PATH:
usr
/
lib
/
python3.6
/
site-packages
/
firewall
/
core
/
io
/
__pycache__
/
Editing: lockdown_whitelist.cpython-36.pyc
3 ��g�1 � @ s� d dl jZd dlZd dlZd dlZd dlmZ d dlmZm Z m Z m Z d dl m Z d dlmZmZmZmZmZmZ d dlmZ d dlmZ G dd � d e �ZG d d � d e �ZdS ) � N)�config)�PY2� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�log)�uniqify� checkUser�checkUid� checkCommand� checkContext� u2b_if_py2)�errors)� FirewallErrorc @ s e Zd Zdd� Zdd� ZdS )�!lockdown_whitelist_ContentHandlerc C s t j| |� d| _d S )NF)r �__init__� whitelist)�self�item� r �(/usr/lib/python3.6/lockdown_whitelist.pyr % s z*lockdown_whitelist_ContentHandler.__init__c C sV t j| ||� | jj||� |dkr@| jr6ttjd��d| _�n|dkrr| js\tj d� d S |d }| jj |� n�|dkr�| js�tj d� d S d |kr�yt |d �}W n& t k r� tj d |d � d S X | jj |� nd|kr�| jj|d � n\|d k�r@| j�stj d � d S d |k�r.tj d� d S | jj|d � ntj d| � d S d S )Nr zMore than one whitelist.T�commandz)Parse Error: command outside of whitelist�name�userz&Parse Error: user outside of whitelist�idz"Parse Error: %s is not a valid uid�selinuxz)Parse Error: selinux outside of whitelist�contextzParse Error: no contextzUnknown XML element %s)r � startElementr Zparser_check_element_attrsr r r Z PARSE_ERRORr �error� add_command�int� ValueError�add_uid�add_user� add_context)r r Zattrsr �uidr r r r ) sJ z.lockdown_whitelist_ContentHandler.startElementN)�__name__� __module__� __qualname__r r r r r r r $ s r c s4 e Zd ZdZddgfddgfddgfddgffZdZd gZd d gd d gd �Zddd giZ� fdd�Z dd� Z dd� Z dd� Z dd� Z dd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Zd4d5� Zd6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!dBdC� Z"� Z#S )D�LockdownWhitelistz LockdownWhitelist class �commands� �contexts�users�uidsr z (asasasai)�_Nr r )r r r r r r c s6 t t| �j� || _d | _g | _g | _g | _g | _d S )N) �superr) r �filename�parserr* r, r- r. )r r1 )� __class__r r r n s zLockdownWhitelist.__init__c C s� |d kr.x�|D ]}| j ||d d � |� qW nv|dkrLt|�s�ttj|��nX|dkrjt|�s�ttj|��n:|dkr�t|�s�ttj|��n |d kr�t |�s�ttj |��d S ) Nr* r, r- r. � r r r r% )r* r, r- r. ���) � _check_configr r r �INVALID_COMMANDr �INVALID_CONTEXTr � INVALID_USERr � INVALID_UID)r r r Z all_config�xr r r r6 y s z LockdownWhitelist._check_configc C s4 | j d d �= | jd d �= | jd d �= | jd d �= d S )N)r* r, r- r. )r r r r �cleanup� s zLockdownWhitelist.cleanupc C s: dd� | j D �| _ dd� | jD �| _dd� | jD �| _dS )z� HACK. I haven't been able to make sax parser return strings encoded (because of python 2) instead of in unicode. Get rid of it once we throw out python 2 support.c S s g | ] }t |��qS r )r )�.0r; r r r � <listcomp>� s z4LockdownWhitelist.encode_strings.<locals>.<listcomp>c S s g | ] }t |��qS r )r )r= r; r r r r> � s c S s g | ] }t |��qS r )r )r= r; r r r r> � s N)r* r, r- )r r r r �encode_strings� s z LockdownWhitelist.encode_stringsc C s@ t |�sttj|��|| jkr,| jj|� nttjd| ��d S )Nz!Command "%s" already in whitelist)r r r r7 r* �append�ALREADY_ENABLED)r r r r r r � s z LockdownWhitelist.add_commandc C s, || j kr| j j|� nttjd| ��d S )Nz Command "%s" not in whitelist.)r* �remover r � NOT_ENABLED)r r r r r �remove_command� s z LockdownWhitelist.remove_commandc C s || j kS )N)r* )r r r r r � has_command� s z LockdownWhitelist.has_commandc C sB x<| j D ]2}|jd�r.|j|d d� �r:dS q||krdS qW dS )N�*r4 TFr5 )r* �endswith� startswith)r r Z_commandr r r � match_command� s z LockdownWhitelist.match_commandc C s | j S )N)r* )r r r r � get_commands� s z LockdownWhitelist.get_commandsc C sD t |�sttjt|���|| jkr0| jj|� nttjd| ��d S )Nz Uid "%s" already in whitelist)r r r r: �strr. r@ rA )r r% r r r r" � s zLockdownWhitelist.add_uidc C s, || j kr| j j|� nttjd| ��d S )NzUid "%s" not in whitelist.)r. rB r r rC )r r% r r r � remove_uid� s z LockdownWhitelist.remove_uidc C s || j kS )N)r. )r r% r r r �has_uid� s zLockdownWhitelist.has_uidc C s || j kS )N)r. )r r% r r r � match_uid� s zLockdownWhitelist.match_uidc C s | j S )N)r. )r r r r �get_uids� s zLockdownWhitelist.get_uidsc C s@ t |�sttj|��|| jkr,| jj|� nttjd| ��d S )Nz User "%s" already in whitelist)r r r r9 r- r@ rA )r r r r r r# � s zLockdownWhitelist.add_userc C s, || j kr| j j|� nttjd| ��d S )NzUser "%s" not in whitelist.)r- rB r r rC )r r r r r � remove_user� s z LockdownWhitelist.remove_userc C s || j kS )N)r- )r r r r r �has_user� s zLockdownWhitelist.has_userc C s || j kS )N)r- )r r r r r � match_user� s z LockdownWhitelist.match_userc C s | j S )N)r- )r r r r � get_users� s zLockdownWhitelist.get_usersc C s@ t |�sttj|��|| jkr,| jj|� nttjd| ��d S )Nz!Context "%s" already in whitelist)r r r r8 r, r@ rA )r r r r r r$ " s z LockdownWhitelist.add_contextc C s, || j kr| j j|� nttjd| ��d S )Nz Context "%s" not in whitelist.)r, rB r r rC )r r r r r �remove_context, s z LockdownWhitelist.remove_contextc C s || j kS )N)r, )r r r r r � has_context3 s z LockdownWhitelist.has_contextc C s || j kS )N)r, )r r r r r � match_context6 s z LockdownWhitelist.match_contextc C s | j S )N)r, )r r r r � get_contexts9 s z LockdownWhitelist.get_contextsc C s� | j � | jjd�s&ttjd| j ��t| �}tj� }|j |� y|j | j� W n8 tj k r� } zttj d|j � ��W Y d d }~X nX ~~tr�| j� d S )Nz.xmlz'%s' is missing .xml suffixzNot a valid file: %s)r< r1 rG r r Z INVALID_NAMEr �saxZ make_parserZsetContentHandler�parseZSAXParseExceptionZ INVALID_TYPEZ getExceptionr r? )r �handlerr2 �msgr r r �read> s" zLockdownWhitelist.readc C s� t jj| j�r\ytj| jd| j � W n4 tk rZ } ztd| j|f ��W Y d d }~X nX t jjtj �sxt j tj d� t j | jddd�}t |�}|j� |jdi � |jd� x6t| j�D ](}|jd � |jd d |i� |jd� q�W x:t| j�D ],}|jd � |jd d t|�i� |jd� q�W x8t| j�D ]*}|jd � |jd d |i� |jd� �q0W x8t| j�D ]*}|jd � |jdd|i� |jd� �qjW |jd� |jd� |j� |j� ~d S )Nz%s.oldzBackup of '%s' failed: %si� ZwtzUTF-8)�mode�encodingr � z r r r r r r )�os�path�existsr1 �shutilZcopy2� Exception�IOErrorr Z ETC_FIREWALLD�mkdir�io�openr Z startDocumentr ZignorableWhitespacer r* Z simpleElementr. rK r- r, Z endElementZ endDocument�close)r r[ �frZ r r% r r r r r �writeQ sB $ zLockdownWhitelist.write)$r& r' r( �__doc__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr r6 r< r? r rD rE rI rJ r" rL rM rN rO r# rP rQ rR rS r$ rT rU rV rW r\ rk � __classcell__r r )r3 r r) W sL 1 r) )Zxml.saxrX r` rg rc Zfirewallr Zfirewall.core.io.io_objectr r r r Zfirewall.core.loggerr Zfirewall.functionsr r r r r r r Zfirewall.errorsr r r) r r r r �<module> s 3
SAVE
CANCEL