mirror of https://github.com/fail2ban/fail2ban
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
122 lines
4.1 KiB
122 lines
4.1 KiB
# emacs: -*- mode: python; py-indent-offset: 4; indent-tabs-mode: t -*- |
|
# vi: set ft=python sts=4 ts=4 sw=4 noet : |
|
|
|
# This file is part of Fail2Ban. |
|
# |
|
# Fail2Ban is free software; you can redistribute it and/or modify |
|
# it under the terms of the GNU General Public License as published by |
|
# the Free Software Foundation; either version 2 of the License, or |
|
# (at your option) any later version. |
|
# |
|
# Fail2Ban is distributed in the hope that it will be useful, |
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
# GNU General Public License for more details. |
|
# |
|
# You should have received a copy of the GNU General Public License |
|
# along with Fail2Ban; if not, write to the Free Software |
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
|
|
|
# Author: Cyril Jaquier |
|
# Modified by: Yaroslav Halchenko (SafeConfigParserWithIncludes) |
|
|
|
__author__ = "Cyril Jaquier" |
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier" |
|
__license__ = "GPL" |
|
|
|
import glob, logging, os |
|
from configparserinc import SafeConfigParserWithIncludes |
|
from ConfigParser import NoOptionError, NoSectionError |
|
|
|
# Gets the instance of the logger. |
|
logSys = logging.getLogger("fail2ban.client.config") |
|
|
|
class ConfigReader(SafeConfigParserWithIncludes): |
|
|
|
DEFAULT_BASEDIR = '/etc/fail2ban' |
|
|
|
def __init__(self, basedir=None): |
|
SafeConfigParserWithIncludes.__init__(self) |
|
self.setBaseDir(basedir) |
|
self.__opts = None |
|
|
|
def setBaseDir(self, basedir): |
|
if basedir is None: |
|
basedir = ConfigReader.DEFAULT_BASEDIR # stock system location |
|
self._basedir = basedir.rstrip('/') |
|
|
|
def getBaseDir(self): |
|
return self._basedir |
|
|
|
def read(self, filename): |
|
if not os.path.exists(self._basedir): |
|
raise ValueError("Base configuration directory %s does not exist " |
|
% self._basedir) |
|
basename = os.path.join(self._basedir, filename) |
|
logSys.debug("Reading configs for %s under %s " % (basename, self._basedir)) |
|
config_files = [ basename + ".conf", |
|
basename + ".local" ] |
|
|
|
# choose only existing ones |
|
config_files = filter(os.path.exists, config_files) |
|
|
|
# possible further customizations under a .conf.d directory |
|
config_dir = basename + '.d' |
|
config_files += sorted(glob.glob('%s/*.conf' % config_dir)) |
|
|
|
if len(config_files): |
|
# at least one config exists and accessible |
|
logSys.debug("Reading config files: " + ', '.join(config_files)) |
|
config_files_read = SafeConfigParserWithIncludes.read(self, config_files) |
|
missed = [ cf for cf in config_files if cf not in config_files_read ] |
|
if missed: |
|
logSys.error("Could not read config files: " + ', '.join(missed)) |
|
if config_files_read: |
|
return True |
|
logSys.error("Found no accessible config files for %r under %s" % |
|
( filename, self.getBaseDir() )) |
|
return False |
|
else: |
|
logSys.error("Found no accessible config files for %r " % filename |
|
+ (["under %s" % self.getBaseDir(), |
|
"among existing ones: " + ', '.join(config_files)][bool(len(config_files))])) |
|
|
|
return False |
|
|
|
## |
|
# Read the options. |
|
# |
|
# Read the given option in the configuration file. Default values |
|
# are used... |
|
# Each optionValues entry is composed of an array with: |
|
# 0 -> the type of the option |
|
# 1 -> the name of the option |
|
# 2 -> the default value for the option |
|
|
|
def getOptions(self, sec, options, pOptions = None): |
|
values = dict() |
|
for option in options: |
|
try: |
|
if option[0] == "bool": |
|
v = self.getboolean(sec, option[1]) |
|
elif option[0] == "int": |
|
v = self.getint(sec, option[1]) |
|
else: |
|
v = self.get(sec, option[1]) |
|
if not pOptions is None and option[1] in pOptions: |
|
continue |
|
values[option[1]] = v |
|
except NoSectionError, e: |
|
# No "Definition" section or wrong basedir |
|
logSys.error(e) |
|
values[option[1]] = option[2] |
|
except NoOptionError: |
|
if not option[2] is None: |
|
logSys.warn("'%s' not defined in '%s'. Using default one: %r" |
|
% (option[1], sec, option[2])) |
|
values[option[1]] = option[2] |
|
except ValueError: |
|
logSys.warn("Wrong value for '" + option[1] + "' in '" + sec + |
|
"'. Using default one: '" + `option[2]` + "'") |
|
values[option[1]] = option[2] |
|
return values
|
|
|