Current File : //usr/lib/python2.7/site-packages/fail2ban/server/action.pyo
�
��&dc @ s� d Z d Z d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l
Z
d d l m Z d d l
m Z d d l m Z d d l m Z d d
l m Z d d l m Z d d
l m Z m Z m Z m Z m Z m Z m Z e e � Z e j! � Z" e j# Z$ e j% d � Z& d$ Z' e j% d � Z( i d � d 6d � d 6Z) i d d 6d d 6Z* e* j+ e) � d e e, f d � � YZ- d e, f d � � YZ. i d d 6d d! 6Z/ d" e. f d# � � YZ0 d S(% s' Cyril Jaquier and Fail2Ban Contributorss> Copyright (c) 2004 Cyril Jaquier, 2011-2012 Yaroslav Halchenkot GPLi����N( t ABCMeta( t MutableMappingi ( t
mapTag2Opt( t DNSUtils( t MyTime( t Utilsi ( t getLoggert _merge_copy_dictst
splitwordst substituteRecursiveTagst
uni_stringt TAG_CREt MAX_TAG_REPLACE_COUNTs <F-([A-Z0-9_\-]+)>t inet4t inet6s ^(\w+)\?(family)=(.*)$c C s t t j d t � � S( Nt fqdn( t strR t getHostnamet True( ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt <lambda>< s s fq-hostnamec C s t t j d t � � S( NR ( R R R t False( ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR = s s sh-hostnames
t brt t spt
CallingMapc B s� e Z d Z d Z d � Z e d � Z e d � Z e Z e d d � Z d � Z d � Z
d
� Z d � Z d � Z d
� Z d � Z d � Z RS( t datat storaget immutablet
__org_datac O s+ t � | _ t | _ t | | � | _ d S( N( t dictR R R R ( t selft argst kwargs( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __init__\ s c C s= t � | _ y | j | _ Wn t k
r/ n X| | _ d S( N( R R t _CallingMap__org_dataR t AttributeErrorR ( R R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt reseta s
c C s d | j j | j | t � f S( Ns %s(%r)( t __class__t __name__t _asdictR ( R t
calculated( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _asrepri s c s� t � j � j � } | s; t � f d � | j � D� � Sxc | j � D]U \ } } t | � rH y0 � j | � } | r� | | � n | | | <Wq� q� XqH qH W| S( Nc 3 s= | ]3 \ } } t | � s+ | � j k r | | f Vq d S( N( t callablet
CM_REPR_ITEMS( t .0t nt v( R ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pys <genexpr>r s ( R R R t iteritemst itemsR+ t __getitem__( R R) t checkert dR. R/ ( ( R s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR( o s
c C s6 y | j | } Wn t k
r1 | j | } n X| S( N( R t KeyErrorR ( R t keyt value( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt
getRawItem� s
c C s� y | j | } Wn t k
r1 | j | } n Xt | � r~ t | d � re | j j re | | � n | � } | | j | <n | S( Nt __code__( R R5 R R+ t hasattrR9 t co_argcount( R R6 R7 ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR2 � s
0c C sV | j rE | j j � | _ | j | _ | j j � | _ t | _ n | | j | <d S( N( R R t copyR R# R ( R R6 R7 ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __setitem__� s c C s t d | � � d S( Ns Key %r was deleted( R5 ( R R6 ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt
__unavailable� s c C su | j rE | j j � | _ | j | _ | j j � | _ t | _ n y | j | =Wn t k
rf n X| j | =d S( N( R R R< R R# R R5 ( R R6 ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __delitem__� s
c C s
t | j � S( N( t iterR ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __iter__� s c C s
t | j � S( N( t lenR ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __len__� s c C s | j t | j | j � � S( N( R& R R R ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR< � s ( ( s datas storages immutables
__org_dataN( R' t
__module__R, t __slots__R" R R% R R* t __repr__t NoneR( R8 R2 R= t _CallingMap__unavailableR? RA RC R< ( ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR G s
t
ActionBasec B sb e Z e Z e d � � Z d � Z d � Z d � Z d � Z d � Z
e d � � Z d � Z
RS( c C s7 d } x* | D]" } t t | | d � � s
t Sq
Wt S( Nt startt stopt bant rebant unban( s starts stops bans rebans unban( R+ t getattrRG R R ( t clst Ct requiredt method( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __subclasshook__� s
c C s/ | | _ | | _ t d | j j � | _ d S( Ns fail2ban.%s( t _jailt _nameR R& R' t _logSys( R t jailt name( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR" � s c C s d S( N( ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRJ � s c C s d S( N( ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRK � s c C s d S( N( ( R t aInfo( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRL � s c C s
| j | � S( N( RL ( R RZ ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRM � s c C s t S( N( R ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _prolongable s c C s d S( N( ( R RZ ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRN
s ( R' RD R t
__metaclass__t classmethodRT R" RJ RK RL RM t propertyR[ RN ( ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRI � s t str2secondst timeoutt ignoret bantimet
CommandActionc B s� e Z e d* � Z d � Z d � Z e d � � Z d � Z e Z d � Z
e d � � Z e d � � Z
d
� Z d � Z g d+ d � Z e d
� � Z e d � � Z e d � � Z d � Z d+ e d � Z d d � Z e d � � Z d � Z d � Z d � Z d � Z d � Z d+ d � Z d � Z d+ d � Z! e" j# d � Z$ e d � � Z% e d d+ d+ d � � Z& e" j# d! � Z$ e" j# d" � Z' e d+ d# � � Z( e d$ � � Z) d% � Z* d+ d+ e+ d& � Z, d+ d' � Z- e. d( d) � � Z/ RS(, t matchest ipmatchest
ipjailmatchesc C sx d | _ z^ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _ d | _
Wd d | _ Xd S( Ni i< t i ( t _CommandAction__initR` t actionstartt actionbant actionrebant actionunbant actioncheckt actionrepairt actionflusht
actionstopt actionreload( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt clearAllParams< s
c C sb t t | � j | | � d | _ d | _ i | _ i | _ | j � | j j
d | j � d S( Ni s
Created %s( t superRc R" Rh RG t _CommandAction__propertiest _CommandAction__startedt _CommandAction__substCacheRr RW t debugR& ( R RX RY ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR" V s
c C s t S( N( t NotImplemented( RP RQ ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRT _ s c C s� | j d � r� | j r� t | � r� t j | � } | d k rF d S| d k rd t j | � } n d | _ | j j
� | j j d | | � n | | j
| <d S( Nt _Ra R_ s
Set %s = %r( t
startswithRh R+ t WRAP_CMD_PARAMSt getR R_ RG Rt Rv t clearRW Rw t __dict__( R RY R7 t wrp( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __setattr__c s '
c C sI | j d � s; d | _ | j j � | j j d | � n | j | =d S( NRy s
Unset %s( Rz RG Rt Rv R} RW Rw R~ ( R RY ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt __delattr__u s
c sB � j d k r � j St � f d � t � � D� � � _ � j S( Nc 3 sJ | ]@ } | j d � r t t � | � � r | t � | � f Vq d S( Ry N( Rz R+ RO ( R- R6 ( R ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pys <genexpr>� s ( Rt RG R t dir( R ( ( R s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _properties s c C s | j S( N( Rv ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _substCache� s c C sh | j | | j d | r" d | n d d | j �} d | k sG | rK | S| j | i | d 6� } | S( Nt conditionals family=Rg t cachet <t family( t
replaceTagR� Rv t replaceDynamicTags( R t tagR� t cmd( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt
_getOperation� s c G s< d | f } t | � s~ t | � s@ | j j | i � j | � Sg | j j | i � j � D] \ } } | | � r\ | ^ q\ S| d } | r� y | j | } Wn" t k
r� i } | j | <n X| | | <ng yS | j | } | j | � } x0 | j � D]" \ } } | | k r� | | =q� q� WWn t k
r7n Xd S( Nt __eOpCmdi ( RB R+ Rv R| R0 R5 t popR1 ( R R� R� R R6 t fR/ R� t famd( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _operationExecuted� s( >
c
s� t } d } | sC g | j j � D] \ � } | r" � ^ q" } n xT| D]L� y$| j | � � } t } | r>| | j | � f d � � k r>| }
| j r t | j j d d � } | s� | j j j d � } t
| j j d | � n t j � | d <� | d <| j
| | � }
n | j |
| j � } | | M} n | rT| � | � n | j | � | rl| n d � WqJ t k
r�} t } | } qJ XqJ W| s�t d | | j | j | f � � n | S( Ns Script errorc s
| � k S( N( ( R� ( t famoper( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR � s t
actionInfot timeR� s Error %s action %s/%s: %r( R Ru R0 R� R� RU RO t actionsRG t _getActionInfot setattrR R� R� t
executeCmdR` t
ValueErrorR t RuntimeErrorRV (
R R� t operationR� t afterExect rest errR/ R� t rett realCmdRZ t e( ( R� s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _executeOperation� s: 1
'
#%c C sf | j j d � } | d k r" | St } x* | j D] } t j | � r2 t } Pq2 q2 W| | j d <| S( Nt __hasCondSection( R� R| RG R t CONDITIONAL_FAM_REt matchR ( R R/ R. ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _hasCondSection� s
c C s� | j j d � } | r | S| j j d � } | rY t | t t f � rY t | � } n3 | j r� t � rw d d g n d g } n d g } | | j d <| S( Nt
__familiest familiesR R Rg ( R� R| t
isinstancet listt setR R� t allowed_ipv6( R R/ ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _families� s !
c C s< | j j d � } | d k r" | S| j } | | j d <| S( Nt actionstart_on_demand( R� R| RG R� ( R R/ ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _startOnDemand� s
c C s
| j � S( N( t _start( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRJ s c s� � j r | s3 t Sn | r3 � j j | � r3 t S| d k rH | g n � j } � f d � } � j d d d | d | �} | S( Nc s- | r) � j d | d � d � j | <n d S( Ns <actionstop>i ( R� RG Ru ( R� R� ( R ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _started s s
<actionstart>t startingR� R� ( R� R Ru R| RG R� R� ( R R� t
forceStartR� R� ( ( R s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� s s <actionban>c C s� | j d d � } | j rF | j j | � sF | j | d t �qF n | j | | � sk t d | � � n | j j | d � d B| j | <d S( NR� Rg R� s Error banning %(ip)si i ( R| R� Ru R� R t _processCmdR� ( R RZ R� R� ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRL # s
c C s, t | d � o+ | j o+ t | j � j � S( Nt
actionprolong( R: R� R t isspace( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR[ 9 s c C s) | j d | � s% t d | � � n d S( Ns <actionprolong>s Error prolonging %(ip)s( R� R� ( R RZ ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt prolong> s c C sW | j d d � } | j j | d � d @rS | j d | � sS t d | � � qS n d S( NR� Rg i i s
<actionunban>s Error unbanning %(ip)s( R| Ru R� R� ( R RZ R� ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRN M s c C s | j | | j r d n d � S( Ns
<actionreban>s <actionban>( RL Rk ( R RZ ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRM ^ s
c sm g � j j � D]" \ } } | d @d k r | ^ q } | sB t S� f d � } � j d d d | d | �S( Ni c s2 | r. � j j | � r. � j | c d M<n d S( Ni i����( Ru R| ( R� R� ( R ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _afterFlush{ s s
<actionflush>t flushingR� R� ( Ru R0 R R� ( R R� R/ R� R� ( ( R s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt flushm s
8 c C s
| j � S( N( t _stop( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRK � s c s� | d k rP g � j j � D] \ } } | r | ^ q } | sD t Si � _ n5 y � j | c d M<| g } Wn t k
r� t SX� f d � } � j d d d | d | �S( Ni c s | r � j d | d � n d S( Ns
<actionstart>( R� RG ( R� R� ( R ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt _stopped� s s <actionstop>t stoppingR� R� ( RG Ru R0 R R5 R� ( R R� R� R/ R� ( ( R s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� � s .
c K s | j d d � S( Ns <actionreload>t reloading( R� ( R R! ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt reload� s c C s| t } | j rx xf | j j � D]R \ } } | r | j | | � r d | j | <| j d | d � | t M} q q Wn | S( Ni s
<actionstart>( R Rm Ru R1 t _invariantCheckR� RG R ( R t beforeRepairR� R� t started( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt consistencyCheck� s
s [\\#&;`|*?~<>^()\[\]{}$'"\n\r]c s< i d d 6d d 6� � f d � } | j j | | � } | S( NR. s
t rs
c s | j � } d � j | | � S( Ns \( t groupR| ( t mt c( t _map2c( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt substChar� s ( t
ESCAPE_CREt sub( RP R7 R� ( ( R� s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt escapeTag� s Rg c s� d | k r | S| d k rK | � f } y | | SWqK t k
rG qK Xn t | t � } | � | s� d � } | d k r� d t | � � f } y | | � Wq� t k
r� q� Xn � d k r� t | � d � j d | �� n | d k r� � | | <q� n t t � � � � � � f d � } t d }
xt t r�t
j | | � } | rRPn | | k sjd | k rnPn | } |
d 8}
|
d k r0t d | f � � q0q0W| d k r�| | | <n | S( NR� s
subst-tagsRa t addreplc s� | j d � } d } � r5 � j | d � � } n | d k ru � j | � } | d k ru � j | | j � � Sn t | � } | � j k r� � j | � } n | S( Ni t ?( R� RG R| R t _escapedTagsR� ( R� R� R7 ( t ADD_REPL_TAGS_CMRP R� t subInfo( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt substVal s i i sa unexpected too long replacement interpolation, possible self referencing definitions in query: %s(
RG R5 R� R t idR
R� t
ADD_REPL_TAGSR
R R R� R� ( RP t queryRZ R� R� R� t ckeyt noRecReplt csubkeyR� t countR7 ( ( R� RP R� R� s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� � sR
s! [\\#&;`|*?~<>\^\(\)\[\]{}$'"\n\r]s \Wc s� t � � � s$ � � f d � � n t t � � � � � f d � } t j | | � } d | k r� � j d � � � s� i � n � � f d � } t j | | � } n � r� t j | � � } n | S( Nc sF � j j | � rB d � j j d | � } | � | <d | } n | S( Ns f2bV_%sRy t $( R� t searcht
ESCAPE_VN_CRER� ( R� R7 ( RP t varsDict( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt escapeValQ s
c s] | j d � } y � | } Wn$ t k
rC � j | | j � � SXt | � } � | | � S( Ni ( R� R5 R| R ( R� R� R7 ( R� RZ R� ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� _ s
R� s F-*c sO t | j d � � } y t � | � } Wn t k
r= d SX� d | | � S( Ni Rg t F_( R R� R R5 ( R� R� R7 ( R� t tickData( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt substTagq s
( R R R� R R� R| t FCUSTAG_CRER t
buildShellCmd( RP R� RZ R� R� R� ( ( R� RZ RP R� R� R� s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� 6 s c C s t | d d � S( Nt _banEpochi ( RO ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt banEpoch� s c C sI | j d k r5 | j j j d | _ | j j _ n | j d | _ d S( Ni ( RU RG R� R� R� ( R ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt invalidateBanEpoch� s &c C sf | r& | d k r& | | j k r& d S| j d | � } | sT | j | | j � rX d S| rl | � rl d S| j j d � | j � | j d | � } | r� | j | | j � s� d | j | <| j j d � d Sd | j | <nB y | j | � Wn t
k
rn X| j | d | p"| j �| j j
| � rb| j | | j � rb| j j d � d Sd S( Ni s
<actioncheck>i����s< Invariant check failed. Trying to restore a sane environments <actionrepair>i s Unable to restore environmentR� ( RG Ru R� R� R` RW t errorR� t criticalR� R� R� R� R| ( R R� R� R� t checkCmdt repairCmd( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� � s4 "
(c s � d k r � j j d � t Sy | d } Wn t t f k
rM d } n X� j r� � � f d � } � j | | d � d k �} | d k r� t Sn � j � � j d | r� d | n d d
� j
�} | d k r� � j | | � } n � } � j
| � j � S( NRg s
Nothing to doR� c s7 � d k r3 � j j d � r3 � j j d � t St S( Ns
<actionunban>t actionrepair_on_unbans, Invariant check failed. Unban is impossible.( R� R| RW R� R R ( ( R� R ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt
_beforeRepair� s R� s
<actionunban>i R� s family=R� ( RW Rw R R5 t TypeErrorRm R� R R� R� Rv RG R� R� R` ( R R� RZ R� R� R� R� ( ( R� R s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� � s$
" i< c K so t j � t j k r( t j d | � n | s? t j d � t St �$ t j | | d t d t
| �SWd QXd S( Ni s
Nothing to dot shellt output( t logSyst getEffectiveLevelt loggingt DEBUGt logRw R t _cmd_lockR R� R ( R� R` R! ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyR� � s
( Rd Re Rf N(0 R' RD R� R� Rr R" R] RT R� R= R� R^ R� R� R� R� RG R� R� R� R� RJ R R� RL R[ R� RN RM R� RK R� R� R� t ret compileR� R� R� R� R� R� R� R R� R� t staticmethodR� ( ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyRc sR
'
YI ( 8( s inet4s inet6(1 t
__author__t
__copyright__t __license__R� t osR� t signalt
subprocesst tempfilet threadingR� t abcR t collectionsR t failregexR t ipdnsR t mytimeR t utilsR t helpersR R R R
R R R
R' R� t LockR� t
IPv6IsAllowedR� R� R� t
COND_FAMILIESR� t
DYN_REPL_TAGSR� t updatet objectR RI R{ Rc ( ( ( s: /usr/lib/python2.7/site-packages/fail2ban/server/action.pyt <module> sH 4
oc
Mini Shell