File: //lib/python3/dist-packages/sos/report/plugins/__pycache__/firewall_tables.cpython-310.pyc
o
���b� � @ s* d dl mZmZmZ G dd� dee�ZdS )� )�Plugin�IndependentPlugin� SoSPredicatec @ s8 e Zd ZdZd ZdZdd� Zdd� Zdd� Zd d
� Z d S ) �firewall_tableszfirewall tables)�network�systemc C �2 d| }d| d }| j |t| |dgd�d� dS )z� Collecting iptables rules for a table loads either kernel module
of the table name (for kernel <= 3), or nf_tables (for kernel >= 4).
If neither module is present, the rules must be empty.�iptable_z iptables -t � -nvL� nf_tables��kmods��predN��add_cmd_outputr ��self� tablename�modname�cmd� r �D/usr/lib/python3/dist-packages/sos/report/plugins/firewall_tables.py�collect_iptable s
�z firewall_tables.collect_iptablec C r )z& Same as function above, but for ipv6 � ip6table_z
ip6tables -t r
r r r Nr r r r r �collect_ip6table s
�z firewall_tables.collect_ip6tablec C s& t | ddgddid�}| jd|dd�S ) zS Collects nftables rulesets with 'nft' commands if the modules
are present r � nfnetlinkr
�all)r
�requiredznft list rulesetT)r �changes)r �collect_cmd_output)r �nft_predr r r �collect_nftables' s ��z firewall_tables.collect_nftablesc C s� | � � }g g d�}|d dkr|d nd}|�� D ])}|�� dd� }t|�dkrB|d dkrB|d |�� v rB||d �|d � qd
}ztd ��� }W n tyX |}Y nw |�� D ]}|d dkrp||d v rp| � |� q]ztd
��� }W n ty� |}Y nw |�� D ]}|d dkr�||d v r�| �
|� q�|d dks�d|d v r�| j dt | ddgd�d� |d dks�d|d v r�| j dt | ddgd�d� | �
g d�� d S )N)�ip�ip6�statusr �output� � �table� � zmangle
filter
z/proc/net/ip_tables_namesr# z/proc/net/ip6_tables_namesr$ �filterziptables -vnxL�iptable_filterr r r zip6tables -vnxL�ip6table_filter)z
/etc/nftablesz /etc/sysconfig/nftables.confz/etc/nftables.conf)r" �
splitlines�split�len�keys�append�open�read�IOErrorr r r r �
add_copy_spec) r �nft_list�
nft_ip_tables� nft_lines�line�words�default_ip_tables�ip_tables_namesr) r r r �setup2 sP
�� �
� �
���zfirewall_tables.setupN)
�__name__�
__module__� __qualname__�
short_desc� plugin_name�profilesr r r" r? r r r r r s r N)�sos.report.pluginsr r r r r r r r �<module> s