/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos

  • Committer: teddy at recompile
  • Date: 2019-12-04 23:52:20 UTC
  • Revision ID: teddy@recompile.se-20191204235220-yn88brp0scmqwy2t
Remove non-project-specific pattern from .bzrignore

Only project-specific patterns should be in the .bzrignore file.
Other generic patterns should be in the ~/.config/breezy/ignore and
~/.bazaar/ignore files.

* .bzrignore (.tramp_history): Remove.

Show diffs side-by-side

added added

removed removed

Lines of Context:
mandos
11
11
# "AvahiService" class, and some lines in "main".
12
12
#
13
13
# Everything else is
14
 
# Copyright © 2008-2020 Teddy Hogeborn
15
 
# Copyright © 2008-2020 Björn Påhlsson
 
14
# Copyright © 2008-2019 Teddy Hogeborn
 
15
# Copyright © 2008-2019 Björn Påhlsson
16
16
#
17
17
# This file is part of Mandos.
18
18
#
78
78
import collections
79
79
import codecs
80
80
import unittest
81
 
import random
82
 
import shlex
83
81
 
84
82
import dbus
85
83
import dbus.service
95
93
    __metaclass__ = type
96
94
    str = unicode
97
95
 
98
 
# Add collections.abc.Callable if it does not exist
99
 
try:
100
 
    collections.abc.Callable
101
 
except AttributeError:
102
 
    class abc:
103
 
        Callable = collections.Callable
104
 
    collections.abc = abc
105
 
    del abc
106
 
 
107
 
# Add shlex.quote if it does not exist
108
 
try:
109
 
    shlex.quote
110
 
except AttributeError:
111
 
    shlex.quote = re.escape
112
 
 
113
96
# Show warnings by default
114
97
if not sys.warnoptions:
115
98
    import warnings
143
126
if sys.version_info < (3, 2):
144
127
    configparser.Configparser = configparser.SafeConfigParser
145
128
 
146
 
version = "1.8.14"
 
129
version = "1.8.9"
147
130
stored_state_file = "clients.pickle"
148
131
 
149
132
logger = logging.getLogger()
524
507
class AvahiServiceToSyslog(AvahiService):
525
508
    def rename(self, *args, **kwargs):
526
509
        """Add the new name to the syslog messages"""
527
 
        ret = super(AvahiServiceToSyslog, self).rename(*args,
528
 
                                                       **kwargs)
 
510
        ret = super(AvahiServiceToSyslog, self).rename(*args, **kwargs)
529
511
        syslogger.setFormatter(logging.Formatter(
530
512
            'Mandos ({}) [%(process)d]: %(levelname)s: %(message)s'
531
513
            .format(self.name)))
775
757
 
776
758
        x509_crt_fmt_t = ctypes.c_int
777
759
 
778
 
        # All the function declarations below are from
779
 
        # gnutls/abstract.h
 
760
        # All the function declarations below are from gnutls/abstract.h
780
761
        pubkey_init = _library.gnutls_pubkey_init
781
762
        pubkey_init.argtypes = [ctypes.POINTER(pubkey_t)]
782
763
        pubkey_init.restype = _error_code
796
777
        pubkey_deinit.argtypes = [pubkey_t]
797
778
        pubkey_deinit.restype = None
798
779
    else:
799
 
        # All the function declarations below are from
800
 
        # gnutls/openpgp.h
 
780
        # All the function declarations below are from gnutls/openpgp.h
801
781
 
802
782
        openpgp_crt_init = _library.gnutls_openpgp_crt_init
803
783
        openpgp_crt_init.argtypes = [ctypes.POINTER(openpgp_crt_t)]
809
789
                                       openpgp_crt_fmt_t]
810
790
        openpgp_crt_import.restype = _error_code
811
791
 
812
 
        openpgp_crt_verify_self = \
813
 
            _library.gnutls_openpgp_crt_verify_self
814
 
        openpgp_crt_verify_self.argtypes = [
815
 
            openpgp_crt_t,
816
 
            ctypes.c_uint,
817
 
            ctypes.POINTER(ctypes.c_uint),
818
 
        ]
 
792
        openpgp_crt_verify_self = _library.gnutls_openpgp_crt_verify_self
 
793
        openpgp_crt_verify_self.argtypes = [openpgp_crt_t, ctypes.c_uint,
 
794
                                            ctypes.POINTER(ctypes.c_uint)]
819
795
        openpgp_crt_verify_self.restype = _error_code
820
796
 
821
797
        openpgp_crt_deinit = _library.gnutls_openpgp_crt_deinit
1059
1035
        if self.checker_initiator_tag is not None:
1060
1036
            GLib.source_remove(self.checker_initiator_tag)
1061
1037
        self.checker_initiator_tag = GLib.timeout_add(
1062
 
            random.randrange(int(self.interval.total_seconds() * 1000
1063
 
                                 + 1)),
 
1038
            int(self.interval.total_seconds() * 1000),
1064
1039
            self.start_checker)
1065
1040
        # Schedule a disable() when 'timeout' has passed
1066
1041
        if self.disable_initiator_tag is not None:
1141
1116
        if self.checker is None:
1142
1117
            # Escape attributes for the shell
1143
1118
            escaped_attrs = {
1144
 
                attr: shlex.quote(str(getattr(self, attr)))
 
1119
                attr: re.escape(str(getattr(self, attr)))
1145
1120
                for attr in self.runtime_expansions}
1146
1121
            try:
1147
1122
                command = self.checker_command % escaped_attrs
2475
2450
        buf = ctypes.create_string_buffer(32)
2476
2451
        buf_len = ctypes.c_size_t(len(buf))
2477
2452
        # Get the key ID from the raw public key into the buffer
2478
 
        gnutls.pubkey_get_key_id(
2479
 
            pubkey,
2480
 
            gnutls.KEYID_USE_SHA256,
2481
 
            ctypes.cast(ctypes.byref(buf),
2482
 
                        ctypes.POINTER(ctypes.c_ubyte)),
2483
 
            ctypes.byref(buf_len))
 
2453
        gnutls.pubkey_get_key_id(pubkey,
 
2454
                                 gnutls.KEYID_USE_SHA256,
 
2455
                                 ctypes.cast(ctypes.byref(buf),
 
2456
                                             ctypes.POINTER(ctypes.c_ubyte)),
 
2457
                                 ctypes.byref(buf_len))
2484
2458
        # Deinit the certificate
2485
2459
        gnutls.pubkey_deinit(pubkey)
2486
2460
 
2731
2705
            address = request[3]
2732
2706
 
2733
2707
            for c in self.clients.values():
2734
 
                if key_id == ("E3B0C44298FC1C149AFBF4C8996FB924"
2735
 
                              "27AE41E4649B934CA495991B7852B855"):
 
2708
                if key_id == "E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855":
2736
2709
                    continue
2737
2710
                if key_id and c.key_id == key_id:
2738
2711
                    client = c
2773
2746
        if command == 'getattr':
2774
2747
            attrname = request[1]
2775
2748
            if isinstance(client_object.__getattribute__(attrname),
2776
 
                          collections.abc.Callable):
 
2749
                          collections.Callable):
2777
2750
                parent_pipe.send(('function', ))
2778
2751
            else:
2779
2752
                parent_pipe.send((
2790
2763
def rfc3339_duration_to_delta(duration):
2791
2764
    """Parse an RFC 3339 "duration" and return a datetime.timedelta
2792
2765
 
2793
 
    >>> timedelta = datetime.timedelta
2794
 
    >>> rfc3339_duration_to_delta("P7D") == timedelta(7)
2795
 
    True
2796
 
    >>> rfc3339_duration_to_delta("PT60S") == timedelta(0, 60)
2797
 
    True
2798
 
    >>> rfc3339_duration_to_delta("PT60M") == timedelta(0, 3600)
2799
 
    True
2800
 
    >>> rfc3339_duration_to_delta("PT24H") == timedelta(1)
2801
 
    True
2802
 
    >>> rfc3339_duration_to_delta("P1W") == timedelta(7)
2803
 
    True
2804
 
    >>> rfc3339_duration_to_delta("PT5M30S") == timedelta(0, 330)
2805
 
    True
2806
 
    >>> rfc3339_duration_to_delta("P1DT3M20S") == timedelta(1, 200)
2807
 
    True
2808
 
    >>> del timedelta
 
2766
    >>> rfc3339_duration_to_delta("P7D") == datetime.timedelta(7)
 
2767
    True
 
2768
    >>> rfc3339_duration_to_delta("PT60S") == datetime.timedelta(0, 60)
 
2769
    True
 
2770
    >>> rfc3339_duration_to_delta("PT60M") == datetime.timedelta(0, 3600)
 
2771
    True
 
2772
    >>> rfc3339_duration_to_delta("PT24H") == datetime.timedelta(1)
 
2773
    True
 
2774
    >>> rfc3339_duration_to_delta("P1W") == datetime.timedelta(7)
 
2775
    True
 
2776
    >>> rfc3339_duration_to_delta("PT5M30S") == datetime.timedelta(0, 330)
 
2777
    True
 
2778
    >>> rfc3339_duration_to_delta("P1DT3M20S") == datetime.timedelta(1, 200)
 
2779
    True
2809
2780
    """
2810
2781
 
2811
2782
    # Parsing an RFC 3339 duration with regular expressions is not