File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/__pycache__/win_lgpo_netsh.cpython-310.pyc
Back
o ;j^ � @ s� d Z ddlZddlZddlmZ ddddddd �Zd d ddd d d�Zddddddd�Zdd� Z dd� Z d)dd�Z d)dd �Z d)d d �Z d)d d �Zd*d!d"�Zd)d#d$�Zd)d%d&�Zd)d'd(�ZdS )+ax A salt util for modifying firewall settings. .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 This util allows you to modify firewall settings in the local group policy in addition to the normal firewall settings. Parameters are taken from the netsh advfirewall prompt. This utility has been adapted to use powershell instead of the ``netsh`` command to make it compatible with non-English systems. It maintains the ``netsh`` commands and parameters, but it is using powershell under the hood. .. versionchanged:: 3008.0 .. note:: More information can be found in the advfirewall context in netsh. This can be accessed by opening a netsh prompt. At a command prompt type the following: .. code-block:: powershell c:\>netsh netsh>advfirewall netsh advfirewall>set help netsh advfirewall>set domain help Usage: .. code-block:: python import salt.utils.win_lgpo_netsh # Get the inbound/outbound firewall settings for connections on the # local domain profile salt.utils.win_lgpo_netsh.get_settings(profile='domain', section='firewallpolicy') # Get the inbound/outbound firewall settings for connections on the # domain profile as defined by local group policy salt.utils.win_lgpo_netsh.get_settings(profile='domain', section='firewallpolicy', store='lgpo') # Get all firewall settings for connections on the domain profile salt.utils.win_lgpo_netsh.get_all_settings(profile='domain') # Get all firewall settings for connections on the domain profile as # defined by local group policy salt.utils.win_lgpo_netsh.get_all_settings(profile='domain', store='lgpo') # Get all firewall settings for all profiles salt.utils.win_lgpo_netsh.get_all_settings() # Get all firewall settings for all profiles as defined by local group # policy salt.utils.win_lgpo_netsh.get_all_settings(store='lgpo') # Set the inbound setting for the domain profile to block inbound # connections salt.utils.win_lgpo_netsh.set_firewall_settings(profile='domain', inbound='blockinbound') # Set the outbound setting for the domain profile to allow outbound # connections salt.utils.win_lgpo_netsh.set_firewall_settings(profile='domain', outbound='allowoutbound') # Set inbound/outbound settings for the domain profile in the group # policy to block inbound and allow outbound salt.utils.win_lgpo_netsh.set_firewall_settings(profile='domain', inbound='blockinbound', outbound='allowoutbound', store='lgpo') � N)�CommandExecutionErrorZOFFZON� NotConfigured�False�True)r � � �off�on� notconfiguredZDisableZEnabler r )r r r �disable�enabler Z AllowOutboundZ BlockOutboundZAllowZBlock)r r � r � allowoutbound� blockoutboundc C s0 dddd�dddd�dddd�d�}|| | S )a` The "Inbound connections" setting is a combination of 2 parameters: - AllowInboundRules 0 = False 1 = True 2 = NotConfigured I don't see a way to set "AllowInboundRules" outside of PowerShell - DefaultInboundAction 0 = Not Configured 2 = Allow Inbound 4 = Block Inbound The settings are as follows: Rules Action 0 4 BlockInboundAlways 1 0 NotConfigured 1 2 AllowInbound 1 4 BlockInbound 2 0 NotConfigured 2 2 AllowInbound 2 4 BlockInbound r Z AllowInboundZBlockInboundAlways)r r r Z BlockInbound)r r r � )Zrule�action�settingsr r �M/opt/saltstack/salt/lib/python3.10/site-packages/salt/utils/win_lgpo_netsh.py�_get_inbound_textl s ���� r c C s ddddd�}|| � � S )N)r r )r r )r r )r r )� allowinbound� blockinbound�blockinboundalwaysr )�lower)�textr r r r �_get_inbound_settings� s � r �localc C sr dg}| r |� | � |�� dkr|�ddg� tjj�|�}|s$td��t|� � �D ] }|� d�r6|� |� q*|S )NzGet-NetFirewallProfile�lgpo� -PolicyStore� localhostz%LGPO NETSH: An unknown error occurredZCim) �appendr �extend�salt�utils�win_pwsh�run_dictr �list�keys� startswith�pop)�profile�store�cmdr �settingr r r �_get_all_settings� s �r- c C s� | � � dvr td| � ���|� � dvrtd|� ���|� � dvr'td|� ���t| |d�}t|d |d �t|d d �d t|d i|d t|d t|d |d d�t|d t|d t|d t|d d�d�}||� � S )a$ Get the firewall property from the specified profile in the specified store as returned by ``netsh advfirewall``. Args: profile (str): The firewall profile to query. Valid options are: - domain - public - private section (str): The property to query within the selected profile. Valid options are: - firewallpolicy : inbound/outbound behavior - logging : firewall logging settings - settings : firewall properties - state : firewalls state (on | off) store (str): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local`` Returns: dict: A dictionary containing the properties for the specified profile Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect ��domain�public�private�Incorrect profile: )�state�firewallpolicyr �loggingzIncorrect section: �r r �Incorrect store: �r) r* �AllowInboundRules�DefaultInboundAction�DefaultOutboundAction)�Inbound�Outbound�State�Enabled� LogFileName� LogAllowed� LogBlocked�LogMaxSizeKilobytes)�FileName�LogAllowedConnections�LogDroppedConnections� MaxFileSize�NotifyOnListen�AllowLocalIPsecRules�AllowLocalFirewallRules� AllowUnicastResponseToMulticast)�InboundUserNotification�LocalConSecRules�LocalFirewallRules�UnicastResponseToMulticast)r4 r3 r5 r )r � ValueErrorr- r �OUTBOUND�ON_OFF�ENABLE_DISABLE)r) �sectionr* r � ret_settingsr r r � get_settings� s8 ( � � � � ��� rV c C s$ t d| d�t d| d�t d| d�d�S )a� Gets all properties for all profiles in the specified store Args: store (str): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local`` Returns: dict: A dictionary containing the specified settings for each profile r/ r8 r1 r0 )zDomain ProfilezPrivate ProfilezPublic Profile)�get_all_settings)r* r r r �get_all_profiles s �rX c C s� | � � dvr td| � ���|� � dvrtd|� ���t| |d�}|d t|d |d �t|d t|d t|d t|d t|d |d t|d t|d t|d d� }|S )a� Gets all the properties for the specified profile in the specified store Args: profile (str): The firewall profile to query. Valid options are: - domain - public - private store (str): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local`` Returns: dict: A dictionary containing the specified settings Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect r. r2 r6 r7 r8 r@ r9 r: rH rI rJ rA rB rC r; r? rK ) rD r< rL rM rN rE rF rG r= r> rO )r rP r- r rS rQ rR )r) r* r rU r r r rW $ s, � ��rW c C sd | � � dvr td| � ���|r |� � dvr td|� ���|r+|� � dvr+td|� ���|s3|s3td��|dkrS|rE|� � d krEd }t|��|rS|� � d krSd }t|��t| |d �}d g}| rc|�| � |� � dkrp|�ddg� |r�t|� � �\}}|d } | dkr�|dkr�| }|�d|d|g� |r�t|� � } |�d| g� tj j � |�} | r�td| � ���dS )a� Set the firewall inbound/outbound settings for the specified profile and store Args: profile (str): The firewall profile to configure. Valid options are: - domain - public - private inbound (str): The inbound setting. If ``None`` is passed, the setting will remain unchanged. Valid values are: - blockinbound - blockinboundalways - allowinbound - notconfigured <=== lgpo only Default is ``None`` outbound (str): The outbound setting. If ``None`` is passed, the setting will remain unchanged. Valid values are: - allowoutbound - blockoutbound - notconfigured <=== lgpo only Default is ``None`` store (str): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local`` Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect r. r2 )r r r r zIncorrect inbound value: )r r r zIncorrect outbound value: z Must set inbound or outboundr r z2Cannot set local inbound policies as NotConfiguredz3Cannot set local outbound policies as NotConfiguredr8 �Set-NetFirewallProfiler r r r9 r r z-AllowInboundRulesz-DefaultInboundActionz-DefaultOutboundAction�An error occurred: T) r rP r r- r r r rQ r! r" r# r$ ) r) ZinboundZoutboundr* �msgr r+ Zin_ruleZ in_actionZcurrent_in_ruleZout_rule�resultsr r r �set_firewall_settings_ sD 4 r] c C s� | � � dvr td| � ���|� � dvrtd|� ���t|�� � dkr0|� � dkr0|dv r0td��|d krCt|�� � dkrCtd |� ���d d |gi}|� � d v rp|� � dvr\td|� ���|�dt|� � gdt|� � gd �� |� � d kr�t|�� � dkr�zt|� W n ty� td|� ���w dt|� kr�dks�n td|� ���|�d d|gi� dg}| r�|�| � |r�|� � dkr�|�ddg� |�||� � � t j j � |�}|r�td|� ���dS )a� Configure logging settings for the Windows firewall. Args: profile (str): The firewall profile to configure. Valid options are: - domain - public - private setting (str): The logging setting to configure. Valid options are: - allowedconnections - droppedconnections - filename - maxfilesize value (str): The value to apply to the setting. Valid values are dependent upon the setting being configured. Valid options are: allowedconnections: - enable - disable - notconfigured droppedconnections: - enable - disable - notconfigured filename: - Full path and name of the firewall log file - notconfigured maxfilesize: - 1 - 32767 (Kb) - notconfigured store (str): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local`` Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect r. r2 )�allowedconnections�droppedconnections�filename� maxfilesize�Incorrect setting: r r )r^ r_ ra z2NotConfigured only valid when setting Group Policyra z%NotConfigured not a valid option for r` z -LogFileName)r^ r_ �r r r �Incorrect value: z -LogAllowedz -LogBlockedr i� z-LogMaxSizeKilobytesrY r r r rZ T) r rP �strr �updaterS �intr r r! r" r# r$ )r) r, �valuer* r r+ r\ r r r �set_logging_settings� sP @ � �� � ri c C s | � � dvr td| � ���|� � dvrtd|� ���|� � dvr'td|� ���|� � dkr9|� � dkr9d }t|��d g}| rC|�| � |� � d krP|�d d g� dt|� � gdt|� � gdt|� � gdt|� � gd�}|�||� � � tjj� |�}|r�td|� ���dS )a� Configure firewall settings. Args: profile (str): The firewall profile to configure. Valid options are: - domain - public - private setting (str): The firewall setting to configure. Valid options are: - localfirewallrules - localconsecrules - inboundusernotification - unicastresponsetomulticast value (str): The value to apply to the setting. Valid options are - enable - disable - notconfigured <== lgpo only store (str): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local`` Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect r. r2 )ZlocalfirewallrulesZlocalconsecrulesZinboundusernotificationZunicastresponsetomulticastrb rc rd r r z5NotConfigured is only valid when setting group policyrY r r r z-AllowLocalFirewallRulesz-AllowLocalIPsecRulesz-NotifyOnListenz -AllowUnicastResponseToMulticastrZ T) r rP r r r rS r! r" r# r$ )r) r, rh r* r[ r+ r r\ r r r � set_settingsR s8 - � �� rj c C s� | � � dvr td| � ���t|t�s |� � dvr td|� ���n|r$dnd}dg}| r0|�| � |� � dkr=|�d d g� |�d t|� � g� tjj � |�}|rXt d |� ���d S )a� Enable or disable the firewall profile. Args: profile (str): The firewall profile to configure. Valid options are: - domain - public - private state (str): The firewall state. Valid options are: - on - off - notconfigured store (str): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local`` Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect r. r2 )r r r zIncorrect state: ZOnZOffrY r r r z-EnabledrZ T) r rP � isinstance�boolr r rR r! r" r# r$ r )r) r3 r* r+ r\ r r r � set_state� s" % � rm )r )NNr )�__doc__Zsalt.utils.platformr! Zsalt.utils.win_pwshZsalt.exceptionsr rR rS rQ r r r- rV rX rW r] ri rj rm r r r r �<module> sF L � � � . O ; t ^
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings