File: //lib/python3/dist-packages/fail2ban/tests/__pycache__/clientreadertestcase.cpython-38.pyc
U
]^Q� � @ sx d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m Z m
Z
mZ ddlmZ ddlmZmZmZ dd lmZ dd
lmZ dd lmZmZ dd l m Z dd
l m Z ddl m Z ddl!m"Z"m#Z# ej$�%ej$�&e'�d�Z(i Z)ddl!m*Z* e j+j,Z-ej$�%ej$�&e'�d�Z.i Z/G dd� de j0�Z1G dd� de"�Z2G dd� de j0�Z3G dd� de"�Z4G d d � d e"�Z5dS ) z!Cyril Jaquier, Yaroslav Halchenkoz>Copyright (c) 2004 Cyril Jaquier, 2011-2013 Yaroslav HalchenkoZGPL� N� )� ConfigReader�ConfigReaderUnshared�DefinitionInitConfigReader�NoSectionError)�configparserinc)�
JailReader�extractOptions�splitWithOptions)� FilterReader)� JailsReader)� ActionReader�
CommandAction)� Configurator)�MyTime)�version� )�LogCaptureTestCase� with_tmpdir�files)�
CONFIG_DIR�configc sp e Zd Z� fdd�Zdd� Zddd�Zdd � Zdd d �Zd
d� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
� ZS )�ConfigReaderTestc s. t t| ��� tjdd�| _t| jd�| _dS )z Call before every test case.zf2b-temp)�prefix��basedirN)�superr �setUp�tempfileZmkdtemp�dr �c��self�� __class__� �E/usr/lib/python3/dist-packages/fail2ban/tests/clientreadertestcase.pyr 7 s zConfigReaderTest.setUpc C s t �| j� dS )zCall after every test case.N)�shutil�rmtreer r! r% r% r& �tearDown= s zConfigReaderTest.tearDownNc C s� t jj|kr>t j�|�}t j�| j|�}t j�|�s>t �|� td| j|f d�}|d k rh|� d| � |d k rz|� |� |�
� d S )N�%s/%s�wz
[section]
option = %s
) �os�path�sep�dirname�joinr �exists�makedirs�open�write�close)r" �fname�value�contentr Zd_�fr% r% r& �_writeA s
�
zConfigReaderTest._writec C s* t �d| j|f � | �| j�d�� d S )Nr* r )r, �unlinkr �
assertTruer �read)r" r6 r% r% r& �_removeR s zConfigReaderTest._remover c C s& | � | j�|�� | j�ddg�d S )N�section)�int�optionrA )r< r r= �
getOptions)r" r9 r% r% r& �
_getoptionV s zConfigReaderTest._getoptionc C sz t j�| jd�}| �dd� | �| �d�d� t �|d� t �|t j �s\| �
| j � d�� ndd l
}t�d|�
� ��d S )Nzd.confr r z0Skipping on %s -- access rights are not enforced)r, r- r0 r r: � assertEqualrC �chmod�access�R_OK� assertFalser r= �platform�unittest�SkipTest)r" r9 rI r% r% r& �testInaccessibleFileZ s z%ConfigReaderTest.testInaccessibleFilec C sL | � | j�d�� | �dd� | �| �� d� | �dd� | �| �� d� | �dd� | �| �� d � | �d
d � | �| �� d � | �d d
� | �| �� d� | �dd� | �| �� d� | �dd� | �| �� d� | �d� | �d� | �| �� d� | �d � | �| �� d � | �d� | �| �� d� | �d
� | �| �� d� d S )Nr �c.conf�1r �2r z c.d/98.confZ998i� z c.d/90.confZ990z c.d/99.confZ999i� zc.local�3� z c.d/1.local�4� i� )rH r r= r: rD rC r> r! r% r% r& �testOptionalDotDDirg s0
z$ConfigReaderTest.testOptionalDotDDirc C s� | j dd dd� | j dd dd� | j dd dd� | j dd d d� | j d
d d d� G d d
� d
t�}|ddi �| _| j�| j� | �| j�� � | jji dd� | j�� }| � |�
d�d� | � |�
d�d� | � |�
d�d� d S )NrM zS
[INCLUDES]
before = ib.conf
after = ia.conf
[Definition]
test = %(default/test)s
�r7 r8 zib.confz,
[DEFAULT]
test = A
[Definition]
option = 1
zib.localz,
[DEFAULT]
test = B
[Definition]
option = 2
zia.confz,
[DEFAULT]
test = C
[Definition]
oafter = 3
zia.localz,
[DEFAULT]
test = D
[Definition]
oafter = 4
c @ s$ e Zd Zddgddgddgd�ZdS )z?ConfigReaderTest.testLocalInIncludes.<locals>.TestDefConfReaderr@ N�string)rA �oafter�test)�__name__�
__module__� __qualname__Z _configOptsr% r% r% r& �TestDefConfReader� s �r\ r rA T)�allr rW rS rX �D) r: r r �
setBaseDirr r< r= rB � getCombinedrD �get)r" r\ �or% r% r& �testLocalInIncludes� s
z$ConfigReaderTest.testLocalInIncludesc C s� | � | j�d�� | jdd dd� | �| j�d�� | �| j�� ddg� | �| j�dd�d� | �| j�dd �d
� | �| j�dd �d� | �| j�dd �d
� | �| j�dd �d� d S )N�izi.confzu
[DEFAULT]
b = a
zz = the%(__name__)s
[section]
y = 4%(b)s
e = 5${b}
z = %(__name__)s
[section2]
z = 3%(__name__)s
rU r? Zsection2�yZ4a�ez5${b}�zZzzZ
thesectionZ 3section2)rH r r= r: r< rD �sectionsra r! r% r% r& �testInterpolations� s
z#ConfigReaderTest.testInterpolationsc C sd | � | j�d�� | jdd dd� | �| j�d�� | �| j�dd�d� | �| j�dd�d � d S )
N�g�g.confz4
[DEFAULT]
# A comment
b = a
c = d ;in line comment
rU �DEFAULT�b�ar r )rH r r= r: r< rD ra r! r% r% r& � testComments� s
z ConfigReaderTest.testCommentsc C s< | � | j�d�� | jdd dd� | �| j�d�� | �| j�dd�d� | �| j�dd�d � | �| j�d
d�d � | �| j�d
d�d � | �| j�d
d
�d� | �| j�d
d�d� | �| j�dd
�d� | �| j�dd�d� | �| j�dd
�d� | �| j�dd�d� | �t| jjdd� | �t| jjd
d� d S )Nrj rk z�
[DEFAULT]
a = def-a
b = def-b,a:`%(a)s`
c = def-c,b:"%(b)s"
d = def-d-b:"%(known/b)s"
[jail]
a = jail-a-%(test/a)s
b = jail-b-%(test/b)s
y = %(test/y)s
[test]
a = test-a-%(default/a)s
b = test-b-%(known/b)s
x = %(test/x)s
y = %(jail/y)s
rU rX rn z test-a-def-arm z test-b-def-b,a:`test-a-def-a`�jailzjail-a-test-a-def-az+jail-b-test-b-def-b,a:`jail-a-test-a-def-a`r z5def-c,b:"jail-b-test-b-def-b,a:`jail-a-test-a-def-a`"r z'def-d-b:"def-b,a:`jail-a-test-a-def-a`"z'def-c,b:"test-b-def-b,a:`test-a-def-a`"z def-d-b:"def-b,a:`test-a-def-a`"rl zdef-c,b:"def-b,a:`def-a`"zdef-d-b:"def-b,a:`def-a`"�xre ) rH r r= r: r< rD ra � assertRaises� Exceptionr! r% r% r& �testTargetedSectionOptions� s z+ConfigReaderTest.testTargetedSectionOptions)NN)r )rY rZ r[ r r) r: r> rC rL rT rc ri ro rt �
__classcell__r% r% r# r& r 5 s
0 r c s� e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zedd� �Zdd � Z� ZS ) �JailReaderTestc s t t| �j||� d S �N)r rv �__init__�r" �args�kwargsr# r% r& rx � s zJailReaderTest.__init__c C s t dttd�}| �t|j� d S )NZ XXXABSENTXXX�r � share_config)r r �CONFIG_DIR_SHARE_CFGrr �
ValueErrorr= �r" rp r% r% r& �testIncorrectJail� s z JailReaderTest.testIncorrectJailc C sP t dttd�}| �|�� � | �|�� � | �|�� � | �d� | �d� d S )N� emptyactionr| z"No filter set for jail emptyactionz'No actions were defined for emptyaction)r �IMPERFECT_CONFIG�IMPERFECT_CONFIG_SHARE_CFGr< r= rB � isEnabled� assertLoggedr� r% r% r& �testJailActionEmpty s
z"JailReaderTest.testJailActionEmptyc C sT t dttd�}| �|�� � | �|�� � | �|�� � | �dt � | �d� d S )NZmissingbitsjailr| zJFound no accessible config files for 'filter.d/catchallthebadies' under %szUnable to read the filter� r r� r� r< r= rH rB r� r� r� r% r% r& �testJailActionFilterMissing s z*JailReaderTest.testJailActionFilterMissingc C sF t dttd�}| �|�� � | �|�� � | �|�� � | �d� d S )NZbrokenactiondefr| z$Invalid action definition 'joho[foo'r� r� r% r% r& �testJailActionBrokenDef s �z&JailReaderTest.testJailActionBrokenDefc C sN t dttd�}| �|�� � | �|�� � | �|�� � | �|jd d� d S )N�
tz_correctr| � logtimezone�UTC+0200) r r� r� r< r= rB r� rD �optionsr� r% r% r& �testJailLogTimeZone s �z"JailReaderTest.testJailLogTimeZonec C sF t dttd�}| �|�� � | �|�� � | �|�� � | �d� d S )NZbrokenfilterdefr| z$Invalid filter definition 'flt[test'r� r� r% r% r& �testJailFilterBrokenDef s �z&JailReaderTest.testJailFilterBrokenDefc C st t jjdd� tdttd�}| �|�� � | �|�� � | � |�
� � | � |� � d� |�
d� | � |� � d� d S )NT�Zstock�sshdr| zssh-funky-blocker)rJ �F2B�SkipIfCfgMissingr r r~ r< r= rB rH r� rD �getNameZsetNamer� r% r% r& �testStockSSHJail( s
z JailReaderTest.testStockSSHJailc C s
t jjdd� tdttdd�}| �|�� � | �|�� � | �|� � � |�
� }| � ddddggdd � |D �� | � ddd
d ggd d � |D �� | � ddd
dggdd � |D �� |� ddddg�}d}|D ]:}| �
t|�dko�|d �d�� |d7 }||kr� �qq�d S )NTr� zsshd-override-flt-opts)r r} � force_enable�set� prefregexz^Testc S s( g | ] }t |�d kr|d dkr|�qS )r r� ��len��.0rb r% r% r& �
<listcomp>= s z>JailReaderTest.testOverrideFilterOptInJail.<locals>.<listcomp>�addjournalmatchz
_COMM=testc S s( g | ] }t |�d kr|d dkr|�qS )r r� r� r� r% r% r& r� @ s �maxlinesr c S s( g | ] }t |�d kr|d dkr|�qS )r r� r� r� r% r% r& r� C s �usednsZnor Zregexr )rJ r� r� r r� r� r< r= rB r� �convertrD �indexrH r� �endswith)r" rp �streamZ usednsidxrd rb r% r% r& �testOverrideFilterOptInJail2 s2 � � � � z*JailReaderTest.testOverrideFilterOptInJailc
C s0 d}dddif}t |�}| �||� | �di ft d�� | �dddd�ft d �� | �d
i ft d
�� | �d
i ft d �� | �d d
dift d�� d}di f}t |�}| �||� d}ddddddddddd d d � f}t |�}| �||� t |�dd ��}|d td d!� t|d" �� �D ��f}| �||� d S )#Nzmail-whois[name=SSH]z
mail-whois�nameZSSHz mail.who_is�catZdog)rn rm zmail.who_is[a=cat,b=dog]z mail--ho_iszmail--ho_is['s']Zmailrn �,z mail[a=',']zabc[]�abcz�option[opt01=abc,opt02="123",opt03="with=okay?",opt04="andwith,okay...",opt05="how about spaces",opt06="single'in'double",opt07='double"in"single', opt08= leave some space, opt09=one for luck, opt10=, opt11=]rA Z123z
with=okay?zandwith,okay...zhow about spaceszsingle'in'doublezdouble"in"singlezleave some spacez one for luck� ) Zopt01Zopt02Zopt03Zopt04Zopt05Zopt06Zopt07Zopt08Zopt09Zopt10Zopt11�][r c s s" | ]\}}||� d d�fV qdS )r� r� N)�replace)r� �k�vr% r% r& � <genexpr>z s z1JailReaderTest.testSplitOption.<locals>.<genexpr>r )r rD r� �dict�list�items)r" rA Zexpected�resultZ expected2r% r% r& �testSplitOptionL sD �
�z JailReaderTest.testSplitOptionc C s� t ddttd�}| �|�� � | �|�� � | �|jd d� | �|jd d� | �dd � |j D �d
dd d gd
ddd ddgdd gddggggd
dd dgd
dddddgddgddgddggggd
dd dgd
dddddgddgddggggg� d S )Nz multi-logT)r� r r} Zlogpathza.log
b.log
c.log�actionzeaction[actname='ban']
action[actname='log', logpath="a.log
b.log
c.log
d.log"]
action[actname='test']c S s g | ] }|� � �qS r% )r� �r� rn r% r% r& r� � s z6JailReaderTest.testMultiLineOption.<locals>.<listcomp>r� � addactionZban� multi-set� actionbanz4echo "name: ban, ban: <ip>, logs: a.log
b.log
c.log"�actnamer� �logz:echo "name: log, ban: <ip>, logs: a.log
b.log
c.log
d.log"za.log
b.log
c.log
d.logrX z5echo "name: test, ban: <ip>, logs: a.log
b.log
c.log")
r r� r� r< r= rB rD r� �assertSortedEqual�_JailReader__actionsr� r% r% r& �testMultiLineOption~ s. � ���z"JailReaderTest.testMultiLineOptionc sZ t jjdd� tddtd�}t�|d� |j�� }t d�|d< | �
|� � � |� � }g }|D ]l� t
� �dkrnq\� d d kr�� d d
ks�� d �d �r�|�� � q\� d d kr\|�� fd
d�� d D �� q\dt }| �t
|�d� | �|d d dddd
|g� | �|d d dddd
|g� | �t|d d ��d
d�|� | �|d d dddd
|g� d S )NTr� �
blocklisttest)r� r rp ))rY r� )�filterr� )� failregexz
^test <HOST>$)Zsenderzf2b-test@example.com)Zblocklist_de_apikeyztest-key)r� z�%(action_blocklist_de)s
%(action_badips_report)s
%(action_badips)s
mynetwatchman[port=1234,protocol=udp,agent="%(fail2ban_agent)s"]rS r r� �agentz badips.pyr� c s. g | ]&}|d dkrdg� dd� | �qS )r r� r� r rS r% r� ��cmdr% r& r� � s z3JailReaderTest.testVersionAgent.<locals>.<listcomp>z Fail2Ban/%sr� Z blocklist_der Zbadipsr � z<wrong>rQ Z
mynetwatchman)rJ r� r� r r r r= Z_cfgZ get_sectionsr� r< rB r� r� r� �append�extendr rD �evalra )r" rp rh r� �actZ useragentr% r� r& �testVersionAgent� s*
& z JailReaderTest.testVersionAgentc C s� t j�|d�}t|d��� t j�|d�}t �d|� | �t�t j�|d��|g� | �t�|�g � | � d| � | �t�t j�|d��g � d S )N�f1r+ �f2Z nonexisting�*z4File %s is a dangling link, thus cannot be monitored)
r, r- r0 r3 r5 �symlinkrD r Z_globr� )r" r r� r� r% r% r& �testGlob� s zJailReaderTest.testGlobc C st t i d�}| �|�� g � | �|�d�� | �t|jdi � | �t|jd� | �t|j dd� | �t|j
di � d S )N�r} rX �any) r rD rh rH Z has_sectionrr r Z
merge_sectionr� ra rB )r" r r% r% r& �testCommonFunction� s
z!JailReaderTest.testCommonFunction)rY rZ r[ rx r� r� r� r� r� r� r� r� r� r� r� r r� r� ru r% r% r# r& rv � s
2%
rv c sT e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
� Z S )�FilterReaderTestc s t t| �j||� i | _d S rw )r r� rx Z _FilterReaderTest__share_cfgry r# r% r& rx � s zFilterReaderTest.__init__c C s� ddddddggdddd gddd
d d d
dgddd
dd dgddddgddddgg}t ddi �}|�t� |�� |�d � | �|�� |� t ddddittd�}|�� |�d � d|d d< | �|�� |� d S )Nr� �
testcase01� addfailregexz�^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?Authentication failure for .* from <HOST>\s*$z�^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the underlying authentication module for .* from <HOST>\s*$a ^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the\nunderlying authentication.+$<SKIPLINES>^.+ module for .* from <HOST>\s*$r� Zaddignoreregexz"^.+ john from host 192.168.1.1\s*$r� z
_COMM=sshd�+z_SYSTEMD_UNIT=sshd.servicez_UID=0zFIELD= with spaces z AFIELD= with + char and spacesZ datepatternz%Y %m %d %H:%M:%Sr� r �5�r} r ���)r r_ �TEST_FILES_DIRr= rB r� r� �TEST_FILES_DIR_SHARE_CFG)r" �output� filterReaderr% r% r& � testConvert� sF �� � �
�
�
z FilterReaderTest.testConvertc C sJ ddddgg}t ddi ttd�}|�� |�d � |�� }| �||� d S )Nr� �jailnamer� z to=sweet@example.com fromip=<IP>�
substitionr� �r r� r� r= rB r� r� �r" r� r� r r% r% r& �!testFilterReaderSubstitionDefault s �
z2FilterReaderTest.testFilterReaderSubstitionDefaultc C sN ddddgg}t ddddittd�}|�� |�d � |�� }| �||� d S ) Nr� r� r� z to=sour@example.com fromip=<IP>r� �honeypotzsour@example.comr� r� r� r% r% r& � testFilterReaderSubstitionSet s �
z.FilterReaderTest.testFilterReaderSubstitionSetc C sV ddddgg}t d�\}}tdd|ttd�}|�� |�d � |�� }| �||� d S )Nr� r� r� z?^to=test,sweet@example.com,test2,sweet@example.com fromip=<IP>$zusubstition[failregex="^<known/failregex>$", honeypot="<sweet>,<known/honeypot>", sweet="test,<known/honeypot>,test2"]r� r� �r r r� r� r= rB r� r� �r" r� �
filterName� filterOptr� r r% r% r& � testFilterReaderSubstitionKnown s � �
z0FilterReaderTest.testFilterReaderSubstitionKnownc C sV ddddgg}t d�\}}tdd|ttd�}|�� |�d � |�� }| �||� d S )Nr� r� r� z)^\s*to=fail2ban@localhost fromip=<IP>\s*$zUsubstition[failregex="^\s*<Definition/failregex>\s*$", honeypot="<default/honeypot>"]r� r� r� r� r% r% r& �!testFilterReaderSubstitionSection% s � �
z2FilterReaderTest.testFilterReaderSubstitionSectionc C sv t ddddittd�}|�� |�d � | �tt j|� t ddddd�ttd�}|�� |�d � | �tt j|� d S )Nr� r� r� z
<honeypot>r� z<sweet>)r� Zsweet)r r� r� r= rB rr r r� )r" r� r% r% r& � testFilterReaderSubstitionFail0 s �
�
z/FilterReaderTest.testFilterReaderSubstitionFailc
C s� t j�t j�td��}tt j�|d�di �}| �|�� t j�|d�t j�|d�g� z2|�d � |� dd� |� dd� |� dd� W n0 t
k
r� } z| � d | � W 5 d }~X Y nX d S )
N�filter.dztestcase01.confr� ztestcase-common.conf�
DefinitionZ
__prefix_liner� Z ignoreregexz)unexpected options after readexplicit: %s) r, r- �abspathr0 r� r rD Z readexplicitrB ra rs �fail)r" Zpath_r� rf r% r% r& �testFilterReaderExplicit> s
�
z)FilterReaderTest.testFilterReaderExplicit) rY rZ r[ rx r� r� r� r� r� r� r� ru r% r% r# r& r� � s + r� c @ s* e Zd Zd dd�Zdd� Zedd� �ZdS )
�JailsReaderTestCacheFNc C sB t ||d�}|�|� |�� |�� |�� | �|�d �� d S )N�r� r} )r r_ � readEarly�getEarlyOptions�readAllr< rB )r" r r� r} � configuratorr% r% r& �_readWholeConfR s
z#JailsReaderTestCache._readWholeConfc C s4 d}| � � �d�D ] }t�d| |�r|d7 }q|S )Nr �
z^\s*Reading files?: .*/r )ZgetLog�rsplit�re�match)r" Z filematch�cnt�sr% r% r& �_getLoggedReadCount\ s
z(JailsReaderTestCache._getLoggedReadCountc C s t j�� tj}tjt_z�t�|� t� t
|� t� t
d |d � t� t
d |d � t � }| j
||d� | �d�}| �|dkd| � | j
|d |d
� | �d �}| �|dkd | � | �d
�}| �|dkd| � | �d�}| �|dkd| � W 5 |t_X d S )Nz
/jail.confz /jail.localz/fail2ban.confz/fail2ban.localr� z
jail.localr z3Unexpected count by reading of jail files, cnt = %sTr� z jail\.localz:Unexpected count by second reading of jail files, cnt = %szfilter\.d/common\.confz5Unexpected count by reading of filter files, cnt = %sz action\.d/iptables-common\.confz5Unexpected count by reading of action files, cnt = %s)rJ r� Z
SkipIfFastr ZlogLevel�logging�DEBUGr' r( Zcopytreer �copyr� r� r r< )r" r Zsaved_llZ share_cfgr� r% r% r& �testTestJailConfCachec s(
z*JailsReaderTestCache.testTestJailConfCache)FN)rY rZ r[ r� r r r r% r% r% r& r� P s
r� c s| e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
e dd� �Z dd� Z
dd� Ze dd� �Z� ZS )�JailsReaderTestc s t t| �j||� d S rw )r r rx ry r# r% r& rx � s zJailsReaderTest.__init__c C s( t j�d�s$tdd�}| �t|j� d S )Nz/XXXr )r, r- r1 r rr r r= )r" �readerr% r% r& �testProvidingBadBasedir� s
z'JailsReaderTest.testProvidingBadBasedirc C sP t ttd�}| �|�� � | �|jdd�� | �t|j � |j dd�}d | _
| � |dddgdd dgd
d d d d
dggdd gdddgddd dgdddgddd dgddddgd
dddddgddgddgggdddgddd dgddd dgddd d gddgddgddgddgdddgddgd d gd d gd d!gd d"gg� | � d#� | �
d$� | � d%� d S )&Nr| F)Z ignoreWrongT�Zallow_no_files�addr� �autoztest-known-interpr� r� z*failure test 1 (filter.d/test.conf) <HOST>z+failure test 2 (filter.d/test.local) <HOST>z"failure test 3 (jail.local) <HOST>�startZmissinglogfilesr� z<IP>Z brokenactionr� r� r� zhit with big stick <ip>r� r� zparse_to_end_of_jail.confr� r� r� z config-errorzdJail 'brokenactiondef' skipped, because of wrong configuration: Invalid action definition 'joho[foo'zdJail 'brokenfilterdef' skipped, because of wrong configuration: Invalid filter definition 'flt[test'zoJail 'missingaction' skipped, because of wrong configuration: Unable to read action 'noactionfileforthisaction'zmJail 'missingbitsjail' skipped, because of wrong configuration: Unable to read the filter 'catchallthebadies'z!Errors in jail 'missingbitsjail'.z Skipping...z6No file(s) found for glob /weapons/of/mass/destruction)r r� r� r< r= rH rB rr r r� �maxDiffr� r� ZassertNotLogged)r" �jails�
comm_commandsr% r% r& �testReadTestJailConf� sh �
�
������&
z$JailsReaderTest.testReadTestJailConfc C sD t jjdd� t�tj�tdd��D �]}tj�|�� dd�}t
|di td�}| � |� � � z|�
i � W n< tk
r� } z | �d |t|�j|f � W 5 d }~X Y nX |�d
�s$| jd |�� d | d
� | j |j�dd��� d| d
� |jtjtd�B d�}| j |�d�dd| d
� |dkr$| jd|�dd�d| d
� q$d S )NTr� �action.d�*.confz.confr� ZTESTr zaction %r
%s: %sz-commonr� z.Action file %r is lacking [Definition] section��msgr� z#Action file %r is lacking actionban)Ztimeout�bantime)�ignorer� z5Action file %r does not contains jail-name 'f2b-TEST')Zpfziptables-allports�iptables-multiportzf2b-TESTZ actionstartzSAction file %r: interpolation of actionstart does not contains jail-name 'f2b-TEST') rJ r� r� �globr, r- r0 r �basenamer� r
r< r= rB rs r� �typerY r� �assertInrh �_optsra �stripr` r Z _escapedTagsr� rD )r" Z actionConfigZ
actionName� actionReaderrf �optsr% r% r& �testReadStockActionConf� s4 ,
�� ���z'JailsReaderTest.testReadStockActionConfc C s� t jjdd� tttd�}| �|�� � | �|�� � |� � }| �
|g � t � }|� � D �]L}|dkrhqX|�
|d�}t|�\}}|�|� | �t|�� t|||ttd�}| �|�� d| � |�i � | �|j�
dd ��� � |�
|d
�}| �t|�� �� t|�D ]�} t| �\}
} | �t|
�� | �t| t�� |
d k�rJ| �d | � t|
|i ttd�} | �| �� � | �i � | � � }
| �t|
�� | �| j�
d
d ��� � �qqXd S )NTr� r| ZINCLUDESr� r� zFailed to read filter:r� r� r� r Zportr� )rJ r� r� r r r~ r< r= rB r� rD r� rh ra r r r� r r r r
�
isinstancer� r r
)r" r
r Z
allFiltersrp r� r� r� �actionsr� ZactNameZactOptr Zcmdsr% r% r& �testReadStockJailConf� sL
�
�
z%JailsReaderTest.testReadStockJailConfc C s� t jjdd� ttdtd�}| �|�� � | �|�� � t dd� t
�
t j �
ddd��D ��}t d d� |jD ��}d | _| �|�|�d
|�|� � | �|�|�d |�|� � d S ) NTr� �r r� r} c s s> | ]6}|� d �s|� d�stj�tj�|�d �d V qdS )z common.confz-aggressive.confr r N)r� r, r- �splitext�splitr� r% r% r& r� % s
�zBJailsReaderTest.testReadStockJailFilterComplete.<locals>.<genexpr>r r� r c s s | ]}t |jd �d V qdS )r� r N)r r� )r� rp r% r% r& r� ) s z=More filters exists than are referenced in stock jail.conf %rz2Stock jail.conf references non-existent filters %r)rJ r� r� r r r~ r< r= rB r� r r, r- r0 r
r �issubset�
difference)r" r
�filtersZ filters_jailr% r% r& � testReadStockJailFilterComplete s" �� � �z/JailsReaderTest.testReadStockJailFilterCompletec C s( t jjdd� ttdtd�}| �|�� � | �|�� � |j dd�}| �t
|�� |D ]@}t
|�dkrV|d |d gdd gkrV| �t � |d �dk� qVd
D ]B}| �
d |gd d
� |D �� | �
d|ddg|� | �
d|g|� q�| �|d d d� |jD �]&}|j}|�� }| jt
|�d| d� |D ]�}|� � }|�� } dt|�k�r(| �
d|j� d}
|d| g} |D ]�}t
|�dk�r�|d dk�r�|dd� | k�r�ddd � |d D �k}
n@t
|�d k�r�|d dk�r�|dd� | k�r�|d dk�r�d}
|
�rj �q�qj| j|
d | t|�f d� �q(q�d S ) NTr� r# r rQ r r r� r )r� Zrecidiver c s s2 | ]*}t |�d kr|d dkr|dd� V qdS )rQ r r Nr r� �r� r� r% r% r& r� I s zDJailsReaderTest.testReadStockJailConfForceEnabled.<locals>.<genexpr>r� �warnr r� z No actions found for jail %sr z <blocktype>Z blocktypeFr� rS r� r c S s g | ] }|d �qS )r r% r* r% r% r& r� f s zEJailsReaderTest.testReadStockJailConfForceEnabled.<locals>.<listcomp>r� z Found no %s command among %s)rJ r� r� r r r~ r< r= rB r� r� r Z str2secondsr rD Z_JailsReader__jailsr� r� �strZ _initOpts) r" r
r Zcommand�jr! Z jail_namer� �commandsZ action_nameZblocktype_presentZtarget_commandr% r% r& �!testReadStockJailConfForceEnabled2 s` $
�
�
� �
�
��z1JailsReaderTest.testReadStockJailConfForceEnabledc sN t jjdd� t� }|�t� | �|�� t� |�� |� � }| �|d d� | �|d d� |�
� |� � |� � |�
� � � fdd�}| �|d �|d
� k o�|d �k n � | �|d �|d
�k� | �|d�|d
�k� | �� dd dgdd
dgdd dgdd
dgdddgdd dgg� |j�d� | �|j�� d� | �|�� t� d S )NTr� Zsocketz /var/run/fail2ban/fail2ban.sockZpidfilez /var/run/fail2ban/fail2ban.pidc sF t � �D ](\}}|d dkr|d | kr| S qtd| � f ��d S )Nr r� r z/Did not find command 'set %s' among commands %s)� enumerater )rA rd rf �r. r% r& �find_set� s
�z7JailsReaderTest.testStockConfigurator.<locals>.find_setZ syslogsocketZloglevelZ logtargetZ
dbpurgeageZdbfileZ dbmaxmatchesr� r
�INFOz/var/log/fail2ban.logz"/var/lib/fail2ban/fail2ban.sqlite3�
Z1dz/tmp)rJ r� r� r r_ r rD Z
getBaseDirr� r� r� rB ZconvertToProtocolZgetConfigStreamr< r� Z_Configurator__jails)r" r� r r2 r% r1 r& �testStockConfiguratorq s:
"�� z%JailsReaderTest.testStockConfiguratorc C s� t �t j�|d�� t �t j�|d�� tt j�|dd�d��� tt j�|dd�d��� tt j�|d�d�}|�d� |�� t|i d�}| �|� � � | �|�
� � |j d d
�}d d � |D �}| � t
td
d� |D ���d� | � |d d d� d S )Nr� r ztestaction1.confr+ ztestfilter1.conf� jail.confz�
[testjail1]
enabled = true
action = testaction1[actname=test1]
testaction1[actname=test2]
testaction.py
testaction.py[actname=test3]
filter = testfilter1
r| Tr c S s. g | ]&}|d d� dddgkr|dd � �qS )NrQ r� Z testjail1r� r% )r� Zcommr% r% r& r� � s �z:JailsReaderTest.testMultipleSameAction.<locals>.<listcomp>c s s | ]}|d V qdS )r Nr% )r� r� r% r% r& r� � s z9JailsReaderTest.testMultipleSameAction.<locals>.<genexpr>rS r� z{})r, �mkdirr- r0 r3 r5 r4 r r< r= rB r� rD r� r� )r" r �jailfdr
r Z add_actionsr% r% r& �testMultipleSameAction� s
z&JailsReaderTest.testMultipleSameActionc C s | j td| jdd� d S )Nz'Have not found any log file for .* jailZpolling��backend)ZassertRaisesRegexr � _testLogPathr! r% r% r& � testLogPathFileFilterBackend� s �z,JailsReaderTest.testLogPathFileFilterBackendc
C sZ zddl m} W n, tk
r< } zt�d��W 5 d }~X Y nX | jdd� | jdd� d S )Nr )�
FilterSystemdz&systemd python interface not availableZsystemdr: zsystemd[journalflags=2])Zserver.filtersystemdr> rs rJ rK r< )r" r> rf r% r% r& �testLogPathSystemdBackend� s z)JailsReaderTest.testLogPathSystemdBackendc C s` t tj�|d�d�}|�d||f � |�� t|d�}| �|�� � | �|� � � |�
� d S )Nr6 r+ z�
[testjail1]
enabled = true
backend = %s
logpath = %s/not/exist.log
/this/path/should/not/exist.log
action =
filter =
failregex = test <HOST>
r ) r3 r, r- r0 r4 r5 r r< r= rB r� )r" r r; r8 r
r% r% r& r< � s �
z JailsReaderTest._testLogPath)rY rZ r[ rx r r r r" r) r/ r5 r r9 r= r? r< ru r% r% r# r& r � s 1??3
r )6�
__author__Z
__copyright__Z __license__r r r, r� r' r rJ Zclient.configreaderr r r r Zclientr Zclient.jailreaderr r r
Zclient.filterreaderr Zclient.jailsreaderr Zclient.actionreaderr
r Zclient.configuratorr Z
server.mytimer r Zutilsr r r- r0 r/ �__file__r� r� r r� r} r~ r� r� ZTestCaser rv r� r� r r% r% r% r& �<module> s@ C ay: