mirror of https://github.com/fail2ban/fail2ban
ENH: allow recursive tag substitution in action files.
parent
7b87afef48
commit
1d9abd1b39
|
@ -28,7 +28,7 @@ __copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
||||||
__license__ = "GPL"
|
__license__ = "GPL"
|
||||||
|
|
||||||
import logging, os
|
import logging, os
|
||||||
import threading
|
import threading, re
|
||||||
#from subprocess import call
|
#from subprocess import call
|
||||||
|
|
||||||
# Gets the instance of the logger.
|
# Gets the instance of the logger.
|
||||||
|
@ -143,6 +143,9 @@ class Action:
|
||||||
# @return True if the command succeeded
|
# @return True if the command succeeded
|
||||||
|
|
||||||
def execActionStart(self):
|
def execActionStart(self):
|
||||||
|
if self.__cInfo:
|
||||||
|
if not Action.substituteRecursiveTags(self.__cInfo):
|
||||||
|
return False
|
||||||
startCmd = Action.replaceTag(self.__actionStart, self.__cInfo)
|
startCmd = Action.replaceTag(self.__actionStart, self.__cInfo)
|
||||||
return Action.executeCmd(startCmd)
|
return Action.executeCmd(startCmd)
|
||||||
|
|
||||||
|
@ -242,6 +245,36 @@ class Action:
|
||||||
stopCmd = Action.replaceTag(self.__actionStop, self.__cInfo)
|
stopCmd = Action.replaceTag(self.__actionStop, self.__cInfo)
|
||||||
return Action.executeCmd(stopCmd)
|
return Action.executeCmd(stopCmd)
|
||||||
|
|
||||||
|
##
|
||||||
|
# Sort out tag definations within other tags
|
||||||
|
#
|
||||||
|
# so: becomes:
|
||||||
|
# a = 3 a = 3
|
||||||
|
# b = <a>_3 b = 3_3
|
||||||
|
# @param tags, a dictionary
|
||||||
|
# @returns tags altered or False if there is a recursive defination
|
||||||
|
#@staticmethod
|
||||||
|
def substituteRecursiveTags(tags):
|
||||||
|
t = re.compile(r'<([^ >]+)>')
|
||||||
|
for tag, value in tags.iteritems():
|
||||||
|
value = str(value)
|
||||||
|
m = t.search(value)
|
||||||
|
while m:
|
||||||
|
if m.group(1) == tag:
|
||||||
|
# recursive definations are bad
|
||||||
|
return False
|
||||||
|
else:
|
||||||
|
if tags.has_key(m.group(1)):
|
||||||
|
value = value[0:m.start()] + tags[m.group(1)] + value[m.end():]
|
||||||
|
m = t.search(value, m.start())
|
||||||
|
else:
|
||||||
|
# TODO missing tag? to abort or not? there is the <STDIN> case maybe
|
||||||
|
m = t.search(value, m.start() + 1)
|
||||||
|
tags[tag] = value
|
||||||
|
return tags
|
||||||
|
substituteRecursiveTags = staticmethod(substituteRecursiveTags)
|
||||||
|
|
||||||
|
#@staticmethod
|
||||||
def escapeTag(tag):
|
def escapeTag(tag):
|
||||||
for c in '\\#&;`|*?~<>^()[]{}$\n\'"':
|
for c in '\\#&;`|*?~<>^()[]{}$\n\'"':
|
||||||
if c in tag:
|
if c in tag:
|
||||||
|
|
|
@ -61,6 +61,27 @@ class ExecuteAction(unittest.TestCase):
|
||||||
def _is_logged(self, s):
|
def _is_logged(self, s):
|
||||||
return s in self._log.getvalue()
|
return s in self._log.getvalue()
|
||||||
|
|
||||||
|
def testSubstituteRecursiveTags(self):
|
||||||
|
aInfo = {
|
||||||
|
'HOST': "192.0.2.0",
|
||||||
|
'ABC': "123 <HOST>",
|
||||||
|
'xyz': "890 <ABC>",
|
||||||
|
}
|
||||||
|
# Recursion is bad
|
||||||
|
self.assertFalse(Action.substituteRecursiveTags({'A': '<A>'}))
|
||||||
|
self.assertFalse(Action.substituteRecursiveTags({'A': '<B>', 'B': '<A>'}))
|
||||||
|
self.assertFalse(Action.substituteRecursiveTags({'A': '<B>', 'B': '<C>', 'C': '<A>'}))
|
||||||
|
# missing tags are ok
|
||||||
|
self.assertEquals(Action.substituteRecursiveTags({'A': '<C>'}), {'A': '<C>'})
|
||||||
|
self.assertEquals(Action.substituteRecursiveTags({'A': '<C> <D> <X>','X':'fun'}), {'A': '<C> <D> fun', 'X':'fun'})
|
||||||
|
self.assertEquals(Action.substituteRecursiveTags({'A': '<C> <B>', 'B': 'cool'}), {'A': '<C> cool', 'B': 'cool'})
|
||||||
|
# rest is just cool
|
||||||
|
self.assertEquals(Action.substituteRecursiveTags(aInfo),
|
||||||
|
{ 'HOST': "192.0.2.0",
|
||||||
|
'ABC': '123 192.0.2.0',
|
||||||
|
'xyz': '890 123 192.0.2.0',
|
||||||
|
})
|
||||||
|
|
||||||
def testReplaceTag(self):
|
def testReplaceTag(self):
|
||||||
aInfo = {
|
aInfo = {
|
||||||
'HOST': "192.0.2.0",
|
'HOST': "192.0.2.0",
|
||||||
|
|
Loading…
Reference in New Issue