CasperSecurity
o
;s*b1- � @ sx d Z dZdZddlZddlZddlZddlZddlmZ ddl m
Z
m Z m Z m
Z
dd lm
Z
e
e�ZG d
d � d e�ZdS ) z.Cyril Jaquier, Lee Clemens, Yaroslav HalchenkozPCopyright (c) 2004 Cyril Jaquier, 2011-2012 Lee Clemens, 2012 Yaroslav Halchenko�GPL� N� )�Actions� )� getLogger�_as_bool�extractOptions�MyTime)r c @ s e Zd ZdZg d�Zd7dd�Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z e dd� �Z
e dd� �Zejdd� �Ze dd� �Ze dd� �Ze d d � �Zejd d � �Zd8d d!�Ze d"d#� �Zd$d%� Zd&d'� Zd(d)� Zd9d*d+�Zd,d-� Zd:d/d0�Zd1d2� Zd;d3d4�Z d5d6� Z dS )<�Jailag Fail2Ban jail, which manages a filter and associated actions.
The class handles the initialisation of a filter, and actions. It's
role is then to act as an interface between the filter and actions,
passing bans detected by the filter, for the actions to then act upon.
Parameters
----------
name : str
Name assigned to the jail.
backend : str
Backend to be used for filter. "auto" will attempt to pick
the most preferred backend method. Default: "auto"
db : Fail2BanDb
Fail2Ban persistent database instance. Default: `None`
Attributes
----------
name
database
filter
actions
idle
status
)� pyinotify�gamin�polling�systemd�autoNc C sh || _ t|�dkrt�d| � || _t�� | _d | _i | _ t�
d| j � |d ur/| � |� || _
d S )N� z]Jail name %r might be too long and some commands might not function correctly. Please shortenzCreating new jail '%s')� _Jail__db�len�logSys�warning� _Jail__name�queue�Queue� _Jail__queue�
_Jail__filter� _banExtra�info�name� _setBackend�backend)�selfr r �db� r! �6/usr/lib/python3/dist-packages/fail2ban/server/jail.py�__init__G s �
z
Jail.__init__c C s d| j j| jf S )Nz%s(%r))� __class__�__name__r �r r! r! r" �__repr__X s z
Jail.__repr__c C s4 t |�\}}|�� }| j}|dkr0|| jvr't�d||f � td||f ��||�|�d � }|D ]X}t| d|�� �}z)|di |�� |dkrW||krWt� d||f � nt�
d| � t | �| _ W d S t
y� } zt�|dkrwtjntjd||f � W Y d }~q2d }~ww t�d| j � td| j ��) Nr z.Unknown backend %s. Must be among %s or 'auto'z_init%sz9Could only initiated %r backend whenever %r was requestedzInitiated %r backendz)Backend %r failed to initialize due to %sz,Failed to initialize any backend for Jail %rr! )r �lower� _BACKENDSr �error�
ValueError�index�getattr�
capitalizer r r �_Jail__actions� ImportError�log�logging�DEBUG�ERRORr � RuntimeError)r r �beArgs�backends�b�
initmethod�er! r! r" r [ sH
���
�����zJail._setBackendc K �6 ddl m} t�d| j|f � || fi |��| _d S )Nr )�
FilterPollzJail '%s' uses poller %r)�
filterpollr< r r r r )r �kwargsr< r! r! r" � _initPolling� s zJail._initPollingc K r; )Nr )� FilterGaminzJail '%s' uses Gamin %r)� filtergaminr@ r r r r )r r> r@ r! r! r" �
_initGamin� � zJail._initGaminc K r; )Nr )�FilterPyinotifyzJail '%s' uses pyinotify %r)�filterpyinotifyrD r r r r )r r> rD r! r! r" �_initPyinotify� rC zJail._initPyinotifyc K r; )Nr )�
FilterSystemdzJail '%s' uses systemd %r)�
filtersystemdrG r r r r )r r> rG r! r! r" � _initSystemd� rC zJail._initSystemdc C � | j S )zName of jail.
)r r& r! r! r" r � � z Jail.namec C rJ )z;The database used to store persistent data for the jail.
�r r& r! r! r" �database� rK z
Jail.databasec C s
|| _ d S �NrL �r �valuer! r! r" rM � s
c C rJ )z;The filter which the jail is using to monitor log files.
)r r& r! r! r" �filter� rK z Jail.filterc C rJ )z2Actions object used to manage actions for jail.
)r/ r& r! r! r" �actions� rK z Jail.actionsc C s | j jp| jjS )z-A boolean indicating whether jail is idle.
�rQ �idlerR r& r! r! r" rT � s z Jail.idlec C s || j _|| j_d S rN rS rO r! r! r" rT � s �basicc C s$ d| j j|d�fd| jj|d�fgS )zThe status of the jail.
�Filter)�flavorr )rQ �statusrR )r rW r! r! r" rX � s �z Jail.statusc C s | j �� S )z-Retrieve whether queue has tickets to ban.
)r �emptyr& r! r! r" �hasFailTickets� s zJail.hasFailTicketsc C s | j �|� dS )zQAdd a fail ticket to the jail.
Used by filter to add a failure for banning.
N)r �put�r �ticketr! r! r" �
putFailTicket� s zJail.putFailTicketc C s* z | j �d�}|W S tjy Y dS w )zTGet a fail ticket from the jail.
Used by actions to get a failure for banning.
F)r �getr �Emptyr\ r! r! r" �
getFailTicket� s �zJail.getFailTicketc s� | j }|dkr d }|d ur|||< n||v r||= t�d||� |dkr9t|�||< |�|�r9| jd u r9t�d� |dv rH|d urHt�|�||< |dv sT|�dd �d u r�|dkrnd d
� |d urh|dkrh|� d �ng D �|d < |�d g ��t
|�d
d��}t ��r�|f�fdd� }n|�dd�}t |dd�}||fdd�}|�dd �d ur�|d � |f� fdd� }|�dd �d ur�|d �|f�fdd� }||d< d S d S )N� zSet banTime.%s = %s� incrementzDban time increment is not available as long jail database is not set)�maxtime�rndtime)�formula�factorrd re � multipliers� evformularh c S s g | ]}t |��qS r! )�int)�.0�ir! r! r" �
<listcomp>� � z(Jail.setBanTimeExtra.<locals>.<listcomp>� �
evmultipliersrg �1c s* | j | � | jt� �k r| j S d S )N���)�Time�Countr )�ban� banFactor)rh r! r" �<lambda>� s *z&Jail.setBanTimeExtra.<locals>.<lambda>rf z?ban.Time * (1<<(ban.Count if ban.Count<20 else 20)) * banFactorz~inline-conf-expr~�evalc S s t | jt|��S rN )�maxrs rx )ru rv rf r! r! r" rw s rd c s t || �� �S rN )�min�ru ri )rd r! r" rw s re c s || �t � � � S rN )�randomr{ )re r! r" rw rn )
r r r r r_ rM r r � str2seconds�splitrx r �compile)r �optrP �berv ri rf r! )rd rh re r" �setBanTimeExtra� sB
, �zJail.setBanTimeExtrac C s |d ur | j �|d �S | j S rN )r r_ )r r� r! r! r" �getBanTimeExtra s zJail.getBanTimeExtrac C s$ | j �d�r
| j �dd�S | j�� S )z)Returns max possible ban-time of jail.
rc rd rr )r r_ rR �
getBanTimer& r! r! r" �
getMaxBanTime s
��zJail.getMaxBanTimeTc C sP z�| j dur�| j�d�rd}|r| �� }n| j�� }| j j| ||| jjj d�D ]]}z9| jj
|� � dd�r6W q'd|_ |�|�}t
�� |�� }|dkrR|dkrR||8 }|dkr\|dkr\W q'| �|� W q' ty� } ztjd|t�� tjkd � W Y d}~q'd}~ww W dS W dS ty� } ztjd
|t�� tjkd � W Y d}~dS d}~ww ) z5Restore any previous valid bans from the database.
Nrc )�jail�
forbantime�correctBanTime�
maxmatchesT)�
log_ignorerr r zRestore ticket failed: %s��exc_infozRestore bans failed: %s)rM r r_ r� rR r� �getCurrentBansrQ � failManager�
maxMatches�inIgnoreIPList�getIP�restoredr �time�getTimer^ � Exceptionr r* �getEffectiveLevelr2 r3 )r r� r� r] �btm�diftmr: r! r! r" �restoreCurrentBans sF
�
�
���� ���zJail.restoreCurrentBansc C s< t �d| j� | j�� | j�� | �� t �d| j� dS )z�Start the jail, by starting filter and actions threads.
Once stated, also queries the persistent database to reinstate
any valid bans.
zStarting jail %rzJail %r startedN)r �debugr rQ �startrR r� r r& r! r! r" r� = s
z
Jail.startc C s� |r t �d| j� | j| jfD ]2}z|r|�� |r |�� W q tyA } zt jd|| j|t � � t
j kd� W Y d}~qd}~ww |rMt � d| j� dS dS )z9Stop the jail, by stopping filter and actions threads.
zStopping jail %rz Stop %r of jail %r failed: %sr� NzJail %r stopped)
r r� r rQ rR �stop�joinr� r* r� r2 r3 r )r r� r� �objr: r! r! r" r� I s$ � ����z Jail.stopc C s | j �� p | j�� S )z?Check jail "isAlive" by checking filter and actions threads.
)rQ �isAliverR r& r! r! r" r� \ s z Jail.isAlive)r N)rU rN )T)TT) r% �
__module__� __qualname__�__doc__r) r# r' r r? rB rF rI �propertyr rM �setterrQ rR rT rX rZ r^ ra r� r� r� r� r� r� r� r! r! r! r" r
' sH
&
-
$
r
)�
__author__�
__copyright__� __license__r2 �mathr| r rR r �helpersr r r r �mytimer% r �objectr
r! r! r! r" �<module> s