Current File : //usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyc
�
���^c @@ s4 d Z d d l m Z m Z m Z d d l m Z d d l Z d d l Z d d l Z d d l
Z
d d l Z d d l Z
d d l m Z d d l m Z e j e � Z e
j � Z d Z d � Z d � Z d
� Z d d � Z d d
� Z d d � Z d d d d � Z d d � Z d d � Z! d d � Z" d S( uF
A salt util for modifying firewall settings.
.. versionadded:: 2018.3.4
.. versionadded:: 2019.2.0
This util allows you to modify firewall settings in the local group policy in
addition to the normal firewall settings. Parameters are taken from the
netsh advfirewall prompt.
.. note::
More information can be found in the advfirewall context in netsh. This can
be access by opening a netsh prompt. At a command prompt type the following:
c:\>netsh
netsh>advfirewall
netsh advfirewall>set help
netsh advfirewall>set domain help
Usage:
.. code-block:: python
import salt.utils.win_lgpo_netsh
# Get the inbound/outbound firewall settings for connections on the
# local domain profile
salt.utils.win_lgpo_netsh.get_settings(profile='domain',
section='firewallpolicy')
# Get the inbound/outbound firewall settings for connections on the
# domain profile as defined by local group policy
salt.utils.win_lgpo_netsh.get_settings(profile='domain',
section='firewallpolicy',
store='lgpo')
# Get all firewall settings for connections on the domain profile
salt.utils.win_lgpo_netsh.get_all_settings(profile='domain')
# Get all firewall settings for connections on the domain profile as
# defined by local group policy
salt.utils.win_lgpo_netsh.get_all_settings(profile='domain', store='lgpo')
# Get all firewall settings for all profiles
salt.utils.win_lgpo_netsh.get_all_settings()
# Get all firewall settings for all profiles as defined by local group
# policy
salt.utils.win_lgpo_netsh.get_all_settings(store='lgpo')
# Set the inbound setting for the domain profile to block inbound
# connections
salt.utils.win_lgpo_netsh.set_firewall_settings(profile='domain',
inbound='blockinbound')
# Set the outbound setting for the domain profile to allow outbound
# connections
salt.utils.win_lgpo_netsh.set_firewall_settings(profile='domain',
outbound='allowoutbound')
# Set inbound/outbound settings for the domain profile in the group
# policy to block inbound and allow outbound
salt.utils.win_lgpo_netsh.set_firewall_settings(profile='domain',
inbound='blockinbound',
outbound='allowoutbound',
store='lgpo')
i ( t absolute_importt unicode_literalst print_function( t dedentN( t CommandExecutionError( t zipu netshc C@ s t j j j � s t d f St S( u*
Only load if on a Windows system
u& This utility only available on Windows( t saltt utilst platformt
is_windowst Falset __virtualname__( ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt __virtual__Y s
c C@ s� t j d d d d d d d t � � } | j | � Wd QXzE t j d j | j | � � t j j
j d
j | j � d t �SWd t
j | j � Xd S( u
helper function to get the results of ``netsh -f content.txt``
Running ``netsh`` will drop you into a ``netsh`` prompt where you can issue
``netsh`` commands. You can put a series of commands in an external file and
run them as if from a ``netsh`` prompt using the ``-f`` switch. That's what
this function does.
Args:
content (str):
The contents of the file that will be run by the ``netsh -f``
command
Returns:
str: The text returned by the netsh command
t modeu wt prefixu salt-t suffixu .netsht deleteNu {0}:
{1}u netsh -f {0}t python_shell( t tempfilet NamedTemporaryFileR
t writet logt debugt formatt nameR t modulest cmdmodt runt Truet ost remove( t contentt fp( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt _netsh_filec s )c C@ s | j � d k r* t d j | � � � n | j � d k rT t d j | � � } n t d j t | � � } t d | � j � S( Nu localu lgpou Incorrect store: {0}uM advfirewall
set store local
{0}
uP advfirewall
set store gpo = {0}
{1}
R ( u localu lgpo( t lowert
ValueErrorR R t __hostname__R! t
splitlines( t commandt storet netsh_script( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt _netsh_command� s u localc
C@ s� | j � d k r* t d j | � � � n | j � d k rT t d j | � � � n | j � d k r~ t d j | � � � n d
j | | � } t d | d | � } t | � d k r� t d j | � � � n i } xJ | d D]> } | j t t t t
t j d | � � g d � � � � q� Wx( | D] } | | j
d d � | | <q)W| d k r�| d j d � \ } } i | d 6| d 6S| S( u$
Get the firewall property from the specified profile in the specified store
as returned by ``netsh advfirewall``.
Args:
profile (str):
The firewall profile to query. Valid options are:
- domain
- public
- private
section (str):
The property to query within the selected profile. Valid options
are:
- firewallpolicy : inbound/outbound behavior
- logging : firewall logging settings
- settings : firewall properties
- state : firewalls state (on | off)
store (str):
The store to use. This is either the local firewall policy or the
policy defined by local group policy. Valid options are:
- lgpo
- local
Default is ``local``
Returns:
dict: A dictionary containing the properties for the specified profile
Raises:
CommandExecutionError: If an error occurs
ValueError: If the parameters are incorrect
u domainu publicu privateu Incorrect profile: {0}u stateu firewallpolicyu settingsu loggingu Incorrect section: {0}u localu lgpou Incorrect store: {0}u show {0}profile {1}R& R' i u Invalid results: {0}u \s{2,}i u u u Firewall Policyu ,u Inboundu Outbound( u domainu publicu private( u stateu firewallpolicyu settingsu logging( u localu lgpo( R" R# R R) t lenR t updatet dictt listR t itert ret splitt replace(
t profilet sectionR' R& t resultst rett linet itemt inboundt outbound( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt get_settings� s& ( <
c C@ s� t � } | j t d | d d d | � � | j t d | d d d | � � | j t d | d d d | � � | j t d | d d d | � � | S( u2
Gets all the properties for the specified profile in the specified store
Args:
profile (str):
The firewall profile to query. Valid options are:
- domain
- public
- private
store (str):
The store to use. This is either the local firewall policy or the
policy defined by local group policy. Valid options are:
- lgpo
- local
Default is ``local``
Returns:
dict: A dictionary containing the specified settings
R2 R3 u stateR' u firewallpolicyu settingsu logging( R, R+ R: ( R2 R' R5 ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt get_all_settings� s """"c C@ sF i t d d d | � d 6t d d d | � d 6t d d d | � d 6S( u�
Gets all properties for all profiles in the specified store
Args:
store (str):
The store to use. This is either the local firewall policy or the
policy defined by local group policy. Valid options are:
- lgpo
- local
Default is ``local``
Returns:
dict: A dictionary containing the specified settings for each profile
R2 u domainR' u Domain Profileu privateu Private Profileu publicu Public Profile( R; ( R' ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt get_all_profiles s c C@ sE | j � d k r* t d j | � � � n | rZ | j � d k rZ t d j | � � � n | r� | j � d k r� t d j | � � � n | r� | r� t d
� � n | s� | r� t d | d d d | � } | s� | d } n | s� | d } q� n d j | | | � } t d | d | � } | rAt d j | � � � n t S( u�
Set the firewall inbound/outbound settings for the specified profile and
store
Args:
profile (str):
The firewall profile to configure. Valid options are:
- domain
- public
- private
inbound (str):
The inbound setting. If ``None`` is passed, the setting will remain
unchanged. Valid values are:
- blockinbound
- blockinboundalways
- allowinbound
- notconfigured
Default is ``None``
outbound (str):
The outbound setting. If ``None`` is passed, the setting will remain
unchanged. Valid values are:
- allowoutbound
- blockoutbound
- notconfigured
Default is ``None``
store (str):
The store to use. This is either the local firewall policy or the
policy defined by local group policy. Valid options are:
- lgpo
- local
Default is ``local``
Returns:
bool: ``True`` if successful
Raises:
CommandExecutionError: If an error occurs
ValueError: If the parameters are incorrect
u domainu publicu privateu Incorrect profile: {0}u blockinboundu blockinboundalwaysu allowinboundu
notconfiguredu Incorrect inbound value: {0}u
allowoutboundu
blockoutboundu Incorrect outbound value: {0}u Must set inbound or outboundR2 R3 u firewallpolicyR' u Inboundu Outboundu% set {0}profile firewallpolicy {1},{2}R& u An error occurred: {0}( u domainu publicu private( u blockinboundu blockinboundalwaysu allowinboundu
notconfigured( u
allowoutboundu
blockoutboundu
notconfigured( R" R# R R: R) R R ( R2 R8 R9 R' R5 R& R4 ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt set_firewall_settings s6 7
c C@ sz | j � d k r* t d j | � � � n | j � d k rT t d j | � � � n | j � d k r� | j � d k r� t d
j | � � � q� n | j � d k r.| j � d k r.y t | � Wn& t k
r� t d
j | � � � n Xd t | � k o d k n s+t d
j | � � � q+q.n d j | | | � } t d | d | � } | rvt d j | � � � n t S( u�
Configure logging settings for the Windows firewall.
Args:
profile (str):
The firewall profile to configure. Valid options are:
- domain
- public
- private
setting (str):
The logging setting to configure. Valid options are:
- allowedconnections
- droppedconnections
- filename
- maxfilesize
value (str):
The value to apply to the setting. Valid values are dependent upon
the setting being configured. Valid options are:
allowedconnections:
- enable
- disable
- notconfigured
droppedconnections:
- enable
- disable
- notconfigured
filename:
- Full path and name of the firewall log file
- notconfigured
maxfilesize:
- 1 - 32767 (Kb)
- notconfigured
store (str):
The store to use. This is either the local firewall policy or the
policy defined by local group policy. Valid options are:
- lgpo
- local
Default is ``local``
Returns:
bool: ``True`` if successful
Raises:
CommandExecutionError: If an error occurs
ValueError: If the parameters are incorrect
u domainu publicu privateu Incorrect profile: {0}u allowedconnectionsu droppedconnectionsu filenameu maxfilesizeu Incorrect setting: {0}u enableu disableu
notconfiguredu Incorrect value: {0}i i� u set {0}profile logging {1} {2}R& R' u An error occurred: {0}( u domainu publicu private( u allowedconnectionsu droppedconnectionsu filenameu maxfilesize( u allowedconnectionsu droppedconnections( u enableu disableu
notconfigured( R" R# R t intR) R R ( R2 t settingt valueR' R& R4 ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt set_logging_settingsy s. @
" c C@ s� | j � d k r* t d j | � � � n | j � d k rT t d
j | � � � n | j � d k r~ t d j | � � � n d j | | | � } t d | d | � } | r� t d j | � � � n t S( u
Configure firewall settings.
Args:
profile (str):
The firewall profile to configure. Valid options are:
- domain
- public
- private
setting (str):
The firewall setting to configure. Valid options are:
- localfirewallrules
- localconsecrules
- inboundusernotification
- remotemanagement
- unicastresponsetomulticast
value (str):
The value to apply to the setting. Valid options are
- enable
- disable
- notconfigured
store (str):
The store to use. This is either the local firewall policy or the
policy defined by local group policy. Valid options are:
- lgpo
- local
Default is ``local``
Returns:
bool: ``True`` if successful
Raises:
CommandExecutionError: If an error occurs
ValueError: If the parameters are incorrect
u domainu publicu privateu Incorrect profile: {0}u localfirewallrulesu localconsecrulesu inboundusernotificationu remotemanagementu unicastresponsetomulticastu Incorrect setting: {0}u enableu disableu
notconfiguredu Incorrect value: {0}u set {0}profile settings {1} {2}R& R' u An error occurred: {0}( u domainu publicu private( u localfirewallrulesu localconsecrulesu inboundusernotificationu remotemanagementu unicastresponsetomulticast( u enableu disableu
notconfigured( R" R# R R) R R ( R2 R? R@ R' R& R4 ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt set_settings� s . c C@ s� | j � d
k r* t d j | � � � n | j � d k rT t d j | � � � n d j | | � } t d
| d | � } | r� t d j | � � � n t S( u�
Configure the firewall state.
Args:
profile (str):
The firewall profile to configure. Valid options are:
- domain
- public
- private
state (str):
The firewall state. Valid options are:
- on
- off
- notconfigured
store (str):
The store to use. This is either the local firewall policy or the
policy defined by local group policy. Valid options are:
- lgpo
- local
Default is ``local``
Returns:
bool: ``True`` if successful
Raises:
CommandExecutionError: If an error occurs
ValueError: If the parameters are incorrect
u domainu publicu privateu Incorrect profile: {0}u onu offu
notconfiguredu Incorrect state: {0}u set {0}profile state {1}R& R' u An error occurred: {0}( u domainu publicu private( u onu offu
notconfigured( R" R# R R) R R ( R2 t stateR' R& R4 ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt set_state s %(# t __doc__t
__future__R R R t textwrapR t loggingR R/ t socketR t salt.modules.cmdmodR t salt.exceptionsR t salt.ext.six.movesR t getLoggert __name__R t gethostnameR$ R R R! R) R: R; R< t NoneR= RA RB RD ( ( ( s= /usr/lib/python2.7/site-packages/salt/utils/win_lgpo_netsh.pyt <module>D s2
O ! Y ` D
Mini Shell