/mandos/release : revision 299

17

# GNU General Public License for more details.

18

#

19

# You should have received a copy of the GNU General Public License

20

# along with this program. If not, see

21

# <http://www.gnu.org/licenses/>.

20

# along with this program. If not, see <http://www.gnu.org/licenses/>.

22

21

#

23

22

# Contact the authors at <mandos@recompile.se>.

24

23

#

26

25

from __future__ import (division, absolute_import, print_function,

27

26

unicode_literals)

28

27

29

from future_builtins import *

30

31

28

import sys

32

29

import os

33

30

import signal

55

52

domain = 'se.recompile'

56

53

server_interface = domain + '.Mandos'

57

54

client_interface = domain + '.Mandos.Client'

58

version = "1.5.5"

55

version = "1.5.3"

59

56

60

57

# Always run in monochrome mode

61

58

urwid.curses_display.curses.has_colors = lambda : False

86

83

properties and calls a hook function when any of them are

87

84

changed.

88

85

"""

89

def __init__(self, proxy_object=None, properties=None, **kwargs):

86

def __init__(self, proxy_object=None, *args, **kwargs):

90

87

self.proxy = proxy_object # Mandos Client proxy object

91

self.properties = dict() if properties is None else properties

88

89

self.properties = dict()

92

90

self.property_changed_match = (

93

91

self.proxy.connect_to_signal("PropertyChanged",

94

self._property_changed,

92

self.property_changed,

95

93

client_interface,

96

94

byte_arrays=True))

97

95

98

if properties is None:

99

self.properties.update(

100

self.proxy.GetAll(client_interface,

101

dbus_interface

102

= dbus.PROPERTIES_IFACE))

103

104

super(MandosClientPropertyCache, self).__init__(**kwargs)

105

106

def _property_changed(self, property, value):

107

"""Helper which takes positional arguments"""

108

return self.property_changed(property=property, value=value)

96

self.properties.update(

97

self.proxy.GetAll(client_interface,

98

dbus_interface = dbus.PROPERTIES_IFACE))

99

100

#XXX This breaks good super behaviour

101

# super(MandosClientPropertyCache, self).__init__(

102

# *args, **kwargs)

109

103

110

104

def property_changed(self, property=None, value=None):

111

105

"""This is called whenever we get a PropertyChanged signal

114

108

# Update properties dict with new value

115

109

self.properties[property] = value

116

110

117

def delete(self):

111

def delete(self, *args, **kwargs):

118

112

self.property_changed_match.remove()

113

super(MandosClientPropertyCache, self).__init__(

114

*args, **kwargs)

119

115

120

116

121

117

class MandosClientWidget(urwid.FlowWidget, MandosClientPropertyCache):

123

119

"""

124

120

125

121

def __init__(self, server_proxy_object=None, update_hook=None,

126

delete_hook=None, logger=None, **kwargs):

122

delete_hook=None, logger=None, *args, **kwargs):

127

123

# Called on update

128

124

self.update_hook = update_hook

129

125

# Called on delete

134

130

self.logger = logger

135

131

136

132

self._update_timer_callback_tag = None

133

self._update_timer_callback_lock = 0

137

134

138

135

# The widget shown normally

139

136

self._text_widget = urwid.Text("")

140

137

# The widget shown when we have focus

141

138

self._focus_text_widget = urwid.Text("")

142

super(MandosClientWidget, self).__init__(**kwargs)

139

super(MandosClientWidget, self).__init__(

140

update_hook=update_hook, delete_hook=delete_hook,

141

*args, **kwargs)

143

142

self.update()

144

143

self.opened = False

145

144

145

last_checked_ok = isoformat_to_datetime(self.properties

146

["LastCheckedOK"])

147

148

if self.properties ["LastCheckerStatus"] != 0:

149

self.using_timer(True)

150

151

if self.need_approval:

152

self.using_timer(True)

153

146

154

self.match_objects = (

147

155

self.proxy.connect_to_signal("CheckerCompleted",

148

156

self.checker_completed,

164

172

self.rejected,

165

173

client_interface,

166

174

byte_arrays=True))

167

#self.logger('Created client {0}'

168

# .format(self.properties["Name"]))

175

#self.logger('Created client %s' % (self.properties["Name"]))

176

177

def property_changed(self, property=None, value=None):

178

super(self, MandosClientWidget).property_changed(property,

179

value)

180

if property == "ApprovalPending":

181

using_timer(bool(value))

182

if property == "LastCheckerStatus":

183

using_timer(value != 0)

184

#self.logger('Checker for client %s (command "%s")'

185

# ' was successful'

186

# % (self.properties["Name"], command))

169

187

170

188

def using_timer(self, flag):

171

189

"""Call this method with True or False when timer should be

172

190

activated or deactivated.

173

191

"""

174

if flag and self._update_timer_callback_tag is None:

192

old = self._update_timer_callback_lock

193

if flag:

194

self._update_timer_callback_lock += 1

195

else:

196

self._update_timer_callback_lock -= 1

197

if old == 0 and self._update_timer_callback_lock:

175

198

# Will update the shown timer value every second

176

199

self._update_timer_callback_tag = (gobject.timeout_add

177

200

(1000,

178

201

self.update_timer))

179

elif not (flag or self._update_timer_callback_tag is None):

202

elif old and self._update_timer_callback_lock == 0:

180

203

gobject.source_remove(self._update_timer_callback_tag)

181

204

self._update_timer_callback_tag = None

182

205

186

209

return

187

210

# Checker failed

188

211

if os.WIFEXITED(condition):

189

self.logger('Checker for client {0} (command "{1}")'

190

' failed with exit code {2}'

191

.format(self.properties["Name"], command,

192

os.WEXITSTATUS(condition)))

212

self.logger('Checker for client %s (command "%s")'

213

' failed with exit code %s'

214

% (self.properties["Name"], command,

215

os.WEXITSTATUS(condition)))

193

216

elif os.WIFSIGNALED(condition):

194

self.logger('Checker for client {0} (command "{1}") was'

195

' killed by signal {2}'

196

.format(self.properties["Name"], command,

197

os.WTERMSIG(condition)))

217

self.logger('Checker for client %s (command "%s")'

218

' was killed by signal %s'

219

% (self.properties["Name"], command,

220

os.WTERMSIG(condition)))

198

221

elif os.WCOREDUMP(condition):

199

self.logger('Checker for client {0} (command "{1}")'

222

self.logger('Checker for client %s (command "%s")'

200

223

' dumped core'

201

.format(self.properties["Name"], command))

224

% (self.properties["Name"], command))

202

225

else:

203

self.logger('Checker for client {0} completed'

204

' mysteriously'

205

.format(self.properties["Name"]))

226

self.logger('Checker for client %s completed'

227

' mysteriously')

206

228

self.update()

207

229

208

230

def checker_started(self, command):

209

231

"""Server signals that a checker started. This could be useful

210

232

to log in the future. """

211

#self.logger('Client {0} started checker "{1}"'

212

# .format(self.properties["Name"],

213

# unicode(command)))

233

#self.logger('Client %s started checker "%s"'

234

# % (self.properties["Name"], unicode(command)))

214

235

pass

215

236

216

237

def got_secret(self):

217

self.logger('Client {0} received its secret'

218

.format(self.properties["Name"]))

238

self.logger('Client %s received its secret'

239

% self.properties["Name"])

219

240

220

241

def need_approval(self, timeout, default):

221

242

if not default:

222

message = 'Client {0} needs approval within {1} seconds'

243

message = 'Client %s needs approval within %s seconds'

223

244

else:

224

message = 'Client {0} will get its secret in {1} seconds'

225

self.logger(message.format(self.properties["Name"],

226

timeout/1000))

245

message = 'Client %s will get its secret in %s seconds'

246

self.logger(message

247

% (self.properties["Name"], timeout/1000))

248

self.using_timer(True)

227

249

228

250

def rejected(self, reason):

229

self.logger('Client {0} was rejected; reason: {1}'

230

.format(self.properties["Name"], reason))

251

self.logger('Client %s was rejected; reason: %s'

252

% (self.properties["Name"], reason))

231

253

232

254

def selectable(self):

233

255

"""Make this a "selectable" widget.

255

277

"bold-underline-blink":

256

278

"bold-underline-blink-standout",

257

279

}

258

280

259

281

# Rebuild focus and non-focus widgets using current properties

260

282

261

283

# Base part of a client. Name!

262

base = '{name}: '.format(name=self.properties["Name"])

284

base = ('%(name)s: '

285

% {"name": self.properties["Name"]})

263

286

if not self.properties["Enabled"]:

264

287

message = "DISABLED"

265

self.using_timer(False)

266

288

elif self.properties["ApprovalPending"]:

267

289

timeout = datetime.timedelta(milliseconds

268

290

= self.properties

270

292

last_approval_request = isoformat_to_datetime(

271

293

self.properties["LastApprovalRequest"])

272

294

if last_approval_request is not None:

273

timer = max(timeout - (datetime.datetime.utcnow()

274

- last_approval_request),

275

datetime.timedelta())

295

timer = timeout - (datetime.datetime.utcnow()

296

- last_approval_request)

276

297

else:

277

298

timer = datetime.timedelta()

278

299

if self.properties["ApprovedByDefault"]:

279

message = "Approval in {0}. (d)eny?"

300

message = "Approval in %s. (d)eny?"

280

301

else:

281

message = "Denial in {0}. (a)pprove?"

282

message = message.format(unicode(timer).rsplit(".", 1)[0])

283

self.using_timer(True)

302

message = "Denial in %s. (a)pprove?"

303

message = message % unicode(timer).rsplit(".", 1)[0]

284

304

elif self.properties["LastCheckerStatus"] != 0:

285

# When checker has failed, show timer until client expires

305

# When checker has failed, print a timer until client expires

286

306

expires = self.properties["Expires"]

287

307

if expires == "":

288

308

timer = datetime.timedelta(0)

289

309

else:

290

expires = (datetime.datetime.strptime

291

(expires, '%Y-%m-%dT%H:%M:%S.%f'))

292

timer = max(expires - datetime.datetime.utcnow(),

293

datetime.timedelta())

310

expires = datetime.datetime.strptime(expires,

311

'%Y-%m-%dT%H:%M:%S.%f')

312

timer = expires - datetime.datetime.utcnow()

294

313

message = ('A checker has failed! Time until client'

295

' gets disabled: {0}'

296

.format(unicode(timer).rsplit(".", 1)[0]))

297

self.using_timer(True)

314

' gets disabled: %s'

315

% unicode(timer).rsplit(".", 1)[0])

298

316

else:

299

317

message = "enabled"

300

self.using_timer(False)

301

self._text = "{0}{1}".format(base, message)

302

318

self._text = "%s%s" % (base, message)

319

303

320

if not urwid.supports_unicode():

304

321

self._text = self._text.encode("ascii", "replace")

305

322

textlist = [("normal", self._text)]

322

339

self.update()

323

340

return True # Keep calling this

324

341

325

def delete(self, **kwargs):

342

def delete(self, *args, **kwargs):

326

343

if self._update_timer_callback_tag is not None:

327

344

gobject.source_remove(self._update_timer_callback_tag)

328

345

self._update_timer_callback_tag = None

331

348

self.match_objects = ()

332

349

if self.delete_hook is not None:

333

350

self.delete_hook(self)

334

return super(MandosClientWidget, self).delete(**kwargs)

351

return super(MandosClientWidget, self).delete(*args, **kwargs)

335

352

336

353

def render(self, maxcolrow, focus=False):

337

354

"""Render differently if we have focus.

379

396

else:

380

397

return key

381

398

382

def property_changed(self, property=None, **kwargs):

399

def property_changed(self, property=None, value=None,

400

*args, **kwargs):

383

401

"""Call self.update() if old value is not new value.

384

402

This overrides the method from MandosClientPropertyCache"""

385

403

property_name = unicode(property)

386

404

old_value = self.properties.get(property_name)

387

405

super(MandosClientWidget, self).property_changed(

388

property=property, **kwargs)

406

property=property, value=value, *args, **kwargs)

389

407

if self.properties.get(property_name) != old_value:

390

408

self.update()

391

409

395

413

"down" key presses, thus not allowing any containing widgets to

396

414

use them as an excuse to shift focus away from this widget.

397

415

"""

398

def keypress(self, *args, **kwargs):

399

ret = super(ConstrainedListBox, self).keypress(*args, **kwargs)

416

def keypress(self, maxcolrow, key):

417

ret = super(ConstrainedListBox, self).keypress(maxcolrow, key)

400

418

if ret in ("up", "down"):

401

419

return

402

420

return ret

468

486

self.main_loop = gobject.MainLoop()

469

487

470

488

def client_not_found(self, fingerprint, address):

471

self.log_message("Client with address {0} and fingerprint"

472

" {1} could not be found"

473

.format(address, fingerprint))

489

self.log_message(("Client with address %s and fingerprint %s"

490

" could not be found" % (address,

491

fingerprint)))

474

492

475

493

def rebuild(self):

476

494

"""This rebuilds the User Interface.

529

547

client = self.clients_dict[path]

530

548

except KeyError:

531

549

# not found?

532

self.log_message("Unknown client {0!r} ({1!r}) removed"

533

.format(name, path))

550

self.log_message("Unknown client %r (%r) removed", name,

551

path)

534

552

return

535

553

client.delete()

536

554

617

635

logger

618

636

=self.log_message),

619

637

path=path)

620

638

621

639

self.refresh()

622

640

self._input_callback_tag = (gobject.io_add_watch

623

641

(sys.stdin.fileno(),