Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add qubes-firewall.d feature

Browse Source
This commit is contained in:
Christopher Laprise 2018-02-13 17:38:14 -05:00
parent 4a27d9e3fd
commit a262574f85
No known key found for this signature in database
GPG Key ID: 448568C8B281C952
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
qubesagent/firewall.py
View File

@ -62,6 +62,17 @@ class FirewallWorker(object):
'''Apply rules in given source address'''
raise NotImplementedError
def run_firewall_dir(self):
'''Run scripts dir contents, before user script'''
script_dir_path = '/rw/config/qubes-firewall.d'
if not os.path.isdir(script_dir_path):
return
for d_script in sorted(os.listdir(script_dir_path)):
d_script_path = os.path.join(script_dir_path, d_script)
if os.path.isfile(d_script_path) and \
os.access(d_script_path, os.X_OK):
subprocess.call([d_script_path])
def run_user_script(self):
'''Run user script in /rw/config'''
user_script_path = '/rw/config/qubes-firewall-user-script'
@ -140,6 +151,7 @@ class FirewallWorker(object):
def main(self):
self.terminate_requested = False
self.init()
self.run_firewall_dir()
self.run_user_script()
# initial load
for source_addr in self.list_targets():