Mc@sddlZddlZddlZddlZddlTddlZddlZddlmZmZddl m Z m Z m Z m Z ddlZdddYZdS(iN(t*(twarntdebug(tUFWErrort config_dirt iptables_dirtUFWRulet UFWBackendcBs eZdZidZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZRS(sInterface for backendscCsi|_||_||_g|_g|_itjjtdd6tjjtdd6tjjtdd6|_ |j j |idd6d d 6d d 6d d6dd6|_ t |_ y"|j|j|jWntk rnXtjj|j d|_tjjtd|_tjjtd|_tjjtd|_tjjtd|_tjj|j|_dS(Ns default/ufwtdefaultss ufw/ufw.conftconfsufw/applications.dtappsitoffidtlowitmediumi,thighitfulltiptablessiptables-restoret ip6tablessip6tables-restore(Rtnametdryruntrulestrules6tostpathtjoinRtfilestupdatet loglevelstTruet do_checkst _do_checkst _get_defaultst _read_rulest Exceptiontufwt applicationst get_profilestprofilesRRtiptables_restoreRtip6tables_restoretutiltget_iptables_versiontiptables_version(tselfRtdt extra_files((s//usr/lib/python2.7/dist-packages/ufw/backend.pyt__init__ s8             cCs-|jjdr)|jddkr)tStS(Ntenabledtyes(Rthas_keyRtFalse(R+((s//usr/lib/python2.7/dist-packages/ufw/backend.pyt _is_enabledDscCs?|jjdr;|jddkr;tjjdr;tStS(Ntipv6R0s/proc/sys/net/ipv6(RR1RRtexistsRR2(R+((s//usr/lib/python2.7/dist-packages/ufw/backend.pytuse_ipv6Js c Cs|js#td}t|tStjtjkrVtd}t|ntjtj krtd}t|ntj}|dkrtd}t|ni}i}i}g}tj j |j dstd|j d}t|net jd}xStj|j dD];} |j| s7|jtj j|j d| q7q7Wx|j jtj jtjdg|D]} xtrtd | | |j dkrtj j |j d rPnytj| } | t} WnBtk r@} td | }t|ntk rSnX| jdkr|j|  rtd it|d 6| d 6t| jd6}t|t|| | D]6} | j | j r.|j | q|j | qW|}t}q/|j rg|j |q/|j |q/W|r||_||_|td|7}y|jt|jtWqt k rtd} t| qXn||fS(sUpdate rule for profile in place. Returns result string and bool on whether or not the profile is used in the current ruleset. RRRRsRules updated for profile '%s's!Couldn't update application rules(R2RRRRt get_app_tupleRRRRR!t normalizetv6RERR;t _write_rulesR( R+RZt updated_rulestupdated_rules6t last_tupleRtupdated_profiletrttuplRt new_app_rulestnew_rRT((s//usr/lib/python2.7/dist-packages/ufw/backend.pytupdate_app_rulemsT                cCs|jj|r|Sd}d}xB|jjD]1}|j|jkr2|}|d7}q2q2Wd||f}t||dkr|S|dkrtd|}ntd|}t|dS(s)Find the application profile name for strRiis'%d' matches for '%s's>Found multiple matches for '%s'. Please use exact profile names&Could not find a profile matching '%s'N(R%R1RRkRR;R(R+RMRttmatchestnt debug_msgRT((s//usr/lib/python2.7/dist-packages/ufw/backend.pytfind_application_names    c Cs|r'|t|jkr'tn| rO|t|jkrOtn|dkrgtng}|r|j}n |j}i}d}xt|D]u\}}||krPnd}|jdks|jdkr|j}|j|r |d7}qt ||s       "