File: //lib/python3.9/site-packages/fail2ban/server/__pycache__/jail.cpython-39.pyc
a
}SRo�^� @ sx d Z dZdZddlZddlZddlZddlZddlmZ ddl m
Z
m Z m Z m
Z
dd lm
Z
e
e�ZG d
d � d e�ZdS ) z.Cyril Jaquier, Lee Clemens, Yaroslav HalchenkozPCopyright (c) 2004 Cyril Jaquier, 2011-2012 Lee Clemens, 2012 Yaroslav Halchenko�GPL� N� )�Actions� )� getLogger�_as_bool�extractOptions�MyTime)r c @ s e Zd ZdZg d�Zd5dd�Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
e dd� �Z e dd� �Z
e
jdd� �Z
e dd� �Ze dd� �Ze dd� �Zejd d� �Zd6d d �Ze d d!� �Zd"d#� Zd$d%� Zd&d'� Zd7d(d)�Zd*d+� Zd8d-d.�Zd/d0� Zd9d1d2�Zd3d4� Z dS ):�Jailag Fail2Ban jail, which manages a filter and associated actions.
The class handles the initialisation of a filter, and actions. It's
role is then to act as an interface between the filter and actions,
passing bans detected by the filter, for the actions to then act upon.
Parameters
----------
name : str
Name assigned to the jail.
backend : str
Backend to be used for filter. "auto" will attempt to pick
the most preferred backend method. Default: "auto"
db : Fail2BanDb
Fail2Ban persistent database instance. Default: `None`
Attributes
----------
name
database
filter
actions
idle
status
)Z pyinotifyZpollingZsystemd�autoNc C sp || _ t|�dkr t�d| � || _t�� | _d | _i | _ t�
d| j � d | _ |d urf| �
|�| _ || _d S )N� z]Jail name %r might be too long and some commands might not function correctly. Please shortenzCreating new jail '%s')� _Jail__db�len�logSys�warning� _Jail__name�queue�Queue� _Jail__queue�
_Jail__filter� _banExtra�info�name� _realBackend� _setBackend�backend)�selfr r Zdb� r �8/usr/lib/python3.9/site-packages/fail2ban/server/jail.py�__init__G s �
z
Jail.__init__c C s d| j j| jf S )Nz%s(%r))� __class__�__name__r �r r r r �__repr__Y s z
Jail.__repr__c C s> t |�\}}|�� }| j}|dkr`|| jvrNt�d||f � td||f ��||�|�d � }|D ]�}t| d|�� �}zT|f i |�� |dkr�||kr�t� d||f � nt�
d| � t | �| _ |W S t
�y } z0t�|dkr�tjntjd||f � W Y d }~qdd }~0 0 qdt�d| j � td| j ��d S )Nr z.Unknown backend %s. Must be among %s or 'auto'z_init%sz9Could only initiated %r backend whenever %r was requestedzInitiated %r backendz)Backend %r failed to initialize due to %sz,Failed to initialize any backend for Jail %r)r �lower� _BACKENDSr �error�
ValueError�index�getattr�
capitalizer r r �_Jail__actions� ImportError�log�logging�DEBUG�ERRORr � RuntimeError)r r ZbeArgsZbackends�bZ
initmethod�er r r r \ sD
���
� ��zJail._setBackendc K s6 ddl m} t�d| j|f � || fi |��| _d S )Nr )�
FilterPollzJail '%s' uses poller %r)Z
filterpollr4 r r r r )r �kwargsr4 r r r � _initPolling� s zJail._initPollingc K s6 ddl m} t�d| j|f � || fi |��| _d S )Nr )�FilterPyinotifyzJail '%s' uses pyinotify %r)Zfilterpyinotifyr7 r r r r )r r5 r7 r r r �_initPyinotify� s zJail._initPyinotifyc K s6 ddl m} t�d| j|f � || fi |��| _d S )Nr )�
FilterSystemdzJail '%s' uses systemd %r)Z
filtersystemdr9 r r r r )r r5 r9 r r r � _initSystemd� s zJail._initSystemdc C s | j S )zName of jail.
)r r" r r r r � s z Jail.namec C s | j S )z;The database used to store persistent data for the jail.
�r
r" r r r �database� s z
Jail.databasec C s
|| _ d S �Nr; �r �valuer r r r< � s c C s | j S )z;The filter which the jail is using to monitor log files.
)r r" r r r �filter� s z Jail.filterc C s | j S )z2Actions object used to manage actions for jail.
)r+ r" r r r �actions� s z Jail.actionsc C s | j jp| jjS )z-A boolean indicating whether jail is idle.
�r@ �idlerA r" r r r rC � s z Jail.idlec C s || j _|| j_d S r= rB r> r r r rC � s �basicc C s^ | j j|d�}| jj|d�}|dkrNt| j �j�dd��� }| jpF| j||gS d|fd|fgS )zThe status of the jail.
)�flavorZstats�Filter� r ) r@ �statusrA �typer! �replacer$ r r )r rE �fstatZastatr r r r rH � s �z Jail.statusc C s | j �� S )z-Retrieve whether queue has tickets to ban.
)r �emptyr" r r r �hasFailTickets� s zJail.hasFailTicketsc C s | j �|� dS )zQAdd a fail ticket to the jail.
Used by filter to add a failure for banning.
N)r �put�r �ticketr r r �
putFailTicket� s zJail.putFailTicketc C s. z| j �d�}|W S tjy( Y dS 0 dS )zTGet a fail ticket from the jail.
Used by actions to get a failure for banning.
FN)r �getr �EmptyrO r r r �
getFailTicket� s
zJail.getFailTicketc s� | j }|dkrd }|d ur$|||< n||v r2||= t�d||� |dkrrt|�||< |�|�rr| jd u rrt�d� |dv r�|d ur�t�|�||< |dv s�|�dd �d u �r�|dkr�d d
� |d ur�|dkr�|� d �ng D �|d < |�d g ��t
|�d
d��}t ���r|f�fdd� }n&|�dd�}t |dd�}||fdd�}|�dd �d u�rf|d � |f� fdd� }|�dd �d u�r�|d �|f�fdd� }||d< d S )NrG zSet banTime.%s = %s� incrementzDban time increment is not available as long jail database is not set)�maxtime�rndtime)�formula�factorrV rW � multipliers� evformularZ c S s g | ] }t |��qS r )�int)�.0�ir r r �
<listcomp>� � z(Jail.setBanTimeExtra.<locals>.<listcomp>� Z
evmultipliersrY �1c s& | j | � | jt� �k r | jnd S )N���)�TimeZCountr )�ban� banFactor)rZ r r �<lambda>� s z&Jail.setBanTimeExtra.<locals>.<lambda>rX z?ban.Time * (1<<(ban.Count if ban.Count<20 else 20)) * banFactorz~inline-conf-expr~�evalc S s t | jt|��S r= )�maxrd rh )re rf rX r r r rg r` rV c s t || �� �S r= )�min�re r[ )rV r r rg r` rW c s || �t � � � S r= )�randomrk )rW r r rg r` )
r r r r rR r< r r Z str2seconds�splitrh r �compile)r �optr? �berf r[ rX r )rV rZ rW r �setBanTimeExtra� s@
,
zJail.setBanTimeExtrac C s |d ur| j �|d �S | j S r= )r rR )r ro r r r �getBanTimeExtra s zJail.getBanTimeExtrac C s$ | j �d�r| j �dd�S | j�� S )z)Returns max possible ban-time of jail.
rU rV rc )r rR rA �
getBanTimer" r r r �
getMaxBanTime s
��zJail.getMaxBanTimeTc C sR �z
| j du�r
| j�d�r.d}|r8| �� }n
| j�� }| j j| ||| jjj d�D ]�}zpd|_
| j� |� � |�rtW qR|�|�}t
�� |�� }|dkr�|dkr�||8 }|dkr�|dkr�W qR| �|� W qR t�y } z&tjd|t�� tjkd� W Y d}~qRd}~0 0 qRW n@ t�yL } z&tjd |t�� tjkd� W Y d}~n
d}~0 0 dS )
z5Restore any previous valid bans from the database.
NrU )Zjail�
forbantime�correctBanTimeZ
maxmatchesTrc r zRestore ticket failed: %s��exc_infozRestore bans failed: %s)r< r rR rt rA rs ZgetCurrentBansr@ Z failManager�
maxMatchesZrestoredZ_inIgnoreIPListZgetIDr �timeZgetTimerQ � Exceptionr r& �getEffectiveLevelr. r/ )r rv ru rP ZbtmZdiftmr3 r r r �restoreCurrentBans s8
�
�" �zJail.restoreCurrentBansc C s< t �d| j� | j�� | j�� | �� t �d| j� dS )z�Start the jail, by starting filter and actions threads.
Once stated, also queries the persistent database to reinstate
any valid bans.
zStarting jail %rzJail %r startedN)r �debugr r@ �startrA r} r r" r r r r = s
z
Jail.startc C s� |rt �d| j� | j| jfD ]f}z |r0|�� |r<|�� W q ty� } z,t jd|| j|t � � t
j kd� W Y d}~q d}~0 0 q |r�t � d| j� dS )z9Stop the jail, by stopping filter and actions threads.
zStopping jail %rz Stop %r of jail %r failed: %srw NzJail %r stopped)
r r~ r r@ rA �stop�joinr{ r& r| r. r/ r )r r� r� �objr3 r r r r� I s � z Jail.stopc C s | j �� p| j�� S )z?Check jail "isAlive" by checking filter and actions threads.
)r@ �isAliverA r" r r r r� \ s z Jail.isAlive)r N)rD )N)T)TT) r! �
__module__� __qualname__�__doc__r% r r# r r6 r8 r: �propertyr r< �setterr@ rA rC rH rM rQ rT rq rr rt r} r r� r� r r r r r
' sD
&
-
$
r
)�
__author__�
__copyright__� __license__r. �mathrl r rA r Zhelpersr r r r Zmytimer! r �objectr
r r r r �<module> s