Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/gp/__pycache__/gp_firewalld_ext.cpython-36.opt-1.pyc
Ðазад
3 �I�d� � @ st d dl Z d dlmZmZ d dlmZ d dlmZ d dlZd dl m Z d dl m Z dd� Z d d � ZG d d � d e �ZdS ) � N)�Popen�PIPE)�blake2b)�which)� gp_pol_ext)�logc G sP t d�}|d k rH|g}|jt| �� t|ttd�}|j� \}}|j|fS dS d S )Nz firewall-cmd)�stdout�stderr� �firewall-cmd not found���)r r )r �extend�listr r Z communicate� returncode)�argsZfw_cmd�cmd�pZ stdoutdata�_� r �(/usr/lib64/python3.6/gp_firewalld_ext.py� firewall_cmd s r c C s> t |t�rd| |f d S d| djdd� |j� D ��f S d S )Nz%s=%s� z%s %s c S s g | ]\}}d ||f �qS )z%s=%sr )�.0�k�vr r r � <listcomp>* s z&rule_segment_parse.<locals>.<listcomp>)� isinstance�str�join�items)�nameZ rule_segmentr r r �rule_segment_parse% s r! c @ s4 e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd S ) �gp_firewalld_extc C s dS )NzSecurity/Firewalldr )�selfr r r �__str__- s zgp_firewalld_ext.__str__c C s� t dd| �d }|dkr(tjd|� n| jjt| �d| |� t d�\}}|dkr`tjd|� x@|j� j� D ]0}t dd| d |j� �}|dkrntjd|� qnW d S ) Nz --permanentz --new-zone=%sr zFailed to add new zonezzone:%sz--list-interfacesz!Failed to set interfaces for zonez --zone=%sz--add-interface=%s) r r �error�gp_db�storer �strip�split�decode)r# �zone�ret�outZ interfacer r r � apply_zone0 s zgp_firewalld_ext.apply_zonec sN �xF|j � D �]8\}}�x,|D �]"}d|kr<td|d �}nd}xBd D ]:� � fdd�|j� D �}x |D ]}|t||| �7 }qfW qFW tddddg�}t|j� �} |j| �} t| �dkr�|tt| �d |t| �d �7 }n tjd� t dd| d|j � �d } | dk�rtjd|� q t |j � �j � } | jjt| �d || f |� q W q W d S ) N�rulezrule �source� destination�service�port�protocol� icmp-block� masquerade� icmp-type� forward-port� source-portr �auditc s g | ]}|j � �r|�qS r )� startswith)r �s)�segmentr r r K s z0gp_firewalld_ext.apply_rules.<locals>.<listcomp>ZacceptZrejectZdropZmarkr r z Invalid firewall rule syntaxz --permanentz --zone=%sz--add-rich-rulezFailed to add firewall rulez rule:%s:%s) r0 r1 r2 r3 r4 r5 r6 r7 r8 r9 r r: )r r! �keys�set� intersection�lenr r r% r r( r �encodeZ hexdigestr& r' r ) r# Z rule_dictr+ Zrulesr/ Z rule_parsed�namesr ZactionsZsegments�actionr, Zrhashr )r= r � apply_rules@ s4 z gp_firewalld_ext.apply_rulesc C s� x�|D ]�\}}| j j|� t| �|kr�x�|t| � j� D ]�\}}|jd�r�tdd| �d }|dkrrtjd|� q�| j jt| �|� q8|jd�r8|j d�\}} }tdd| d |�d }|dkr�tjd |� q8| j jt| �|� q8W | j j � qW x�|D ]�} | j r�d } | j j| j � d } t jj| j | �} | j| �}|�s8q�xj|jD ]`}|jj| ��r@|jjd ��rt| jtj|j�� n*|jjd��r@|jdk�r��q@| j|j� �q@W | j j � q�W d S )Nr+ z --permanentz--delete-zone=%sr zFailed to remove zoner/ �:z --zone=%sz--remove-rich-rulez Failed to remove firewall rulez/Software\Policies\Samba\Unix Settings\FirewalldzMACHINE/Registry.pol�Rules�Zonesz **delvals.)r& Zset_guidr r r; r r r% �deleter) Zcommit� file_sys_pathr �os�pathr �parse�entries�keyname�endswithrE �json�loads�data� valuenamer. )r# Zdeleted_gpo_listZchanged_gpo_listZguidZsettingsZ attribute�valuer, r r+ �gpo�section�pol_filerL �pol_conf�er r r �process_group_policy_ sH z%gp_firewalld_ext.process_group_policyc C s� i }d}d}|j r�tjj|j |�}| j|�}|s4|S x�|jD ]�}|jj|�r<|jjd�r�|j dkrdq<d|j � krxg |d< |d j |j � q<|jjd�r<d|j � kr�g |d< |d j t j|j �� q<W |S )NzMACHINE/Registry.polz/Software\Policies\Samba\Unix Settings\FirewalldrH z **delvals.rG )rJ rK rL r rM rN rO r; rP rT r> �appendrS rQ rR )r# rV �outputrX rW rL rY rZ r r r �rsop� s* zgp_firewalld_ext.rsopN)�__name__� __module__� __qualname__r$ r. rE r[ r^ r r r r r" , s )r" )rK � subprocessr r Zhashlibr Zshutilr rQ Zsamba.gp.gpclassr Zsamba.gp.util.loggingr r r! r" r r r r �<module> s
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка