3
ܓiI @ sZ d dl Z d dlmZmZmZmZ G dd deZG dd deeZG dd deeeZdS ) N)Plugin RedHatPlugin DebianPlugin UbuntuPluginc @ s4 e Zd ZdZdZd Zd
Zdd Zdd Zd d
Z d S )PostfixzPostfix smtp serverpostfixmailservicesc C s ddddddddd d
d d d
ddddg}g }yrt | jddddT}xL|j D ]@}|jdr\qL|jd}|d j |krL|j|d j d qLW W dQ R X W n tk
r Y nX |S )zi list of attributes defining a location of a SSL key file
we must forbid from collection
Zlmtp_tls_dkey_fileZlmtp_tls_eckey_fileZlmtp_tls_key_fileZsmtp_tls_dkey_fileZsmtp_tls_eckey_fileZsmtp_tls_key_fileZsmtpd_tls_dkey_fileZsmtpd_tls_eckey_fileZsmtpd_tls_key_fileZ"tls_legacy_public_key_fingerprintsZtlsproxy_tls_dkey_fileZtlsproxy_tls_eckey_fileZtlsproxy_tls_key_fileZsmtpd_tls_dh1024_param_fileZsmtpd_tls_dh512_param_fileZ tlsproxy_tls_dh1024_param_fileZ tlsproxy_tls_dh512_param_filez/etc/postfix/main.cfrzUTF-8)encoding#=r N)open path_join readlines
startswithsplitstripappend Exception)selfforbid_attributesfpathscffilelineZwords r /usr/lib/python3.6/postfix.pyforbidden_ssl_keys_files s<
(z Postfix.forbidden_ssl_keys_filesc C s d}g }d}t jd}yt| jddd d
}x|j D ]|}t jd d |}|j|}|d
kr^q8|jdj }||kr8|jdj } t | dkrq8| j
|r| t |d
} |j | q8W W d
Q R X W n> t k
r }
z d|
j
d } | j| W Y d
d
}
~
X nX |S )z% Get the list of password to exclude lmtp_sasl_password_mapssmtp_sasl_password_mapspostscreen_dnsbl_reply_mapsmtp_sasl_auth_cache_namezhash:z
^(.*)=(.*)z/etc/postfix/main.cfr
zUTF-8)r z#.* Nr r zError parsing main.cf: )r r r! r" )recompiler r r submatchgroupr lenr r r argsZ
_log_error) r r r prefixZ
option_formatr r ZoptionZ attributefilepatherrmsgr r r forbidden_password_files; s6
z Postfix.forbidden_password_filesc C sJ | j dg | jddg | jdddg | j| j | j| j d S )Nz
/etc/postfix/ZpostconfZmailqz/etc/postfix/*.keyz/etc/postfix/*.crtz/etc/postfix/ssl/)
add_copy_specZadd_cmd_outputZadd_forbidden_pathr r0 )r r r r setupa s z
Postfix.setupN)r r )r )
__name__
__module__ __qualname__Z
short_descZ plugin_nameZprofilespackagesr r0 r2 r r r r r
s &&r c s$ e Zd ZdZdZ fddZ ZS )
RedHatPostfix/etc/rc.d/init.d/postfixr c s t j | jd d S )Nz /etc/mail)superr2 r1 )r ) __class__r r r2 x s
zRedHatPostfix.setup)r8 )r )r3 r4 r5 filesr6 r2
__classcell__r r )r: r r7 s s r7 c @ s e Zd ZdZdS )
DebianPostfixr N)r )r3 r4 r5 r6 r r r r r= } s r= ) r% Zsos.report.pluginsr r r r r r7 r= r r r r s f