File: //lib/python3/dist-packages/fail2ban/tests/__pycache__/fail2banregextestcase.cpython-38.pyc
U
ܜ^�? � @ s� d Z dZdZddlZddlZddlZddlmZ ddlm Z m
Z
m Z m Z m
Z
dd lmZmZmZmZ dd
lmZ ee_d d � Zee_ ej�ej�e�d
�Zej�ej�e�d�Zdadd� Z dd� Z G dd� de �Z dd� Z dZ!dZ"dZ#dZ$ej�ed�Z%ej�ed �Z&ej�ed �Z'ej�ed d �Z(ej�ed d!�Z)ej�ed"�Z*ej�ed d#�Z+ej�ed d$�Z,ej�ed d%�Z-G d&d'� d'e�Z.dS )(z Serg BresterzHCopyright (c) 2015 Serg G. Brester (sebres), 2008- Fail2Ban ContributorsZGPL� N� )�
fail2banregex)�
Fail2banRegex�get_opt_parser�exec_command_line�output� str2LogLevel� )� setUpMyTime�tearDownMyTime�LogCaptureTestCase�logSys)�
CONFIG_DIRc G s t �| d � d S )Nr )r
�notice)�args� r �F/usr/lib/python3/dist-packages/fail2ban/tests/fail2banregextestcase.py� _test_output% s r Zconfig�filesc G s@ t � }|�t| ��\}} |jdkr2t�t|j�� || t|�fS )N)r Zwarning)r �
parse_args�listZ log_levelr
ZsetLevelr r )r �parser�optsr r r �_Fail2banRegex/ s
r c G s t | � \}} }|�| �S �N)r �start)r r Z
fail2banRegexr r r �
_test_exec7 s r c @ s e Zd Zdd� ZdS )�
ExitExceptionc C s || _ d| | _d S )NzExit with code: %s)�code�msg)�selfr r r r �__init__< s zExitException.__init__N)�__name__�
__module__� __qualname__r! r r r r r ; s r c
G s� d dd�}t jt jt jd�}d}|t _ts6ttjd�at t _t _z>ztt | �� W n( t
k
r| } z
|j }W 5 d }~X Y nX W 5 |d t _|d t _|d t _X |S )
Nr c S s t | ��d S r )r )r r r r �_exitA s z&_test_exec_command_line.<locals>._exit)�exit�stdout�stderr�wr& r' r( )r ) �sysr& r' r( �DEV_NULL�open�os�devnullr r r r )r r% Z_orgZ
_exit_code�er r r �_test_exec_command_line@ s
r0 zRDec 31 11:59:59 [sshd] error: PAM: Authentication failure for kevin from 192.0.2.0z�(?:(?:Authentication failure|Failed [-/\w+]+) for(?: [iI](?:llegal|nvalid) user)?|[Ii](?:llegal|nvalid) user|ROOT LOGIN REFUSED) .*(?: from|FROM) <HOST>z8Authentication failure for <F-ID>.*?</F-ID> from <HOST>$z<Authentication failure for <F-USER>.*?</F-USER> from <HOST>$ztestcase01.logztestcase02.logztestcase-wrong-char.logZlogs�sshdzfilter.dz sshd.confz zzz-sshd-obsolete-multiline.logz zzz-sshd-obsolete-multiline.confzzzz-generic-examplezzzz-generic-example.confc @ s e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Z d5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z!d?S )@�Fail2banRegexTestc C s t �| � t� dS )z Call before every test case.N)r �setUpr
�r r r r r3 h s
zFail2banRegexTest.setUpc C s t �| � t� dS )zCall after every test case.N)r �tearDownr r4 r r r r5 m s
zFail2banRegexTest.tearDownc C s | � tdd�� | �d� d S )N�testz.** from <HOST>$�$Unable to compile regular expression�� assertFalser � assertLoggedr4 r r r � testWrongREr s
�z Fail2banRegexTest.testWrongREc C s$ | � tddddd�� | �d� d S )N�
--datepatternz{^LN-BEG}EPOCHr6 z.*? from <HOST>$z.**r7 r8 r4 r r r �testWrongIngnoreREx s �z$Fail2banRegexTest.testWrongIngnoreREc C s& | � tddddtd�� | �d� d S )Nr< �*^(?:%a )?%b %d %H:%M:%S(?:\.%f)?(?: %ExY)?�--print-all-matched�--print-no-missed�+Authentication failure for .*? from <HOST>$�.Lines: 1 lines, 0 ignored, 1 matched, 0 missed��
assertTruer �STR_00r: r4 r r r �testDirectFound s �z!Fail2banRegexTest.testDirectFoundc C s | � tdtd�� | �d� d S )N�--print-all-missedzXYZ from <HOST>$z.Lines: 1 lines, 0 ignored, 0 matched, 1 missedrC r4 r r r �testDirectNotFound� s �z$Fail2banRegexTest.testDirectNotFoundc C s" | � tdtdd�� | �d� d S )N�--print-all-ignoredrA zkevin from 192.0.2.0$z.Lines: 1 lines, 1 ignored, 0 matched, 0 missedrC r4 r r r �testDirectIgnored� s �z#Fail2banRegexTest.testDirectIgnoredc C sL | � tdddtt�� | �d� | �d� | �d� | �d� | �d� d S ) Nr< r> r? �0Lines: 19 lines, 0 ignored, 13 matched, 6 missed�Error decoding linez6Continuing to process line ignoring invalid characterszVDez 31 11:59:59 [sshd] error: PAM: Authentication failure for kevin from 193.168.0.128zVDec 31 11:59:59 [sshd] error: PAM: Authentication failure for kevin from 87.142.124.10�rD r � FILENAME_01�RE_00r: r4 r r r �testDirectRE_1� s �
z Fail2banRegexTest.testDirectRE_1c C s& | � tddddtt�� | �d� d S )Nr< r> r? �--rawz0Lines: 19 lines, 0 ignored, 16 matched, 3 missedrM r4 r r r �testDirectRE_1raw� s �z#Fail2banRegexTest.testDirectRE_1rawc
C s\ | � tdddddtt�� | �d� | �� | � tddd d
�� | jd d d
� | �d� d S )Nr< r> r? rQ z --usedns=norK �-d�^Epochz 1490349000 test failed.dns.chz^\s*test <F-ID>\S+</F-ID>rB T��allz)Unable to find a corresponding IP address)rD r rN rO r: �pruneLog�assertNotLoggedr4 r r r �testDirectRE_1raw_noDns� s& �
�z)Fail2banRegexTest.testDirectRE_1raw_noDnsc C s$ | � tdddtt�� | �d� d S )Nr< r> r? �/Lines: 13 lines, 0 ignored, 5 matched, 8 missed�rD r � FILENAME_02rO r: r4 r r r �testDirectRE_2� s �z Fail2banRegexTest.testDirectRE_2c C s@ | � tdddddddtt� � | �d� | �d � | �d
� d S ) Nr< r> z
--timezonezUTC+0200z --verbose�--verbose-dater@ rZ z&141.3.81.106 Sun Aug 14 11:53:59 2005z&141.3.81.106 Sun Aug 14 11:54:59 2005r[ r4 r r r � testVerbose� s �
z Fail2banRegexTest.testVerbosec
C sv | � tdddddddttd�
� | jd d
d d � | �� | � tddd
dtdd�� | jddd d � | jddd d � d S )N�-lr �-vr^ r? rI �-cr1 �8[29116]: User root not allowed because account is lockedz)[29116]: Received disconnect from 1.2.3.4TrU �-vvzRDec 31 11:59:59 [sshd] error: PAM: Authentication failure for kevin from 192.0.2.1zsshd[logtype=short]zReal filter options :z'logtype': 'short'�'logtype': 'file'�'logtype': 'journal')rD r r �
FILENAME_SSHDr: rW rX r4 r r r �testVerboseFullSshd� s8 � � �z%Fail2banRegexTest.testVerboseFullSshdc
C s0 | � tddddttd�� | jdddd d
� d S ) Nr` r r? rb zsshd.conf[mode=normal]z"[29116]: Connection from 192.0.2.4rc �+[29116]: Received disconnect from 192.0.2.4TrU )rD r r �FILENAME_ZZZ_SSHDr: r4 r r r � testFastSshd� s � �z Fail2banRegexTest.testFastSshdc
C s> | � tdddddtj�t�ttj�t��� | jddd� d S ) Nr` r r? rG rb ri TrU ) rD r r- �path�dirname�FILTER_ZZZ_SSHDrj �basenamer: r4 r r r �testMultilineSshd� s
� �z#Fail2banRegexTest.testMultilineSshdc C s | � tddttd �� d S )Nr` r z [mode=test])rD r �FILENAME_ZZZ_GEN�FILTER_ZZZ_GENr4 r r r �testFullGeneric s �z!Fail2banRegexTest.testFullGenericc
C sl dD ]b}| � d| � | �tddddddd d
| d d � � | �d
|d |d f � | jdddd� qd S )N)r � z[test-phase %s]�--usedns�norS rT r? �
--maxlines�5z1490349000 TEST-NL
�L1490349000 FAIL
1490349000 TEST1
1490349001 TEST2
1490349001 HOST 192.0.2.34�*^\s*FAIL\s*$<SKIPLINES>^\s*HOST <HOST>\s*$z0Lines: %s lines, 0 ignored, 2 matched, %s missed� r z| 1490349000 FAILz | 1490349001 HOST 192.0.2.34TrU )rW rD r r: )r ZpreLinesr r r �testDirectMultilineBuf s" ��z(Fail2banRegexTest.testDirectMultilineBufc
C s: | � tddddddddd d
�
� | �d � | �d d
� d S )Nru rv rS rT �
--debuggexr? rw rx ry rz �.Lines: 4 lines, 0 ignored, 2 matched, 2 missedz&flags=mz?flags=m�rD r r: r4 r r r � testDirectMultilineBufDebuggex s �
z0Fail2banRegexTest.testDirectMultilineBufDebuggexc
C s( | � tddddddd�� | �d� d S ) Nru rv rS rT r? z)1490349000 FAIL: failure
host: 192.0.2.35z ^\s*FAIL:\s*.*\nhost:\s+<HOST>$rB r r4 r r r � testSinglelineWithNLinContent" s �z/Fail2banRegexTest.testSinglelineWithNLinContentc
C s( | � tddddddd�� | �d� d S ) Nz-rrS �^\[{LEPOCH}\]\s+rw rx z�[1516469849] 192.0.2.1 FAIL: failure
[1516469849551] 192.0.2.2 FAIL: failure
[1516469849551000] 192.0.2.3 FAIL: failure
[1516469849551.000] 192.0.2.4 FAIL: failurez^<HOST> FAIL\b�.Lines: 4 lines, 0 ignored, 4 matched, 0 missedr r4 r r r �testRegexEpochPatterns+ s �z(Fail2banRegexTest.testRegexEpochPatternsc
C s8 | � tddddddd�� | �d� | jd d
d d � d S )
Nrd rS r� rw rx z�[1516469849] 192.0.2.1 FAIL: failure
[1516469849] 192.0.2.1/24 FAIL: failure
[1516469849] 2001:DB8:FF:FF::1 FAIL: failure
[1516469849] 2001:DB8:FF:FF::1/60 FAIL: failure
z^<SUBNET> FAIL\br� z 192.0.2.0/24z2001:db8:ff:f0::/60TrU r r4 r r r �testRegexSubnet6 s �
z!Fail2banRegexTest.testRegexSubnetc C s� | � tddtt�� | �d� | �� | � tddtt�� | jddddd � | �� | � tddtt�� | jd
dd dd � | �� | � tdd tt�� | �t� | �� | � tdd
tt�� | �d� | �� d S )Nz-o�idZkevin�rowz['kevin'z'ip4': '192.0.2.0'z'fid': 'kevin'TrU z ['192.0.2.0'z'user': 'kevin'r �user)rD r rE �RE_00_IDr: rW �
RE_00_USERr4 r r r �testFrmtOutputB s
z Fail2banRegexTest.testFrmtOutputc C s | � ttt�� d S r )r9 r rq r4 r r r �testWrongFilterFileX s �z%Fail2banRegexTest.testWrongFilterFilec C s ddl m} |�� d S )Nr )�_decode_line_warn)Z
server.filterr� �clear)r r� r r r �_reset^ s zFail2banRegexTest._resetc C sd t jjdd� | �� | �tddddtt�� | �d� | �d� | �d � | �d
� | �d � d S ) NT�Zstockr` r r< r> r~ rL z7Continuing to process line ignoring invalid characters:zMNov 8 00:16:12 main sshd[32548]: input_userauth_request: invalid user llincozkNov 8 00:16:12 main sshd[32547]: pam_succeed_if(sshd:auth): error retrieving information about user llinco� �unittestZF2BZSkipIfCfgMissingr� rD r �FILENAME_WRONGCHAR� FILTER_SSHDr: r4 r r r � testWronCharc s �
z Fail2banRegexTest.testWronCharc C sV t jjdd� | �� | �tddddddttd � � | �d
� | �d � | �d � d S )
NTr� r` r r< r> r} r? z llinco[^\\]rL z.Lines: 4 lines, 1 ignored, 2 matched, 1 missedzhttps://r� r4 r r r �testWronCharDebuggexs s �
z&Fail2banRegexTest.testWronCharDebuggexc C sP | � t� d� | �� | �td�d� | �t�� � | �� | �td�d� d S )Nr z-Vz --version)�assertNotEqualr0 rW � assertEqualr: r Z normVersionr4 r r r �testExecCmdLine_Usage� s z'Fail2banRegexTest.testExecCmdLine_Usagec C s$ | � tddtd�d� | �d� d S )Nr` �inforA r rB )r� r0 rE r: r4 r r r �testExecCmdLine_Direct� s ��z(Fail2banRegexTest.testExecCmdLine_Directc C s$ | � tddtd�d� | �d� d S )Nr` r� zAuthentication failurer zNo failure-id group in )r� r0 rE r: r4 r r r �testExecCmdLine_MissFailID� s ��z,Fail2banRegexTest.testExecCmdLine_MissFailIDc C sR | � tdddddd�d� | �d� | �� | � td dddd�d� | �d
� d S ) Nr` r rS z%:%.%-ZLOGZREr z ERROR: Failed to set datepatternra zFailed to set datepattern)r� r0 r: rW r4 r r r �testExecCmdLine_ErrorParam� s, ��
��z,Fail2banRegexTest.testExecCmdLine_ErrorParamc C s� t jst�d��| �tdtd d �� | �d� | �d� | �d� | � � | �tdtd d d �� | �d� | �d� d S )
Nz.Skip test because no systemd backand availablezsystemd-journalz,[journalmatch="SYSLOG_IDENTIFIER=dummy",z; failregex="^ dummy regex, never match <F-ID>xxx</F-ID>"]rf re z.Lines: 0 lines, 0 ignored, 0 matched, 0 missedz[logtype=file,z, journalmatch="SYSLOG_IDENTIFIER=dummy",)
r Z
FilterSystemdr� ZSkipTestrD r rr r: rX rW r4 r r r �testLogtypeSystemdJournal� s4
���
����
z+Fail2banRegexTest.testLogtypeSystemdJournalN)"r" r# r$ r3 r5 r; r= rF rH rJ rP rR rY r] r_ rh rk rp rs r| r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r2 f s>
r2 )/�
__author__Z
__copyright__Z __license__r- r* r� Zclientr Zclient.fail2banregexr r r r r Zutilsr
r r r
r r rl �joinrm �__file__ZTEST_CONFIG_DIRZTEST_FILES_DIRr+ r r � Exceptionr r0 rE rO r� r� rN r\ r� rg r� rj rn rq rr r2 r r r r �<module> sB