File: //usr/lib/python3.9/site-packages/fail2ban/tests/__pycache__/clientreadertestcase.cpython-39.pyc
a
@�\]�)l� @ sv d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m Z m
Z
mZ ddlmZ ddlmZmZmZ dd lmZ dd
lmZ dd lmZmZ dd l m Z dd
l m Z ddl m Z ddl!m"Z"m#Z# ej$�%ej$�&e'�d�Z(i Z)ddl!m*Z* e j+j,Z-ej$�%ej$�&e'�d�Z.i Z/G dd� de j0�Z1G dd� de"�Z2G dd� de"�Z3G dd� de"�Z4G d d � d e"�Z5dS ) z!Cyril Jaquier, Yaroslav Halchenkoz>Copyright (c) 2004 Cyril Jaquier, 2011-2013 Yaroslav Halchenko�GPL� N� )� ConfigReader�ConfigReaderUnshared�DefinitionInitConfigReader�NoSectionError)�configparserinc)�
JailReader�extractOptions�splitWithOptions)� FilterReader)� JailsReader)� ActionReader�
CommandAction)� Configurator)�MyTime)�version� )�LogCaptureTestCase� with_tmpdir�files)�
CONFIG_DIR�configc s| e Zd Z� fdd�Z� fdd�Zddd�Zdd � Zd d d �Zd
d� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Z� ZS ) �ConfigReaderTestc s. t t| ��� tjdd�| _t| jd�| _dS )z Call before every test case.zf2b-temp)�prefix��basedirN)�superr �setUp�tempfile�mkdtemp�dr �c��self�� __class__� �G/usr/lib/python3.9/site-packages/fail2ban/tests/clientreadertestcase.pyr 7 s zConfigReaderTest.setUpc s t �| j� tt| ��� dS )zCall after every test case.N)�shutil�rmtreer! r r �tearDownr# r% r' r( r+ = s zConfigReaderTest.tearDownNc C s� t jj|v r>t j�|�}t j�| j|�}t j�|�s>t �|� td| j|f d�}|d urh|� d| � |d urz|� |� |�
� d S )N�%s/%s�wz
[section]
option = %s
) �os�path�sep�dirname�joinr! �exists�makedirs�open�write�close)r$ �fname�value�contentr! Zd_�fr' r' r( �_writeB s
�
zConfigReaderTest._writec C s* t �d| j|f � | �| j�d�� d S )Nr, r" )r. �unlinkr! �
assertTruer" �read)r$ r8 r' r' r( �_removeS s zConfigReaderTest._remover" c C s& | � | j�|�� | j�ddg�d S )N�section)�int�optionrC )r> r" r? �
getOptions)r$ r; r' r' r( �
_getoptionW s zConfigReaderTest._getoptionc C s� | j �d� | j �ddd� | j �ddd� | j �ddd� | j �dd�}| �|dd d
d �� | j �dd �}| �|dd d d �� | j �dd
dd
d ��}| �|dd d
d �� d S )N�
Definition�a�1�br" �test))rB rG r )�boolrI r )rB r" r r Tr )rG rI r" ))rB rG )rK rI )rB r" )rB r )rK r )r" � add_section�setrD �assertSortedEqual)r$ �optsr' r' r( � testConvert[ s ��
�z ConfigReaderTest.testConvertc C sz t j�| jd�}| �dd� | �| �d�d� t �|d� t �|t j �s\| �
| j � d�� ndd l
}t�d|�
� ��d S )Nzd.confr r! z0Skipping on %s -- access rights are not enforced)r. r/ r2 r! r< � assertEqualrE �chmod�access�R_OK� assertFalser" r? �platform�unittest�SkipTest)r$ r; rV r' r' r( �testInaccessibleFilej s z%ConfigReaderTest.testInaccessibleFilec C sL | � | j�d�� | �dd� | �| �� d� | �dd� | �| �� d� | �dd� | �| �� d � | �d
d � | �| �� d � | �d d
� | �| �� d� | �dd� | �| �� d� | �dd� | �| �� d� | �d� | �d� | �| �� d� | �d � | �| �� d � | �d� | �| �� d� | �d
� | �| �� d� d S )Nr" �c.confrH r �2r z c.d/98.confZ998i� z c.d/90.confZ990z c.d/99.confZ999i� zc.local�3� z c.d/1.local�4� i� )rU r" r? r< rQ rE r@ r# r' r' r( �testOptionalDotDDirw s0
z$ConfigReaderTest.testOptionalDotDDirc C s� | j dd dd� | j dd dd� | j dd dd� | j dd d d� | j d
d d d� G d d
� d
t�}|ddi �| _| j�| j� | �| j�� � | jji dd� | j�� }| � |�
d�d� | � |�
d�d� | � |�
d�d� d S )NrZ zS
[INCLUDES]
before = ib.conf
after = ia.conf
[Definition]
test = %(default/test)s
�r9 r: zib.confz,
[DEFAULT]
test = A
[Definition]
option = 1
zib.localz,
[DEFAULT]
test = B
[Definition]
option = 2
zia.confz,
[DEFAULT]
test = C
[Definition]
oafter = 3
zia.localz,
[DEFAULT]
test = D
[Definition]
oafter = 4
c @ s$ e Zd Zddgddgddgd�ZdS )z?ConfigReaderTest.testLocalInIncludes.<locals>.TestDefConfReaderrB N�string)rC �oafterrJ )�__name__�
__module__� __qualname__Z _configOptsr' r' r' r( �TestDefConfReader� s �rg r" rC T)�allr rc r_ rJ �D) r< r r" �
setBaseDirr! r> r? rD � getCombinedrQ �get)r$ rg �or' r' r( �testLocalInIncludes� s
z$ConfigReaderTest.testLocalInIncludesc C s� | � | j�d�� | jdd dd� | �| j�d�� | �| j�� ddg� | �| j�dd�d� | �| j�dd �d
� | �| j�dd �d� | �| j�dd �d
� | �| j�dd �d� d S )N�izi.confzu
[DEFAULT]
b = a
zz = the%(__name__)s
[section]
y = 4%(b)s
e = 5${b}
z = %(__name__)s
[section2]
z = 3%(__name__)s
ra rA Zsection2�yZ4a�ez5${b}�z�zzZ
thesectionZ 3section2)rU r" r? r< r> rQ �sectionsrl r# r' r' r( �testInterpolations� s
z#ConfigReaderTest.testInterpolationsc C sd | � | j�d�� | jdd dd� | �| j�d�� | �| j�dd�d� | �| j�dd�d � d S )
N�g�g.confz4
[DEFAULT]
# A comment
b = a
c = d ;in line comment
ra �DEFAULTrI rG r" r! )rU r" r? r< r> rQ rl r# r' r' r( � testComments� s
z ConfigReaderTest.testCommentsc C s< | � | j�d�� | jdd dd� | �| j�d�� | �| j�dd�d� | �| j�dd�d � | �| j�d
d�d � | �| j�d
d�d � | �| j�d
d
�d� | �| j�d
d�d� | �| j�dd
�d� | �| j�dd�d� | �| j�dd
�d� | �| j�dd�d� | �t| jjdd� | �t| jjd
d� d S )Nrv rw z�
[DEFAULT]
a = def-a
b = def-b,a:`%(a)s`
c = def-c,b:"%(b)s"
d = def-d-b:"%(known/b)s"
[jail]
a = jail-a-%(test/a)s
b = jail-b-%(test/b)s
y = %(test/y)s
[test]
a = test-a-%(default/a)s
b = test-b-%(known/b)s
x = %(test/x)s
y = %(jail/y)s
ra rJ rG z test-a-def-arI z test-b-def-b,a:`test-a-def-a`�jailzjail-a-test-a-def-az+jail-b-test-b-def-b,a:`jail-a-test-a-def-a`r" z5def-c,b:"jail-b-test-b-def-b,a:`jail-a-test-a-def-a`"r! z'def-d-b:"def-b,a:`jail-a-test-a-def-a`"z'def-c,b:"test-b-def-b,a:`test-a-def-a`"z def-d-b:"def-b,a:`test-a-def-a`"rx zdef-c,b:"def-b,a:`def-a`"zdef-d-b:"def-b,a:`def-a`"�xrp ) rU r" r? r< r> rQ rl � assertRaises� Exceptionr# r' r' r( �testTargetedSectionOptions� s z+ConfigReaderTest.testTargetedSectionOptions)NN)r" )rd re rf r r+ r< r@ rE rP rY r` rn ru ry r~ �
__classcell__r' r' r% r( r 5 s
0 r c s� e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zed d � �Zd d � Z� ZS )!�JailReaderTestc s t t| �j|i |�� d S �N)r r� �__init__�r$ �args�kwargsr% r' r( r� s zJailReaderTest.__init__c C s� dD ]�}| � td|f �ddg� | � td|f �ddg� | � td|f �ddg� | � td |f �d
dg� | � td |f �d dg� | � td
|f �ddg� | � td|f �ddg� qd S )N)�
� � za%sbrG rI z a[x=y]%sbza[x=y]za[x=y][z=z]%sbz a[x=y][z=z]za[x="y][z"]%sbz a[x="y][z"]z
a[x="y z"]%sbz
a[x="y z"]z
a[x="y z"]%sbz
a[x="y z"]z
a[x="y
z"]%sbz
a[x="y
z"])rQ r )r$ r0 r' r' r( �testSplitWithOptions s z#JailReaderTest.testSplitWithOptionsc C s t dttd�}| �t|j� d S )NZ XXXABSENTXXX�r � share_config)r r �CONFIG_DIR_SHARE_CFGr| �
ValueErrorr? �r$ rz r' r' r( �testIncorrectJail s z JailReaderTest.testIncorrectJailc C sP t dttd�}| �|�� � | �|�� � | �|�� � | �d� | �d� d S )N� emptyactionr� z"No filter set for jail emptyactionz'No actions were defined for emptyaction)r �IMPERFECT_CONFIG�IMPERFECT_CONFIG_SHARE_CFGr> r? rD � isEnabled� assertLoggedr� r' r' r( �testJailActionEmpty s
z"JailReaderTest.testJailActionEmptyc C sT t dttd�}| �|�� � | �|�� � | �|�� � | �dt � | �d� d S )NZmissingbitsjailr� zJFound no accessible config files for 'filter.d/catchallthebadies' under %szUnable to read the filter� r r� r� r> r? rU rD r� r� r� r' r' r( �testJailActionFilterMissing# s z*JailReaderTest.testJailActionFilterMissingc C sF t dttd�}| �|�� � | �|�� � | �|�� � | �d� d S )NZbrokenactiondefr� z$Invalid action definition 'joho[foo'r� r� r' r' r( �testJailActionBrokenDef+ s �z&JailReaderTest.testJailActionBrokenDefc C sN t dttd�}| �|�� � | �|�� � | �|�� � | �|jd d� d S )N�
tz_correctr� � logtimezone�UTC+0200) r r� r� r> r? rD r� rQ �optionsr� r' r' r( �testJailLogTimeZone3 s �z"JailReaderTest.testJailLogTimeZonec C sF t dttd�}| �|�� � | �|�� � | �|�� � | �d� d S )NZbrokenfilterdefr� z$Invalid filter definition 'flt[test'r� r� r' r' r( �testJailFilterBrokenDef; s �z&JailReaderTest.testJailFilterBrokenDefc C st t jjdd� tdttd�}| �|�� � | �|�� � | � |�
� � | � |� � d� |�
d� | � |� � d� d S )NT�Zstock�sshdr� zssh-funky-blocker)rW �F2B�SkipIfCfgMissingr r r� r> r? rD rU r� rQ �getName�setNamer� r' r' r( �testStockSSHJailC s
z JailReaderTest.testStockSSHJailc C s� t jjdd� tdttdd�}| �|�� � | �|�� � | �|� � � |�
� }| � g d�gdd� |D �� | � g d�gd d� |D �� | � g d
�gd d� |D �� |� g d ��}d
}|D ]8}| �
t|�dko�|d �d�� |d7 }||kr� q�q�d S )NTr� �sshd-override-flt-opts�r r� � force_enable)rM r� � prefregexz^Testc S s( g | ] }t |�d kr|d dkr|�qS )r r� ��len��.0rm r' r' r( �
<listcomp>X � z>JailReaderTest.testOverrideFilterOptInJail.<locals>.<listcomp>)rM r� �addjournalmatchz
_COMM=testc S s( g | ] }t |�d kr|d dkr|�qS )r r� r� r� r' r' r( r� [ r� )rM r� �maxlinesr c S s( g | ] }t |�d kr|d dkr|�qS )r r� r� r� r' r' r( r� ^ r� )rM r� �usedns�nor r �regexr )rW r� r� r r� r� r> r? rD r� �convertrQ �indexrU r� �endswith)r$ rz �streamZ usednsidxro rm r' r' r( �testOverrideFilterOptInJailM s. � � � � z*JailReaderTest.testOverrideFilterOptInJailc C s� t jjdd� dD ]r}dD ]h}td|�� ttdd�}| �|�� � | �|� � � |�
� }| � d|� � dd | ggd
d � |D �� qqd S ) NTr� )r r )ZJRNLZFILE�TESTZINITZ
checklogtype_r� rM � addfailregexz^%s failure from <HOST>$c S s( g | ] }t |�d kr|d dkr|�qS )r r� r� r� r' r' r( r� t r� z=JailReaderTest.testLogTypeOfBackendInJail.<locals>.<listcomp>)
rW r� r� r �lowerr� r� r> r? rD r� rQ r� )r$ ro Zpreflinerz r� r' r' r( �testLogTypeOfBackendInJailg s � �z)JailReaderTest.testLogTypeOfBackendInJailc
C sv d}dddif}t |�}| �||� | �di ft d�� | �dddd�ft d �� | �d
i ft d
�� | �d d d
ift d�� | �d d dift d�� | �tt d� | �tt d� | �tt d� | �tt d� | �tt d� d}di f}t |�}| �||� d}ddddd d d d d d!d"d"d#� f}t |�}| �||� t |�d
d$��}|d% td&d'� |d( �� D ��f}| �||� d S ))Nzmail-whois[name=SSH]z
mail-whois�nameZSSHz mail.who_is�catZdog)rG rI zmail.who_is[a=cat,b=dog]z mail--ho_is�mailrG �,z mail[a=',']rI z mail[a=b, ]z mail-how[z-mail[a="test with interim (wrong) "" quotes"]z-mail[a='test with interim (wrong) '' quotes']z mail[a='x, y, z', b=x, y, z]z mail['s']zabc[]�abcz�option[opt01=abc,opt02="123",opt03="with=okay?",opt04="andwith,okay...",opt05="how about spaces",opt06="single'in'double",opt07='double"in"single', opt08= leave some space, opt09=one for luck, opt10=, opt11=]rC Z123z
with=okay?zandwith,okay...zhow about spaceszsingle'in'doublezdouble"in"singlezleave some spacez one for luck� ) Zopt01Zopt02Zopt03Zopt04Zopt05Zopt06Zopt07Zopt08Zopt09Zopt10Zopt11�][r c s s" | ]\}}||� d d�fV qdS )r� r� N)�replace)r� �k�vr' r' r( � <genexpr>� r� z1JailReaderTest.testSplitOption.<locals>.<genexpr>r )r
rQ r| r� r� �dict�items)r$ rC Zexpected�resultZ expected2r' r' r( �testSplitOptionv sN �
�z JailReaderTest.testSplitOptionc C s� t ddttd�}| �|�� � | �|�� � | �|jd d� | �|jd d� | �dd � |j D �g d
�d ddd d
dgdd gddggggg d�d dddd
dgddgddgddggggg d�d dddd
dgddgddggggg� d S )N� multi-logT)r� r r� Zlogpathza.log
b.log
c.log�actionzeaction[actname='ban']
action[actname='log', logpath="a.log
b.log
c.log
d.log"]
action[actname='test']c S s g | ] }|� � �qS r' )r� �r� rG r' r' r( r� � r� z6JailReaderTest.testMultiLineOption.<locals>.<listcomp>)rM r� � addaction�ban� multi-setr� � actionbanz4echo "name: ban, ban: <ip>, logs: a.log
b.log
c.log"�actnamer� )rM r� r� �logr� z:echo "name: log, ban: <ip>, logs: a.log
b.log
c.log
d.log"za.log
b.log
c.log
d.log)rM r� r� rJ rJ z5echo "name: test, ban: <ip>, logs: a.log
b.log
c.log")
r r� r� r> r? rD rQ r� rN �_JailReader__actionsr� r' r' r( �testMultiLineOption� s, � ���z"JailReaderTest.testMultiLineOptionc s t jjdd� tddtd�}t�|d� |j�� }t d�|d< | �
|� � � |� � }g }|D ]^� t
� �dkrnq\� d d kr�� d d
kr�|�� � q\� d d kr\|�� fd d
�� d D �� q\dt }| �t
|�d� | �|d d dddd
|g� | �|d d dddd
|g� d S )NTr� �
blocklisttest)r� r rz ))rd r� )�filterr� )� failregexz
^test <HOST>$)Zsenderzf2b-test@example.com)Zblocklist_de_apikeyztest-key)r� zX%(action_blocklist_de)s
mynetwatchman[port=1234,protocol=udp,agent="%(fail2ban_agent)s"]r_ r rM �agentr� c s. g | ]&}|d dkrdg� dd� | �qS )r r� rM r r_ r' r� ��cmdr' r( r� � r� z3JailReaderTest.testVersionAgent.<locals>.<listcomp>z Fail2Ban/%sr r� Z blocklist_der Z
mynetwatchman)rW r� r� r r r r? Z_cfgZ get_sectionsr� r> rD r� r� �append�extendr rQ )r$ rz rt r� �actZ useragentr' r� r( �testVersionAgent� s&
z JailReaderTest.testVersionAgentc C s� t j�|d�}t|d��� t j�|d�}t �d|� | �t�t j�|d��|g� | �t�|�g � | � d| � | �t�t j�|d��g � d S )N�f1r- �f2Z nonexisting�*z4File %s is a dangling link, thus cannot be monitored)
r. r/ r2 r5 r7 �symlinkrQ r Z_globr� )r$ r! r� r� r' r' r( �testGlob� s zJailReaderTest.testGlobc C st t i d�}| �|�� g � | �|�d�� | �t|jdi � | �t|jd� | �t|j dd� | �t|j
di � d S )N�r� rJ �any) r rQ rt rU � has_sectionr| r Z
merge_sectionr� rl rD )r$ r" r' r' r( �testCommonFunction� s
z!JailReaderTest.testCommonFunction)rd re rf r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r� r� r r' r' r% r( r� s"
5!
r� c @ sT e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dS )�FilterReaderTestc C s� g d�dddg d�gg d�g d�g d�g d �g}t ddi �}|�t� |�� |�d � | �|�� |� t ddd
d ittd �}|�� |�d � d
|d d< | �|�� |� d S )N)rM �
testcase01r� r r� r� r� )z�^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?Authentication failure for .* from <HOST>\s*$z�^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the underlying authentication module for .* from <HOST>\s*$a ^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the\nunderlying authentication.+$<SKIPLINES>^.+ module for .* from <HOST>\s*$)rM r� Zaddignoreregexz"^.+ john from host 192.168.1.1\s*$)rM r� r� z
_COMM=sshd�+z_SYSTEMD_UNIT=sshd.servicez_UID=0)rM r� r� zFIELD= with spaces r� z AFIELD= with + char and spaces)rM r� Z datepatternz%Y %m %d %H:%M:%Sr� �5�r� r � r ���)r rj �TEST_FILES_DIRr? rD rN r� �TEST_FILES_DIR_SHARE_CFG)r$ �output� filterReaderr' r' r( rP s& �
�
z FilterReaderTest.testConvertc C sP t ddddd�ttd�}|�� |�d � |�� }| �|d d� | �d� d S )Nr� z<test>�X)r� rJ r� r� z6Wrong int value 'X' for 'maxlines'. Using default one:)r r� r� r? rD rk ZassertNotEqualr� �r$ r� rO r' r' r( �testConvertOptions. s �
z#FilterReaderTest.testConvertOptionsc C sF g d�g}t ddi ttd�}|�� |�d � |�� }| �||� d S )N)rM �jailnamer� z to=sweet@example.com fromip=<IP>� substitutionr� r� �r r� r� r? rD r� rN �r$ r� r� r" r' r' r( �!testFilterReaderSubstitionDefault7 s
�
z2FilterReaderTest.testFilterReaderSubstitionDefaultc C sB t ddi ttd�}|�� |�d � |�� }| �d|d v � d S )NZ
testcase02r� r� r� r� )r r� r� r? rD rk r> r� r' r' r( �testFilterReaderSubstKnown@ s �
z+FilterReaderTest.testFilterReaderSubstKnownc C sJ g d�g}t ddddittd�}|�� |�d � |�� }| �||� d S )N)rM r� r� z to=sour@example.com fromip=<IP>r� r� �honeypotzsour@example.comr� r� r� r' r' r( � testFilterReaderSubstitionSetK s
�
z.FilterReaderTest.testFilterReaderSubstitionSetc C sR g d�g}t d�\}}tdd|ttd�}|�� |�d � |�� }| �||� d S )N)rM r� r� z?^to=test,sweet@example.com,test2,sweet@example.com fromip=<IP>$zwsubstitution[failregex="^<known/failregex>$", honeypot="<sweet>,<known/honeypot>", sweet="test,<known/honeypot>,test2"]r� r� r� �r
r r� r� r? rD r� rN �r$ r� �
filterName� filterOptr� r" r' r' r( � testFilterReaderSubstitionKnownT s
��
z0FilterReaderTest.testFilterReaderSubstitionKnownc C sR g d�g}t d�\}}tdd|ttd�}|�� |�d � |�� }| �||� d S )N)rM r� r� z)^\s*to=fail2ban@localhost fromip=<IP>\s*$zWsubstitution[failregex="^\s*<Definition/failregex>\s*$", honeypot="<default/honeypot>"]r� r� r� r r r' r' r( �!testFilterReaderSubstitionSection_ s
��
z2FilterReaderTest.testFilterReaderSubstitionSectionc C sv t ddddittd�}|�� |�d � | �tt j|� t ddddd�ttd�}|�� |�d � | �tt j|� d S )Nr� r� r� z
<honeypot>r� z<sweet>)r� Zsweet)r r� r� r? rD r| r� r� )r$ r� r' r' r( � testFilterReaderSubstitionFailj s �
�
z/FilterReaderTest.testFilterReaderSubstitionFailc
C s� t j�t j�td��}tt j�|d�di �}| �|�� t j�|d�t j�|d�g� z2|�d � |� dd� |� dd� |� dd� W n2 t
y� } z| � d | � W Y d }~n
d }~0 0 d S )
N�filter.dztestcase01.confr� ztestcase-common.confrF Z
__prefix_liner� Z ignoreregexz)unexpected options after readexplicit: %s) r. r/ �abspathr2 r� r rQ Z readexplicitrD rl r} �fail)r$ Zpath_r� rq r' r' r( �testFilterReaderExplicitx s
�
z)FilterReaderTest.testFilterReaderExplicitN) rd re rf rP r� r� r� r r r r r r' r' r' r( r� s , r� c @ s* e Zd Zd dd�Zdd� Zedd� �ZdS )
�JailsReaderTestCacheFNc C sB t ||d�}|�|� |�� |�� |�� | �|�d �� d S )N�r� r� )r rj � readEarly�getEarlyOptions�readAllr> rD )r$ r r� r� � configuratorr' r' r( �_readWholeConf� s
z#JailsReaderTestCache._readWholeConfc C s4 d}| � � �d�D ] }t�d| |�r|d7 }q|S )Nr r� z^\s*Reading files?: .*/r )ZgetLog�rsplit�re�match)r$ Z filematch�cnt�sr' r' r( �_getLoggedReadCount� s
z(JailsReaderTestCache._getLoggedReadCountc C s
t j�� tj}tjt_z�t�|� t� t
|� t� t
d |d � t� t
d |d � t � }| j
||d� | �d�}| �|dkd| � | j
|d |d
� | �d �}| �|dkd | � | �d
�}| �|dkd| � | �d�}| �|dkd| � W |t_n|t_0 d S )Nz
/jail.confz /jail.localz/fail2ban.confz/fail2ban.localr� z
jail.localr z3Unexpected count by reading of jail files, cnt = %sTr
z jail\.localz:Unexpected count by second reading of jail files, cnt = %szfilter\.d/common\.confz5Unexpected count by reading of filter files, cnt = %szaction\.d/iptables\.confz5Unexpected count by reading of action files, cnt = %s)rW r� Z
SkipIfFastr ZlogLevel�logging�DEBUGr) r* �copytreer �copyr� r r r> )r$ r Zsaved_llZ share_cfgr r' r' r( �testTestJailConfCache� s(
z*JailsReaderTestCache.testTestJailConfCache)FN)rd re rf r r r r r' r' r' r( r � s
r c s| e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
e dd� �Z dd� Z
dd� Ze dd� �Z� ZS )�JailsReaderTestc s t t| �j|i |�� d S r� )r r r� r� r% r' r( r� � s zJailsReaderTest.__init__c C s( t j�d�s$tdd�}| �t|j� d S )Nz/XXXr )r. r/ r3 r
r| r� r? )r$ �readerr' r' r( �testProvidingBadBasedir� s
z'JailsReaderTest.testProvidingBadBasedirc C s* t ttd�}| �|�� � | �|jdd�� | �t|j � |j dd�}d | _
| � |g d�g d�dd d
g d �gd d gg d
�g d�g d�g d�g d�ddddddgddgddgggg d�g d�g d�g d�d d gd d gd dgd d gg d �d d gd!d"gd!d#gd!d$gd!d%gg� | � d&� | �
d'� | � d(� d S ))Nr� F)Z ignoreWrongT�Zallow_no_files)�addr� �auto)r" �test-known-interpr# r� r$ r� )z*failure test 1 (filter.d/test.conf) <HOST>z+failure test 2 (filter.d/test.local) <HOST>z"failure test 3 (jail.local) <HOST>�start)r" �missinglogfilesr# )rM r& r� �<IP>)r" � brokenactionr# )rM r( r� r' )rM r( r� r( r( r� r� zhit with big stick <ip>r� r� )r" �parse_to_end_of_jail.confr# )rM r) r� r' )rM r� r� r' )rM r� r� r� r� r& r) )r" r� r# r� z config-errorz~Jail 'brokenactiondef' skipped, because of wrong configuration: Invalid action definition 'joho[foo': unexpected option syntaxz~Jail 'brokenfilterdef' skipped, because of wrong configuration: Invalid filter definition 'flt[test': unexpected option syntaxzoJail 'missingaction' skipped, because of wrong configuration: Unable to read action 'noactionfileforthisaction'zmJail 'missingbitsjail' skipped, because of wrong configuration: Unable to read the filter 'catchallthebadies'z!Errors in jail 'missingbitsjail'.z Skipping...z6No file(s) found for glob /weapons/of/mass/destruction)r
r� r� r> r? rU rD r| r� r� �maxDiffrN r� ZassertNotLogged)r$ �jails�
comm_commandsr' r' r( �testReadTestJailConf� s` �������&
z$JailsReaderTest.testReadTestJailConfc C sF t jjdd� t�tj�tdd��D �]}tj�|�� dd�}t
|di td�}| � |� � � z|�
i � W n> ty� } z&| �d |t|�j|f � W Y d }~n
d }~0 0 |�d
�s$| jd |�� d | d
� | j |j�dd��� d| d
� |jtjtd�B d�}| j |�d�dd| d
� |dv r$| jd|�dd�d| d
� q$d S )NTr� �action.d�*.confz.confr� r� r zaction %r
%s: %sz-commonrF z.Action file %r is lacking [Definition] section��msgr� z#Action file %r is lacking actionban)�timeout�bantime)�ignorer� z5Action file %r does not contains jail-name 'f2b-TEST')�pfziptables-allports�iptables-multiportzf2b-TESTZ actionstartzSAction file %r: interpolation of actionstart does not contains jail-name 'f2b-TEST') rW r� r� �globr. r/ r2 r �basenamer� r r> r? rD r} r
�typerd r� �assertInrt �_optsrl �striprk r Z _escapedTagsrM rQ )r$ Z actionConfigZ
actionName� actionReaderrq rO r' r' r( �testReadStockActionConf� s4 0
�� ���z'JailsReaderTest.testReadStockActionConfc C s� t jjdd� tttd�}| �|�� � | �|�� � |� � }| �
|g � t � }|� � D �]L}|dkrhqX|�
|d�}t|�\}}|�|� | �t|�� t|||ttd�}| �|�� d| � |�i � | �|j�
dd ��� � |�
|d
�}| �t|�� �� t|�D ]�} t| �\}
} | �t|
�� | �t| t�� |
d k�rJ| �d | � t|
|i ttd�} | �| �� � | �i � | � � }
| �t|
�� | �| j�
d
d ��� � �qqXd S )NTr� r� ZINCLUDESr� r� zFailed to read filter:r� r� r� r6 �portr� )rW r� r� r
r r� r> r? rD r� rQ rM rt rl r
r" r� r r; r< r �
isinstancer� r: r )r$ r+ r, Z
allFiltersrz r r r� �actionsr� ZactNameZactOptr= Zcmdsr' r' r( �testReadStockJailConf sH
�
�
z%JailsReaderTest.testReadStockJailConfc C s� t jjdd� ttdtd�}| �|�� � | �|�� � t dd� t
�
t j �
ddd��D ��}t d d� |jD ��}d | _| �|�|�d
|�|� � | �|�|�d |�|� � d S ) NTr� �r r� r� c s s> | ]6}|� d �s|� d�stj�tj�|�d �d V qdS )z common.confz-aggressive.confr r N)r� r. r/ �splitext�splitr� r' r' r( r� _ s �zBJailsReaderTest.testReadStockJailFilterComplete.<locals>.<genexpr>r r r/ c s s | ]}t |jd �d V qdS )r� r N)r
r� )r� rz r' r' r( r� c s z=More filters exists than are referenced in stock jail.conf %rz2Stock jail.conf references non-existent filters %r)rW r� r� r
r r� r> r? rD rM r7 r. r/ r2 r+ r* �issubset�
difference)r$ r+ �filtersZ filters_jailr' r' r( � testReadStockJailFilterCompleteY s" �� � �z/JailsReaderTest.testReadStockJailFilterCompletec C s( t jjdd� ttdtd�}| �|�� � | �|�� � |j dd�}| �t
|�� |D ]@}t
|�dkrV|d |d gdd gkrV| �t � |d �dk� qVd
D ]B}| �
d |gd d
� |D �� | �
d|ddg|� | �
d|g|� q�| �|d d d� |jD �]&}|j}|�� }| jt
|�d| d� |D ]�}|� � }|�� } dt|�v �r(| �
d|j� d}
|d| g} |D ]�}t
|�dk�r�|d dk�r�|dd� | k�r�ddd � |d D �v }
n@t
|�d k�r�|d dk�r�|dd� | k�r�|d dk�r�d}
|
�rj �q�qj| j|
d | t|�f d� �q(q�d S ) NTr� rC r! r] r r rM r3 )r� Zrecidiver" c s s2 | ]*}t |�d kr|d dkr|dd� V qdS )r] r r" Nr r� �r� r� r' r' r( r� � r� zDJailsReaderTest.testReadStockJailConfForceEnabled.<locals>.<genexpr>r� �warnr% r� z No actions found for jail %sr0 z <blocktype>Z blocktypeFr� r_ r� r c S s g | ] }|d �qS )r r' rJ r' r' r( r� � r� zEJailsReaderTest.testReadStockJailConfForceEnabled.<locals>.<listcomp>r� z Found no %s command among %s)rW r� r� r
r r� r> r? rD r� r� r Z str2secondsr: rQ Z_JailsReader__jailsr� r� �strZ _initOpts) r$ r+ r, �command�jrA Z jail_namer� �commandsZ action_nameZblocktype_presentZtarget_commandr' r' r( �!testReadStockJailConfForceEnabledl s` $
�
�
� �
�
��z1JailsReaderTest.testReadStockJailConfForceEnabledc sH t jjdd� t� }|�t� | �|�� t� |�� |� � }| �|d d� | �|d d� |�
� |� � |� � |�
� � � fdd�}| �|d �|d
� k o�|d �k n � | �|d �|d
�k� | �|d�|d
�k� | �� g d�g d�g d�g d�g d�g d�g d�g� |j�d� | �|j�� d� | �|�� t� d S )NTr� �socketz /var/run/fail2ban/fail2ban.sockZpidfilez /var/run/fail2ban/fail2ban.pidc sF t � �D ](\}}|d dkr|d | kr| S qtd| � f ��d S )Nr rM r z/Did not find command 'set %s' among commands %s)� enumerater� )rC ro rq �rO r' r( �find_set� s
�z7JailsReaderTest.testStockConfigurator.<locals>.find_set� syslogsocket�loglevel� logtarget�
dbpurgeage�dbfile� dbmaxmatches)rM rU r# )rM rV �INFO)rM rW z/var/log/fail2ban.log)rM Z allowipv6r# )rM rY z"/var/lib/fail2ban/fail2ban.sqlite3)rM rZ �
)rM rX Z1dz/tmp)rW r� r� r rj r rQ Z
getBaseDirr r r rD ZconvertToProtocolZgetConfigStreamr> rN Z_Configurator__jails)r$ r rO rT r' rS r( �testStockConfigurator� s<
"��
z%JailsReaderTest.testStockConfiguratorc C s� t �t j�|d�� t �t j�|d�� tt j�|dd�d��� tt j�|dd�d��� tt j�|d�d�}|�d� |�� t|i d�}| �|� � � | �|�
� � |j d d
�}d d � |D �}| � t
td
d� |D ���d� | � |d d d� d S )Nr r. ztestaction1.confr- ztestfilter1.conf� jail.confz�
[testjail1]
enabled = true
action = testaction1[actname=test1]
testaction1[actname=test2]
testaction.py
testaction.py[actname=test3]
filter = testfilter1
r� Tr! c S s, g | ]$}|d d� g d�kr|dd � �qS )Nr] )rM Z testjail1r� r' )r� Zcommr' r' r( r� � s �z:JailsReaderTest.testMultipleSameAction.<locals>.<listcomp>c s s | ]}|d V qdS )r Nr' )r� r� r' r' r( r� � r� z9JailsReaderTest.testMultipleSameAction.<locals>.<genexpr>r_ r� z{})r. �mkdirr/ r2 r5 r7 r6 r
r> r? rD r� rQ r� rM )r$ r �jailfdr+ r, Z add_actionsr' r' r( �testMultipleSameAction� s
z&JailsReaderTest.testMultipleSameActionc C s | j td| jdd� d S )Nz'Have not found any log file for .* jailZpolling��backend)ZassertRaisesRegexr� � _testLogPathr# r' r' r( � testLogPathFileFilterBackend� s �z,JailsReaderTest.testLogPathFileFilterBackendc
C s\ zddl m} W n. ty> } zt�d��W Y d }~n
d }~0 0 | jdd� | jdd� d S )Nr )�
FilterSystemdz&systemd python interface not availableZsystemdrb zsystemd[journalflags=2])Zserver.filtersystemdrf r} rW rX rd )r$ rf rq r' r' r( �testLogPathSystemdBackend s z)JailsReaderTest.testLogPathSystemdBackendc C s` t tj�|d�d�}|�d||f � |�� t|d�}| �|�� � | �|� � � |�
� d S )Nr^ r- z�
[testjail1]
enabled = true
backend = %s
logpath = %s/not/exist.log
/this/path/should/not/exist.log
action =
filter =
failregex = test <HOST>
r ) r5 r. r/ r2 r6 r7 r
r> r? rD r� )r$ r rc r` r+ r' r' r( rd s �
z JailsReaderTest._testLogPath)rd re rf r� r r- r> rB rI rP r] r ra re rg rd r r' r' r% r( r � s 1??4
r )6�
__author__�
__copyright__� __license__r7 r r. r r) r rW Zclient.configreaderr r r r �clientr Zclient.jailreaderr r
r Zclient.filterreaderr Zclient.jailsreaderr
Zclient.actionreaderr r Zclient.configuratorr Z
server.mytimer r �utilsr r r/ r2 r1 �__file__r� r� r r� r� r� r� r� ZTestCaser r� r� r r r' r' r' r( �<module> sB S z :