Your IP : 216.73.217.13
U
���b� � @ s* d dl mZmZmZ G dd� dee�ZdS )� )�Plugin�IndependentPlugin� SoSPredicatec @ s8 e Zd ZdZd ZdZdd� Zdd� Zdd� Zd d
� Z d S ) �firewall_tableszfirewall tables)Znetwork�systemc C s2 d| }d| d }| j |t| |dgd�d� dS )z� Collecting iptables rules for a table loads either kernel module
of the table name (for kernel <= 3), or nf_tables (for kernel >= 4).
If neither module is present, the rules must be empty.Ziptable_z iptables -t � -nvL� nf_tables��kmods��predN��add_cmd_outputr ��selfZ tablename�modname�cmd� r �D/usr/lib/python3/dist-packages/sos/report/plugins/firewall_tables.py�collect_iptable s �z firewall_tables.collect_iptablec C s2 d| }d| d }| j |t| |dgd�d� dS )z& Same as function above, but for ipv6 Z ip6table_z
ip6tables -t r r r r Nr
r r r r �collect_ip6table s �z firewall_tables.collect_ip6tablec C s& t | ddgddid�}| jd|dd�S ) zS Collects nftables rulesets with 'nft' commands if the modules
are present r Z nfnetlinkr
�all)r
Zrequiredznft list rulesetT)r Zchanges)r Zcollect_cmd_output)r Znft_predr r r �collect_nftables' s ��z firewall_tables.collect_nftablesc C s� | � � }g g d�}|d dkr&|d nd}|�� D ]R}|�� dd� }t|�dkr2|d dkr2|d |�� kr2||d �|d � q2d
}ztd ��� }W n tk
r� |}Y nX |�� D ]&}|d dkr�||d kr�| � |� q�ztd
��� }W n tk
�r |}Y nX |�� D ],}|d dk�r||d k�r| �
|� �q|d dk�sbd|d k�r|| j dt | ddgd�d� |d dk�s�d|d k�r�| j dt | ddgd�d� | �
dddg� d S )N)�ip�ip6Zstatusr �output� � �table� � zmangle
filter
z/proc/net/ip_tables_namesr z/proc/net/ip6_tables_namesr �filterziptables -vnxLZiptable_filterr r r zip6tables -vnxLZip6table_filterz
/etc/nftablesz /etc/sysconfig/nftables.confz/etc/nftables.conf)r �
splitlines�split�len�keys�append�open�read�IOErrorr r r r Z
add_copy_spec) r Znft_listZ
nft_ip_tablesZ nft_lines�lineZwordsZdefault_ip_tablesZip_tables_namesr r r r �setup2 sN
�
� ��zfirewall_tables.setupN)
�__name__�
__module__� __qualname__Z
short_descZ plugin_nameZprofilesr r r r+ r r r r r s r N)Zsos.report.pluginsr r r r r r r r �<module> s