|
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17 System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64 User : nobody ( 99) PHP Version : 5.2.17 Disable Function : NONE Directory : /proc/21585/root/usr/share/system-config-securitylevel/ |
Upload File : |
m
!sMc @ s, d k Z d k Z d k Z d k Z d k Z d k Z d k Z e i i d d k Z
d k Z d k Z d k
Z
d k l Z l Z d k i Z d Z e i e d Z y e i i d Z Wn n Xe i d e i o e i i d d e Z n e i i d d e Z d f d YZ d S(
Ns& /usr/share/system-config-securitylevel( t _s N_s system-config-securitylevelsN /usr/share/system-config-securitylevel/pixmaps/system-config-securitylevel.pngs! system-config-securitylevel.gladet domainsH /usr/share/system-config-securitylevel/system-config-securitylevel.gladet childWindowc B s t Z d Z e d Z e d Z e d Z d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d Z d d Z d Z RS( Ni2 t Firewalls2 Configure system security level and firewall ruless You can use a firewall to allow access to specific services on your computer from other computers and prevent unauthorized access from the outside world. Which services, if any, do you wish to allow access to?c C s t i d S( N( t gtkt main_quit( t selft args( ( t7 /usr/share/system-config-securitylevel/securitylevel.pyt destroyH s c C sH t | _ t | _ d | _ d | _ t | _ h d h d d g <d g <<d h d d g <d g <<d h d d g <d g <<d
h d d g <d d g <<d
h d d g <d g <<t d h d d g <d g <<t d h d d g <d g <<t d h d d d! d" d# g <d g <<| _
d S($ Nt SSHt portst ssht tcpt modulest Telnett telnets
WWW (HTTP)t httpt FTPt ftpt ip_conntrack_ftpt NFS4t nfss Secure WWW (HTTPS)t httpss Mail (SMTP)t smtpt Sambat 137t udpt 138t 139t 445( R R
( R R
( R R
( R R
( R R
( R R
( R R
( R R ( R R ( R R
( R R
( t xmlR t Falset dirtyt Nonet doDebugt selinuxPaget Truet other_changed_firsttimeR t serviceDict( R ( ( R t __init__K s c C s | i i d | _ | i i d | _ | i i d | _ | i i d | _ | i i d | _ | i i d | _ | i i d | _ | i i d | _
| i i d | _ | i i d
| _ | i i d | _
| i i d | _ | i i d
| _ | i i d | _ | i i t t i t i } | i i | t i } | i i | t | i i | d d t | _ | i i d | i | i i! t" d | i i! t" d t# i$ d d | _% | i& i' } | i) x' | D] } | i% i+ | d f t, q
W| i i- | i% t i t i t i | _. t i/ | i. } | i1 d t i2 | i i | t i3 d t i d d } | i5 t | i i6 | t i3 d t i d d } | i i6 | | i i d | i8 | i
i d | i9 | i i: t i; t i< t i= t i> t i? | _@ | i iA | i@ d d d d | i@ i! d | i@ i! d | i@ iB d d S( Nt
incomingSWt mainVBoxt
mainWindowt scsNotebookt securityOptionMenut seLinuxVBoxt otherPortsViewt trustedServicesBoxt otherPortsExpandert
addPortButtont removePortButtont
addPortDialogt addPortTablet portEntryt texti t changedt Enabledt Disabledt columnsi t t Portst Protot clickedi R
R (C R R t
get_widgetR) R* R+ t notebookR- R. R/ R0 R1 R2 R3 R4 R5 R6 t set_icont
iconPixbufR t ListStoret gobjectt TYPE_STRINGt listStoret set_modelt CellRendererTextt cellt
pack_startR% t
add_attributet security_changed_firsttimet connectt security_changed_cbt append_textR t checklistt CheckListt incomingListR' t keyst keyListt sortt itemt
append_rowR t addt otherPortsStoret
TreeModelSortt otherPortsSortedt set_sort_column_idt SORT_ASCENDINGt TreeViewColumnt portsColt
set_expandt
append_columnt protoColt add_port_cbt remove_port_cbt add_buttonst STOCK_CANCELt RESPONSE_CANCELt STOCK_OKt RESPONSE_OKt combo_box_new_textt
protoCombot attacht
set_active( R R` RJ RW R\ RU RG Rc ( ( R t setupScreen^ sd
c G s- | i i t | i i t t | _ d S( N( R R0 t
set_sensitiveR% R1 R! ( R R ( ( R t firewall_activated s c G s- | i i t | i i t t | _ d S( N( R R0 Rp R R1 R% R! ( R R ( ( R t none_activated s c G sO d d g } | i i t i | i i | i | i i t | i i
| i i d | i i
| i i d x t o | i i } | t i j o | i i } | | i i } | i | } | p | i | q q9| } | i | | d j o# | i i | | g t | _ n Pq Pq W| i i d S( NR
R R< i ( t protoMappingR R4 t set_positionR t WIN_POS_CENTER_ON_PARENTt set_transient_forR+ t set_modalR% t show_allR6 t set_textt
grab_focusRl Rn t runt resultRj t get_textt portStrt
get_activet protot portIsValidR t invalidPortDialogt findPortInStoreR" RZ t appendR! t hide( R t buttonR R~ R R Rs R| ( ( R Rd s2
c G sy | i i } | i \ } } | d j o d Sn | i d | } | d j o | i
i | t | _
n d S( N( R R/ t
get_selectiont selectiont get_selectedt modelt treeModelSortIterR" t convert_iter_to_child_itert itert get_modelt removeR% R! ( R R R R R R R ( ( R Re s
c G s | i t j o t | _ d Sn | i } | i } | d j o d Sn; | d j o | i
n | d j o | i n d Sd S( Ni i ( R RM R% R t comboboxR R R t activeR" Rq Rr ( R R R R R ( ( R RO s
c G s. | i t j o t | _ d Sn t | _ d S( N( R R& R% R R! ( R R ( ( R t other_changed_cb s c G s. | i } | d j o | i | n d S( Ni ( R t applyt rcR R ( R R R ( ( R t okClicked s
c G s | i d S( N( R R ( R R ( ( R t applyClicked s c C s d } t i | t i d j o t | d i } n% | i i t
| i i t
d Sg } g }
g } g }
g } | i i t
| i i t
x| D]} t i | } | d j o| d d j ov| d d d g j o | i i d qM| d
j o4 | i i d | i i t | i i t qM| d d j o2 t i | d
\ } } | i t i | qM| d d j o2 t i | d
\ } } |
i t i | qM| d d j opt i | d
\ } } y t i | d \ } } Wn t j
o | } d } n Xt i | } t i | } | d d g j o | d j o
d } n| d d g j o | d j o
d } n| d d g j o | d j o
d } nn| d d g j o | d j o
d } nD| d d g j o | d j o
d } n| d d g j o | d j o
d } n | d d g j o | d j o
d } n y t i! t" | | } Wn
| } n X| d! j o
| d" j pN | d# j o
| d" j p4 | d$ j o
| d j p | d% j o& | d j o | i | d | q |
i | d | q | i | qMq q Wt$ | d& j o} | i% i& i' } xu | o\ | i% i& i) | d t* d' j o | i% i& i+ | d t
Pn | i% i& i, | } qyWn |
i- | | i% i& i' } x | o} | i% i& i) | d } xI | i/ | d( D]6 \ } } | | j o | i% i& i+ | d t
q4q4W| i% i& i, | } qWxf |
D]^ } | i d \ } } | i3 | } | o- | d d" g j o | i4 i | | g qqWd S() Ns* /etc/sysconfig/system-config-securityleveli t rR< i t #s --highs --mediums --enableds
--disabledi s --trust=t =i s --masq=s --port=t :R
t 22R t 80R t 443R t 23R t 21R t 25R t 2049R R R R R R i R R (5 t patht ost accesst R_OKt opent readlinest linesR R0 Rp R% R1 t devicesListt masqListt servicesListt portsListt sambaListt linet stringt stript strippedR- Rn R t splitt keyt deviceR t valuet servicet protocolt
ValueErrort sockett
getservbyportt intt protonamet lenRS t storet get_iter_firstR t get_valueR t set_valuet iter_nextt extendt valR' t portR t pairR RZ ( R R R R R R R R R R R R R R R R R R R R R ( ( R t readFile s
h %
! c C st | i i } x^ | oV | | i i | d j o$ | | i i | d j o | Sq | i i | } q Wd S( Ni i ( R RZ R R R R R R R" ( R R R R ( ( R R p s 8c C sT y t | } Wn( y t i | } Wq; d Sq; Xn X| d j o d Sn | S( Nii ( R R t idR t
getservbyname( R R R ( ( R t getPortID{ s
c C sY | i d } g } xt t | d d D] } | i d i | | } d i | | } t | d j oh | i | } | d j oH | d j o; | | j o | i
| | f q | i
| | f qq. | d j o, | i
| f | t | j o Pqq. q. Wt | d j o d Sn t | d j o d Sn | d S( Nt -i ii ( R R t splitst matchedt xrangeR t iR R t joint id1t port2t id2R R" ( R R R R R R R R ( ( R t getPortRange s*
c C sv | i | } t | t i p t | t i p d Sn t | d j o d | d Sn d | d | d f S( Ni s %di s %d-%d(
R R R R t
isinstancet typest ListTypet TupleTypeR" R ( R R R ( ( R R s &c C s t d | } t i d d t i t i | } | i t
| i t | i
t i | i | i | i | i | i d S( NsE Invalid port given: '%s'. Please give a port number or service name.i ( R R R7 R t
MessageDialogR" t MESSAGE_WARNINGt
BUTTONS_OKt dlgRw R% RB RC Rt Ru Rv R R+ Rx R{ R ( R R R R7 ( ( R R s
c C s t i d d t i t i t d } | i t i | i | i | i t
| i t | i | i } | i | S( Ni s Clicking the 'Yes' button will set the security level of the system and override any existing firewall configuration. Are you sure that you want to do this?( R R R" R t BUTTONS_YES_NOR R Rt Ru Rv R R+ Rw R% RB RC Rx R{ R| R ( R R R| ( ( R t
confirmDialog s
c G s] | i o | i i o | i i n | i t j o | i i t j o d Sn d d d g } | i i } | d j o | i d n | d j o | i d n d } | i
i } | i x | D] } | i i | ol x8 | i
| d D]% \ } } | i d | d
| q Wx[ | i
| d D] } | i d | q9Wn. x* | i
| d D] } | i d
| qjW| d } q W| i i } | i } xJ | oB | i d | i | d | i | d f | i | } qW| i t i j o d Sn | i o d GHnt! i" \ } } t! i% } | d j o z t! i' | t! i( d t! i) }
|
d j o! t! i+ |
d t! i' |
n | d j o! t! i+ | d t! i' | n t! i+ d d t! i, | d | Wd t! i- d Xn t! i' | d }
t! i/ | d } x( | o |
| 7}
t! i/ | d } q:Wt! i' | t! i1 | d \ } } | d j o t i4 d d t i5 t i6 } | i8 d t9 d d | i: d i; | d |
i< | i= t i> | i? | i@ | iA t | iB | iC | iD d Sn tE | _ tE | i _ d S( Ni s /usr/sbin/lokkits --quiets -fs --enabledi s
--disabledR s --port=R R s --addmodule=s --removemodule=s --port=%s:%ss" don't call lokkit if in debug modes /dev/nulli i R< i s <b>s Configuration faileds </b>t s
(F R R$ t selinuxsupportR R! R% RS R R- R t indexR t countR' RT RU RV R R R t moduleR/ R R R R R R R R t RESPONSE_NOR" R# R t pipet rfdt wfdt forkt pidt closeR t O_RDONLYt fdt dup2t execvt _exitt crett readt coutt waitpidt cpidt statusR t
MESSAGE_ERRORt
BUTTONS_CLOSEt dialogt
set_markupR t format_secondary_textR R Rt Ru Rv R+ Rw Rx R{ R R ( R R R R R R R R R R R R R R RU R R R R R ( ( R R s #
/
$
c C s | | _ | i t i t | i } | i t | i
d d | i d d | i t i
d d } | i | d t | i i | t i } | i t | | | i f S( Ni if0.0f0.5t spacingi
t expand( R# R Ro R t LabelR t shortMessaget messageLabelt
set_line_wrapR% t set_size_requestt
set_alignmentR t VBoxt vboxRK R R* t reparentt Imaget icont set_from_pixbufRC t
moduleName( R R# R R R ( ( R t launch& s
c C sT t d } | i | i i d | _ | i i d | _ | i i d | _ t i t | _ | i
i d | i | i i d | i
| i i d | i | i i d | i t i t d } | i t | i i | i | t i t d } | i t | i i | i | | i | i
i t i d S( Ns Security Level and Firewallt okButtont cancelButtont applyButtonR R? s _Firewall Optionst _SELinux( R t desktopNameR Ro R R@ R R R
R$ R+ RN R R R R R t
firewallLabelt set_use_underlineR% RA t
set_tab_labelR* t selinuxLabelR. R Rx t main( R R R R ( ( R t stand_alone8 s&
( t __name__t
__module__t runPriorityR R t
commentTagR R R( Ro Rq Rr Rd Re RO R R R R R R R R R R R R" R
R ( ( ( R R > s2 G " r ` ( R R t gtk.gladeRE t sysR R R R t
scs_checklistRQ t trustedchecklistR$ R t rhpl.translateR t N_t translateR t
textdomainR" RC t gdkt pixbuf_new_from_fileR t F_OKt gladet XMLR R ( R R$ R RC R R RQ R R R R R RE R R R R ( ( R t ? s0