Linux server1.sbs.cy 5.14.0-362.18.1.el9_3.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jan 29 07:05:48 EST 2024 x86_64
Apache
: 199.192.25.12 | : 172.69.6.251
28 Domain
8.1.31
administrator
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
BLACK DEFEND!
README
+ Create Folder
+ Create File
/
usr /
bin /
[ HOME SHELL ]
Name
Size
Permission
Action
2to3
95
B
-rwxr-xr-x
GET
15.82
KB
-rwxr-xr-x
HEAD
15.82
KB
-rwxr-xr-x
Mail
1014.48
KB
-rwxr-xr-x
POST
15.82
KB
-rwxr-xr-x
[
51.81
KB
-rwxr-xr-x
ab
81.46
KB
-rwxr-xr-x
aclocal
35.52
KB
-rwxr-xr-x
aclocal-1.16
35.52
KB
-rwxr-xr-x
acpi_listen
15.47
KB
-rwxr-xr-x
acyclic
15.3
KB
-rwxr-xr-x
addr2line
27.93
KB
-rwxr-xr-x
agentxtrap
27.5
KB
-rwxr-xr-x
alias
33
B
-rwxr-xr-x
animate
15.27
KB
-rwxr-xr-x
appstream-compose
31.47
KB
-rwxr-xr-x
appstream-util
116.57
KB
-rwxr-xr-x
apropos
48.52
KB
-rwxr-xr-x
apropos.man-db
48.52
KB
-rwxr-xr-x
ar
56.19
KB
-rwxr-xr-x
arch
31.66
KB
-rwxr-xr-x
aria_chk
4.52
MB
-rwxr-xr-x
aria_dump_log
4.32
MB
-rwxr-xr-x
aria_ftdump
4.33
MB
-rwxr-xr-x
aria_pack
4.36
MB
-rwxr-xr-x
aria_read_log
4.48
MB
-rwxr-xr-x
arpaname
15.3
KB
-rwxr-xr-x
arping
27.42
KB
-rwxr-xr-x
as
710.51
KB
-rwxr-xr-x
aserver
39.66
KB
-rwxr-xr-x
aspell
151.12
KB
-rwxr-xr-x
at
56.62
KB
-rwxr-xr-x
atq
56.62
KB
-rwxr-xr-x
atrm
56.62
KB
-rwxr-xr-x
attr
15.72
KB
-rwxr-xr-x
audit2allow
14.71
KB
-rwxr-xr-x
audit2why
14.71
KB
-rwxr-xr-x
aulast
19.39
KB
-rwxr-xr-x
aulastlog
15.34
KB
-rwxr-xr-x
ausyscall
15.32
KB
-rwxr-xr-x
authselect
43.68
KB
-rwxr-xr-x
autoconf
14.42
KB
-rwxr-xr-x
autoheader
8.33
KB
-rwxr-xr-x
autom4te
31.43
KB
-rwxr-xr-x
automake
251.93
KB
-rwxr-xr-x
automake-1.16
251.93
KB
-rwxr-xr-x
autopoint
26.36
KB
-rwxr-xr-x
autoreconf
20.57
KB
-rwxr-xr-x
autoscan
16.72
KB
-rwxr-xr-x
autoupdate
33.08
KB
-rwxr-xr-x
auvirt
35.49
KB
-rwxr-xr-x
awk
698.17
KB
-rwxr-xr-x
b2sum
51.8
KB
-rwxr-xr-x
base32
35.7
KB
-rwxr-xr-x
base64
35.7
KB
-rwxr-xr-x
basename
35.68
KB
-rwxr-xr-x
basenc
48.02
KB
-rwxr-xr-x
bash
1.32
MB
-rwxr-xr-x
bashbug
6.91
KB
-rwxr-xr-x
bashbug-64
6.91
KB
-rwxr-xr-x
batch
140
B
-rwxr-xr-x
bcomps
23.37
KB
-rwxr-xr-x
bg
30
B
-rwxr-xr-x
bison
494.76
KB
-rwxr-xr-x
bond2team
22.75
KB
-rwxr-xr-x
bootctl
100.71
KB
-rwxr-xr-x
brotli
753.47
KB
-rwxr-xr-x
bsqldb
35.47
KB
-rwxr-xr-x
bsqlodbc
31.37
KB
-rwxr-xr-x
bunzip2
40.1
KB
-rwxr-xr-x
busctl
100.33
KB
-rwxr-xr-x
bwrap
72.32
KB
-rwxr-xr-x
bzcat
40.1
KB
-rwxr-xr-x
bzcmp
2.09
KB
-rwxr-xr-x
bzdiff
2.09
KB
-rwxr-xr-x
bzegrep
2.01
KB
-rwxr-xr-x
bzfgrep
2.01
KB
-rwxr-xr-x
bzgrep
2.01
KB
-rwxr-xr-x
bzip2
40.1
KB
-rwxr-xr-x
bzip2recover
15.89
KB
-rwxr-xr-x
bzless
1.23
KB
-rwxr-xr-x
bzmore
1.23
KB
-rwxr-xr-x
c++
1.04
MB
-rwxr-xr-x
c++filt
27.38
KB
-rwxr-xr-x
c89
228
B
-rwxr-xr-x
c99
219
B
-rwxr-xr-x
ca-legacy
1.61
KB
-rwxr-xr-x
cal
52.02
KB
-rwxr-xr-x
canberra-boot
19.07
KB
-rwxr-xr-x
canberra-gtk-play
19.18
KB
-rwxr-xr-x
captoinfo
87.8
KB
-rwxr-xr-x
cat
35.66
KB
-rwxr-xr-x
catchsegv
3.21
KB
-rwxr-xr-x
catman
35.86
KB
-rwxr-xr-x
cc
1.04
MB
-rwxr-xr-x
ccomps
27.47
KB
-rwxr-xr-x
cd
30
B
-rwxr-xr-x
centrino-decode
14.13
KB
-rwxr-xr-x
chacl
19.14
KB
-rwxr-xr-x
chage
72.14
KB
-rwsr-xr-x
chattr
15.19
KB
-rwxr-xr-x
chcat
13.63
KB
-rwxr-xr-x
chcon
60.24
KB
-rwxr-xr-x
checkmodule
450.88
KB
-rwxr-xr-x
checkpolicy
527.52
KB
-rwxr-xr-x
chfn
31.48
KB
-rws--x--x
chgrp
56.17
KB
-rwxr-xr-x
chmem
35.59
KB
-rwxr-xr-x
chmod
56.19
KB
-rwxr-xr-x
choom
23.48
KB
-rwxr-xr-x
chown
60.2
KB
-rwxr-xr-x
chronyc
100.83
KB
-rwxr-xr-x
chrt
27.49
KB
-rwxr-xr-x
chsh
23.41
KB
-rwx--x--x
chvt
15.37
KB
-rwxr-xr-x
cifsiostat
23.55
KB
-rwxr-xr-x
circo
15.23
KB
-rwxr-xr-x
cksum
35.58
KB
-rwxr-xr-x
cl-linksafe-apply-group
558
B
-rwxr-xr-x
cl-linksafe-reconfigure
4.83
KB
-rwxr-xr-x
clear
15.15
KB
-rwxr-xr-x
clockdiff
23.38
KB
-rwxr-xr-x
cluster
47.7
KB
-rwxr-xr-x
cmp
40.13
KB
-rwxr-xr-x
col
23.43
KB
-rwxr-xr-x
colcrt
15.39
KB
-rwxr-xr-x
colrm
15.38
KB
-rwxr-xr-x
column
35.53
KB
-rwxr-xr-x
comm
35.77
KB
-rwxr-xr-x
command
35
B
-rwxr-xr-x
compare
15.27
KB
-rwxr-xr-x
compile_et
1.31
KB
-rwxr-xr-x
composite
15.27
KB
-rwxr-xr-x
config_data
6.97
KB
-rwxr-xr-x
conjure
15.27
KB
-rwxr-xr-x
convert
15.27
KB
-rwxr-xr-x
coredumpctl
60.03
KB
-rwxr-xr-x
corelist
14.92
KB
-rwxr-xr-x
cp
149.23
KB
-rwxr-xr-x
cpan
8.06
KB
-rwxr-xr-x
cpan-mirrors
4.19
KB
-rwxr-xr-x
cpansign
1.98
KB
-rwxr-xr-x
cpapi1
3.15
MB
-rwxr-xr-x
cpapi2
3.15
MB
-rwxr-xr-x
cpapi3
3.15
MB
-rwxr-xr-x
cpio
145.52
KB
-rwxr-xr-x
cpp
1.04
MB
-rwxr-xr-x
cpupower
79.92
KB
-rwxr-xr-x
crb
2.29
KB
-rwxr--r--
crc32
1.02
KB
-rwxr-xr-x
cronnext
39.93
KB
-rwxr-xr-x
crontab
55.96
KB
-rwsr-xr-x
csplit
108.88
KB
-rwxr-xr-x
curl
248.67
KB
-rwxr-xr-x
cut
47.82
KB
-rwxr-xr-x
cvtsudoers
233.48
KB
-rwxr-xr-x
cxpm
27.41
KB
-rwxr-xr-x
cyrusbdb2current
1.58
MB
-rwxr-xr-x
datacopy
31.43
KB
-rwxr-xr-x
date
104.05
KB
-rwxr-xr-x
dbilogstrip
1.35
KB
-rwxr-xr-x
dbiprof
6.06
KB
-rwxr-xr-x
dbus-broker
232
KB
-rwxr-xr-x
dbus-broker-launch
130.02
KB
-rwxr-xr-x
dbus-monitor
27.27
KB
-rwxr-xr-x
dbus-send
27.22
KB
-rwxr-xr-x
dbus-update-activation-environ...
15.17
KB
-rwxr-xr-x
dbus-uuidgen
15.14
KB
-rwxr-xr-x
dconf
64.71
KB
-rwxr-xr-x
dd
68.14
KB
-rwxr-xr-x
deallocvt
15.38
KB
-rwxr-xr-x
debuginfo-install
3.6
KB
-rwxr-xr-x
debuginfod-find
19.44
KB
-rwxr-xr-x
defncopy
31.43
KB
-rwxr-xr-x
delv
45.58
KB
-rwxr-xr-x
df
84.74
KB
-rwxr-xr-x
diff
194.7
KB
-rwxr-xr-x
diff3
52.3
KB
-rwxr-xr-x
diffimg
15.26
KB
-rwxr-xr-x
dig
136.79
KB
-rwxr-xr-x
dijkstra
19.44
KB
-rwxr-xr-x
dir
137.66
KB
-rwxr-xr-x
dircolors
39.81
KB
-rwxr-xr-x
dirmngr
439.91
KB
-rwxr-xr-x
dirmngr-client
56.12
KB
-rwxr-xr-x
dirname
31.49
KB
-rwxr-xr-x
display
15.27
KB
-rwxr-xr-x
distro
953
B
-rwxr-xr-x
dltest
15.68
KB
-rwxr-xr-x
dmesg
71.98
KB
-rwxr-xr-x
dnf
2.04
KB
-rwxr-xr-x
dnf-3
2.04
KB
-rwxr-xr-x
dnsdomainname
23.84
KB
-rwxr-xr-x
dnstap-read
23.39
KB
-rwxr-xr-x
domainname
23.84
KB
-rwxr-xr-x
dot
15.23
KB
-rwxr-xr-x
dot2gxl
39.93
KB
-rwxr-xr-x
dotty
2.04
KB
-rwxr-xr-x
doveadm
826.66
KB
-rwxr-xr-x
doveconf
220.09
KB
-rwxr-xr-x
dovecot-sysreport
5.8
KB
-rwxr-xr-x
dpkg
316.64
KB
-rwxr-xr-x
dpkg-deb
149.83
KB
-rwxr-xr-x
dpkg-divert
125.9
KB
-rwxr-xr-x
dpkg-maintscript-helper
20.71
KB
-rwxr-xr-x
dpkg-query
142.3
KB
-rwxr-xr-x
dpkg-realpath
31.8
KB
-rwxr-xr-x
dpkg-split
104.9
KB
-rwxr-xr-x
dpkg-statoverride
52.16
KB
-rwxr-xr-x
dpkg-trigger
44.23
KB
-rwxr-xr-x
dracut
97.54
KB
-rwxr-xr-x
dsync
826.66
KB
-rwxr-xr-x
dtrace
17.38
KB
-rwxr-xr-x
du
149.45
KB
-rwxr-xr-x
dumpkeys
164.06
KB
-rwxr-xr-x
dwp
851.8
KB
-rwxr-xr-x
dwz
216.88
KB
-rwxr-xr-x
ea-php81
10.8
MB
-rwxr-xr-x
ea-php81-pear
383
B
-rwxr-xr-x
ea-php81-pecl
299
B
-rwxr-xr-x
ea-php82
10.88
MB
-rwxr-xr-x
ea-php82-pear
383
B
-rwxr-xr-x
ea-php82-pecl
299
B
-rwxr-xr-x
ea-php83
10.92
MB
-rwxr-xr-x
ea-php83-pear
383
B
-rwxr-xr-x
ea-php83-pecl
299
B
-rwxr-xr-x
echo
35.48
KB
-rwxr-xr-x
ed
52.51
KB
-rwxr-xr-x
edgepaint
2.46
MB
-rwxr-xr-x
egrep
32
B
-rwxr-xr-x
eject
43.8
KB
-rwxr-xr-x
elfedit
36.02
KB
-rwxr-xr-x
enc2xs
40.69
KB
-rwxr-xr-x
encguess
2.92
KB
-rwxr-xr-x
enchant-2
23.82
KB
-rwxr-xr-x
enchant-lsmod-2
15.82
KB
-rwxr-xr-x
env
44.23
KB
-rwxr-xr-x
envml
4.11
KB
-rwxr-xr-x
envsubst
35.39
KB
-rwxr-xr-x
eps2eps
643
B
-rwxr-xr-x
eqn
189.52
KB
-rwxr-xr-x
event_rpcgen.py
53.65
KB
-rwxr-xr-x
evmctl
65.7
KB
-rwxr-xr-x
ex
1.39
MB
-rwxr-xr-x
exempi
28.18
KB
-rwxr-xr-x
exiv2
199.82
KB
-rwxr-xr-x
expand
39.74
KB
-rwxr-xr-x
expr
108.6
KB
-rwxr-xr-x
factor
72.05
KB
-rwxr-xr-x
fallocate
23.39
KB
-rwxr-xr-x
false
27.48
KB
-rwxr-xr-x
fc
30
B
-rwxr-xr-x
fc-cache
139
B
-rwxr-xr-x
fc-cache-64
23.17
KB
-rwxr-xr-x
fc-cat
19.16
KB
-rwxr-xr-x
fc-conflist
15.13
KB
-rwxr-xr-x
fc-list
15.13
KB
-rwxr-xr-x
fc-match
15.13
KB
-rwxr-xr-x
fc-pattern
15.14
KB
-rwxr-xr-x
fc-query
15.13
KB
-rwxr-xr-x
fc-scan
15.14
KB
-rwxr-xr-x
fc-validate
15.14
KB
-rwxr-xr-x
fdp
15.23
KB
-rwxr-xr-x
fg
30
B
-rwxr-xr-x
fgconsole
15.37
KB
-rwxr-xr-x
fgrep
32
B
-rwxr-xr-x
filan
47.84
KB
-rwxr-xr-x
file
27.74
KB
-rwxr-xr-x
fincore
23.49
KB
-rwxr-xr-x
find
284.95
KB
-rwxr-xr-x
find-repos-of-install
3.6
KB
-rwxr-xr-x
findmnt
64.93
KB
-rwxr-xr-x
fips-finish-install
1.72
KB
-rwxr-xr-x
fips-mode-setup
8.02
KB
-rwxr-xr-x
firewall-cmd
140.16
KB
-rwxr-xr-x
firewall-offline-cmd
121.05
KB
-rwxr-xr-x
fisql
35.47
KB
-rwxr-xr-x
flatpak
1.75
MB
-rwxr-xr-x
flatpak-bisect
7.66
KB
-rwxr-xr-x
flatpak-coredumpctl
3.35
KB
-rwxr-xr-x
flex
412.64
KB
-rwxr-xr-x
flex++
412.64
KB
-rwxr-xr-x
flock
23.56
KB
-rwxr-xr-x
fmt
39.77
KB
-rwxr-xr-x
fold
39.72
KB
-rwxr-xr-x
free
23.36
KB
-rwxr-xr-x
freebcp
23.38
KB
-rwxr-xr-x
freetype-config
4.32
KB
-rwxr-xr-x
fribidi
28.59
KB
-rwxr-xr-x
ftp
100.66
KB
-rwxr-xr-x
funzip
31.44
KB
-rwxr-xr-x
fuse2fs
72.69
KB
-rwxr-xr-x
fusermount
35.54
KB
-rwsr-xr-x
g++
1.04
MB
-rwxr-xr-x
g13
110.29
KB
-rwxr-xr-x
galera_new_cluster
921
B
-rwxr-xr-x
galera_recovery
3.29
KB
-rwxr-xr-x
gapplication
23.39
KB
-rwxr-xr-x
garb-systemd
1.2
KB
-rwxr-xr-x
garbd
2.39
MB
-rwxr-xr-x
gawk
698.17
KB
-rwxr-xr-x
gc
19.39
KB
-rwxr-xr-x
gcc
1.04
MB
-rwxr-xr-x
gcc-ar
27.82
KB
-rwxr-xr-x
gcc-nm
27.8
KB
-rwxr-xr-x
gcc-ranlib
27.82
KB
-rwxr-xr-x
gcov
469.12
KB
-rwxr-xr-x
gcov-dump
283.73
KB
-rwxr-xr-x
gcov-tool
312.44
KB
-rwxr-xr-x
gdbm_dump
28.22
KB
-rwxr-xr-x
gdbm_load
36.48
KB
-rwxr-xr-x
gdbmtool
149.26
KB
-rwxr-xr-x
gdbus
51.68
KB
-rwxr-xr-x
gdbus-codegen
1.99
KB
-rwxr-xr-x
gdk-pixbuf-query-loaders-64
15.34
KB
-rwxr-xr-x
gdk-pixbuf-thumbnailer
19.32
KB
-rwxr-xr-x
gencat
27.64
KB
-rwxr-xr-x
genl-ctrl-list
15.3
KB
-rwxr-xr-x
geqn
189.52
KB
-rwxr-xr-x
getconf
35.41
KB
-rwxr-xr-x
getent
36.03
KB
-rwxr-xr-x
getfacl
31.8
KB
-rwxr-xr-x
getfattr
24.35
KB
-rwxr-xr-x
getkeycodes
15.36
KB
-rwxr-xr-x
getopt
23.46
KB
-rwxr-xr-x
getopts
35
B
-rwxr-xr-x
gettext
35.35
KB
-rwxr-xr-x
gettext.sh
5.07
KB
-rwxr-xr-x
gettextize
41.25
KB
-rwxr-xr-x
ghostscript
15.31
KB
-rwxr-xr-x
gio
91.99
KB
-rwxr-xr-x
gio-querymodules-64
15.3
KB
-rwxr-xr-x
git
22.87
MB
-rwxr-xr-x
git-receive-pack
22.87
MB
-rwxr-xr-x
git-shell
6.31
MB
-rwxr-xr-x
git-upload-archive
22.87
MB
-rwxr-xr-x
git-upload-pack
22.87
MB
-rwxr-xr-x
glib-compile-resources
43.52
KB
-rwxr-xr-x
glib-compile-schemas
51.65
KB
-rwxr-xr-x
glib-genmarshal
40.14
KB
-rwxr-xr-x
glib-gettextize
5.26
KB
-rwxr-xr-x
glib-mkenums
30.08
KB
-rwxr-xr-x
gmake
249.8
KB
-rwxr-xr-x
gml2gv
47.78
KB
-rwxr-xr-x
gneqn
916
B
-rwxr-xr-x
gnroff
3.21
KB
-rwxr-xr-x
gobject-query
15.35
KB
-rwxr-xr-x
gpasswd
76.35
KB
-rwsr-xr-x
gpg
1.07
MB
-rwxr-xr-x
gpg-agent
342.25
KB
-rwxr-xr-x
gpg-card
170.13
KB
-rwxr-xr-x
gpg-connect-agent
84.75
KB
-rwxr-xr-x
gpg-error
36.1
KB
-rwxr-xr-x
gpg-error-config
1.98
KB
-rwxr-xr-x
gpg-wks-client
129.55
KB
-rwxr-xr-x
gpg-wks-server
113.33
KB
-rwxr-xr-x
gpg2
1.07
MB
-rwxr-xr-x
gpgconf
100.99
KB
-rwxr-xr-x
gpgme-json
84.63
KB
-rwxr-xr-x
gpgparsemail
35.33
KB
-rwxr-xr-x
gpgrt-config
13.13
KB
-rwxr-xr-x
gpgsplit
27.49
KB
-rwxr-xr-x
gpgtar
64.87
KB
-rwxr-xr-x
gpgv
295.42
KB
-rwxr-xr-x
gpgv2
295.42
KB
-rwxr-xr-x
gpic
201.72
KB
-rwxr-xr-x
gpio-event-mon
18.13
KB
-rwxr-xr-x
gpio-hammer
14.12
KB
-rwxr-xr-x
gpio-watch
14.12
KB
-rwxr-xr-x
gprof
101.66
KB
-rwxr-xr-x
gr2fonttest
28
KB
-rwxr-xr-x
graphml2gv
23.55
KB
-rwxr-xr-x
grep
154.49
KB
-rwxr-xr-x
gresource
23.46
KB
-rwxr-xr-x
groff
96.77
KB
-rwxr-xr-x
grops
167.26
KB
-rwxr-xr-x
grotty
122.2
KB
-rwxr-xr-x
groups
35.68
KB
-rwxr-xr-x
grub2-editenv
463.6
KB
-rwxr-xr-x
grub2-file
1.08
MB
-rwxr-xr-x
grub2-fstest
1.32
MB
-rwxr-xr-x
grub2-glue-efi
286.52
KB
-rwxr-xr-x
grub2-kbdcomp
1.63
KB
-rwxr-xr-x
grub2-menulst2cfg
269.65
KB
-rwxr-xr-x
grub2-mkfont
315.17
KB
-rwxr-xr-x
grub2-mkimage
438.44
KB
-rwxr-xr-x
grub2-mklayout
292.57
KB
-rwxr-xr-x
grub2-mknetdir
505.51
KB
-rwxr-xr-x
grub2-mkpasswd-pbkdf2
294.98
KB
-rwxr-xr-x
grub2-mkrelpath
282.31
KB
-rwxr-xr-x
grub2-mkrescue
1.31
MB
-rwxr-xr-x
grub2-mkstandalone
609.88
KB
-rwxr-xr-x
grub2-mount
1018.09
KB
-rwxr-xr-x
grub2-render-label
1.09
MB
-rwxr-xr-x
grub2-script-check
315.09
KB
-rwxr-xr-x
grub2-syslinux2cfg
1.01
MB
-rwxr-xr-x
gs
15.31
KB
-rwxr-xr-x
gsbj
354
B
-rwxr-xr-x
gsdj
356
B
-rwxr-xr-x
gsdj500
356
B
-rwxr-xr-x
gsettings
31.56
KB
-rwxr-xr-x
gsf-office-thumbnailer
20.07
KB
-rwxr-xr-x
gslj
357
B
-rwxr-xr-x
gslp
354
B
-rwxr-xr-x
gsnd
281
B
-rwxr-xr-x
gsoelim
32.18
KB
-rwxr-xr-x
gst-inspect-1.0
71.59
KB
-rwxr-xr-x
gst-launch-1.0
39.3
KB
-rwxr-xr-x
gst-stats-1.0
35.45
KB
-rwxr-xr-x
gst-typefind-1.0
19.17
KB
-rwxr-xr-x
gtar
514.27
KB
-rwxr-xr-x
gtbl
130.86
KB
-rwxr-xr-x
gtester
31.47
KB
-rwxr-xr-x
gtester-report
18.64
KB
-rwxr-xr-x
gtk-launch
19.48
KB
-rwxr-xr-x
gtk-query-immodules-2.0-64
19.17
KB
-rwxr-xr-x
gtk-query-immodules-3.0-64
23.47
KB
-rwxr-xr-x
gtk-update-icon-cache
40.02
KB
-rwxr-xr-x
gtroff
732.07
KB
-rwxr-xr-x
gunzip
2.29
KB
-rwxr-xr-x
gv2gml
23.41
KB
-rwxr-xr-x
gv2gxl
39.93
KB
-rwxr-xr-x
gvcolor
49.59
KB
-rwxr-xr-x
gvgen
23.41
KB
-rwxr-xr-x
gvmap
2.75
MB
-rwxr-xr-x
gvmap.sh
2.14
KB
-rwxr-xr-x
gvpack
398.14
KB
-rwxr-xr-x
gvpr
15.2
KB
-rwxr-xr-x
gxl2dot
39.93
KB
-rwxr-xr-x
gxl2gv
39.93
KB
-rwxr-xr-x
gzexe
6.3
KB
-rwxr-xr-x
gzip
89.63
KB
-rwxr-xr-x
h2ph
28.69
KB
-rwxr-xr-x
h2xs
59.5
KB
-rwxr-xr-x
hardlink
35.63
KB
-rwxr-xr-x
hash
32
B
-rwxr-xr-x
hb-ot-shape-closure
43.66
KB
-rwxr-xr-x
hb-shape
47.91
KB
-rwxr-xr-x
hb-subset
39.66
KB
-rwxr-xr-x
hb-view
64.01
KB
-rwxr-xr-x
head
43.8
KB
-rwxr-xr-x
hexdump
51.6
KB
-rwxr-xr-x
host
108.77
KB
-rwxr-xr-x
hostid
31.67
KB
-rwxr-xr-x
hostname
23.84
KB
-rwxr-xr-x
hostnamectl
31.67
KB
-rwxr-xr-x
htdbm
38.53
KB
-rwxr-xr-x
htdigest
25.71
KB
-rwxr-xr-x
htpasswd
38.66
KB
-rwxr-xr-x
httxt2dbm
24.73
KB
-rwxr-xr-x
hunspell
102.67
KB
-rwxr-xr-x
i386
27.67
KB
-rwxr-xr-x
iconv
64.38
KB
-rwxr-xr-x
icu-config
205
B
-rwxr-xr-x
icu-config-64
21.67
KB
-rwxr-xr-x
icuinfo
16.07
KB
-rwxr-xr-x
id
39.72
KB
-rwxr-xr-x
identify
15.27
KB
-rwxr-xr-x
idiag-socket-details
15.34
KB
-rwxr-xr-x
idn
36.46
KB
-rwxr-xr-x
ifnames
4.03
KB
-rwxr-xr-x
iio_event_monitor
30.13
KB
-rwxr-xr-x
iio_generic_buffer
34.14
KB
-rwxr-xr-x
ima-add-sigs
2.49
KB
-rwxr-xr-x
ima-setup
3.59
KB
-rwxr-xr-x
import
15.27
KB
-rwxr-xr-x
imunify-antivirus
1
KB
-rwxr-xr-x
imunify-service
1023
B
-rwxr-xr-x
imunify360-agent
1
KB
-rwxr-xr-x
imunify360-command-wrapper
8.35
KB
-rwxr-xr-x
info
312.73
KB
-rwxr-xr-x
infocmp
63.68
KB
-rwxr-xr-x
infotocap
87.8
KB
-rwxr-xr-x
innochecksum
3.59
MB
-rwxr-xr-x
install
149.29
KB
-rwxr-xr-x
instmodsh
4.1
KB
-rwxr-xr-x
intel-speed-select
112.66
KB
-rwxr-xr-x
ionice
15.41
KB
-rwxr-xr-x
iostat
55.86
KB
-rwxr-xr-x
ipcmk
23.49
KB
-rwxr-xr-x
ipcrm
19.42
KB
-rwxr-xr-x
ipcs
39.54
KB
-rwxr-xr-x
iptc
29.3
KB
-rwxr-xr-x
irqtop
35.47
KB
-rwxr-xr-x
isosize
15.34
KB
-rwxr-xr-x
ispell
992
B
-rwxr-xr-x
isql
40.01
KB
-rwxr-xr-x
iusql
31.95
KB
-rwxr-xr-x
jobs
32
B
-rwxr-xr-x
join
51.88
KB
-rwxr-xr-x
journalctl
88.27
KB
-rwxr-xr-x
jq
31.38
KB
-rwxr-xr-x
json_pp
4.78
KB
-rwxr-xr-x
json_reformat
19.34
KB
-rwxr-xr-x
json_verify
15.12
KB
-rwxr-xr-x
json_xs
6.85
KB
-rwxr-xr-x
kbd_mode
15.7
KB
-rwxr-xr-x
kbdinfo
19.39
KB
-rwxr-xr-x
kbdrate
19.4
KB
-rwxr-xr-x
kcare-scanner-interface
4.55
KB
-rwxr-xr-x
kcare-uname
575
B
-rwxr-xr-x
kcarectl
1.21
KB
-rwxr-xr-x
kdumpctl
47.16
KB
-rwxr-xr-x
kernel-install
13.24
KB
-rwxr-xr-x
keyctl
64.02
KB
-rwxr-xr-x
kill
31.48
KB
-rwxr-xr-x
killall
32.95
KB
-rwxr-xr-x
kmod
165.76
KB
-rwxr-xr-x
krb5-config
6.59
KB
-rwxr-xr-x
kvm_stat
62.92
KB
-rwxr-xr-x
last
35.49
KB
-rwxr-xr-x
lastb
35.49
KB
-rwxr-xr-x
lastlog
28.8
KB
-rwxr-xr-x
lchfn
23.32
KB
-rwxr-xr-x
lchsh
23.32
KB
-rwxr-xr-x
ld
1.7
MB
-rwxr-xr-x
ld.bfd
1.7
MB
-rwxr-xr-x
ld.gold
2.03
MB
-rwxr-xr-x
ld.so
871.77
KB
-rwxr-xr-x
ldd
5.32
KB
-rwxr-xr-x
lefty
300.45
KB
-rwxr-xr-x
less
197.9
KB
-rwxr-xr-x
lessecho
15.37
KB
-rwxr-xr-x
lesskey
24.8
KB
-rwxr-xr-x
lesspipe.sh
3.5
KB
-rwxr-xr-x
lex
412.64
KB
-rwxr-xr-x
lexgrog
88.19
KB
-rwxr-xr-x
libcare-cron
1.06
KB
-rwxr-xr-x
libnetcfg
15.41
KB
-rwxr-xr-x
libpng-config
2.38
KB
-rwxr-xr-x
libpng16-config
2.38
KB
-rwxr-xr-x
libtool
359.18
KB
-rwxr-xr-x
libtoolize
126.17
KB
-rwxr-xr-x
libwmf-fontmap
13.03
KB
-rwxr-xr-x
link
31.67
KB
-rwxr-xr-x
linux-boot-prober
5.86
KB
-rwxr-xr-x
linux32
27.67
KB
-rwxr-xr-x
linux64
27.67
KB
-rwxr-xr-x
ln
60.17
KB
-rwxr-xr-x
lneato
1.51
KB
-rwxr-xr-x
loadkeys
200.55
KB
-rwxr-xr-x
loadunimap
31.63
KB
-rwxr-xr-x
locale
59.34
KB
-rwxr-xr-x
localectl
31.63
KB
-rwxr-xr-x
localedef
314.54
KB
-rwxr-xr-x
logger
36.17
KB
-rwxr-xr-x
login
43.64
KB
-rwxr-xr-x
loginctl
68.13
KB
-rwxr-xr-x
logname
31.67
KB
-rwxr-xr-x
logresolve
25.06
KB
-rwxr-xr-x
look
19.37
KB
-rwxr-xr-x
ls
137.65
KB
-rwxr-xr-x
lsattr
15.18
KB
-rwxr-xr-x
lsblk
124.58
KB
-rwxr-xr-x
lscpu
108.44
KB
-rwxr-xr-x
lsgpio
14.3
KB
-rwxr-xr-x
lsiio
22.14
KB
-rwxr-xr-x
lsinitrd
11.85
KB
-rwxr-xr-x
lsipc
51.7
KB
-rwxr-xr-x
lsirq
23.44
KB
-rwxr-xr-x
lslocks
31.78
KB
-rwxr-xr-x
lslogins
51.7
KB
-rwxr-xr-x
lsmem
35.73
KB
-rwxr-xr-x
lsns
39.52
KB
-rwxr-xr-x
lsof
175.06
KB
-rwxr-xr-x
lsphp
937
B
-rwxr-xr-x
lsscsi
89.44
KB
-rwxr-xr-x
lto-dump
26.58
MB
-rwxr-xr-x
lua
23.23
KB
-rwxr-xr-x
luac
157.69
KB
-rwxr-xr-x
lwp-download
10.05
KB
-rwxr-xr-x
lwp-dump
2.65
KB
-rwxr-xr-x
lwp-mirror
2.36
KB
-rwxr-xr-x
lwp-request
15.82
KB
-rwxr-xr-x
m4
240.4
KB
-rwxr-xr-x
mail
1014.48
KB
-rwxr-xr-x
mailx
1014.48
KB
-rwxr-xr-x
mailx.s-nail
1014.48
KB
-rwxr-xr-x
make
249.8
KB
-rwxr-xr-x
make-dummy-cert
614
B
-rwxr-xr-x
man
114.91
KB
-rwxr-xr-x
man-recode
28.01
KB
-rwxr-xr-x
man.man-db
114.91
KB
-rwxr-xr-x
mandb
133.01
KB
-rwxr-xr-x
manpath
31.82
KB
-rwxr-xr-x
mapscrn
31.58
KB
-rwxr-xr-x
mariadb
4.09
MB
-rwxr-xr-x
mariadb-access
109.34
KB
-rwxr-xr-x
mariadb-admin
3.87
MB
-rwxr-xr-x
mariadb-binlog
4.13
MB
-rwxr-xr-x
mariadb-check
3.86
MB
-rwxr-xr-x
mariadb-config
15.79
KB
-rwxr-xr-x
mariadb-conv
3.57
MB
-rwxr-xr-x
mariadb-convert-table-format
4.12
KB
-rwxr-xr-x
mariadb-dump
3.94
MB
-rwxr-xr-x
mariadb-dumpslow
8.05
KB
-rwxr-xr-x
mariadb-embedded
22.59
MB
-rwxr-xr-x
mariadb-find-rows
3.21
KB
-rwxr-xr-x
mariadb-fix-extensions
1.22
KB
-rwxr-xr-x
mariadb-hotcopy
34.15
KB
-rwxr-xr-x
mariadb-import
3.85
MB
-rwxr-xr-x
mariadb-install-db
22.43
KB
-rwxr-xr-x
mariadb-plugin
3.55
MB
-rwxr-xr-x
mariadb-secure-installation
13.49
KB
-rwxr-xr-x
mariadb-service-convert
2.45
KB
-rwxr-xr-x
mariadb-setpermission
17.56
KB
-rwxr-xr-x
mariadb-show
3.85
MB
-rwxr-xr-x
mariadb-slap
3.87
MB
-rwxr-xr-x
mariadb-tzinfo-to-sql
3.55
MB
-rwxr-xr-x
mariadb-upgrade
3.98
MB
-rwxr-xr-x
mariadb-waitpid
3.54
MB
-rwxr-xr-x
mariadb_config
15.79
KB
-rwxr-xr-x
mariadbd-multi
26.71
KB
-rwxr-xr-x
mariadbd-safe
30.43
KB
-rwxr-xr-x
mariadbd-safe-helper
3.51
MB
-rwxr-xr-x
mcookie
27.51
KB
-rwxr-xr-x
md5sum
39.65
KB
-rwxr-xr-x
mdb_copy
15.7
KB
-rwxr-xr-x
mdb_dump
15.84
KB
-rwxr-xr-x
mdb_load
23.84
KB
-rwxr-xr-x
mdb_stat
15.8
KB
-rwxr-xr-x
mdig
51.5
KB
-rwxr-xr-x
mesg
15.34
KB
-rwxr-xr-x
mkdir
68.31
KB
-rwxr-xr-x
mkfifo
39.83
KB
-rwxr-xr-x
mkfontdir
69
B
-rwxr-xr-x
mkfontscale
44.77
KB
-rwxr-xr-x
mknod
43.88
KB
-rwxr-xr-x
mktemp
39.81
KB
-rwxr-xr-x
mm2gv
39.45
KB
-rwxr-xr-x
mmdblookup
27.72
KB
-rwxr-xr-x
modulecmd
654.01
KB
-rwxr-xr-x
modulemd-validator
28.39
KB
-rwxr-xr-x
mogrify
15.27
KB
-rwxr-xr-x
montage
15.27
KB
-rwxr-xr-x
more
43.63
KB
-rwxr-xr-x
mount
47.54
KB
-rwsr-xr-x
mountpoint
19.38
KB
-rwxr-xr-x
mpstat
51.79
KB
-rwxr-xr-x
msgattrib
27.17
KB
-rwxr-xr-x
msgcat
27.14
KB
-rwxr-xr-x
msgcmp
27.27
KB
-rwxr-xr-x
msgcomm
27.16
KB
-rwxr-xr-x
msgconv
23.15
KB
-rwxr-xr-x
msgen
23.15
KB
-rwxr-xr-x
msgexec
23.15
KB
-rwxr-xr-x
msgfilter
35.31
KB
-rwxr-xr-x
msgfmt
84.09
KB
-rwxr-xr-x
msgfmt.py
7.41
KB
-rwxr-xr-x
msgfmt3.9.py
7.41
KB
-rwxr-xr-x
msgfmt3.py
7.41
KB
-rwxr-xr-x
msggrep
116.41
KB
-rwxr-xr-x
msginit
67.44
KB
-rwxr-xr-x
msgmerge
75.48
KB
-rwxr-xr-x
msgunfmt
35.33
KB
-rwxr-xr-x
msguniq
23.15
KB
-rwxr-xr-x
msql2mysql
1.42
KB
-rwxr-xr-x
mv
141.17
KB
-rwxr-xr-x
my_print_defaults
3.55
MB
-rwxr-xr-x
myisam_ftdump
3.87
MB
-rwxr-xr-x
myisamchk
3.99
MB
-rwxr-xr-x
myisamlog
3.86
MB
-rwxr-xr-x
myisampack
3.9
MB
-rwxr-xr-x
mysql
4.09
MB
-rwxr-xr-x
mysql_config
4.57
KB
-rwxr-xr-x
mysql_embedded
22.59
MB
-rwxr-xr-x
mysql_find_rows
3.21
KB
-rwxr-xr-x
mysql_fix_extensions
1.22
KB
-rwxr-xr-x
mysql_install_db
22.43
KB
-rwxr-xr-x
mysql_plugin
3.55
MB
-rwxr-xr-x
mysql_tzinfo_to_sql
3.55
MB
-rwxr-xr-x
mysql_upgrade
3.98
MB
-rwxr-xr-x
mysql_waitpid
3.54
MB
-rwxr-xr-x
mysqlaccess
109.34
KB
-rwxr-xr-x
mysqladmin
3.87
MB
-rwxr-xr-x
mysqlbinlog
4.13
MB
-rwxr-xr-x
mysqlcheck
3.86
MB
-rwxr-xr-x
mysqld_multi
26.71
KB
-rwxr-xr-x
mysqld_safe
30.43
KB
-rwxr-xr-x
mysqld_safe_helper
3.51
MB
-rwxr-xr-x
mysqldump
3.94
MB
-rwxr-xr-x
mysqlimport
3.85
MB
-rwxr-xr-x
mysqlshow
3.85
MB
-rwxr-xr-x
mysqlslap
3.87
MB
-rwxr-xr-x
mytop
71.95
KB
-rwxr-xr-x
nail
1014.48
KB
-rwxr-xr-x
named-rrchecker
23.34
KB
-rwxr-xr-x
namei
23.42
KB
-rwxr-xr-x
nano
346.22
KB
-rwxr-xr-x
nc
52.02
KB
-rwxr-xr-x
ncurses6-config
8.13
KB
-rwxr-xr-x
ncursesw6-config
8.13
KB
-rwxr-xr-x
ndptool
27.42
KB
-rwxr-xr-x
neato
15.23
KB
-rwxr-xr-x
needs-restarting
3.6
KB
-rwxr-xr-x
neqn
916
B
-rwxr-xr-x
net-snmp-create-v3-user
3.23
KB
-rwxr-xr-x
netcat
52.02
KB
-rwxr-xr-x
netstat
156.85
KB
-rwxr-xr-x
newgidmap
42.13
KB
-rwxr-xr-x
newgrp
40.94
KB
-rwsr-xr-x
newuidmap
38.1
KB
-rwxr-xr-x
nf-ct-add
15.72
KB
-rwxr-xr-x
nf-ct-events
15.16
KB
-rwxr-xr-x
nf-ct-list
15.74
KB
-rwxr-xr-x
nf-exp-add
20.13
KB
-rwxr-xr-x
nf-exp-delete
15.91
KB
-rwxr-xr-x
nf-exp-list
15.75
KB
-rwxr-xr-x
nf-log
15.14
KB
-rwxr-xr-x
nf-monitor
15.15
KB
-rwxr-xr-x
nf-queue
15.14
KB
-rwxr-xr-x
ngettext
35.34
KB
-rwxr-xr-x
nice
35.68
KB
-rwxr-xr-x
nisdomainname
23.84
KB
-rwxr-xr-x
nl
100.7
KB
-rwxr-xr-x
nl-addr-add
15.59
KB
-rwxr-xr-x
nl-addr-delete
15.64
KB
-rwxr-xr-x
nl-addr-list
19.66
KB
-rwxr-xr-x
nl-class-add
15.58
KB
-rwxr-xr-x
nl-class-delete
15.48
KB
-rwxr-xr-x
nl-class-list
15.46
KB
-rwxr-xr-x
nl-classid-lookup
15.33
KB
-rwxr-xr-x
nl-cls-add
19.63
KB
-rwxr-xr-x
nl-cls-delete
15.55
KB
-rwxr-xr-x
nl-cls-list
15.51
KB
-rwxr-xr-x
nl-fib-lookup
15.35
KB
-rwxr-xr-x
nl-link-enslave
15.11
KB
-rwxr-xr-x
nl-link-ifindex2name
15.11
KB
-rwxr-xr-x
nl-link-list
15.5
KB
-rwxr-xr-x
nl-link-name2ifindex
15.11
KB
-rwxr-xr-x
nl-link-release
15.12
KB
-rwxr-xr-x
nl-link-set
15.56
KB
-rwxr-xr-x
nl-link-stats
15.36
KB
-rwxr-xr-x
nl-list-caches
15.12
KB
-rwxr-xr-x
nl-list-sockets
15.11
KB
-rwxr-xr-x
nl-monitor
15.3
KB
-rwxr-xr-x
nl-neigh-add
15.48
KB
-rwxr-xr-x
nl-neigh-delete
15.52
KB
-rwxr-xr-x
nl-neigh-list
15.44
KB
-rwxr-xr-x
nl-neightbl-list
15.27
KB
-rwxr-xr-x
nl-nh-list
15.3
KB
-rwxr-xr-x
nl-pktloc-lookup
15.36
KB
-rwxr-xr-x
nl-qdisc-add
15.52
KB
-rwxr-xr-x
nl-qdisc-delete
15.48
KB
-rwxr-xr-x
nl-qdisc-list
19.51
KB
-rwxr-xr-x
nl-route-add
19.66
KB
-rwxr-xr-x
nl-route-delete
19.74
KB
-rwxr-xr-x
nl-route-get
15.14
KB
-rwxr-xr-x
nl-route-list
15.69
KB
-rwxr-xr-x
nl-rule-list
15.3
KB
-rwxr-xr-x
nl-tctree-list
15.42
KB
-rwxr-xr-x
nl-util-addr
15.11
KB
-rwxr-xr-x
nm
44.91
KB
-rwxr-xr-x
nm-online
23.55
KB
-rwxr-xr-x
nmcli
1.01
MB
-rwxr-xr-x
nmtui
821.41
KB
-rwxr-xr-x
nmtui-connect
821.41
KB
-rwxr-xr-x
nmtui-edit
821.41
KB
-rwxr-xr-x
nmtui-hostname
821.41
KB
-rwxr-xr-x
nohup
35.59
KB
-rwxr-xr-x
nop
15.33
KB
-rwxr-xr-x
notify-send
19.75
KB
-rwxr-xr-x
nproc
35.7
KB
-rwxr-xr-x
nroff
3.21
KB
-rwxr-xr-x
nsenter
27.66
KB
-rwxr-xr-x
nslookup
112.73
KB
-rwxr-xr-x
nsupdate
71.99
KB
-rwxr-xr-x
numfmt
55.83
KB
-rwxr-xr-x
objcopy
185.56
KB
-rwxr-xr-x
objdump
413.3
KB
-rwxr-xr-x
od
64.07
KB
-rwxr-xr-x
odbc_config
15.7
KB
-rwxr-xr-x
odbcinst
23.9
KB
-rwxr-xr-x
openssl
1.01
MB
-rwxr-xr-x
openvt
23.75
KB
-rwxr-xr-x
orc-bugreport
23.31
KB
-rwxr-xr-x
os-prober
5.78
KB
-rwxr-xr-x
osage
15.23
KB
-rwxr-xr-x
osinfo-db-export
27.35
KB
-rwxr-xr-x
osinfo-db-import
27.3
KB
-rwxr-xr-x
osinfo-db-path
15.3
KB
-rwxr-xr-x
osinfo-db-validate
23.4
KB
-rwxr-xr-x
osinfo-detect
27.4
KB
-rwxr-xr-x
osinfo-install-script
31.77
KB
-rwxr-xr-x
osinfo-query
32.19
KB
-rwxr-xr-x
osql
9.48
KB
-rwxr-xr-x
p11-kit
188.31
KB
-rwxr-xr-x
pacat
52.09
KB
-rwxr-xr-x
package-cleanup
3.6
KB
-rwxr-xr-x
pacmd
19.7
KB
-rwxr-xr-x
pactl
80.34
KB
-rwxr-xr-x
page_owner_sort
26.13
KB
-rwxr-xr-x
pamon
52.09
KB
-rwxr-xr-x
pango-list
19.11
KB
-rwxr-xr-x
pango-segmentation
19.13
KB
-rwxr-xr-x
pango-view
60.17
KB
-rwxr-xr-x
paperconf
15.8
KB
-rwxr-xr-x
paplay
52.09
KB
-rwxr-xr-x
parec
52.09
KB
-rwxr-xr-x
parecord
52.09
KB
-rwxr-xr-x
passwd
31.89
KB
-rwsr-xr-x
paste
35.59
KB
-rwxr-xr-x
pasuspender
23.93
KB
-rwxr-xr-x
patch
195.02
KB
-rwxr-xr-x
patchwork
15.23
KB
-rwxr-xr-x
pathchk
35.66
KB
-rwxr-xr-x
pathfix.py
6.63
KB
-rwxr-xr-x
pathfix3.9.py
6.63
KB
-rwxr-xr-x
pax11publish
15.7
KB
-rwxr-xr-x
pcre-config
2.09
KB
-rwxr-xr-x
pcre2-config
1.91
KB
-rwxr-xr-x
pdf2dsc
701
B
-rwxr-xr-x
pdf2ps
913
B
-rwxr-xr-x
pdns_control
484.45
KB
-rwxr-xr-x
pdnsutil
4.84
MB
-rwxr-xr-x
peekfd
15.8
KB
-rwxr-xr-x
perl
15.25
KB
-rwxr-xr-x
perl5.32.1
15.25
KB
-rwxr-xr-x
perlbug
43.81
KB
-rwxr-xr-x
perldoc
118
B
-rwxr-xr-x
perlivp
10.56
KB
-rwxr-xr-x
perlml
14.18
KB
-rwxr-xr-x
perlthanks
43.81
KB
-rwxr-xr-x
perror
3.73
MB
-rwxr-xr-x
pf2afm
502
B
-rwxr-xr-x
pfbtopfa
520
B
-rwxr-xr-x
pftp
100.66
KB
-rwxr-xr-x
pgrep
31.42
KB
-rwxr-xr-x
php
937
B
-rwxr-xr-x
pic
201.72
KB
-rwxr-xr-x
piconv
8.08
KB
-rwxr-xr-x
pidof
23.33
KB
-rwxr-xr-x
pidstat
51.8
KB
-rwxr-xr-x
pidwait
31.42
KB
-rwxr-xr-x
pigz
129.81
KB
-rwxr-xr-x
ping
76.66
KB
-rwxr-xr-x
pinky
35.62
KB
-rwxr-xr-x
pip
648
B
-rwxr-xr-x
pip-3
648
B
-rwxr-xr-x
pip-3.9
648
B
-rwxr-xr-x
pip3
648
B
-rwxr-xr-x
pip3.9
648
B
-rwxr-xr-x
pipewire
15.14
KB
-rwxr-xr-x
pipewire-aes67
15.14
KB
-rwxr-xr-x
pipewire-avb
15.14
KB
-rwxr-xr-x
pipewire-pulse
15.14
KB
-rwxr-xr-x
pipewire-vulkan
15.14
KB
-rwxr-xr-x
pkaction
19.37
KB
-rwxr-xr-x
pkcheck
23.37
KB
-rwxr-xr-x
pkexec
31.38
KB
-rwsr-xr-x
pkg-config
335
B
-rwxr-xr-x
pkgconf
45.36
KB
-rwxr-xr-x
pkill
31.42
KB
-rwxr-xr-x
pkla-admin-identities
23.96
KB
-rwxr-xr-x
pkla-check-authorization
36.1
KB
-rwxr-xr-x
pkttyagent
23.36
KB
-rwxr-xr-x
pl2pm
4.43
KB
-rwxr-xr-x
pldd
23.57
KB
-rwxr-xr-x
plesk_configure
346
B
-rwxr-xr-x
pmap
35.39
KB
-rwxr-xr-x
png-fix-itxt
15.69
KB
-rwxr-xr-x
pngfix
60.23
KB
-rwxr-xr-x
pod2html
4.04
KB
-rwxr-xr-x
pod2man
14.68
KB
-rwxr-xr-x
pod2text
10.55
KB
-rwxr-xr-x
pod2usage
4.01
KB
-rwxr-xr-x
podchecker
3.57
KB
-rwxr-xr-x
post-grohtml
199.76
KB
-rwxr-xr-x
powernow-k8-decode
14.13
KB
-rwxr-xr-x
pphs
408
B
-rwxr-xr-x
pr
72.3
KB
-rwxr-xr-x
pre-grohtml
92.92
KB
-rwxr-xr-x
precat
5.53
KB
-rwxr-xr-x
preconv
56.27
KB
-rwxr-xr-x
preunzip
5.53
KB
-rwxr-xr-x
prezip
5.53
KB
-rwxr-xr-x
prezip-bin
15.69
KB
-rwxr-xr-x
printafm
399
B
-rwxr-xr-x
printenv
31.48
KB
-rwxr-xr-x
printf
51.78
KB
-rwxr-xr-x
prlimit
27.95
KB
-rwxr-xr-x
procan
35.62
KB
-rwxr-xr-x
protoc
24.01
KB
-rwxr-xr-x
protoc-c
158.2
KB
-rwxr-xr-x
protoc-gen-c
158.2
KB
-rwxr-xr-x
prove
13.24
KB
-rwxr-xr-x
prtstat
23.84
KB
-rwxr-xr-x
prune
15.41
KB
-rwxr-xr-x
ps
141.15
KB
-rwxr-xr-x
ps2ascii
635
B
-rwxr-xr-x
ps2epsi
1.24
KB
-rwxr-xr-x
ps2pdf
276
B
-rwxr-xr-x
ps2pdf12
219
B
-rwxr-xr-x
ps2pdf13
219
B
-rwxr-xr-x
ps2pdf14
219
B
-rwxr-xr-x
ps2pdfwr
1.06
KB
-rwxr-xr-x
ps2ps
651
B
-rwxr-xr-x
ps2ps2
673
B
-rwxr-xr-x
psfaddtable
31.45
KB
-rwxr-xr-x
psfgettable
31.45
KB
-rwxr-xr-x
psfstriptable
31.45
KB
-rwxr-xr-x
psfxtable
31.45
KB
-rwxr-xr-x
pslog
15.7
KB
-rwxr-xr-x
pstree
36.9
KB
-rwxr-xr-x
pstree.x11
36.9
KB
-rwxr-xr-x
ptar
3.39
KB
-rwxr-xr-x
ptardiff
2.49
KB
-rwxr-xr-x
ptargrep
4.2
KB
-rwxr-xr-x
ptx
129.04
KB
-rwxr-xr-x
pure-pw
38.42
KB
-rwxr-xr-x
pure-pwconvert
14.35
KB
-rwxr-xr-x
pure-statsdecode
14.35
KB
-rwxr-xr-x
pw-jack
1.32
KB
-rwxr-xr-x
pwd
35.7
KB
-rwxr-xr-x
pwdx
15.28
KB
-rwxr-xr-x
pwmake
15.7
KB
-rwxr-xr-x
pwscore
15.7
KB
-rwxr-xr-x
pydoc
78
B
-rwxr-xr-x
pydoc3
78
B
-rwxr-xr-x
pydoc3.9
78
B
-rwxr-xr-x
pygettext.py
21.03
KB
-rwxr-xr-x
pygettext3.9.py
21.03
KB
-rwxr-xr-x
pygettext3.py
21.03
KB
-rwxr-xr-x
python-config
61
B
-rwxr-xr-x
python3
15.27
KB
-rwxr-xr-x
python3-config
61
B
-rwxr-xr-x
python3.9
15.27
KB
-rwxr-xr-x
python3.9-config
61
B
-rwxr-xr-x
python3.9-x86_64-config
3.54
KB
-rwxr-xr-x
qemu-ga
1.81
MB
-rwxr-xr-x
quota
81.7
KB
-rwsr-xr-x
quotasync
64.88
KB
-rwxr-xr-x
ranlib
56.2
KB
-rwxr-xr-x
read
32
B
-rwxr-xr-x
readelf
667.48
KB
-rwxr-xr-x
readlink
39.7
KB
-rwxr-xr-x
realpath
39.77
KB
-rwxr-xr-x
recode-sr-latin
15.13
KB
-rwxr-xr-x
red
92
B
-rwxr-xr-x
rename
23.42
KB
-rwxr-xr-x
renew-dummy-cert
729
B
-rwxr-xr-x
renice
15.37
KB
-rwxr-xr-x
replace
3.52
MB
-rwxr-xr-x
repo-graph
3.6
KB
-rwxr-xr-x
repoclosure
3.6
KB
-rwxr-xr-x
repodiff
3.6
KB
-rwxr-xr-x
repomanage
3.6
KB
-rwxr-xr-x
repoquery
3.6
KB
-rwxr-xr-x
reposync
3.6
KB
-rwxr-xr-x
repotrack
3.6
KB
-rwxr-xr-x
rescan-scsi-bus.sh
38.09
KB
-rwxr-xr-x
reset
27.34
KB
-rwxr-xr-x
resizecons
27.57
KB
-rwxr-xr-x
resolve_stack_dump
3.54
MB
-rwxr-xr-x
resolveip
3.54
MB
-rwxr-xr-x
rev
15.36
KB
-rwxr-xr-x
rm
60.21
KB
-rwxr-xr-x
rmdir
43.62
KB
-rwxr-xr-x
rnano
346.22
KB
-rwxr-xr-x
rpcbind
59.89
KB
-rwxr-xr-x
rpcinfo
35.58
KB
-rwxr-xr-x
rpm
23.81
KB
-rwxr-xr-x
rpm2archive
23.5
KB
-rwxr-xr-x
rpm2cpio
15.29
KB
-rwxr-xr-x
rpmdb
19.91
KB
-rwxr-xr-x
rpmkeys
15.77
KB
-rwxr-xr-x
rpmquery
23.81
KB
-rwxr-xr-x
rpmverify
23.81
KB
-rwxr-xr-x
rsync
554.87
KB
-rwxr-xr-x
rsync-ssl
4.82
KB
-rwxr-xr-x
run-parts
1.94
KB
-rwxr-xr-x
run-with-aspell
89
B
-rwxr-xr-x
runcon
35.65
KB
-rwxr-xr-x
rvi
1.39
MB
-rwxr-xr-x
rview
1.39
MB
-rwxr-xr-x
rvim
3.84
MB
-rwxr-xr-x
s-nail
1014.48
KB
-rwxr-xr-x
sadf
459.02
KB
-rwxr-xr-x
sar
135.88
KB
-rwxr-xr-x
sccmap
23.37
KB
-rwxr-xr-x
scl
39.55
KB
-rwxr-xr-x
scl_enabled
262
B
-rwxr-xr-x
scl_source
1.88
KB
-rwxr-xr-x
scp
133.07
KB
-rwxr-xr-x
screen
484.21
KB
-rwxr-sr-x
script
51.76
KB
-rwxr-xr-x
scriptlive
43.67
KB
-rwxr-xr-x
scriptreplay
35.49
KB
-rwxr-xr-x
scsi-rescan
38.09
KB
-rwxr-xr-x
scsi_logging_level
8.39
KB
-rwxr-xr-x
scsi_mandat
3.52
KB
-rwxr-xr-x
scsi_readcap
1.3
KB
-rwxr-xr-x
scsi_ready
1.1
KB
-rwxr-xr-x
scsi_satl
3.74
KB
-rwxr-xr-x
scsi_start
1.26
KB
-rwxr-xr-x
scsi_stop
1.44
KB
-rwxr-xr-x
scsi_temperature
940
B
-rwxr-xr-x
sdiff
44.2
KB
-rwxr-xr-x
secon
28.37
KB
-rwxr-xr-x
sed
114.01
KB
-rwxr-xr-x
sedismod
289.02
KB
-rwxr-xr-x
sedispol
219.93
KB
-rwxr-xr-x
semodule_expand
15.23
KB
-rwxr-xr-x
semodule_link
15.25
KB
-rwxr-xr-x
semodule_package
19.28
KB
-rwxr-xr-x
semodule_unpackage
15.24
KB
-rwxr-xr-x
seq
47.8
KB
-rwxr-xr-x
sestatus
23.25
KB
-rwxr-xr-x
setarch
27.67
KB
-rwxr-xr-x
setfacl
39.98
KB
-rwxr-xr-x
setfattr
20.16
KB
-rwxr-xr-x
setfont
51.82
KB
-rwxr-xr-x
setkeycodes
15.41
KB
-rwxr-xr-x
setleds
19.46
KB
-rwxr-xr-x
setmetamode
15.49
KB
-rwxr-xr-x
setpriv
39.55
KB
-rwxr-xr-x
setsid
15.35
KB
-rwxr-xr-x
setterm
35.52
KB
-rwxr-xr-x
setup-nsssysinit
1.51
KB
-rwxr-xr-x
setup-nsssysinit.sh
1.51
KB
-rwxr-xr-x
setvtrgb
15.45
KB
-rwxr-xr-x
sfdp
15.23
KB
-rwxr-xr-x
sftp
141.05
KB
-rwxr-xr-x
sg
40.94
KB
-rwsr-xr-x
sg_bg_ctl
15.93
KB
-rwxr-xr-x
sg_compare_and_write
28.35
KB
-rwxr-xr-x
sg_copy_results
24.65
KB
-rwxr-xr-x
sg_dd
56.04
KB
-rwxr-xr-x
sg_decode_sense
16.23
KB
-rwxr-xr-x
sg_emc_trespass
15.71
KB
-rwxr-xr-x
sg_format
40.9
KB
-rwxr-xr-x
sg_get_config
36.75
KB
-rwxr-xr-x
sg_get_elem_status
28.22
KB
-rwxr-xr-x
sg_get_lba_status
24.38
KB
-rwxr-xr-x
sg_ident
16.01
KB
-rwxr-xr-x
sg_inq
121.35
KB
-rwxr-xr-x
sg_logs
154.06
KB
-rwxr-xr-x
sg_luns
24.31
KB
-rwxr-xr-x
sg_map
19.84
KB
-rwxr-xr-x
sg_map26
28.31
KB
-rwxr-xr-x
sg_modes
47.65
KB
-rwxr-xr-x
sg_opcodes
36.61
KB
-rwxr-xr-x
sg_persist
37.59
KB
-rwxr-xr-x
sg_prevent
15.91
KB
-rwxr-xr-x
sg_raw
28.34
KB
-rwxr-xr-x
sg_rbuf
24.26
KB
-rwxr-xr-x
sg_rdac
15.69
KB
-rwxr-xr-x
sg_read
27.84
KB
-rwxr-xr-x
sg_read_attr
38.18
KB
-rwxr-xr-x
sg_read_block_limits
15.95
KB
-rwxr-xr-x
sg_read_buffer
28.93
KB
-rwxr-xr-x
sg_read_long
16.12
KB
-rwxr-xr-x
sg_readcap
24.31
KB
-rwxr-xr-x
sg_reassign
16.07
KB
-rwxr-xr-x
sg_referrals
16.09
KB
-rwxr-xr-x
sg_rep_pip
15.99
KB
-rwxr-xr-x
sg_rep_zones
28.41
KB
-rwxr-xr-x
sg_requests
24.17
KB
-rwxr-xr-x
sg_reset
16.18
KB
-rwxr-xr-x
sg_reset_wp
16.02
KB
-rwxr-xr-x
sg_rmsn
15.91
KB
-rwxr-xr-x
sg_rtpg
16.01
KB
-rwxr-xr-x
sg_safte
24.13
KB
-rwxr-xr-x
sg_sanitize
28.43
KB
-rwxr-xr-x
sg_sat_identify
20.16
KB
-rwxr-xr-x
sg_sat_phy_event
20.44
KB
-rwxr-xr-x
sg_sat_read_gplog
20.15
KB
-rwxr-xr-x
sg_sat_set_features
20.11
KB
-rwxr-xr-x
sg_scan
19.84
KB
-rwxr-xr-x
sg_seek
20.3
KB
-rwxr-xr-x
sg_senddiag
28.74
KB
-rwxr-xr-x
sg_ses
121.71
KB
-rwxr-xr-x
sg_ses_microcode
28.91
KB
-rwxr-xr-x
sg_start
20.38
KB
-rwxr-xr-x
sg_stpg
24.13
KB
-rwxr-xr-x
sg_stream_ctl
20.13
KB
-rwxr-xr-x
sg_sync
16.08
KB
-rwxr-xr-x
sg_test_rwbuf
20.17
KB
-rwxr-xr-x
sg_timestamp
24.29
KB
-rwxr-xr-x
sg_turs
28.27
KB
-rwxr-xr-x
sg_unmap
24.28
KB
-rwxr-xr-x
sg_verify
20.33
KB
-rwxr-xr-x
sg_vpd
120.15
KB
-rwxr-xr-x
sg_wr_mode
24.13
KB
-rwxr-xr-x
sg_write_buffer
28.67
KB
-rwxr-xr-x
sg_write_long
16.18
KB
-rwxr-xr-x
sg_write_same
28.4
KB
-rwxr-xr-x
sg_write_verify
28.23
KB
-rwxr-xr-x
sg_write_x
61.23
KB
-rwxr-xr-x
sg_xcopy
44.02
KB
-rwxr-xr-x
sg_zone
20.21
KB
-rwxr-xr-x
sginfo
74.25
KB
-rwxr-xr-x
sgm_dd
40
KB
-rwxr-xr-x
sgp_dd
44.45
KB
-rwxr-xr-x
sh
1.32
MB
-rwxr-xr-x
sha1hmac
35.27
KB
-rwxr-xr-x
sha1sum
39.65
KB
-rwxr-xr-x
sha224hmac
35.27
KB
-rwxr-xr-x
sha224sum
39.65
KB
-rwxr-xr-x
sha256hmac
35.27
KB
-rwxr-xr-x
sha256sum
39.65
KB
-rwxr-xr-x
sha384hmac
35.27
KB
-rwxr-xr-x
sha384sum
39.65
KB
-rwxr-xr-x
sha512hmac
35.27
KB
-rwxr-xr-x
sha512sum
39.65
KB
-rwxr-xr-x
shasum
9.66
KB
-rwxr-xr-x
showconsolefont
19.48
KB
-rwxr-xr-x
showkey
19.41
KB
-rwxr-xr-x
shred
51.88
KB
-rwxr-xr-x
shuf
48.02
KB
-rwxr-xr-x
size
31.8
KB
-rwxr-xr-x
skill
31.4
KB
-rwxr-xr-x
slabinfo
42.95
KB
-rwxr-xr-x
slabtop
23.42
KB
-rwxr-xr-x
sleep
35.66
KB
-rwxr-xr-x
slencheck
15.71
KB
-rwxr-xr-x
sm3hmac
35.27
KB
-rwxr-xr-x
snice
31.4
KB
-rwxr-xr-x
snmpconf
25.44
KB
-rwxr-xr-x
socat
387.1
KB
-rwxr-xr-x
soelim
32.18
KB
-rwxr-xr-x
soelim.groff
32.18
KB
-rwxr-xr-x
sort
113.11
KB
-rwxr-xr-x
sotruss
4.18
KB
-rwxr-xr-x
spell
125
B
-rwxr-xr-x
splain
18.96
KB
-rwxr-xr-x
split
52.33
KB
-rwxr-xr-x
sprof
35.62
KB
-rwxr-xr-x
sqlite3
1.52
MB
-rwxr-xr-x
ssh
843.51
KB
-rwxr-xr-x
ssh-add
164.85
KB
-rwxr-xr-x
ssh-agent
281.02
KB
-rwxr-xr-x
ssh-copy-id
12.38
KB
-rwxr-xr-x
ssh-keygen
455.02
KB
-rwxr-xr-x
ssh-keyscan
197.44
KB
-rwxr-xr-x
sss_ssh_authorizedkeys
23.47
KB
-rwxr-xr-x
sss_ssh_knownhostsproxy
27.48
KB
-rwxr-xr-x
stat
80.07
KB
-rwxr-xr-x
stdbuf
43.75
KB
-rwxr-xr-x
strace
1.94
MB
-rwxr-xr-x
strace-log-merge
1.78
KB
-rwxr-xr-x
stream
15.27
KB
-rwxr-xr-x
streamzip
7.66
KB
-rwxr-xr-x
strings
31.92
KB
-rwxr-xr-x
strip
185.55
KB
-rwxr-xr-x
stty
75.84
KB
-rwxr-xr-x
su
55.79
KB
-rwsr-x---
sudo
180.96
KB
---s--x--x
sudoedit
180.96
KB
---s--x--x
sudoreplay
84.97
KB
---x--x--x
sum
35.6
KB
-rwxr-xr-x
sw-engine
24.39
MB
-rwxr-xr-x
sxpm
31.58
KB
-rwxr-xr-x
sync
35.55
KB
-rwxr-xr-x
systemctl
298.59
KB
-rwxr-xr-x
systemd-analyze
201.77
KB
-rwxr-xr-x
systemd-ask-password
19.63
KB
-rwxr-xr-x
systemd-cat
19.44
KB
-rwxr-xr-x
systemd-cgls
23.64
KB
-rwxr-xr-x
systemd-cgtop
39.59
KB
-rwxr-xr-x
systemd-creds
43.98
KB
-rwxr-xr-x
systemd-cryptenroll
72.25
KB
-rwxr-xr-x
systemd-delta
27.49
KB
-rwxr-xr-x
systemd-detect-virt
19.44
KB
-rwxr-xr-x
systemd-dissect
47.96
KB
-rwxr-xr-x
systemd-escape
23.44
KB
-rwxr-xr-x
systemd-firstboot
56.26
KB
-rwxr-xr-x
systemd-hwdb
15.45
KB
-rwxr-xr-x
systemd-id128
27.55
KB
-rwxr-xr-x
systemd-inhibit
23.48
KB
-rwxr-xr-x
systemd-machine-id-setup
19.73
KB
-rwxr-xr-x
systemd-mount
60.2
KB
-rwxr-xr-x
systemd-notify
23.48
KB
-rwxr-xr-x
systemd-path
19.42
KB
-rwxr-xr-x
systemd-repart
169.41
KB
-rwxr-xr-x
systemd-run
64.19
KB
-rwxr-xr-x
systemd-socket-activate
27.52
KB
-rwxr-xr-x
systemd-stdio-bridge
23.44
KB
-rwxr-xr-x
systemd-sysext
47.94
KB
-rwxr-xr-x
systemd-sysusers
72.53
KB
-rwxr-xr-x
systemd-tmpfiles
124.71
KB
-rwxr-xr-x
systemd-tty-ask-password-agent
39.55
KB
-rwxr-xr-x
systemd-umount
60.2
KB
-rwxr-xr-x
tabs
19.16
KB
-rwxr-xr-x
tac
104.61
KB
-rwxr-xr-x
tail
68.1
KB
-rwxr-xr-x
tapestat
27.55
KB
-rwxr-xr-x
tar
514.27
KB
-rwxr-xr-x
taskset
23.41
KB
-rwxr-xr-x
tbl
130.86
KB
-rwxr-xr-x
tcamgr
27.88
KB
-rwxr-xr-x
tcamttest
27.88
KB
-rwxr-xr-x
tcatest
64.32
KB
-rwxr-xr-x
tcbmgr
31.84
KB
-rwxr-xr-x
tcbmttest
55.92
KB
-rwxr-xr-x
tcbtest
72.3
KB
-rwxr-xr-x
tcfmgr
27.82
KB
-rwxr-xr-x
tcfmttest
39.92
KB
-rwxr-xr-x
tcftest
51.91
KB
-rwxr-xr-x
tchmgr
27.81
KB
-rwxr-xr-x
tchmttest
51.93
KB
-rwxr-xr-x
tchtest
64.27
KB
-rwxr-xr-x
tclsh
15.69
KB
-rwxr-xr-x
tclsh8.6
15.69
KB
-rwxr-xr-x
tcptraceroute
1.55
KB
-rwxr-xr-x
tctmgr
35.83
KB
-rwxr-xr-x
tctmttest
51.89
KB
-rwxr-xr-x
tcttest
63.92
KB
-rwxr-xr-x
tcucodec
35.8
KB
-rwxr-xr-x
tcumttest
27.87
KB
-rwxr-xr-x
tcutest
79.95
KB
-rwxr-xr-x
tdspool
253.95
KB
-rwxr-xr-x
team2bond
15.76
KB
-rwxr-xr-x
teamd
166.59
KB
-rwxr-xr-x
teamdctl
37.12
KB
-rwxr-xr-x
teamnl
23.26
KB
-rwxr-xr-x
tee
35.7
KB
-rwxr-xr-x
test
43.8
KB
-rwxr-xr-x
tic
87.8
KB
-rwxr-xr-x
timedatectl
47.83
KB
-rwxr-xr-x
timeout
40.18
KB
-rwxr-xr-x
tload
19.34
KB
-rwxr-xr-x
tmon
42.48
KB
-rwxr-xr-x
tmpwatch
36.03
KB
-rwxr-xr-x
toe
23.23
KB
-rwxr-xr-x
top
132.27
KB
-rwxr-xr-x
touch
92.04
KB
-rwxr-xr-x
tput
27.25
KB
-rwxr-xr-x
tr
47.87
KB
-rwxr-xr-x
tracepath
19.39
KB
-rwxr-xr-x
traceroute
77.26
KB
-rwxr-xr-x
traceroute6
77.26
KB
-rwxr-xr-x
tracker3
611.08
KB
-rwxr-xr-x
tred
15.35
KB
-rwxr-xr-x
troff
732.07
KB
-rwxr-xr-x
true
27.48
KB
-rwxr-xr-x
truncate
35.66
KB
-rwxr-xr-x
trust
221.06
KB
-rwxr-xr-x
tset
27.34
KB
-rwxr-xr-x
tsort
47.8
KB
-rwxr-xr-x
tsql
253.9
KB
-rwxr-xr-x
tty
31.66
KB
-rwxr-xr-x
turbostat
148.05
KB
-rwxr-xr-x
twopi
15.23
KB
-rwxr-xr-x
type
32
B
-rwxr-xr-x
tzselect
14.99
KB
-rwxr-xr-x
uapi
3.15
MB
-rwxr-xr-x
udevadm
583.98
KB
-rwxr-xr-x
ul
23.45
KB
-rwxr-xr-x
ulimit
34
B
-rwxr-xr-x
ulockmgr_server
19.4
KB
-rwxr-xr-x
umask
33
B
-rwxr-xr-x
umount
35.46
KB
-rwsr-xr-x
unalias
35
B
-rwxr-xr-x
uname
31.66
KB
-rwxr-xr-x
uname26
27.67
KB
-rwxr-xr-x
unexpand
39.73
KB
-rwxr-xr-x
unflatten
15.37
KB
-rwxr-xr-x
unicode_start
2.57
KB
-rwxr-xr-x
unicode_stop
367
B
-rwxr-xr-x
uniq
43.84
KB
-rwxr-xr-x
unlink
31.66
KB
-rwxr-xr-x
unpigz
129.81
KB
-rwxr-xr-x
unshare
31.75
KB
-rwxr-xr-x
unxz
84.94
KB
-rwxr-xr-x
unzip
196.15
KB
-rwxr-xr-x
unzipsfx
87.91
KB
-rwxr-xr-x
update-ca-trust
4.36
KB
-rwxr-xr-x
update-crypto-policies
87
B
-rwxr-xr-x
update-gtk-immodules
316
B
-rwxr-xr-x
update-mime-database
59.87
KB
-rwxr-xr-x
upower
23.88
KB
-rwxr-xr-x
uptime
15.29
KB
-rwxr-xr-x
users
35.69
KB
-rwxr-xr-x
usleep
15.31
KB
-rwxr-xr-x
utmpdump
23.4
KB
-rwxr-xr-x
uuidgen
19.36
KB
-rwxr-xr-x
uuidparse
23.41
KB
-rwxr-xr-x
vdir
137.66
KB
-rwxr-xr-x
vi
691
B
-rwxr-xr-x
view
150
B
-rwxr-xr-x
vim
3.84
MB
-rwxr-xr-x
vimdiff
3.84
MB
-rwxr-xr-x
vimdot
1.06
KB
-rwxr-xr-x
vimtutor
2.07
KB
-rwxr-xr-x
vlock
23.61
KB
-rwxr-xr-x
vmstat
39.41
KB
-rwxr-xr-x
w
23.37
KB
-rwxr-xr-x
wait
32
B
-rwxr-xr-x
wall
23.41
KB
-rwxr-xr-x
watch
27.87
KB
-rwxr-xr-x
watchgnupg
23.2
KB
-rwxr-xr-x
wc
43.74
KB
-rwxr-xr-x
wdctl
31.52
KB
-rwxr-xr-x
wget
521.41
KB
-rwxr-xr-x
whatis
48.52
KB
-rwxr-xr-x
whatis.man-db
48.52
KB
-rwxr-xr-x
whereis
32.04
KB
-rwxr-xr-x
which
27.89
KB
-rwxr-xr-x
whiptail
31.93
KB
-rwxr-xr-x
who
51.77
KB
-rwxr-xr-x
whoami
31.66
KB
-rwxr-xr-x
wireplumber
31.67
KB
-rwxr-xr-x
wmf2eps
19.72
KB
-rwxr-xr-x
wmf2fig
19.81
KB
-rwxr-xr-x
wmf2gd
15.81
KB
-rwxr-xr-x
wmf2svg
19.82
KB
-rwxr-xr-x
wmf2x
15.7
KB
-rwxr-xr-x
word-list-compress
15.7
KB
-rwxr-xr-x
wpctl
59.85
KB
-rwxr-xr-x
wpexec
23.7
KB
-rwxr-xr-x
write
23.42
KB
-rwxr-sr-x
wsrep_sst_backup
2.39
KB
-rwxr-xr-x
wsrep_sst_common
65.72
KB
-rw-r--r--
wsrep_sst_mariabackup
48.34
KB
-rwxr-xr-x
wsrep_sst_mysqldump
8.03
KB
-rwxr-xr-x
wsrep_sst_rsync
29.7
KB
-rwxr-xr-x
wsrep_sst_rsync_wan
29.7
KB
-rwxr-xr-x
x86_64
27.67
KB
-rwxr-xr-x
x86_64-redhat-linux-c++
1.04
MB
-rwxr-xr-x
x86_64-redhat-linux-g++
1.04
MB
-rwxr-xr-x
x86_64-redhat-linux-gcc
1.04
MB
-rwxr-xr-x
x86_64-redhat-linux-gcc-11
1.04
MB
-rwxr-xr-x
x86_64-redhat-linux-gnu-pkg-co...
829
B
-rwxr-xr-x
x86_energy_perf_policy
38.73
KB
-rwxr-xr-x
xargs
64.09
KB
-rwxr-xr-x
xdg-dbus-proxy
56.54
KB
-rwxr-xr-x
xgettext
296.7
KB
-rwxr-xr-x
xml2-config
1.83
KB
-rwxr-xr-x
xmlcatalog
23.27
KB
-rwxr-xr-x
xmllint
80.69
KB
-rwxr-xr-x
xmlwf
39.81
KB
-rwxr-xr-x
xslt-config
2.58
KB
-rwxr-xr-x
xsltproc
31.88
KB
-rwxr-xr-x
xsubpp
4.96
KB
-rwxr-xr-x
xxd
19.52
KB
-rwxr-xr-x
xz
84.94
KB
-rwxr-xr-x
xzcat
84.94
KB
-rwxr-xr-x
xzcmp
6.48
KB
-rwxr-xr-x
xzdec
15.85
KB
-rwxr-xr-x
xzdiff
6.48
KB
-rwxr-xr-x
xzegrep
5.77
KB
-rwxr-xr-x
xzfgrep
5.77
KB
-rwxr-xr-x
xzgrep
5.77
KB
-rwxr-xr-x
xzless
1.76
KB
-rwxr-xr-x
xzmore
2.12
KB
-rwxr-xr-x
yat2m
40.04
KB
-rwxr-xr-x
yes
31.52
KB
-rwxr-xr-x
ypdomainname
23.84
KB
-rwxr-xr-x
yum
2.04
KB
-rwxr-xr-x
yum-builddep
3.6
KB
-rwxr-xr-x
yum-config-manager
3.6
KB
-rwxr-xr-x
yum-debug-dump
3.6
KB
-rwxr-xr-x
yum-debug-restore
3.6
KB
-rwxr-xr-x
yum-groups-manager
3.6
KB
-rwxr-xr-x
yumdownloader
3.6
KB
-rwxr-xr-x
zcat
1.94
KB
-rwxr-xr-x
zcmp
1.64
KB
-rwxr-xr-x
zdiff
6.31
KB
-rwxr-xr-x
zdump
27.51
KB
-rwxr-xr-x
zegrep
33
B
-rwxr-xr-x
zfgrep
33
B
-rwxr-xr-x
zforce
2.04
KB
-rwxr-xr-x
zgrep
7.93
KB
-rwxr-xr-x
zip
221.09
KB
-rwxr-xr-x
zipcloak
75.7
KB
-rwxr-xr-x
zipdetails
58.56
KB
-rwxr-xr-x
zipgrep
2.89
KB
-rwxr-xr-x
zipinfo
196.15
KB
-rwxr-xr-x
zipnote
67.61
KB
-rwxr-xr-x
zipsplit
63.58
KB
-rwxr-xr-x
zless
2.16
KB
-rwxr-xr-x
zmore
1.8
KB
-rwxr-xr-x
znew
4.47
KB
-rwxr-xr-x
zone2json
1.35
MB
-rwxr-xr-x
zone2sql
1.37
MB
-rwxr-xr-x
zsoelim
32.18
KB
-rwxr-xr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : firewall-offline-cmd
#!/usr/bin/python3 -s # -*- coding: utf-8 -*- # # Copyright (C) 2009-2016 Red Hat, Inc. # # Authors: # Thomas Woerner <twoerner@redhat.com> # Jiri Popelka <jpopelka@redhat.com> # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see <http://www.gnu.org/licenses/>. # from gi.repository import GObject import sys sys.modules['gobject'] = GObject import argparse import os from firewall.client import FirewallClientIPSetSettings, \ FirewallClientZoneSettings, FirewallClientServiceSettings, \ FirewallClientIcmpTypeSettings, FirewallClientHelperSettings, \ FirewallClientPolicySettings from firewall.errors import FirewallError from firewall import config from firewall.core.fw import Firewall from firewall.functions import joinArgs, splitArgs, getPortRange from firewall.core.io.functions import check_on_disk_config from firewall.core.io.zone import zone_reader from firewall.core.io.policy import policy_reader from firewall.core.io.service import service_reader from firewall.core.io.ipset import ipset_reader from firewall.core.io.icmptype import icmptype_reader from firewall.core.io.helper import helper_reader from firewall.command import FirewallCommand # check for root user def assert_root(): if os.getuid() != 0: sys.stderr.write("You need to be root to run %s.\n" % sys.argv[0]) sys.exit(-1) SYSTEM_CONFIG_FIREWALL = config.SYSCONFIGDIR + '/system-config-firewall' def __usage(): sys.stdout.write(""" Usage: firewall-offline-cmd [OPTIONS...] If no options are given, configuration from '%s' will be migrated. General Options -h, --help Prints a short help text and exits -V, --version Print the version string of firewalld -q, --quiet Do not print status messages --system-config Path to firewalld system configuration --default-config Path to firewalld default configuration --check-config Check system and default configuration --reset-to-defaults Reset configuration to firewalld's default configuration Lokkit Compatibility Options --migrate-system-config-firewall=<file> Import configuration data from the given configuration file. --enabled Enable firewall (default) --disabled Disable firewall --addmodule=<module> Ignored option, was used to enable an iptables module --removemodule=<module> Ignored option, was used to disable an iptables module -s <service>, --service=<service> Enable a service in the default zone (example: ssh) --remove-service=<service> Disable a service in the default zone (example: ssh) -p <port>[-<port>]:<protocol>, --port=<port>[-<port>]:<protocol> Enable a port in the default zone (example: ssh:tcp) -t <interface>, --trust=<interface> Bind an interface to the trusted zone -m <interface>, --masq=<interface> Enables masquerading in the default zone, interface argument is ignored. This is IPv4 only. --custom-rules=[<type>:][<table>:]<filename> Ignored option. Was used to add custom rules to the firewall (Example: ipv4:filter:%s/ipv4_filter_addon) --forward-port=if=<interface>:port=<port>:proto=<protocol>[:toport=<destination port>][:toaddr=<destination address>] Forward the port with protocol for the interface to either another local destination port (no destination address given) or to an other destination address with an optional destination port. This will be added to the default zone. This is IPv4 only. --block-icmp=<icmp type> Block this ICMP type in the default zone. The default is to accept all ICMP types. Log Denied Options --get-log-denied Print the log denied value --set-log-denied=<value> Set log denied value Automatic Helpers Options --get-automatic-helpers Print the automatic helpers value --set-automatic-helpers=<value> Set automatic helpers value Zone Options --get-default-zone Print default zone for connections and interfaces --set-default-zone=<zone> Set default zone --get-zones Print predefined zones --get-services Print predefined services --get-icmptypes Print predefined icmptypes --get-zone-of-interface=<interface> Print name of the zone the interface is bound to --get-zone-of-source=<source>[/<mask>]|<MAC>|ipset:<ipset> Print name of the zone the source is bound to --list-all-zones List everything added for or enabled in all zones --new-zone=<zone> Add a new empty zone --new-zone-from-file=<filename> [--name=<zone>] Add a new zone from file with optional name override [P only] --delete-zone=<zone> Delete an existing zone --load-zone-defaults=<zone> Load zone default settings --zone=<zone> Use this zone to set or query options, else default zone Usable for options marked with [Z] --info-zone=<zone> Print information about a zone --path-zone=<zone> Print file path of a zone Policy Options --get-policies Print predefined policies --list-all-policies List everything added for or enabled in all policies --new-policy=<policy> Add a new empty policy --new-policy-from-file=<filename> [--name=<policy>] Add a new policy from file with optional name override [P only] --delete-policy=<policy> Delete an existing policy --load-policy-defaults=<policy> Load policy default settings --policy=<policy> Use this policy to set or query options Usable for options marked with [O] --info-policy=<policy> Print information about a policy --path-policy=<policy> Print file path of a policy IPSet Options --new-ipset=<ipset> --type=<ipset type> [--option=<key>[=<value>]].. Add a new empty ipset --new-ipset-from-file=<filename> [--name=<ipset>] Add a new ipset from file with optional name override [P only] --delete-ipset=<ipset> Delete an existing ipset --load-ipset-defaults=<ipset> Load ipset default settings --info-ipset=<ipset> Print information about an ipset --path-ipset=<ipset> Print file path of an ipset --get-ipsets Print predefined ipsets --ipset=<ipset> --set-description=<description> Set new description to ipset --ipset=<ipset> --get-description Print description for ipset --ipset=<ipset> --set-short=<description> Set new short description to ipset --ipset=<ipset> --get-short Print short description for ipset --ipset=<ipset> --add-entry=<entry> Add a new entry to an ipset --ipset=<ipset> --remove-entry=<entry> Remove an entry from an ipset --ipset=<ipset> --query-entry=<entry> Return whether ipset has an entry --ipset=<ipset> --get-entries List entries of an ipset --ipset=<ipset> --add-entries-from-file=<entry> Add a new entries to an ipset --ipset=<ipset> --remove-entries-from-file=<entry> Remove entries from an ipset IcmpType Options --new-icmptype=<icmptype> Add a new empty icmptype --new-icmptype-from-file=<filename> [--name=<icmptype>] Add a new icmptype from file with optional name override [P only] --delete-icmptype=<icmptype> Delete an existing icmptype --load-icmptype-defaults=<icmptype> Load icmptype default settings --info-icmptype=<icmptype> Print information about an icmptype --path-icmptype=<icmptype> Print file path of an icmptype --icmptype=<icmptype> --set-description=<description> Set new description to icmptype --icmptype=<icmptype> --get-description Print description for icmptype --icmptype=<icmptype> --set-short=<description> Set new short description to icmptype --icmptype=<icmptype> --get-short Print short description for icmptype --icmptype=<icmptype> --add-destination=<ipv> Enable destination for ipv in icmptype --icmptype=<icmptype> --remove-destination=<ipv> Disable destination for ipv in icmptype --icmptype=<icmptype> --query-destination=<ipv> Return whether destination ipv is enabled in icmptype --icmptype=<icmptype> --get-destinations List destinations in icmptype Service Options --new-service=<service> Add a new empty service --new-service-from-file=<filename> [--name=<service>] Add a new service from file with optional name override [P only] --delete-service=<service> Delete an existing service --load-service-defaults=<service> Load icmptype default settings --info-service=<service> Print information about a service --path-service=<service> Print file path of a service --service=<service> --set-description=<description> Set new description to service --service=<service> --get-description Print description for service --service=<service> --set-short=<description> Set new short description to service --service=<service> --get-short Print short description for service --service=<service> --add-port=<portid>[-<portid>]/<protocol> Add a new port to service --service=<service> --remove-port=<portid>[-<portid>]/<protocol> Remove a port from service --service=<service> --query-port=<portid>[-<portid>]/<protocol> Return whether the port has been added for service --service=<service> --get-ports List ports of service --service=<service> --add-protocol=<protocol> Add a new protocol to service --service=<service> --remove-protocol=<protocol> Remove a protocol from service --service=<service> --query-protocol=<protocol> Return whether the protocol has been added for service --service=<service> --get-protocols List protocols of service --service=<service> --add-source-port=<portid>[-<portid>]/<protocol> Add a new source port to service --service=<service> --remove-source-port=<portid>[-<portid>]/<protocol> Remove a source port from service --service=<service> --query-source-port=<portid>[-<portid>]/<protocol> Return whether the source port has been added for service [P only] --service=<service> --get-source-ports List source ports of service --service=<service> --add-helper=<helper> Add a new helper to service --service=<service> --remove-helper=<helper> Remove a helper from service --service=<service> --query-helper=<helper> Return whether the helper has been added for service --service=<service> --get-service-helpers List helpers of service --service=<service> --set-destination=<ipv>:<address>[/<mask>] Set destination for ipv to address in service --service=<service> --remove-destination=<ipv> Disable destination for ipv i service --service=<service> --query-destination=<ipv>:<address>[/<mask>] Return whether destination ipv is set for service --service=<service> --get-destinations List destinations in service --service=<service> --add-include=<service> Add a new include to service --service=<service> --remove-include=<service> Remove a include from service --service=<service> --query-include=<service> Return whether the include has been added for service --service=<service> --get-includes List includes of service Options to Adapt and Query Zones and Policies --list-all List everything added for or enabled [Z] [O] --set-description=<description> Set new description [Z] [O] --get-description Print description [Z] [O] --get-target Get the target [Z] [O] --set-target=<target> Set the target [Z] [O] --set-short=<description> Set new short description to zone [Z] [O] --get-short Print short description for zone [Z] [O] --list-services List services added [Z] [O] --add-service=<service> Add a service [Z] [O] --remove-service-from-zone=<service> Remove a service from a zone [Z] --remove-service-from-policy=<service> Remove a service from a policy [O] --query-service=<service> Return whether service has been added [Z] [O] --list-ports List ports added [Z] [O] --add-port=<portid>[-<portid>]/<protocol> Add the port [Z] [O] --remove-port=<portid>[-<portid>]/<protocol> Remove the port [Z] [O] --query-port=<portid>[-<portid>]/<protocol> Return whether the port has been added [Z] [O] --list-protocols List protocols added [Z] [O] --add-protocol=<protocol> Add the protocol [Z] [O] --remove-protocol=<protocol> Remove the protocol [Z] [O] --query-protocol=<protocol> Return whether the protocol has been added [Z] [O] --list-source-ports List source ports added [Z] [O] --add-source-port=<portid>[-<portid>]/<protocol> Add the source port [Z] [O] --remove-source-port=<portid>[-<portid>]/<protocol> Remove the source port [Z] [O] --query-source-port=<portid>[-<portid>]/<protocol> Return whether the source port has been added [Z] [O] --list-icmp-blocks List Internet ICMP type blocks added [Z] [O] --add-icmp-block=<icmptype> Add an ICMP block [Z] [O] --remove-icmp-block=<icmptype> Remove the ICMP block [Z] [O] --query-icmp-block=<icmptype> Return whether an ICMP block has been added [Z] [O] --list-forward-ports List IPv4 forward ports added [Z] [O] --add-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]] Add the IPv4 forward port [Z] [O] --remove-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]] Remove the IPv4 forward port [Z] [O] Options to Adapt and Query Zones --add-icmp-block-inversion Enable inversion of icmp blocks for a zone [Z] --remove-icmp-block-inversion Disable inversion of icmp blocks for a zone [Z] --query-icmp-block-inversion Return whether inversion of icmp blocks has been enabled for a zone [Z] --add-forward Enable forwarding of packets between interfaces and sources in a zone [Z] --remove-forward Disable forwarding of packets between interfaces and sources in a zone [Z] --query-forward Return whether forwarding of packets between interfaces and sources has been enabled for a zone [Z] Options to Adapt and Query Policies --get-priority Get the priority [O] --set-priority=<priority> Set the priority [O] --list-ingress-zones List ingress zones that are bound to a policy [O] --add-ingress-zone=<zone> Add the ingress zone to a policy [O] --remove-ingress-zone=<zone> Remove the ingress zone from a policy [O] --query-ingress-zone=<zone> Query whether the ingress zone has been adedd to a policy [O] --list-egress-zones List egress zones that are bound to a policy [O] --add-egress-zone=<zone> Add the egress zone to a policy [O] --remove-egress-zone=<zone> Remove the egress zone from a policy [O] --query-egress-zone=<zone> Query whether the egress zone has been adedd to a policy [O] Options to Handle Bindings of Interfaces --list-interfaces List interfaces that are bound to a zone [Z] --add-interface=<interface> Bind the <interface> to a zone [Z] --change-interface=<interface> Change zone the <interface> is bound to [Z] --query-interface=<interface> Query whether <interface> is bound to a zone [Z] --remove-interface=<interface> Remove binding of <interface> from a zone [Z] Options to Handle Bindings of Sources --list-sources List sources that are bound to a zone [Z] --add-source=<source>[/<mask>]|<MAC>|ipset:<ipset> Bind the source to a zone [Z] --change-source=<source>[/<mask>]|<MAC>|ipset:<ipset> Change zone the source is bound to [Z] --query-source=<source>[/<mask>]|<MAC>|ipset:<ipset> Query whether the source is bound to a zone [Z] --remove-source=<source>[/<mask>]|<MAC>|ipset:<ipset> Remove binding of the source from a zone [Z] Helper Options --new-helper=<helper> --module=<module> [--family=<family>] Add a new helper --new-helper-from-file=<filename> [--name=<helper>] Add a new helper from file with optional name --delete-helper=<helper> Delete an existing helper --load-helper-defaults=<helper> Load helper default settings --info-helper=<helper> Print information about an helper --path-helper=<helper> Print file path of an helper --get-helpers Print predefined helpers --helper=<helper> --set-description=<description> Set new description to helper --helper=<helper> --get-description Print description for helper --helper=<helper> --set-short=<description> Set new short description to helper --helper=<helper> --get-short Print short description for helper --helper=<helper> --add-port=<portid>[-<portid>]/<protocol> Add a new port to helper --helper=<helper> --remove-port=<portid>[-<portid>]/<protocol> Remove a port from helper --helper=<helper> --query-port=<portid>[-<portid>]/<protocol> Return whether the port has been added for helper --helper=<helper> --get-ports List ports of helper --helper=<helper> --set-module=<module> Set module to helper --helper=<helper> --get-module Get module from helper --helper=<helper> --set-family={ipv4|ipv6|} Set family for helper --helper=<helper> --get-family Get module from helper Direct Options --direct First option for all direct options --get-all-chains Get all chains --get-chains {ipv4|ipv6|eb} <table> Get all chains added to the table --add-chain {ipv4|ipv6|eb} <table> <chain> Add a new chain to the table --remove-chain {ipv4|ipv6|eb} <table> <chain> Remove the chain from the table --query-chain {ipv4|ipv6|eb} <table> <chain> Return whether the chain has been added to the table --get-all-rules Get all rules --get-rules {ipv4|ipv6|eb} <table> <chain> Get all rules added to chain in table --add-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>... Add rule to chain in table --remove-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>... Remove rule with priority from chain in table --remove-rules {ipv4|ipv6|eb} <table> <chain> Remove rules from chain in table --query-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>... Return whether a rule with priority has been added to chain in table --get-all-passthroughs Get all passthrough rules --get-passthroughs {ipv4|ipv6|eb} <arg>... Get passthrough rules --add-passthrough {ipv4|ipv6|eb} <arg>... Add a new passthrough rule --remove-passthrough {ipv4|ipv6|eb} <arg>... Remove a passthrough rule --query-passthrough {ipv4|ipv6|eb} <arg>... Return whether the passthrough rule has been added Lockdown Options --lockdown-on Enable lockdown. --lockdown-off Disable lockdown. --query-lockdown Query whether lockdown is enabled Lockdown Whitelist Options --list-lockdown-whitelist-commands List all command lines that are on the whitelist --add-lockdown-whitelist-command=<command> Add the command to the whitelist --remove-lockdown-whitelist-command=<command> Remove the command from the whitelist --query-lockdown-whitelist-command=<command> Query whether the command is on the whitelist --list-lockdown-whitelist-contexts List all contexts that are on the whitelist --add-lockdown-whitelist-context=<context> Add the context context to the whitelist --remove-lockdown-whitelist-context=<context> Remove the context from the whitelist --query-lockdown-whitelist-context=<context> Query whether the context is on the whitelist --list-lockdown-whitelist-uids List all user ids that are on the whitelist --add-lockdown-whitelist-uid=<uid> Add the user id uid to the whitelist --remove-lockdown-whitelist-uid=<uid> Remove the user id uid from the whitelist --query-lockdown-whitelist-uid=<uid> Query whether the user id uid is on the whitelist --list-lockdown-whitelist-users List all user names that are on the whitelist --add-lockdown-whitelist-user=<user> Add the user name user to the whitelist --remove-lockdown-whitelist-user=<user> Remove the user name user from the whitelist --query-lockdown-whitelist-user=<user> Query whether the user name user is on the whitelist Polkit Options --policy-server Change Polkit actions to 'server' (more restricted) --policy-desktop Change Polkit actions to 'desktop' (less restricted) """ % (SYSTEM_CONFIG_FIREWALL, config.SYSCONFIGDIR)) def parse_port_lokkit(value): try: (port, proto) = value.split(":") except Exception: cmd.fail("bad port (most likely missing protocol), correct syntax is portid[-portid]:protocol") return (port, proto) def pk_symlink(product='server'): _PK_DIR = '/usr/share/polkit-1/actions/' _PK_NAME = 'org.fedoraproject.FirewallD1.' os.chdir(_PK_DIR) if os.path.isfile(_PK_NAME+product+'.policy.choice'): if os.path.isfile(_PK_NAME+'policy'): os.remove(_PK_NAME+'policy') os.symlink(_PK_NAME+product+'.policy.choice', _PK_NAME+'policy') cmd.print_and_exit('symlink '+_PK_DIR+_PK_NAME+product+'.policy.choice -> '+_PK_NAME+'policy') else: cmd.fail('no such file '+_PK_DIR+_PK_NAME+product+'.policy.choice') # system-config-firewall def read_sysconfig_args(config_file=SYSTEM_CONFIG_FIREWALL): filename = None if os.path.exists(config_file) and os.path.isfile(config_file): filename = config_file try: f = open(filename, 'r') except Exception: return None argv = [ ] for line in f: if not line: break line = line.strip() if len(line) < 1 or line[0] == '#': continue argv.append(line) f.close() return argv parser = argparse.ArgumentParser(usage="see firewall-offline-cmd man page", add_help=False) parser_group_output = parser.add_mutually_exclusive_group() parser_group_output.add_argument("-v", "--verbose", action="store_true") parser_group_output.add_argument("-q", "--quiet", action="store_true") parser_group_lokkit = parser.add_argument_group() parser_group_lokkit.add_argument("--enabled", action="store_true") parser_group_lokkit.add_argument("--disabled", action="store_true") parser_group_lokkit.add_argument("--addmodule", metavar="<module>", action='append') parser_group_lokkit.add_argument("--removemodule", metavar="<module>", action='append') parser_group_lokkit.add_argument("--service", "-s", metavar="<service>", action='append') parser_group_lokkit.add_argument("--remove-service", metavar="<service>", action='append') parser_group_lokkit.add_argument("--port", "-p", metavar="<port>", action='append') parser_group_lokkit.add_argument("--trust", "-t", metavar="<iface>", action='append') parser_group_lokkit.add_argument("--masq", "-m", metavar="<iface>", action='append') parser_group_lokkit.add_argument("--custom-rules", metavar="<filename>", action='append') parser_group_lokkit.add_argument("--forward-port", metavar="<port>", action='append') parser_group_lokkit.add_argument("--block-icmp", metavar="<icmptype>", action='append') parser.add_argument("--system-config", metavar="path") parser.add_argument("--default-config", metavar="path") parser.add_argument("--check-config", action="store_true") parser_group_standalone = parser.add_mutually_exclusive_group() parser_group_standalone.add_argument("-h", "--help", action="store_true") parser_group_standalone.add_argument("-V", "--version", action="store_true") parser_group_standalone.add_argument("--get-log-denied", action="store_true") parser_group_standalone.add_argument("--set-log-denied", metavar="<value>") parser_group_standalone.add_argument("--get-automatic-helpers", action="store_true") parser_group_standalone.add_argument("--set-automatic-helpers", metavar="<value>") parser_group_standalone.add_argument("--policy-server", action="store_true") parser_group_standalone.add_argument("--policy-desktop", action="store_true") parser_group_standalone.add_argument("--lockdown-on", action="store_true") parser_group_standalone.add_argument("--lockdown-off", action="store_true") parser_group_standalone.add_argument("--query-lockdown", action="store_true") parser_group_standalone.add_argument("--reset-to-defaults", action="store_true") parser_group_standalone.add_argument("--get-default-zone", action="store_true") parser_group_standalone.add_argument("--set-default-zone", metavar="<zone>") parser_group_standalone.add_argument("--get-zones", action="store_true") parser_group_standalone.add_argument("--get-policies", action="store_true") parser_group_standalone.add_argument("--get-services", action="store_true") parser_group_standalone.add_argument("--get-icmptypes", action="store_true") parser_group_standalone.add_argument("--get-zone-of-interface", metavar="<iface>", action='append') parser_group_standalone.add_argument("--get-zone-of-source", metavar="<source>", action='append') parser_group_standalone.add_argument("--list-all-zones", action="store_true") parser_group_standalone.add_argument("--list-all-policies", action="store_true") parser_group_standalone.add_argument("--info-zone", metavar="<zone>") parser_group_standalone.add_argument("--info-policy", metavar="<policy>") parser_group_standalone.add_argument("--info-service", metavar="<service>") parser_group_standalone.add_argument("--info-icmptype", metavar="<icmptype>") parser_group_standalone.add_argument("--info-ipset", metavar="<ipset>") parser_group_standalone.add_argument("--info-helper", metavar="<helper>") parser_group_config = parser.add_mutually_exclusive_group() parser_group_config.add_argument("--new-icmptype", metavar="<icmptype>") parser_group_config.add_argument("--new-icmptype-from-file", metavar="<filename>") parser_group_config.add_argument("--delete-icmptype", metavar="<icmptype>") parser_group_config.add_argument("--load-icmptype-defaults", metavar="<icmptype>") parser_group_config.add_argument("--new-service", metavar="<service>") parser_group_config.add_argument("--new-service-from-file", metavar="<filename>") parser_group_config.add_argument("--delete-service", metavar="<service>") parser_group_config.add_argument("--load-service-defaults", metavar="<service>") parser_group_config.add_argument("--new-zone", metavar="<zone>") parser_group_config.add_argument("--new-zone-from-file", metavar="<filename>") parser_group_config.add_argument("--delete-zone", metavar="<zone>") parser_group_config.add_argument("--load-zone-defaults", metavar="<zone>") parser_group_config.add_argument("--new-policy", metavar="<policy>") parser_group_config.add_argument("--new-policy-from-file", metavar="<filename>") parser_group_config.add_argument("--delete-policy", metavar="<policy>") parser_group_config.add_argument("--load-policy-defaults", metavar="<policy>") parser_group_config.add_argument("--new-ipset", metavar="<ipset>") parser_group_config.add_argument("--new-ipset-from-file", metavar="<filename>") parser_group_config.add_argument("--delete-ipset", metavar="<ipset>") parser_group_config.add_argument("--load-ipset-defaults", metavar="<ipset>") parser_group_config.add_argument("--new-helper", metavar="<helper>") parser_group_config.add_argument("--new-helper-from-file", metavar="<filename>") parser_group_config.add_argument("--delete-helper", metavar="<helper>") parser_group_config.add_argument("--load-helper-defaults", metavar="<helper>") parser_group_config.add_argument("--path-zone", metavar="<zone>") parser_group_config.add_argument("--path-policy", metavar="<policy>") parser_group_config.add_argument("--path-service", metavar="<service>") parser_group_config.add_argument("--path-icmptype", metavar="<icmptype>") parser_group_config.add_argument("--path-ipset", metavar="<ipset>") parser_group_config.add_argument("--path-helper", metavar="<helper>") parser.add_argument("--name", default="", metavar="<name>") parser_group_lockdown_whitelist = parser.add_mutually_exclusive_group() parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-commands", action="store_true") parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-command", metavar="<command>", action='append') parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-command", metavar="<command>", action='append') parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-command", metavar="<command>", action='append') parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-contexts", action="store_true") parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-context", metavar="<context>", action='append') parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-context", metavar="<context>", action='append') parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-context", metavar="<context>", action='append') parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-uids", action="store_true") parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-uid", metavar="<uid>", type=int, action='append') parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-uid", metavar="<uid>", type=int, action='append') parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-uid", metavar="<uid>", type=int, action='append') parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-users", action="store_true") parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-user", metavar="<user>", action='append') parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-user", metavar="<user>", action='append') parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-user", metavar="<user>", action='append') parser.add_argument("--zone", default="", metavar="<zone>") parser.add_argument("--policy", default="", metavar="<policy>") parser_group_zone_or_policy = parser.add_mutually_exclusive_group() parser_group_zone_or_policy.add_argument("--add-interface", metavar="<iface>", action='append') parser_group_zone_or_policy.add_argument("--remove-interface", metavar="<iface>", action='append') parser_group_zone_or_policy.add_argument("--query-interface", metavar="<iface>", action='append') parser_group_zone_or_policy.add_argument("--change-interface", "--change-zone", metavar="<iface>", action='append') parser_group_zone_or_policy.add_argument("--list-interfaces", action="store_true") parser_group_zone_or_policy.add_argument("--add-source", metavar="<source>", action='append') parser_group_zone_or_policy.add_argument("--remove-source", metavar="<source>", action='append') parser_group_zone_or_policy.add_argument("--query-source", metavar="<source>", action='append') parser_group_zone_or_policy.add_argument("--change-source", metavar="<source>", action='append') parser_group_zone_or_policy.add_argument("--list-sources", action="store_true") parser_group_zone_or_policy.add_argument("--add-ingress-zone", metavar="<zone>", action='append') parser_group_zone_or_policy.add_argument("--remove-ingress-zone", metavar="<zone>", action='append') parser_group_zone_or_policy.add_argument("--query-ingress-zone", metavar="<zone>", action='append') parser_group_zone_or_policy.add_argument("--list-ingress-zones", action="store_true") parser_group_zone_or_policy.add_argument("--add-egress-zone", metavar="<zone>", action='append') parser_group_zone_or_policy.add_argument("--remove-egress-zone", metavar="<zone>", action='append') parser_group_zone_or_policy.add_argument("--query-egress-zone", metavar="<zone>", action='append') parser_group_zone_or_policy.add_argument("--list-egress-zones", action="store_true") parser_group_zone_or_policy.add_argument("--add-rich-rule", metavar="<rule>", action='append') parser_group_zone_or_policy.add_argument("--remove-rich-rule", metavar="<rule>", action='append') parser_group_zone_or_policy.add_argument("--query-rich-rule", metavar="<rule>", action='append') parser_group_zone_or_policy.add_argument("--add-service", metavar="<service>", action='append') parser_group_zone_or_policy.add_argument("--remove-service-from-zone", metavar="<service>", action='append') parser_group_zone_or_policy.add_argument("--remove-service-from-policy", metavar="<service>", action='append') parser_group_zone_or_policy.add_argument("--query-service", metavar="<service>", action='append') parser_group_zone_or_policy.add_argument("--add-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--remove-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--query-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--add-protocol", metavar="<protocol>", action='append') parser_group_zone_or_policy.add_argument("--remove-protocol", metavar="<protocol>", action='append') parser_group_zone_or_policy.add_argument("--query-protocol", metavar="<protocol>", action='append') parser_group_zone_or_policy.add_argument("--add-source-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--remove-source-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--query-source-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--add-forward", action="store_true") parser_group_zone_or_policy.add_argument("--remove-forward", action="store_true") parser_group_zone_or_policy.add_argument("--query-forward", action="store_true") parser_group_zone_or_policy.add_argument("--add-masquerade", action="store_true") parser_group_zone_or_policy.add_argument("--remove-masquerade", action="store_true") parser_group_zone_or_policy.add_argument("--query-masquerade", action="store_true") parser_group_zone_or_policy.add_argument("--add-icmp-block", metavar="<icmptype>", action='append') parser_group_zone_or_policy.add_argument("--remove-icmp-block", metavar="<icmptype>", action='append') parser_group_zone_or_policy.add_argument("--query-icmp-block", metavar="<icmptype>", action='append') parser_group_zone_or_policy.add_argument("--add-icmp-block-inversion", action="store_true") parser_group_zone_or_policy.add_argument("--remove-icmp-block-inversion", action="store_true") parser_group_zone_or_policy.add_argument("--query-icmp-block-inversion", action="store_true") parser_group_zone_or_policy.add_argument("--add-forward-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--remove-forward-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--query-forward-port", metavar="<port>", action='append') parser_group_zone_or_policy.add_argument("--list-rich-rules", action="store_true") parser_group_zone_or_policy.add_argument("--list-services", action="store_true") parser_group_zone_or_policy.add_argument("--list-ports", action="store_true") parser_group_zone_or_policy.add_argument("--list-protocols", action="store_true") parser_group_zone_or_policy.add_argument("--list-icmp-blocks", action="store_true") parser_group_zone_or_policy.add_argument("--list-forward-ports", action="store_true") parser_group_zone_or_policy.add_argument("--list-source-ports", action="store_true") parser_group_zone_or_policy.add_argument("--list-all", action="store_true") parser_group_zone_or_policy.add_argument("--get-target", action="store_true") parser_group_zone_or_policy.add_argument("--set-target", metavar="<target>") parser_group_zone_or_policy.add_argument("--get-priority", action="store_true") parser_group_zone_or_policy.add_argument("--set-priority", metavar="<priority>") parser.add_argument("--option", metavar="<key>[=<value>]", action='append') parser.add_argument("--type", metavar="<ipsettype>") parser.add_argument("--ipset", metavar="<ipset>") parser_ipset = parser.add_mutually_exclusive_group() #parser_ipset.add_argument("--add-option", metavar="<key>[=<value>]") #parser_ipset.add_argument("--remove-option", metavar="<key>[=<value>]") #parser_ipset.add_argument("--query-option", metavar="<key>[=<value>]") #parser_ipset.add_argument("--get-options", action="store_true") parser_ipset.add_argument("--get-ipsets", action="store_true") parser_ipset.add_argument("--add-entry", metavar="<entry>", action='append') parser_ipset.add_argument("--remove-entry", metavar="<entry>", action='append') parser_ipset.add_argument("--query-entry", metavar="<entry>", action='append') parser_ipset.add_argument("--get-entries", action="store_true") parser_ipset.add_argument("--add-entries-from-file", metavar="<filename>", action='append') parser_ipset.add_argument("--remove-entries-from-file", metavar="<filename>", action='append') parser.add_argument("--icmptype", metavar="<icmptype>") parser_icmptype = parser.add_mutually_exclusive_group() parser_icmptype.add_argument("--add-destination", metavar="<ipv>", action='append') parser_icmptype.add_argument("--remove-destination", metavar="<ipv>", action='append') parser_icmptype.add_argument("--query-destination", metavar="<ipv>", action='append') parser_icmptype.add_argument("--get-destinations", action="store_true") parser_service = parser.add_mutually_exclusive_group() parser_service.add_argument("--get-ports", action="store_true") parser_service.add_argument("--get-source-ports", action="store_true") parser_service.add_argument("--get-protocols", action="store_true") parser_service.add_argument("--add-module", metavar="<module>", action='append') parser_service.add_argument("--remove-module", metavar="<module>", action='append') parser_service.add_argument("--query-module", metavar="<module>", action='append') parser_service.add_argument("--get-modules", action="store_true") parser_service.add_argument("--add-helper", metavar="<helper>", action='append') parser_service.add_argument("--remove-helper", metavar="<helper>", action='append') parser_service.add_argument("--query-helper", metavar="<helper>", action='append') parser_service.add_argument("--get-service-helpers", action="store_true") parser_service.add_argument("--add-include", metavar="<service>", action='append') parser_service.add_argument("--remove-include", metavar="<service>", action='append') parser_service.add_argument("--query-include", metavar="<service>", action='append') parser_service.add_argument("--get-includes", action="store_true") parser_service.add_argument("--set-destination", metavar="<destination>", action='append') parser_service.add_argument("--get-destination", action="store_true") parser_service.add_argument("--set-description", metavar="<description>") parser_service.add_argument("--get-description", action="store_true") parser_service.add_argument("--set-short", metavar="<description>") parser_service.add_argument("--get-short", action="store_true") parser.add_argument("--helper", metavar="<helper>") parser.add_argument("--family", metavar="<family>") parser.add_argument("--module", metavar="<module>") parser_helper = parser.add_mutually_exclusive_group() #parser_helper.add_argument("--get-ports", action="store_true") parser_helper.add_argument("--get-helpers", action="store_true") parser_helper.add_argument("--set-module", metavar="<module>") parser_helper.add_argument("--get-module", action="store_true") #parser_helper.add_argument("--query-module", metavar="<module>") parser_helper.add_argument("--set-family", metavar="<family>|''", nargs="*") parser_helper.add_argument("--get-family", action="store_true") parser.add_argument("--direct", action="store_true") # not possible to have sequences of options here parser_direct = parser.add_mutually_exclusive_group() parser_direct.add_argument("--add-passthrough", nargs=argparse.REMAINDER, metavar=("{ ipv4 | ipv6 | eb }", "<args>")) parser_direct.add_argument("--remove-passthrough", nargs=argparse.REMAINDER, metavar=("{ ipv4 | ipv6 | eb }", "<args>")) parser_direct.add_argument("--query-passthrough", nargs=argparse.REMAINDER, metavar=("{ ipv4 | ipv6 | eb }", "<args>")) parser_direct.add_argument("--get-passthroughs", nargs=1, metavar=("{ ipv4 | ipv6 | eb }")) parser_direct.add_argument("--get-all-passthroughs", action="store_true") parser_direct.add_argument("--add-chain", nargs=3, metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>")) parser_direct.add_argument("--remove-chain", nargs=3, metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>")) parser_direct.add_argument("--query-chain", nargs=3, metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>")) parser_direct.add_argument("--get-all-chains", action="store_true") parser_direct.add_argument("--get-chains", nargs=2, metavar=("{ ipv4 | ipv6 | eb }", "<table>")) parser_direct.add_argument("--add-rule", nargs=argparse.REMAINDER, metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain> <priority> <args>")) parser_direct.add_argument("--remove-rule", nargs=argparse.REMAINDER, metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain> <priority> <args>")) parser_direct.add_argument("--remove-rules", nargs=3, metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain>")) parser_direct.add_argument("--query-rule", nargs=argparse.REMAINDER, metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain> <priority> <args>")) parser_direct.add_argument("--get-rules", nargs=3, metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>")) parser_direct.add_argument("--get-all-rules", action="store_true") ############################################################################## cmd = FirewallCommand() def myexcepthook(exctype, value, traceback): cmd.exception_handler(str(value)) sys.excepthook = myexcepthook if len(sys.argv) > 1 and \ any('--migrate-system-config-firewall' in arg for arg in sys.argv): args = sys.argv[1:] migration_parser = argparse.ArgumentParser( usage="see firewall-offline-cmd man page", add_help=False) migration_parser.add_argument("-h", "--help", action="store_true") migration_parser.add_argument("-v", "--verbose", action="store_true") migration_parser.add_argument("-q", "--quiet", action="store_true") migration_parser.add_argument("--migrate-system-config-firewall", metavar="<file>", action='store') a,unknown = migration_parser.parse_known_args(args) cmd.set_quiet(a.quiet) cmd.set_verbose(a.verbose) if a.help: __usage() sys.exit(0) else: assert_root() if a.quiet: # it makes no sense to use --quiet with these options a.quiet = False cmd.set_quiet(a.quiet) cmd.fail("-q/--quiet can't be used with this option(s)") if a.migrate_system_config_firewall: args = read_sysconfig_args(a.migrate_system_config_firewall) if not args: cmd.fail("Opening of '%s' failed, exiting." % \ a.migrate_system_config_firewall) args += unknown elif len(sys.argv) > 1: i = -1 args = sys.argv[1:] if '--add-passthrough' in args: i = args.index('--add-passthrough') + 1 elif '--remove-passthrough' in args: i = args.index('--remove-passthrough') + 1 elif '--query-passthrough' in args: i = args.index('--query-passthrough') + 1 elif '--add-rule' in args: i = args.index('--add-rule') + 4 elif '--remove-rule' in args: i = args.index('--remove-rule') + 4 elif '--query-rule' in args: i = args.index('--query-rule') + 4 # join <args> into one argument to prevent parser from parsing each iptables # option, because they can conflict with firewall-cmd options # # e.g. --delete (iptables) and --delete-* (firewall-cmd) if (i > -1) and (i < len(args) - 1): aux_args = args[:] args = aux_args[:i+1] # all but not <args> args.append(joinArgs(aux_args[i+1:])) # add <args> as one arg else: assert_root() # migrate configuration from SYSTEM_CONFIG_FIREWALL args = read_sysconfig_args() if not args: cmd.fail("Opening of '%s' failed, exiting." % SYSTEM_CONFIG_FIREWALL) a = parser.parse_args(args) options_lokkit = a.enabled or a.disabled or a.addmodule or a.removemodule or \ a.trust or a.masq or a.custom_rules or \ a.service or a.remove_service or a.port or \ a.trust or a.masq or a.forward_port or a.block_icmp options_standalone = a.help or a.version or \ a.policy_server or a.policy_desktop or \ a.lockdown_on or a.lockdown_off or a.query_lockdown or \ a.reset_to_defaults or a.get_default_zone or a.set_default_zone or \ a.get_log_denied or a.set_log_denied or \ a.get_automatic_helpers or a.set_automatic_helpers options_desc_xml_file = a.set_description or a.get_description or \ a.set_short or a.get_short options_lockdown_whitelist = \ a.list_lockdown_whitelist_commands or a.add_lockdown_whitelist_command or \ a.remove_lockdown_whitelist_command or \ a.query_lockdown_whitelist_command or \ a.list_lockdown_whitelist_contexts or a.add_lockdown_whitelist_context or \ a.remove_lockdown_whitelist_context or \ a.query_lockdown_whitelist_context or \ a.list_lockdown_whitelist_uids or a.add_lockdown_whitelist_uid is not None or \ a.remove_lockdown_whitelist_uid is not None or \ a.query_lockdown_whitelist_uid is not None or \ a.list_lockdown_whitelist_users or a.add_lockdown_whitelist_user or \ a.remove_lockdown_whitelist_user or \ a.query_lockdown_whitelist_user options_config = a.get_zones or a.get_services or a.get_icmptypes or \ options_lockdown_whitelist or a.list_all_zones or \ a.get_zone_of_interface or a.get_zone_of_source or \ a.info_zone or a.info_icmptype or a.info_service or \ a.info_ipset or a.info_policy or a.get_ipsets or a.info_helper or \ a.get_helpers or a.get_policies or a.list_all_policies options_zone_and_policy_adapt_query = \ a.add_service or a.remove_service_from_zone or a.query_service or \ a.add_port or a.remove_port or a.query_port or \ a.add_protocol or a.remove_protocol or a.query_protocol or \ a.add_source_port or a.remove_source_port or a.query_source_port or \ a.add_icmp_block or a.remove_icmp_block or a.query_icmp_block or \ a.add_forward_port or a.remove_forward_port or a.query_forward_port or \ a.add_rich_rule or a.remove_rich_rule or a.query_rich_rule or \ a.add_masquerade or a.remove_masquerade or a.query_masquerade or \ a.list_services or a.list_ports or a.list_protocols or \ a.list_source_ports or \ a.list_icmp_blocks or a.list_forward_ports or a.list_rich_rules or \ a.list_all or a.get_target or a.set_target options_zone_unique = \ a.add_icmp_block_inversion or a.remove_icmp_block_inversion or \ a.query_icmp_block_inversion or \ a.add_forward or a.remove_forward or a.query_forward or \ a.list_interfaces or a.change_interface or \ a.add_interface or a.remove_interface or a.query_interface or \ a.list_sources or a.change_source or \ a.add_source or a.remove_source or a.query_source options_zone_ops = options_zone_unique or options_zone_and_policy_adapt_query options_policy_unique = \ a.list_ingress_zones or a.add_ingress_zone or \ a.remove_ingress_zone or a.query_ingress_zone or \ a.list_egress_zones or a.add_egress_zone or \ a.remove_egress_zone or a.query_egress_zone or \ a.set_priority or a.get_priority options_policy_ops = options_policy_unique or options_zone_and_policy_adapt_query options_zone = a.zone or options_zone_ops or options_desc_xml_file options_policy = a.policy or options_policy_ops or options_desc_xml_file options_ipset = a.add_entry or a.remove_entry or a.query_entry or \ a.get_entries or a.add_entries_from_file or \ a.remove_entries_from_file or options_desc_xml_file options_icmptype = a.add_destination or a.remove_destination or \ a.query_destination or a.get_destinations or \ options_desc_xml_file options_service = a.add_port or a.remove_port or a.query_port or \ a.get_ports or \ a.add_protocol or a.remove_protocol or a.query_protocol or \ a.get_protocols or \ a.add_source_port or a.remove_source_port or \ a.query_source_port or a.get_source_ports or \ a.add_module or a.remove_module or a.query_module or \ a.get_modules or \ a.set_destination or a.remove_destination or \ a.query_destination or a.get_destinations or \ options_desc_xml_file or \ a.add_include or a.remove_include or a.query_include or \ a.get_includes or \ a.add_helper or a.remove_helper or a.query_helper or \ a.get_service_helpers options_helper = a.add_port or a.remove_port or a.query_port or \ a.get_ports or a.set_module or a.get_module or \ a.set_family or a.get_family or \ options_desc_xml_file options_permanent = options_config or options_zone or options_policy or \ a.new_icmptype or a.delete_icmptype or \ a.new_icmptype_from_file or \ a.load_icmptype_defaults or \ a.new_service or a.delete_service or \ a.new_service_from_file or \ a.load_service_defaults or \ a.new_zone or a.delete_zone or \ a.new_zone_from_file or \ a.load_zone_defaults or \ a.new_policy or a.delete_policy or \ a.new_policy_from_file or \ a.load_policy_defaults or \ a.new_helper or a.delete_helper or \ a.new_helper_from_file or \ a.load_helper_defaults or \ a.new_ipset or a.delete_ipset or \ a.new_ipset_from_file or \ a.load_ipset_defaults or \ a.ipset or options_ipset or \ (a.icmptype and options_icmptype) or \ (a.service and options_service) or \ (a.helper and options_helper) or \ a.path_zone or a.path_icmptype or a.path_service or \ a.path_ipset or a.path_helper or a.path_policy options_direct = \ a.add_chain or a.remove_chain or a.query_chain or \ a.get_chains or a.get_all_chains or \ a.add_rule or a.remove_rule or a.remove_rules or a.query_rule or \ a.get_rules or a.get_all_rules or \ a.add_passthrough or a.remove_passthrough or a.query_passthrough or \ a.get_passthroughs or a.get_all_passthroughs # these are supposed to only write out some output options_list_get = a.help or a.version or a.list_all or a.list_all_zones or \ a.list_lockdown_whitelist_commands or a.list_lockdown_whitelist_contexts or \ a.list_lockdown_whitelist_uids or a.list_lockdown_whitelist_users or \ a.list_services or a.list_ports or a.list_protocols or a.list_icmp_blocks or \ a.list_forward_ports or a.list_rich_rules or a.list_interfaces or \ a.list_sources or a.get_default_zone or \ a.get_zone_of_interface or a.get_zone_of_source or a.get_zones or \ a.get_services or a.get_icmptypes or a.get_target or \ a.info_zone or a.info_icmptype or a.info_service or \ a.info_ipset or a.get_ipsets or a.get_entries or \ a.info_helper or a.get_helpers or \ a.get_destinations or a.get_description or \ a.list_all_policies or a.info_policy or a.get_policies # Set quiet and verbose cmd.set_quiet(a.quiet) cmd.set_verbose(a.verbose) # Check various impossible combinations of options if not (options_standalone or options_ipset or \ options_lokkit or \ options_icmptype or options_service or options_helper or \ options_permanent or options_direct or options_desc_xml_file or \ a.check_config): cmd.fail(parser.format_usage() + "No option specified.") if options_lokkit and (options_standalone or \ options_permanent or options_direct) and \ not (options_service and a.service): cmd.fail(parser.format_usage() + "Can't use lokkit options with other options.") if options_standalone and (options_permanent or \ options_direct or options_ipset): cmd.fail(parser.format_usage() + "Can't use stand-alone options with other options.") if options_ipset and not options_desc_xml_file and not a.ipset: cmd.fail(parser.format_usage() + "No ipset specified.") if (options_icmptype and not a.icmptype) and \ not (options_service and a.service) and not options_desc_xml_file: cmd.fail(parser.format_usage() + "No icmptype specified.") if options_service and a.service and len(a.service) > 0: if len(a.service) > 1: cmd.fail(parser.format_usage() + "More than one service specified.") # use the first entry in the array only a.service = a.service[0] if (options_helper and not a.helper) and \ not (options_service and a.service) and \ not options_zone and not options_desc_xml_file and \ not options_policy: cmd.fail(parser.format_usage() + "No helper specified.") if options_direct and (options_zone or options_policy): cmd.fail(parser.format_usage() + "Can't use 'direct' options with other options.") if (a.direct and not options_direct) or (options_direct and not a.direct): cmd.fail(parser.format_usage() + "Wrong usage of 'direct' options.") if a.name and not (a.new_zone_from_file or a.new_service_from_file or \ a.new_ipset_from_file or a.new_icmptype_from_file or \ a.new_helper_from_file or a.new_policy_from_file): cmd.fail(parser.format_usage() + "Wrong usage of '--name' option.") if options_config and (options_zone or options_policy): cmd.fail(parser.format_usage() + "Wrong usage of --get-zones | --get-services | --get-icmptypes | --get-policies.") if a.quiet and options_list_get: # it makes no sense to use --quiet with these options a.quiet = False cmd.set_quiet(a.quiet) cmd.fail("-q/--quiet can't be used with this option(s)") if a.zone and a.policy: cmd.fail(parser.format_usage() + "Can't use --zone with --policy.") if a.policy and options_zone_unique: cmd.fail(parser.format_usage() + "Can't use --policy with zone only options.") if a.zone and options_policy_unique: cmd.fail(parser.format_usage() + "Can't use --zone with policy only options.") if not a.policy and options_policy_unique: cmd.fail(parser.format_usage() + "Must use --policy with policy only options.") if a.help: __usage() sys.exit(0) assert_root() if a.system_config: config.set_system_config_paths(a.system_config) if a.default_config: config.set_default_config_paths(a.default_config) if a.check_config: try: fw = Firewall(offline=True) fw.start() check_on_disk_config(fw) except FirewallError as error: cmd.print_and_exit("Configuration error: %s" % error, error.code) except Exception as msg: cmd.fail("Configuration error: %s" % msg) sys.exit(0) zone = a.zone fw = Firewall(offline=True) fw.start() try: # Lokkit Compatibility Options if options_lokkit and not (options_service and a.service): trusted_zone = "trusted" default_zone = fw.get_default_zone() fw_zone = fw.config.get_zone(default_zone) fw_settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(fw_zone)) if a.enabled: # Enable firewall (default) os.system("systemctl enable firewalld.service") if a.disabled: # Disable firewall os.system("systemctl disable firewalld.service") if a.addmodule: for m in a.addmodule: cmd.print_msg("Ignoring addmodule '%s'" % m) if a.removemodule: for m in a.removemodule: cmd.print_msg("Ignoring removemodule '%s'" % m) if a.custom_rules: for c in a.custom_rules: cmd.print_msg("Ignoring custom-rule '%s'" % c) if a.service: for s in a.service: cmd.print_msg("Adding service '%s' to default zone." % s) if not fw_settings.queryService(s): fw_settings.addService(s) else: cmd.print_msg("ALREADY_ENABLED: %s" % s) if a.remove_service: for s in a.remove_service: cmd.print_msg("Removing service '%s' from default zone." % s) if fw_settings.queryService(s): fw_settings.removeService(s) else: cmd.print_msg("NOT_ENABLED: %s" % s) if a.port: for port_proto in a.port: (port, proto) = parse_port_lokkit(port_proto) cmd.print_msg("Adding port '%s/%s' to default zone." % (port, proto)) if not fw_settings.queryPort(port, proto): fw_settings.addPort(port, proto) else: cmd.print_msg("ALREADY_ENABLED: %s" % port_proto) if a.trust: if default_zone != trusted_zone: fw_trusted = fw.config.get_zone("trusted") fw_trusted_settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(fw_trusted)) # Bind an interface to the trusted zone for i in a.trust: cmd.print_msg("Interface '%s' will be bound to zone '%s'." % \ (i, trusted_zone)) if not fw_trusted_settings.queryInterface(i): fw_trusted_settings.addInterface(i) else: cmd.print_msg("ALREADY_ENABLED: %s" % i) fw.config.set_zone_config_dict(fw_trusted, fw_trusted_settings.getSettingsDict()) else: for i in a.trust: cmd.print_msg("Interface '%s' will be bound to zone '%s'." % \ (i, trusted_zone)) if not fw_settings.queryInterface(i): fw_settings.addInterface(i) else: cmd.print_msg("ALREADY_ENABLED: %s" % i) if a.masq: # Enables masquerading in the default zone, interface argument is ignored cmd.print_msg("Enabling masquerade for the default zone.") fw_settings.setMasquerade(True) if a.forward_port: for fp in a.forward_port: (port, protocol, toport, toaddr) = cmd.parse_forward_port( fp, compat=True) cmd.print_msg("Adding forward port %s:%s:%s:%s to default zone." % \ (port, protocol, toport, toaddr)) if not fw_settings.queryForwardPort(port, protocol, toport, toaddr): fw_settings.addForwardPort(port, protocol, toport, toaddr) else: cmd.print_msg("ALREADY_ENABLED: %s" % fp) if a.block_icmp: for ib in a.block_icmp: cmd.print_msg("Adding icmpblock '%s' to default zone." % ib) if not fw_settings.queryIcmpBlock(ib): fw_settings.addIcmpBlock(ib) else: cmd.print_msg("ALREADY_ENABLED: %s" % ib) fw.config.set_zone_config_dict(fw_zone, fw_settings.getSettingsDict()) elif a.version: cmd.print_and_exit(config.VERSION) elif a.get_log_denied: cmd.print_and_exit(fw.get_log_denied()) elif a.set_log_denied: fw.set_log_denied(a.set_log_denied) elif a.get_automatic_helpers: cmd.print_and_exit(fw.get_automatic_helpers()) elif a.set_automatic_helpers: fw.set_automatic_helpers(a.set_automatic_helpers) elif a.policy_server: pk_symlink('server') elif a.policy_desktop: pk_symlink('desktop') # options from firewall-cmd elif a.get_default_zone: cmd.print_and_exit(fw.get_default_zone()) elif a.set_default_zone: fw.set_default_zone(a.set_default_zone) # lockdown elif a.lockdown_on: fw.enable_lockdown() elif a.lockdown_off: fw.disable_lockdown() elif a.query_lockdown: cmd.print_query_result(fw.policies.query_lockdown()) # reset defaults elif a.reset_to_defaults: fw.config.reset_defaults() # zones elif a.get_zones: zones = fw.config.get_zones() cmd.print_and_exit(" ".join(zones)) elif a.new_zone: fw.config.new_zone_dict(a.new_zone, FirewallClientZoneSettings().getSettingsDict()) elif a.new_zone_from_file: filename = os.path.basename(a.new_zone_from_file) dirname = os.path.dirname(a.new_zone_from_file) if dirname == "": dirname = "./" try: obj = zone_reader(filename, dirname) except FirewallError as msg: cmd.print_and_exit("Failed to load zone file '%s': %s" % \ (a.new_zone_from_file, msg), msg.code) except IOError as msg: cmd.fail("Failed to load zone file: %s" % msg) if a.name: obj.name = a.name fw.config.new_zone(obj.name, obj.export_config()) elif a.delete_zone: obj = fw.config.get_zone(a.delete_zone) fw.config.remove_zone(obj) elif a.load_zone_defaults: obj = fw.config.get_zone(a.load_zone_defaults) fw.config.load_zone_defaults(obj) elif a.info_zone: zone = fw.config.get_zone(a.info_zone) settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(zone)) cmd.print_zone_info(a.info_zone, settings, True) sys.exit(0) elif a.path_zone: obj = fw.config.get_zone(a.path_zone) cmd.print_and_exit("%s/%s" % (obj.path, obj.filename)) # policies elif a.get_policies: policies = fw.config.get_policy_objects() cmd.print_and_exit(" ".join(policies)) elif a.new_policy: fw.config.new_policy_object_dict(a.new_policy, FirewallClientPolicySettings().getSettingsDict()) elif a.new_policy_from_file: filename = os.path.basename(a.new_policy_from_file) dirname = os.path.dirname(a.new_policy_from_file) if dirname == "": dirname = "./" try: obj = policy_reader(filename, dirname) except FirewallError as msg: cmd.print_and_exit("Failed to load policy file '%s': %s" % \ (a.new_policy_from_file, msg), msg.code) except IOError as msg: cmd.fail("Failed to load policy file: %s" % msg) if a.name: obj.name = a.name fw.config.new_policy_object_dict(obj.name, obj.export_config_dict()) elif a.delete_policy: obj = fw.config.get_policy_object(a.delete_policy) fw.config.remove_policy_object(obj) elif a.load_policy_defaults: obj = fw.config.get_policy_object(a.load_policy_defaults) fw.config.load_policy_object_defaults(obj) elif a.info_policy: policy = fw.config.get_policy_object(a.info_policy) settings = FirewallClientPolicySettings(fw.config.get_policy_object_config_dict(policy)) cmd.print_policy_info(a.info_policy, settings, True) sys.exit(0) elif a.path_policy: obj = fw.config.get_policy_object(a.path_policy) cmd.print_and_exit("%s/%s" % (obj.path, obj.filename)) # services elif a.get_services: services = fw.config.get_services() cmd.print_and_exit(" ".join(services)) elif a.new_service: fw.config.new_service_dict(a.new_service, FirewallClientServiceSettings().getSettingsDict()) elif a.new_service_from_file: filename = os.path.basename(a.new_service_from_file) dirname = os.path.dirname(a.new_service_from_file) if dirname == "": dirname = "./" try: obj = service_reader(filename, dirname) except FirewallError as msg: cmd.print_and_exit("Failed to load service file '%s': %s" % \ (a.new_service_from_file, msg), msg.code) except IOError as msg: cmd.fail("Failed to load service file: %s" % msg) if a.name: obj.name = a.name fw.config.new_service_dict(obj.name, obj.export_config_dict()) elif a.delete_service: obj = fw.config.get_service(a.delete_service) fw.config.remove_service(obj) # remove service from all zones zones = fw.config.get_zones() for zone in zones: _zone = fw.config.get_zone(zone) _settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(_zone)) if _settings.queryService(a.delete_service): _settings.removeService(a.delete_service) fw.config.set_zone_config_dict(_zone, _settings.getSettingsDict()) # remove service from all policies for policy in fw.config.get_policy_objects(): _policy = fw.config.get_policy_object(policy) _settings = FirewallClientPolicySettings(fw.config.get_policy_object_config_dict(_policy)) if _settings.queryService(a.delete_service): _settings.removeService(a.delete_service) fw.config.set_policy_object_config_dict(_policy, _settings.getSettingsDict()) elif a.load_service_defaults: obj = fw.config.get_service(a.load_service_defaults) fw.config.load_service_defaults(obj) elif a.info_service: service = fw.config.get_service(a.info_service) settings = FirewallClientServiceSettings( fw.config.get_service_config_dict(service)) cmd.print_service_info(a.info_service, settings) sys.exit(0) elif a.path_service: obj = fw.config.get_service(a.path_service) cmd.print_and_exit("%s/%s" % (obj.path, obj.filename)) # icmptypes elif a.get_icmptypes: icmptypes = fw.config.get_icmptypes() cmd.print_and_exit(" ".join(icmptypes)) elif a.new_icmptype: fw.config.new_icmptype(a.new_icmptype, FirewallClientIcmpTypeSettings().settings) elif a.new_icmptype_from_file: filename = os.path.basename(a.new_icmptype_from_file) dirname = os.path.dirname(a.new_icmptype_from_file) if dirname == "": dirname = "./" try: obj = icmptype_reader(filename, dirname) except FirewallError as msg: cmd.print_and_exit("Failed to load icmptype file '%s': %s" % \ (a.new_icmptype_from_file, msg), msg.code) except IOError as msg: cmd.fail("Failed to load icmptype file: %s" % msg) if a.name: obj.name = a.name fw.config.new_icmptype(obj.name, obj.export_config()) elif a.delete_icmptype: obj = fw.config.get_icmptype(a.delete_icmptype) fw.config.remove_icmptype(obj) # remove icmpyte from all zones zones = fw.config.get_zones() for zone in zones: _zone = fw.config.get_zone(zone) _settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(_zone)) if _settings.queryIcmpBlock(a.delete_icmptype): _settings.removeIcmpBlock(a.delete_icmptype) fw.config.set_zone_config_dict(_zone, _settings.getSettingsDict()) for policy in fw.config.get_policy_objects(): _policy = fw.config.get_policy_object(policy) _settings = FirewallClientPolicySettings(fw.config.get_policy_object_config_dict(_policy)) if _settings.queryIcmpBlock(a.delete_icmptype): _settings.removeIcmpBlock(a.delete_icmptype) fw.config.set_policy_object_config_dict(_policy, _settings.getSettingsDict()) elif a.load_icmptype_defaults: obj = fw.config.get_icmptype(a.load_icmptype_defaults) fw.config.load_icmptype_defaults(obj) elif a.info_icmptype: icmptype = fw.config.get_icmptype(a.info_icmptype) settings = FirewallClientIcmpTypeSettings( list(fw.config.get_icmptype_config(icmptype))) cmd.print_icmptype_info(a.info_icmptype, settings) sys.exit(0) elif a.path_icmptype: obj = fw.config.get_icmptype(a.path_icmptype) cmd.print_and_exit("%s/%s" % (obj.path, obj.filename)) elif a.icmptype and options_icmptype: icmptype = fw.config.get_icmptype(a.icmptype) settings = FirewallClientIcmpTypeSettings( list(fw.config.get_icmptype_config(icmptype))) if a.add_destination: cmd.add_sequence(a.add_destination, settings.addDestination, settings.queryDestination, cmd.check_destination_ipv, "'%s'") fw.config.set_icmptype_config(icmptype, settings.settings) elif a.remove_destination: cmd.remove_sequence(a.remove_destination, settings.removeDestination, settings.queryDestination, cmd.check_destination_ipv, "'%s'") fw.config.set_icmptype_config(icmptype, settings.settings) elif a.query_destination: cmd.query_sequence(a.query_destination, settings.queryDestination, cmd.check_destination_ipv , "'%s'") elif a.get_destinations: l = settings.getDestinations() if len(l) == 0: l = [ "ipv4", "ipv6" ] cmd.print_and_exit("\n".join(l)) elif a.set_description: settings.setDescription(a.set_description) fw.config.set_icmptype_config(icmptype, settings.settings) elif a.get_description: cmd.print_and_exit(settings.getDescription()) elif a.set_short: settings.setShort(a.set_short) fw.config.set_icmptype_config(icmptype, settings.settings) elif a.get_short: cmd.print_and_exit(settings.getShort()) else: cmd.fail(parser.format_usage() + "Unknown option") cmd.print_and_exit("success") elif a.service and options_service: service = fw.config.get_service(a.service) settings = FirewallClientServiceSettings( fw.config.get_service_config_dict(service)) if a.add_port: cmd.add_sequence(a.add_port, settings.addPort, settings.queryPort, cmd.parse_port, "%s/%s") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.remove_port: cmd.remove_sequence(a.remove_port, settings.removePort, settings.queryPort, cmd.parse_port, "%s/%s") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.query_port: cmd.query_sequence(a.query_port, settings.queryPort, cmd.parse_port, "%s/%s") elif a.get_ports: l = settings.getPorts() cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l])) elif a.add_protocol: cmd.add_sequence(a.add_protocol, settings.addProtocol, settings.queryProtocol, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.remove_protocol: cmd.remove_sequence(a.remove_protocol, settings.removeProtocol, settings.queryProtocol, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.query_protocol: cmd.query_sequence(a.query_protocol, settings.queryProtocol, None, "'%s'") elif a.get_protocols: l = settings.getProtocols() cmd.print_and_exit(" ".join(["%s" % protocol for protocol in l])) elif a.add_source_port: cmd.add_sequence(a.add_source_port, settings.addSourcePort, settings.querySourcePort, cmd.parse_port, "%s/%s") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.remove_source_port: cmd.remove_sequence(a.remove_source_port, settings.removeSourcePort, settings.querySourcePort, cmd.parse_port, "%s/%s") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.query_source_port: cmd.query_sequence(a.query_source_port, settings.querySourcePort, cmd.parse_port, "%s/%s") elif a.get_source_ports: l = settings.getSourcePorts() cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l])) elif a.add_module: cmd.add_sequence(a.add_module, settings.addModule, settings.queryModule, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.remove_module: cmd.remove_sequence(a.remove_module, settings.removeModule, settings.queryModule, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.query_module: cmd.query_sequence(a.query_module, settings.queryModule, None, "'%s'") elif a.get_modules: l = settings.getModules() cmd.print_and_exit(" ".join(["%s" % module for module in l])) elif a.set_destination: cmd.add_sequence(a.set_destination, settings.setDestination, settings.queryDestination, cmd.parse_service_destination, "%s:%s") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.remove_destination: # special case for removeDestination: Only ipv, no address for ipv in a.remove_destination: cmd.check_destination_ipv(ipv) if ipv not in settings.getDestinations(): if len(a.remove_destination) > 1: cmd.print_warning("Warning: NOT_ENABLED: '%s'" % ipv) else: code = FirewallError.get_code("NOT_ENABLED") cmd.print_and_exit("Error: NOT_ENABLED: '%s'" % ipv, code) else: settings.removeDestination(ipv) fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.query_destination: cmd.query_sequence(a.query_destination, settings.queryDestination, cmd.parse_service_destination, "'%s'") elif a.get_destinations: l = settings.getDestinations() cmd.print_and_exit(" ".join(["%s:%s" % (dest[0], dest[1]) for dest in l.items()])) elif a.add_include: cmd.add_sequence(a.add_include, settings.addInclude, settings.queryInclude, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.remove_include: cmd.remove_sequence(a.remove_include, settings.removeInclude, settings.queryInclude, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.query_include: cmd.query_sequence(a.query_include, settings.queryInclude, None, "'%s'") elif a.get_includes: l = settings.getIncludes() cmd.print_and_exit(" ".join(["%s" % include for include in sorted(l)])) elif a.add_helper: cmd.add_sequence(a.add_helper, settings.addHelper, settings.queryHelper, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.remove_helper: cmd.remove_sequence(a.remove_helper, settings.removeHelper, settings.queryHelper, None, "'%s'") fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.query_helper: cmd.query_sequence(a.query_helper, settings.queryHelper, None, "'%s'") elif a.get_service_helpers: l = settings.getHelpers() cmd.print_and_exit(" ".join(["%s" % helper for helper in sorted(l)])) elif a.set_description: settings.setDescription(a.set_description) fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.get_description: cmd.print_and_exit(settings.getDescription()) elif a.set_short: settings.setShort(a.set_short) fw.config.set_service_config_dict(service, settings.getSettingsDict()) elif a.get_short: cmd.print_and_exit(settings.getShort()) else: cmd.fail(parser.format_usage() + "Unknown option") cmd.print_and_exit("success") # ipsets if a.get_ipsets: ipsets = fw.config.get_ipsets() cmd.print_and_exit(" ".join(sorted(ipsets))) elif a.new_ipset: if not a.type: cmd.fail(parser.format_usage() + "No type specified.") if a.type=='hash:mac' and a.family: cmd.fail(parser.format_usage() + "--family is not compatible with the hash:mac type") settings = FirewallClientIPSetSettings() settings.setType(a.type) if a.option: for opt in a.option: settings.addOption(*cmd.parse_ipset_option(opt)) fw.config.new_ipset(a.new_ipset, settings.settings) elif a.new_ipset_from_file: filename = os.path.basename(a.new_ipset_from_file) dirname = os.path.dirname(a.new_ipset_from_file) if dirname == "": dirname = "./" try: obj = ipset_reader(filename, dirname) except FirewallError as msg: cmd.print_and_exit("Failed to load ipset file '%s': %s" % \ (a.new_ipset_from_file, msg), msg.code) except IOError as msg: cmd.fail("Failed to load ipset file: %s" % msg) if a.name: obj.name = a.name fw.config.new_ipset(obj.name, obj.export_config()) elif a.delete_ipset: ipset = fw.config.get_ipset(a.delete_ipset) fw.config.remove_ipset(ipset) elif a.load_ipset_defaults: obj = fw.config.get_ipset(a.load_ipset_defaults) fw.config.load_ipset_defaults(obj) elif a.info_ipset: ipset = fw.config.get_ipset(a.info_ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) cmd.print_ipset_info(a.info_ipset, settings) sys.exit(0) elif a.path_ipset: obj = fw.config.get_ipset(a.path_ipset) cmd.print_and_exit("%s/%s" % (obj.path, obj.filename)) elif a.ipset: if a.add_entry: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) cmd.add_sequence(a.add_entry, settings.addEntry, settings.queryEntry, None, "'%s'") fw.config.set_ipset_config(ipset, settings.settings) elif a.remove_entry: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) cmd.remove_sequence(a.remove_entry, settings.removeEntry, settings.queryEntry, None, "'%s'") fw.config.set_ipset_config(ipset, settings.settings) elif a.query_entry: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) cmd.query_sequence(a.query_entry, settings.queryEntry, None, "'%s'") elif a.get_entries: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) l = settings.getEntries() cmd.print_and_exit("\n".join(l)) elif a.add_entries_from_file: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) changed = False for filename in a.add_entries_from_file: try: entries = cmd.get_ipset_entries_from_file(filename) except IOError as msg: message = "Failed to read file '%s': %s" % (filename, msg) if len(a.add_entries_from_file) > 1: cmd.print_warning(message) else: cmd.print_and_exit(message) else: old_entries = settings.getEntries() entries_set = set() for entry in old_entries: entries_set.add(entry) for entry in entries: if entry not in entries_set: old_entries.append(entry) entries_set.add(entry) changed = True else: cmd.print_if_verbose( "Warning: ALREADY_ENABLED: %s" % entry) if changed: settings.setEntries(old_entries) if changed: fw.config.set_ipset_config(ipset, settings.settings) elif a.remove_entries_from_file: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) changed = False for filename in a.remove_entries_from_file: try: entries = cmd.get_ipset_entries_from_file(filename) except IOError as msg: message = "Failed to read file '%s': %s" % (filename, msg) if len(a.remove_entries_from_file) > 1: cmd.print_warning(message) else: cmd.print_and_exit(message) else: old_entries = settings.getEntries() entries_set = set() for entry in old_entries: entries_set.add(entry) for entry in entries: if entry in entries_set: old_entries.remove(entry) entries_set.discard(entry) changed = True else: cmd.print_if_verbose("Warning: NOT_ENABLED: %s" % \ entry) if changed: settings.setEntries(old_entries) if changed: fw.config.set_ipset_config(ipset, settings.settings) elif a.set_description: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) settings.setDescription(a.set_description) fw.config.set_ipset_config(ipset, settings.settings) elif a.get_description: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) cmd.print_and_exit(settings.getDescription()) elif a.set_short: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) settings.setShort(a.set_short) fw.config.set_ipset_config(ipset, settings.settings) elif a.get_short: ipset = fw.config.get_ipset(a.ipset) settings = FirewallClientIPSetSettings( list(fw.config.get_ipset_config(ipset))) cmd.print_and_exit(settings.getShort()) else: cmd.fail(parser.format_usage() + "Unknown option") cmd.print_and_exit("success") # helper elif a.get_helpers: cmd.print_and_exit(" ".join(sorted(fw.config.get_helpers()))) elif a.new_helper: if not a.module: cmd.fail(parser.format_usage() + "No module specified.") settings = FirewallClientHelperSettings() settings.setModule(a.module) if a.family: settings.setFamily(a.family) fw.config.new_helper(a.new_helper, settings.settings) elif a.new_helper_from_file: filename = os.path.basename(a.new_helper_from_file) dirname = os.path.dirname(a.new_helper_from_file) if dirname == "": dirname = "./" try: obj = helper_reader(filename, dirname) except FirewallError as msg: cmd.print_and_exit("Failed to load helper file '%s': %s" % \ (a.new_helper_from_file, msg), msg.code) except IOError as msg: cmd.fail("Failed to load helper file: %s" % msg) if a.name: obj.name = a.name fw.config.new_helper(obj.name, obj.export_config()) elif a.delete_helper: obj = fw.config.get_helper(a.delete_helper) fw.config.remove_helper(obj) elif a.load_helper_defaults: obj = fw.config.get_helper(a.load_helper_defaults) fw.config.load_helper_defaults(obj) elif a.info_helper: obj = fw.config.get_helper(a.info_helper) settings = FirewallClientHelperSettings( list(fw.config.get_helper_config(obj))) cmd.print_helper_info(a.info_helper, settings) sys.exit(0) elif a.path_helper: obj = fw.config.get_helper(a.path_helper) cmd.print_and_exit("%s/%s" % (obj.path, obj.filename)) elif a.helper: obj = fw.config.get_helper(a.helper) settings = FirewallClientHelperSettings( list(fw.config.get_helper_config(obj))) if a.add_port: cmd.add_sequence(a.add_port, settings.addPort, settings.queryPort, cmd.parse_port, "%s/%s") fw.config.set_helper_config(obj, settings.settings) elif a.remove_port: cmd.remove_sequence(a.remove_port, settings.removePort, settings.queryPort, cmd.parse_port, "%s/%s") fw.config.set_helper_config(obj, settings.settings) elif a.query_port: cmd.query_sequence(a.query_port, settings.queryPort, cmd.parse_port, "%s/%s") elif a.get_ports: l = settings.getPorts() cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l])) elif a.get_module: cmd.print_and_exit(settings.getModule()) elif a.set_module: settings.setModule(cmd.check_module(a.set_module)) fw.config.set_helper_config(obj, settings.settings) elif a.get_family: cmd.print_and_exit(settings.getFamily()) elif a.set_family: settings.setFamily(cmd.check_helper_family(a.set_family[0])) fw.config.set_helper_config(obj, settings.settings) elif a.set_description: settings.setDescription(a.set_description) fw.config.set_helper_config(obj, settings.settings) elif a.get_description: cmd.print_and_exit(settings.getDescription()) elif a.set_short: settings.setShort(a.set_short) fw.config.set_helper_config(obj, settings.settings) elif a.get_short: cmd.print_and_exit(settings.getShort()) else: cmd.fail(parser.format_usage() + "Unknown option") # lockdown whitelist elif options_lockdown_whitelist: whitelist = fw.config.get_policies().lockdown_whitelist # commands if a.list_lockdown_whitelist_commands: l = whitelist.get_commands() cmd.print_and_exit("\n".join(l)) elif a.add_lockdown_whitelist_command: cmd.add_sequence(a.add_lockdown_whitelist_command, whitelist.add_command, whitelist.has_command, None, "'%s'") elif a.remove_lockdown_whitelist_command: cmd.remove_sequence(a.remove_lockdown_whitelist_command, whitelist.remove_command, whitelist.has_command, None, "'%s'") elif a.query_lockdown_whitelist_command: cmd.query_sequence(a.query_lockdown_whitelist_command, whitelist.has_command, None, "'%s'") # contexts elif a.list_lockdown_whitelist_contexts: l = whitelist.get_contexts() cmd.print_and_exit("\n".join(l)) elif a.add_lockdown_whitelist_context: cmd.add_sequence(a.add_lockdown_whitelist_context, whitelist.add_context, whitelist.has_context, None, "'%s'") elif a.remove_lockdown_whitelist_context: cmd.remove_sequence(a.remove_lockdown_whitelist_context, whitelist.remove_context, whitelist.has_context, None, "'%s'") elif a.query_lockdown_whitelist_context: cmd.query_sequence(a.query_lockdown_whitelist_context, whitelist.has_context, None, "'%s'") # uids elif a.list_lockdown_whitelist_uids: l = whitelist.get_uids() cmd.print_and_exit(" ".join(map(str, l))) elif a.add_lockdown_whitelist_uid: cmd.add_sequence(a.add_lockdown_whitelist_uid, whitelist.add_uid, whitelist.has_uid, None, "'%s'") elif a.remove_lockdown_whitelist_uid: cmd.remove_sequence(a.remove_lockdown_whitelist_uid, whitelist.remove_uid, whitelist.has_uid, None, "'%s'") elif a.query_lockdown_whitelist_uid: cmd.query_sequence(a.query_lockdown_whitelist_uid, whitelist.has_uid, None, "'%s'") # users elif a.list_lockdown_whitelist_users: l = whitelist.get_users() cmd.print_and_exit("\n".join(l)) elif a.add_lockdown_whitelist_user: cmd.add_sequence(a.add_lockdown_whitelist_user, whitelist.add_user, whitelist.has_user, None, "'%s'") elif a.remove_lockdown_whitelist_user: cmd.remove_sequence(a.remove_lockdown_whitelist_user, whitelist.remove_user, whitelist.has_user, None, "'%s'") elif a.query_lockdown_whitelist_user: cmd.query_sequence(a.query_lockdown_whitelist_user, whitelist.has_user, None, "'%s'") # apply whitelist changes whitelist.write() elif options_direct: obj = fw.config.get_direct() if a.add_passthrough: if len(a.add_passthrough) < 2: cmd.fail("usage: --direct --add-passthrough { ipv4 | ipv6 | eb } <args>") cmd.print_msg( obj.add_passthrough(cmd.check_ipv(a.add_passthrough[0]), splitArgs(a.add_passthrough[1]))) elif a.remove_passthrough: if len(a.remove_passthrough) < 2: cmd.fail("usage: --direct --remove-passthrough { ipv4 | ipv6 | eb } <args>") obj.remove_passthrough(cmd.check_ipv(a.remove_passthrough[0]), splitArgs(a.remove_passthrough[1])) elif a.query_passthrough: if len(a.query_passthrough) < 2: cmd.fail("usage: --direct --query-passthrough { ipv4 | ipv6 | eb } <args>") cmd.print_query_result( obj.query_passthrough(cmd.check_ipv(a.query_passthrough[0]), splitArgs(a.query_passthrough[1]))) sys.exit(0) elif a.get_passthroughs: rules = obj.get_passthroughs(cmd.check_ipv(a.get_passthroughs[0])) for rule in rules: cmd.print_msg(joinArgs(rule)) sys.exit(0) elif a.get_all_passthroughs: rules = obj.get_all_passthroughs() for ipv in rules: for rule in rules[ipv]: cmd.print_msg("%s %s" % (ipv, joinArgs(rule))) sys.exit(0) elif a.add_chain: obj.add_chain(cmd.check_ipv(a.add_chain[0]), a.add_chain[1], a.add_chain[2]) elif a.remove_chain: obj.remove_chain(cmd.check_ipv(a.remove_chain[0]), a.remove_chain[1], a.remove_chain[2]) elif a.query_chain: cmd.print_query_result( obj.query_chain(cmd.check_ipv(a.query_chain[0]), a.query_chain[1], a.query_chain[2])) sys.exit(0) elif a.get_chains: cmd.print_and_exit( " ".join(obj.get_chains(cmd.check_ipv(a.get_chains[0]), a.get_chains[1]))) sys.exit(0) elif a.get_all_chains: chains = obj.get_all_chains() for (ipv, table) in chains: for chain in chains[(ipv, table)]: cmd.print_msg("%s %s %s" % (ipv, table, chain)) sys.exit(0) elif a.add_rule: if len(a.add_rule) < 5: cmd.fail("usage: --direct --add-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>") try: priority = int(a.add_rule[3]) except ValueError: cmd.fail("wrong priority\nusage: --direct --add-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>") obj.add_rule(cmd.check_ipv(a.add_rule[0]), a.add_rule[1], a.add_rule[2], priority, splitArgs(a.add_rule[4])) elif a.remove_rule: if len(a.remove_rule) < 5: cmd.fail("usage: --direct --remove-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>") try: priority = int(a.remove_rule[3]) except ValueError: cmd.fail("usage: --direct --remove-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>") obj.remove_rule(cmd.check_ipv(a.remove_rule[0]), a.remove_rule[1], a.remove_rule[2], priority, splitArgs(a.remove_rule[4])) elif a.remove_rules: if len(a.remove_rules) < 3: cmd.fail("usage: --direct --remove-rules { ipv4 | ipv6 | eb } <table> <chain>") obj.remove_rules(cmd.check_ipv(a.remove_rules[0]), a.remove_rules[1], a.remove_rules[2]) elif a.query_rule: if len(a.query_rule) < 5: cmd.fail("usage: --direct --query-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>") try: priority = int(a.query_rule[3]) except ValueError: cmd.fail("usage: --direct --query-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>") cmd.print_query_result( obj.query_rule(cmd.check_ipv(a.query_rule[0]), a.query_rule[1], a.query_rule[2], priority, splitArgs(a.query_rule[4]))) sys.exit(0) elif a.get_rules: rules = obj.get_rules(cmd.check_ipv(a.get_rules[0]), a.get_rules[1], a.get_rules[2]) for (priority, rule) in rules: cmd.print_msg("%d %s" % (priority, joinArgs(rule))) sys.exit(0) elif a.get_all_rules: rules = obj.get_all_rules() for (ipv, table, chain) in rules: for (priority, rule) in rules[(ipv, table, chain)]: cmd.print_msg("%s %s %s %d %s" % \ (ipv, table, chain, priority, joinArgs(rule))) sys.exit(0) obj.write() # list everything elif a.list_all_policies: policies = fw.config.get_policy_objects() for policy in policies: fw_policy = fw.config.get_policy_object(policy) fw_settings = FirewallClientPolicySettings(fw.config.get_policy_object_config_dict(fw_policy)) cmd.print_policy_info(policy, fw_settings) cmd.print_msg("") sys.exit(0) elif a.policy: fw_policy = fw.config.get_policy_object(a.policy) fw_settings = FirewallClientPolicySettings(fw.config.get_policy_object_config_dict(fw_policy)) # ingress zones if a.list_ingress_zones: l = fw_settings.getIngressZones() cmd.print_and_exit(" ".join(sorted(l))) elif a.add_ingress_zone: cmd.add_sequence(a.add_ingress_zone, fw_settings.addIngressZone, fw_settings.queryIngressZone, None, "'%s'") elif a.remove_ingress_zone: cmd.remove_sequence(a.remove_ingress_zone, fw_settings.removeIngressZone, fw_settings.queryIngressZone, None, "'%s'") elif a.query_ingress_zone: cmd.query_sequence(a.query_ingress_zone, fw_settings.queryIngressZone, None, "'%s'") # egress zones if a.list_egress_zones: l = fw_settings.getEgressZones() cmd.print_and_exit(" ".join(sorted(l))) elif a.add_egress_zone: cmd.add_sequence(a.add_egress_zone, fw_settings.addEgressZone, fw_settings.queryEgressZone, None, "'%s'") elif a.remove_egress_zone: cmd.remove_sequence(a.remove_egress_zone, fw_settings.removeEgressZone, fw_settings.queryEgressZone, None, "'%s'") elif a.query_egress_zone: cmd.query_sequence(a.query_egress_zone, fw_settings.queryEgressZone, None, "'%s'") # priority elif a.get_priority: cmd.print_and_exit(str(fw_settings.getPriority())) elif a.set_priority: fw_settings.setPriority(a.set_priority) # rich rules if a.list_rich_rules: l = fw_settings.getRichRules() cmd.print_and_exit("\n".join(l)) elif a.add_rich_rule: cmd.add_sequence(a.add_rich_rule, fw_settings.addRichRule, fw_settings.queryRichRule, None, "'%s'") elif a.remove_rich_rule: cmd.remove_sequence(a.remove_rich_rule, fw_settings.removeRichRule, fw_settings.queryRichRule, None, "'%s'") elif a.query_rich_rule: cmd.query_sequence(a.query_rich_rule, fw_settings.queryRichRule, None, "'%s'") # service if a.list_services: l = fw_settings.getServices() cmd.print_and_exit(" ".join(sorted(l))) elif a.add_service: cmd.add_sequence(a.add_service, fw_settings.addService, fw_settings.queryService, None, "'%s'") elif a.remove_service_from_policy: cmd.remove_sequence(a.remove_service_from_policy, fw_settings.removeService, fw_settings.queryService, None, "'%s'") elif a.query_service: cmd.query_sequence(a.query_service, fw_settings.queryService, None, "'%s'") # port elif a.list_ports: l = fw_settings.getPorts() cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in sorted(l, key=lambda x: (x[1], getPortRange(x[0])[0]))])) elif a.add_port: cmd.add_sequence(a.add_port, fw_settings.addPort, fw_settings.queryPort, cmd.parse_port, "%s/%s") elif a.remove_port: cmd.remove_sequence(a.remove_port, fw_settings.removePort, fw_settings.queryPort, cmd.parse_port, "%s/%s") elif a.query_port: cmd.query_sequence(a.query_port, fw_settings.queryPort, cmd.parse_port, "%s/%s") # protocol elif a.list_protocols: l = fw_settings.getProtocols() cmd.print_and_exit(" ".join(sorted(l))) elif a.add_protocol: cmd.add_sequence(a.add_protocol, fw_settings.addProtocol, fw_settings.queryProtocol, None, "'%s'") elif a.remove_protocol: cmd.remove_sequence(a.remove_protocol, fw_settings.removeProtocol, fw_settings.queryProtocol, None, "'%s'") elif a.query_protocol: cmd.query_sequence(a.query_protocol, fw_settings.queryProtocol, None, "'%s'") # source port elif a.list_source_ports: l = fw_settings.getSourcePorts() cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in sorted(l, key=lambda x: (x[1], getPortRange(x[0])[0]))])) elif a.add_source_port: cmd.add_sequence(a.add_source_port, fw_settings.addSourcePort, fw_settings.querySourcePort, cmd.parse_port, "%s/%s") elif a.remove_source_port: cmd.remove_sequence(a.remove_source_port, fw_settings.removeSourcePort, fw_settings.querySourcePort, cmd.parse_port, "%s/%s") elif a.query_source_port: cmd.query_sequence(a.query_source_port, fw_settings.querySourcePort, cmd.parse_port, "%s/%s") # masquerade elif a.add_masquerade: fw_settings.setMasquerade(True) elif a.remove_masquerade: fw_settings.setMasquerade(False) elif a.query_masquerade: cmd.print_query_result(fw_settings.getMasquerade()) # forward port elif a.list_forward_ports: l = fw_settings.getForwardPorts() cmd.print_and_exit("\n".join(["port=%s:proto=%s:toport=%s:toaddr=%s" % (_port, _protocol, _toport, _toaddr) for (_port, _protocol, _toport, _toaddr) in l])) elif a.add_forward_port: cmd.add_sequence(a.add_forward_port, fw_settings.addForwardPort, fw_settings.queryForwardPort, cmd.parse_forward_port, "port=%s:proto=%s:toport=%s:toaddr=%s") elif a.remove_forward_port: cmd.remove_sequence(a.remove_forward_port, fw_settings.removeForwardPort, fw_settings.queryForwardPort, cmd.parse_forward_port, "port=%s:proto=%s:toport=%s:toaddr=%s") elif a.query_forward_port: cmd.query_sequence(a.query_forward_port, fw_settings.queryForwardPort, cmd.parse_forward_port, "port=%s:proto=%s:toport=%s:toaddr=%s") # block icmp elif a.list_icmp_blocks: l = fw_settings.getIcmpBlocks() cmd.print_and_exit(" ".join(l)) elif a.add_icmp_block: cmd.add_sequence(a.add_icmp_block, fw_settings.addIcmpBlock, fw_settings.queryIcmpBlock, None, "'%s'") elif a.remove_icmp_block: cmd.remove_sequence(a.remove_icmp_block, fw_settings.removeIcmpBlock, fw_settings.queryIcmpBlock, None, "'%s'") elif a.query_icmp_block: cmd.query_sequence(a.query_icmp_block, fw_settings.queryIcmpBlock, None, "'%s'") # policy target elif a.get_target: cmd.print_and_exit(fw_settings.getTarget()) elif a.set_target: fw_settings.setTarget(a.set_target) # list all policy settings elif a.list_all: cmd.print_policy_info(a.policy, fw_settings) sys.exit(0) elif a.set_description: fw_settings.setDescription(a.set_description) elif a.get_description: cmd.print_and_exit(fw_settings.getDescription()) elif a.set_short: fw_settings.setShort(a.set_short) elif a.get_short: cmd.print_and_exit(fw_settings.getShort()) fw.config.set_policy_object_config_dict(fw_policy, fw_settings.getSettingsDict()) cmd.print_and_exit("success") else: if zone == "": zone = fw.get_default_zone() fw_zone = fw.config.get_zone(zone) fw_settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(fw_zone)) # interface if a.list_interfaces: l = fw_settings.getInterfaces() cmd.print_and_exit(" ".join(l)) elif a.get_zone_of_interface: for interface in a.get_zone_of_interface: ret = [ ] for zone in fw.config.get_zones(): obj = fw.config.get_zone(zone) if interface in obj.interfaces: ret.append(obj.name) if len(ret) > 1: # Even it shouldn't happen, it's actually possible that # the same interface is in several zone XML files cmd.print_warning(" ".join(ret) + " (ERROR: interface '%s' is in %s zone XML files, can be only in one)" % (interface, len(ret))) if len(ret) == 1: if len(a.get_zone_of_interface) > 1: cmd.print_warning("%s: %s" % (interface, ret[0])) else: cmd.print_and_exit(ret[0]) else: if len(a.get_zone_of_interface) > 1: cmd.print_warning("%s: no zone" % interface) else: cmd.print_and_exit("no zone", 2) elif a.change_interface: for interface in a.change_interface: for old_zone in fw.config.get_zones(): old_zone_obj = fw.config.get_zone(old_zone) if interface in old_zone_obj.interfaces: if old_zone_obj.name != zone: old_zone_settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(old_zone_obj)) old_zone_settings.removeInterface(interface) # remove from old fw.config.set_zone_config_dict(old_zone_obj, old_zone_settings.getSettingsDict()) fw_settings.addInterface(interface) # add to new elif a.add_interface: cmd.add_sequence(a.add_interface, fw_settings.addInterface, fw_settings.queryInterface, None, "'%s'") elif a.remove_interface: cmd.remove_sequence(a.remove_interface, fw_settings.removeInterface, fw_settings.queryInterface, None, "'%s'") elif a.query_interface: cmd.query_sequence(a.query_interface, fw_settings.queryInterface, None, "'%s'") # source if a.list_sources: sources = fw_settings.getSources() cmd.print_and_exit(" ".join(sources)) elif a.get_zone_of_source: for source in a.get_zone_of_source: ret = [ ] for zone in fw.config.get_zones(): obj = fw.config.get_zone(zone) if source in obj.sources: ret.append(obj.name) if len(ret) > 1: # Even it shouldn't happen, it's actually possible that # the same source is in several zone XML files cmd.print_warning(" ".join(ret) + " (ERROR: source '%s' is in %s zone XML files, can be only in one)" % (source, len(ret))) if len(ret) == 1: if len(a.get_zone_of_source) > 1: cmd.print_warning("%s: %s" % (source, ret[0])) else: cmd.print_and_exit(ret[0]) else: if len(a.get_zone_of_source) > 1: cmd.print_warning("%s: no zone" % source) else: cmd.print_and_exit("no zone", 2) elif a.change_source: for source in a.change_source: for old_zone in fw.config.get_zones(): old_zone_obj = fw.config.get_zone(old_zone) if source in old_zone_obj.sources: if old_zone_obj.name != zone: old_zone_settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(old_zone_obj)) old_zone_settings.removeSource(source) # remove from old fw.config.set_zone_config_dict(old_zone_obj, old_zone_settings.getSettingsDict()) fw_settings.addSource(source) # add to new elif a.add_source: cmd.add_sequence(a.add_source, fw_settings.addSource, fw_settings.querySource, None, "'%s'") elif a.remove_source: cmd.remove_sequence(a.remove_source, fw_settings.removeSource, fw_settings.querySource, None, "'%s'") elif a.query_source: cmd.query_sequence(a.query_source, fw_settings.querySource, None, "'%s'") # rich rules if a.list_rich_rules: l = fw_settings.getRichRules() cmd.print_and_exit("\n".join(l)) elif a.add_rich_rule: cmd.add_sequence(a.add_rich_rule, fw_settings.addRichRule, fw_settings.queryRichRule, None, "'%s'") elif a.remove_rich_rule: cmd.remove_sequence(a.remove_rich_rule, fw_settings.removeRichRule, fw_settings.queryRichRule, None, "'%s'") elif a.query_rich_rule: cmd.query_sequence(a.query_rich_rule, fw_settings.queryRichRule, None, "'%s'") # service if a.list_services: l = fw_settings.getServices() cmd.print_and_exit(" ".join(sorted(l))) elif a.add_service: cmd.add_sequence(a.add_service, fw_settings.addService, fw_settings.queryService, None, "'%s'") elif a.remove_service_from_zone: cmd.remove_sequence(a.remove_service_from_zone, fw_settings.removeService, fw_settings.queryService, None, "'%s'") elif a.query_service: cmd.query_sequence(a.query_service, fw_settings.queryService, None, "'%s'") # port elif a.list_ports: l = fw_settings.getPorts() cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in sorted(l, key=lambda x: (x[1], getPortRange(x[0])[0]))])) elif a.add_port: cmd.add_sequence(a.add_port, fw_settings.addPort, fw_settings.queryPort, cmd.parse_port, "%s/%s") elif a.remove_port: cmd.remove_sequence(a.remove_port, fw_settings.removePort, fw_settings.queryPort, cmd.parse_port, "%s/%s") elif a.query_port: cmd.query_sequence(a.query_port, fw_settings.queryPort, cmd.parse_port, "%s/%s") # protocol elif a.list_protocols: l = fw_settings.getProtocols() cmd.print_and_exit(" ".join(sorted(l))) elif a.add_protocol: cmd.add_sequence(a.add_protocol, fw_settings.addProtocol, fw_settings.queryProtocol, None, "'%s'") elif a.remove_protocol: cmd.remove_sequence(a.remove_protocol, fw_settings.removeProtocol, fw_settings.queryProtocol, None, "'%s'") elif a.query_protocol: cmd.query_sequence(a.query_protocol, fw_settings.queryProtocol, None, "'%s'") # source port elif a.list_source_ports: l = fw_settings.getSourcePorts() cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in sorted(l, key=lambda x: (x[1], getPortRange(x[0])[0]))])) elif a.add_source_port: cmd.add_sequence(a.add_source_port, fw_settings.addSourcePort, fw_settings.querySourcePort, cmd.parse_port, "%s/%s") elif a.remove_source_port: cmd.remove_sequence(a.remove_source_port, fw_settings.removeSourcePort, fw_settings.querySourcePort, cmd.parse_port, "%s/%s") elif a.query_source_port: cmd.query_sequence(a.query_source_port, fw_settings.querySourcePort, cmd.parse_port, "%s/%s") # forward elif a.add_forward: fw_settings.setForward(True) elif a.remove_forward: fw_settings.setForward(False) elif a.query_forward: cmd.print_query_result(fw_settings.getForward()) # masquerade elif a.add_masquerade: fw_settings.setMasquerade(True) elif a.remove_masquerade: fw_settings.setMasquerade(False) elif a.query_masquerade: cmd.print_query_result(fw_settings.getMasquerade()) # forward port elif a.list_forward_ports: l = fw_settings.getForwardPorts() cmd.print_and_exit("\n".join(["port=%s:proto=%s:toport=%s:toaddr=%s" % (_port, _protocol, _toport, _toaddr) for (_port, _protocol, _toport, _toaddr) in l])) elif a.add_forward_port: cmd.add_sequence(a.add_forward_port, fw_settings.addForwardPort, fw_settings.queryForwardPort, cmd.parse_forward_port, "port=%s:proto=%s:toport=%s:toaddr=%s") elif a.remove_forward_port: cmd.remove_sequence(a.remove_forward_port, fw_settings.removeForwardPort, fw_settings.queryForwardPort, cmd.parse_forward_port, "port=%s:proto=%s:toport=%s:toaddr=%s") elif a.query_forward_port: cmd.query_sequence(a.query_forward_port, fw_settings.queryForwardPort, cmd.parse_forward_port, "port=%s:proto=%s:toport=%s:toaddr=%s") # block icmp elif a.list_icmp_blocks: l = fw_settings.getIcmpBlocks() cmd.print_and_exit(" ".join(l)) elif a.add_icmp_block: cmd.add_sequence(a.add_icmp_block, fw_settings.addIcmpBlock, fw_settings.queryIcmpBlock, None, "'%s'") elif a.remove_icmp_block: cmd.remove_sequence(a.remove_icmp_block, fw_settings.removeIcmpBlock, fw_settings.queryIcmpBlock, None, "'%s'") elif a.query_icmp_block: cmd.query_sequence(a.query_icmp_block, fw_settings.queryIcmpBlock, None, "'%s'") # icmp block inversion elif a.add_icmp_block_inversion: fw_settings.addIcmpBlockInversion() elif a.remove_icmp_block_inversion: fw_settings.removeIcmpBlockInversion() elif a.query_icmp_block_inversion: cmd.print_query_result(fw_settings.queryIcmpBlockInversion()) # zone target elif a.get_target: cmd.print_and_exit(fw_settings.getTarget()) elif a.set_target: fw_settings.setTarget(a.set_target) # list all zone settings elif a.list_all: cmd.print_zone_info(zone if zone else fw.get_default_zone(), fw_settings) sys.exit(0) # list everything elif a.list_all_zones: zones = fw.config.get_zones() for zone in zones: fw_zone = fw.config.get_zone(zone) fw_settings = FirewallClientZoneSettings(fw.config.get_zone_config_dict(fw_zone)) cmd.print_zone_info(zone, fw_settings) cmd.print_msg("") sys.exit(0) elif a.set_description: fw_settings.setDescription(a.set_description) elif a.get_description: cmd.print_and_exit(fw_settings.getDescription()) elif a.set_short: fw_settings.setShort(a.set_short) elif a.get_short: cmd.print_and_exit(fw_settings.getShort()) fw.config.set_zone_config_dict(fw_zone, fw_settings.getSettingsDict()) cmd.print_and_exit("success") except FirewallError as msg: cmd.print_and_exit("%s" % msg, msg.code) except Exception as msg: cmd.fail("%s" % msg) else: cmd.print_and_exit("success")
Close