1
#!/usr/bin/python3 -bbI
2
2
# -*- mode: python; coding: utf-8 -*-
4
4
# Mandos Monitor - Control and monitor the Mandos server
6
# Copyright © 2009-2016 Teddy Hogeborn
7
# Copyright © 2009-2016 Björn Påhlsson
9
# This program is free software: you can redistribute it and/or modify
10
# it under the terms of the GNU General Public License as published by
6
# Copyright © 2009-2019 Teddy Hogeborn
7
# Copyright © 2009-2019 Björn Påhlsson
9
# This file is part of Mandos.
11
# Mandos is free software: you can redistribute it and/or modify it
12
# under the terms of the GNU General Public License as published by
11
13
# the Free Software Foundation, either version 3 of the License, or
12
14
# (at your option) any later version.
14
# This program is distributed in the hope that it will be useful,
15
# but WITHOUT ANY WARRANTY; without even the implied warranty of
16
# Mandos is distributed in the hope that it will be useful, but
17
# WITHOUT ANY WARRANTY; without even the implied warranty of
16
18
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17
19
# GNU General Public License for more details.
19
21
# You should have received a copy of the GNU General Public License
20
# along with this program. If not, see
21
# <http://www.gnu.org/licenses/>.
22
# along with Mandos. If not, see <http://www.gnu.org/licenses/>.
23
24
# Contact the authors at <mandos@recompile.se>.
26
26
from __future__ import (division, absolute_import, print_function,
29
30
from future_builtins import *
30
31
except ImportError:
38
41
import urwid.curses_display
48
49
if sys.version_info.major == 2:
51
locale.setlocale(locale.LC_ALL, '')
54
logging.getLogger('dbus.proxies').setLevel(logging.CRITICAL)
54
# Show warnings by default
55
if not sys.warnoptions:
56
warnings.simplefilter("default")
58
log = logging.getLogger(os.path.basename(sys.argv[0]))
59
logging.basicConfig(level="NOTSET", # Show all messages
60
format="%(message)s") # Show basic log messages
62
logging.captureWarnings(True) # Show warnings via the logging system
64
locale.setlocale(locale.LC_ALL, "")
66
logging.getLogger("dbus.proxies").setLevel(logging.CRITICAL)
67
logging.getLogger("urwid").setLevel(logging.INFO)
56
69
# Some useful constants
57
domain = 'se.recompile'
58
server_interface = domain + '.Mandos'
59
client_interface = domain + '.Mandos.Client'
70
domain = "se.recompile"
71
server_interface = domain + ".Mandos"
72
client_interface = domain + ".Mandos.Client"
63
76
dbus.OBJECT_MANAGER_IFACE
64
77
except AttributeError:
65
78
dbus.OBJECT_MANAGER_IFACE = "org.freedesktop.DBus.ObjectManager"
67
81
def isoformat_to_datetime(iso):
68
82
"Parse an ISO 8601 date string to a datetime.datetime()"
80
int(second), # Whole seconds
81
int(fraction*1000000)) # Microseconds
83
class MandosClientPropertyCache(object):
94
int(second), # Whole seconds
95
int(fraction*1000000)) # Microseconds
98
class MandosClientPropertyCache:
84
99
"""This wraps a Mandos Client D-Bus proxy object, caches the
85
100
properties and calls a hook function when any of them are
88
103
def __init__(self, proxy_object=None, properties=None, **kwargs):
89
self.proxy = proxy_object # Mandos Client proxy object
104
self.proxy = proxy_object # Mandos Client proxy object
90
105
self.properties = dict() if properties is None else properties
91
106
self.property_changed_match = (
92
107
self.proxy.connect_to_signal("PropertiesChanged",
93
108
self.properties_changed,
94
109
dbus.PROPERTIES_IFACE,
95
110
byte_arrays=True))
97
112
if properties is None:
98
self.properties.update(
99
self.proxy.GetAll(client_interface,
101
= dbus.PROPERTIES_IFACE))
113
self.properties.update(self.proxy.GetAll(
115
dbus_interface=dbus.PROPERTIES_IFACE))
103
117
super(MandosClientPropertyCache, self).__init__(**kwargs)
105
119
def properties_changed(self, interface, properties, invalidated):
106
120
"""This is called whenever we get a PropertiesChanged signal
107
121
It updates the changed properties in the "properties" dict.
109
123
# Update properties dict with new value
110
124
if interface == client_interface:
111
125
self.properties.update(properties)
113
127
def delete(self):
114
128
self.property_changed_match.remove()
117
class MandosClientWidget(urwid.FlowWidget, MandosClientPropertyCache):
131
class MandosClientWidget(MandosClientPropertyCache, urwid.Widget):
118
132
"""A Mandos Client which is visible on the screen.
135
_sizing = frozenset(["flow"])
121
137
def __init__(self, server_proxy_object=None, update_hook=None,
122
delete_hook=None, logger=None, **kwargs):
138
delete_hook=None, **kwargs):
123
139
# Called on update
124
140
self.update_hook = update_hook
125
141
# Called on delete
126
142
self.delete_hook = delete_hook
127
143
# Mandos Server proxy object
128
144
self.server_proxy_object = server_proxy_object
132
146
self._update_timer_callback_tag = None
134
148
# The widget shown normally
135
149
self._text_widget = urwid.Text("")
136
150
# The widget shown when we have focus
161
175
client_interface,
162
176
byte_arrays=True))
163
self.logger('Created client {}'
164
.format(self.properties["Name"]), level=0)
177
log.debug("Created client %s", self.properties["Name"])
166
179
def using_timer(self, flag):
167
180
"""Call this method with True or False when timer should be
168
181
activated or deactivated.
170
183
if flag and self._update_timer_callback_tag is None:
171
184
# Will update the shown timer value every second
172
self._update_timer_callback_tag = (GLib.timeout_add
185
self._update_timer_callback_tag = (
186
GLib.timeout_add(1000,
187
glib_safely(self.update_timer)))
175
188
elif not (flag or self._update_timer_callback_tag is None):
176
189
GLib.source_remove(self._update_timer_callback_tag)
177
190
self._update_timer_callback_tag = None
179
192
def checker_completed(self, exitstatus, condition, command):
180
193
if exitstatus == 0:
181
self.logger('Checker for client {} (command "{}")'
182
' succeeded'.format(self.properties["Name"],
194
log.debug('Checker for client %s (command "%s")'
195
" succeeded", self.properties["Name"], command)
187
199
if os.WIFEXITED(condition):
188
self.logger('Checker for client {} (command "{}") failed'
190
.format(self.properties["Name"], command,
191
os.WEXITSTATUS(condition)))
200
log.info('Checker for client %s (command "%s") failed'
201
" with exit code %d", self.properties["Name"],
202
command, os.WEXITSTATUS(condition))
192
203
elif os.WIFSIGNALED(condition):
193
self.logger('Checker for client {} (command "{}") was'
194
' killed by signal {}'
195
.format(self.properties["Name"], command,
196
os.WTERMSIG(condition)))
204
log.info('Checker for client %s (command "%s") was'
205
" killed by signal %d", self.properties["Name"],
206
command, os.WTERMSIG(condition))
199
209
def checker_started(self, command):
200
210
"""Server signals that a checker started."""
201
self.logger('Client {} started checker "{}"'
202
.format(self.properties["Name"],
211
log.debug('Client %s started checker "%s"',
212
self.properties["Name"], command)
205
214
def got_secret(self):
206
self.logger('Client {} received its secret'
207
.format(self.properties["Name"]))
215
log.info("Client %s received its secret",
216
self.properties["Name"])
209
218
def need_approval(self, timeout, default):
211
message = 'Client {} needs approval within {} seconds'
220
message = "Client %s needs approval within %f seconds"
213
message = 'Client {} will get its secret in {} seconds'
214
self.logger(message.format(self.properties["Name"],
222
message = "Client %s will get its secret in %f seconds"
223
log.info(message, self.properties["Name"], timeout/1000)
217
225
def rejected(self, reason):
218
self.logger('Client {} was rejected; reason: {}'
219
.format(self.properties["Name"], reason))
226
log.info("Client %s was rejected; reason: %s",
227
self.properties["Name"], reason)
221
229
def selectable(self):
222
230
"""Make this a "selectable" widget.
223
This overrides the method from urwid.FlowWidget."""
231
This overrides the method from urwid.Widget."""
226
234
def rows(self, maxcolrow, focus=False):
227
235
"""How many rows this widget will occupy might depend on
228
236
whether we have focus or not.
229
This overrides the method from urwid.FlowWidget"""
237
This overrides the method from urwid.Widget"""
230
238
return self.current_widget(focus).rows(maxcolrow, focus=focus)
232
240
def current_widget(self, focus=False):
233
241
if focus or self.opened:
234
242
return self._focus_widget
235
243
return self._widget
237
245
def update(self):
238
246
"Called when what is visible on the screen should be updated."
239
247
# How to add standout mode to a style
240
with_standout = { "normal": "standout",
241
"bold": "bold-standout",
243
"underline-blink-standout",
244
"bold-underline-blink":
245
"bold-underline-blink-standout",
248
with_standout = {"normal": "standout",
249
"bold": "bold-standout",
251
"underline-blink-standout",
252
"bold-underline-blink":
253
"bold-underline-blink-standout",
248
256
# Rebuild focus and non-focus widgets using current properties
250
258
# Base part of a client. Name!
251
base = '{name}: '.format(name=self.properties["Name"])
259
base = "{name}: ".format(name=self.properties["Name"])
252
260
if not self.properties["Enabled"]:
253
261
message = "DISABLED"
254
262
self.using_timer(False)
255
263
elif self.properties["ApprovalPending"]:
256
timeout = datetime.timedelta(milliseconds
264
timeout = datetime.timedelta(
265
milliseconds=self.properties["ApprovalDelay"])
259
266
last_approval_request = isoformat_to_datetime(
260
267
self.properties["LastApprovalRequest"])
261
268
if last_approval_request is not None:
322
329
if self.delete_hook is not None:
323
330
self.delete_hook(self)
324
331
return super(MandosClientWidget, self).delete(**kwargs)
326
333
def render(self, maxcolrow, focus=False):
327
334
"""Render differently if we have focus.
328
This overrides the method from urwid.FlowWidget"""
335
This overrides the method from urwid.Widget"""
329
336
return self.current_widget(focus).render(maxcolrow,
332
339
def keypress(self, maxcolrow, key):
334
This overrides the method from urwid.FlowWidget"""
341
This overrides the method from urwid.Widget"""
336
343
self.proxy.Set(client_interface, "Enabled",
337
dbus.Boolean(True), ignore_reply = True,
338
dbus_interface = dbus.PROPERTIES_IFACE)
344
dbus.Boolean(True), ignore_reply=True,
345
dbus_interface=dbus.PROPERTIES_IFACE)
340
347
self.proxy.Set(client_interface, "Enabled", False,
342
dbus_interface = dbus.PROPERTIES_IFACE)
349
dbus_interface=dbus.PROPERTIES_IFACE)
344
351
self.proxy.Approve(dbus.Boolean(True, variant_level=1),
345
dbus_interface = client_interface,
352
dbus_interface=client_interface,
346
353
ignore_reply=True)
348
355
self.proxy.Approve(dbus.Boolean(False, variant_level=1),
349
dbus_interface = client_interface,
356
dbus_interface=client_interface,
350
357
ignore_reply=True)
351
358
elif key == "R" or key == "_" or key == "ctrl k":
352
359
self.server_proxy_object.RemoveClient(self.proxy
354
361
ignore_reply=True)
356
363
self.proxy.Set(client_interface, "CheckerRunning",
357
dbus.Boolean(True), ignore_reply = True,
358
dbus_interface = dbus.PROPERTIES_IFACE)
364
dbus.Boolean(True), ignore_reply=True,
365
dbus_interface=dbus.PROPERTIES_IFACE)
360
367
self.proxy.Set(client_interface, "CheckerRunning",
361
dbus.Boolean(False), ignore_reply = True,
362
dbus_interface = dbus.PROPERTIES_IFACE)
368
dbus.Boolean(False), ignore_reply=True,
369
dbus_interface=dbus.PROPERTIES_IFACE)
364
self.proxy.CheckedOK(dbus_interface = client_interface,
371
self.proxy.CheckedOK(dbus_interface=client_interface,
365
372
ignore_reply=True)
367
374
# elif key == "p" or key == "=":
395
def glib_safely(func, retval=True):
396
def safe_func(*args, **kwargs):
398
return func(*args, **kwargs)
388
405
class ConstrainedListBox(urwid.ListBox):
389
406
"""Like a normal urwid.ListBox, but will consume all "up" or
390
407
"down" key presses, thus not allowing any containing widgets to
391
408
use them as an excuse to shift focus away from this widget.
393
410
def keypress(self, *args, **kwargs):
394
ret = super(ConstrainedListBox, self).keypress(*args, **kwargs)
411
ret = (super(ConstrainedListBox, self)
412
.keypress(*args, **kwargs))
395
413
if ret in ("up", "down"):
400
class UserInterface(object):
401
419
"""This is the entire user interface - the whole screen
402
420
with boxes, lists of client widgets, etc.
404
def __init__(self, max_log_length=1000, log_level=1):
422
def __init__(self, max_log_length=1000):
405
423
DBusGMainLoop(set_as_default=True)
407
425
self.screen = urwid.curses_display.Screen()
409
427
self.screen.register_palette((
411
429
"default", "default", None),
426
445
"bold,underline,blink,standout", "default",
427
446
"bold,underline,blink,standout"),
430
449
if urwid.supports_unicode():
431
self.divider = "─" # \u2500
432
#self.divider = "━" # \u2501
450
self.divider = "─" # \u2500
434
#self.divider = "-" # \u002d
435
self.divider = "_" # \u005f
452
self.divider = "_" # \u005f
437
454
self.screen.start()
439
456
self.size = self.screen.get_cols_rows()
441
458
self.clients = urwid.SimpleListWalker([])
442
459
self.clients_dict = {}
444
461
# We will add Text widgets to this list
462
self.log = urwid.SimpleListWalker([])
446
463
self.max_log_length = max_log_length
448
self.log_level = log_level
450
465
# We keep a reference to the log widget so we can remove it
451
466
# from the ListWalker without it getting destroyed
452
467
self.logbox = ConstrainedListBox(self.log)
454
469
# This keeps track of whether self.uilist currently has
455
470
# self.logbox in it or not
456
471
self.log_visible = True
457
472
self.log_wrap = "any"
474
self.loghandler = UILogHandler(self)
460
self.log_message_raw(("bold",
461
"Mandos Monitor version " + version))
462
self.log_message_raw(("bold",
465
self.busname = domain + '.Mandos'
477
self.add_log_line(("bold",
478
"Mandos Monitor version " + version))
479
self.add_log_line(("bold", "q: Quit ?: Help"))
481
self.busname = domain + ".Mandos"
466
482
self.main_loop = GLib.MainLoop()
468
def client_not_found(self, fingerprint, address):
469
self.log_message("Client with address {} and fingerprint {}"
470
" could not be found"
471
.format(address, fingerprint))
484
def client_not_found(self, key_id, address):
485
log.info("Client with address %s and key ID %s could"
486
" not be found", address, key_id)
473
488
def rebuild(self):
474
489
"""This rebuilds the User Interface.
475
490
Call this when the widget layout needs to change"""
477
#self.uilist.append(urwid.ListBox(self.clients))
492
# self.uilist.append(urwid.ListBox(self.clients))
478
493
self.uilist.append(urwid.Frame(ConstrainedListBox(self.
480
#header=urwid.Divider(),
495
# header=urwid.Divider(),
483
urwid.Divider(div_char=
497
footer=urwid.Divider(
498
div_char=self.divider)))
485
499
if self.log_visible:
486
500
self.uilist.append(self.logbox)
487
501
self.topwidget = urwid.Pile(self.uilist)
489
def log_message(self, message, level=1):
490
"""Log message formatted with timestamp"""
491
if level < self.log_level:
493
timestamp = datetime.datetime.now().isoformat()
494
self.log_message_raw("{}: {}".format(timestamp, message),
497
def log_message_raw(self, markup, level=1):
498
"""Add a log message to the log buffer."""
499
if level < self.log_level:
503
def add_log_line(self, markup):
501
504
self.log.append(urwid.Text(markup, wrap=self.log_wrap))
502
if (self.max_log_length
503
and len(self.log) > self.max_log_length):
504
del self.log[0:len(self.log)-self.max_log_length-1]
505
self.logbox.set_focus(len(self.logbox.body.contents),
505
if self.max_log_length:
506
if len(self.log) > self.max_log_length:
507
del self.log[0:(len(self.log) - self.max_log_length)]
508
self.logbox.set_focus(len(self.logbox.body.contents)-1,
506
509
coming_from="above")
509
512
def toggle_log_display(self):
510
513
"""Toggle visibility of the log buffer."""
511
514
self.log_visible = not self.log_visible
513
self.log_message("Log visibility changed to: {}"
514
.format(self.log_visible), level=0)
516
log.debug("Log visibility changed to: %s", self.log_visible)
516
518
def change_log_display(self):
517
519
"""Change type of log display.
518
520
Currently, this toggles wrapping of text lines."""
574
567
self.clients_dict[path] = client
575
568
self.clients.sort(key=lambda c: c.properties["Name"])
578
571
def remove_client(self, client, path=None):
579
572
self.clients.remove(client)
581
574
path = client.proxy.object_path
582
575
del self.clients_dict[path]
585
578
def refresh(self):
586
579
"""Redraw the screen"""
587
580
canvas = self.topwidget.render(self.size, focus=True)
588
581
self.screen.draw_screen(self.size, canvas)
591
584
"""Start the main loop and exit when it's done."""
585
log.addHandler(self.loghandler)
586
self.orig_log_propagate = log.propagate
587
log.propagate = False
588
self.orig_log_level = log.level
592
590
self.bus = dbus.SystemBus()
593
591
mandos_dbus_objc = self.bus.get_object(
594
592
self.busname, "/", follow_name_owner_changes=True)
595
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
593
self.mandos_serv = dbus.Interface(
594
mandos_dbus_objc, dbus_interface=server_interface)
599
596
mandos_clients = (self.mandos_serv
600
597
.GetAllClientsWithProperties())
601
598
if not mandos_clients:
602
self.log_message_raw(("bold", "Note: Server has no clients."))
599
log.warning("Note: Server has no clients.")
603
600
except dbus.exceptions.DBusException:
604
self.log_message_raw(("bold", "Note: No Mandos server running."))
601
log.warning("Note: No Mandos server running.")
605
602
mandos_clients = dbus.Dictionary()
607
604
(self.mandos_serv
608
605
.connect_to_signal("InterfacesRemoved",
609
606
self.find_and_remove_client,
611
= dbus.OBJECT_MANAGER_IFACE,
607
dbus_interface=dbus.OBJECT_MANAGER_IFACE,
612
608
byte_arrays=True))
613
609
(self.mandos_serv
614
610
.connect_to_signal("InterfacesAdded",
615
611
self.add_new_client,
617
= dbus.OBJECT_MANAGER_IFACE,
612
dbus_interface=dbus.OBJECT_MANAGER_IFACE,
618
613
byte_arrays=True))
619
614
(self.mandos_serv
620
615
.connect_to_signal("ClientNotFound",
624
619
for path, client in mandos_clients.items():
625
620
client_proxy_object = self.bus.get_object(self.busname,
627
self.add_client(MandosClientWidget(server_proxy_object
630
=client_proxy_object,
622
self.add_client(MandosClientWidget(
623
server_proxy_object=self.mandos_serv,
624
proxy_object=client_proxy_object,
626
update_hook=self.refresh,
627
delete_hook=self.remove_client),
641
self._input_callback_tag = (GLib.io_add_watch
631
self._input_callback_tag = (
633
GLib.IOChannel.unix_new(sys.stdin.fileno()),
634
GLib.PRIORITY_DEFAULT, GLib.IO_IN,
635
glib_safely(self.process_input)))
645
636
self.main_loop.run()
646
637
# Main loop has finished, we should close everything now
647
638
GLib.source_remove(self._input_callback_tag)
639
with warnings.catch_warnings():
640
warnings.simplefilter("ignore", BytesWarning)
651
644
self.main_loop.quit()
645
log.removeHandler(self.loghandler)
646
log.propagate = self.orig_log_propagate
653
648
def process_input(self, source, condition):
654
649
keys = self.screen.get_input()
655
translations = { "ctrl n": "down", # Emacs
656
"ctrl p": "up", # Emacs
657
"ctrl v": "page down", # Emacs
658
"meta v": "page up", # Emacs
659
" ": "page down", # less
660
"f": "page down", # less
661
"b": "page up", # less
650
translations = {"ctrl n": "down", # Emacs
651
"ctrl p": "up", # Emacs
652
"ctrl v": "page down", # Emacs
653
"meta v": "page up", # Emacs
654
" ": "page down", # less
655
"f": "page down", # less
656
"b": "page up", # less
667
662
key = translations[key]
668
663
except KeyError: # :-)
671
666
if key == "q" or key == "Q":
715
709
self.topwidget.set_focus(self.logbox)
718
if self.log_level == 0:
720
self.log_message("Verbose mode: Off")
712
if log.level < logging.INFO:
713
log.setLevel(logging.INFO)
714
log.info("Verbose mode: Off")
723
self.log_message("Verbose mode: On")
724
#elif (key == "end" or key == "meta >" or key == "G"
726
# pass # xxx end-of-buffer
727
#elif (key == "home" or key == "meta <" or key == "g"
729
# pass # xxx beginning-of-buffer
730
#elif key == "ctrl e" or key == "$":
731
# pass # xxx move-end-of-line
732
#elif key == "ctrl a" or key == "^":
733
# pass # xxx move-beginning-of-line
734
#elif key == "ctrl b" or key == "meta (" or key == "h":
736
#elif key == "ctrl f" or key == "meta )" or key == "l":
739
# pass # scroll up log
741
# pass # scroll down log
716
log.setLevel(logging.NOTSET)
717
log.info("Verbose mode: On")
718
# elif (key == "end" or key == "meta >" or key == "G"
720
# pass # xxx end-of-buffer
721
# elif (key == "home" or key == "meta <" or key == "g"
723
# pass # xxx beginning-of-buffer
724
# elif key == "ctrl e" or key == "$":
725
# pass # xxx move-end-of-line
726
# elif key == "ctrl a" or key == "^":
727
# pass # xxx move-beginning-of-line
728
# elif key == "ctrl b" or key == "meta (" or key == "h":
730
# elif key == "ctrl f" or key == "meta )" or key == "l":
733
# pass # scroll up log
735
# pass # scroll down log
742
736
elif self.topwidget.selectable():
743
737
self.topwidget.keypress(self.size, key)
742
class UILogHandler(logging.Handler):
743
def __init__(self, ui, *args, **kwargs):
745
super(UILogHandler, self).__init__(*args, **kwargs)
747
logging.Formatter("%(asctime)s: %(message)s"))
748
def emit(self, record):
749
msg = self.format(record)
750
if record.levelno > logging.INFO:
752
self.ui.add_log_line(msg)
747
755
ui = UserInterface()
750
758
except KeyboardInterrupt:
752
except Exception as e:
753
ui.log_message(str(e))
759
with warnings.catch_warnings():
760
warnings.filterwarnings("ignore", "", BytesWarning)
763
with warnings.catch_warnings():
764
warnings.filterwarnings("ignore", "", BytesWarning)