|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/fail2ban/tests/__pycache__/ |
Upload File : |
o
� �_�I � @ s� d Z dZdZddlZddlZddlZddlmZ ddlm Z dd l
m Z dd
l m
Z
mZmZmZ ej�ej�e�d �ZG d d
� d
e
�ZdS )z Daniel Blackz Copyright (c) 2013 Daniel Black�GPL� N� )�
FailTicket)�Utils� )� DummyJail)�LogCaptureTestCase�
with_alt_time� with_tmpdir�MyTime�filesc s� e Zd Z� fdd�Z� fdd�Zi fdd�Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z e
dd� �Zdd� Zdd� Ze
edd � ��Z� ZS ) �ExecuteActionsc s$ t t| ��� t� | _| jj| _dS )z Call before every test case.N)�superr
�setUpr �_ExecuteActions__jail�actions�_ExecuteActions__actions��self�� __class__� �@/usr/lib/python3/dist-packages/fail2ban/tests/actionstestcase.pyr ) s zExecuteActions.setUpc s t t| ��� d S )N)r r
�tearDownr r r r r / s zExecuteActions.tearDownc C s� | j �d� | j d }d|�dd� |_d|�dd� |_d|�dd� |_d |�d
d� |_d |�d d� |_d
|�dd� |_|S )N�ipz
echo ip start�start� zecho ip ban <ip>�banzecho ip unban <ip>�unbanz
echo ip check�checkz
echo ip flush�flushz echo ip stop�stop) r �add�get� actionstart� actionban� actionunban� actioncheck� actionflush�
actionstop)r �o�actr r r �
defaultAction2 s
z ExecuteActions.defaultActionc C s" | j �d� | �t| j jd� d S )N�test)r r" � assertRaises�
ValueErrorr r r r �testActionsAddDuplicateName= s z*ExecuteActions.testActionsAddDuplicateNamec C s� | j �d� | �| j d � | �d| j � | �d| j � | j �d� | j d= | j d= | �d| j � | �t| j �d� | j �d� | �| j �� d� | � t
| j j d� d S )Nr- znonexistant action�test1r � z 127.0.0.1) r r" �
assertTrue�assertIn� assertNotIn� assertEqual�len�
setBanTime�
getBanTimer. r/ �removeBannedIPr r r r �testActionsManipulationA s z&ExecuteActions.testActionsManipulationc C sj | � | j�d�d� | �d� | �� | � | j�g d��d� | �d� | �d� | �d� | �d� d S ) N� 192.0.2.1r �
Ban 192.0.2.1)r< z 192.0.2.2z 192.0.2.3r �192.0.2.1 already bannedz
Ban 192.0.2.2z
Ban 192.0.2.3)r6 r � addBannedIP� assertLogged�pruneLog�assertNotLoggedr r r r �testAddBannedIPP s
z ExecuteActions.testAddBannedIPc C s� | � � | j�� | jdd dd� | j�� | j�� | �dd dd � | �| j�� ddd g fg� | �| j�d
�ddg� d S ) N�
stdout: %r�ip startT��waitzip flush�ip stop)zCurrently bannedr )z Total bannedr zBanned IP list�short)r, r r r@ r! �joinr6 �statusr r r r �testActionsOutputZ s
�
�z ExecuteActions.testActionsOutputc
s� � j �dtj�td�ddi� � �d� � j �� � �t �
� fdd�d�� � j � � � j �� � �d � � � t
� j jd
d i � � j �d tj�td�dd
d�� � � t� j jdtj�td�dd
dd�� � � t� j jdtj�td�i � d S )N�Actionzaction.d/action.py�opt1�valuezTestAction initialisedc �
� � d�S )NzTestAction action start��
_is_loggedr r r r �<lambda>n �
z4ExecuteActions.testAddActionPython.<locals>.<lambda>� zTestAction action stop�Action3z/does/not/exist.py�Action4�value2)rN �opt2�Action5�value3)rN rY �opt3)r r" �os�pathrJ �TEST_FILES_DIRr@ r r3 r �wait_forr! r. �IOError� TypeErrorr r r r �testAddActionPythonf s4 �
��
�
�z"ExecuteActions.testAddActionPythonc s� � � t� jjdtj�td�i � � � t� jjdtj�td�i � � j�dtj�td�i � � j�� � � t
� � fdd�d�� � j� � � j�� � �
d� d S ) NrM zaction.d/action_noAction.pyzaction.d/action_nomethod.pyzaction.d/action_errors.pyc rP )NzFailed to startrQ r r r r rS � rT z7ExecuteActions.testAddPythonActionNOK.<locals>.<lambda>rU zFailed to stop)r. � RuntimeErrorr r" r] r^ rJ r_ r r3 r r` r! r@ r r r r �testAddPythonActionNOK� s.
��
��
��
z%ExecuteActions.testAddPythonActionNOKc C s� | j �dtj�td�i � | j �dtj�td�i � | j�td�� | j � � | �
d� | � d� | � d� | j � � | �
d� | � d � | � d
� d S ) N�action1z action.d/action_modifyainfo.py�action2z1.2.3.4�Failed to execute banz action1 ban deleted aInfo IPz action2 ban deleted aInfo IPzFailed to execute unbanz action1 unban deleted aInfo IPz action2 unban deleted aInfo IP)
r r" r] r^ rJ r_ r �
putFailTicketr �_Actions__checkBanrB r@ �_Actions__flushBanr r r r �testBanActionsAInfo� s& � �
z"ExecuteActions.testBanActionsAInfoc C s� d| j _d| j _| j �d� | j �� t�d� d}|dk r3d| }| j�t |d�� |d7 }|dk s | j
dd d
� t�d � |d k rXd| }| j�t |d �� |d7 }|d k sC| j
d
d d
� | j � � | j � � | �
d� | �
d� d S )NrU � �d r � z
192.0.2.%dr z / 20,TrF �� �2 z / 50,zUnbanned 30, 0 ticket(s)zUnbanned 50, 0 ticket(s))r �
banPrecedence�
unbanMaxCountr8 r r �setTimer ri r r@ r! rJ rB )r �ir r r r �testUnbanOnBusyBanBombing� s.
�
�
z(ExecuteActions.testUnbanOnBusyBanBombingc C s� | � ddd��}|jd |d< d|_| j�� | �dd � | �| j�d�d � | �| j�d
�d � | jd d dd dd
dd ddd� | � d� |j
d |d< | j� d
� | jddd� | � d� | j� � | jdd dd ddddd dddd� | � d� |j
|d< | �| j�d
�d � | jd dd dd ddd� | jdd dd � | � d � | j� � | jdddd dd ddd� | jdd dd dd d dd � | � d!� |j|d< | j�
� | j�� | jdd dd d"ddd� | jd#dd d$dd � d S )%N� <family>)r r �; exit 1�actionflush?family=inet6TrD rE r< r � 2001:db8::1r= �Ban 2001:db8::1�ip ban 192.0.2.1�ip ban 2001:db8::1��allrG �>[test-phase 1a] simulate inconsistent irreparable env by unban�actioncheck?family=inet6z,Invariant check failed. Unban is impossible.rF z>[test-phase 1b] simulate inconsistent irreparable env by flush�ip flush inet4�ip flush inet6�Failed to flush bans�'No flush occurred, do consistency check�<Invariant check failed. Trying to restore a sane environmentrH � [test-phase 2] consistent env�ip check inet4�r �-[test-phase 3] failed flush in consistent env�ip check inet6� Unable to restore environment�![test-phase end] flush successful�action ip terminated�ERROR� Unban tickets each individualy)r, r( �actionstart_on_demandr r rB r6 r? r@ rA r' r: rk r! rJ �r r+ r r r �testActionsConsistencyCheck� s�
�
�
�
�
�
��
�
�z*ExecuteActions.testActionsConsistencyCheckc C s� | � ddddd��}|jd |d< d|_d|_| j�� | �dd � | �| j�d�d � | �| j�d
�d � | j d d dd
dd dd dd ddd� |j
d |d< | � d� | j� d
� | j ddd ddd� | jdd dd dd
dd� | � d� | �| j�d
�d � | j ddd dd dd ddddd� | jdd dd
dd� |j
|d< | �| j�d �d � |j
d |d< | � d � | j�
� | j dd dd d d!ddd d"ddd� | jdd dd� | � d#� |j
|d< | �| j�d
�d � | j d dd dd ddd� | jdd$ dd
dd� | � d%� |j
|d< | j�
� | j d d!dd dd ddd� | jdd dd dd
dd dd dd� | � d&� |j|d< | j�� | j�� | j dd dd dd d'ddd� | jd(dd d)dd� d S )*Nrw )r r r r! rx ry TrD rE r< r rz r= r{ �ip start inet4r| �ip start inet6r} r~ r� r� r� z
ip stop inet6z
ip stop inet4r� z<[test-phase 1b] simulate inconsistent irreparable env by banr� r� rh � 2001:db8::2z>[test-phase 1c] simulate inconsistent irreparable env by flushr� r� r� r� z Failed to flush bans in jailr� r� r� r� r� r� r� )r, r( r� �actionrepair_on_unbanr r rB r6 r? r@ r' rA r: rk r! rJ r� r r r �"testActionsConsistencyCheckDiffFam" s�
�
��
��
�
�
��
��
�
�z1ExecuteActions.testActionsConsistencyCheckDiffFamc C s� | � dddddd��}|d |d< d |_d
|_d |_| �d � | �| j�d
dg�d� | jdddd dd dd dd d d� | �d� | � |d � | �d� | �
d� | �� | � |d � | �d� | �
d� t � t �
� d � | �d � | �| j�g d ��d � | jd!d"d#dd$ dd% d d� | � |d � | � |d � | j
d&d'dd dd( dd dd) d*d+d d� t � t �
� d � t�|d � t�|d � | �d,� | �| j�d
dg�d� | jd-dd. dd/ d0d1dd( dd) d d� | �d2� | �| j�d3�d � | jd4dd5 d d� | j
d-dd. dd/ d0d1dd( dd) d d� | �d6� | � |d � | �d7� | �
d8� | �� | � |d � | jd8d9d d� | �
d7� d:|_d;|_| �| j�td
d<��d<� | jd=d>d d� d S )?Nz <family>; touch "<FN>"z <family>; test -f "<FN>"z <family>; echo -n "" > "<FN>"z <family>; rm -f "<FN>"z) <family>; echo "<ip> <family>" >> "<FN>")r r r r! r z /<family>�FNTz%echo ip repair <family>; touch "<FN>"zGecho ip reban <ip> <family>; echo "<ip> <family> -- rebanned" >> "<FN>"z[test-phase 0] initial banr< rz r r= r{ rD r� zip ban 192.0.2.1 inet4r� zip ban 2001:db8::1 inet6r� z[test-phase 1] check banz/inet4z192.0.2.1 inet4z2001:db8::1 inet6z/inet6� z#[test-phase 2] check already banned)r< rz r� r r> z2001:db8::1 already bannedzBan 2001:db8::2r� r� zReban 192.0.2.1zReban 2001:db8::1zip reban 192.0.2.1 inet4zip reban 2001:db8::1 inet6z192.0.2.1 inet4 -- repairedz 2001:db8::1 inet6 -- repairedz3[test-phase 3a] check reban after sane env repairedr� zip repair inet4zip repair inet6z Reban 192.0.2.1, action 'ip'z Reban 2001:db8::1, action 'ip'z>[test-phase 3a] check reban by epoch mismatch (without repair)r� z Reban 2001:db8::2, action 'ip'zip reban 2001:db8::2 inet6z[test-phase 4] check rebanz192.0.2.1 inet4 -- rebannedz 2001:db8::1 inet6 -- rebannedz 2001:db8::2 inet6 -- rebannedr zexit 1r zFailed to execute rebanzError banning 192.0.2.1)r, r� � actionrepair� actionrebanrA r6 r r? r@ �dumpFilerB r rt �timer] �remover% �_Actions__reBanr )r �tmpr+ r r r �!testActionsRebanBrokenAfterRepair� s� �
�
��
�
��
�
�z0ExecuteActions.testActionsRebanBrokenAfterRepair)�__name__�
__module__� __qualname__r r r, r0 r; rC rL rc re rl r rv r� r� r
r� �
__classcell__r r r r r
' s$
%Kor
)�
__author__�
__copyright__� __license__r� r] �tempfile�
server.ticketr � server.utilsr � dummyjailr �utilsr r r
r r^ rJ �dirname�__file__r_ r
r r r r �<module> s