CasperSecurity
o
;s*b�0 � @ s� d Z dZdZddlZddlZddlZddlZddlZddlZddl m
Z
ddl Z ddl m
Z
mZmZ zddlmZ W n eyE eZY nw ejd krPddlZnddlZe
e�Zd
d iZed d
� ej� � D ��Z G dd� d�Z dS )z2Serg G. Brester (sebres) and Fail2Ban ContributorszYCopyright (c) 2004 Cyril Jaquier, 2011-2012 Yaroslav Halchenko, 2012-2015 Serg G. Brester�GPL� N)�Lock� )� getLogger� _merge_dicts�
uni_decode)� OrderedDict�� r
� am "Command not found". Make sure that all commands in %(realCmd)r are in the PATH of fail2ban-server process (grep -a PATH= /proc/`pidof -x fail2ban-server`/environ). You may want to start "fail2ban-server -f" separately, initiate it with "fail2ban-client reload" in another shell session and observe if additional informative error messages appear in the terminals.c c s& � | ]\}}|� d �r||fV qdS )�SIGN)�
startswith)�.0�name�num� r �7/usr/lib/python3/dist-packages/fail2ban/server/utils.py� <genexpr>; s � �r c @ s� e Zd ZdZdZdZdZed ZG dd� de�Z e
dd � �Z e
d
d � �Z e
ddd��Z
e
d dd��Zejdkr@e
dd� �Zne
dd� �Ze
dd� �ZdS ) �UtilszPUtilities provide diverse static methods like executes OS shell commands, etc.
r g�������?g����MbP?�d c @ sL e Zd ZdZdd� Zddd�Zdd � Zdd d �Zd
d� Zdd� Z dd� Z
d
S )z Utils.Cachez.A simple cache with a TTL and limit on size
c O s$ | j |i |�� t� | _t� | _d S �N)�
setOptionsr �_cacher � _Cache__lock)�self�args�kwargsr r r �__init__L s zUtils.Cache.__init__�� �< c C s || _ || _d S r )�maxCount�maxTime)r r r! r r r r Q s
zUtils.Cache.setOptionsc C s
t | j�S r )�lenr �r r r r �__len__U s
zUtils.Cache.__len__Nc C s6 | j �|�}|r|d t�� kr|d S | �|� |S )N� r )r �get�time�unset)r �k�defv�vr r r r& X s
zUtils.Cache.getc C s t � � }| j}| j�p t|�| jkrittur1|r0|jdd�\}}|d |kr.t|�| jk r.n|sn8g }|�� D ]\}}|d |krF|� |� q7|D ] }| j�
|d � qI|rit|�| jkri|�� |rit|�| jks\||| j f||< W d � d S 1 s}w Y d S )NF)�lastr% ) r' r r r" r r �dict�popitem�items�append�popr! )r r) r+ �t�cache�ck�cv�remlstr r r �set` s. ��
��"�zUtils.Cache.setc C s: | j � | j�|d � W d � d S 1 sw Y d S r )r r r1 )r r) r r r r( | s "�zUtils.Cache.unsetc C s6 | j � | j�� W d � d S 1 sw Y d S r )r r �clearr# r r r r8 � s "�zUtils.Cache.clear)r r r ) �__name__�
__module__� __qualname__�__doc__r r r$ r& r7 r( r8 r r r r �CacheH s
r= c C s> t � | t j�}|s|tjO }n|tj M }t � | t j|� |S r )�fcntl�F_GETFL�os�
O_NONBLOCK�F_SETFL)�fhandle�value�flagsr r r �
setFBlockMode� s zUtils.setFBlockModec C sl d}t | t�s
| g} t| �d }|�� D ]\}}|d||f 7 }| �|� |d7 }q|d | d | d< | S )a� Generates new shell command as array, contains map as variables to
arguments statement (varsStat), the command (realCmd) used this variables and
the list of the arguments, mapped from varsDict
Example:
buildShellCmd('echo "V2: $v2, V1: $v1"', {"v1": "val 1", "v2": "val 2", "vUnused": "unused var"})
returns:
['v1=$0 v2=$1 vUnused=$2
echo "V2: $v2, V1: $v1"', 'val 1', 'val 2', 'unused var']
� r% z%s=$%s �
r )�
isinstance�listr" r/ r0 )�realCmd�varsDict�varsStat�ir) r+ r r r �
buildShellCmd� s
zUtils.buildShellCmdr TF�r Nc
s� d }}d} d � }
|r|rt ��|��nttj|�}
t�����fdd�} z�tj�tjtj||
tj d�� � �
� } | du rQ� fdd�} t � | |t j �} | rQ| d } | du r�| r^| t
j� d} t�d�|f � t�� j�}
t�|
tj� t�t j� � �
� } | du s�|r�t�|
tj� t�t j� | du r�� �
� } | du r�t �|
�s�tj} W n8 ty� } z,| r�| t
j� d} d �|f }t�|� � s�|s�d
nd
||| fW Y d}~S W Y d}~nd}~ww | |v r�t
j nt
j}|t� � k�r| �r| |t
j kr�|d nt
j� d} |�s
|t� � k�r�� j �rfz| du �s | d k �r#t � � j d
� � j � � }W n t!�yB } z t�d |� W Y d}~nd}~ww |du�rf|d
k�rf|t� � k�rf|�"� D ]
}t�#|d�t$|�� �qX� j%�r�z| du �su| d k �r|t � � j%d
� � j%� � }W n t!�y� } z t�d|� W Y d}~nd}~ww |du�r�|d
k�r�|t� � k�r�|�"� D ]
}t�#|d�t$|�� �q�� j �rȈ j �&� � j%�rш j%�&� d
}| |v �r�t�'d�| � d}nM| du �r�t�d�� j� n?| d k �s�| dk�r| d k �r| n| d }t�d�t(�)|d| �| � nt*�)| d�}t�d�| � |�r/t�+d| |t,� � |�r8|||| fS t-|�dk�rA|S || fS )a Executes a command.
Parameters
----------
realCmd : str
The command to execute.
timeout : int
The time out in seconds for the command.
shell : bool
If shell is True (default), the specified command (may be a string) will be
executed through the shell.
output : bool
If output is True, the function returns tuple (success, stdoutdata, stderrdata, returncode).
If False, just indication of success is returned
varsDict: dict
variables supplied to the command (or to the shell script)
Returns
-------
bool or (bool, str, str, int)
True if the command succeeded and with stdout, stderr, returncode if output was set to True
Raises
------
OSError
If command fails to be executed.
RuntimeError
If command execution times out.
Nc s t �| d�� �S )Nz%x -- exec: %s)�logSys�log)�level)rK � realCmdIdr r �<lambda>� s z"Utils.executeCmd.<locals>.<lambda>)�stdout�stderr�shell�env�
preexec_fnc s � � � } | d ur d| fS d S )NT)�poll)�retcode)�popenr r �_popen_wait_end� s z)Utils.executeCmd.<locals>._popen_wait_endr% z!%x -- timed out after %s seconds.z%s -- failed with %sFr z ... -- failed to read stdout %srG z%x -- stdout: %rz ... -- failed to read stderr %sz%x -- stderr: %rz %x -- returned successfully %iTz%x -- unable to kill PID %i� z&%x -- killed with %s (return code: %s)z signal %iz%x -- returned %izHINT on %i: %s).r rO r r@ �environ�id�
subprocess�Popen�PIPE�setsidr[ �wait_for�DEFAULT_SHORTEST_INTERVAL�logging�ERRORrQ �error�getpgid�pid�killpg�signal�SIGTERMr' �sleep�DEFAULT_SLEEP_INTERVAL�SIGKILL�
pid_exists�OSError�DEBUG�getEffectiveLevelrV rF �read�IOError�
splitlinesrR r rW �close�debug�signamer& �_RETCODE_HINTS�info�localsr" )rK �timeoutrX �output�tout_kill_tree�
success_codesrL rV rW r\ rY �logCmdr^ �pgid�e� std_level�l�success�sigcode�msgr )r] rK rT r �
executeCmd� s� � � �
���&��" ��"
� zUtils.executeCmdc sx d} | � }|r
|S |r(d }}t |�s!t�� | � � fdd�}n|}|s(tj}|� r. |S t|| tj�}t�|� q)a5 Wait until condition expression `cond` is True, up to `timeout` sec
Parameters
----------
cond : callable
The expression to check condition
(should return equivalent to bool True if wait successful).
timeout : float or callable
The time out for end of wait
(in seconds or callable that returns True if timeout occurred).
interval : float (optional)
Polling start interval for wait cycle in seconds.
Returns
-------
variable
The return value of the last call of `cond`,
logical False (or None, 0, etc) if timeout occurred.
r% Tr c s t � � � kS r )r' r ��time0r r rU L s z Utils.wait_for.<locals>.<lambda>)�callabler' r rq �min�DEFAULT_SLEEP_TIMErp )�condr� �interval�ini�ret�stm� timeout_exprr r� r rf - s& �
�zUtils.wait_for�posixc
C sX ddl }| dk r
dS z t�| d� W dS ty+ } z |j |jkW Y d}~S d}~ww )z6Check whether pid exists in the current process table.r NFT)�errnor@ �killrt �EPERM)rl r� r� r r r rs Z s ���zUtils.pid_existsc C s< dd l }|jj}d}|�|d| �}|dkr |�|� dS dS )Nr i TF)�ctypes�windll�kernel32� OpenProcess� CloseHandle)rl r� r� � SYNCHRONIZE�processr r r rs g s
c C sH t j�t j�| ��d }tjdkr tj�|| �� � }|S t
� || �}|S )Nr r ) r@ �path�splitext�basename�sys� version_info� importlib� machinery�SourceFileLoader� load_module�imp� load_source)� pythonModule�pythonModuleName�modr r r �load_python_modulet s
��
����zUtils.load_python_module)r TFTrP Nr )r9 r: r; r< r� rq �DEFAULT_SHORT_INTERVALrg �objectr= � staticmethodrF rO r� rf r@ r rs r� r r r r r > s2 =
�
+
r ) �
__author__�
__copyright__� __license__r> rh r@ rn rb r� � threadingr r' �helpersr r r � collectionsr � ImportErrorr- r� �importlib.machineryr� r� r9 rQ r} �__dict__r/ r| r r r r r �<module> s6 �
� �