|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/fail2ban/tests/__pycache__/ |
Upload File : |
o
;s*b\� � @ sv d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m Z m
Z
mZ ddlmZ ddlmZmZmZ dd lmZ dd
lmZ dd lmZmZ dd l m Z dd
l m Z ddl m Z ddl!m"Z"m#Z# ej$�%ej$�&e'�d�Z(i Z)ddl!m*Z* e j+j,Z-ej$�%ej$�&e'�d�Z.i Z/G dd� de j0�Z1G dd� de"�Z2G dd� de"�Z3G dd� de"�Z4G d d � d e"�Z5dS ) z!Cyril Jaquier, Yaroslav Halchenkoz>Copyright (c) 2004 Cyril Jaquier, 2011-2013 Yaroslav Halchenko�GPL� N� )� ConfigReader�ConfigReaderUnshared�DefinitionInitConfigReader�NoSectionError)�configparserinc)�
JailReader�extractOptions�splitWithOptions)� FilterReader)� JailsReader)� ActionReader�
CommandAction)� Configurator)�MyTime)�version� )�LogCaptureTestCase� with_tmpdir�files)�
CONFIG_DIR�configc sx e Zd Z� fdd�Zdd� Zddd�Zdd � Zd d d �Zd
d� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Z� ZS ) �ConfigReaderTestc s. t t| ��� tjdd�| _t| jd�| _dS )z Call before every test case.zf2b-temp)�prefix��basedirN)�superr �setUp�tempfile�mkdtemp�dr �c��self�� __class__� �E/usr/lib/python3/dist-packages/fail2ban/tests/clientreadertestcase.pyr 7 s zConfigReaderTest.setUpc C s t �| j� dS )zCall after every test case.N)�shutil�rmtreer! r# r' r' r( �tearDown= s zConfigReaderTest.tearDownNc C s� t jj|v r t j�|�}t j�| j|�}t j�|�s t �|� td| j|f d�}|d ur4|� d| � |d ur=|� |� |�
� d S )N�%s/%s�wz
[section]
option = %s
) �os�path�sep�dirname�joinr! �exists�makedirs�open�write�close)r$ �fname�value�contentr! �d_�fr' r' r( �_writeA s
�
zConfigReaderTest._writec C s* t �d| j|f � | �| j�d�� d S )Nr, r" )r. �unlinkr! �
assertTruer" �read)r$ r8 r' r' r( �_removeR s zConfigReaderTest._remover" c C s& | � | j�|�� | j�ddg�d S )N�section)�int�optionrD )r? r" r@ �
getOptions)r$ r< r' r' r( �
_getoptionV s zConfigReaderTest._getoptionc C s� | j �d� | j �ddd� | j �ddd� | j �ddd� | j �dd�}| �|dd d
d �� | j �dd �}| �|dd d d �� | j �dd
dd
d ��}| �|dd d
d �� d S )N�
Definition�a�1�br" �test))rC rH r )�boolrJ r )rC r" r r Tr )rH rJ r" ))rC rH )rL rJ )rC r" )rC r )rL r )r" � add_section�setrE �assertSortedEqual)r$ �optsr' r' r( � testConvertZ s ��
�z ConfigReaderTest.testConvertc C sx t j�| jd�}| �dd� | �| �d�d� t �|d� t �|t j �s/| �
| j � d�� d S dd l
}t�d|�
� ��)Nzd.confr r! z0Skipping on %s -- access rights are not enforced)r. r/ r2 r! r= � assertEqualrF �chmod�access�R_OK� assertFalser" r@ �platform�unittest�SkipTest)r$ r< rW r' r' r( �testInaccessibleFilei s z%ConfigReaderTest.testInaccessibleFilec C sL | � | j�d�� | �dd� | �| �� d� | �dd� | �| �� d� | �dd� | �| �� d � | �d
d � | �| �� d � | �d d
� | �| �� d� | �dd� | �| �� d� | �dd� | �| �� d� | �d� | �d� | �| �� d� | �d � | �| �� d � | �d� | �| �� d� | �d
� | �| �� d� d S )Nr" �c.confrI r �2r z c.d/98.conf�998i� z c.d/90.conf�990z c.d/99.conf�999i� zc.local�3� z c.d/1.local�4� i� )rV r" r@ r= rR rF rA r# r' r' r( �testOptionalDotDDirv s0
z$ConfigReaderTest.testOptionalDotDDirc C s� | j dd dd� | j dd dd� | j dd dd� | j dd d d� | j d
d d d� G d d
� d
t�}|ddi �| _| j�| j� | �| j�� � | jji dd� | j�� }| � |�
d�d� | � |�
d�d� | � |�
d�d� d S )Nr[ zS
[INCLUDES]
before = ib.conf
after = ia.conf
[Definition]
test = %(default/test)s
�r9 r: zib.confz,
[DEFAULT]
test = A
[Definition]
option = 1
zib.localz,
[DEFAULT]
test = B
[Definition]
option = 2
zia.confz,
[DEFAULT]
test = C
[Definition]
oafter = 3
zia.localz,
[DEFAULT]
test = D
[Definition]
oafter = 4
c @ s$ e Zd Zddgddgddgd�ZdS )z?ConfigReaderTest.testLocalInIncludes.<locals>.TestDefConfReaderrC N�string)rD �oafterrK )�__name__�
__module__� __qualname__� _configOptsr' r' r' r( �TestDefConfReader� s
�rl r" rD T)�allr rg rc rK �D) r= r r" �
setBaseDirr! r? r@ rE � getCombinedrR �get)r$ rl �or' r' r( �testLocalInIncludes� s
z$ConfigReaderTest.testLocalInIncludesc C s� | � | j�d�� | jdd dd� | �| j�d�� | �| j�� ddg� | �| j�dd�d� | �| j�dd �d
� | �| j�dd �d� | �| j�dd �d
� | �| j�dd �d� d S )N�izi.confzu
[DEFAULT]
b = a
zz = the%(__name__)s
[section]
y = 4%(b)s
e = 5${b}
z = %(__name__)s
[section2]
z = 3%(__name__)s
re rB �section2�y�4a�ez5${b}�z�zz�
thesection� 3section2)rV r" r@ r= r? rR �sectionsrq r# r' r' r( �testInterpolations� s
z#ConfigReaderTest.testInterpolationsc C sd | � | j�d�� | jdd dd� | �| j�d�� | �| j�dd�d� | �| j�dd�d � d S )
N�g�g.confz4
[DEFAULT]
# A comment
b = a
c = d ;in line comment
re �DEFAULTrJ rH r" r! )rV r" r@ r= r? rR rq r# r' r' r( � testComments� s
z ConfigReaderTest.testCommentsc C s< | � | j�d�� | jdd dd� | �| j�d�� | �| j�dd�d� | �| j�dd�d � | �| j�d
d�d � | �| j�d
d�d � | �| j�d
d
�d� | �| j�d
d�d� | �| j�dd
�d� | �| j�dd�d� | �| j�dd
�d� | �| j�dd�d� | �t| jjdd� | �t| jjd
d� d S )Nr r� z�
[DEFAULT]
a = def-a
b = def-b,a:`%(a)s`
c = def-c,b:"%(b)s"
d = def-d-b:"%(known/b)s"
[jail]
a = jail-a-%(test/a)s
b = jail-b-%(test/b)s
y = %(test/y)s
[test]
a = test-a-%(default/a)s
b = test-b-%(known/b)s
x = %(test/x)s
y = %(jail/y)s
re rK rH z test-a-def-arJ z test-b-def-b,a:`test-a-def-a`�jailzjail-a-test-a-def-az+jail-b-test-b-def-b,a:`jail-a-test-a-def-a`r" z5def-c,b:"jail-b-test-b-def-b,a:`jail-a-test-a-def-a`"r! z'def-d-b:"def-b,a:`jail-a-test-a-def-a`"z'def-c,b:"test-b-def-b,a:`test-a-def-a`"z def-d-b:"def-b,a:`test-a-def-a`"r� zdef-c,b:"def-b,a:`def-a`"zdef-d-b:"def-b,a:`def-a`"�xrv ) rV r" r@ r= r? rR rq � assertRaises� Exceptionr# r' r' r( �testTargetedSectionOptions� s z+ConfigReaderTest.testTargetedSectionOptions)NN)r" )rh ri rj r r+ r= rA rF rQ rZ rd rs r~ r� r� �
__classcell__r' r' r% r( r 5 s
0 r c s� e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd � Zed d � �Zd d � Z� ZS )!�JailReaderTestc � t t| �j|i |�� d S �N)r r� �__init__�r$ �args�kwargsr% r' r( r� � zJailReaderTest.__init__c C s� dD ]]}| � td|f �ddg� | � td|f �ddg� | � td|f �ddg� | � td |f �d
dg� | � td |f �d dg� | � td
|f �ddg� | � td|f �ddg� qd S )N)�
� � za%sbrH rJ z a[x=y]%sbza[x=y]za[x=y][z=z]%sbz a[x=y][z=z]za[x="y][z"]%sbz a[x="y][z"]z
a[x="y z"]%sbz
a[x="y z"]z
a[x="y z"]%sbz
a[x="y z"]z
a[x="y
z"]%sbz
a[x="y
z"])rR r )r$ r0 r' r' r( �testSplitWithOptions s �z#JailReaderTest.testSplitWithOptionsc C s t dttd�}| �t|j� d S )N� XXXABSENTXXX�r � share_config)r r �CONFIG_DIR_SHARE_CFGr� �
ValueErrorr@ �r$ r� r' r' r( �testIncorrectJail s z JailReaderTest.testIncorrectJailc C sP t dttd�}| �|�� � | �|�� � | �|�� � | �d� | �d� d S )N� emptyactionr� z"No filter set for jail emptyactionz'No actions were defined for emptyaction)r �IMPERFECT_CONFIG�IMPERFECT_CONFIG_SHARE_CFGr? r@ rE � isEnabled� assertLoggedr� r' r' r( �testJailActionEmpty s
z"JailReaderTest.testJailActionEmptyc C sT t dttd�}| �|�� � | �|�� � | �|�� � | �dt � | �d� d S )N�missingbitsjailr� zJFound no accessible config files for 'filter.d/catchallthebadies' under %szUnable to read the filter� r r� r� r? r@ rV rE r� r� r� r' r' r( �testJailActionFilterMissing" s z*JailReaderTest.testJailActionFilterMissingc C �F t dttd�}| �|�� � | �|�� � | �|�� � | �d� d S )N�brokenactiondefr� z$Invalid action definition 'joho[foo'r� r� r' r' r( �testJailActionBrokenDef* � �z&JailReaderTest.testJailActionBrokenDefc C sN t dttd�}| �|�� � | �|�� � | �|�� � | �|jd d� d S )N�
tz_correctr� � logtimezone�UTC+0200) r r� r� r? r@ rE r� rR �optionsr� r' r' r( �testJailLogTimeZone2 s �z"JailReaderTest.testJailLogTimeZonec C r� )N�brokenfilterdefr� z$Invalid filter definition 'flt[test'r� r� r' r' r( �testJailFilterBrokenDef: r� z&JailReaderTest.testJailFilterBrokenDefc C st t jjdd� tdttd�}| �|�� � | �|�� � | � |�
� � | � |� � d� |�
d� | � |� � d� d S )NT��stock�sshdr� zssh-funky-blocker)rX �F2B�SkipIfCfgMissingr r r� r? r@ rE rV r� rR �getName�setNamer� r' r' r( �testStockSSHJailB s
z JailReaderTest.testStockSSHJailc C s� t jjdd� tdttdd�}| �|�� � | �|�� � | �|� � � |�
� }| � g d�gdd� |D �� | � g d�gd d� |D �� | � g d
�gd d� |D �� |� g d ��}d
}|D ] }| �
t|�dkom|d �d�� |d7 }||krz d S q]d S )NTr� �sshd-override-flt-opts�r r� � force_enable)rN r� � prefregexz^Testc S �( g | ]}t |�d kr|d dkr|�qS )r r� ��len��.0rr r' r' r( �
<listcomp>W � ( z>JailReaderTest.testOverrideFilterOptInJail.<locals>.<listcomp>)rN r� �addjournalmatchz
_COMM=testc S r� )r r� r� r� r' r' r( r� Z r� )rN r� �maxlinesr c S r� )r r� r� r� r' r' r( r� ] r� )rN r� �usedns�nor r �regexr )rX r� r� r r� r� r? r@ rE r� �convertrR �indexrV r� �endswith)r$ r� �stream� usednsidxrt rr r' r' r( �testOverrideFilterOptInJailL s0 � � � � �z*JailReaderTest.testOverrideFilterOptInJailc C s� t jjdd� dD ]9}dD ]4}td|�� ttdd�}| �|�� � | �|� � � |�
� }| � d|� � dd | ggd
d � |D �� q
q d S ) NTr� )r r )�JRNL�FILE�TEST�INIT�
checklogtype_r� rN � addfailregexz^%s failure from <HOST>$c S r� )r r� r� r� r' r' r( r� s r� z=JailReaderTest.testLogTypeOfBackendInJail.<locals>.<listcomp>)
rX r� r� r �lowerr� r� r? r@ rE r� rR r� )r$ rt �prefliner� r� r' r' r( �testLogTypeOfBackendInJailf s � ���z)JailReaderTest.testLogTypeOfBackendInJailc
C s, d}dddif}t |�}| �||� | �di ft d�� | �dddd�ft d �� | �d
i ft d
�� | �d
i ft d �� | �d d
dift d�� d}di f}t |�}| �||� d}ddddddddddd d d � f}t |�}| �||� t |�dd ��}|d td d!� |d" �� D ��f}| �||� d S )#Nzmail-whois[name=SSH]z
mail-whois�name�SSHz mail.who_is�cat�dog)rH rJ zmail.who_is[a=cat,b=dog]z mail--ho_iszmail--ho_is['s']�mailrH �,z mail[a=',']zabc[]�abcz�option[opt01=abc,opt02="123",opt03="with=okay?",opt04="andwith,okay...",opt05="how about spaces",opt06="single'in'double",opt07='double"in"single', opt08= leave some space, opt09=one for luck, opt10=, opt11=]rD �123z
with=okay?zandwith,okay...zhow about spaceszsingle'in'doublezdouble"in"singlezleave some spacez one for luck� ) �opt01�opt02�opt03�opt04�opt05�opt06�opt07�opt08�opt09�opt10�opt11�][r c s s$ � | ]
\}}||� d d�fV qdS )r� r� N)�replace)r� �k�vr' r' r( � <genexpr>� s �" z1JailReaderTest.testSplitOption.<locals>.<genexpr>r )r
rR r� �dict�items)r$ rD �expected�result� expected2r' r' r( �testSplitOptionu sD �
�z JailReaderTest.testSplitOptionc C s� t ddttd�}| �|�� � | �|�� � | �|jd d� | �|jd d� | �dd � |j D �g d
�d ddd d
dgdd gddggggg d�d dddd
dgddgddgddggggg d�d dddd
dgddgddggggg� d S )N� multi-logT)r� r r� �logpathza.log
b.log
c.log�actionzeaction[actname='ban']
action[actname='log', logpath="a.log
b.log
c.log
d.log"]
action[actname='test']c S s g | ]}|� � �qS r' )r� �r� rH r' r' r( r� � � z6JailReaderTest.testMultiLineOption.<locals>.<listcomp>)rN r� � addaction�ban� multi-setr� � actionbanz4echo "name: ban, ban: <ip>, logs: a.log
b.log
c.log"�actnamer� )rN r� r� �logr z:echo "name: log, ban: <ip>, logs: a.log
b.log
c.log
d.log"za.log
b.log
c.log
d.log)rN r� r� rK rK z5echo "name: test, ban: <ip>, logs: a.log
b.log
c.log")
r r� r� r? r@ rE rR r� rO �_JailReader__actionsr� r' r' r( �testMultiLineOption� s, � ��
�z"JailReaderTest.testMultiLineOptionc sZ t jjdd� tddtd�}t�|d� |j�� }t d�|d< | �
|� � � |� � }g }|D ]6� t
� �dkr7q.� d d krP� d d
ksJ� d �d �rP|�� � q.� d d krd|�� fd
d�� d D �� q.dt }| �t
|�d� | �|d d dddd
|g� | �|d d dddd
|g� | �t|d d ��d
d�|� | �|d d dddd
|g� d S )NTr� �
blocklisttest)r� r r� ))rh r )�filterr� )� failregexz
^test <HOST>$)�senderzf2b-test@example.com)�blocklist_de_apikeyztest-key)r� z�%(action_blocklist_de)s
%(action_badips_report)s
%(action_badips)s
mynetwatchman[port=1234,protocol=udp,agent="%(fail2ban_agent)s"]rc r rN �agentz badips.pyr� c s. g | ]}|d dkrdg� dd� | �qS )r r rN r rc r' r� ��cmdr' r( r� � s . z3JailReaderTest.testVersionAgent.<locals>.<listcomp>z Fail2Ban/%sr� � blocklist_der �badipsr � z<wrong>ra �
mynetwatchman)rX r� r� r r r r@ �_cfg� get_sectionsr� r? rE r� r� r� �append�extendr rR �evalrq )r$ r� r} r� �act� useragentr' r r( �testVersionAgent� s,
& � z JailReaderTest.testVersionAgentc C s� t j�|d�}t|d��� t j�|d�}t �d|� | �t�t j�|d��|g� | �t�|�g � | � d| � | �t�t j�|d��g � d S )N�f1r- �f2� nonexisting�*z4File %s is a dangling link, thus cannot be monitored)
r. r/ r2 r5 r7 �symlinkrR r �_globr� )r$ r! r r r' r' r( �testGlob� s zJailReaderTest.testGlobc C st t i d�}| �|�� g � | �|�d�� | �t|jdi � | �t|jd� | �t|j dd� | �t|j
di � d S )N�r� rK �any) r rR r} rV � has_sectionr� r �
merge_sectionr� rq rE )r$ r" r' r' r( �testCommonFunction� s
z!JailReaderTest.testCommonFunction)rh ri rj r� r� r� r� r� r� r� r� r� r� r� r� r r r r r" r� r' r' r% r( r� s$
2%
r� c @ sT e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dS )�FilterReaderTestc C s� g d�dddg d�gg d�g d�g d�g d �g}t ddi �}|�t� |�� |�d � | �|�� |� t ddd
d ittd �}|�� |�d � d
|d d< | �|�� |� d S )N)rN �
testcase01r� r r� r$ r� )z�^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?Authentication failure for .* from <HOST>\s*$z�^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the underlying authentication module for .* from <HOST>\s*$a ^\s*(?:\S+ )?(?:kernel: \[\d+\.\d+\] )?(?:@vserver_\S+ )?(?:(?:\[\d+\])?:\s+[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?|[\[\(]?sshd(?:\(\S+\))?[\]\)]?:?(?:\[\d+\])?:)?\s*(?:error: PAM: )?User not known to the\nunderlying authentication.+$<SKIPLINES>^.+ module for .* from <HOST>\s*$)rN r$ �addignoreregexz"^.+ john from host 192.168.1.1\s*$)rN r$ r� z
_COMM=sshd�+z_SYSTEMD_UNIT=sshd.servicez_UID=0)rN r$ r� zFIELD= with spaces r& z AFIELD= with + char and spaces)rN r$ � datepatternz%Y %m %d %H:%M:%Sr� �5�r� r r
r ���)r ro �TEST_FILES_DIRr@ rE rO r� �TEST_FILES_DIR_SHARE_CFG)r$ �output� filterReaderr' r' r( rQ s& �
�
z FilterReaderTest.testConvertc C sP t ddddd�ttd�}|�� |�d � |�� }| �|d d� | �d� d S )Nr$ z<test>�X)r� rK r) r� z6Wrong int value 'X' for 'maxlines'. Using default one:)r r, r+ r@ rE rp �assertNotEqualr� �r$ r. rP r' r' r( �testConvertOptions. s �
z#FilterReaderTest.testConvertOptionsc C sF g d�g}t ddi ttd�}|�� |�d � |�� }| �||� d S )N)rN �jailnamer� z to=sweet@example.com fromip=<IP>�
substitionr3 r) �r r, r+ r@ rE r� rO �r$ r- r. r" r' r' r( �!testFilterReaderSubstitionDefault7 s
�
z2FilterReaderTest.testFilterReaderSubstitionDefaultc C sB t ddi ttd�}|�� |�d � |�� }| �d|d v � d S )N�
testcase02r3 r) r� r )r r, r+ r@ rE rp r? r1 r' r' r( �testFilterReaderSubstKnown@ s �
z+FilterReaderTest.testFilterReaderSubstKnownc C sJ g d�g}t ddddittd�}|�� |�d � |�� }| �||� d S )N)rN r3 r� z to=sour@example.com fromip=<IP>r4 r3 �honeypotzsour@example.comr) r5 r6 r' r' r( � testFilterReaderSubstitionSetK s
�
z.FilterReaderTest.testFilterReaderSubstitionSetc C �R g d�g}t d�\}}tdd|ttd�}|�� |�d � |�� }| �||� d S )N)rN r3 r� z?^to=test,sweet@example.com,test2,sweet@example.com fromip=<IP>$zusubstition[failregex="^<known/failregex>$", honeypot="<sweet>,<known/honeypot>", sweet="test,<known/honeypot>,test2"]r4 r3 r) �r
r r, r+ r@ rE r� rO �r$ r- �
filterName� filterOptr. r" r' r' r( � testFilterReaderSubstitionKnownT �
��
z0FilterReaderTest.testFilterReaderSubstitionKnownc C r< )N)rN r3 r� z)^\s*to=fail2ban@localhost fromip=<IP>\s*$zUsubstition[failregex="^\s*<Definition/failregex>\s*$", honeypot="<default/honeypot>"]r4 r3 r) r= r> r' r' r( �!testFilterReaderSubstitionSection_ rB z2FilterReaderTest.testFilterReaderSubstitionSectionc C sv t ddddittd�}|�� |�d � | �tt j|� t ddddd�ttd�}|�� |�d � | �tt j|� d S )Nr4 r3 r: z
<honeypot>r) z<sweet>)r: �sweet)r r, r+ r@ rE r� r� r� )r$ r. r' r' r( � testFilterReaderSubstitionFailj s �
�
z/FilterReaderTest.testFilterReaderSubstitionFailc
C s� t j�t j�td��}tt j�|d�di �}| �|�� t j�|d�t j�|d�g� z|�d � |� dd� |� dd� |� dd� W d S t
y^ } z| � d | � W Y d }~d S d }~ww )
N�filter.dztestcase01.confr$ ztestcase-common.confrG �
__prefix_liner � ignoreregexz)unexpected options after readexplicit: %s) r. r/ �abspathr2 r+ r rR � readexplicitrE rq r� �fail)r$ �path_r. rx r' r' r( �testFilterReaderExplicitx s
�
��z)FilterReaderTest.testFilterReaderExplicitN) rh ri rj rQ r2 r7 r9 r; rA rC rE rM r' r' r' r( r# s , r# c @ s* e Zd Zd dd�Zdd� Zedd� �ZdS )
�JailsReaderTestCacheFNc C sB t ||d�}|�|� |�� |�� |�� | �|�d �� d S )N�r� r� )r ro � readEarly�getEarlyOptions�readAllr? rE )r$ r r� r� � configuratorr' r' r( �_readWholeConf� s
z#JailsReaderTestCache._readWholeConfc C s4 d}| � � �d�D ]}t�d| |�r|d7 }q |S )Nr r� z^\s*Reading files?: .*/r )�getLog�rsplit�re�match)r$ � filematch�cnt�sr' r' r( �_getLoggedReadCount� s �z(JailsReaderTestCache._getLoggedReadCountc C s t j�� tj}tjt_zst�|� t� t
|� t� t
d |d � t� t
d |d � t � }| j
||d� | �d�}| �|dkd| � | j
|d |d
� | �d �}| �|dkd | � | �d
�}| �|dkd| � | �d�}| �|dkd| � W |t_d S |t_w )Nz
/jail.confz /jail.localz/fail2ban.confz/fail2ban.localr z
jail.localr z3Unexpected count by reading of jail files, cnt = %sTrO z jail\.localz:Unexpected count by second reading of jail files, cnt = %szfilter\.d/common\.confz5Unexpected count by reading of filter files, cnt = %sz action\.d/iptables-common\.confz5Unexpected count by reading of action files, cnt = %s)rX r� �
SkipIfFastr �logLevel�logging�DEBUGr) r* �copytreer �copyr� rT r\ r? )r$ r �saved_ll� share_cfgrZ r' r' r( �testTestJailConfCache� s(
z*JailsReaderTestCache.testTestJailConfCache)FN)rh ri rj rT r\ r re r' r' r' r( rN � s
rN c s| e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
e dd� �Z dd� Z
dd� Ze dd� �Z� ZS )�JailsReaderTestc r� r� )r rf r� r� r% r' r( r� � r� zJailsReaderTest.__init__c C s, t j�d�stdd�}| �t|j� d S d S )Nz/XXXr )r. r/ r3 r
r� r� r@ )r$ �readerr' r' r( �testProvidingBadBasedir� s
�z'JailsReaderTest.testProvidingBadBasedirc C s* t ttd�}| �|�� � | �|jdd�� | �t|j � |j dd�}d | _
| � |g d�g d�dd d
g d �gd d gg d
�g d�g d�g d�g d�ddddddgddgddgggg d�g d�g d�g d�d d gd d gd dgd d gg d �d d gd!d"gd!d#gd!d$gd!d%gg� | � d&� | �
d'� | � d(� d S ))Nr� F)� ignoreWrongT��allow_no_files)�addr� �auto)rl �test-known-interprm r� rn r� )z*failure test 1 (filter.d/test.conf) <HOST>z+failure test 2 (filter.d/test.local) <HOST>z"failure test 3 (jail.local) <HOST>�start)rl �missinglogfilesrm )rN rp r� �<IP>)rl � brokenactionrm )rN rr r� rq )rN rr r� rr rr r� r� zhit with big stick <ip>r� r� )rl �parse_to_end_of_jail.confrm )rN rs r� rq )rN r� r� rq )rN r� r� r� r� rp rs )rl r� rm r� z config-errorzdJail 'brokenactiondef' skipped, because of wrong configuration: Invalid action definition 'joho[foo'zdJail 'brokenfilterdef' skipped, because of wrong configuration: Invalid filter definition 'flt[test'zoJail 'missingaction' skipped, because of wrong configuration: Unable to read action 'noactionfileforthisaction'zmJail 'missingbitsjail' skipped, because of wrong configuration: Unable to read the filter 'catchallthebadies'z!Errors in jail 'missingbitsjail'.z Skipping...z6No file(s) found for glob /weapons/of/mass/destruction)r
r� r� r? r@ rV rE r� r� r� �maxDiffrO r� �assertNotLogged)r$ �jails�
comm_commandsr' r' r( �testReadTestJailConf� s` �������
&
z$JailsReaderTest.testReadTestJailConfc C sD t jjdd� t�tj�tdd��D ]�}tj�|�� dd�}t
|di td�}| � |� � � z|�
i � W n tyS } z| �d |t|�j|f � W Y d }~nd }~ww |�d
�s�| jd |�� d | d
� | j |j�dd��� d| d
� |jtjtd�B d�}| j |�d�dd| d
� |dv r�| jd|�dd�d| d
� qd S )NTr� �action.d�*.confz.confr� r� r zaction %r
%s: %sz-commonrG z.Action file %r is lacking [Definition] section��msgr� z#Action file %r is lacking actionban)�timeout�bantime)�ignorer� z5Action file %r does not contains jail-name 'f2b-TEST')�pfziptables-allports�iptables-multiportzf2b-TEST� actionstartzSAction file %r: interpolation of actionstart does not contains jail-name 'f2b-TEST') rX r� r� �globr. r/ r2 r �basenamer� r r? r@ rE r� rK �typerh r� �assertInr} �_optsrq �striprp r � _escapedTagsrN rR )r$ � actionConfig�
actionName� actionReaderrx rP r' r' r( �testReadStockActionConf� s< &��
�� �����z'JailsReaderTest.testReadStockActionConfc C s� t jjdd� tttd�}| �|�� � | �|�� � |� � }| �
|g � t � }|� � D ]�}|dkr3q,|�
|d�}t|�\}}|�|� | �t|�� t|||ttd�}| �|�� d| � |�i � | �|j�
dd ��� � |�
|d
�}| �t|�� �� t|�D ]M} t| �\}
} | �t|
�� | �t| t�� |
d kr�| �d | � t|
|i ttd�} | �| �� � | �i � | � � }
| �t|
�� | �| j�
d
d ��� � q�q,d S )NTr� r� �INCLUDESr r) zFailed to read filter:r r� r� r� �portr� )rX r� r� r
r r� r? r@ rE r� rR rN r} rq r
rl r� r r� r� r �
isinstancer� r� r )r$ rv rw �
allFiltersr� r? r@ r. �actionsr �actName�actOptr� �cmdsr' r' r( �testReadStockJailConf sL
�
�
��z%JailsReaderTest.testReadStockJailConfc C s� t jjdd� ttdtd�}| �|�� � | �|�� � t dd� t
�
t j �
ddd��D ��}t d d� |jD ��}d | _| �|�|�d
|�|� � | �|�|�d |�|� � d S ) NTr� �r r� r� c s s@ � | ]}|� d �s|� d�stj�tj�|�d �d V qdS )z common.confz-aggressive.confr r N)r� r. r/ �splitext�splitr� r' r' r( r� _ s � �&�zBJailsReaderTest.testReadStockJailFilterComplete.<locals>.<genexpr>r rF rz c s s" � | ] }t |jd �d V qdS )r r N)r
r� )r� r� r' r' r( r� c s �
�z=More filters exists than are referenced in stock jail.conf %rz2Stock jail.conf references non-existent filters %r)rX r� r� r
r r� r? r@ rE rN r� r. r/ r2 rv rt �issubset�
difference)r$ rv �filters� filters_jailr' r' r( � testReadStockJailFilterCompleteY s" �� � �z/JailsReaderTest.testReadStockJailFilterCompletec C s t jjdd� ttdtd�}| �|�� � | �|�� � |j dd�}| �t
|�� |D ] }t
|�dkrK|d |d gdd gkrK| �t � |d �dk� q+d
D ]!}| �
d |gd d
� |D �� | �
d|ddg|� | �
d|g|� qN| �|d d d� |jD ]�}|j}|�� }| jt
|�d| d� |D ]q}|� � }|�� } dt|�v �r| �
d|j� d}
|d| g} |D ]B}t
|�dkr�|d dkr�|dd� | kr�ddd � |d D �v }
n t
|�d kr�|d dkr�|dd� | kr�|d dkr�d}
|
r� nq�| j|
d | t|�f d� q�q}d S ) NTr� r� rj ra r r rN r~ )r� �recidiverl c s s4 � | ]}t |�d kr|d dkr|dd� V qdS )ra r rl Nr r� �r� r
r' r' r( r� � s �2 zDJailsReaderTest.testReadStockJailConfForceEnabled.<locals>.<genexpr>r� �warnro r* z No actions found for jail %sr{ z <blocktype>� blocktypeFr� rc r� r c S s g | ]}|d �qS )r r' r� r' r' r( r� � r� zEJailsReaderTest.testReadStockJailConfForceEnabled.<locals>.<listcomp>r
z Found no %s command among %s)rX r� r� r
r r� r? r@ rE r� r� r � str2secondsr� rR �_JailsReader__jailsr r� �str� _initOpts) r$ rv rw �command�jr� � jail_namer� �commands� action_name�blocktype_present�target_commandr' r' r( �!testReadStockJailConfForceEnabledl sb $�
�
�
�
�����z1JailsReaderTest.testReadStockJailConfForceEnabledc
sB t jjdd� t� }|�t� | �|�� t� |�� |� � }| �|d d� | �|d d� |�
� |� � |� � |�
� � � fdd�}| �|d �|d
� k oV|d �k n � | �|d �|d
�k� | �|d�|d
�k� | �� g d�g d�g d�g d�g d�g d�g� |j�d� | �|j�� d� | �|�� t� d S )NTr� �socketz /var/run/fail2ban/fail2ban.sock�pidfilez /var/run/fail2ban/fail2ban.pidc sB t � �D ]\}}|d dkr|d | kr| S qtd| � f ��)Nr rN r z/Did not find command 'set %s' among commands %s)� enumerater� )rD rt rx �r� r' r( �find_set� s ��z7JailsReaderTest.testStockConfigurator.<locals>.find_set� syslogsocket�loglevel� logtarget�
dbpurgeage�dbfile� dbmaxmatches)rN r� rm )rN r� �INFO)rN r� z/var/log/fail2ban.log)rN r� z"/var/lib/fail2ban/fail2ban.sqlite3)rN r� �
)rN r� �1dz/tmp)rX r� r� r ro r rR �
getBaseDirrP rQ rR rE �convertToProtocol�getConfigStreamr? rO �_Configurator__jails)r$ rS rP r� r' r� r( �testStockConfigurator� s:
"�� z%JailsReaderTest.testStockConfiguratorc C s� t �t j�|d�� t �t j�|d�� tt j�|dd�d��� tt j�|dd�d��� tt j�|d�d�}|�d� |�� t|i d�}| �|� � � | �|�
� � |j d d
�}d d � |D �}| � t
td
d� |D ���d� | � |d d d� d S )NrF ry ztestaction1.confr- ztestfilter1.conf� jail.confz�
[testjail1]
enabled = true
action = testaction1[actname=test1]
testaction1[actname=test2]
testaction.py
testaction.py[actname=test3]
filter = testfilter1
r� Trj c S s, g | ]}|d d� g d�kr|dd � �qS )Nra )rN � testjail1r� r' )r� �commr' r' r( r� � s
�z:JailsReaderTest.testMultipleSameAction.<locals>.<listcomp>c s s � | ]}|d V qdS )r Nr' )r� r� r' r' r( r� � s � z9JailsReaderTest.testMultipleSameAction.<locals>.<genexpr>rc r* z{})r. �mkdirr/ r2 r5 r7 r6 r
r? r@ rE r� rR r� rN )r$ r �jailfdrv rw � add_actionsr' r' r( �testMultipleSameAction� s
z&JailsReaderTest.testMultipleSameActionc C s | j td| jdd� d S )Nz'Have not found any log file for .* jail�polling��backend)�assertRaisesRegexr� � _testLogPathr# r' r' r( � testLogPathFileFilterBackend� s
�z,JailsReaderTest.testLogPathFileFilterBackendc
C sP zddl m} W n ty } zt�d��d }~ww | jdd� | jdd� d S )Nr )�
FilterSystemdz&systemd python interface not available�systemdr� zsystemd[journalflags=2])�server.filtersystemdr� r� rX rY r� )r$ r� rx r' r' r( �testLogPathSystemdBackend s
�� z)JailsReaderTest.testLogPathSystemdBackendc C s` t tj�|d�d�}|�d||f � |�� t|d�}| �|�� � | �|� � � |�
� d S )Nr� r- z�
[testjail1]
enabled = true
backend = %s
logpath = %s/not/exist.log
/this/path/should/not/exist.log
action =
filter =
failregex = test <HOST>
r ) r5 r. r/ r2 r6 r7 r
r? r@ rE r� )r$ r r� r� rv r' r' r( r� s �
z JailsReaderTest._testLogPath)rh ri rj r� rh rx r� r� r� r� r� r r� r� r� r� r� r' r' r% r( rf � s 1??3
rf )6�
__author__�
__copyright__� __license__r� r_ r. rW r) r rX �client.configreaderr r r r �clientr �client.jailreaderr r
r �client.filterreaderr �client.jailsreaderr
�client.actionreaderr r �client.configuratorr �
server.mytimer r �utilsr r r/ r2 r1 �__file__r+ r, r r� r� r� r� r� �TestCaser r� r# rN rf r' r' r' r( �<module> sD R { :