Current File : //lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyc
�
��&dc @ s d Z d Z d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
m Z m Z m
Z
m Z d d l m Z d d l m Z m Z m Z d d l m Z d d
l m Z d d l m Z m Z d d l m Z d d
l m Z d d l m Z d d l! m" Z" m# Z# e j$ j% e j$ j& e' � d � Z( i Z) d d l! m* Z* e j+ j, Z- e j$ j% e j$ j& e' � d � Z. i Z/ d e j0 f d � � YZ1 d e" f d � � YZ2 d e" f d � � YZ3 d e" f d � � YZ4 d e" f d � � YZ5 d S( s! Cyril Jaquier, Yaroslav Halchenkos> Copyright (c) 2004 Cyril Jaquier, 2011-2013 Yaroslav Halchenkot GPLi����Ni ( t ConfigReadert ConfigReaderUnsharedt DefinitionInitConfigReadert NoSectionError( t configparserinc( t
JailReadert extractOptionst splitWithOptions( t FilterReader( t JailsReader( t ActionReadert
CommandAction( t Configurator( t MyTime( t versioni ( t LogCaptureTestCaset with_tmpdirt files( t
CONFIG_DIRt configt ConfigReaderTestc B s} e Z d � Z d � Z d
d
d � Z d � Z d d � Z d � Z d � Z d � Z
d � Z d
� Z d � Z
d � Z RS( c C sA t t | � j � t j d d � | _ t d | j � | _ d S( s Call before every test case.t prefixs f2b-tempt basedirN( t superR t setUpt tempfilet mkdtempt dR t c( t self( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyR 7 s c C s t j | j � d S( s Call after every test case.N( t shutilt rmtreeR ( R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt tearDown= s c C s� t j j | k ra t j j | � } t j j | j | � } t j j | � sa t j | � qa n t d | j | f d � } | d k r� | j
d | � n | d k r� | j
| � n | j � d S( Ns %s/%st ws
[section]
option = %s
( t ost patht sept dirnamet joinR t existst makedirst opent Nonet writet close( R t fnamet valuet contentR t d_t f( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt _writeA s c C s7 t j d | j | f � | j | j j d � � d S( Ns %s/%sR ( R# t unlinkR t
assertTrueR t read( R R. ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt _removeR s R c C s3 | j | j j | � � | j j d d g � d S( Nt sectiont intt option( s ints option( R5 R R6 t
getOptions( R R2 ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt
_getoptionV s c C s+ | j j d � | j j d d d � | j j d d d � | j j d d d � | j j d d d d
f � } | j | i d
d 6t d 6d d 6� | j j d d d d f � } | j | i d
d 6t d 6d d 6� | j j d i d d 6d d 6d d 6� } | j | i d
d 6t d 6d d 6� d S( Nt
Definitiont at 1t bR t testR9 i t booli ( s intR> i ( s boolR@ i ( s intR i ( s intR> ( s boolR@ ( s intR ( s inti ( s booli ( s inti ( R t add_sectiont setR; t assertSortedEqualt TrueR+ ( R t opts( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testConvertZ s % % c C s� t j j | j d � } | j d d � | j | j d � d � t j | d � t j | t j � s� | j
| j j d � � n% d d l
} t j d | j
� � � d S( Ns d.confi R i����s0 Skipping on %s -- access rights are not enforced( R# R$ R' R R3 t assertEqualR< t chmodt accesst R_OKt assertFalseR R6 t platformt unittestt SkipTest( R R2 RN ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testInaccessibleFilei s c C s� | j | j j d � � | j d d � | j | j � d � | j d d � | j | j � d � | j d d � | j | j � d � | j d
d � | j | j � d � | j d d
� | j | j � d � | j d d � | j | j � d � | j d d � | j | j � d � | j d � | j d � | j | j � d � | j d � | j | j � d � | j d � | j | j � d � | j d
� | j | j � d � d S( NR s c.confR? i t 2i s c.d/98.conft 998i� s c.d/90.conft 990s c.d/99.conft 999i� s c.localt 3i s c.d/1.localt 4i i� ( RM R R6 R3 RI R< R7 ( R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testOptionalDotDDirv s0
c C sE | j d d d d d �| j d d d d d �| j d d d d d �| j d d d d d
�| j d d d d d �d
t f d � � Y} | d d i � | _ | j j | j � | j | j j � � | j j i d t �| j j
� } | j | j d � d � | j | j d � d � | j | j d � d � d S( Ns c.confR/ R0 sS
[INCLUDES]
before = ib.conf
after = ia.conf
[Definition]
test = %(default/test)s
s ib.confs,
[DEFAULT]
test = A
[Definition]
option = 1
s ib.locals,
[DEFAULT]
test = B
[Definition]
option = 2
s ia.confs,
[DEFAULT]
test = C
[Definition]
oafter = 3
s ia.locals,
[DEFAULT]
test = D
[Definition]
oafter = 4
t TestDefConfReaderc B s5 e Z i d d g d 6d d g d 6d d g d 6Z RS( R9 R: t oaftert stringRA N( t __name__t
__module__R+ t _configOpts( ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyRY � s
R R: t alli RZ i RA t D(
R3 R+ R R t
setBaseDirR R5 R6 R; RF t getCombinedRI t get( R RY t o( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testLocalInIncludes� s& c C s | j | j j d � � | j d d d d d �| j | j j d � � | j | j j � d d g � | j | j j d d � d � | j | j j d d
� d � | j | j j d d � d � | j | j j d d
� d � | j | j j d d � d � d S( Nt is i.confR/ R0 su
[DEFAULT]
b = a
zz = the%(__name__)s
[section]
y = 4%(b)s
e = 5${b}
z = %(__name__)s
[section2]
z = 3%(__name__)s
R8 t section2t yt 4at es 5${b}t zt zzt
thesectiont 3section2( RM R R6 R3 R+ R5 RI t sectionsRc ( R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testInterpolations� s c C s� | j | j j d � � | j d d d d d �| j | j j d � � | j | j j d d � d � | j | j j d d � d
� d S( Nt gs g.confR/ R0 s4
[DEFAULT]
# A comment
b = a
c = d ;in line comment
t DEFAULTR@ R> R R ( RM R R6 R3 R+ R5 RI Rc ( R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testComments� s c C s� | j | j j d � � | j d d d d d �| j | j j d � � | j | j j d d � d � | j | j j d d � d
� | j | j j d d � d � | j | j j d d � d
� | j | j j d d � d � | j | j j d d � d � | j | j j d d � d � | j | j j d d � d � | j | j j d d � d � | j | j j d d � d � | j t | j j d d � | j t | j j d d � d S( NRq s g.confR/ R0 s�
[DEFAULT]
a = def-a
b = def-b,a:`%(a)s`
c = def-c,b:"%(b)s"
d = def-d-b:"%(known/b)s"
[jail]
a = jail-a-%(test/a)s
b = jail-b-%(test/b)s
y = %(test/y)s
[test]
a = test-a-%(default/a)s
b = test-b-%(known/b)s
x = %(test/x)s
y = %(jail/y)s
RA R> s test-a-def-aR@ s test-b-def-b,a:`test-a-def-a`t jails jail-a-test-a-def-as+ jail-b-test-b-def-b,a:`jail-a-test-a-def-a`R s5 def-c,b:"jail-b-test-b-def-b,a:`jail-a-test-a-def-a`"R s' def-d-b:"def-b,a:`jail-a-test-a-def-a`"s' def-c,b:"test-b-def-b,a:`test-a-def-a`"s def-d-b:"def-b,a:`test-a-def-a`"Rr s def-c,b:"def-b,a:`def-a`"s def-d-b:"def-b,a:`def-a`"t xRh (
RM R R6 R3 R+ R5 RI Rc t assertRaisest Exception( R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testTargetedSectionOptions� s N( R\ R] R R! R+ R3 R7 R< RH RQ RX Re Rp Rs Rx ( ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyR 5 s
0 t JailReaderTestc B s� e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z
d � Z d
� Z d � Z
d � Z d
� Z e d � � Z d � Z RS( c O s t t | � j | | � d S( N( R Ry t __init__( R t argst kwargs( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyRz s c C s
xd D]� } | j t d | f � d d g � | j t d | f � d d g � | j t d | f � d
d g � | j t d | f � d d g � | j t d
| f � d d g � | j t d | f � d d g � | j t d | f � d d g � q Wd S( Ns
s t s a%sbR> R@ s a[x=y]%sbs a[x=y]s a[x=y][z=z]%sbs a[x=y][z=z]s a[x="y][z"]%sbs a[x="y][z"]s
a[x="y z"]%sbs
a[x="y z"]s
a[x="y z"]%sbs
a[x="y z"]s
a[x="y
z"]%sbs
a[x="y
z"]( s
s R} ( RI R ( R R% ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testSplitWithOptions s
######c C s/ t d d t d t �} | j t | j � d S( Nt XXXABSENTXXXR t share_config( R R t CONFIG_DIR_SHARE_CFGRv t
ValueErrorR6 ( R Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testIncorrectJail s c C so t d d t d t �} | j | j � � | j | j � � | j | j � � | j d � | j d � d S( Nt emptyactionR R� s" No filter set for jail emptyactions' No actions were defined for emptyaction( R t IMPERFECT_CONFIGt IMPERFECT_CONFIG_SHARE_CFGR5 R6 R; t isEnabledt assertLogged( R Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testJailActionEmpty s
c C ss t d d t d t �} | j | j � � | j | j � � | j | j � � | j d t � | j d � d S( Nt missingbitsjailR R� sJ Found no accessible config files for 'filter.d/catchallthebadies' under %ss Unable to read the filter( R R� R� R5 R6 RM R; R� R� ( R Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testJailActionFilterMissing" s c C sb t d d t d t �} | j | j � � | j | j � � | j | j � � | j d � d S( Nt brokenactiondefR R� s$ Invalid action definition 'joho[foo'( R R� R� R5 R6 RM R; R� R� ( R Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testJailActionBrokenDef* s c C sl t d d t d t �} | j | j � � | j | j � � | j | j � � | j | j d d � d S( Nt
tz_correctR R� t logtimezones UTC+0200( R R� R� R5 R6 R; R� RI t options( R Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testJailLogTimeZone2 s c C sb t d d t d t �} | j | j � � | j | j � � | j | j � � | j d � d S( Nt brokenfilterdefR R� s$ Invalid filter definition 'flt[test'( R R� R� R5 R6 RM R; R� R� ( R Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testJailFilterBrokenDef: s c C s� t j j d t � t d d t d t �} | j | j � � | j | j � � | j
| j � � | j | j
� d � | j d � | j | j
� d � d S( Nt stockt sshdR R� s ssh-funky-blocker( RO t F2Bt SkipIfCfgMissingRF R R R� R5 R6 R; RM R� RI t getNamet setName( R Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testStockSSHJailB s
c C s� t j j d t � t d d t d t d t �} | j | j � � | j | j � � | j | j
� � | j � } | j d d d d g g g | D]. } t
| � d k r� | d d k r� | ^ q� � | j d d d
d g g g | D]. } t
| � d k r� | d d
k r� | ^ q� � | j d d d d g g g | D]. } t
| � d k r=| d d k r=| ^ q=� | j d d d
d g � } d } xT | D]L } | j t
| � d k o�| d j d � � | d 7} | | k r�Pq�q�Wd S( NR� s sshd-override-flt-optsR R� t force_enableRD t prefregexs ^Testi t addjournalmatchs
_COMM=testt maxlinest usednst noi t regexi ( RO R� R� RF R R� R� R5 R6 R; R� t convertRI t lent indexRM t endswith( R Rt t streamRd t usednsidxRf ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testOverrideFilterOptInJailL s( <<<
,
c
C s� t j j d t � x� d D]� } x� d D]� } t d | j � d t d
t d t �} | j | j � � | j | j
� � | j � } | j d | j
� d
d | g g g | D]. } t | � d k r� | d d
k r� | ^ q� � q' Wq Wd S( NR� i i t JRNLt FILEt TESTt INITt
checklogtype_R R� R� RD t addfailregexs ^%s failure from <HOST>$( i i ( R� R� R� R� ( RO R� R� RF R t lowerR� R� R5 R6 R; R� RI R� R� ( R Rf t preflineRt R� Rd ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testLogTypeOfBackendInJailf s
"c C s� d } d i d d 6f } t | � } | j | | � | j d i f t d � � | j d i d d 6d d 6f t d
� � | j d i f t d � � | j d i f t d � � | j d
i d d 6f t d � � d } d i f } t | � } | j | | � d } d i d d 6d d 6d d 6d d 6d d 6d d 6d d 6d! d" 6d# d$ 6d% d& 6d% d' 6f } t | � } | j | | � t | j d d( � � } | d) t d* � | d+ j � D� � f } | j | | � d S(, Ns mail-whois[name=SSH]s
mail-whoist SSHt names mail.who_ist catR> t dogR@ s mail.who_is[a=cat,b=dog]s mail--ho_iss mail--ho_is['s']t mailt ,s mail[a=',']s abc[]t abcs� option[opt01=abc,opt02="123",opt03="with=okay?",opt04="andwith,okay...",opt05="how about spaces",opt06="single'in'double",opt07='double"in"single', opt08= leave some space, opt09=one for luck, opt10=, opt11=]R: t opt01t 123t opt02s
with=okay?t opt03s andwith,okay...t opt04s how about spacest opt05s single'in'doublet opt06s double"in"singlet opt07s leave some spacet opt08s one for luckt opt09t t opt10t opt11s ][i c s s- | ]# \ } } | | j d d � f Vq d S( R� s ][N( t replace( t .0t kt v( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pys <genexpr>� s i ( R RI R� t dictt iteritems( R R: t expectedt resultt expected2( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testSplitOptionu s@ * #
#c
C sh t d d t d t d t �} | j | j � � | j | j � � | j | j d d � | j | j d d � | j g | j
D] } | j � ^ q� d d d
d g d d d d d
d g d d g d d g g g g d d d
d g d d d d d
d g d d g d d g d d g g g g d d d
d g d d d d d
d g d d g d d g g g g g � d S( Ns multi-logR� R R� t logpaths a.log
b.log
c.logt actionse action[actname='ban']
action[actname='log', logpath="a.log
b.log
c.log
d.log"]
action[actname='test']RD t addactiont bans multi-sett actionbans4 echo "name: ban, ban: <ip>, logs: a.log
b.log
c.log"t actnameR� t logs: echo "name: log, ban: <ip>, logs: a.log
b.log
c.log
d.log"s a.log
b.log
c.log
d.logRA s5 echo "name: test, ban: <ip>, logs: a.log
b.log
c.log"( R RF R� R� R5 R6 R; RI R� RE t _JailReader__actionsR� ( R Rt R> ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testMultiLineOption� s$ % c
C s t j j d t � t d d t d t �} t j | d � | j j � } t
d d! d" d# d$ d% f � | d <| j | j � � | j
� } g } x� | D]� } t | � d k r� q� n | d d k r� | d d k s� | d j d � r� | j | � q� | d d k r� | j g | d D]. } | d d k rd g | d d !| ^ q� q� q� Wd t } | j t | � d � | j | d d d d d d | g � | j | d d d d d d | g � | j t | d d � j d d � | � | j | d d d d d d | g � d S(& NR� t
blocklisttestR� R Rt R\ t filterR� t failregexs
^test <HOST>$t senders f2b-test@example.comt blocklist_de_apikeys test-keyR� s� %(action_blocklist_de)s
%(action_badips_report)s
%(action_badips)s
mynetwatchman[port=1234,protocol=udp,agent="%(fail2ban_agent)s"]i i RD t agents badips.pys multi-seti s Fail2Ban/%st blocklist_det badipsi i s <wrong>i t
mynetwatchman( s __name__R� ( s filterR� ( R� s
^test <HOST>$( R� s f2b-test@example.com( R� s test-key( s actions� %(action_blocklist_de)s
%(action_badips_report)s
%(action_badips)s
mynetwatchman[port=1234,protocol=udp,agent="%(fail2ban_agent)s"]( RO R� R� RF R R R R6 t _cfgt get_sectionsR� R5 R; R� R� R� t appendt extendR RI t evalRc ( R Rt Ro R� t actt cmdRd t useragent( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testVersionAgent� s2
3M
&&*c C s� t j j | d � } t | d � j � t j j | d � } t j d | � | j t j t j j | d � � | g � | j t j | � g � | j d | � | j t j t j j | d � � g � d S( Nt f1R" t f2t nonexistingt *s4 File %s is a dangling link, thus cannot be monitored(
R# R$ R' R* R- t symlinkRI R t _globR� ( R R R� R� ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testGlob� s +c C s� t d i � } | j | j � g � | j | j d � � | j t | j d i � | j t | j d � | j t | j d d � | j t | j
d i � d S( NR� RA t any( R RI Ro RM t has_sectionRv R t
merge_sectionR� Rc R; ( R R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testCommonFunction� s ( R\ R] Rz R~ R� R� R� R� R� R� R� R� R� R� R� R� R R� R� ( ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyRy s
2 %t FilterReaderTestc B sY e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z
RS( c
C s( d d d d g d d d d d d g g d d d
d g d d d d
d d d g d d d d d d g d d d d g g } t d d i � } | j t � | j � | j d � | j | j � | � t d d i d d 6d t d t �} | j � | j d � d | d d <| j | j � | � d S( NRD t
testcase01R� i s multi-setR� s� ^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?Authentication failure for .* from <HOST>\s*$s� ^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the underlying authentication module for .* from <HOST>\s*$s ^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the\nunderlying authentication.+$<SKIPLINES>^.+ module for .* from <HOST>\s*$t addignoreregexs" ^.+ john from host 192.168.1.1\s*$R� s
_COMM=sshdt +s _SYSTEMD_UNIT=sshd.services _UID=0s FIELD= with spaces s AFIELD= with + char and spacest datepatterns %Y %m %d %H:%M:%St 5R� R i i i����( R Ra t TEST_FILES_DIRR6 R; R+ RE R� t TEST_FILES_DIR_SHARE_CFG( R t outputt filterReader( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyRH s.
c C st t d d i d d 6d d 6d t d t �} | j � | j d � | j � } | j | d d � | j d � d S( NR� s <test>R� t XRA R� R s6 Wrong int value 'X' for 'maxlines'. Using default one:( R R� R� R6 R; R+ Rb t assertNotEqualR� ( R R� RG ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testConvertOptions. s
c C sj d d d d g g } t d d i d t d t �} | j � | j d � | j � } | j | | � d S( NRD t jailnameR� s to=sweet@example.com fromip=<IP>t
substitionR� R ( R R� R� R6 R; R+ R� RE ( R R� R� R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt! testFilterReaderSubstitionDefault7 s
c C s\ t d d i d t d t �} | j � | j d � | j � } | j d | d k � d S( Nt
testcase02R R� R R� R� ( R R� R� R6 R; R+ Rb R5 ( R R� RG ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testFilterReaderSubstKnown@ s
c C sq d d d d g g } t d d i d d 6d t d t �} | j � | j d � | j � } | j | | � d S(
NRD R R� s to=sour@example.com fromip=<IP>R s sour@example.comt honeypotR� R ( R R� R� R6 R; R+ R� RE ( R R� R� R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testFilterReaderSubstitionSetK s
c C s| d d d d g g } t d � \ } } t d d | d t d t �} | j � | j d � | j � } | j | | � d S( NRD R R� s? ^to=test,sweet@example.com,test2,sweet@example.com fromip=<IP>$su substition[failregex="^<known/failregex>$", honeypot="<sweet>,<known/honeypot>", sweet="test,<known/honeypot>,test2"]R R� R ( R R R� R� R6 R; R+ R� RE ( R R� t
filterNamet filterOptR� R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testFilterReaderSubstitionKnownT s
c C s| d d d d g g } t d � \ } } t d d | d t d t �} | j � | j d � | j � } | j | | � d S( NRD R R� s) ^\s*to=fail2ban@localhost fromip=<IP>\s*$sU substition[failregex="^\s*<Definition/failregex>\s*$", honeypot="<default/honeypot>"]R R� R ( R R R� R� R6 R; R+ R� RE ( R R� R
R R� R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt! testFilterReaderSubstitionSection_ s
c C s� t d d i d d 6d t d t �} | j � | j d � | j t t j | � t d d i d d 6d d 6d t d t �} | j � | j d � | j t t j | � d S( NR R s
<honeypot>R R� R s <sweet>t sweet( R R� R� R6 R; R+ Rv R� R� ( R R� ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testFilterReaderSubstitionFailj s
c C s� t j j t j j t d � � } t t j j | d � d i � } | j | j � t j j | d � t j j | d � g � yA | j d � | j
d d � | j
d d � | j
d d � Wn$ t k
r� } | j d | � n Xd S(
Ns filter.ds testcase01.confR� s testcase-common.confR= t
__prefix_lineR� t ignoreregexs) unexpected options after readexplicit: %s(
R# R$ t abspathR' R� R RI t readexplicitR; R+ Rc Rw t fail( R t path_R� Rj ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testFilterReaderExplicitx s !!+
( R\ R] RH R R R R R R
R R ( ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyR� s , t JailsReaderTestCachec B s/ e Z e d d � Z d � Z e d � � Z RS( c C sZ t d | d | � } | j | � | j � | j � | j � | j | j d � � d S( NR� R� ( R
Ra t readEarlyt getEarlyOptionst readAllR5 R; R+ ( R R R� R� t configurator( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt _readWholeConf� s
c C sM d } x@ | j � j d � D]) } t j d | | � r | d 7} q q W| S( Ni s
s ^\s*Reading files?: .*/i ( t getLogt rsplitt ret match( R t filematcht cntt s( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt _getLoggedReadCount� s
c C s] t j j � t j } t j t _ z*t j | � t j t
| � t j t
d | d � t j t
d | d � t � } | j
| d | �| j d � } | j | d k d | � | j
| d t d | �| j d
� } | j | d k d | � | j d � } | j | d k d
| � | j d � } | j | d k d | � Wd | t _ Xd S( Ns
/jail.confs /jail.locals /fail2ban.confs /fail2ban.localR� s
jail.locali s3 Unexpected count by reading of jail files, cnt = %sR� s jail\.locals: Unexpected count by second reading of jail files, cnt = %ss filter\.d/common\.confs5 Unexpected count by reading of filter files, cnt = %ss action\.d/iptables-common\.confs5 Unexpected count by reading of action files, cnt = %s( RO R� t
SkipIfFastR t logLevelt loggingt DEBUGR R t copytreeR t copyR� R R$ R5 RF ( R R t saved_llt share_cfgR" ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testTestJailConfCache� s(
N( R\ R] t FalseR+ R R$ R R- ( ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyR � s
t JailsReaderTestc B s� e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e
d � � Z d � Z d
� Z
e
d � � Z RS( c O s t t | � j | | � d S( N( R R/ Rz ( R R{ R| ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyRz � s c C s; t j j d � s7 t d d � } | j t | j � n d S( Ns /XXXR ( R# R$ R( R
Rv R� R6 ( R t reader( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testProvidingBadBasedir� s c C s� t d t d t � } | j | j � � | j | j d t � � | j t | j
� | j
d t � } d | _
| j | d d d g d d d g d d d
d d d
g g d d g d d d g d d d
d g d d d g d d d
d g d d d d g d d d d d d g d d g d d g g g d d d g d d d
d g d d d
d g d d d d g d d g d d g d d g d d g d d d g d d g d d g d d g d d g d d! g g � | j d" � | j d# � | j d$ � d S(% NR R� t ignoreWrongt allow_no_filest addR� t autos test-known-interps multi-setR� s* failure test 1 (filter.d/test.conf) <HOST>s+ failure test 2 (filter.d/test.local) <HOST>s" failure test 3 (jail.local) <HOST>t startt missinglogfilesRD s <IP>t brokenactionR� R� R� s hit with big stick <ip>R� R� s parse_to_end_of_jail.confR� R� s UTC+0200s config-errorsd Jail 'brokenactiondef' skipped, because of wrong configuration: Invalid action definition 'joho[foo'sd Jail 'brokenfilterdef' skipped, because of wrong configuration: Invalid filter definition 'flt[test'so Jail 'missingaction' skipped, because of wrong configuration: Unable to read action 'noactionfileforthisaction'sm Jail 'missingbitsjail' skipped, because of wrong configuration: Unable to read the filter 'catchallthebadies's! Errors in jail 'missingbitsjail'.s Skipping...s6 No file(s) found for glob /weapons/of/mass/destruction( R
R� R� R5 R6 RM R; R. Rv R� R� RF R+ t maxDiffRE R� t assertNotLogged( R t jailst
comm_commands( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testReadTestJailConf� sX
c C s� t j j d t � x�t j t j j t d d � � D]n} t j j | � j
d d � } t | d i d t �} | j | j
� � y | j i � Wn6 t k
r� } | j d | t | � j | f � n X| j d � s5 | j d
| j � d d | �| j | j j d
d � j � d d | �| j d t j t d � B� } | j | j d � d d d | �| d k r�| j d | j d d � d d | �q�q5 q5 Wd S( NR� s action.ds *.confs .confR� R� R s action %r
%s: %ss -commonR= t msgs. Action file %r is lacking [Definition] sectionR� s# Action file %r is lacking actionbant ignoret timeoutt bantimeR� s5 Action file %r does not contains jail-name 'f2b-TEST't pfs iptables-allportss iptables-multiports f2b-TESTt actionstartsS Action file %r: interpolation of actionstart does not contains jail-name 'f2b-TEST'( s timeoutRA ( s pfs iptables-allportss iptables-multiport( RO R� R� RF t globR# R$ R' R t basenameR� R R5 R6 R; Rw R t typeR\ R� t assertInRo t _optsRc t stripRb R t _escapedTagsRD RI ( R t actionConfigt
actionNamet actionReaderRj RG ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testReadStockActionConf� s* ( ' ! c
C sf t j j d t � t d t d t � } | j | j � � | j | j � � | j
� } | j | g � t � } x�| j
� D]�} | d k r� q� n | j | d � } t | � \ } } | j | � | j t | � � t | | | d t d t �} | j | j � d | � | j i � | j | j j d d � j � � | j | d � } | j t | j � � � x� t | � D]� } t | � \ }
} | j t |
� � | j t | t � � |
d
k r�| j d | � n t |
| i d t d t �} | j | j � � | j i � | j
� }
| j t |
� � | j | j j d d � j � � q{Wq� Wd S(
NR� R R� t INCLUDESR� s Failed to read filter:R� R� R� s iptables-multiportt portR� ( RO R� R� RF R
R R� R5 R6 R; R� RI RD Ro Rc R R4 R� R RH RI R t
isinstanceR� RG R ( R R; R< t
allFiltersRt R
R R� t actionsR� t actNamet actOptRM t cmds( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testReadStockJailConf sD
"
c C s� t j j d t � t d t d t d t � } | j | j � � | j | j � � t
d � t j t j
j d d d � � D� � } t
d � | j D� � } d | _ | j | j | � d
| j | � � | j | j | � d | j | � � d S( NR� R R� R� c s sS | ]I } | j d � p$ | j d � s t j j t j j | � d � d Vq d S( s common.confs -aggressive.confi i N( R� R# R$ t splitextt split( R� R> ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pys <genexpr>_ s R s filter.ds *.confc s s& | ] } t | j d � d Vq d S( R� i N( R R� ( R� Rt ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pys <genexpr>d s s= More filters exists than are referenced in stock jail.conf %rs2 Stock jail.conf references non-existent filters %r( RO R� R� RF R
R R� R5 R6 R; RD RD R# R$ R' R; R+ R9 t issubsett
difference( R R; t filterst filters_jail( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testReadStockJailFilterCompleteY s ( c
C s� t j j d t � t d t d t d t � } | j | j � � | j | j � � | j
d t � } | j t | � � xc | D][ } t | � d k r� | d | d g d d
g k r� | j t j
| d � d k � q� q� Wxf d d g D]X } | j d
| g d � | D� � | j d | d d g | � | j d | g | � q� W| j | d d d � x�| j D]�} | j } | j � } | j t | � d d | �xN| D]F} | j
� } | j � } d t | � k r�| j d | j � t }
| d | g } x� | D]� } t | � d k rm| d d k rm| d d !| k rmd g | d D] } | d ^ qQk }
nN t | � d k r�| d d k r�| d d !| k r�| d d k r�t }
n |
rPqqW| j |
d d | t | � f �q�q�WqjWd S( NR� R R� R� R3 i i i RD RA R� t recidiveR4 c s s; | ]1 } t | � d k r | d d k r | d Vq d S( i i R4 i N( R� ( R� R� ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pys <genexpr>� s R� t warnR6 i����R> s No actions found for jail %ss <blocktype>t blocktypeR� i s multi-seti i s Found no %s command among %s( RO R� R� RF R
R R� R5 R6 R; R� R� R t str2secondsRG RI t _JailsReader__jailsR� R� t strt _initOptsR. (
R R; R< t commandt jRS t jail_nameR� t commandst action_namet blocktype_presentt target_commandR� ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt! testReadStockJailConfForceEnabledl sP
2'
"*"# c s� t j j d t � t � } | j t � | j | j � t � | j � | j
� } | j | d d � | j | d d � | j � | j � | j
� | j � � � f d � } | j | d � | d � k o� | d � k n � | j | d
� | d � k � | j | d � | d � k � | j � d
d d g d
d d g d
d d g d
d d g d
d d g d
d
d g g � | j j d � | j | j j � d � | j | j � t � d S( NR� t sockets /var/run/fail2ban/fail2ban.sockt pidfiles /var/run/fail2ban/fail2ban.pidc s[ x> t � � D]0 \ } } | d d k r
| d | k r
| Sq
Wt d | � f � � d S( Ni RD i s/ Did not find command 'set %s' among commands %s( t enumerateR� ( R: Rf Rj ( Ri ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt find_set� s
t syslogsockett loglevelt logtargett
dbpurgeaget dbfilet dbmaxmatchesRD R5 t INFOs /var/log/fail2ban.logs" /var/lib/fail2ban/fail2ban.sqlite3i
t 1ds /tmp( RO R� R� RF R
Ra R RI t
getBaseDirR R R R; t convertToProtocolt getConfigStreamR5 RE t _Configurator__jails( R R RG Rq ( ( Ri sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testStockConfigurator� s6
/ c C s| t j t j j | d � � t j t j j | d � � t t j j | d d � d � j � t t j j | d d � d � j � t t j j | d � d � } | j d � | j � t d | d i � } | j | j � � | j | j
� � | j d
t � } g | D]) } | d d d
d g k r | d ^ q } | j
t t d � | D� � � d � | j
| d d d � d S( Ns filter.ds action.ds testaction1.confR" s testfilter1.confs jail.confs�
[testjail1]
enabled = true
action = testaction1[actname=test1]
testaction1[actname=test2]
testaction.py
testaction.py[actname=test3]
filter = testfilter1
R R� R3 i RD t testjail1R� c s s | ] } | d Vq d S( i N( ( R� R� ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pys <genexpr>� s i i����s {}( R# t mkdirR$ R' R* R- R, R
R5 R6 R; R� RF RI R� RD ( R R t jailfdR; R< t commt add_actions( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testMultipleSameAction� s %%
)&c C s | j t d | j d d �d S( Ns' Have not found any log file for .* jailt backendt polling( t assertRaisesRegexpR� t _testLogPath( R ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testLogPathFileFilterBackend� s c C s] y d d l m } Wn" t k
r8 } t j d � � n X| j d d � | j d d � d S( Ni ( t
FilterSystemds& systemd python interface not availableR� t systemds systemd[journalflags=2]( t server.filtersystemdR� Rw RO RP R� ( R R� Rj ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt testLogPathSystemdBackend s c C s� t t j j | d � d � } | j d | | f � | j � t d | � } | j | j � � | j | j � � | j
� d S( Ns jail.confR" s�
[testjail1]
enabled = true
backend = %s
logpath = %s/not/exist.log
/this/path/should/not/exist.log
action =
filter =
failregex = test <HOST>
R ( R* R# R$ R' R, R- R
R5 R6 R; R� ( R R R� R� R; ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyR� s
( R\ R] Rz R1 R= RN RW R^ Rm R~ R R� R� R� R� ( ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyR/ � s 1 ? ? 3 (6 t
__author__t
__copyright__t __license__RD R' R# R R R RO t client.configreaderR R R R t clientR t client.jailreaderR R R t client.filterreaderR t client.jailsreaderR
t client.actionreaderR R t client.configuratorR
t
server.mytimeR R t utilsR R R$ R' R& t __file__R� R� R R� R� R� R� R� t TestCaseR Ry R� R R/ ( ( ( sG /usr/lib/python2.7/site-packages/fail2ban/tests/clientreadertestcase.pyt <module> s< " ! !���:
Mini Shell