Gecko [ sachasauda.akalacademy.ac.in ]

/ usr / bin / [ HOME SHELL ]

Name	Size	Permission	Action
fm-agent	[ DIR ]	drwxr-xr-x
2to3	95 B	-rwxr-xr-x
GET	14.71 KB	-rwxr-xr-x
HEAD	14.71 KB	-rwxr-xr-x
Mail	383.67 KB	-rwxr-xr-x
POST	14.71 KB	-rwxr-xr-x
[	40.52 KB	-rwxr-xr-x
a2p	105.32 KB	-rwxr-xr-x
ab	157.59 KB	-rwxr-xr-x
aclocal	35.87 KB	-rwxr-xr-x
aclocal-1.13	35.87 KB	-rwxr-xr-x
addr2line	28.42 KB	-rwxr-xr-x
agentxtrap	19.16 KB	-rwxr-xr-x
alias	29 B	-rwxr-xr-x
alt-mysql-reconfigure	21.15 KB	-rwxr-xr-x
alt-php-mysql-reconfigure	21.15 KB	-rwxr-xr-x
alt-php-mysql-reconfigure.py	21.15 KB	-rwxr-xr-x
animate	7.05 KB	-rwxr-xr-x
annotate	11.13 KB	-rwxr-xr-x
apropos	45.49 KB	-rwxr-xr-x
ar	61.21 KB	-rwxr-xr-x
arch	32.3 KB	-rwxr-xr-x
arpaname	7.03 KB	-rwxr-xr-x
as	377.28 KB	-rwxr-xr-x
aserver	28.21 KB	-rwxr-xr-x
aspell	163.35 KB	-rwxr-xr-x
at	51.73 KB	-rwsr-xr-x
atq	51.73 KB	-rwsr-xr-x
atrm	51.73 KB	-rwsr-xr-x
audit2allow	14.21 KB	-rwxr-xr-x
audit2why	14.21 KB	-rwxr-xr-x
aulast	15.48 KB	-rwxr-xr-x
aulastlog	11.35 KB	-rwxr-xr-x
ausyscall	11.18 KB	-rwxr-xr-x
autoconf	14.42 KB	-rwxr-xr-x
autoheader	8.33 KB	-rwxr-xr-x
autom4te	31.43 KB	-rwxr-xr-x
automake	246.44 KB	-rwxr-xr-x
automake-1.13	246.44 KB	-rwxr-xr-x
autopoint	25.95 KB	-rwxr-xr-x
autoreconf	20.57 KB	-rwxr-xr-x
autoscan	16.72 KB	-rwxr-xr-x
autoupdate	33.08 KB	-rwxr-xr-x
auvirt	31.93 KB	-rwxr-xr-x
awk	418.55 KB	-rwxr-xr-x
base64	36.48 KB	-rwxr-xr-x
basename	28.35 KB	-rwxr-xr-x
bash	941.93 KB	-rwxr-xr-x
bashbug	6.8 KB	-rwxr-xr-x
bashbug-64	6.8 KB	-rwxr-xr-x
batch	137 B	-rwxr-xr-x
bc	81.47 KB	-rwxr-xr-x
bdftogd	3.91 KB	-rwxr-xr-x
bdftopcf	44.19 KB	-rwxr-xr-x
bdftruncate	11.2 KB	-rwxr-xr-x
berkeley_db47_svc	58.46 KB	-rwxr-xr-x
bg	26 B	-rwxr-xr-x
bind9-config	3.47 KB	-rwxr-xr-x
bison	393.34 KB	-rwxr-xr-x
bond2team	22.74 KB	-rwxr-xr-x
bootctl	68.99 KB	-rwxr-xr-x
bunzip2	31.89 KB	-rwxr-xr-x
busctl	403.15 KB	-rwxr-xr-x
bzcat	31.89 KB	-rwxr-xr-x
bzcmp	2.08 KB	-rwxr-xr-x
bzdiff	2.08 KB	-rwxr-xr-x
bzgrep	1.64 KB	-rwxr-xr-x
bzip2	31.89 KB	-rwxr-xr-x
bzip2recover	15.24 KB	-rwxr-xr-x
bzless	1.23 KB	-rwxr-xr-x
bzmore	1.23 KB	-rwxr-xr-x
c++	754.59 KB	-rwxr-xr-x
c++filt	27.92 KB	-rwxr-xr-x
c2ph	35.75 KB	-rwxr-xr-x
c89	224 B	-rwxr-xr-x
c99	215 B	-rwxr-xr-x
ca-legacy	1.6 KB	-rwxr-xr-x
cairo-sphinx	69.99 KB	-rwxr-xr-x
cal	36.8 KB	-rwxr-xr-x
captoinfo	64.26 KB	-rwxr-xr-x
cat	52.81 KB	-rwxr-xr-x
catchsegv	3.26 KB	-rwxr-xr-x
catman	36.75 KB	-rwxr-xr-x
cc	750.59 KB	-rwxr-xr-x
cd	26 B	-rwxr-xr-x
centrino-decode	6.13 KB	-rwxr-xr-x
certutil	179.75 KB	-rwxr-xr-x
chacl	15.27 KB	-rwxr-xr-x
chage	72.16 KB	-rwxr-xr-x
chardetect	307 B	-rwxr-xr-x
chattr	11.27 KB	-rwxr-xr-x
chcat	13.12 KB	-rwxr-xr-x
chcon	61.46 KB	-rwxr-xr-x
checkmodule	400.48 KB	-rwxr-xr-x
checkpolicy	412.46 KB	-rwxr-xr-x
chfn	23.41 KB	-rws--x--x
chgrp	61.32 KB	-rwxr-xr-x
chmem	40.43 KB	-rwxr-xr-x
chmod	57.21 KB	-rwxr-xr-x
chown	61.36 KB	-rwxr-xr-x
chronyc	85.03 KB	-rwxr-xr-x
chrt	32.17 KB	-rwxr-xr-x
chsh	23.32 KB	-rwx--x--x
chvt	11.14 KB	-rwxr-xr-x
ci	801 B	-rwxr-xr-x
cifsiostat	48.52 KB	-rwxr-xr-x
cksum	32.38 KB	-rwxr-xr-x
cl-linksafe-reconfigure	5.15 KB	-rwxr-xr-x
clear	7.02 KB	-rwxr-xr-x
cloud-init	316 B	-rwxr-xr-x
cloud-init-per	1.74 KB	-rwxr-xr-x
cmp	44.14 KB	-rwxr-xr-x
cmsutil	110.59 KB	-rwxr-xr-x
co	801 B	-rwxr-xr-x
col	23.88 KB	-rwxr-xr-x
colcrt	11.29 KB	-rwxr-xr-x
colrm	23.77 KB	-rwxr-xr-x
column	27.99 KB	-rwxr-xr-x
comm	36.55 KB	-rwxr-xr-x
command	31 B	-rwxr-xr-x
compare	11.09 KB	-rwxr-xr-x
compile_et	1.45 KB	-rwxr-xr-x
composite	7.05 KB	-rwxr-xr-x
config_data	7.05 KB	-rwxr-xr-x
conjure	7.05 KB	-rwxr-xr-x
convert	7.05 KB	-rwxr-xr-x
coredumpctl	154.52 KB	-rwxr-xr-x
corelist	10.02 KB	-rwxr-xr-x
cp	151.55 KB	-rwxr-xr-x
cpan	4.97 KB	-rwxr-xr-x
cpan-mirrors	4.27 KB	-r-xr-xr-x
cpan2dist	21.31 KB	-rwxr-xr-x
cpanp	3.31 KB	-rwxr-xr-x
cpanp-run-perl	553 B	-rwxr-xr-x
cpapi1	3.02 MB	-rwxr-xr-x
cpapi2	3.02 MB	-rwxr-xr-x
cpapi3	3.02 MB	-rwxr-xr-x
cpio	142.58 KB	-rwxr-xr-x
cpp	754.58 KB	-rwxr-xr-x
cpupower	66.34 KB	-rwxr-xr-x
crlutil	127 KB	-rwxr-xr-x
crontab	56.23 KB	-rwsr-xr-x
csplit	48.82 KB	-rwxr-xr-x
csslint-0.6	19.55 KB	-rwxr-xr-x
curl	153 KB	-rwxr-xr-x
cut	40.61 KB	-rwxr-xr-x
cvtsudoers	241.7 KB	-rwxr-xr-x
cxpm	28.05 KB	-rwxr-xr-x
date	60.74 KB	-rwxr-xr-x
db47_archive	10.21 KB	-rwxr-xr-x
db47_checkpoint	10.27 KB	-rwxr-xr-x
db47_codegen	22.25 KB	-rwxr-xr-x
db47_deadlock	10.28 KB	-rwxr-xr-x
db47_dump	14.25 KB	-rwxr-xr-x
db47_hotbackup	18.38 KB	-rwxr-xr-x
db47_load	26.33 KB	-rwxr-xr-x
db47_printlog	62.8 KB	-rwxr-xr-x
db47_recover	10.27 KB	-rwxr-xr-x
db47_stat	14.22 KB	-rwxr-xr-x
db47_upgrade	10.23 KB	-rwxr-xr-x
db47_verify	10.22 KB	-rwxr-xr-x
db_archive	11.23 KB	-rwxr-xr-x
db_checkpoint	11.3 KB	-rwxr-xr-x
db_deadlock	11.31 KB	-rwxr-xr-x
db_dump	15.33 KB	-rwxr-xr-x
db_dump185	64.45 KB	-rwxr-xr-x
db_hotbackup	15.34 KB	-rwxr-xr-x
db_load	27.51 KB	-rwxr-xr-x
db_log_verify	15.34 KB	-rwxr-xr-x
db_printlog	32.26 KB	-rwxr-xr-x
db_recover	11.33 KB	-rwxr-xr-x
db_replicate	15.34 KB	-rwxr-xr-x
db_stat	15.26 KB	-rwxr-xr-x
db_tuner	19.33 KB	-rwxr-xr-x
db_upgrade	11.23 KB	-rwxr-xr-x
db_verify	11.25 KB	-rwxr-xr-x
dbilogstrip	1.43 KB	-rwxr-xr-x
dbiprof	6.15 KB	-rwxr-xr-x
dbiproxy	5.35 KB	-rwxr-xr-x
dbus-binding-tool	94.49 KB	-rwxr-xr-x
dbus-cleanup-sockets	11 KB	-rwxr-xr-x
dbus-daemon	218 KB	-rwxr-xr-x
dbus-monitor	23.13 KB	-rwxr-xr-x
dbus-run-session	14.97 KB	-rwxr-xr-x
dbus-send	27.07 KB	-rwxr-xr-x
dbus-test-tool	23.13 KB	-rwxr-xr-x
dbus-update-activation-environ...	15.02 KB	-rwxr-xr-x
dbus-uuidgen	10.98 KB	-rwxr-xr-x
dc	44.33 KB	-rwxr-xr-x
dd	73.14 KB	-rwxr-xr-x
deallocvt	11.16 KB	-rwxr-xr-x
debuginfo-install	7.88 KB	-rwxr-xr-x
delv	39.98 KB	-rwxr-xr-x
df	102.55 KB	-rwxr-xr-x
dgawk	502.12 KB	-rwxr-xr-x
diff	195.46 KB	-rwxr-xr-x
diff3	60.65 KB	-rwxr-xr-x
dig	146.96 KB	-rwxr-xr-x
dir	114.85 KB	-rwxr-xr-x
dircolors	40.44 KB	-rwxr-xr-x
dirname	28.31 KB	-rwxr-xr-x
display	7.05 KB	-rwxr-xr-x
dltest	11.05 KB	-rwxr-xr-x
dmesg	48.52 KB	-rwxr-xr-x
dnsdomainname	15.41 KB	-rwxr-xr-x
domainname	15.41 KB	-rwxr-xr-x
doveadm	2.94 MB	-rwxr-xr-x
doveconf	541.95 KB	-rwxr-xr-x
dovecot-sysreport	5.81 KB	-rwxr-xr-x
dpkg	275.27 KB	-rwxr-xr-x
dpkg-deb	140.41 KB	-rwxr-xr-x
dpkg-divert	132.63 KB	-rwxr-xr-x
dpkg-maintscript-helper	18.58 KB	-rwxr-xr-x
dpkg-query	140.8 KB	-rwxr-xr-x
dpkg-split	111.28 KB	-rwxr-xr-x
dpkg-statoverride	70.52 KB	-rwxr-xr-x
dpkg-trigger	66.26 KB	-rwxr-xr-x
dracut	55.83 KB	-rwxr-xr-x
dsync	2.94 MB	-rwxr-xr-x
dtrace	16.66 KB	-rwxr-xr-x
du	110.34 KB	-rwxr-xr-x
dumpkeys	77.51 KB	-rwxr-xr-x
dumpsexp	15.19 KB	-rwxr-xr-x
dvipdf	1 KB	-rwxr-xr-x
dwp	3.03 MB	-rwxr-xr-x
ea-php54	3.89 MB	-rwxr-xr-x
ea-php54-pear	383 B	-rwxr-xr-x
ea-php54-pecl	299 B	-rwxr-xr-x
ea-php55	3.98 MB	-rwxr-xr-x
ea-php55-pear	383 B	-rwxr-xr-x
ea-php55-pecl	299 B	-rwxr-xr-x
ea-php56	4 MB	-rwxr-xr-x
ea-php56-pear	383 B	-rwxr-xr-x
ea-php56-pecl	299 B	-rwxr-xr-x
ea-php72	4.26 MB	-rwxr-xr-x
ea-php72-pear	383 B	-rwxr-xr-x
ea-php72-pecl	299 B	-rwxr-xr-x
ea-php73	4.65 MB	-rwxr-xr-x
ea-php73-pear	383 B	-rwxr-xr-x
ea-php73-pecl	299 B	-rwxr-xr-x
ea-php80	6.54 MB	-rwxr-xr-x
ea-php80-pear	383 B	-rwxr-xr-x
ea-php80-pecl	299 B	-rwxr-xr-x
ea-php81	6.57 MB	-rwxr-xr-x
ea-php81-pear	383 B	-rwxr-xr-x
ea-php81-pecl	299 B	-rwxr-xr-x
ea-php82	6.73 MB	-rwxr-xr-x
ea-php82-pear	383 B	-rwxr-xr-x
ea-php82-pecl	299 B	-rwxr-xr-x
easy_install	320 B	-rwxr-xr-x
easy_install-2.7	328 B	-rwxr-xr-x
easy_install-3.6	234 B	-rwxr-xr-x
echo	32.31 KB	-rwxr-xr-x
egrep	290 B	-rwxr-xr-x
eject	48.81 KB	-rwxr-xr-x
elfedit	32.18 KB	-rwxr-xr-x
elinks	1.3 MB	-rwxr-xr-x
enchant	15.29 KB	-rwxr-xr-x
enchant-lsmod	11.13 KB	-rwxr-xr-x
env	28.33 KB	-rwxr-xr-x
envsubst	36.01 KB	-rwxr-xr-x
eps2eps	639 B	-rwxr-xr-x
eqn	144.41 KB	-rwxr-xr-x
ex	906.4 KB	-rwxr-xr-x
expand	32.48 KB	-rwxr-xr-x
expr	36.53 KB	-rwxr-xr-x
factor	93.29 KB	-rwxr-xr-x
fallocate	27.84 KB	-rwxr-xr-x
false	28.25 KB	-rwxr-xr-x
fc	26 B	-rwxr-xr-x
fc-cache	132 B	-rwxr-xr-x
fc-cache-64	15.45 KB	-rwxr-xr-x
fc-cat	15.4 KB	-rwxr-xr-x
fc-conflist	11.2 KB	-rwxr-xr-x
fc-list	11.26 KB	-rwxr-xr-x
fc-match	11.32 KB	-rwxr-xr-x
fc-pattern	11.26 KB	-rwxr-xr-x
fc-query	11.23 KB	-rwxr-xr-x
fc-scan	11.27 KB	-rwxr-xr-x
fc-validate	11.27 KB	-rwxr-xr-x
fg	26 B	-rwxr-xr-x
fgconsole	11.16 KB	-rwxr-xr-x
fgrep	290 B	-rwxr-xr-x
filan	89.13 KB	-rwxr-xr-x
file	19.3 KB	-rwxr-xr-x
find	194.63 KB	-rwxr-xr-x
find-repos-of-install	4.27 KB	-rwxr-xr-x
find2perl	23.06 KB	-rwxr-xr-x
findmnt	58.38 KB	-rwxr-xr-x
fipscheck	15.37 KB	-rwxr-xr-x
fipshmac	11.3 KB	-rwxr-xr-x
firewall-cmd	113.48 KB	-rwxr-xr-x
firewall-offline-cmd	101.18 KB	-rwxr-xr-x
flex	318.07 KB	-rwxr-xr-x
flex++	318.07 KB	-rwxr-xr-x
flock	23.88 KB	-rwxr-xr-x
fmt	36.48 KB	-rwxr-xr-x
fold	36.46 KB	-rwxr-xr-x
fonttosfnt	35.99 KB	-rwxr-xr-x
formail	43.68 KB	-rwxr-xr-x
free	19.33 KB	-rwxr-xr-x
freetype-config	4.39 KB	-rwxr-xr-x
fribidi	16.09 KB	-rwxr-xr-x
ftp	85.5 KB	-rwxr-xr-x
funzip	31.38 KB	-rwxr-xr-x
g++	754.59 KB	-rwxr-xr-x
gapplication	19.48 KB	-rwxr-xr-x
gawk	418.55 KB	-rwxr-xr-x
gcc	750.59 KB	-rwxr-xr-x
gcc-ar	26.45 KB	-rwxr-xr-x
gcc-nm	26.45 KB	-rwxr-xr-x
gcc-ranlib	26.45 KB	-rwxr-xr-x
gcov	307.45 KB	-rwxr-xr-x
gd2copypal	7.06 KB	-rwxr-xr-x
gd2togif	7.05 KB	-rwxr-xr-x
gd2topng	11.06 KB	-rwxr-xr-x
gdbus	40.17 KB	-rwxr-xr-x
gdcmpgif	11.08 KB	-rwxr-xr-x
gdk-pixbuf-query-loaders-64	15.38 KB	-rwxr-xr-x
gdk-pixbuf-thumbnailer	15.59 KB	-rwxr-xr-x
gdlib-config	2.52 KB	-rwxr-xr-x
gdparttopng	11.07 KB	-rwxr-xr-x
gdtopng	7.04 KB	-rwxr-xr-x
gencat	22.11 KB	-rwxr-xr-x
genl-ctrl-list	11.27 KB	-rwxr-xr-x
geoiplookup	15.28 KB	-rwxr-xr-x
geoiplookup6	11.16 KB	-rwxr-xr-x
geoipupdate	31.28 KB	-rwxr-xr-x
geqn	144.41 KB	-rwxr-xr-x
getconf	22.02 KB	-rwxr-xr-x
getent	26.39 KB	-rwxr-xr-x
getfacl	24.29 KB	-rwxr-xr-x
getkeycodes	11.16 KB	-rwxr-xr-x
getopt	15.38 KB	-rwxr-xr-x
getopts	31 B	-rwxr-xr-x
gettext	35.94 KB	-rwxr-xr-x
gettext.sh	4.52 KB	-rwxr-xr-x
gettextize	42.69 KB	-rwxr-xr-x
ghostscript	10.97 KB	-rwxr-xr-x
giftogd2	7.05 KB	-rwxr-xr-x
gio	73.41 KB	-rwxr-xr-x
gio-querymodules-64	11.31 KB	-rwxr-xr-x
git	1.46 MB	-rwxr-xr-x
git-receive-pack	1.46 MB	-rwxr-xr-x
git-shell	722.04 KB	-rwxr-xr-x
git-upload-archive	1.46 MB	-rwxr-xr-x
git-upload-pack	795.48 KB	-rwxr-xr-x
glib-compile-schemas	44.38 KB	-rwxr-xr-x
gmake	178.47 KB	-rwxr-xr-x
gneqn	271 B	-rwxr-xr-x
gnroff	3.31 KB	-rwxr-xr-x
gpasswd	76.57 KB	-rwsr-xr-x
gpg	732.4 KB	-rwxr-xr-x
gpg-agent	289.74 KB	-rwxr-xr-x
gpg-connect-agent	152.69 KB	-rwxr-xr-x
gpg-error	23.18 KB	-rwxr-xr-x
gpg-error-config	1.83 KB	-rwxr-xr-x
gpg-zip	3.23 KB	-rwxr-xr-x
gpg2	732.4 KB	-rwxr-xr-x
gpgconf	140.31 KB	-rwxr-xr-x
gpgparsemail	23.7 KB	-rwxr-xr-x
gpgsplit	48.88 KB	-rwxr-xr-x
gpgv	345.38 KB	-rwxr-xr-x
gpgv2	345.38 KB	-rwxr-xr-x
gpic	180.41 KB	-rwxr-xr-x
gprof	98.41 KB	-rwxr-xr-x
gr2fonttest	23.66 KB	-rwxr-xr-x
grep	155.3 KB	-rwxr-xr-x
groff	81.63 KB	-rwxr-xr-x
grops	140.85 KB	-rwxr-xr-x
grotty	98.59 KB	-rwxr-xr-x
groups	32.41 KB	-rwxr-xr-x
growpart	21.13 KB	-rwxr-xr-x
grub2-editenv	396.07 KB	-rwxr-xr-x
grub2-file	834.34 KB	-rwxr-xr-x
grub2-fstest	1.03 MB	-rwxr-xr-x
grub2-glue-efi	258.84 KB	-rwxr-xr-x
grub2-kbdcomp	1.63 KB	-rwxr-xr-x
grub2-menulst2cfg	241.85 KB	-rwxr-xr-x
grub2-mkfont	287.58 KB	-rwxr-xr-x
grub2-mkimage	379.21 KB	-rwxr-xr-x
grub2-mklayout	264.9 KB	-rwxr-xr-x
grub2-mknetdir	429.8 KB	-rwxr-xr-x
grub2-mkpasswd-pbkdf2	271.29 KB	-rwxr-xr-x
grub2-mkrelpath	258.48 KB	-rwxr-xr-x
grub2-mkrescue	1021.84 KB	-rwxr-xr-x
grub2-mkstandalone	534.33 KB	-rwxr-xr-x
grub2-render-label	839.14 KB	-rwxr-xr-x
grub2-script-check	295.41 KB	-rwxr-xr-x
grub2-syslinux2cfg	763.57 KB	-rwxr-xr-x
gs	10.97 KB	-rwxr-xr-x
gsbj	350 B	-rwxr-xr-x
gsdj	352 B	-rwxr-xr-x
gsdj500	352 B	-rwxr-xr-x
gsettings	23.8 KB	-rwxr-xr-x
gslj	353 B	-rwxr-xr-x
gslp	350 B	-rwxr-xr-x
gsnd	277 B	-rwxr-xr-x
gsoelim	32.59 KB	-rwxr-xr-x
gss-client	23.17 KB	-rwxr-xr-x
gtar	338.02 KB	-rwxr-xr-x
gtbl	115.96 KB	-rwxr-xr-x
gtroff	512.96 KB	-rwxr-xr-x
gunzip	2.2 KB	-rwxr-xr-x
gzexe	5.79 KB	-rwxr-xr-x
gzip	98.43 KB	-rwxr-xr-x
h2ph	27.65 KB	-rwxr-xr-x
h2xs	59.15 KB	-rwxr-xr-x
hdsploader	11.18 KB	-rwxr-xr-x
head	40.51 KB	-rwxr-xr-x
hesinfo	11.09 KB	-rwxr-xr-x
hexdump	32.02 KB	-rwxr-xr-x
hmac256	15.67 KB	-rwxr-xr-x
host	127.02 KB	-rwxr-xr-x
hostid	28.32 KB	-rwxr-xr-x
hostname	15.41 KB	-rwxr-xr-x
hostnamectl	318.07 KB	-rwxr-xr-x
htdbm	56.14 KB	-rwxr-xr-x
htdigest	29.35 KB	-rwxr-xr-x
htpasswd	54.2 KB	-rwxr-xr-x
httxt2dbm	21.69 KB	-rwxr-xr-x
hunspell	53.11 KB	-rwxr-xr-x
i386	15.27 KB	-rwxr-xr-x
iceauth	31.73 KB	-rwxr-xr-x
iconv	58.14 KB	-rwxr-xr-x
id	36.52 KB	-rwxr-xr-x
ident	110.45 KB	-rwxr-xr-x
identify	7.06 KB	-rwxr-xr-x
idiag-socket-details	11.34 KB	-rwxr-xr-x
idle	93 B	-rwxr-xr-x
idn	32.45 KB	-rwxr-xr-x
ifnames	4.03 KB	-rwxr-xr-x
igawk	3.11 KB	-rwxr-xr-x
import	7.05 KB	-rwxr-xr-x
imunify-antivirus	1 KB	-rwxr-xr-x
imunify-service	1023 B	-rwxr-xr-x
imunify360-agent	1 KB	-rwxr-xr-x
imunify360-command-wrapper	8.28 KB	-rwxr-xr-x
info	265.19 KB	-rwxr-xr-x
infocmp	56.07 KB	-rwxr-xr-x
infokey	21.47 KB	-rwxr-xr-x
infotocap	64.26 KB	-rwxr-xr-x
innochecksum	9.68 MB	-rwxr-xr-x
install	139.59 KB	-rwxr-xr-x
instmodsh	4.15 KB	-rwxr-xr-x
ionice	23.86 KB	-rwxr-xr-x
iostat	60.79 KB	-rwxr-xr-x
ipcalc	15.05 KB	-rwxr-xr-x
ipcmk	24 KB	-rwxr-xr-x
ipcrm	27.85 KB	-rwxr-xr-x
ipcs	48.37 KB	-rwxr-xr-x
iptables-xml	91.52 KB	-rwxr-xr-x
isc-config.sh	3.47 KB	-rwxr-xr-x
isosize	23.83 KB	-rwxr-xr-x
ispell	988 B	-rwxr-xr-x
isql	31.69 KB	-rwxr-xr-x
iusql	23.61 KB	-rwxr-xr-x
jobs	28 B	-rwxr-xr-x
join	48.75 KB	-rwxr-xr-x
journalctl	537.88 KB	-rwxr-xr-x
js	3.36 MB	-rwxr-xr-x
json_pp	3.82 KB	-rwxr-xr-x
json_reformat	35.89 KB	-rwxr-xr-x
json_verify	27.52 KB	-rwxr-xr-x
json_xs	6.74 KB	-rwxr-xr-x
jsonpointer	1.31 KB	-rwxr-xr-x
kbd_mode	11.16 KB	-rwxr-xr-x
kbdinfo	11.19 KB	-rwxr-xr-x
kbdrate	11.22 KB	-rwxr-xr-x
kdumpctl	33.18 KB	-rwxr-xr-x
kernel-install	4.7 KB	-rwxr-xr-x
keyctl	27.94 KB	-rwxr-xr-x
kill	32.82 KB	-rwxr-xr-x
killall	24.14 KB	-rwxr-xr-x
kmod	143.24 KB	-rwxr-xr-x
krb5-config	6.96 KB	-rwxr-xr-x
last	19.11 KB	-rwxr-xr-x
lastb	19.11 KB	-rwxr-xr-x
lastlog	19.15 KB	-rwxr-xr-x
lchfn	15.52 KB	-rwxr-xr-x
lchsh	15.49 KB	-rwxr-xr-x
ld	982.58 KB	-rwxr-xr-x
ld.bfd	982.58 KB	-rwxr-xr-x
ld.gold	5.11 MB	-rwxr-xr-x
ldd	5.18 KB	-rwxr-xr-x
less	154.57 KB	-rwxr-xr-x
lessecho	11.13 KB	-rwxr-xr-x
lesskey	16.67 KB	-rwxr-xr-x
lesspipe.sh	2.24 KB	-rwxr-xr-x
lex	318.07 KB	-rwxr-xr-x
lexgrog	85.09 KB	-rwxr-xr-x
libgcrypt-config	3.78 KB	-rwxr-xr-x
libnetcfg	15.36 KB	-rwxr-xr-x
libpng-config	2.38 KB	-rwxr-xr-x
libpng15-config	2.38 KB	-rwxr-xr-x
libtool	314.04 KB	-rwxr-xr-x
libtoolize	76.8 KB	-rwxr-xr-x
libwmf-fontmap	12.78 KB	-rwxr-xr-x
link	28.3 KB	-rwxr-xr-x
links	1.3 MB	-rwxr-xr-x
linux-boot-prober	5.85 KB	-rwxr-xr-x
linux32	15.27 KB	-rwxr-xr-x
linux64	15.27 KB	-rwxr-xr-x
ln	57.22 KB	-rwxr-xr-x
loadkeys	110.48 KB	-rwxr-xr-x
loadunimap	23.88 KB	-rwxr-xr-x
locale	37.11 KB	-rwxr-xr-x
localectl	326.23 KB	-rwxr-xr-x
localedef	318.31 KB	-rwxr-xr-x
lockfile	19.36 KB	-rwxr-xr-x
logger	28.62 KB	-rwxr-xr-x
login	36.38 KB	-rwxr-xr-x
loginctl	489.6 KB	-rwxr-xr-x
logname	28.31 KB	-rwxr-xr-x
logresolve	28.58 KB	-rwxr-xr-x
look	11.27 KB	-rwxr-xr-x
lprsetup.sh	5.34 KB	-rwxr-xr-x
ls	114.85 KB	-rwxr-xr-x
lsattr	11.25 KB	-rwxr-xr-x
lsblk	79.17 KB	-rwxr-xr-x
lscpu	60.75 KB	-rwxr-xr-x
lsinitrd	6.26 KB	-rwxr-xr-x
lsipc	60.95 KB	-rwxr-xr-x
lslocks	41.01 KB	-rwxr-xr-x
lslogins	52.88 KB	-rwxr-xr-x
lsmem	40.78 KB	-rwxr-xr-x
lsns	36.43 KB	-rwxr-xr-x
lsphp	937 B	-rwxr-xr-x
lsscsi	56.48 KB	-rwxr-xr-x
lua	15.47 KB	-rwxr-xr-x
luac	119.03 KB	-rwxr-xr-x
lwp-download	8.43 KB	-rwxr-xr-x
lwp-dump	2.73 KB	-rwxr-xr-x
lwp-mirror	2.42 KB	-rwxr-xr-x
lwp-request	14.71 KB	-rwxr-xr-x
lynx	1.43 MB	-rwxr-xr-x
lz4	105.87 KB	-rwxr-xr-x
lz4_decompress	627 KB	-rwxr-xr-x
lz4c	105.87 KB	-rwxr-xr-x
lz4cat	105.87 KB	-rwxr-xr-x
lzcat	73.52 KB	-rwxr-xr-x
lzcmp	6.48 KB	-rwxr-xr-x
lzdiff	6.48 KB	-rwxr-xr-x
lzegrep	5.76 KB	-rwxr-xr-x
lzfgrep	5.76 KB	-rwxr-xr-x
lzgrep	5.76 KB	-rwxr-xr-x
lzless	1.76 KB	-rwxr-xr-x
lzma	73.52 KB	-rwxr-xr-x
lzmadec	11.21 KB	-rwxr-xr-x
lzmainfo	11.2 KB	-rwxr-xr-x
lzmore	2.11 KB	-rwxr-xr-x
m4	151.17 KB	-rwxr-xr-x
machinectl	533.93 KB	-rwxr-xr-x
mail	383.67 KB	-rwxr-xr-x
mailstat	5.72 KB	-rwxr-xr-x
mailx	383.67 KB	-rwxr-xr-x
make	178.47 KB	-rwxr-xr-x
makedb	18.11 KB	-rwxr-xr-x
man	100.44 KB	-rwxr-xr-x
mandb	122.25 KB	-rwxr-xr-x
manpath	32.55 KB	-rwxr-xr-x
mapscrn	19.78 KB	-rwxr-xr-x
mcookie	15.44 KB	-rwxr-xr-x
md5sum	40.53 KB	-rwxr-xr-x
mdig	44.2 KB	-rwxr-xr-x
merge	110.43 KB	-rwxr-xr-x
mesg	10.98 KB	-rwxr-xr-x
miniterm.py	25.48 KB	-rwxr-xr-x
mixartloader	15.38 KB	-rwxr-xr-x
mkdir	77.9 KB	-rwxr-xr-x
mkfifo	61.59 KB	-rwxr-xr-x
mkfontdir	65 B	-rwxr-xr-x
mkfontscale	32.48 KB	-rwxr-xr-x
mkinitrd	2.94 KB	-rwxr-xr-x
mknod	65.61 KB	-rwxr-xr-x
mktemp	40.66 KB	-rwxr-xr-x
modutil	165.78 KB	-rwxr-xr-x
mogrify	7.05 KB	-rwxr-xr-x
montage	7.05 KB	-rwxr-xr-x
more	40.15 KB	-rwxr-xr-x
mount	43.23 KB	-rwsr-xr-x
mountpoint	15.32 KB	-rwxr-xr-x
mpstat	56.54 KB	-rwxr-xr-x
msgattrib	23.36 KB	-rwxr-xr-x
msgcat	23.34 KB	-rwxr-xr-x
msgcmp	23.59 KB	-rwxr-xr-x
msgcomm	19.31 KB	-rwxr-xr-x
msgconv	19.3 KB	-rwxr-xr-x
msgen	19.3 KB	-rwxr-xr-x
msgexec	15.33 KB	-rwxr-xr-x
msgfilter	27.56 KB	-rwxr-xr-x
msgfmt	77.05 KB	-rwxr-xr-x
msgfmt.py	6.33 KB	-rwxr-xr-x
msggrep	35.97 KB	-rwxr-xr-x
msghack	12.45 KB	-rwxr-xr-x
msginit	44.38 KB	-rwxr-xr-x
msgmerge	52.6 KB	-rwxr-xr-x
msgunfmt	31.7 KB	-rwxr-xr-x
msguniq	19.31 KB	-rwxr-xr-x
mv	127.3 KB	-rwxr-xr-x
my_print_defaults	8.81 MB	-rwxr-xr-x
myisam_ftdump	11.08 MB	-rwxr-xr-x
myisamchk	11.55 MB	-rwxr-xr-x
myisamlog	7.42 MB	-rwxr-xr-x
myisampack	11.21 MB	-rwxr-xr-x
mysql	12.1 MB	-rwxr-xr-x
mysql_config	840 B	-rwxr-xr-x
mysql_config-64	5.11 KB	-rwxr-xr-x
mysql_config_editor	8.98 MB	-rwxr-xr-x
mysql_install_db	11.44 MB	-rwxr-xr-x
mysql_plugin	8.88 MB	-rwxr-xr-x
mysql_secure_installation	10.71 MB	-rwxr-xr-x
mysql_ssl_rsa_setup	9.23 MB	-rwxr-xr-x
mysql_tzinfo_to_sql	4.99 MB	-rwxr-xr-x
mysql_upgrade	14.18 MB	-rwxr-xr-x
mysqladmin	10.76 MB	-rwxr-xr-x
mysqlbinlog	12.69 MB	-rwxr-xr-x
mysqlcheck	11.04 MB	-rwxr-xr-x
mysqld_pre_systemd	3.74 KB	-rwxr-xr-x
mysqldump	11.13 MB	-rwxr-xr-x
mysqldumpslow	7.66 KB	-rwxr-xr-x
mysqlimport	10.76 MB	-rwxr-xr-x
mysqlpump	20.23 MB	-rwxr-xr-x
mysqlshow	10.72 MB	-rwxr-xr-x
mysqlslap	10.82 MB	-rwxr-xr-x
nail	383.67 KB	-rwxr-xr-x
named-rrchecker	15.32 KB	-rwxr-xr-x
namei	27.95 KB	-rwxr-xr-x
nano	201.08 KB	-rwxr-xr-x
nc	371.27 KB	-rwxr-xr-x
ncat	371.27 KB	-rwxr-xr-x
ncurses5-config	5.68 KB	-rwxr-xr-x
ncursesw5-config	5.68 KB	-rwxr-xr-x
ndptool	23.63 KB	-rwxr-xr-x
needs-restarting	8.17 KB	-rwxr-xr-x
neqn	271 B	-rwxr-xr-x
net-snmp-create-v3-user	2.98 KB	-rwxr-xr-x
netstat	151.38 KB	-rwxr-xr-x
newgidmap	38.09 KB	-rwxr-xr-x
newgrp	40.95 KB	-rwxr-xr-x
newuidmap	38.06 KB	-rwxr-xr-x
nf-ct-add	11.8 KB	-rwxr-xr-x
nf-ct-list	15.84 KB	-rwxr-xr-x
nf-exp-add	16.21 KB	-rwxr-xr-x
nf-exp-delete	15.99 KB	-rwxr-xr-x
nf-exp-list	11.8 KB	-rwxr-xr-x
nf-log	11.23 KB	-rwxr-xr-x
nf-monitor	11.18 KB	-rwxr-xr-x
nf-queue	11.27 KB	-rwxr-xr-x
nfsiostat-sysstat	52.55 KB	-rwxr-xr-x
ngettext	35.95 KB	-rwxr-xr-x
nice	32.32 KB	-rwxr-xr-x
nisdomainname	15.41 KB	-rwxr-xr-x
nl	40.6 KB	-rwxr-xr-x
nl-addr-add	11.65 KB	-rwxr-xr-x
nl-addr-delete	11.73 KB	-rwxr-xr-x
nl-addr-list	15.88 KB	-rwxr-xr-x
nl-class-add	11.7 KB	-rwxr-xr-x
nl-class-delete	11.55 KB	-rwxr-xr-x
nl-class-list	11.48 KB	-rwxr-xr-x
nl-classid-lookup	11.29 KB	-rwxr-xr-x
nl-cls-add	11.76 KB	-rwxr-xr-x
nl-cls-delete	11.68 KB	-rwxr-xr-x
nl-cls-list	11.58 KB	-rwxr-xr-x
nl-fib-lookup	11.41 KB	-rwxr-xr-x
nl-link-enslave	7.05 KB	-rwxr-xr-x
nl-link-ifindex2name	7.06 KB	-rwxr-xr-x
nl-link-list	11.52 KB	-rwxr-xr-x
nl-link-name2ifindex	7.05 KB	-rwxr-xr-x
nl-link-release	7.05 KB	-rwxr-xr-x
nl-link-set	11.64 KB	-rwxr-xr-x
nl-link-stats	11.39 KB	-rwxr-xr-x
nl-list-caches	11.08 KB	-rwxr-xr-x
nl-list-sockets	7.06 KB	-rwxr-xr-x
nl-monitor	11.2 KB	-rwxr-xr-x
nl-neigh-add	11.51 KB	-rwxr-xr-x
nl-neigh-delete	11.57 KB	-rwxr-xr-x
nl-neigh-list	11.46 KB	-rwxr-xr-x
nl-neightbl-list	11.27 KB	-rwxr-xr-x
nl-pktloc-lookup	11.36 KB	-rwxr-xr-x
nl-qdisc-add	11.6 KB	-rwxr-xr-x
nl-qdisc-delete	11.54 KB	-rwxr-xr-x
nl-qdisc-list	11.63 KB	-rwxr-xr-x
nl-route-add	11.73 KB	-rwxr-xr-x
nl-route-delete	15.86 KB	-rwxr-xr-x
nl-route-get	11.18 KB	-rwxr-xr-x
nl-route-list	11.77 KB	-rwxr-xr-x
nl-rule-list	11.3 KB	-rwxr-xr-x
nl-tctree-list	11.53 KB	-rwxr-xr-x
nl-util-addr	7.03 KB	-rwxr-xr-x
nm	45.43 KB	-rwxr-xr-x
nohup	32.42 KB	-rwxr-xr-x
nproc	32.37 KB	-rwxr-xr-x
nroff	3.31 KB	-rwxr-xr-x
nsenter	28.22 KB	-rwxr-xr-x
nslookup	130.93 KB	-rwxr-xr-x
nss-policy-check	15.26 KB	-rwxr-xr-x
nsupdate	65.2 KB	-rwxr-xr-x
numfmt	64.71 KB	-rwxr-xr-x
objcopy	227.34 KB	-rwxr-xr-x
objdump	357.76 KB	-rwxr-xr-x
od	64.81 KB	-rwxr-xr-x
odbc_config	11.04 KB	-rwxr-xr-x
odbcinst	27.69 KB	-rwxr-xr-x
oldfind	186.41 KB	-rwxr-xr-x
open	19.48 KB	-rwxr-xr-x
openssl	542.27 KB	-rwxr-xr-x
openvt	19.48 KB	-rwxr-xr-x
os-prober	5.51 KB	-rwxr-xr-x
p11-kit	32.18 KB	-rwxr-xr-x
package-cleanup	17.39 KB	-rwxr-xr-x
page_owner_sort	10.2 KB	-rwxr-xr-x
pango-list	11.1 KB	-rwxr-xr-x
pango-querymodules-64	28.26 KB	-rwxr-xr-x
pango-view	49.47 KB	-rwxr-xr-x
paperconf	11.23 KB	-rwxr-xr-x
passwd	27.2 KB	-rwsr-xr-x
paste	32.34 KB	-rwxr-xr-x
patch	147 KB	-rwxr-xr-x
pathchk	32.31 KB	-rwxr-xr-x
pchrt	3.93 KB	-rwxr-xr-x
pcre-config	2.09 KB	-rwxr-xr-x
pdf2dsc	698 B	-rwxr-xr-x
pdf2ps	909 B	-rwxr-xr-x
pdns_control	7.58 MB	-rwxr-xr-x
pdnsutil	70.52 MB	-rwxr-xr-x
peekfd	11.21 KB	-rwxr-xr-x
perl	11.14 KB	-rwxr-xr-x
perl5.16.3	11.14 KB	-rwxr-xr-x
perlbug	43.61 KB	-rwxr-xr-x
perldoc	203 B	-rwxr-xr-x
perlivp	10.52 KB	-rwxr-xr-x
perlml	5.98 KB	-rwxr-xr-x
perlthanks	43.61 KB	-rwxr-xr-x
perror	8.95 MB	-rwxr-xr-x
pf2afm	498 B	-rwxr-xr-x
pfbtopfa	516 B	-rwxr-xr-x
pflags	2.06 KB	-rwxr-xr-x
pftp	85.5 KB	-rwxr-xr-x
pgawk	418.59 KB	-rwxr-xr-x
pgrep	27.67 KB	-rwxr-xr-x
php	937 B	-rwxr-xr-x
pic	180.41 KB	-rwxr-xr-x
piconv	7.99 KB	-rwxr-xr-x
pidstat	68.91 KB	-rwxr-xr-x
pinentry	2.54 KB	-rwxr-xr-x
pinentry-curses	49.19 KB	-rwxr-xr-x
ping	64.63 KB	-rwxr-xr-x
ping6	64.63 KB	-rwxr-xr-x
pinky	36.57 KB	-rwxr-xr-x
pip-3	407 B	-rwxr-xr-x
pip-3.6	407 B	-rwxr-xr-x
pip3	407 B	-rwxr-xr-x
pip3.6	407 B	-rwxr-xr-x
pk12util	103.22 KB	-rwxr-xr-x
pkaction	15 KB	-rwxr-xr-x
pkcheck	23.03 KB	-rwxr-xr-x
pkexec	27.02 KB	-rwsr-xr-x
pkg-config	44.38 KB	-rwxr-xr-x
pkill	27.67 KB	-rwxr-xr-x
pkla-admin-identities	19.23 KB	-rwxr-xr-x
pkla-check-authorization	27.3 KB	-rwxr-xr-x
pkttyagent	18.98 KB	-rwxr-xr-x
pl2pm	4.42 KB	-rwxr-xr-x
pldd	14.11 KB	-rwxr-xr-x
plesk_configure	450 B	-rwxr-xr-x
plymouth	39.77 KB	-rwxr-xr-x
pmap	27.61 KB	-rwxr-xr-x
pngtogd	7.05 KB	-rwxr-xr-x
pngtogd2	7.05 KB	-rwxr-xr-x
pod2html	4 KB	-rwxr-xr-x
pod2latex	10.1 KB	-rwxr-xr-x
pod2man	13.26 KB	-rwxr-xr-x
pod2text	10.75 KB	-rwxr-xr-x
pod2usage	3.67 KB	-rwxr-xr-x
podchecker	3.7 KB	-rwxr-xr-x
podselect	2.55 KB	-rwxr-xr-x
post-grohtml	187.55 KB	-rwxr-xr-x
powernow-k8-decode	6.15 KB	-rwxr-xr-x
pphs	404 B	-rwxr-xr-x
pr	65.11 KB	-rwxr-xr-x
pre-grohtml	86.24 KB	-rwxr-xr-x
precat	5.52 KB	-rwxr-xr-x
preconv	40.88 KB	-rwxr-xr-x
preunzip	5.52 KB	-rwxr-xr-x
prezip	5.52 KB	-rwxr-xr-x
prezip-bin	11.05 KB	-rwxr-xr-x
printafm	395 B	-rwxr-xr-x
printenv	28.28 KB	-rwxr-xr-x
printf	48.61 KB	-rwxr-xr-x
prlimit	41.2 KB	-rwxr-xr-x
procan	76.99 KB	-rwxr-xr-x
procmail	105.45 KB	-rwxr-xr-x
prove	13.13 KB	-rwxr-xr-x
prtstat	15.25 KB	-rwxr-xr-x
ps	97.77 KB	-rwxr-xr-x
ps2ascii	631 B	-rwxr-xr-x
ps2epsi	2.69 KB	-rwxr-xr-x
ps2pdf	272 B	-rwxr-xr-x
ps2pdf12	215 B	-rwxr-xr-x
ps2pdf13	215 B	-rwxr-xr-x
ps2pdf14	215 B	-rwxr-xr-x
ps2pdfwr	1.07 KB	-rwxr-xr-x
ps2ps	647 B	-rwxr-xr-x
ps2ps2	669 B	-rwxr-xr-x
psed	52.08 KB	-rwxr-xr-x
psfaddtable	19.48 KB	-rwxr-xr-x
psfgettable	19.48 KB	-rwxr-xr-x
psfstriptable	19.48 KB	-rwxr-xr-x
psfxtable	19.48 KB	-rwxr-xr-x
pstree	27.84 KB	-rwxr-xr-x
pstree.x11	27.84 KB	-rwxr-xr-x
pstruct	35.75 KB	-rwxr-xr-x
ptar	3.43 KB	-rwxr-xr-x
ptardiff	2.41 KB	-rwxr-xr-x
ptargrep	4.13 KB	-rwxr-xr-x
ptaskset	3.8 KB	-rwxr-xr-x
ptx	65.08 KB	-rwxr-xr-x
pure-pw	33.97 KB	-rwxr-xr-x
pure-pwconvert	9.93 KB	-rwxr-xr-x
pure-statsdecode	9.93 KB	-rwxr-xr-x
pwd	32.45 KB	-rwxr-xr-x
pwdx	11.27 KB	-rwxr-xr-x
pwmake	11.13 KB	-rwxr-xr-x
pwscore	11.13 KB	-rwxr-xr-x
pydoc	78 B	-rwxr-xr-x
pydoc3	78 B	-rwxr-xr-x
pydoc3.6	78 B	-rwxr-xr-x
pygettext.py	21.57 KB	-rwxr-xr-x
pynche	137 B	-rwxr-xr-x
python	6.98 KB	-rwxr-xr-x
python-config	1.79 KB	-rwxr-xr-x
python2	6.98 KB	-rwxr-xr-x
python2-config	1.79 KB	-rwxr-xr-x
python2.7	6.98 KB	-rwxr-xr-x
python2.7-config	1.79 KB	-rwxr-xr-x
python3	11.07 KB	-rwxr-xr-x
python3.6	11.07 KB	-rwxr-xr-x
python3.6m	11.07 KB	-rwxr-xr-x
pyvenv	435 B	-rwxr-xr-x
pyvenv-3.6	435 B	-rwxr-xr-x
pyzor	165 B	-rwxr-xr-x
pyzor-migrate	181 B	-rwxr-xr-x
pyzord	167 B	-rwxr-xr-x
qemu-ga	267.8 KB	-rwxr-xr-x
quota	83.31 KB	-rwsr-xr-x
quotasync	70.84 KB	-rwxr-xr-x
ranlib	61.21 KB	-rwxr-xr-x
raw	15.27 KB	-rwxr-xr-x
rcs	175.6 KB	-rwxr-xr-x
rcsclean	819 B	-rwxr-xr-x
rcsdiff	816 B	-rwxr-xr-x
rcsfreeze	4.34 KB	-rwxr-xr-x
rcsmerge	819 B	-rwxr-xr-x
rdate	10.3 KB	-rwxr-xr-x
read	28 B	-rwxr-xr-x
readelf	509.84 KB	-rwxr-xr-x
readlink	40.82 KB	-rwxr-xr-x
realpath	61.23 KB	-rwxr-xr-x
recode-sr-latin	15.29 KB	-rwxr-xr-x
rename	11.26 KB	-rwxr-xr-x
renice	11.21 KB	-rwxr-xr-x
replace	5.16 MB	-rwxr-xr-x
repo-graph	4.09 KB	-rwxr-xr-x
repo-rss	10.07 KB	-rwxr-xr-x
repoclosure	11.42 KB	-rwxr-xr-x
repodiff	13.97 KB	-rwxr-xr-x
repomanage	6.88 KB	-rwxr-xr-x
repoquery	55.68 KB	-rwxr-xr-x
reposync	14.14 KB	-rwxr-xr-x
repotrack	9.86 KB	-rwxr-xr-x
reset	19.59 KB	-rwxr-xr-x
resizecons	19.63 KB	-rwxr-xr-x
resolve_stack_dump	8.88 MB	-rwxr-xr-x
resolveip	8.81 MB	-rwxr-xr-x
rev	11.26 KB	-rwxr-xr-x
rlog	807 B	-rwxr-xr-x
rm	61.4 KB	-rwxr-xr-x
rmdir	44.46 KB	-rwxr-xr-x
rnano	201.08 KB	-rwxr-xr-x
rpcgen	90.45 KB	-rwxr-xr-x
rpm	15.75 KB	-rwxr-xr-x
rpm2cpio	11.16 KB	-rwxr-xr-x
rpmdb	11.73 KB	-rwxr-xr-x
rpmkeys	11.73 KB	-rwxr-xr-x
rpmquery	15.75 KB	-rwxr-xr-x
rpmverify	15.75 KB	-rwxr-xr-x
rsync	488.38 KB	-rwxr-xr-x
rsyslog-recover-qi.pl	5.96 KB	-rwxr-xr-x
run-parts	2.04 KB	-rwxr-xr-x
run-with-aspell	85 B	-rwxr-xr-x
runcon	32.47 KB	-rwxr-xr-x
rvi	906.4 KB	-rwxr-xr-x
rview	906.4 KB	-rwxr-xr-x
rvim	2.23 MB	-rwxr-xr-x
s2p	52.08 KB	-rwxr-xr-x
sadf	168.46 KB	-rwxr-xr-x
sandbox	17.52 KB	-rwxr-xr-x
sar	95.4 KB	-rwxr-xr-x
scl	19.5 KB	-rwxr-xr-x
scl_enabled	258 B	-rwxr-xr-x
scl_source	1.83 KB	-rwxr-xr-x
scp	89.23 KB	-rwxr-xr-x
screen	464.1 KB	-rwxr-sr-x
script	19.61 KB	-rwxr-xr-x
scriptreplay	15.29 KB	-rwxr-xr-x
sdiff	48.41 KB	-rwxr-xr-x
secon	24.06 KB	-rwxr-xr-x
sed	74.29 KB	-rwxr-xr-x
sedismod	249.42 KB	-rwxr-xr-x
sedispol	176.32 KB	-rwxr-xr-x
semodule_package	15.3 KB	-rwxr-xr-x
seq	48.48 KB	-rwxr-xr-x
sessreg	11.24 KB	-rwxr-xr-x
setarch	15.27 KB	-rwxr-xr-x
setfacl	36.73 KB	-rwxr-xr-x
setfont	40.38 KB	-rwxr-xr-x
setkeycodes	11.16 KB	-rwxr-xr-x
setleds	11.16 KB	-rwxr-xr-x
setmetamode	11.21 KB	-rwxr-xr-x
setpriv	36.06 KB	-rwxr-xr-x
setsid	11.23 KB	-rwxr-xr-x
setterm	27.48 KB	-rwxr-xr-x
setup-nsssysinit	1.5 KB	-rwxr-xr-x
setup-nsssysinit.sh	1.5 KB	-rwxr-xr-x
setvtrgb	11.34 KB	-rwxr-xr-x
sftp	142.01 KB	-rwxr-xr-x
sg	40.95 KB	-rwxr-xr-x
sh	941.93 KB	-rwxr-xr-x
sha1sum	36.57 KB	-rwxr-xr-x
sha224sum	40.63 KB	-rwxr-xr-x
sha256sum	40.63 KB	-rwxr-xr-x
sha384sum	40.65 KB	-rwxr-xr-x
sha512sum	40.65 KB	-rwxr-xr-x
shasum	8.4 KB	-rwxr-xr-x
show-changed-rco	10.13 KB	-rwxr-xr-x
show-installed	16.18 KB	-rwxr-xr-x
showconsolefont	15.47 KB	-rwxr-xr-x
showkey	15.23 KB	-rwxr-xr-x
showrgb	7.08 KB	-rwxr-xr-x
shred	52.94 KB	-rwxr-xr-x
shuf	49.13 KB	-rwxr-xr-x
signver	102.6 KB	-rwxr-xr-x
sim_client	14.97 KB	-rwxr-xr-x
size	32.35 KB	-rwxr-xr-x
skill	23.62 KB	-rwxr-xr-x
slabinfo	34.96 KB	-rwxr-xr-x
slabtop	19.52 KB	-rwxr-xr-x
sleep	32.35 KB	-rwxr-xr-x
slogin	760.45 KB	-rwxr-xr-x
smtpd.py	18.1 KB	-rwxr-xr-x
snice	23.62 KB	-rwxr-xr-x
snmpconf	25.52 KB	-rwxr-xr-x
socat	380.43 KB	-rwxr-xr-x
soelim	32.59 KB	-rwxr-xr-x
sort	114.94 KB	-rwxr-xr-x
sotruss	4.24 KB	-rwxr-xr-x
spell	122 B	-rwxr-xr-x
splain	18.03 KB	-rwxr-xr-x
split	69.47 KB	-rwxr-xr-x
sprof	22.1 KB	-rwxr-xr-x
sqlite3	54.95 KB	-rwxr-xr-x
ssh	760.45 KB	-rwxr-xr-x
ssh-add	352.46 KB	-rwxr-xr-x
ssh-agent	373.25 KB	---x--s--x
ssh-copy-id	10.22 KB	-rwxr-xr-x
ssh-keygen	409.38 KB	-rwxr-xr-x
ssh-keyscan	434.7 KB	-rwxr-xr-x
ssltap	118.41 KB	-rwxr-xr-x
stat	77.19 KB	-rwxr-xr-x
stdbuf	64.88 KB	-rwxr-xr-x
strace	1009.22 KB	-rwxr-xr-x
strace-log-merge	1.28 KB	-rwxr-xr-x
stream	7.05 KB	-rwxr-xr-x
strings	36.53 KB	-rwxr-xr-x
strip	227.32 KB	-rwxr-xr-x
stty	68.61 KB	-rwxr-xr-x
su	31.38 KB	-rwsr-x---
sudo	147.88 KB	---s--x--x
sudoedit	147.88 KB	---s--x--x
sudoreplay	56.11 KB	---x--x--x
sum	36.55 KB	-rwxr-xr-x
sxpm	19.83 KB	-rwxr-xr-x
sync	28.33 KB	-rwxr-xr-x
systemctl	704.8 KB	-rwxr-xr-x
systemd-analyze	1.49 MB	-rwxr-xr-x
systemd-ask-password	60.38 KB	-rwxr-xr-x
systemd-cat	39.98 KB	-rwxr-xr-x
systemd-cgls	326.31 KB	-rwxr-xr-x
systemd-cgtop	85.09 KB	-rwxr-xr-x
systemd-coredumpctl	154.52 KB	-rwxr-xr-x
systemd-delta	76.84 KB	-rwxr-xr-x
systemd-detect-virt	39.97 KB	-rwxr-xr-x
systemd-escape	48.2 KB	-rwxr-xr-x
systemd-firstboot	101.52 KB	-rwxr-xr-x
systemd-hwdb	85.31 KB	-rwxr-xr-x
systemd-inhibit	309.83 KB	-rwxr-xr-x
systemd-loginctl	489.6 KB	-rwxr-xr-x
systemd-machine-id-setup	52.23 KB	-rwxr-xr-x
systemd-notify	48.13 KB	-rwxr-xr-x
systemd-nspawn	545.88 KB	-rwxr-xr-x
systemd-path	52.16 KB	-rwxr-xr-x
systemd-run	387.05 KB	-rwxr-xr-x
systemd-stdio-bridge	305.77 KB	-rwxr-xr-x
systemd-sysv-convert	3.89 KB	-rwxr-xr-x
systemd-tmpfiles	146.13 KB	-rwxr-xr-x
systemd-tty-ask-password-agent	84.75 KB	-rwxr-xr-x
tabs	15.3 KB	-rwxr-xr-x
tac	32.48 KB	-rwxr-xr-x
tail	65.25 KB	-rwxr-xr-x
tailf	23.88 KB	-rwxr-xr-x
tapestat	52.56 KB	-rwxr-xr-x
tar	338.02 KB	-rwxr-xr-x
taskset	32.22 KB	-rwxr-xr-x
tbl	115.96 KB	-rwxr-xr-x
tcamgr	23.47 KB	-rwxr-xr-x
tcamttest	19.37 KB	-rwxr-xr-x
tcatest	52.78 KB	-rwxr-xr-x
tcbmgr	27.66 KB	-rwxr-xr-x
tcbmttest	47.96 KB	-rwxr-xr-x
tcbtest	64.47 KB	-rwxr-xr-x
tcfmgr	19.5 KB	-rwxr-xr-x
tcfmttest	31.79 KB	-rwxr-xr-x
tcftest	43.86 KB	-rwxr-xr-x
tchmgr	23.52 KB	-rwxr-xr-x
tchmttest	43.87 KB	-rwxr-xr-x
tchtest	52.29 KB	-rwxr-xr-x
tclsh	7 KB	-rwxr-xr-x
tclsh8.5	7 KB	-rwxr-xr-x
tcptraceroute	1.44 KB	-rwxr-xr-x
tctmgr	31.82 KB	-rwxr-xr-x
tctmttest	39.72 KB	-rwxr-xr-x
tcttest	51.9 KB	-rwxr-xr-x
tcucodec	31.75 KB	-rwxr-xr-x
tcumttest	19.52 KB	-rwxr-xr-x
tcutest	65.61 KB	-rwxr-xr-x
teamd	155.09 KB	-rwxr-xr-x
teamdctl	28.98 KB	-rwxr-xr-x
teamnl	19.09 KB	-rwxr-xr-x
tee	32.38 KB	-rwxr-xr-x
telnet	99.41 KB	-rwxr-xr-x
test	36.46 KB	-rwxr-xr-x
testgdbm	29.77 KB	-rwxr-xr-x
tic	64.26 KB	-rwxr-xr-x
timedatectl	330.2 KB	-rwxr-xr-x
timeout	53.31 KB	-rwxr-xr-x
tload	15.38 KB	-rwxr-xr-x
tmon	31.11 KB	-rwxr-xr-x
tmpwatch	27.87 KB	-rwxr-xr-x
toe	15.42 KB	-rwxr-xr-x
top	104.38 KB	-rwxr-xr-x
touch	61.02 KB	-rwxr-xr-x
tput	15.43 KB	-rwxr-xr-x
tr	44.61 KB	-rwxr-xr-x
tracepath	15.05 KB	-rwxr-xr-x
tracepath6	15.05 KB	-rwxr-xr-x
traceroute	61.86 KB	-rwxr-xr-x
traceroute6	61.86 KB	-rwxr-xr-x
troff	512.96 KB	-rwxr-xr-x
true	28.26 KB	-rwxr-xr-x
truncate	52.68 KB	-rwxr-xr-x
trust	179.08 KB	-rwxr-xr-x
tset	19.59 KB	-rwxr-xr-x
tsort	36.47 KB	-rwxr-xr-x
tty	28.29 KB	-rwxr-xr-x
turbostat	113.15 KB	-rwxr-xr-x
tzselect	7.17 KB	-rwxr-xr-x
uapi	3.02 MB	-rwxr-xr-x
ucs2any	19.47 KB	-rwxr-xr-x
udevadm	414.27 KB	-rwxr-xr-x
ul	19.47 KB	-rwxr-xr-x
umask	29 B	-rwxr-xr-x
umount	31.23 KB	-rwsr-xr-x
unalias	31 B	-rwxr-xr-x
uname	32.3 KB	-rwxr-xr-x
unexpand	32.45 KB	-rwxr-xr-x
unicode_start	2.5 KB	-rwxr-xr-x
unicode_stop	363 B	-rwxr-xr-x
uniq	44.71 KB	-rwxr-xr-x
unix-lpr.sh	4.07 KB	-rwxr-xr-x
unlink	28.3 KB	-rwxr-xr-x
unlz4	105.87 KB	-rwxr-xr-x
unlzma	73.52 KB	-rwxr-xr-x
unshare	15.45 KB	-rwxr-xr-x
unxz	73.52 KB	-rwxr-xr-x
unzip	185.16 KB	-rwxr-xr-x
unzipsfx	88.66 KB	-rwxr-xr-x
update-ca-trust	1.03 KB	-rwxr-xr-x
update-mime-database	52.82 KB	-rwxr-xr-x
uptime	11.22 KB	-rwxr-xr-x
urlgrabber	12.17 KB	-rwxr-xr-x
users	32.42 KB	-rwxr-xr-x
usleep	10.95 KB	-rwxr-xr-x
usx2yloader	15.41 KB	-rwxr-xr-x
utmpdump	15.45 KB	-rwxr-xr-x
uuclient	14.97 KB	-rwxr-xr-x
uuidgen	11.21 KB	-rwxr-xr-x
vdir	114.85 KB	-rwxr-xr-x
verifytree	10.79 KB	-rwxr-xr-x
vi	906.4 KB	-rwxr-xr-x
view	906.4 KB	-rwxr-xr-x
vim	2.23 MB	-rwxr-xr-x
vimdiff	2.23 MB	-rwxr-xr-x
vimtutor	2.04 KB	-rwxr-xr-x
vlock	15.73 KB	-rwxr-xr-x
vmstat	31.48 KB	-rwxr-xr-x
vxloader	15.38 KB	-rwxr-xr-x
w	19.45 KB	-rwxr-xr-x
wait	28 B	-rwxr-xr-x
wall	14.98 KB	-r-xr-sr-x
watch	24.14 KB	-rwxr-xr-x
watchgnupg	15.35 KB	-rwxr-xr-x
wc	40.67 KB	-rwxr-xr-x
wdctl	40.7 KB	-rwxr-xr-x
webpng	11.15 KB	-rwxr-xr-x
wget	408.97 KB	-rwxr-xr-x
whatis	45.49 KB	-rwxr-xr-x
whereis	20.2 KB	-rwxr-xr-x
which	23.77 KB	-rwxr-xr-x
whiptail	27.84 KB	-rwxr-xr-x
who	48.7 KB	-rwxr-xr-x
whoami	28.3 KB	-rwxr-xr-x
wish	7.04 KB	-rwxr-xr-x
wish8.5	7.04 KB	-rwxr-xr-x
wmf2eps	15.29 KB	-rwxr-xr-x
wmf2fig	15.27 KB	-rwxr-xr-x
wmf2gd	15.26 KB	-rwxr-xr-x
wmf2svg	15.3 KB	-rwxr-xr-x
wmf2x	15.25 KB	-rwxr-xr-x
word-list-compress	11.03 KB	-rwxr-xr-x
write	19.09 KB	-rwxr-sr-x
x86_64	15.27 KB	-rwxr-xr-x
x86_64-redhat-linux-c++	754.59 KB	-rwxr-xr-x
x86_64-redhat-linux-g++	754.59 KB	-rwxr-xr-x
x86_64-redhat-linux-gcc	750.59 KB	-rwxr-xr-x
x86_energy_perf_policy	10.23 KB	-rwxr-xr-x
xargs	60.91 KB	-rwxr-xr-x
xgamma	11.15 KB	-rwxr-xr-x
xgettext	265.35 KB	-rwxr-xr-x
xhost	15.38 KB	-rwxr-xr-x
xinput	52.81 KB	-rwxr-xr-x
xkill	15.27 KB	-rwxr-xr-x
xml2-config	1.68 KB	-rwxr-xr-x
xmlcatalog	15.3 KB	-rwxr-xr-x
xmllint	61.94 KB	-rwxr-xr-x
xmlwf	24 KB	-rwxr-xr-x
xmodmap	32.28 KB	-rwxr-xr-x
xorg-x11-fonts-update-dirs	1.29 KB	-rwxr--r--
xrandr	60.06 KB	-rwxr-xr-x
xrdb	27.78 KB	-rwxr-xr-x
xrefresh	11.16 KB	-rwxr-xr-x
xset	31.72 KB	-rwxr-xr-x
xsetmode	11.1 KB	-rwxr-xr-x
xsetpointer	11.13 KB	-rwxr-xr-x
xsetroot	19.38 KB	-rwxr-xr-x
xslt-config	2.36 KB	-rwxr-xr-x
xsltproc	23.5 KB	-rwxr-xr-x
xstdcmap	15.77 KB	-rwxr-xr-x
xsubpp	4.45 KB	-rwxr-xr-x
xxd	14.42 KB	-rwxr-xr-x
xz	73.52 KB	-rwxr-xr-x
xzcat	73.52 KB	-rwxr-xr-x
xzcmp	6.48 KB	-rwxr-xr-x
xzdec	11.21 KB	-rwxr-xr-x
xzdiff	6.48 KB	-rwxr-xr-x
xzegrep	5.76 KB	-rwxr-xr-x
xzfgrep	5.76 KB	-rwxr-xr-x
xzgrep	5.76 KB	-rwxr-xr-x
xzless	1.76 KB	-rwxr-xr-x
xzmore	2.11 KB	-rwxr-xr-x
yes	28.3 KB	-rwxr-xr-x
ypdomainname	15.41 KB	-rwxr-xr-x
yum	801 B	-rwxr-xr-x
yum-builddep	9.95 KB	-rwxr-xr-x
yum-config-manager	9.35 KB	-rwxr-xr-x
yum-debug-dump	8.34 KB	-rwxr-xr-x
yum-debug-restore	7.72 KB	-rwxr-xr-x
yum-groups-manager	10.77 KB	-rwxr-xr-x
yumdownloader	10.85 KB	-rwxr-xr-x
zcat	1.9 KB	-rwxr-xr-x
zcmp	1.72 KB	-rwxr-xr-x
zdiff	5.63 KB	-rwxr-xr-x
zegrep	123 B	-rwxr-xr-x
zfgrep	123 B	-rwxr-xr-x
zforce	2.09 KB	-rwxr-xr-x
zgrep	5.98 KB	-rwxr-xr-x
zip	210.78 KB	-rwxr-xr-x
zipcloak	98.1 KB	-rwxr-xr-x
zipcmp	11.71 KB	-rwxr-xr-x
zipdetails	47.32 KB	-rwxr-xr-x
zipgrep	2.88 KB	-rwxr-xr-x
zipinfo	185.16 KB	-rwxr-xr-x
zipmerge	11.76 KB	-rwxr-xr-x
zipnote	93.73 KB	-rwxr-xr-x
zipsplit	97.75 KB	-rwxr-xr-x
ziptorrent	11.6 KB	-rwxr-xr-x
zless	1.99 KB	-rwxr-xr-x
zlib_decompress	164.46 KB	-rwxr-xr-x
zmore	2.79 KB	-rwxr-xr-x
znew	5.22 KB	-rwxr-xr-x
zone2json	21.39 MB	-rwxr-xr-x
zone2sql	21.88 MB	-rwxr-xr-x
zsoelim	32.59 KB	-rwxr-xr-x

Code Editor : firewall-offline-cmd

#!/usr/bin/python2 -Es
# -*- coding: utf-8 -*-
#
# Copyright (C) 2009-2016 Red Hat, Inc.
#
# Authors:
# Thomas Woerner <twoerner@redhat.com>
# Jiri Popelka <jpopelka@redhat.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

from gi.repository import GObject
import sys
sys.modules['gobject'] = GObject

import argparse
import os

from firewall.client import FirewallClientIPSetSettings, \
    FirewallClientZoneSettings, FirewallClientServiceSettings, \
    FirewallClientIcmpTypeSettings, FirewallClientHelperSettings
from firewall.errors import FirewallError
from firewall import config
from firewall.core.fw_test import Firewall_test
from firewall.functions import joinArgs, splitArgs
from firewall.core.io.functions import check_config
from firewall.core.io.zone import zone_reader
from firewall.core.io.service import service_reader
from firewall.core.io.ipset import ipset_reader
from firewall.core.io.icmptype import icmptype_reader
from firewall.core.io.helper import helper_reader
from firewall.command import FirewallCommand

# check for root user
def assert_root():
    if os.getuid() != 0:
        sys.stderr.write("You need to be root to run %s.\n" % sys.argv[0])
        sys.exit(-1)

SYSTEM_CONFIG_FIREWALL = config.SYSCONFIGDIR + '/system-config-firewall'

def __usage():
    sys.stdout.write("""
Usage: firewall-offline-cmd [OPTIONS...]

If no options are given, configuration from '%s' will be migrated.

General Options
  -h, --help           Prints a short help text and exists
  -V, --version        Print the version string of firewalld
  -q, --quiet          Do not print status messages
      --system-config  Path to firewalld system configuration
      --default-config Path to firewalld default configuration
      --check-config   Check system and default configuration

Lokkit Compatibility Options
  --migrate-system-config-firewall=<file>
                        Import configuration data from the given configuration
                        file.
  --enabled             Enable firewall (default)
  --disabled            Disable firewall
  --addmodule=<module>  Ignored option, was used to enable an iptables module
  --removemodule=<module>
                        Ignored option, was used to disable an iptables module
  -s <service>, --service=<service>
                        Enable a service in the default zone (example: ssh)
  --remove-service=<service>
                        Disable a service in the default zone (example: ssh)
  -p <port>[-<port>]:<protocol>, --port=<port>[-<port>]:<protocol>
                        Enable a port in the default zone (example: ssh:tcp)
  -t <interface>, --trust=<interface>
                        Bind an interface to the trusted zone
  -m <interface>, --masq=<interface>
                        Enables masquerading in the default zone, interface
                        argument is ignored. This is IPv4 only.
  --custom-rules=[<type>:][<table>:]<filename>
                        Ignored option. Was used to add custom rules to the
                        firewall (Example:
                        ipv4:filter:%s/ipv4_filter_addon)
  --forward-port=if=<interface>:port=<port>:proto=<protocol>[:toport=<destination port>][:toaddr=<destination address>]
                        Forward the port with protocol for the interface to
                        either another local destination port (no destination
                        address given) or to an other destination address with
                        an optional destination port. This will be added to
                        the default zone. This is IPv4 only.
  --block-icmp=<icmp type>
                        Block this ICMP type in the default zone. The default
                        is to accept all ICMP types.

Log Denied Options
  --get-log-denied     Print the log denied value
  --set-log-denied=<value>
                       Set log denied value

Automatic Helpers Options
  --get-automatic-helpers
                       Print the automatic helpers value
  --set-automatic-helpers=<value>
                       Set automatic helpers value

Zone Options
  --get-default-zone   Print default zone for connections and interfaces
  --set-default-zone=<zone>
                       Set default zone
  --get-zones          Print predefined zones
  --get-services       Print predefined services
  --get-icmptypes      Print predefined icmptypes
  --get-zone-of-interface=<interface>
                       Print name of the zone the interface is bound to
  --get-zone-of-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
                       Print name of the zone the source is bound to
  --list-all-zones     List everything added for or enabled in all zones
  --new-zone=<zone>    Add a new empty zone
  --new-zone-from-file=<filename> [--name=<zone>]
                       Add a new zone from file with optional name override [P only]
  --delete-zone=<zone> Delete an existing zone
  --load-zone-defaults=<zone>
                       Load zone default settings [Z]
  --zone=<zone>        Use this zone to set or query options, else default zone
                       Usable for options marked with [Z]
  --set-description=<description>
                       Set new description to zone
  --get-description    Print description for zone
  --get-target         Get the zone target
  --set-target=<target>
                       Set the zone target
  --info-zone=<zone>   Print information about a zone
  --path-zone=<zone>   Print file path of a zone

IPSet Options
  --new-ipset=<ipset> --type=<ipset type> [--option=<key>[=<value>]]..
                       Add a new empty ipset
  --new-ipset-from-file=<filename> [--name=<ipset>]
                       Add a new ipset from file with optional name override [P only]
  --delete-ipset=<ipset>
                       Delete an existing ipset
  --load-ipset-defaults=<ipset>
                       Load ipset default settings
  --info-ipset=<ipset> Print information about an ipset
  --path-ipset=<ipset> Print file path of an ipset
  --get-ipsets         Print predefined ipsets
  --ipset=<ipset> --set-description=<description>
                       Set new description to ipset
  --ipset=<ipset> --get-description
                       Print description for ipset
  --ipset=<ipset> --set-short=<description>
                       Set new short description to ipset
  --ipset=<ipset> --get-short
                       Print short description for ipset
  --ipset=<ipset> --add-entry=<entry>
                       Add a new entry to an ipset
  --ipset=<ipset> --remove-entry=<entry>
                       Remove an entry from an ipset
  --ipset=<ipset> --query-entry=<entry>
                       Return whether ipset has an entry
  --ipset=<ipset> --get-entries
                       List entries of an ipset
  --ipset=<ipset> --add-entries-from-file=<entry>
                       Add a new entries to an ipset [P]
  --ipset=<ipset> --remove-entries-from-file=<entry>
                       Remove entries from an ipset [P]

IcmpType Options
  --new-icmptype=<icmptype>
                       Add a new empty icmptype
  --new-icmptype-from-file=<filename> [--name=<icmptype>]
                       Add a new icmptype from file with optional name override [P only]
  --delete-icmptype=<icmptype>
                       Delete an existing icmptype
  --load-icmptype-defaults=<icmptype>
                       Load icmptype default settings
  --info-icmptype=<icmptype>
                       Print information about an icmptype
  --path-icmptype=<icmptype>
                       Print file path of an icmptype
  --icmptype=<icmptype> --set-description=<description>
                       Set new description to icmptype
  --icmptype=<icmptype> --get-description
                       Print description for icmptype
  --icmptype=<icmptype> --set-short=<description>
                       Set new short description to icmptype
  --icmptype=<icmptype> --get-short
                       Print short description for icmptype
  --icmptype=<icmptype> --add-destination=<ipv>
                       Enable destination for ipv in icmptype
  --icmptype=<icmptype> --remove-destination=<ipv>
                       Disable destination for ipv in icmptype
  --icmptype=<icmptype> --query-destination=<ipv>
                       Return whether destination ipv is enabled in icmptype
  --icmptype=<icmptype> --get-destinations
                       List destinations in icmptype

Service Options
  --new-service=<service>
                       Add a new empty service
  --new-service-from-file=<filename> [--name=<service>]
                       Add a new service from file with optional name override [P only]
  --delete-service=<service>
                       Delete an existing service
  --load-service-defaults=<service>
                       Load icmptype default settings
  --info-service=<service>
                       Print information about a service
  --path-service=<service>
                       Print file path of a service
  --service=<service> --set-description=<description>
                       Set new description to service
  --service=<service> --get-description
                       Print description for service
  --service=<service> --set-short=<description>
                       Set new short description to service
  --service=<service> --get-short
                       Print short description for service
  --service=<service> --add-port=<portid>[-<portid>]/<protocol>
                       Add a new port to service
  --service=<service> --remove-port=<portid>[-<portid>]/<protocol>
                       Remove a port from service
  --service=<service> --query-port=<portid>[-<portid>]/<protocol>
                       Return whether the port has been added for service
  --service=<service> --get-ports
                       List ports of service
  --service=<service> --add-protocol=<protocol>
                       Add a new protocol to service
  --service=<service> --remove-protocol=<protocol>
                       Remove a protocol from service
  --service=<service> --query-protocol=<protocol>
                       Return whether the protocol has been added for service
  --service=<service> --get-protocols
                       List protocols of service
  --service=<service> --add-source-port=<portid>[-<portid>]/<protocol>
                       Add a new source port to service
  --service=<service> --remove-source-port=<portid>[-<portid>]/<protocol>
                       Remove a source port from service
  --service=<service> --query-source-port=<portid>[-<portid>]/<protocol>
                       Return whether the source port has been added for service [P only]
  --service=<service> --get-source-ports
                       List source ports of service
  --service=<service> --add-module=<module>
                       Add a new module to service
  --service=<service> --remove-module=<module>
                       Remove a module from service
  --service=<service> --query-module=<module>
                       Return whether the module has been added for service
  --service=<service> --get-modules
                       List modules of service
  --service=<service> --set-destination=<ipv>:<address>[/<mask>]
                       Set destination for ipv to address in service
  --service=<service> --remove-destination=<ipv>
                       Disable destination for ipv i service
  --service=<service> --query-destination=<ipv>:<address>[/<mask>]
                       Return whether destination ipv is set for service
  --service=<service> --get-destinations
                       List destinations in service

Options to Adapt and Query Zones
  --list-all           List everything added for or enabled in a zone [Z]
  --list-services      List services added for a zone [Z]
  --add-service=<service>
                       Add a service for a zone [Z]
  --remove-service-from-zone=<service>
                       Remove a service from a zone [Z]
  --query-service=<service>
                       Return whether service has been added for a zone [Z]
  --list-ports         List ports added for a zone [Z]
  --add-port=<portid>[-<portid>]/<protocol>
                       Add the port for a zone [Z]
  --remove-port=<portid>[-<portid>]/<protocol>
                       Remove the port from a zone [Z]
  --query-port=<portid>[-<portid>]/<protocol>
                       Return whether the port has been added for zone [Z]
  --list-protocols     List protocols added for a zone [Z]
  --add-protocol=<protocol>
                       Add the protocol for a zone [Z]
  --remove-protocol=<protocol>
                       Remove the protocol from a zone [Z]
  --query-protocol=<protocol>
                       Return whether the protocol has been added for zone [Z]
  --list-source-ports  List source ports added for a zone [Z]
  --add-source-port=<portid>[-<portid>]/<protocol>
                       Add the source port for a zone [Z]
  --remove-source-port=<portid>[-<portid>]/<protocol>
                       Remove the source port from a zone [Z]
  --query-source-port=<portid>[-<portid>]/<protocol>
                       Return whether the source port has been added for zone [Z]
  --list-icmp-blocks   List Internet ICMP type blocks added for a zone [Z]
  --add-icmp-block=<icmptype>
                       Add an ICMP block for a zone [Z]
  --remove-icmp-block=<icmptype>
                       Remove the ICMP block from a zone [Z]
  --query-icmp-block=<icmptype>
                       Return whether an ICMP block has been added for a zone
                       [Z]
  --add-icmp-block-inversion
                       Enable inversion of icmp blocks for a zone [Z]
  --remove-icmp-block-inversion
                       Disable inversion of icmp blocks for a zone [Z]
  --query-icmp-block-inversion
                       Return whether inversion of icmp blocks has been enabled
                       for a zone [Z]
  --list-forward-ports List IPv4 forward ports added for a zone [Z]
  --add-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
                       Add the IPv4 forward port for a zone [Z]
  --remove-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
                       Remove the IPv4 forward port from a zone [Z]

--query-forward-port=port=<portid>[-<portid>]:proto=<protocol>[:toport=<portid>[-<portid>]][:toaddr=<address>[/<mask>]]
                       Return whether the IPv4 forward port has been added for
                       a zone [Z]
  --add-masquerade     Enable IPv4 masquerade for a zone [Z]
  --remove-masquerade  Disable IPv4 masquerade for a zone [Z]
  --query-masquerade   Return whether IPv4 masquerading has been enabled for a
                       zone [Z]
  --list-rich-rules    List rich language rules added for a zone [Z]
  --add-rich-rule=<rule>
                       Add rich language rule 'rule' for a zone [Z]
  --remove-rich-rule=<rule>
                       Remove rich language rule 'rule' from a zone [Z]
  --query-rich-rule=<rule>
                       Return whether a rich language rule 'rule' has been
                       added for a zone [Z]

Options to Handle Bindings of Interfaces
  --list-interfaces    List interfaces that are bound to a zone [Z]
  --add-interface=<interface>
                       Bind the <interface> to a zone [Z]
  --change-interface=<interface>
                       Change zone the <interface> is bound to [Z]
  --query-interface=<interface>
                       Query whether <interface> is bound to a zone [Z]
  --remove-interface=<interface>
                       Remove binding of <interface> from a zone [Z]

Options to Handle Bindings of Sources
  --list-sources       List sources that are bound to a zone [Z]
  --add-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
                       Bind the source to a zone [Z]
  --change-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
                       Change zone the source is bound to [Z]
  --query-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
                       Query whether the source is bound to a zone [Z]
  --remove-source=<source>[/<mask>]|<MAC>|ipset:<ipset>
                       Remove binding of the source from a zone [Z]

Helper Options
  --new-helper=<helper> --module=<module> [--family=<family>]
                       Add a new helper
  --new-helper-from-file=<filename> [--name=<helper>]
                       Add a new helper from file with optional name
  --delete-helper=<helper>
                       Delete an existing helper
  --load-helper-defaults=<helper>
                       Load helper default settings
  --info-helper=<helper> Print information about an helper
  --path-helper=<helper> Print file path of an helper
  --get-helpers         Print predefined helpers
  --helper=<helper> --set-description=<description>
                       Set new description to helper
  --helper=<helper> --get-description
                       Print description for helper
  --helper=<helper> --set-short=<description>
                       Set new short description to helper
  --helper=<helper> --get-short
                       Print short description for helper
  --helper=<helper> --add-port=<portid>[-<portid>]/<protocol>
                       Add a new port to helper
  --helper=<helper> --remove-port=<portid>[-<portid>]/<protocol>
                       Remove a port from helper
  --helper=<helper> --query-port=<portid>[-<portid>]/<protocol>
                       Return whether the port has been added for helper
  --helper=<helper> --get-ports
                       List ports of helper
  --helper=<helper> --set-module=<module>
                       Set module to helper
  --helper=<helper> --get-module
                       Get module from helper
  --helper=<helper> --set-family={ipv4|ipv6|}
                       Set family for helper
  --helper=<helper> --get-family
                       Get module from helper

Direct Options
  --direct             First option for all direct options
  --get-all-chains
                       Get all chains
  --get-chains {ipv4|ipv6|eb} <table>
                       Get all chains added to the table
  --add-chain {ipv4|ipv6|eb} <table> <chain>
                       Add a new chain to the table
  --remove-chain {ipv4|ipv6|eb} <table> <chain>
                       Remove the chain from the table
  --query-chain {ipv4|ipv6|eb} <table> <chain>
                       Return whether the chain has been added to the table
  --get-all-rules
                       Get all rules
  --get-rules {ipv4|ipv6|eb} <table> <chain>
                       Get all rules added to chain in table
  --add-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
                       Add rule to chain in table
  --remove-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
                       Remove rule with priority from chain in table
  --remove-rules {ipv4|ipv6|eb} <table> <chain>
                       Remove rules from chain in table
  --query-rule {ipv4|ipv6|eb} <table> <chain> <priority> <arg>...
                       Return whether a rule with priority has been added to
                       chain in table
  --get-all-passthroughs
                       Get all passthrough rules
  --get-passthroughs {ipv4|ipv6|eb} <arg>...
                       Get passthrough rules
  --add-passthrough {ipv4|ipv6|eb} <arg>...
                       Add a new passthrough rule
  --remove-passthrough {ipv4|ipv6|eb} <arg>...
                       Remove a passthrough rule
  --query-passthrough {ipv4|ipv6|eb} <arg>...
                       Return whether the passthrough rule has been added

Lockdown Options
  --lockdown-on        Enable lockdown.
  --lockdown-off       Disable lockdown.
  --query-lockdown     Query whether lockdown is enabled

Lockdown Whitelist Options
  --list-lockdown-whitelist-commands
                       List all command lines that are on the whitelist
  --add-lockdown-whitelist-command=<command>
                       Add the command to the whitelist
  --remove-lockdown-whitelist-command=<command>
                       Remove the command from the whitelist
  --query-lockdown-whitelist-command=<command>
                       Query whether the command is on the whitelist
  --list-lockdown-whitelist-contexts
                       List all contexts that are on the whitelist
  --add-lockdown-whitelist-context=<context>
                       Add the context context to the whitelist
  --remove-lockdown-whitelist-context=<context>
                       Remove the context from the whitelist
  --query-lockdown-whitelist-context=<context>
                       Query whether the context is on the whitelist
  --list-lockdown-whitelist-uids
                       List all user ids that are on the whitelist
  --add-lockdown-whitelist-uid=<uid>
                       Add the user id uid to the whitelist
  --remove-lockdown-whitelist-uid=<uid>
                       Remove the user id uid from the whitelist
  --query-lockdown-whitelist-uid=<uid>
                       Query whether the user id uid is on the whitelist
  --list-lockdown-whitelist-users
                       List all user names that are on the whitelist
  --add-lockdown-whitelist-user=<user>
                       Add the user name user to the whitelist
  --remove-lockdown-whitelist-user=<user>
                       Remove the user name user from the whitelist
  --query-lockdown-whitelist-user=<user>
                       Query whether the user name user is on the whitelist

Polkit Options
  --policy-server      Change Polkit actions to 'server'  (more restricted)
  --policy-desktop     Change Polkit actions to 'desktop' (less restricted)

""" % (SYSTEM_CONFIG_FIREWALL, config.SYSCONFIGDIR))

def parse_port_lokkit(value):
    try:
        (port, proto) = value.split(":")
    except Exception:
        cmd.fail("bad port (most likely missing protocol), correct syntax is portid[-portid]:protocol")
    return (port, proto)

def pk_symlink(product='server'):
    _PK_DIR = '/usr/share/polkit-1/actions/'
    _PK_NAME = 'org.fedoraproject.FirewallD1.'
    os.chdir(_PK_DIR)
    if os.path.isfile(_PK_NAME+product+'.policy.choice'):
        if os.path.isfile(_PK_NAME+'policy'):
            os.remove(_PK_NAME+'policy')
        os.symlink(_PK_NAME+product+'.policy.choice', _PK_NAME+'policy')
        cmd.print_and_exit('symlink '+_PK_DIR+_PK_NAME+product+'.policy.choice -> '+_PK_NAME+'policy')
    else:
        cmd.fail('no such file '+_PK_DIR+_PK_NAME+product+'.policy.choice')

# system-config-firewall
def read_sysconfig_args(config_file=SYSTEM_CONFIG_FIREWALL):
    filename = None
    if os.path.exists(config_file) and os.path.isfile(config_file):
        filename = config_file
    try:
        f = open(filename, 'r')
    except Exception:
        return None
    argv = [ ]
    for line in f:
        if not line:
            break
        line = line.strip()
        if len(line) < 1 or line[0] == '#':
            continue
        argv.append(line)
    f.close()
    return argv

parser = argparse.ArgumentParser(usage="see firewall-offline-cmd man page",
                                 add_help=False)

parser_group_output = parser.add_mutually_exclusive_group()
parser_group_output.add_argument("-v", "--verbose", action="store_true")
parser_group_output.add_argument("-q", "--quiet", action="store_true")

parser_group_lokkit = parser.add_argument_group()
parser_group_lokkit.add_argument("--enabled", action="store_true")
parser_group_lokkit.add_argument("--disabled", action="store_true")
parser_group_lokkit.add_argument("--addmodule", metavar="<module>", action='append')
parser_group_lokkit.add_argument("--removemodule", metavar="<module>", action='append')
parser_group_lokkit.add_argument("--service", "-s", metavar="<service>", action='append')
parser_group_lokkit.add_argument("--remove-service", metavar="<service>", action='append')
parser_group_lokkit.add_argument("--port", "-p", metavar="<port>", action='append')
parser_group_lokkit.add_argument("--trust", "-t", metavar="<iface>", action='append')
parser_group_lokkit.add_argument("--masq", "-m", metavar="<iface>", action='append')
parser_group_lokkit.add_argument("--custom-rules", metavar="<filename>", action='append')
parser_group_lokkit.add_argument("--forward-port", metavar="<port>", action='append')
parser_group_lokkit.add_argument("--block-icmp", metavar="<icmptype>", action='append')

parser.add_argument("--system-config", metavar="path")
parser.add_argument("--default-config", metavar="path")
parser.add_argument("--check-config", action="store_true")

parser_group_standalone = parser.add_mutually_exclusive_group()
parser_group_standalone.add_argument("-h", "--help",
                                     action="store_true")
parser_group_standalone.add_argument("-V", "--version", action="store_true")
parser_group_standalone.add_argument("--get-log-denied", action="store_true")
parser_group_standalone.add_argument("--set-log-denied", metavar="<value>")
parser_group_standalone.add_argument("--get-automatic-helpers", action="store_true")
parser_group_standalone.add_argument("--set-automatic-helpers", metavar="<value>")
parser_group_standalone.add_argument("--policy-server", action="store_true")
parser_group_standalone.add_argument("--policy-desktop", action="store_true")
parser_group_standalone.add_argument("--lockdown-on", action="store_true")
parser_group_standalone.add_argument("--lockdown-off", action="store_true")
parser_group_standalone.add_argument("--query-lockdown", action="store_true")

parser_group_standalone.add_argument("--get-default-zone", action="store_true")
parser_group_standalone.add_argument("--set-default-zone", metavar="<zone>")
parser_group_standalone.add_argument("--get-zones", action="store_true")
parser_group_standalone.add_argument("--get-services", action="store_true")
parser_group_standalone.add_argument("--get-icmptypes", action="store_true")
parser_group_standalone.add_argument("--get-zone-of-interface", metavar="<iface>", action='append')
parser_group_standalone.add_argument("--get-zone-of-source", metavar="<source>", action='append')
parser_group_standalone.add_argument("--list-all-zones", action="store_true")

parser_group_standalone.add_argument("--info-zone", metavar="<zone>")
parser_group_standalone.add_argument("--info-service", metavar="<service>")
parser_group_standalone.add_argument("--info-icmptype", metavar="<icmptype>")
parser_group_standalone.add_argument("--info-ipset", metavar="<ipset>")
parser_group_standalone.add_argument("--info-helper", metavar="<helper>")

parser_group_config = parser.add_mutually_exclusive_group()
parser_group_config.add_argument("--new-icmptype", metavar="<icmptype>")
parser_group_config.add_argument("--new-icmptype-from-file", metavar="<filename>")
parser_group_config.add_argument("--delete-icmptype", metavar="<icmptype>")
parser_group_config.add_argument("--load-icmptype-defaults",
                                 metavar="<icmptype>")
parser_group_config.add_argument("--new-service", metavar="<service>")
parser_group_config.add_argument("--new-service-from-file", metavar="<filename>")
parser_group_config.add_argument("--delete-service", metavar="<service>")
parser_group_config.add_argument("--load-service-defaults", metavar="<service>")
parser_group_config.add_argument("--new-zone", metavar="<zone>")
parser_group_config.add_argument("--new-zone-from-file", metavar="<filename>")
parser_group_config.add_argument("--delete-zone", metavar="<zone>")
parser_group_config.add_argument("--load-zone-defaults", metavar="<zone>")
parser_group_config.add_argument("--new-ipset", metavar="<ipset>")
parser_group_config.add_argument("--new-ipset-from-file", metavar="<filename>")
parser_group_config.add_argument("--delete-ipset", metavar="<ipset>")
parser_group_config.add_argument("--load-ipset-defaults", metavar="<ipset>")
parser_group_config.add_argument("--new-helper", metavar="<helper>")
parser_group_config.add_argument("--new-helper-from-file", metavar="<filename>")
parser_group_config.add_argument("--delete-helper", metavar="<helper>")
parser_group_config.add_argument("--load-helper-defaults", metavar="<helper>")

parser_group_config.add_argument("--path-zone", metavar="<zone>")
parser_group_config.add_argument("--path-service", metavar="<service>")
parser_group_config.add_argument("--path-icmptype", metavar="<icmptype>")
parser_group_config.add_argument("--path-ipset", metavar="<ipset>")
parser_group_config.add_argument("--path-helper", metavar="<helper>")

parser.add_argument("--name", default="", metavar="<name>")

parser_group_lockdown_whitelist = parser.add_mutually_exclusive_group()
parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-commands", action="store_true")
parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-command", metavar="<command>", action='append')
parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-command", metavar="<command>", action='append')
parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-command", metavar="<command>", action='append')

parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-contexts", action="store_true")
parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-context", metavar="<context>", action='append')
parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-context", metavar="<context>", action='append')
parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-context", metavar="<context>", action='append')

parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-uids", action="store_true")
parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-uid", metavar="<uid>", type=int, action='append')
parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-uid", metavar="<uid>", type=int, action='append')
parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-uid", metavar="<uid>", type=int, action='append')

parser_group_lockdown_whitelist.add_argument("--list-lockdown-whitelist-users", action="store_true")
parser_group_lockdown_whitelist.add_argument("--add-lockdown-whitelist-user", metavar="<user>", action='append')
parser_group_lockdown_whitelist.add_argument("--remove-lockdown-whitelist-user", metavar="<user>", action='append')
parser_group_lockdown_whitelist.add_argument("--query-lockdown-whitelist-user", metavar="<user>", action='append')

parser.add_argument("--zone", default="", metavar="<zone>")

parser_group_zone = parser.add_mutually_exclusive_group()
parser_group_zone.add_argument("--add-interface", metavar="<iface>", action='append')
parser_group_zone.add_argument("--remove-interface", metavar="<iface>", action='append')
parser_group_zone.add_argument("--query-interface", metavar="<iface>", action='append')
parser_group_zone.add_argument("--change-interface", "--change-zone", metavar="<iface>", action='append')
parser_group_zone.add_argument("--list-interfaces", action="store_true")
parser_group_zone.add_argument("--add-source", metavar="<source>", action='append')
parser_group_zone.add_argument("--remove-source", metavar="<source>", action='append')
parser_group_zone.add_argument("--query-source", metavar="<source>", action='append')
parser_group_zone.add_argument("--change-source", metavar="<source>", action='append')
parser_group_zone.add_argument("--list-sources", action="store_true")
parser_group_zone.add_argument("--add-rich-rule", metavar="<rule>", action='append')
parser_group_zone.add_argument("--remove-rich-rule", metavar="<rule>", action='append')
parser_group_zone.add_argument("--query-rich-rule", metavar="<rule>", action='append')
parser_group_zone.add_argument("--add-service", metavar="<service>", action='append')
parser_group_zone.add_argument("--remove-service-from-zone", metavar="<zone>", action='append')
parser_group_zone.add_argument("--query-service", metavar="<zone>", action='append')
parser_group_zone.add_argument("--add-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--remove-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--query-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--add-protocol", metavar="<protocol>", action='append')
parser_group_zone.add_argument("--remove-protocol", metavar="<protocol>", action='append')
parser_group_zone.add_argument("--query-protocol", metavar="<protocol>", action='append')
parser_group_zone.add_argument("--add-source-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--remove-source-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--query-source-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--add-masquerade", action="store_true")
parser_group_zone.add_argument("--remove-masquerade", action="store_true")
parser_group_zone.add_argument("--query-masquerade", action="store_true")
parser_group_zone.add_argument("--add-icmp-block", metavar="<icmptype>", action='append')
parser_group_zone.add_argument("--remove-icmp-block", metavar="<icmptype>", action='append')
parser_group_zone.add_argument("--query-icmp-block", metavar="<icmptype>", action='append')
parser_group_zone.add_argument("--add-icmp-block-inversion", action="store_true")
parser_group_zone.add_argument("--remove-icmp-block-inversion", action="store_true")
parser_group_zone.add_argument("--query-icmp-block-inversion", action="store_true")
parser_group_zone.add_argument("--add-forward-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--remove-forward-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--query-forward-port", metavar="<port>", action='append')
parser_group_zone.add_argument("--list-rich-rules", action="store_true")
parser_group_zone.add_argument("--list-services", action="store_true")
parser_group_zone.add_argument("--list-ports", action="store_true")
parser_group_zone.add_argument("--list-protocols", action="store_true")
parser_group_zone.add_argument("--list-icmp-blocks", action="store_true")
parser_group_zone.add_argument("--list-forward-ports", action="store_true")
parser_group_zone.add_argument("--list-source-ports", action="store_true")
parser_group_zone.add_argument("--list-all", action="store_true")
parser_group_zone.add_argument("--get-target", action="store_true")
parser_group_zone.add_argument("--set-target", metavar="<target>")

parser.add_argument("--option", metavar="<key>[=<value>]", action='append')
parser.add_argument("--type", metavar="<ipsettype>")
parser.add_argument("--ipset", metavar="<ipset>")

parser_ipset = parser.add_mutually_exclusive_group()
#parser_ipset.add_argument("--add-option", metavar="<key>[=<value>]")
#parser_ipset.add_argument("--remove-option", metavar="<key>[=<value>]")
#parser_ipset.add_argument("--query-option", metavar="<key>[=<value>]")
#parser_ipset.add_argument("--get-options", action="store_true")

parser_ipset.add_argument("--get-ipsets", action="store_true")
parser_ipset.add_argument("--add-entry", metavar="<entry>", action='append')
parser_ipset.add_argument("--remove-entry", metavar="<entry>", action='append')
parser_ipset.add_argument("--query-entry", metavar="<entry>", action='append')
parser_ipset.add_argument("--get-entries", action="store_true")
parser_ipset.add_argument("--add-entries-from-file", metavar="<filename>", action='append')
parser_ipset.add_argument("--remove-entries-from-file", metavar="<filename>", action='append')

parser.add_argument("--icmptype", metavar="<icmptype>")

parser_icmptype = parser.add_mutually_exclusive_group()
parser_icmptype.add_argument("--add-destination", metavar="<ipv>", action='append')
parser_icmptype.add_argument("--remove-destination", metavar="<ipv>", action='append')
parser_icmptype.add_argument("--query-destination", metavar="<ipv>", action='append')
parser_icmptype.add_argument("--get-destinations", action="store_true")

parser_service = parser.add_mutually_exclusive_group()
parser_service.add_argument("--get-ports", action="store_true")
parser_service.add_argument("--get-source-ports", action="store_true")
parser_service.add_argument("--get-protocols", action="store_true")

parser_service.add_argument("--add-module", metavar="<module>", action='append')
parser_service.add_argument("--remove-module", metavar="<module>", action='append')
parser_service.add_argument("--query-module", metavar="<module>", action='append')
parser_service.add_argument("--get-modules", action="store_true")

parser_service.add_argument("--set-destination", metavar="<destination>", action='append')
parser_service.add_argument("--get-destination", action="store_true")

parser_service.add_argument("--set-description", metavar="<description>")
parser_service.add_argument("--get-description", action="store_true")

parser_service.add_argument("--set-short", metavar="<description>")
parser_service.add_argument("--get-short", action="store_true")

parser.add_argument("--helper", metavar="<helper>")
parser.add_argument("--family", metavar="<family>")
parser.add_argument("--module", metavar="<module>")

parser_helper = parser.add_mutually_exclusive_group()
#parser_helper.add_argument("--get-ports", action="store_true")
parser_helper.add_argument("--get-helpers", action="store_true")
parser_helper.add_argument("--set-module", metavar="<module>")
parser_helper.add_argument("--get-module", action="store_true")
#parser_helper.add_argument("--query-module", metavar="<module>")
parser_helper.add_argument("--set-family", metavar="<family>|''", nargs="*")
parser_helper.add_argument("--get-family", action="store_true")

parser.add_argument("--direct", action="store_true")

# not possible to have sequences of options here
parser_direct = parser.add_mutually_exclusive_group()
parser_direct.add_argument("--add-passthrough", nargs=argparse.REMAINDER,
                           metavar=("{ ipv4 | ipv6 | eb }", "<args>"))
parser_direct.add_argument("--remove-passthrough", nargs=argparse.REMAINDER,
                           metavar=("{ ipv4 | ipv6 | eb }", "<args>"))
parser_direct.add_argument("--query-passthrough", nargs=argparse.REMAINDER,
                           metavar=("{ ipv4 | ipv6 | eb }", "<args>"))
parser_direct.add_argument("--get-passthroughs", nargs=1,
                           metavar=("{ ipv4 | ipv6 | eb }"))
parser_direct.add_argument("--get-all-passthroughs", action="store_true")
parser_direct.add_argument("--add-chain", nargs=3,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>"))
parser_direct.add_argument("--remove-chain", nargs=3,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>"))
parser_direct.add_argument("--query-chain", nargs=3,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>"))
parser_direct.add_argument("--get-all-chains", action="store_true")
parser_direct.add_argument("--get-chains", nargs=2,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table>"))
parser_direct.add_argument("--add-rule", nargs=argparse.REMAINDER,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain> <priority> <args>"))
parser_direct.add_argument("--remove-rule", nargs=argparse.REMAINDER,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain> <priority> <args>"))
parser_direct.add_argument("--remove-rules", nargs=3,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain>"))
parser_direct.add_argument("--query-rule", nargs=argparse.REMAINDER,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table> <chain> <priority> <args>"))
parser_direct.add_argument("--get-rules", nargs=3,
                           metavar=("{ ipv4 | ipv6 | eb }", "<table>", "<chain>"))
parser_direct.add_argument("--get-all-rules", action="store_true")

##############################################################################

cmd = FirewallCommand()

def myexcepthook(exctype, value, traceback):
    cmd.exception_handler(str(value))
sys.excepthook = myexcepthook

if len(sys.argv) > 1 and \
   any('--migrate-system-config-firewall' in arg for arg in sys.argv):
    args = sys.argv[1:]
    migration_parser = argparse.ArgumentParser(
        usage="see firewall-offline-cmd man page", add_help=False)
    migration_parser.add_argument("-h", "--help", action="store_true")
    migration_parser.add_argument("-v", "--verbose", action="store_true")
    migration_parser.add_argument("-q", "--quiet", action="store_true")
    migration_parser.add_argument("--migrate-system-config-firewall",
                                  metavar="<file>", action='store')
    a,unknown = migration_parser.parse_known_args(args)
    cmd.set_quiet(a.quiet)
    cmd.set_verbose(a.verbose)
    if a.help:
        __usage()
        sys.exit(0)
    else:
        assert_root()
    if a.quiet:
        # it makes no sense to use --quiet with these options
        a.quiet = False
        cmd.set_quiet(a.quiet)
        cmd.fail("-q/--quiet can't be used with this option(s)")
    if a.migrate_system_config_firewall:
        args = read_sysconfig_args(a.migrate_system_config_firewall)
        if not args:
            cmd.fail("Opening of '%s' failed, exiting." % \
                     a.migrate_system_config_firewall)
        args += unknown
elif len(sys.argv) > 1:
    i = -1
    args = sys.argv[1:]
    if '--add-passthrough' in args:
        i = args.index('--add-passthrough') + 1
    elif '--remove-passthrough' in args:
        i = args.index('--remove-passthrough') + 1
    elif '--query-passthrough' in args:
        i = args.index('--query-passthrough') + 1
    elif '--add-rule' in args:
        i = args.index('--add-rule') + 4
    elif '--remove-rule' in args:
        i = args.index('--remove-rule') + 4
    elif '--query-rule' in args:
        i = args.index('--query-rule') + 4
    # join <args> into one argument to prevent parser from parsing each iptables
    # option, because they can conflict with firewall-cmd options
    # # e.g. --delete (iptables) and --delete-* (firewall-cmd)
    if (i > -1) and (i < len(args) - 1):
        aux_args = args[:]
        args = aux_args[:i+1] # all but not <args>
        args.append(joinArgs(aux_args[i+1:])) # add <args> as one arg
else:
    assert_root()
    # migrate configuration from SYSTEM_CONFIG_FIREWALL
    args = read_sysconfig_args()
    if not args:
        cmd.fail("Opening of '%s' failed, exiting." % SYSTEM_CONFIG_FIREWALL)

a = parser.parse_args(args)

options_lokkit = a.enabled or a.disabled or a.addmodule or a.removemodule or \
                 a.trust or a.masq or a.custom_rules or \
                 a.service or a.remove_service or a.port or \
                 a.trust or a.masq or a.forward_port or a.block_icmp

options_standalone = a.help or a.version or \
    a.policy_server or a.policy_desktop or \
    a.lockdown_on or a.lockdown_off or a.query_lockdown or \
    a.get_default_zone or a.set_default_zone or \
    a.get_log_denied or a.set_log_denied or \
    a.get_automatic_helpers or a.set_automatic_helpers

options_desc_xml_file = a.set_description or a.get_description or \
                        a.set_short or a.get_short

options_lockdown_whitelist = \
    a.list_lockdown_whitelist_commands or a.add_lockdown_whitelist_command or \
    a.remove_lockdown_whitelist_command or \
    a.query_lockdown_whitelist_command or \
    a.list_lockdown_whitelist_contexts or a.add_lockdown_whitelist_context or \
    a.remove_lockdown_whitelist_context or \
    a.query_lockdown_whitelist_context or \
    a.list_lockdown_whitelist_uids or a.add_lockdown_whitelist_uid is not None or \
    a.remove_lockdown_whitelist_uid is not None or \
    a.query_lockdown_whitelist_uid is not None or \
    a.list_lockdown_whitelist_users or a.add_lockdown_whitelist_user or \
    a.remove_lockdown_whitelist_user or \
    a.query_lockdown_whitelist_user

options_config = a.get_zones or a.get_services or a.get_icmptypes or \
                 options_lockdown_whitelist or a.list_all_zones or \
                 a.get_zone_of_interface or a.get_zone_of_source or \
                 a.info_zone or a.info_icmptype or a.info_service or \
                 a.info_ipset or a.get_ipsets or a.info_helper or \
                 a.get_helpers

options_zone_action_action = \
    a.add_service or a.remove_service_from_zone or a.query_service or \
    a.add_port or a.remove_port or a.query_port or \
    a.add_protocol or a.remove_protocol or a.query_protocol or \
    a.add_source_port or a.remove_source_port or a.query_source_port or \
    a.add_icmp_block or a.remove_icmp_block or a.query_icmp_block or \
    a.add_forward_port or a.remove_forward_port or a.query_forward_port

options_zone_interfaces_sources = \
    a.list_interfaces or a.change_interface or \
    a.add_interface or a.remove_interface or a.query_interface or \
    a.list_sources or a.change_source or \
    a.add_source or a.remove_source or a.query_source

options_zone_adapt_query = \
    a.add_rich_rule or a.remove_rich_rule or a.query_rich_rule or \
    a.add_masquerade or a.remove_masquerade or a.query_masquerade or \
    a.list_services or a.list_ports or a.list_protocols or \
    a.list_source_ports or \
    a.list_icmp_blocks or a.list_forward_ports or a.list_rich_rules or \
    a.add_icmp_block_inversion or a.remove_icmp_block_inversion or \
    a.query_icmp_block_inversion or \
    a.list_all or a.get_target or a.set_target

options_zone_ops = options_zone_interfaces_sources or \
                   options_zone_action_action or options_zone_adapt_query

options_zone = a.zone or options_zone_ops or options_desc_xml_file

options_ipset = a.add_entry or a.remove_entry or a.query_entry or \
                a.get_entries or a.add_entries_from_file or \
                a.remove_entries_from_file or options_desc_xml_file

options_icmptype = a.add_destination or a.remove_destination or \
                   a.query_destination or a.get_destinations or \
                   options_desc_xml_file

options_service = a.add_port or a.remove_port or a.query_port or \
                  a.get_ports or \
                  a.add_protocol or a.remove_protocol or a.query_protocol or \
                  a.get_protocols or \
                  a.add_source_port or a.remove_source_port or \
                  a.query_source_port or a.get_source_ports or \
                  a.add_module or a.remove_module or a.query_module or \
                  a.get_modules or \
                  a.set_destination or a.remove_destination or \
                  a.query_destination or a.get_destinations or \
                  options_desc_xml_file

options_helper = a.add_port or a.remove_port or a.query_port or \
                  a.get_ports or a.set_module or a.get_module or \
                  a.set_family or a.get_family or \
                  options_desc_xml_file

options_permanent = options_config or options_zone or \
                    a.new_icmptype or a.delete_icmptype or \
                    a.new_icmptype_from_file or \
                    a.load_icmptype_defaults or \
                    a.new_service or a.delete_service or \
                    a.new_service_from_file or \
                    a.load_service_defaults or \
                    a.new_zone or a.delete_zone or \
                    a.new_zone_from_file or \
                    a.load_zone_defaults or \
                    a.new_helper or a.delete_helper or \
                    a.new_helper_from_file or \
                    a.load_helper_defaults or \
                    a.new_ipset or a.delete_ipset or \
                    a.new_ipset_from_file or \
                    a.load_ipset_defaults or \
                    a.ipset or options_ipset or \
                    (a.icmptype and options_icmptype) or \
                    (a.service and options_service) or \
                    (a.helper and options_helper) or \
                    a.path_zone or a.path_icmptype or a.path_service or \
                    a.path_ipset or a.path_helper

options_direct = \
           a.add_chain or a.remove_chain or a.query_chain or \
           a.get_chains or a.get_all_chains or \
           a.add_rule or a.remove_rule or a.remove_rules or a.query_rule or \
           a.get_rules or a.get_all_rules or \
           a.add_passthrough or a.remove_passthrough or a.query_passthrough or \
           a.get_passthroughs or a.get_all_passthroughs

# these are supposed to only write out some output
options_list_get = a.help or a.version or a.list_all or a.list_all_zones or \
 a.list_lockdown_whitelist_commands or a.list_lockdown_whitelist_contexts or \
 a.list_lockdown_whitelist_uids or a.list_lockdown_whitelist_users or \
 a.list_services or a.list_ports or a.list_protocols or a.list_icmp_blocks or \
 a.list_forward_ports or a.list_rich_rules or a.list_interfaces or \
 a.list_sources or a.get_default_zone or \
 a.get_zone_of_interface or a.get_zone_of_source or a.get_zones or \
 a.get_services or a.get_icmptypes or a.get_target or \
 a.info_zone or a.info_icmptype or a.info_service or \
 a.info_ipset or a.get_ipsets or a.get_entries or \
 a.info_helper or a.get_helpers or \
 a.get_destinations or a.get_description

# Set quiet and verbose

cmd.set_quiet(a.quiet)
cmd.set_verbose(a.verbose)

# Check various impossible combinations of options

if not (options_standalone or options_ipset or \
        options_lokkit or \
        options_icmptype or options_service or options_helper or \
        options_permanent or options_direct or options_desc_xml_file or \
        a.check_config):
    cmd.fail(parser.format_usage() + "No option specified.")

if options_lokkit and (options_standalone or \
                       options_permanent or options_direct) and \
                       not (options_service and a.service):
    cmd.fail(parser.format_usage() +
             "Can't use lokkit options with other options.")

if options_standalone and (options_permanent or \
                           options_direct or options_ipset):
    cmd.fail(parser.format_usage() +
             "Can't use stand-alone options with other options.")

if options_ipset and not options_desc_xml_file and not a.ipset:
    cmd.fail(parser.format_usage() + "No ipset specified.")

if (options_icmptype and not a.icmptype) and \
   not (options_service and a.service) and not options_desc_xml_file:
    cmd.fail(parser.format_usage() + "No icmptype specified.")

if options_service and a.service and len(a.service) > 0:
    if len(a.service) > 1:
        cmd.fail(parser.format_usage() + "More than one service specified.")
    # use the first entry in the array only
    a.service = a.service[0]

if (options_helper and not a.helper) and \
   not (options_service and a.service) and \
   not options_zone and not options_desc_xml_file:
    cmd.fail(parser.format_usage() + "No helper specified.")

if options_direct and options_zone:
    cmd.fail(parser.format_usage() +
             "Can't use 'direct' options with other options.")

if (a.direct and not options_direct) or (options_direct and not a.direct):
    cmd.fail(parser.format_usage() +
             "Wrong usage of 'direct' options.")

if a.name and not (a.new_zone_from_file or a.new_service_from_file or \
                   a.new_ipset_from_file or a.new_icmptype_from_file or \
                   a.new_helper_from_file):
    cmd.fail(parser.format_usage() + "Wrong usage of '--name' option.")

if options_config and options_zone:
    cmd.fail(parser.format_usage() +
             "Wrong usage of --get-zones | --get-services | --get-icmptypes.")

if a.quiet and options_list_get:
    # it makes no sense to use --quiet with these options
    a.quiet = False
    cmd.set_quiet(a.quiet)
    cmd.fail("-q/--quiet can't be used with this option(s)")

if a.help:
    __usage()
    sys.exit(0)

assert_root()

if a.system_config:
    config.set_system_config_paths(a.system_config)
if a.default_config:
    config.set_default_config_paths(a.default_config)
if a.check_config:
    try:
        fw = Firewall_test()
        fw.start()
        check_config(fw)
    except FirewallError as error:
        cmd.print_and_exit("Configuration error: %s" % error, error.code)
    except Exception as msg:
        cmd.fail("Configuration error: %s" % msg)
    sys.exit(0)

zone = a.zone
fw = Firewall_test()
fw.start()

try:
    # Lokkit Compatibility Options
    if options_lokkit and not (options_service and a.service):
        trusted_zone = "trusted"
        default_zone = fw.get_default_zone()
        fw_zone = fw.config.get_zone(default_zone)
        fw_settings = FirewallClientZoneSettings(
            list(fw.config.get_zone_config(fw_zone)))

if a.enabled:
            # Enable firewall (default)
            os.system("systemctl enable firewalld.service")
        if a.disabled:
            # Disable firewall
            os.system("systemctl disable firewalld.service")
        if a.addmodule:
            for m in a.addmodule:
                cmd.print_msg("Ignoring addmodule '%s'" % m)
        if a.removemodule:
            for m in a.removemodule:
                cmd.print_msg("Ignoring removemodule '%s'" % m)
        if a.custom_rules:
            for c in a.custom_rules:
                cmd.print_msg("Ignoring custom-rule '%s'" % c)
        if a.service:
            for s in a.service:
                cmd.print_msg("Adding service '%s' to default zone." % s)
                if not fw_settings.queryService(s):
                    fw_settings.addService(s)
                else:
                    cmd.print_msg("ALREADY_ENABLED: %s" % s)
        if a.remove_service:
            for s in a.remove_service:
                cmd.print_msg("Removing service '%s' from default zone." % s)
                if fw_settings.queryService(s):
                    fw_settings.removeService(s)
                else:
                    cmd.print_msg("NOT_ENABLED: %s" % s)
        if a.port:
            for port_proto in a.port:
                (port, proto) = parse_port_lokkit(port_proto)
                cmd.print_msg("Adding port '%s/%s' to default zone." % (port, proto))
                if not fw_settings.queryPort(port, proto):
                    fw_settings.addPort(port, proto)
                else:
                    cmd.print_msg("ALREADY_ENABLED: %s" % port_proto)
        if a.trust:
            if default_zone != trusted_zone:
                fw_trusted = fw.config.get_zone("trusted")
                fw_trusted_settings = FirewallClientZoneSettings(
                    list(fw.config.get_zone_config(fw_trusted)))
                # Bind an interface to the trusted zone
                for i in a.trust:
                    cmd.print_msg("Interface '%s' will be bound to zone '%s'." % \
                            (i, trusted_zone))
                    if not fw_trusted_settings.queryInterface(i):
                        fw_trusted_settings.addInterface(i)
                    else:
                        cmd.print_msg("ALREADY_ENABLED: %s" % i)
                fw.config.set_zone_config(fw_trusted, fw_trusted_settings.settings)
            else:
                for i in a.trust:
                    cmd.print_msg("Interface '%s' will be bound to zone '%s'." % \
                            (i, trusted_zone))
                    if not fw_settings.queryInterface(i):
                        fw_settings.addInterface(i)
                    else:
                        cmd.print_msg("ALREADY_ENABLED: %s" % i)
        if a.masq:
            # Enables masquerading in the default zone, interface argument is ignored
            cmd.print_msg("Enabling masquerade for the default zone.")
            fw_settings.setMasquerade(True)
        if a.forward_port:
            for fp in a.forward_port:
                (port, protocol, toport, toaddr) = cmd.parse_forward_port(
                    fp, compat=True)
                cmd.print_msg("Adding forward port %s:%s:%s:%s to default zone." % \
                      (port, protocol, toport, toaddr))
                if not fw_settings.queryForwardPort(port, protocol, toport,
                                                    toaddr):
                    fw_settings.addForwardPort(port, protocol, toport, toaddr)
                else:
                    cmd.print_msg("ALREADY_ENABLED: %s" % fp)
        if a.block_icmp:
            for ib in a.block_icmp:
                cmd.print_msg("Adding icmpblock '%s' to default zone." % ib)
                if not fw_settings.queryIcmpBlock(ib):
                    fw_settings.addIcmpBlock(ib)
                else:
                    cmd.print_msg("ALREADY_ENABLED: %s" % ib)

fw.config.set_zone_config(fw_zone, fw_settings.settings)

elif a.version:
        cmd.print_and_exit(config.VERSION)

elif a.get_log_denied:
        cmd.print_and_exit(fw.get_log_denied())
    elif a.set_log_denied:
        fw.set_log_denied(a.set_log_denied)

elif a.get_automatic_helpers:
        cmd.print_and_exit(fw.get_automatic_helpers())
    elif a.set_automatic_helpers:
        fw.set_automatic_helpers(a.set_automatic_helpers)

elif a.policy_server:
        pk_symlink('server')
    elif a.policy_desktop:
        pk_symlink('desktop')

# options from firewall-cmd
    elif a.get_default_zone:
        cmd.print_and_exit(fw.get_default_zone())
    elif a.set_default_zone:
        fw.set_default_zone(a.set_default_zone)

# lockdown
    elif a.lockdown_on:
        fw.enable_lockdown()
    elif a.lockdown_off:
        fw.disable_lockdown()
    elif a.query_lockdown:
        cmd.print_query_result(fw.policies.query_lockdown())

# zones
    elif a.get_zones:
        zones = fw.config.get_zones()
        cmd.print_and_exit(" ".join(zones))

elif a.new_zone:
        fw.config.new_zone(a.new_zone, FirewallClientZoneSettings().settings)

elif a.new_zone_from_file:
        filename = os.path.basename(a.new_zone_from_file)
        dirname = os.path.dirname(a.new_zone_from_file)
        if dirname == "":
            dirname = "./"
        try:
            obj = zone_reader(filename, dirname)
        except FirewallError as msg:
            cmd.print_and_exit("Failed to load zone file '%s': %s" % \
                               (a.new_zone_from_file, msg), msg.code)
        except IOError as msg:
            cmd.fail("Failed to load zone file: %s" % msg)

if a.name:
            obj.name = a.name

fw.config.new_zone(obj.name, obj.export_config())

elif a.delete_zone:
        obj = fw.config.get_zone(a.delete_zone)
        fw.config.remove_zone(obj)

elif a.load_zone_defaults:
        obj = fw.config.get_zone(a.load_zone_defaults)
        fw.config.load_zone_defaults(obj)

elif a.info_zone:
        zone = fw.config.get_zone(a.info_zone)
        settings = FirewallClientZoneSettings(
            list(fw.config.get_zone_config(zone)))
        cmd.print_zone_info(a.info_zone, settings, True)
        sys.exit(0)

elif a.path_zone:
        obj = fw.config.get_zone(a.path_zone)
        cmd.print_and_exit("%s/%s" % (obj.path, obj.filename))

# services
    elif a.get_services:
        services = fw.config.get_services()
        cmd.print_and_exit(" ".join(services))

elif a.new_service:
        fw.config.new_service(a.new_service,
                              FirewallClientServiceSettings().settings)

elif a.new_service_from_file:
        filename = os.path.basename(a.new_service_from_file)
        dirname = os.path.dirname(a.new_service_from_file)
        if dirname == "":
            dirname = "./"
        try:
            obj = service_reader(filename, dirname)
        except FirewallError as msg:
            cmd.print_and_exit("Failed to load service file '%s': %s" % \
                               (a.new_service_from_file, msg), msg.code)
        except IOError as msg:
            cmd.fail("Failed to load service file: %s" % msg)

if a.name:
            obj.name = a.name

fw.config.new_service(obj.name, obj.export_config())

elif a.delete_service:
        obj = fw.config.get_service(a.delete_service)
        fw.config.remove_service(obj)

# remove service from all zones
        zones = fw.config.get_zones()
        for zone in zones:
            _zone = fw.config.get_zone(zone)
            _settings = FirewallClientZoneSettings(
                list(fw.config.get_zone_config(_zone)))
            if _settings.queryService(a.delete_service):
                _settings.removeService(a.delete_service)
                fw.config.set_zone_config(_zone, _settings.settings)

elif a.load_service_defaults:
        obj = fw.config.get_service(a.load_service_defaults)
        fw.config.load_service_defaults(obj)

elif a.info_service:
        service = fw.config.get_service(a.info_service)
        settings = FirewallClientServiceSettings(
            list(fw.config.get_service_config(service)))
        cmd.print_service_info(a.info_service, settings)
        sys.exit(0)

elif a.path_service:
        obj = fw.config.get_service(a.path_service)
        cmd.print_and_exit("%s/%s" % (obj.path, obj.filename))

# icmptypes
    elif a.get_icmptypes:
        icmptypes = fw.config.get_icmptypes()
        cmd.print_and_exit(" ".join(icmptypes))

elif a.new_icmptype:
        fw.config.new_icmptype(a.new_icmptype,
                               FirewallClientIcmpTypeSettings().settings)

elif a.new_icmptype_from_file:
        filename = os.path.basename(a.new_icmptype_from_file)
        dirname = os.path.dirname(a.new_icmptype_from_file)
        if dirname == "":
            dirname = "./"
        try:
            obj = icmptype_reader(filename, dirname)
        except FirewallError as msg:
            cmd.print_and_exit("Failed to load icmptype file '%s': %s" % \
                               (a.new_icmptype_from_file, msg), msg.code)
        except IOError as msg:
            cmd.fail("Failed to load icmptype file: %s" % msg)

if a.name:
            obj.name = a.name

fw.config.new_icmptype(obj.name, obj.export_config())

elif a.delete_icmptype:
        obj = fw.config.get_icmptype(a.delete_icmptype)
        fw.config.remove_icmptype(obj)

# remove icmpyte from all zones
        zones = fw.config.get_zones()
        for zone in zones:
            _zone = fw.config.get_zone(zone)
            _settings = FirewallClientZoneSettings(
                list(fw.config.get_zone_config(_zone)))
            if _settings.queryIcmpBlock(a.delete_icmptype):
                _settings.removeIcmpBlock(a.delete_icmptype)
                fw.config.set_zone_config(_zone, _settings.settings)

elif a.load_icmptype_defaults:
        obj = fw.config.get_icmptype(a.load_icmptype_defaults)
        fw.config.load_icmptype_defaults(obj)

elif a.info_icmptype:
        icmptype = fw.config.get_icmptype(a.info_icmptype)
        settings = FirewallClientIcmpTypeSettings(
            list(fw.config.get_icmptype_config(icmptype)))

cmd.print_icmptype_info(a.info_icmptype, settings)
        sys.exit(0)

elif a.path_icmptype:
        obj = fw.config.get_icmptype(a.path_icmptype)
        cmd.print_and_exit("%s/%s" % (obj.path, obj.filename))

elif a.icmptype and options_icmptype:
        icmptype = fw.config.get_icmptype(a.icmptype)
        settings = FirewallClientIcmpTypeSettings(
            list(fw.config.get_icmptype_config(icmptype)))

if a.add_destination:
            cmd.add_sequence(a.add_destination, settings.addDestination,
                             settings.queryDestination,
                             cmd.check_destination_ipv, "'%s'")
            fw.config.set_icmptype_config(icmptype, settings.settings)

elif a.remove_destination:
            cmd.remove_sequence(a.remove_destination,
                                settings.removeDestination,
                                settings.queryDestination,
                                cmd.check_destination_ipv, "'%s'")
            fw.config.set_icmptype_config(icmptype, settings.settings)

elif a.query_destination:
            cmd.query_sequence(a.query_destination, settings.queryDestination,
                               cmd.check_destination_ipv , "'%s'")

elif a.get_destinations:
            l = settings.getDestinations()
            if len(l) == 0:
                l = [ "ipv4", "ipv6" ]
            cmd.print_and_exit("\n".join(l))

elif a.set_description:
            settings.setDescription(a.set_description)
            fw.config.set_icmptype_config(icmptype, settings.settings)

elif a.get_description:
            cmd.print_and_exit(settings.getDescription())

elif a.set_short:
            settings.setShort(a.set_short)
            fw.config.set_icmptype_config(icmptype, settings.settings)

elif a.get_short:
            cmd.print_and_exit(settings.getShort())

else:
            cmd.fail(parser.format_usage() + "Unknown option")

cmd.print_and_exit("success")

elif a.service and options_service:
        service = fw.config.get_service(a.service)
        settings = FirewallClientServiceSettings(
            list(fw.config.get_service_config(service)))

if a.add_port:
            cmd.add_sequence(a.add_port, settings.addPort,
                             settings.queryPort, cmd.parse_port, "%s/%s")
            fw.config.set_service_config(service, settings.settings)

elif a.remove_port:
            cmd.remove_sequence(a.remove_port, settings.removePort,
                                settings.queryPort, cmd.parse_port, "%s/%s")
            fw.config.set_service_config(service, settings.settings)

elif a.query_port:
            cmd.query_sequence(a.query_port, settings.queryPort,
                               cmd.parse_port, "%s/%s")

elif a.get_ports:
            l = settings.getPorts()
            cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l]))

elif a.add_protocol:
            cmd.add_sequence(a.add_protocol, settings.addProtocol,
                             settings.queryProtocol, None, "'%s'")
            fw.config.set_service_config(service, settings.settings)

elif a.remove_protocol:
            cmd.remove_sequence(a.remove_protocol, settings.removeProtocol,
                                settings.queryProtocol, None, "'%s'")
            fw.config.set_service_config(service, settings.settings)

elif a.query_protocol:
            cmd.query_sequence(a.query_protocol, settings.queryProtocol,
                               None, "'%s'")

elif a.get_protocols:
            l = settings.getProtocols()
            cmd.print_and_exit(" ".join(["%s" % protocol for protocol in l]))

elif a.add_source_port:
            cmd.add_sequence(a.add_source_port, settings.addSourcePort,
                             settings.querySourcePort, cmd.parse_port, "%s/%s")
            fw.config.set_service_config(service, settings.settings)

elif a.remove_source_port:
            cmd.remove_sequence(a.remove_source_port, settings.removeSourcePort,
                                settings.querySourcePort, cmd.parse_port,
                                "%s/%s")
            fw.config.set_service_config(service, settings.settings)

elif a.query_source_port:
            cmd.query_sequence(a.query_source_port, settings.querySourcePort,
                               cmd.parse_port, "%s/%s")

elif a.get_source_ports:
            l = settings.getSourcePorts()
            cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l]))

elif a.add_module:
            cmd.add_sequence(a.add_module, settings.addModule,
                             settings.queryModule, None, "'%s'")
            fw.config.set_service_config(service, settings.settings)

elif a.remove_module:
            cmd.remove_sequence(a.remove_module, settings.removeModule,
                                settings.queryModule, None, "'%s'")
            fw.config.set_service_config(service, settings.settings)

elif a.query_module:
            cmd.query_sequence(a.query_module, settings.queryModule,
                               None, "'%s'")

elif a.get_modules:
            l = settings.getModules()
            cmd.print_and_exit(" ".join(["%s" % module for module in l]))

elif a.set_destination:
            cmd.add_sequence(a.set_destination, settings.setDestination,
                             settings.queryDestination,
                             cmd.parse_service_destination, "%s:%s")
            fw.config.set_service_config(service, settings.settings)

elif a.remove_destination:
            # special case for removeDestination: Only ipv, no address
            for ipv in a.remove_destination:
                cmd.check_destination_ipv(ipv)
                if ipv not in settings.getDestinations():
                    if len(a.remove_destination) > 1:
                        cmd.print_warning("Warning: NOT_ENABLED: '%s'" % ipv)
                    else:
                        code = FirewallError.get_code("NOT_ENABLED")
                        cmd.print_and_exit("Error: NOT_ENABLED: '%s'" % ipv,
                                           code)
                else:
                    settings.removeDestination(ipv)
            fw.config.set_service_config(service, settings.settings)

elif a.query_destination:
            cmd.query_sequence(a.query_destination, settings.queryDestination,
                               cmd.parse_service_destination, "'%s'")

elif a.get_destinations:
            l = settings.getDestinations()
            cmd.print_and_exit(" ".join(["%s:%s" % (dest[0], dest[1]) for dest in l.items()]))

elif a.set_description:
            settings.setDescription(a.set_description)
            fw.config.set_service_config(service, settings.settings)

elif a.get_description:
            cmd.print_and_exit(settings.getDescription())

elif a.set_short:
            settings.setShort(a.set_short)
            fw.config.set_service_config(service, settings.settings)

elif a.get_short:
            cmd.print_and_exit(settings.getShort())

else:
            cmd.fail(parser.format_usage() + "Unknown option")

cmd.print_and_exit("success")

# ipsets
    if a.get_ipsets:
        ipsets = fw.config.get_ipsets()
        cmd.print_and_exit(" ".join(sorted(ipsets)))

elif a.new_ipset:
        if not a.type:
            cmd.fail(parser.format_usage() + "No type specified.")

settings = FirewallClientIPSetSettings()
        settings.setType(a.type)
        if a.option:
            for opt in a.option:
                settings.addOption(*cmd.parse_ipset_option(opt))
        fw.config.new_ipset(a.new_ipset, settings.settings)

elif a.new_ipset_from_file:
        filename = os.path.basename(a.new_ipset_from_file)
        dirname = os.path.dirname(a.new_ipset_from_file)
        if dirname == "":
            dirname = "./"
        try:
            obj = ipset_reader(filename, dirname)
        except FirewallError as msg:
            cmd.print_and_exit("Failed to load ipset file '%s': %s" % \
                               (a.new_ipset_from_file, msg), msg.code)
        except IOError as msg:
            cmd.fail("Failed to load ipset file: %s" % msg)

if a.name:
            obj.name = a.name

fw.config.new_ipset(obj.name, obj.export_config())

elif a.delete_ipset:
        ipset = fw.config.get_ipset(a.delete_ipset)
        fw.config.remove_ipset(ipset)

elif a.load_ipset_defaults:
        obj = fw.config.get_ipset(a.load_ipset_defaults)
        fw.config.load_ipset_defaults(obj)

elif a.info_ipset:
        ipset = fw.config.get_ipset(a.info_ipset)
        settings = FirewallClientIPSetSettings(
            list(fw.config.get_ipset_config(ipset)))
        cmd.print_ipset_info(a.info_ipset, settings)
        sys.exit(0)

elif a.path_ipset:
        obj = fw.config.get_ipset(a.path_ipset)
        cmd.print_and_exit("%s/%s" % (obj.path, obj.filename))

elif a.ipset:
        if a.add_entry:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            cmd.add_sequence(a.add_entry, settings.addEntry,
                             settings.queryEntry, None, "'%s'")
            fw.config.set_ipset_config(ipset, settings.settings)

elif a.remove_entry:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            cmd.remove_sequence(a.remove_entry, settings.removeEntry,
                                settings.queryEntry, None, "'%s'")
            fw.config.set_ipset_config(ipset, settings.settings)

elif a.query_entry:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            cmd.query_sequence(a.query_entry, settings.queryEntry, None, "'%s'")

elif a.get_entries:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            l = settings.getEntries()
            cmd.print_and_exit("\n".join(l))

elif a.add_entries_from_file:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            changed = False

for filename in a.add_entries_from_file:
                try:
                    entries = cmd.get_ipset_entries_from_file(filename)
                except IOError as msg:
                    message = "Failed to read file '%s': %s" % (filename,
                                                                msg)
                    if len(a.add_entries_from_file) > 1:
                        cmd.print_warning(message)
                    else:
                        cmd.print_and_exit(message)
                else:
                    old_entries = settings.getEntries()
                    entries_set = set()
                    for entry in old_entries:
                        entries_set.add(entry)
                    for entry in entries:
                        if entry not in entries_set:
                            old_entries.append(entry)
                            entries_set.add(entry)
                            changed = True
                        else:
                            cmd.print_if_verbose(
                                "Warning: ALREADY_ENABLED: %s" % entry)
                    if changed:
                        settings.setEntries(old_entries)
            if changed:
                fw.config.set_ipset_config(ipset, settings.settings)

elif a.remove_entries_from_file:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            changed = False

for filename in a.remove_entries_from_file:
                try:
                    entries = cmd.get_ipset_entries_from_file(filename)
                except IOError as msg:
                    message = "Failed to read file '%s': %s" % (filename, msg)
                    if len(a.remove_entries_from_file) > 1:
                        cmd.print_warning(message)
                    else:
                        cmd.print_and_exit(message)
                else:
                    old_entries = settings.getEntries()
                    entries_set = set()
                    for entry in old_entries:
                        entries_set.add(entry)
                    for entry in entries:
                        if entry in entries_set:
                            old_entries.remove(entry)
                            entries_set.discard(entry)
                            changed = True
                        else:
                            cmd.print_if_verbose("Warning: NOT_ENABLED: %s" % \
                                                 entry)
                    if changed:
                        settings.setEntries(old_entries)
            if changed:
                fw.config.set_ipset_config(ipset, settings.settings)

elif a.set_description:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            settings.setDescription(a.set_description)

fw.config.set_ipset_config(ipset, settings.settings)

elif a.get_description:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))

cmd.print_and_exit(settings.getDescription())

elif a.set_short:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))
            settings.setShort(a.set_short)

fw.config.set_ipset_config(ipset, settings.settings)

elif a.get_short:
            ipset = fw.config.get_ipset(a.ipset)
            settings = FirewallClientIPSetSettings(
                list(fw.config.get_ipset_config(ipset)))

cmd.print_and_exit(settings.getShort())

else:
            cmd.fail(parser.format_usage() + "Unknown option")

cmd.print_and_exit("success")

# helper

elif a.get_helpers:
        cmd.print_and_exit(" ".join(sorted(fw.config.get_helpers())))

elif a.new_helper:
        if not a.module:
            cmd.fail(parser.format_usage() + "No module specified.")

settings = FirewallClientHelperSettings()
        settings.setModule(a.module)
        if a.family:
            settings.setFamily(a.family)
        fw.config.new_helper(a.new_helper, settings.settings)

elif a.new_helper_from_file:
        filename = os.path.basename(a.new_helper_from_file)
        dirname = os.path.dirname(a.new_helper_from_file)
        if dirname == "":
            dirname = "./"
        try:
            obj = helper_reader(filename, dirname)
        except FirewallError as msg:
            cmd.print_and_exit("Failed to load helper file '%s': %s" % \
                               (a.new_helper_from_file, msg), msg.code)
        except IOError as msg:
            cmd.fail("Failed to load helper file: %s" % msg)

if a.name:
            obj.name = a.name

fw.config.new_helper(obj.name, obj.export_config())

elif a.delete_helper:
        obj = fw.config.get_helper(a.delete_helper)
        fw.config.remove_helper(obj)

elif a.load_helper_defaults:
        obj = fw.config.get_helper(a.load_helper_defaults)
        fw.config.load_helper_defaults(obj)

elif a.info_helper:
        obj = fw.config.get_helper(a.info_helper)
        settings = FirewallClientHelperSettings(
            list(fw.config.get_helper_config(obj)))
        cmd.print_helper_info(a.info_helper, settings)
        sys.exit(0)

elif a.path_helper:
        obj = fw.config.get_helper(a.path_helper)
        cmd.print_and_exit("%s/%s" % (obj.path, obj.filename))

elif a.helper:
        obj = fw.config.get_helper(a.helper)
        settings = FirewallClientHelperSettings(
            list(fw.config.get_helper_config(obj)))

if a.add_port:
            cmd.add_sequence(a.add_port, settings.addPort,
                             settings.queryPort, cmd.parse_port, "%s/%s")
            fw.config.set_helper_config(obj, settings.settings)

elif a.remove_port:
            cmd.remove_sequence(a.remove_port, settings.removePort,
                                settings.queryPort, cmd.parse_port, "%s/%s")
            fw.config.set_helper_config(obj, settings.settings)

elif a.query_port:
            cmd.query_sequence(a.query_port, settings.queryPort,
                               cmd.parse_port, "%s/%s")

elif a.get_ports:
            l = settings.getPorts()
            cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l]))

elif a.get_module:
            cmd.print_and_exit(settings.getModule())

elif a.set_module:
            settings.setModule(cmd.check_module(a.set_module))
            fw.config.set_helper_config(obj, settings.settings)

elif a.get_family:
            cmd.print_and_exit(settings.getFamily())

elif a.set_family:
            settings.setFamily(cmd.check_helper_family(a.set_family[0]))
            fw.config.set_helper_config(obj, settings.settings)

elif a.set_description:
            settings.setDescription(a.set_description)

fw.config.set_helper_config(obj, settings.settings)

elif a.get_description:
            cmd.print_and_exit(settings.getDescription())

elif a.set_short:
            settings.setShort(a.set_short)

fw.config.set_helper_config(obj, settings.settings)

elif a.get_short:
            cmd.print_and_exit(settings.getShort())

else:
            cmd.fail(parser.format_usage() + "Unknown option")

# lockdown whitelist

elif options_lockdown_whitelist:
        whitelist = fw.config.get_policies().lockdown_whitelist

# commands
        if a.list_lockdown_whitelist_commands:
            l = whitelist.get_commands()
            cmd.print_and_exit("\n".join(l))
        elif a.add_lockdown_whitelist_command:
            cmd.add_sequence(a.add_lockdown_whitelist_command,
                             whitelist.add_command,
                             whitelist.has_command, None, "'%s'")
        elif a.remove_lockdown_whitelist_command:
            cmd.remove_sequence(a.remove_lockdown_whitelist_command,
                                whitelist.remove_command,
                                whitelist.has_command, None, "'%s'")
        elif a.query_lockdown_whitelist_command:
            cmd.query_sequence(a.query_lockdown_whitelist_command,
                               whitelist.has_command, None, "'%s'")

# contexts
        elif a.list_lockdown_whitelist_contexts:
            l = whitelist.get_contexts()
            cmd.print_and_exit("\n".join(l))
        elif a.add_lockdown_whitelist_context:
            cmd.add_sequence(a.add_lockdown_whitelist_context,
                             whitelist.add_context,
                             whitelist.has_context, None, "'%s'")
        elif a.remove_lockdown_whitelist_context:
            cmd.remove_sequence(a.remove_lockdown_whitelist_context,
                                whitelist.remove_context,
                                whitelist.has_context, None, "'%s'")
        elif a.query_lockdown_whitelist_context:
            cmd.query_sequence(a.query_lockdown_whitelist_context,
                               whitelist.has_context, None, "'%s'")

# uids
        elif a.list_lockdown_whitelist_uids:
            l = whitelist.get_uids()
            cmd.print_and_exit(" ".join(map(str, l)))
        elif a.add_lockdown_whitelist_uid:
            cmd.add_sequence(a.add_lockdown_whitelist_uid,
                             whitelist.add_uid,
                             whitelist.has_uid, None, "'%s'")
        elif a.remove_lockdown_whitelist_uid:
            cmd.remove_sequence(a.remove_lockdown_whitelist_uid,
                                whitelist.remove_uid,
                                whitelist.has_uid, None, "'%s'")
        elif a.query_lockdown_whitelist_uid:
            cmd.query_sequence(a.query_lockdown_whitelist_uid,
                               whitelist.has_uid, None, "'%s'")

# users
        elif a.list_lockdown_whitelist_users:
            l = whitelist.get_users()
            cmd.print_and_exit("\n".join(l))
        elif a.add_lockdown_whitelist_user:
            cmd.add_sequence(a.add_lockdown_whitelist_user,
                             whitelist.add_user,
                             whitelist.has_user, None, "'%s'")
        elif a.remove_lockdown_whitelist_user:
            cmd.remove_sequence(a.remove_lockdown_whitelist_user,
                                whitelist.remove_user,
                                whitelist.has_user, None, "'%s'")
        elif a.query_lockdown_whitelist_user:
            cmd.query_sequence(a.query_lockdown_whitelist_user,
                               whitelist.has_user, None, "'%s'")

# apply whitelist changes
        whitelist.write()

elif options_direct:
        obj = fw.config.get_direct()

if a.add_passthrough:
            if len(a.add_passthrough) < 2:
                cmd.fail("usage: --direct --add-passthrough { ipv4 | ipv6 | eb } <args>")
            cmd.print_msg(
                obj.add_passthrough(cmd.check_ipv(a.add_passthrough[0]),
                                    splitArgs(a.add_passthrough[1])))

elif a.remove_passthrough:
            if len(a.remove_passthrough) < 2:
                cmd.fail("usage: --direct --remove-passthrough { ipv4 | ipv6 | eb } <args>")
            obj.remove_passthrough(cmd.check_ipv(a.remove_passthrough[0]),
                                   splitArgs(a.remove_passthrough[1]))
        elif a.query_passthrough:
            if len(a.query_passthrough) < 2:
                cmd.fail("usage: --direct --query-passthrough { ipv4 | ipv6 | eb } <args>")
            cmd.print_query_result(
                obj.query_passthrough(cmd.check_ipv(a.query_passthrough[0]),
                                      splitArgs(a.query_passthrough[1])))
            sys.exit(0)
        elif a.get_passthroughs:
            rules = obj.get_passthroughs(cmd.check_ipv(a.get_passthroughs[0]))
            for rule in rules:
                cmd.print_msg(joinArgs(rule))
            sys.exit(0)
        elif a.get_all_passthroughs:
            rules = obj.get_all_passthroughs()
            for ipv in rules:
                for rule in rules[ipv]:
                    cmd.print_msg("%s %s" % (ipv, joinArgs(rule)))
            sys.exit(0)

elif a.add_chain:
            obj.add_chain(cmd.check_ipv(a.add_chain[0]),
                          a.add_chain[1], a.add_chain[2])
        elif a.remove_chain:
            obj.remove_chain(cmd.check_ipv(a.remove_chain[0]),
                             a.remove_chain[1], a.remove_chain[2])
        elif a.query_chain:
            cmd.print_query_result(
                obj.query_chain(cmd.check_ipv(a.query_chain[0]),
                                a.query_chain[1], a.query_chain[2]))
            sys.exit(0)
        elif a.get_chains:
            cmd.print_and_exit(
                " ".join(obj.get_chains(cmd.check_ipv(a.get_chains[0]),
                                        a.get_chains[1])))
            sys.exit(0)
        elif a.get_all_chains:
            chains = obj.get_all_chains()
            for (ipv, table) in chains:
                for chain in chains[(ipv, table)]:
                    cmd.print_msg("%s %s %s" % (ipv, table, chain))
            sys.exit(0)

elif a.add_rule:
            if len(a.add_rule) < 5:
                cmd.fail("usage: --direct --add-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>")
            try:
                priority = int(a.add_rule[3])
            except ValueError:
                cmd.fail("wrong priority\nusage: --direct --add-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>")
            obj.add_rule(cmd.check_ipv(a.add_rule[0]), a.add_rule[1],
                         a.add_rule[2], priority, splitArgs(a.add_rule[4]))
        elif a.remove_rule:
            if len(a.remove_rule) < 5:
                cmd.fail("usage: --direct --remove-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>")
            try:
                priority = int(a.remove_rule[3])
            except ValueError:
                cmd.fail("usage: --direct --remove-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>")
            obj.remove_rule(cmd.check_ipv(a.remove_rule[0]), a.remove_rule[1],
                            a.remove_rule[2], priority, splitArgs(a.remove_rule[4]))
        elif a.remove_rules:
            if len(a.remove_rules) < 3:
                cmd.fail("usage: --direct --remove-rules { ipv4 | ipv6 | eb } <table> <chain>")
            obj.remove_rules(cmd.check_ipv(a.remove_rules[0]),
                             a.remove_rules[1], a.remove_rules[2])
        elif a.query_rule:
            if len(a.query_rule) < 5:
                cmd.fail("usage: --direct --query-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>")
            try:
                priority = int(a.query_rule[3])
            except ValueError:
                cmd.fail("usage: --direct --query-rule { ipv4 | ipv6 | eb } <table> <chain> <priority> <args>")
            cmd.print_query_result(
                obj.query_rule(cmd.check_ipv(a.query_rule[0]),
                               a.query_rule[1], a.query_rule[2],
                               priority, splitArgs(a.query_rule[4])))
            sys.exit(0)
        elif a.get_rules:
            rules = obj.get_rules(cmd.check_ipv(a.get_rules[0]),
                                  a.get_rules[1], a.get_rules[2])
            for (priority, rule) in rules:
                cmd.print_msg("%d %s" % (priority, joinArgs(rule)))
            sys.exit(0)
        elif a.get_all_rules:
            rules = obj.get_all_rules()
            for (ipv, table, chain) in rules:
                for (priority, rule) in rules[(ipv, table, chain)]:
                    cmd.print_msg("%s %s %s %d %s" % \
                                  (ipv, table, chain, priority,
                                   joinArgs(rule)))
            sys.exit(0)

obj.write()

else:
        if zone == "":
            zone = fw.get_default_zone()
        fw_zone = fw.config.get_zone(zone)
        fw_settings = FirewallClientZoneSettings(
            list(fw.config.get_zone_config(fw_zone))) # convert to list, for setMasquerade

# interface
        if a.list_interfaces:
            l = fw_settings.getInterfaces()
            cmd.print_and_exit(" ".join(l))
        elif a.get_zone_of_interface:
            for interface in a.get_zone_of_interface:
                ret = [ ]
                for zone in fw.config.get_zones():
                    obj = fw.config.get_zone(zone)
                    if interface in obj.interfaces:
                        ret.append(obj.name)
                if len(ret) > 1:
                    # Even it shouldn't happen, it's actually possible that
                    # the same interface is in several zone XML files
                    cmd.print_warning(" ".join(ret) + "  (ERROR: interface '%s' is in %s zone XML files, can be only in one)" % (interface, len(ret)))
                if len(ret) == 1:
                    if len(a.get_zone_of_interface) > 1:
                        cmd.print_warning("%s: %s" % (interface, ret[0]))
                    else:
                        cmd.print_and_exit(ret[0])
                else:
                    if len(a.get_zone_of_interface) > 1:
                        cmd.print_warning("%s: no zone" % interface)
                    else:
                        cmd.print_and_exit("no zone", 2)
        elif a.change_interface:
            for interface in a.change_interface:
                for old_zone in fw.config.get_zones():
                    old_zone_obj = fw.config.get_zone(old_zone)
                    if interface in old_zone_obj.interfaces:
                        if old_zone_obj.name != zone:
                            old_zone_settings = FirewallClientZoneSettings(
                                fw.config.get_zone_config(old_zone_obj))

old_zone_settings.removeInterface(interface) # remove from old
                            fw.config.set_zone_config(old_zone_obj, old_zone_settings.settings)
                fw_settings.addInterface(interface)              # add to new
        elif a.add_interface:
            cmd.add_sequence(a.add_interface, fw_settings.addInterface,
                             fw_settings.queryInterface, None, "'%s'")
        elif a.remove_interface:
            cmd.remove_sequence(a.remove_interface, fw_settings.removeInterface,
                                fw_settings.queryInterface, None, "'%s'")
        elif a.query_interface:
            cmd.query_sequence(a.query_interface, fw_settings.queryInterface,
                               None, "'%s'")

# source
        if a.list_sources:
            sources = fw_settings.getSources()
            cmd.print_and_exit(" ".join(sources))
        elif a.get_zone_of_source:
            for source in a.get_zone_of_source:
                ret = [ ]
                for zone in fw.config.get_zones():
                    obj = fw.config.get_zone(zone)
                    if source in obj.sources:
                        ret.append(obj.name)
                if len(ret) > 1:
                    # Even it shouldn't happen, it's actually possible that
                    # the same source is in several zone XML files
                    cmd.print_warning(" ".join(ret) + "  (ERROR: source '%s' is in %s zone XML files, can be only in one)" % (source, len(ret)))
                if len(ret) == 1:
                    if len(a.get_zone_of_source) > 1:
                        cmd.print_warning("%s: %s" % (source, ret[0]))
                    else:
                        cmd.print_and_exit(ret[0])
                else:
                    if len(a.get_zone_of_source) > 1:
                        cmd.print_warning("%s: no zone" % source)
                    else:
                        cmd.print_and_exit("no zone", 2)
        elif a.change_source:
            for source in a.change_source:
                for old_zone in fw.config.get_zones():
                    old_zone_obj = fw.config.get_zone(old_zone)
                    if source in old_zone_obj.sources:
                        if old_zone_obj.name != zone:
                            old_zone_settings = FirewallClientZoneSettings(
                                fw.config.get_zone_config(old_zone_obj))

old_zone_settings.removeSource(source) # remove from old
                            fw.config.set_zone_config(old_zone_obj, old_zone_settings.settings)
                fw_settings.addSource(source)              # add to new
        elif a.add_source:
            cmd.add_sequence(a.add_source, fw_settings.addSource,
                             fw_settings.querySource, None, "'%s'")
        elif a.remove_source:
            cmd.remove_sequence(a.remove_source, fw_settings.removeSource,
                                fw_settings.querySource, None, "'%s'")
        elif a.query_source:
            cmd.query_sequence(a.query_source, fw_settings.querySource,
                               None, "'%s'")

# rich rules
        if a.list_rich_rules:
            l = fw_settings.getRichRules()
            cmd.print_and_exit("\n".join(l))
        elif a.add_rich_rule:
            cmd.add_sequence(a.add_rich_rule, fw_settings.addRichRule,
                             fw_settings.queryRichRule, None, "'%s'")
        elif a.remove_rich_rule:
            cmd.remove_sequence(a.remove_rich_rule, fw_settings.removeRichRule,
                                fw_settings.queryRichRule, None, "'%s'")
        elif a.query_rich_rule:
            cmd.query_sequence(a.query_rich_rule, fw_settings.queryRichRule,
                               None, "'%s'")

# service
        if a.list_services:
            l = fw_settings.getServices()
            cmd.print_and_exit(" ".join(sorted(l)))
        elif a.add_service:
            cmd.add_sequence(a.add_service, fw_settings.addService,
                             fw_settings.queryService, None, "'%s'")
        elif a.remove_service_from_zone:
            cmd.remove_sequence(a.remove_service_from_zone,
                                fw_settings.removeService,
                                fw_settings.queryService, None, "'%s'")
        elif a.query_service:
            cmd.query_sequence(a.query_service, fw_settings.queryService,
                               None, "'%s'")

# port
        elif a.list_ports:
            l = fw_settings.getPorts()
            cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l]))
        elif a.add_port:
            cmd.add_sequence(a.add_port, fw_settings.addPort,
                             fw_settings.queryPort, cmd.parse_port, "%s/%s")
        elif a.remove_port:
            cmd.remove_sequence(a.remove_port, fw_settings.removePort,
                                fw_settings.queryPort, cmd.parse_port, "%s/%s")
        elif a.query_port:
            cmd.query_sequence(a.query_port, fw_settings.queryPort,
                               cmd.parse_port, "%s/%s")

# protocol
        elif a.list_protocols:
            l = fw_settings.getProtocols()
            cmd.print_and_exit(" ".join(sorted(l)))
        elif a.add_protocol:
            cmd.add_sequence(a.add_protocol, fw_settings.addProtocol,
                             fw_settings.queryProtocol, None, "'%s'")
        elif a.remove_protocol:
            cmd.remove_sequence(a.remove_protocol, fw_settings.removeProtocol,
                                fw_settings.queryProtocol, None, "'%s'")
        elif a.query_protocol:
            cmd.query_sequence(a.query_protocol, fw_settings.queryProtocol,
                               None, "'%s'")

# source port
        elif a.list_source_ports:
            l = fw_settings.getSourcePorts()
            cmd.print_and_exit(" ".join(["%s/%s" % (port[0], port[1]) for port in l]))
        elif a.add_source_port:
            cmd.add_sequence(a.add_source_port, fw_settings.addSourcePort,
                             fw_settings.querySourcePort, cmd.parse_port,
                             "%s/%s")
        elif a.remove_source_port:
            cmd.remove_sequence(a.remove_source_port,
                                fw_settings.removeSourcePort,
                                fw_settings.querySourcePort, cmd.parse_port,
                                "%s/%s")
        elif a.query_source_port:
            cmd.query_sequence(a.query_source_port, fw_settings.querySourcePort,
                               cmd.parse_port, "%s/%s")

# masquerade
        elif a.add_masquerade:
            fw_settings.setMasquerade(True)
        elif a.remove_masquerade:
            fw_settings.setMasquerade(False)
        elif a.query_masquerade:
            cmd.print_query_result(fw_settings.getMasquerade())

# forward port
        elif a.list_forward_ports:
            l = fw_settings.getForwardPorts()
            cmd.print_and_exit("\n".join(["port=%s:proto=%s:toport=%s:toaddr=%s" % (_port, _protocol, _toport, _toaddr) for (_port, _protocol, _toport, _toaddr) in l]))
        elif a.add_forward_port:
            cmd.add_sequence(a.add_forward_port, fw_settings.addForwardPort,
                             fw_settings.queryForwardPort,
                             cmd.parse_forward_port,
                             "port=%s:proto=%s:toport=%s:toaddr=%s")
        elif a.remove_forward_port:
            cmd.remove_sequence(a.remove_forward_port,
                                fw_settings.removeForwardPort,
                                fw_settings.queryForwardPort,
                                cmd.parse_forward_port,
                                "port=%s:proto=%s:toport=%s:toaddr=%s")
        elif a.query_forward_port:
            cmd.query_sequence(a.query_forward_port,
                               fw_settings.queryForwardPort,
                               cmd.parse_forward_port,
                               "port=%s:proto=%s:toport=%s:toaddr=%s")

# block icmp
        elif a.list_icmp_blocks:
            l = fw_settings.getIcmpBlocks()
            cmd.print_and_exit(" ".join(l))
        elif a.add_icmp_block:
            cmd.add_sequence(a.add_icmp_block, fw_settings.addIcmpBlock,
                             fw_settings.queryIcmpBlock, None, "'%s'")
        elif a.remove_icmp_block:
            cmd.remove_sequence(a.remove_icmp_block,
                                fw_settings.removeIcmpBlock,
                                fw_settings.queryIcmpBlock, None, "'%s'")
        elif a.query_icmp_block:
            cmd.query_sequence(a.query_icmp_block, fw_settings.queryIcmpBlock,
                               None, "'%s'")

# icmp block inversion
        elif a.add_icmp_block_inversion:
            fw_settings.addIcmpBlockInversion()
        elif a.remove_icmp_block_inversion:
            fw_settings.removeIcmpBlockInversion()
        elif a.query_icmp_block_inversion:
            cmd.print_query_result(fw_settings.queryIcmpBlockInversion())

# zone target
        elif a.get_target:
            cmd.print_and_exit(fw_settings.getTarget())
        elif a.set_target:
            fw_settings.setTarget(a.set_target)

# list all zone settings
        elif a.list_all:
            cmd.print_zone_info(zone if zone else fw.get_default_zone(),
                                fw_settings)
            sys.exit(0)

# list everything
        elif a.list_all_zones:
            zones = fw.config.get_zones()
            for zone in zones:
                fw_zone = fw.config.get_zone(zone)
                fw_settings = FirewallClientZoneSettings(list(fw.config.get_zone_config(fw_zone)))
                cmd.print_zone_info(zone, fw_settings)
                cmd.print_msg("")
            sys.exit(0)

elif a.set_description:
            fw_settings.setDescription(a.set_description)

elif a.get_description:
            cmd.print_and_exit(fw_settings.getDescription())

elif a.set_short:
            fw_settings.setShort(a.set_short)

elif a.get_short:
            cmd.print_and_exit(fw_settings.getShort())

fw.config.set_zone_config(fw_zone, fw_settings.settings)

cmd.print_and_exit("success")

except FirewallError as msg:
    cmd.print_and_exit("%s" % msg, msg.code)
except Exception as msg:
    cmd.fail("%s" % msg)
else:
    cmd.print_and_exit("success")