoring.z9Runtime To Permanent failed on policies configuration: %s)Dr r8 r$ �_stater" r! ZRUNNING_BUT_FAILEDr ZgetServiceNamesr( � get_services�getServiceSettingsZgetServiceByNameZ getSettings�update�
addService� Exception�warningZgetIcmpTypeNames�icmptype�
get_icmptypes�getIcmpTypeSettingsZgetIcmpTypeByNameZ addIcmpTypeZ
getIPSetNames�ipset�
get_ipsets�getIPSetSettingsZgetIPSetByNameZaddIPSetZ getZoneNames�zone� get_zones�getZoneSettings2r �copy�deepcopy�
getInterfacesZ_nm_assigned_interfaces�removeInterfacer r ZgetSettingsDictr Z
getZoneByNameZupdate2ZaddZone2ZgetPolicyNames�policy�"get_policies_not_derived_from_zone�getPolicySettingsZgetPolicyByNameZ addPolicyZgetHelperNames�helper� get_helpers�getHelperSettingsZgetHelperByNameZ addHelper�direct�get_all_chains�
get_all_rules�get_all_passthroughsr= �lockdown_whitelist�
export_configZsetLockdownWhitelistZRT_TO_PERM_FAILED) r. r@ r? Z config_namesr/ ZconfZconf_obj�e�settingsZchangedrq Z
connectionr2 r2 r3 �runtimeToPermanente sF
�
��
��
��
��
��
��
�
�
��z FirewallD.runtimeToPermanentc C s, t �d� | �|� | jj�� | �� dS )z!Enable lockdown policies
zpolicies.enableLockdown()N)r r8 rA r$ r= Zenable_lockdown�LockdownEnabledrv r2 r2 r3 �enableLockdown7 s
zFirewallD.enableLockdownc C s, t �d� | �|� | jj�� | �� dS )z"Disable lockdown policies
zpolicies.disableLockdown()N)r r8 rA r$ r= Zdisable_lockdown�LockdownDisabledrv r2 r2 r3 �disableLockdownC s
zFirewallD.disableLockdown�bc C s t �d� | jj�� S )z,Returns True if lockdown is enabled
zpolicies.queryLockdown())r r8 r$ r= r> rv r2 r2 r3 �
queryLockdownO s
zFirewallD.queryLockdownc C s t �d� d S )NzLockdownEnabled()rx r6 r2 r2 r3 r� Z s zFirewallD.LockdownEnabledc C s t �d� d S )NzLockdownDisabled()rx r6 r2 r2 r3 r� _ s zFirewallD.LockdownDisabledc C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )� Add lockdown command
z*policies.addLockdownWhitelistCommand('%s')N)
r r_ r r8 rA r$ r= r� Z add_command� LockdownWhitelistCommandAdded�r. r< r@ r2 r2 r3 �addLockdownWhitelistCommandh s
z%FirewallD.addLockdownWhitelistCommandc C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )z Remove lockdown command
z-policies.removeLockdownWhitelistCommand('%s')N)
r r_ r r8 rA r$ r= r� Zremove_command� LockdownWhitelistCommandRemovedr� r2 r2 r3 � removeLockdownWhitelistCommandu s
z(FirewallD.removeLockdownWhitelistCommandc C s( t |t�}t�d| � | jjj�|�S )z Query lockdown command
z,policies.queryLockdownWhitelistCommand('%s'))r r_ r r8 r$ r= r� Z has_commandr� r2 r2 r3 � queryLockdownWhitelistCommand� s
z'FirewallD.queryLockdownWhitelistCommand�asc C s t �d� | jjj�� S )r� z'policies.getLockdownWhitelistCommands())r r8 r$ r= r� Z get_commandsrv r2 r2 r3 � getLockdownWhitelistCommands� s
z&FirewallD.getLockdownWhitelistCommandsc C s t �d| � d S )Nz#LockdownWhitelistCommandAdded('%s')rx �r. r< r2 r2 r3 r� � s z'FirewallD.LockdownWhitelistCommandAddedc C s t �d| � d S )Nz%LockdownWhitelistCommandRemoved('%s')rx r� r2 r2 r3 r� � s z)FirewallD.LockdownWhitelistCommandRemoved�ic C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )�Add lockdown uid
z&policies.addLockdownWhitelistUid('%s')N)
r �intr r8 rA r$ r= r� Zadd_uid�LockdownWhitelistUidAdded�r. r: r@ r2 r2 r3 �addLockdownWhitelistUid� s
z!FirewallD.addLockdownWhitelistUidc C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )z Remove lockdown uid
z)policies.removeLockdownWhitelistUid('%s')N)
r r� r r8 rA r$ r= r� Z
remove_uid�LockdownWhitelistUidRemovedr� r2 r2 r3 �removeLockdownWhitelistUid� s
z$FirewallD.removeLockdownWhitelistUidc C s( t |t�}t�d| � | jjj�|�S )zQuery lockdown uid
z(policies.queryLockdownWhitelistUid('%s'))r r� r r8 r$ r= r� Zhas_uidr� r2 r2 r3 �queryLockdownWhitelistUid� s
z#FirewallD.queryLockdownWhitelistUidZaic C s t �d� | jjj�� S )r� z#policies.getLockdownWhitelistUids())r r8 r$ r= r� Zget_uidsrv r2 r2 r3 �getLockdownWhitelistUids� s
z"FirewallD.getLockdownWhitelistUidsc C s t �d| � d S )Nz LockdownWhitelistUidAdded(%d)rx �r. r: r2 r2 r3 r� � s z#FirewallD.LockdownWhitelistUidAddedc C s t �d| � d S )Nz LockdownWhitelistUidRemoved(%d)rx r� r2 r2 r3 r� � s z%FirewallD.LockdownWhitelistUidRemovedc C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )�Add lockdown user
z'policies.addLockdownWhitelistUser('%s')N)
r r_ r r8 rA r$ r= r� Zadd_user�LockdownWhitelistUserAdded�r. r; r@ r2 r2 r3 �addLockdownWhitelistUser� s
z"FirewallD.addLockdownWhitelistUserc C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )z Remove lockdown user
z*policies.removeLockdownWhitelistUser('%s')N)
r r_ r r8 rA r$ r= r� Z remove_user� LockdownWhitelistUserRemovedr� r2 r2 r3 �removeLockdownWhitelistUser� s
z%FirewallD.removeLockdownWhitelistUserc C s( t |t�}t�d| � | jjj�|�S )z Query lockdown user
z)policies.queryLockdownWhitelistUser('%s'))r r_ r r8 r$ r= r� Zhas_userr� r2 r2 r3 �queryLockdownWhitelistUser� s
z$FirewallD.queryLockdownWhitelistUserc C s t �d� | jjj�� S )r� z$policies.getLockdownWhitelistUsers())r r8 r$ r= r� Z get_usersrv r2 r2 r3 �getLockdownWhitelistUsers s
z#FirewallD.getLockdownWhitelistUsersc C s t �d| � d S )Nz LockdownWhitelistUserAdded('%s')rx �r. r; r2 r2 r3 r� s z$FirewallD.LockdownWhitelistUserAddedc C s t �d| � d S )Nz"LockdownWhitelistUserRemoved('%s')rx r� r2 r2 r3 r� s z&FirewallD.LockdownWhitelistUserRemovedc C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )� Add lockdown context
z*policies.addLockdownWhitelistContext('%s')N)
r r_ r r8 rA r$ r= r� Z add_context� LockdownWhitelistContextAdded�r. r9 r@ r2 r2 r3 �addLockdownWhitelistContext s
z%FirewallD.addLockdownWhitelistContextc C s@ t |t�}t�d| � | �|� | jjj�|� | � |� dS )z Remove lockdown context
z-policies.removeLockdownWhitelistContext('%s')N)
r r_ r r8 rA r$ r= r� Zremove_context� LockdownWhitelistContextRemovedr� r2 r2 r3 � removeLockdownWhitelistContext, s
z(FirewallD.removeLockdownWhitelistContextc C s( t |t�}t�d| � | jjj�|�S )z Query lockdown context
z,policies.queryLockdownWhitelistContext('%s'))r r_ r r8 r$ r= r� Z has_contextr� r2 r2 r3 � queryLockdownWhitelistContext9 s
z'FirewallD.queryLockdownWhitelistContextc C s t �d� | jjj�� S )r� z'policies.getLockdownWhitelistContexts())r r8 r$ r= r� Z get_contextsrv r2 r2 r3 � getLockdownWhitelistContextsE s
z&FirewallD.getLockdownWhitelistContextsc C s t �d| � d S )Nz#LockdownWhitelistContextAdded('%s')rx �r. r9 r2 r2 r3 r� P s z'FirewallD.LockdownWhitelistContextAddedc C s t �d| � d S )Nz%LockdownWhitelistContextRemoved('%s')rx r� r2 r2 r3 r� U s z)FirewallD.LockdownWhitelistContextRemovedc C s* t �d� | �|� | j�� | �� dS )zfEnable panic mode.
All ingoing and outgoing connections and packets will be blocked.
zenablePanicMode()N)r r8 rA r$ Zenable_panic_mode�PanicModeEnabledrv r2 r2 r3 �enablePanicMode^ s
zFirewallD.enablePanicModec C s* t �d� | �|� | j�� | �� dS )z�Disable panic mode.
Enables normal mode: Allowed ingoing and outgoing connections
will not be blocked anymore
zdisablePanicMode()N)r r8 rA r$ Zdisable_panic_mode�PanicModeDisabledrv r2 r2 r3 �disablePanicModel s
zFirewallD.disablePanicModec C s t �d� | j�� S )NzqueryPanicMode())r r8 r$ Zquery_panic_moderv r2 r2 r3 �queryPanicMode{ s
zFirewallD.queryPanicModec C s t �d� d S )NzPanicModeEnabled()rx r6 r2 r2 r3 r� � s zFirewallD.PanicModeEnabledc C s t �d� d S )NzPanicModeDisabled()rx r6 r2 r2 r3 r� � s zFirewallD.PanicModeDisabledz&(sssbsasa(ss)asba(ssss)asasasasa(ss)b)c C s$ t |t�}t�d|� | jj�|�S )NzgetZoneSettings(%s))r r_ r r8 r$ r� Zget_config_with_settings�r. r� r@ r2 r2 r3 �getZoneSettings� s
zFirewallD.getZoneSettingsc C s$ t |t�}t�d|� | jj�|�S )NzgetZoneSettings2(%s))r r_ r r8 r$ r� � get_config_with_settings_dictr� r2 r2 r3 r� � s
zFirewallD.getZoneSettings2zsa{sv}c C sn t |t�}t�d|� | �|� | jj�|t |�|� | �||� d|v rj|d dkrjt �
|d | j |� d S )NzsetZoneSettings2(%s)�timeoutr ) r r_ r r8 rA r$ r� � set_config_with_settings_dict� ZoneUpdatedr �timeout_add_seconds�ZoneUpdatedCurrentSettings)r. r� r� r@ r2 r2 r3 �setZoneSettings2� s
�zFirewallD.setZoneSettings2c C s t �d||f � d S )Nz zone.ZoneUpdated('%s', '%s')rx )r. r� r� r2 r2 r3 r� � s zFirewallD.ZoneUpdatedc C s | � || jj�|�� d S r4 )r� r$ r� r� �r. r� r2 r2 r3 r� � s z$FirewallD.ZoneUpdatedCurrentSettingsc C s$ t |t�}t�d|� | jj�|�S )Nz policy.getPolicySettings(%s))r r_ r r8 r$ r� r� )r. r� r@ r2 r2 r3 r� � s
zFirewallD.getPolicySettingsc C sn t |t�}t�d|� | �|� | jj�|t |�|� | �||� d|v rj|d dkrjt �
|d | j |� d S )Nz policy.setPolicySettings(%s)r� r ) r r_ r r8 rA r$ r� r� �
PolicyUpdatedr r� � PolicyUpdatedCurrentSettings)r. r� r� r@ r2 r2 r3 �setPolicySettings� s
�zFirewallD.setPolicySettingsc C s t �d||f � d S )Nz policy.PolicyUpdated('%s', '%s')rx )r. r� r� r2 r2 r3 r� � s zFirewallD.PolicyUpdatedc C s | � || jj�|�� d S r4 )r� r$ r� r� )r. r� r2 r2 r3 r� � s z&FirewallD.PolicyUpdatedCurrentSettingsc C s t �d� | jj�� S )NzlistServices())r r8 r$ r( r| rv r2 r2 r3 � listServices� s
zFirewallD.listServicesz(sssa(ss)asa{ss}asa(ss))c C s� t |t�}t�d|� | jj�|�}|�� }g }td�D ]P}|j | d |vrp|�
t � t
||j | d ��� q8|�
||j | d � q8t|�S )NzgetServiceSettings(%s)� r )r r_ r r8 r$ r( � get_service�export_config_dict�rangeZIMPORT_EXPORT_STRUCTURE�appendr� r� �getattr�tuple)r. r( r@ �objZ conf_dictZ conf_listr� r2 r2 r3 r} � s
"z FirewallD.getServiceSettingsc C s, t |t�}t�d|� | jj�|�}|�� S )NzgetServiceSettings2(%s))r r_ r r8 r$ r( r� r� )r. r( r@ r� r2 r2 r3 �getServiceSettings2� s
z FirewallD.getServiceSettings2c C s t �d� | jj�� S )NzlistIcmpTypes())r r8 r$ r� r� rv r2 r2 r3 �
listIcmpTypes s
zFirewallD.listIcmpTypesc C s( t |t�}t�d|� | jj�|��� S )NzgetIcmpTypeSettings(%s))r r_ r r8 r$ r� Z get_icmptyper� )r. r� r@ r2 r2 r3 r� s
z FirewallD.getIcmpTypeSettingsc C s t �d� | j�� S )NzgetLogDenied())r r8 r$ Zget_log_deniedrv r2 r2 r3 � getLogDenied s
zFirewallD.getLogDeniedc C sX t |t�}t�d| � | �|� | j�|� | �|� | j�� | j �� | �
� d S )NzsetLogDenied('%s')) r r_ r r8 rA r$ Zset_log_denied�LogDeniedChangedrt r ru �r. �valuer@ r2 r2 r3 � setLogDenied) s
zFirewallD.setLogDeniedc C s t �d| � d S )NzLogDeniedChanged('%s')rx �r. r� r2 r2 r3 r� 9 s zFirewallD.LogDeniedChangedc C s t �d� dS )NzgetAutomaticHelpers()rL rx rv r2 r2 r3 �getAutomaticHelpersB s
z FirewallD.getAutomaticHelpersc C s& t |t�}t�d| � | �|� d S )NzsetAutomaticHelpers('%s'))r r_ r r8 rA r� r2 r2 r3 �setAutomaticHelpersM s
z FirewallD.setAutomaticHelpersc C s t �d| � d S )Nz AutomaticHelpersChanged('%s')rx r� r2 r2 r3 �AutomaticHelpersChangedY s z!FirewallD.AutomaticHelpersChangedc C s t �d� | j�� S )NzgetDefaultZone())r r8 r$ Zget_default_zonerv r2 r2 r3 �getDefaultZoneb s
zFirewallD.getDefaultZonec C s< t |t�}t�d| � | �|� | j�|� | �|� d S )NzsetDefaultZone('%s'))r r_ r r8 rA r$ Zset_default_zone�DefaultZoneChangedr� r2 r2 r3 �setDefaultZonek s
zFirewallD.setDefaultZonec C s t �d| � d S )NzDefaultZoneChanged('%s')rx r� r2 r2 r3 r� w s z FirewallD.DefaultZoneChangedc C s t �d� | jj�� S )Nzpolicy.getPolicies())r r8 r$ r� r� rv r2 r2 r3 � getPolicies� s
zFirewallD.getPoliciesz
a{sa{sas}}c C sX t �d� i }| jj�� D ]8}i ||< | jj�|�|| d< | jj�|�|| d< q|S )Nzpolicy.getActivePolicies()Z
ingress_zonesZ egress_zones)r r8 r$ r� Z)get_active_policies_not_derived_from_zoneZlist_ingress_zonesZlist_egress_zones)r. r@ r= r� r2 r2 r3 �getActivePolicies� s
zFirewallD.getActivePoliciesc C s t �d� | jj�� S )Nzzone.getZones())r r8 r$ r� r� rv r2 r2 r3 �getZones� s
zFirewallD.getZonesc C s� t �d� i }| jj�� D ]l}| jj�|�}| jj�|�}t|�t|� dkri ||< t|�dkrn||| d< t|�dkr||| d< q|S )Nzzone.getActiveZones()r �
interfaces�sources)r r8 r$ r� r� �list_interfaces� list_sources�len)r. r@ Zzonesr� r� r� r2 r2 r3 �getActiveZones� s
zFirewallD.getActiveZonesc C s2 t |t�}t�d| � | jj�|�}|r.|S dS )z�Return the zone an interface belongs to.
:Parameters:
`interface` : str
Name of the interface
:Returns: str. The name of the zone.
z zone.getZoneOfInterface('%s')rr )r r_ r r8 r$ r� Zget_zone_of_interface)r. rq r@ r� r2 r2 r3 �getZoneOfInterface� s
z FirewallD.getZoneOfInterfacec C s2 t |t�}t�d| � | jj�|�}|r.|S dS )Nzzone.getZoneOfSource('%s')rr )r r_ r r8 r$ r� Zget_zone_of_source)r. �sourcer@ r� r2 r2 r3 �getZoneOfSource� s
zFirewallD.getZoneOfSourcec C s dS )NFr2 r� r2 r2 r3 � isImmutable� s zFirewallD.isImmutablec C sR t |t�}t |t�}t�d||f � | �|� | jj�|||�}| �||� |S )zPAdd an interface to a zone.
If zone is empty, use default zone.
z zone.addInterface('%s', '%s')) r r_ r r8 rA r$ r� Z
add_interface�InterfaceAdded�r. r� rq r@ �_zoner2 r2 r3 � addInterface� s
zFirewallD.addInterfacec C s" t |t�}t |t�}| �|||�S )z�Change a zone an interface is part of.
If zone is empty, use default zone.
This function is deprecated, use changeZoneOfInterface instead
)r r_ �changeZoneOfInterface�r. r� rq r@ r2 r2 r3 �
changeZone� s
zFirewallD.changeZonec C sR t |t�}t |t�}t�d||f � | �|� | jj�|||�}| �||� |S )z[Change a zone an interface is part of.
If zone is empty, use default zone.
z&zone.changeZoneOfInterface('%s', '%s')) r r_ r r8 rA r$ r� Zchange_zone_of_interface�ZoneOfInterfaceChangedr r2 r2 r3 r s
z FirewallD.changeZoneOfInterfacec C sP t |t�}t |t�}t�d||f � | �|� | jj�||�}| �||� |S )zkRemove interface from a zone.
If zone is empty, remove from zone the interface belongs to.
z zone.removeInterface('%s', '%s')) r r_ r r8 rA r$ r� Zremove_interface�InterfaceRemovedr r2 r2 r3 r� s
zFirewallD.removeInterfacec C s6 t |t�}t |t�}t�d||f � | jj�||�S )z^Return true if an interface is in a zone.
If zone is empty, use default zone.
z zone.queryInterface('%s', '%s'))r r_ r r8 r$ r� Zquery_interfacer r2 r2 r3 �queryInterface' s
zFirewallD.queryInterfacec C s& t |t�}t�d| � | jj�|�S )z]Return the list of interfaces of a zone.
If zone is empty, use default zone.
zzone.getInterfaces('%s'))r r_ r r8 r$ r� r� r� r2 r2 r3 r� 4 s
zFirewallD.getInterfacesc C s t �d||f � d S )Nz zone.InterfaceAdded('%s', '%s')rx �r. r� rq r2 r2 r3 r B s zFirewallD.InterfaceAddedc C s t �d||f � dS )z,
This signal is deprecated.
z zone.ZoneChanged('%s', '%s')Nrx r r2 r2 r3 � ZoneChangedG s zFirewallD.ZoneChangedc C s" t �d||f � | �||� d S )Nz'zone.ZoneOfInterfaceChanged('%s', '%s'))r r8 r r r2 r2 r3 r O s �z FirewallD.ZoneOfInterfaceChangedc C s t �d||f � d S )Nz!zone.InterfaceRemoved('%s', '%s')rx r r2 r2 r3 r V s zFirewallD.InterfaceRemovedc C sR t |t�}t |t�}t�d||f � | �|� | jj�|||�}| �||� |S )zLAdd a source to a zone.
If zone is empty, use default zone.
zzone.addSource('%s', '%s')) r r_ r r8 rA r$ r� Z
add_source� SourceAdded�r. r� r� r@ r r2 r2 r3 � addSource_ s
zFirewallD.addSourcec C sR t |t�}t |t�}t�d||f � | �|� | jj�|||�}| �||� |S )zXChange a zone an source is part of.
If zone is empty, use default zone.
z#zone.changeZoneOfSource('%s', '%s')) r r_ r r8 rA r$ r� Zchange_zone_of_source�ZoneOfSourceChangedr r2 r2 r3 �changeZoneOfSourcep s
z FirewallD.changeZoneOfSourcec C sP t |t�}t |t�}t�d||f � | �|� | jj�||�}| �||� |S )zeRemove source from a zone.
If zone is empty, remove from zone the source belongs to.
z zone.removeSource('%s', '%s')) r r_ r r8 rA r$ r� Z
remove_source�
SourceRemovedr r2 r2 r3 � removeSource� s
zFirewallD.removeSourcec C s6 t |t�}t |t�}t�d||f � | jj�||�S )z[Return true if an source is in a zone.
If zone is empty, use default zone.
z zone.querySource('%s', '%s'))r r_ r r8 r$ r� Z query_source)r. r� r� r@ r2 r2 r3 � querySource� s
zFirewallD.querySourcec C s& t |t�}t�d| � | jj�|�S )zZReturn the list of sources of a zone.
If zone is empty, use default zone.
zzone.getSources('%s'))r r_ r r8 r$ r� r� r� r2 r2 r3 �
getSources� s
zFirewallD.getSourcesc C s t �d||f � d S )Nz zone.SourceAdded('%s', '%s')rx �r. r� r� r2 r2 r3 r
� s zFirewallD.SourceAddedc C s t �d||f � d S )Nz$zone.ZoneOfSourceChanged('%s', '%s')rx r r2 r2 r3 r � s z FirewallD.ZoneOfSourceChangedc C s t �d||f � d S )Nz zone.SourceRemoved('%s', '%s')rx r r2 r2 r3 r � s zFirewallD.SourceRemovedZssic C sx t |t�}t |t�}t |t�}t�d||f � t|d�}| jj�|||�}|dkrft �
|| j ||� | � |||� |S )Nz zone.addRichRule('%s', '%s')�Zrule_strr )
r r_ r� r r8 r r$ r� �add_ruler r� �RichRuleRemoved�
RichRuleAdded)r. r� �ruler� r@ r� r r2 r2 r3 � addRichRule� s
zFirewallD.addRichRulec C sP t |t�}t |t�}t�d||f � t|d�}| jj�||�}| �||� |S )Nz zone.removeRichRule('%s', '%s')r ) r r_ r r8 r r$ r� � remove_ruler )r. r� r r@ r� r r2 r2 r3 �removeRichRule� s
zFirewallD.removeRichRulec C s@ t |t�}t |t�}t�d||f � t|d�}| jj�||�S )Nz zone.queryRichRule('%s', '%s')r )r r_ r r8 r r$ r� �
query_rule)r. r� r r@ r� r2 r2 r3 �
queryRichRule� s
zFirewallD.queryRichRulec C s& t |t�}t�d| � | jj�|�S )Nzzone.getRichRules('%s'))r r_ r r8 r$ r� Z
list_rulesr� r2 r2 r3 � getRichRules� s
zFirewallD.getRichRulesc C s t �d|||f � d S )Nz"zone.RichRuleAdded('%s', '%s', %d)rx )r. r� r r� r2 r2 r3 r � s zFirewallD.RichRuleAddedc C s t �d||f � d S )Nz zone.RichRuleRemoved('%s', '%s')rx )r. r� r r2 r2 r3 r � s zFirewallD.RichRuleRemovedc C s| t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�||||�}|dkrjt �
|| j ||� | � |||� |S )Nz zone.addService('%s', '%s', %d)r )
r r_ r� r r8 rA r$ r� Z add_servicer r� �ServiceRemoved� ServiceAdded)r. r� r( r� r@ r r2 r2 r3 r s
zFirewallD.addServicec C sP t |t�}t |t�}t�d||f � | �|� | jj�||�}| �||� |S )Nz zone.removeService('%s', '%s')) r r_ r r8 rA r$ r� Zremove_servicer" )r. r� r( r@ r r2 r2 r3 �
removeService s
zFirewallD.removeServicec C s6 t |t�}t |t�}t�d||f � | jj�||�S )Nz zone.queryService('%s', '%s'))r r_ r r8 r$ r� Z
query_service)r. r� r( r@ r2 r2 r3 � queryService( s
zFirewallD.queryServicec C s& t |t�}t�d| � | jj�|�S )Nzzone.getServices('%s'))r r_ r r8 r$ r� Z
list_servicesr� r2 r2 r3 � getServices3 s
zFirewallD.getServicesc C s t �d|||f � d S )Nz!zone.ServiceAdded('%s', '%s', %d)rx )r. r� r( r� r2 r2 r3 r# ? s �zFirewallD.ServiceAddedc C s t �d||f � d S )Nz zone.ServiceRemoved('%s', '%s')rx )r. r� r( r2 r2 r3 r" E s zFirewallD.ServiceRemovedZsssic C s� t |t�}t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�|||||�}|dkrxt �
|| j |||� | � ||||� |S )Nz zone.addPort('%s', '%s', '%s')r )
r r_ r� r r8 rA r$ r� Zadd_portr r� � PortRemoved� PortAdded�r. r� �port�protocolr� r@ r r2 r2 r3 �addPortN s
�
zFirewallD.addPortZsssc C s` t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�|||�}| �|||� |S )Nz!zone.removePort('%s', '%s', '%s')) r r_ r r8 rA r$ r� Z remove_portr' �r. r� r* r+ r@ r r2 r2 r3 �
removePortc s
�
zFirewallD.removePortc C sD t |t�}t |t�}t |t�}t�d|||f � | jj�|||�S )Nz zone.queryPort('%s', '%s', '%s'))r r_ r r8 r$ r� Z
query_port�r. r� r* r+ r@ r2 r2 r3 � queryPortt s
zFirewallD.queryPortZaasc C s& t |t�}t�d| � | jj�|�S )Nzzone.getPorts('%s'))r r_ r r8 r$ r� Z
list_portsr� r2 r2 r3 �getPorts� s
zFirewallD.getPortsr c C s t �d||||f � d S )Nz$zone.PortAdded('%s', '%s', '%s', %d)rx �r. r� r* r+ r� r2 r2 r3 r( � s
�zFirewallD.PortAddedc C s t �d|||f � d S )Nz"zone.PortRemoved('%s', '%s', '%s')rx �r. r� r* r+ r2 r2 r3 r' � s �zFirewallD.PortRemovedc C sz t |t�}t |t�}t |t�}t�d||f � | �|� | jj�||||�}|dkrht �
|| j ||� | � |||� |S )Nz zone.enableProtocol('%s', '%s')r )
r r_ r� r r8 rA r$ r� Z add_protocolr r� �ProtocolRemoved�
ProtocolAdded)r. r� r+ r� r@ r r2 r2 r3 � addProtocol� s
zFirewallD.addProtocolc C sP t |t�}t |t�}t�d||f � | �|� | jj�||�}| �||� |S )Nz zone.removeProtocol('%s', '%s')) r r_ r r8 rA r$ r� Zremove_protocolr4 )r. r� r+ r@ r r2 r2 r3 �removeProtocol� s
zFirewallD.removeProtocolc C s6 t |t�}t |t�}t�d||f � | jj�||�S )Nz zone.queryProtocol('%s', '%s'))r r_ r r8 r$ r� Zquery_protocol)r. r� r+ r@ r2 r2 r3 �
queryProtocol� s
zFirewallD.queryProtocolc C s& t |t�}t�d| � | jj�|�S )Nzzone.getProtocols('%s'))r r_ r r8 r$ r� Zlist_protocolsr� r2 r2 r3 � getProtocols� s
zFirewallD.getProtocolsc C s t �d|||f � d S )Nz"zone.ProtocolAdded('%s', '%s', %d)rx )r. r� r+ r� r2 r2 r3 r5 � s �zFirewallD.ProtocolAddedc C s t �d||f � d S )Nz zone.ProtocolRemoved('%s', '%s')rx )r. r� r+ r2 r2 r3 r4 � s zFirewallD.ProtocolRemovedc C s� t |t�}t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�|||||�}|dkrxt �
|| j |||� | � ||||� |S )Nz$zone.addSourcePort('%s', '%s', '%s')r )
r r_ r� r r8 rA r$ r� Zadd_source_portr r� �SourcePortRemoved�SourcePortAddedr) r2 r2 r3 �
addSourcePort� s"
�
� �zFirewallD.addSourcePortc C s` t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�|||�}| �|||� |S )Nz'zone.removeSourcePort('%s', '%s', '%s')) r r_ r r8 rA r$ r� Zremove_source_portr: r- r2 r2 r3 �removeSourcePort� s
�
zFirewallD.removeSourcePortc C sD t |t�}t |t�}t |t�}t�d|||f � | jj�|||�S )Nz&zone.querySourcePort('%s', '%s', '%s'))r r_ r r8 r$ r� Zquery_source_portr/ r2 r2 r3 �querySourcePort
s
�zFirewallD.querySourcePortc C s& t |t�}t�d| � | jj�|�S )Nzzone.getSourcePorts('%s'))r r_ r r8 r$ r� Zlist_source_portsr� r2 r2 r3 �getSourcePorts s
zFirewallD.getSourcePortsc C s t �d||||f � d S )Nz*zone.SourcePortAdded('%s', '%s', '%s', %d)rx r2 r2 r2 r3 r; & s
�zFirewallD.SourcePortAddedc C s t �d|||f � d S )Nz(zone.SourcePortRemoved('%s', '%s', '%s')rx r3 r2 r2 r3 r: , s
�zFirewallD.SourcePortRemoved�sic C sf t |t�}t |t�}t�d| � | �|� | jj�|||�}|dkrVt �
|| j |� | � ||� |S )Nzzone.addMasquerade('%s')r )
r r_ r� r r8 rA r$ r� Zadd_masquerader r� �MasqueradeRemoved�MasqueradeAdded)r. r� r� r@ r r2 r2 r3 �
addMasquerade6 s
zFirewallD.addMasqueradec C s> t |t�}t�d| � | �|� | jj�|�}| �|� |S )Nzzone.removeMasquerade('%s')) r r_ r r8 rA r$ r� Zremove_masqueraderA �r. r� r@ r r2 r2 r3 �removeMasqueradeH s
zFirewallD.removeMasqueradec C s& t |t�}t�d| � | jj�|�S )Nzzone.queryMasquerade('%s'))r r_ r r8 r$ r� Zquery_masquerader� r2 r2 r3 �queryMasqueradeV s
zFirewallD.queryMasqueradec C s t �d||f � d S )Nz zone.MasqueradeAdded('%s', %d)rx )r. r� r� r2 r2 r3 rB ` s zFirewallD.MasqueradeAddedc C s t �d| � d S )Nz zone.MasqueradeRemoved('%s')rx r� r2 r2 r3 rA e s zFirewallD.MasqueradeRemovedZsssssic C s� t |t�}t |t�}t |t�}t |t�}t |t�}t |t�}t�d|||||f � | �|� | jj�|||||||�}|dkr�t �
|| j |||||� | � ||||||� |S )Nz1zone.addForwardPort('%s', '%s', '%s', '%s', '%s')r )
r r_ r� r r8 rA r$ r� Zadd_forward_portr r� �ForwardPortRemoved�ForwardPortAdded) r. r� r* r+ �toport�toaddrr� r@ r r2 r2 r3 �addForwardPortn s&
�
��zFirewallD.addForwardPortZsssssc C s� t |t�}t |t�}t |t�}t |t�}t |t�}t�d|||||f � | �|� | jj�|||||�}| �|||||� |S )Nz4zone.removeForwardPort('%s', '%s', '%s', '%s', '%s')) r r_ r r8 rA r$ r� Zremove_forward_portrG )r. r� r* r+ rI rJ r@ r r2 r2 r3 �removeForwardPort� s
�
�zFirewallD.removeForwardPortc C s` t |t�}t |t�}t |t�}t |t�}t |t�}t�d|||||f � | jj�|||||�S )Nz3zone.queryForwardPort('%s', '%s', '%s', '%s', '%s'))r r_ r r8 r$ r� Zquery_forward_port)r. r� r* r+ rI rJ r@ r2 r2 r3 �queryForwardPort� s
��zFirewallD.queryForwardPortc C s& t |t�}t�d| � | jj�|�S )Nzzone.getForwardPorts('%s'))r r_ r r8 r$ r� Zlist_forward_portsr� r2 r2 r3 �getForwardPorts� s
zFirewallD.getForwardPortsc C s t �d||||||f � d S )Nz7zone.ForwardPortAdded('%s', '%s', '%s', '%s', '%s', %d)rx )r. r� r* r+ rI rJ r� r2 r2 r3 rH � s �zFirewallD.ForwardPortAddedc C s t �d|||||f � d S )Nz5zone.ForwardPortRemoved('%s', '%s', '%s', '%s', '%s')rx )r. r� r* r+ rI rJ r2 r2 r3 rG � s �z FirewallD.ForwardPortRemovedc C sz t |t�}t |t�}t |t�}t�d||f � | �|� | jj�||||�}|dkrht �
|| j ||� | � |||� |S )Nz zone.enableIcmpBlock('%s', '%s')r )
r r_ r� r r8 rA r$ r� Zadd_icmp_blockr r� �IcmpBlockRemoved�IcmpBlockAdded)r. r� �icmpr� r@ r r2 r2 r3 � addIcmpBlock� s
zFirewallD.addIcmpBlockc C sP t |t�}t |t�}t�d||f � | �|� | jj�||�}| �||� |S )Nz zone.removeIcmpBlock('%s', '%s')) r r_ r r8 rA r$ r� Zremove_icmp_blockrO )r. r� rQ r@ r r2 r2 r3 �removeIcmpBlock� s
zFirewallD.removeIcmpBlockc C s6 t |t�}t |t�}t�d||f � | jj�||�S )Nz zone.queryIcmpBlock('%s', '%s'))r r_ r r8 r$ r� Zquery_icmp_block)r. r� rQ r@ r2 r2 r3 �queryIcmpBlock� s
zFirewallD.queryIcmpBlockc C s& t |t�}t�d| � | jj�|�S )Nzzone.getIcmpBlocks('%s'))r r_ r r8 r$ r� Zlist_icmp_blocksr� r2 r2 r3 �
getIcmpBlocks� s
zFirewallD.getIcmpBlocksc C s t �d|||f � d S )Nz#zone.IcmpBlockAdded('%s', '%s', %d)rx )r. r� rQ r� r2 r2 r3 rP s �zFirewallD.IcmpBlockAddedc C s t �d||f � d S )Nz!zone.IcmpBlockRemoved('%s', '%s')rx )r. r� rQ r2 r2 r3 rO s zFirewallD.IcmpBlockRemovedc C s@ t |t�}t�d| � | �|� | jj�||�}| �|� |S )Nz zone.addIcmpBlockInversion('%s')) r r_ r r8 rA r$ r� Zadd_icmp_block_inversion�IcmpBlockInversionAddedrD r2 r2 r3 �addIcmpBlockInversion s
z FirewallD.addIcmpBlockInversionc C s> t |t�}t�d| � | �|� | jj�|�}| �|� |S )Nz#zone.removeIcmpBlockInversion('%s')) r r_ r r8 rA r$ r� Zremove_icmp_block_inversion�IcmpBlockInversionRemovedrD r2 r2 r3 �removeIcmpBlockInversion" s
z"FirewallD.removeIcmpBlockInversionc C s& t |t�}t�d| � | jj�|�S )Nz"zone.queryIcmpBlockInversion('%s'))r r_ r r8 r$ r� Zquery_icmp_block_inversionr� r2 r2 r3 �queryIcmpBlockInversion0 s
z!FirewallD.queryIcmpBlockInversionc C s t �d| � d S )Nz"zone.IcmpBlockInversionAdded('%s')rx r� r2 r2 r3 rV : s z!FirewallD.IcmpBlockInversionAddedc C s t �d| � d S )Nz$zone.IcmpBlockInversionRemoved('%s')rx r� r2 r2 r3 rX ? s z#FirewallD.IcmpBlockInversionRemovedc C s` t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�|||� | �|||� d S )Nz!direct.addChain('%s', '%s', '%s')) r r_ r r8 rA r$ r� Z add_chain�
ChainAdded�r. �ipv�table�chainr@ r2 r2 r3 �addChainJ s
zFirewallD.addChainc C s` t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�|||� | �|||� d S )Nz$direct.removeChain('%s', '%s', '%s')) r r_ r r8 rA r$ r� Z remove_chain� ChainRemovedr\ r2 r2 r3 � removeChainY s
zFirewallD.removeChainc C sD t |t�}t |t�}t |t�}t�d|||f � | jj�|||�S )Nz#direct.queryChain('%s', '%s', '%s'))r r_ r r8 r$ r� Z query_chainr\ r2 r2 r3 �
queryChainh s
zFirewallD.queryChainc C s6 t |t�}t |t�}t�d||f � | jj�||�S )Nz direct.getChains('%s', '%s'))r r_ r r8 r$ r� Z
get_chains)r. r] r^ r@ r2 r2 r3 � getChainsu s
zFirewallD.getChainsza(sss)c C s t �d� | jj�� S )Nzdirect.getAllChains())r r8 r$ r� r� rv r2 r2 r3 � getAllChains� s
zFirewallD.getAllChainsc C s t �d|||f � d S )Nz#direct.ChainAdded('%s', '%s', '%s')rx �r. r] r^ r_ r2 r2 r3 r[ � s zFirewallD.ChainAddedc C s t �d|||f � d S )Nz%direct.ChainRemoved('%s', '%s', '%s')rx rf r2 r2 r3 ra � s
�zFirewallD.ChainRemovedZsssiasc
C s� t |t�}t |t�}t |t�}t |t�}tdd� |D ��}t�d||||d�|�f � | �|� | jj �
|||||� | � |||||� d S )Nc s s | ]}t |t�V qd S r4 �r r_ ��.0r� r2 r2 r3 � <genexpr>� � z$FirewallD.addRule.<locals>.<genexpr>z*direct.addRule('%s', '%s', '%s', %d, '%s')�',') r r_ r� r� r r8 �joinrA r$ r� r � RuleAdded�r. r] r^ r_ �priority�argsr@ r2 r2 r3 �addRule� s
�
zFirewallD.addRulec
C s� t |t�}t |t�}t |t�}t |t�}tdd� |D ��}t�d||||d�|�f � | �|� | jj �
|||||� | � |||||� d S )Nc s s | ]}t |t�V qd S r4 rg rh r2 r2 r3 rj � rk z'FirewallD.removeRule.<locals>.<genexpr>z-direct.removeRule('%s', '%s', '%s', %d, '%s')rl ) r r_ r� r� r r8 rm rA r$ r� r � RuleRemovedro r2 r2 r3 �
removeRule� s
�
zFirewallD.removeRulec C s� t |t�}t |t�}t |t�}t�d|||f � | �|� | jj�|||�D ]0\}}| jj�|||||� | � |||||� qNd S )Nz$direct.removeRules('%s', '%s', '%s'))
r r_ r r8 rA r$ r� � get_rulesr rs )r. r] r^ r_ r@ rp rq r2 r2 r3 � removeRules� s
zFirewallD.removeRulesc
C sn t |t�}t |t�}t |t�}t |t�}tdd� |D ��}t�d||||d�|�f � | jj� |||||�S )Nc s s | ]}t |t�V qd S r4 rg rh r2 r2 r3 rj � rk z&FirewallD.queryRule.<locals>.<genexpr>z,direct.queryRule('%s', '%s', '%s', %d, '%s')rl )
r r_ r� r� r r8 rm r$ r� r ro r2 r2 r3 � queryRule� s
�zFirewallD.queryRuleza(ias)c C sD t |t�}t |t�}t |t�}t�d|||f � | jj�|||�S )Nz!direct.getRules('%s', '%s', '%s'))r r_ r r8 r$ r� ru r\ r2 r2 r3 �getRules� s
zFirewallD.getRulesz a(sssias)c C s t �d� | jj�� S )Nzdirect.getAllRules())r r8 r$ r� r� rv r2 r2 r3 � getAllRules� s
zFirewallD.getAllRulesc
C s" t �d||||d�|�f � d S )Nz,direct.RuleAdded('%s', '%s', '%s', %d, '%s')rl �r r8 rm �r. r] r^ r_ rp rq r2 r2 r3 rn � s �zFirewallD.RuleAddedc
C s" t �d||||d�|�f � d S )Nz.direct.RuleRemoved('%s', '%s', '%s', %d, '%s')rl rz r{ r2 r2 r3 rs � s �zFirewallD.RuleRemovedrR c
C s� t |t�}tdd� |D ��}t�d|d�|�f � | �|� z| jj� ||�W S t
y� } zj|dv rvt g d��}n t ddg�}t|�}|j t
jkr�tt |�|@ �d kr�t�|� t|��� W Y d }~n
d }~0 0 d S )
Nc s s | ]}t |t�V qd S r4 rg rh r2 r2 r3 rj rk z(FirewallD.passthrough.<locals>.<genexpr>z direct.passthrough('%s', '%s')rl )rF rJ )z-Cz--check�-L�--listr| r} r )r r_ r� r r8 rm rA r$ r� � passthroughr" �set�coder! ZCOMMAND_FAILEDr� r� r )r. r] rq r@ r? Z
query_args�msgr2 r2 r3 r~ s
zFirewallD.passthroughc C s\ t |�}tdd� |D ��}t�d|d�|�f � | �|� | jj�||� | � ||� d S )Nc s s | ]}t |�V qd S r4 �r rh r2 r2 r3 rj - rk z+FirewallD.addPassthrough.<locals>.<genexpr>z!direct.addPassthrough('%s', '%s')rl )
r r� r r8 rm rA r$ r� Zadd_passthrough�PassthroughAdded�r. r] rq r@ r2 r2 r3 �addPassthrough% s �
zFirewallD.addPassthroughc C s\ t |�}tdd� |D ��}t�d|d�|�f � | �|� | jj�||� | � ||� d S )Nc s s | ]}t |�V qd S r4 r� rh r2 r2 r3 rj < rk z.FirewallD.removePassthrough.<locals>.<genexpr>z$direct.removePassthrough('%s', '%s')rl )
r r� r r8 rm rA r$ r� Zremove_passthrough�PassthroughRemovedr� r2 r2 r3 �removePassthrough4 s �
zFirewallD.removePassthroughc C sB t |�}tdd� |D ��}t�d|d�|�f � | jj�||�S )Nc s s | ]}t |�V qd S r4 r� rh r2 r2 r3 rj K rk z-FirewallD.queryPassthrough.<locals>.<genexpr>z#direct.queryPassthrough('%s', '%s')rl )r r� r r8 rm r$ r� Zquery_passthroughr� r2 r2 r3 �queryPassthroughC s �zFirewallD.queryPassthroughza(sas)c C s t �d� | jj�� S )Nzdirect.getAllPassthroughs())r r8 r$ r� r� rv r2 r2 r3 �getAllPassthroughsP s
z FirewallD.getAllPassthroughsc C s* t �d� t| �� �D ]}| j|� qd S )Nz direct.removeAllPassthroughs())r r8 �reversedr� r� )r. r@ r~ r2 r2 r3 �removeAllPassthroughsZ s
z FirewallD.removeAllPassthroughsc C s" t |�}t�d|� | jj�|�S )Nz direct.getPassthroughs('%s'))r r r8 r$ r� Zget_passthroughs)r. r] r@ r2 r2 r3 �getPassthroughsf s zFirewallD.getPassthroughsc C s t �d|d�|�f � d S )Nz#direct.PassthroughAdded('%s', '%s')rl rz �r. r] rq r2 r2 r3 r� q s �zFirewallD.PassthroughAddedc C s t �d|d�|�f � d S )Nz%direct.PassthroughRemoved('%s', '%s')rl rz r� r2 r2 r3 r� x s �z FirewallD.PassthroughRemovedc C s dS )z� PK_ACTION_ALL implies all other actions, i.e. once a subject is
authorized for PK_ACTION_ALL it's also authorized for any other action.
Use-case is GUI (RHBZ#994729).
Nr2 rv r2 r2 r3 � authorizeAll� s zFirewallD.authorizeAllc C s$ t |�}t�d| � | jj�|�S )Nzipset.queryIPSet('%s'))r r r8 r$ r� Z query_ipset�r. r� r@ r2 r2 r3 �
queryIPSet� s zFirewallD.queryIPSetc C s t �d� | jj�� S )Nzipsets.getIPSets())r r8 r$ r� r� rv r2 r2 r3 � getIPSets� s
zFirewallD.getIPSetsc C s( t |t�}t�d|� | jj�|��� S )NzgetIPSetSettings(%s))r r_ r r8 r$ r� Z get_ipsetr� r� r2 r2 r3 r� � s
zFirewallD.getIPSetSettingsc C sL t |�}t |�}t�d||f � | �|� | jj�||� | �||� d S )Nzipset.addEntry('%s', '%s'))r r r8 rA r$ r� Z add_entry�
EntryAdded�r. r� �entryr@ r2 r2 r3 �addEntry� s
zFirewallD.addEntryc C sL t |�}t |�}t�d||f � | �|� | jj�||� | �||� d S )Nz ipset.removeEntry('%s', '%s'))r r r8 rA r$ r� Z remove_entry� EntryRemovedr� r2 r2 r3 � removeEntry� s
zFirewallD.removeEntryc C s2 t |�}t |�}t�d||f � | jj�||�S )Nz ipset.queryEntry('%s', '%s'))r r r8 r$ r� Z query_entryr� r2 r2 r3 �
queryEntry� s zFirewallD.queryEntryc C s$ t |�}t�d| � | jj�|�S )Nzipset.getEntries('%s'))r r r8 r$ r� � get_entriesr� r2 r2 r3 �
getEntries� s zFirewallD.getEntriesc C s� t |�}t |t�}t�d|d�|�� | jj�|�}| jj�||� t |�}t |�}|| D ]}| �
||� q\|| D ]}| � ||� qvd S )Nz ipset.setEntries('%s', '[%s]')�,) r �listr r8 rm r$ r� r� Z set_entriesr r� r� )r. r� �entriesr@ Z old_entriesZold_entries_setZ entries_setr� r2 r2 r3 �
setEntries� s
zFirewallD.setEntriesc C s& t |�}t |�}t�d||f � d S )Nz ipset.EntryAdded('%s', '%s')�r r r8 �r. r� r� r2 r2 r3 r� � s zFirewallD.EntryAddedc C s& t |�}t |�}t�d||f � d S )Nz ipset.EntryRemoved('%s', '%s')r� r� r2 r2 r3 r� � s zFirewallD.EntryRemovedc C s t �d� | jj�� S )Nzhelpers.getHelpers())r r8 r$ r� r� rv r2 r2 r3 �
getHelpers
s
zFirewallD.getHelpersc C s( t |t�}t�d|� | jj�|��� S )NzgetHelperSettings(%s))r r_ r r8 r$ r� Z
get_helperr� )r. r� r@ r2 r2 r3 r�
s
zFirewallD.getHelperSettings)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)r )N)N)N)N)r )N)N)N)N)r )N)N)N)r )N)N)N)N)r )N)N)N)N)r )N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)N)��__name__�
__module__� __qualname__�__doc__Z
persistentr r& ZPK_ACTION_CONFIGZ default_polkit_auth_requiredr
r+ r7 r% r5 r rA rY r ZPROPERTIES_IFACErf rl r rm r( �signalrn ZPK_ACTION_INFOZINTROSPECTABLE_IFACEro r) rt rw ru ry rz r� ZPK_ACTION_POLICIESrb r� r� ZPK_ACTION_POLICIES_INFOr� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� ZPK_ACTION_CONFIG_INFOr� r` r� r� r� r� ZDBUS_INTERFACE_POLICYr� r� r� r� r� r} r� r� r ZDBUS_SIGNATUREr� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r� r
r� r r r r r r r r r r
r r r r r r! r r r r$ r% r& r# r" r, r. r0 r1 r( r' r6 r7 r8 r9 r5 r4 r< r= r> r? r; r: rC rE rF rB rA rK rL rM rN rH rG rR rS rT rU rP rO rW rY rZ rV rX ZPK_ACTION_DIRECTr ra r` rb ZPK_ACTION_DIRECT_INFOrc rd re r r[ ra rr rt rv rw rx ry rn rs r~ r� r� r� r� r� r� r� r� Z
PK_ACTION_ALLr� rc r� r� r r� r� r� r� r� r� r� r� r� r r� �
__classcell__r2 r2 r0 r3 r @ sv
/��
"
�
�
�
�
� O
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
��
��
��
��
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�)7�__all__Z
gi.repositoryr r� r& Z dbus.serviceZdbus.mainloop.glibZfirewallr Zfirewall.core.fwr Zfirewall.core.richr Zfirewall.core.loggerr Zfirewall.clientr Zfirewall.server.dbusr r
Zfirewall.server.decoratorsr r r
r r r Zfirewall.server.configr Zfirewall.dbus_utilsr r r r r r r r Zfirewall.core.io.functionsr Zfirewall.core.io.ipsetr Zfirewall.core.io.icmptyper Zfirewall.core.io.helperr Zfirewall.core.fw_nmr r Zfirewall.core.fw_ifcfgr r! Zfirewall.errorsr" r r2 r2 r2 r3 �<module> s. (