o ).set_permitlisten_with_port©ÚlistÚmap)ÚselfÚphonehome_configsrrrrÚextract_phonehome_ssh_keys#sz'FilterModule.extract_phonehome_ssh_keyscsd‰‡fdd„}tt||ƒƒS)z_Always allow listening on port 10225. Necessary to allow the phonehome update. zpermitlisten="localhost:10225"cs(t d|¡}|sˆd|Sˆd|S)Nrrr)rr )Ú ssh_key_sr ©rrrÚadd_rescue_option<sþ  z@FilterModule.ssh_key_phonehome_rescue..add_rescue_optionr)rrr$rr#rÚssh_key_phonehome_rescue5s  z%FilterModule.ssh_key_phonehome_rescuecCr)NcSs t|ddƒS)Nzno-pty©r©r"rrrÚenforce_no_ptyHs z;FilterModule.ssh_key_enforce_no_pty..enforce_no_ptyr)rrr(rrrÚssh_key_enforce_no_ptyGsz#FilterModule.ssh_key_enforce_no_ptycCr)NcSó t|ddƒS)Nzpermitlisten="localhost:*"rr&r'rrrÚenforce_permitlistenOó zGFilterModule.ssh_key_enforce_permitlisten..enforce_permitlistenr)rrr+rrrÚssh_key_enforce_permitlistenNóz)FilterModule.ssh_key_enforce_permitlistencCr)NcSr*)Nzpermitopen="127.0.0.1:1"z permitopen=r&r'rrrÚenforce_permitopenWr,zCFilterModule.ssh_key_enforce_permitopen..enforce_permitopenr)rrr/rrrÚssh_key_enforce_permitopenVr.z'FilterModule.ssh_key_enforce_permitopencCs|j|j|j|j|jdœS)N©r!r0r)r-r%r1)rrrrÚfilters]s ûzFilterModule.filtersN) Ú__name__Ú __module__Ú __qualname__r!r%r)r-r0r2rrrrrs r)rrrrrrrÚs