61 lines
2.5 KiB
Python
61 lines
2.5 KiB
Python
# -*- coding:utf-8 -*-
|
|
# Copyright (c) 2020 Huawei Technologies Co.,Ltd.
|
|
#
|
|
# openGauss is licensed under Mulan PSL v2.
|
|
# You can use this software according to the terms
|
|
# and conditions of the Mulan PSL v2.
|
|
# You may obtain a copy of Mulan PSL v2 at:
|
|
#
|
|
# http://license.coscl.org.cn/MulanPSL2
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OF ANY KIND,
|
|
# EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
|
|
# MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
|
|
# See the Mulan PSL v2 for more details.
|
|
# ----------------------------------------------------------------------------
|
|
import subprocess
|
|
from gspylib.inspection.common.CheckItem import BaseItem
|
|
from gspylib.inspection.common.CheckResult import ResultStatus
|
|
from gspylib.common.ErrorCode import ErrorCode
|
|
from base_utils.os.file_util import FileUtil
|
|
|
|
PORT_RANGE = (26000, 65535)
|
|
SYSCTL_FILE = "/etc/sysctl.conf"
|
|
|
|
|
|
class CheckSysPortRange(BaseItem):
|
|
def __init__(self):
|
|
super(CheckSysPortRange, self).__init__(self.__class__.__name__)
|
|
|
|
def doCheck(self):
|
|
output = FileUtil.readFile('/proc/sys/net/ipv4/ip_local_port_range')[0]
|
|
smallValue = output.split()[0].strip()
|
|
bigValue = output.split()[1].strip()
|
|
if (int(bigValue) > PORT_RANGE[1] or int(smallValue) < PORT_RANGE[0]):
|
|
self.result.val = "The value of net.ipv4.ip_local_port_range " \
|
|
"is %d %d. it should be %d %d" % (
|
|
int(smallValue), int(bigValue),
|
|
int(PORT_RANGE[0]),
|
|
int(PORT_RANGE[1]))
|
|
self.result.rst = ResultStatus.NG
|
|
else:
|
|
self.result.rst = ResultStatus.OK
|
|
self.result.val = "The value of net.ipv4." \
|
|
"ip_local_port_range is %d %d." % (
|
|
int(smallValue), int(bigValue))
|
|
self.result.raw = output
|
|
|
|
def doSet(self):
|
|
cmd = "sed -i '/net.ipv4.ip_local_port_range/d' %s" % SYSCTL_FILE
|
|
cmd += " && echo 'net.ipv4.ip_local_port_range " \
|
|
"= 26000 65535' >> %s" % SYSCTL_FILE
|
|
cmd += " && sysctl -p"
|
|
(status, output) = subprocess.getstatusoutput(cmd)
|
|
if (status != 0 and output.find(
|
|
'/proc/sys/net/ipv4/ip_local_port_range: N'
|
|
'o such file or directory') >= 0):
|
|
raise Exception(ErrorCode.GAUSS_530["GAUSS_53020"]
|
|
% "net.ipv4.ip_local_port_range."
|
|
+ "The cmd is %s " % cmd)
|