✏️ 编辑：firewalld_conf.cpython-39.pyc
路径：
/usr/lib/python3.9/site-packages/firewall/core/io/__pycache__/firewalld_conf.cpython-39.pyc
大小：9.17 KB · 修改：2026-09-15 17:58:31 · 权限：0644 · 只读（保存会失败）
← 返回目录
👁 查看
⬇ 下载
检测到二进制内容，直接保存可能损坏文件。请改用「上传替换」。
a F��jy? � @ s` d dl Zd dlZd dlZd dlZd dlmZ d dlmZ d dlm Z g d�Z G dd� de �Z dS )� N)�config)�log)�errors)� DefaultZone� MinimalMark� CleanupOnExit�CleanupModulesOnExit�Lockdown� IPv6_rpfilter�IndividualCalls� LogDenied�AutomaticHelpers�FirewallBackend�FlushAllOnReload� RFC3964_IPv4�AllowZoneDrifting� ReloadPolicy�NftablesTableOwnerc @ st e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z e dd� �Ze dd� �ZdS )�firewalld_confc C s i | _ g | _|| _| �� d S �N)�_config�_deleted�filename�clear)�selfr � r �C/usr/lib/python3.9/site-packages/firewall/core/io/firewalld_conf.py�__init__& s zfirewalld_conf.__init__c C s i | _ g | _d S r )r r �r r r r r , s zfirewalld_conf.clearc C s | j �� g | _d S r )r r r r r r r �cleanup0 s zfirewalld_conf.cleanupc C s | j �|�� �S r )r �get�strip)r �keyr r r r 4 s zfirewalld_conf.getc C s0 |� � }|� � | j|< || jv r,| j�|� d S r )r! r r �remove)r r" �valueZ_keyr r r �set7 s zfirewalld_conf.setc C s8 d}| j �� D ]$\}}|r"|d7 }|d||f 7 }q|S )N� � z%s=%s)r �items)r �sr" r$ r r r �__str__= s zfirewalld_conf.__str__c C s | � dtj� | � dttj�� | � dtjr0dnd� | � dtjrFdnd� | � dtjr\dnd� | � dtj� | � d tj r�dnd� | � d tj � | � d tj � | � d tj � | � d tj r�dnd� | � dtj� | � dtjr�dnd� | � dtjr�dnd� | � dtj�rdnd� d S )Nr r r �yes�nor r r r r r r r r r r r )r% r � FALLBACK_ZONE�str�FALLBACK_MINIMAL_MARK�FALLBACK_CLEANUP_ON_EXIT� FALLBACK_CLEANUP_MODULES_ON_EXIT�FALLBACK_LOCKDOWN�FALLBACK_IPV6_RPFILTER�FALLBACK_INDIVIDUAL_CALLS�FALLBACK_LOG_DENIED�FALLBACK_AUTOMATIC_HELPERS�FALLBACK_FIREWALL_BACKEND� FALLBACK_FLUSH_ALL_ON_RELOAD�FALLBACK_RELOAD_POLICY�FALLBACK_RFC3964_IPV4� FALLBACK_ALLOW_ZONE_DRIFTINGZ FALLBACK_NFTABLES_TABLE_OWNERr r r r � set_defaultsE s$ �zfirewalld_conf.set_defaultsc C s< | � d�dkr8| � d�dv r8t�tjd| � d�� d���d S )Nr Ziptablesr )z loose-forwardzstrict-forwardzIPv6_rpfilter=z] is incompatible with FirewallBackend=iptables. This is a limitation of the iptables backend.)r r Z FirewallErrorZ INVALID_VALUEr r r r � sanity_checkY s �zfirewalld_conf.sanity_checkc C s� | � � zt| jd�}W n> tyV } z&t�d| j|� | �� � W Y d }~n d }~0 0 |D ]�}|sj �q>|�� }t|�dk s\|d dv r�q\dd� |� d�D �}t|�d kr�t�d |�� � q\nj|d t vr�t�d |�� � q\nJ|d d k�rt�d |�� � q\n(| j � |d �d u�r*t�d|�� � q\|d | j |d < q\|� � | � d��srt�dtj� | �dttj�� | � d�}z t|� W nN ttf�y� |d u�r�t�d|�r�|nd tj� | �dttj�� Y n0 | � d�}|�r�|�� dv�r2|d u�rt�d|�r|nd tj� | �dtj�r,dnd� | � d�}|�rP|�� dv�r�|d u�rtt�d|�rj|nd tj� | �dtj�r�dnd� | � d�}|�r�|�� dv�r�|d u�r�t�d |�r�|nd tj� | �dtj�r�dnd� | � d �}|�r|�� tjv�r8|d u�r*t�d |�r |nd tj � | �d tj � | � d �}|�rV|�� dv�r�|d u�rzt�d |�rp|nd tj � | �d tj �r�dnd� | � d!�}|�r�|tj v�r�|d u�r�t�d"|tj � | �d!ttj �� | � d#�}|�r�|�� tj v�r0|d u�r t�d$|�r|nd tj!� | �d#ttj!�� | � d%�}|�rP|�� tj"v�r�|d u�rtt�d&|�rj|nd tj#� | �d%ttj#�� | � d'�}|�r�|�� dv�r�|d u�r�t�d(|�r�|nd tj$� | �d'ttj$�� | � d)�}z| �%|�}W n2 t�y$ t�d*|tj&� | �d)tj&� Y n0 | � d+�}|�rD|�� dv�rz|d u�rht�d,|�r^|nd tj'� | �d+ttj'�� | � d-�}|�r�|�� dv�r�|d u�r�t�d.|�r�|nd tj(� | �d-tj(�r�dnd� | �)� d S )/N�rzFailed to load '%s': %s� r )�#�;c S s g | ] }|� � �qS r )r! )�.0�xr r r � <listcomp>v � z'firewalld_conf.read.<locals>.<listcomp>�=� z Invalid option definition: '%s'zInvalid option: '%s'r& zMissing value: '%s'z!Duplicate option definition: '%s'r z0DefaultZone is not set, using default value '%s'r z7MinimalMark '%s' is not valid, using default value '%d'r )r, �falser+ �truez7CleanupOnExit '%s' is not valid, using default value %sr+ r, r z>CleanupModulesOnExit '%s' is not valid, using default value %sr )r+ rI r, rH z2Lockdown '%s' is not valid, using default value %sr z7IPv6_rpfilter '%s' is not valid, using default value %sr z9IndividualCalls '%s' is not valid, using default value %sr z3LogDenied '%s' is invalid, using default value '%s'r z:AutomaticHelpers '%s' is not valid, using default value %sr z9FirewallBackend '%s' is not valid, using default value %sr z:FlushAllOnReload '%s' is not valid, using default value %sr z8ReloadPolicy '%s' is not valid, using default value '%s'r z6RFC3964_IPv4 '%s' is not valid, using default value %sr z;AllowZoneDrifting '%s' is not valid, using default value %s)*r �openr � Exceptionr �errorr< r! �len�split� valid_keysr r �closer r- r% r. �int� ValueError� TypeErrorZwarningr/ �lowerr0 r1 r2 ZIPV6_RPFILTER_VALUESr3 r4 ZLOG_DENIED_VALUESr5 ZAUTOMATIC_HELPERS_VALUESr6 ZFIREWALL_BACKEND_VALUESr7 r8 �_parse_reload_policyr9 r: r; r= )r �f�msg�lineZpairr$ r r r �readf s � � � � � � � � � � � � � �zfirewalld_conf.readc C s� t | j�dk rd S g }tj�tj�s2t�tjd� z.tj ddtj� | j � tj� | j �dd�}W n4 t y� } z t�d| � � W Y d }~n d }~0 0 d}d}ztj| j dd d �}W nR t �y } z8tj�| j �r�t�d | j |f � � nd }W Y d }~�n<d }~0 0 |D �]*}|�s �q:|�d �}t |�dk �rL|�s6|�d � d }n�|d dk�rtd}|�|� |�d � n�|�d�}t |�dk�r�d}|�|d � �q |d �� } |d �� } | |v�r2| | jv �r| j| | k�rd}|�d| | j| f � d }n$| | jv �rd }nd}|�|d � |�| � nd }�q t | j�dk�r�| j�� D ]P\} } | |v �rj�qT| dv �rx�qT|�s�|�d � d }|�d| | f � d }�qT|�r�|�� |�� |�s�t�|j� d S tj�| j ��r@zt� | j d| j � W nD t �y> } z*t�|j� t d| j |f ��W Y d }~n d }~0 0 zt� |j| j � W nD t �y� } z*t�|j� t d| j |f ��W Y d }~nd }~0 0 t� | j d� d S )Nr? i� Zwtz%s.F)�mode�prefix�dir�deletez!Failed to open temporary file: %sZrtzUTF-8)rZ �encodingzFailed to open '%s': %sr' Tr r@ rF rG z%s=%s )r r r z%s.oldzBackup of '%s' failed: %szFailed to create '%s': %si� ) rM r �os�path�existsr Z ETC_FIREWALLD�mkdir�tempfileZNamedTemporaryFile�basenamer �dirnamerK r rL �iorJ r! �writerN r �appendr( rP r# �name�shutil�copy2�IOError�move�chmod) r ZdoneZ temp_filerW Zmodified�emptyrV rX �pr" r$ r r r rg s� � � � ( (zfirewalld_conf.writec C s� d}dddd�}| r�| � � } | �� }|dv r@|D ] }|||< q0n�| �dd��d�D ]|}|� � }|sdqR|�dd��dd �}t|�d kr�d }qR|d � � �� }||vr�d }qR|d � � �� }|dvr�d }qR|||< qR|s�td ��|S )NT�DROP)ZINPUTZFORWARDZOUTPUT)ZACCEPTZREJECTrq rA �,rF �:rG Fr r? zInvalid ReloadPolicy)r! �upper�replacerN rM rR )r$ Zvalid�result�v�k�aZa2r r r rU o s> � z#firewalld_conf._parse_reload_policyc C s d� dd� | �� D ��S )Nrr c s s | ]\}}|� d |� �V qdS )rs Nr )rB rx rw r r r � <genexpr>� rE z8firewalld_conf._unparse_reload_policy.<locals>.<genexpr>)�joinr( )r$ r r r �_unparse_reload_policy� s z%firewalld_conf._unparse_reload_policyN)�__name__� __module__� __qualname__r r r r r% r* r< r= rY rg � staticmethodrU r| r r r r r % s j %r ) Zos.pathr_ rf rc rj Zfirewallr Zfirewall.core.loggerr r rO �objectr r r r r �<module> s
💾 保存
取消
保存为 UTF-8，换行统一为 LF