1
#!/usr/bin/python3 -bbI
2
2
# -*- mode: python; coding: utf-8 -*-
4
4
# Mandos Monitor - Control and monitor the Mandos server
6
# Copyright © 2009-2019 Teddy Hogeborn
7
# Copyright © 2009-2019 Björn Påhlsson
9
# This file is part of Mandos.
11
# Mandos is free software: you can redistribute it and/or modify it
12
# under the terms of the GNU General Public License as published by
6
# Copyright © 2009-2014 Teddy Hogeborn
7
# Copyright © 2009-2014 Björn Påhlsson
9
# This program is free software: you can redistribute it and/or modify
10
# it under the terms of the GNU General Public License as published by
13
11
# the Free Software Foundation, either version 3 of the License, or
14
12
# (at your option) any later version.
16
# Mandos is distributed in the hope that it will be useful, but
17
# WITHOUT ANY WARRANTY; without even the implied warranty of
14
# This program is distributed in the hope that it will be useful,
15
# but WITHOUT ANY WARRANTY; without even the implied warranty of
18
16
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19
17
# GNU General Public License for more details.
21
19
# You should have received a copy of the GNU General Public License
22
# along with Mandos. If not, see <http://www.gnu.org/licenses/>.
20
# along with this program. If not, see
21
# <http://www.gnu.org/licenses/>.
24
23
# Contact the authors at <mandos@recompile.se>.
26
26
from __future__ import (division, absolute_import, print_function,
30
29
from future_builtins import *
31
30
except ImportError:
41
38
import urwid.curses_display
44
41
from dbus.mainloop.glib import DBusGMainLoop
45
from gi.repository import GLib
45
from gi.repository import GObject as gobject
49
51
if sys.version_info.major == 2:
54
# Show warnings by default
55
if not sys.warnoptions:
56
warnings.simplefilter("default")
58
log = logging.getLogger(os.path.basename(sys.argv[0]))
59
logging.basicConfig(level="NOTSET", # Show all messages
60
format="%(message)s") # Show basic log messages
62
logging.captureWarnings(True) # Show warnings via the logging system
64
locale.setlocale(locale.LC_ALL, "")
66
logging.getLogger("dbus.proxies").setLevel(logging.CRITICAL)
54
locale.setlocale(locale.LC_ALL, '')
57
logging.getLogger('dbus.proxies').setLevel(logging.CRITICAL)
68
59
# Some useful constants
69
domain = "se.recompile"
70
server_interface = domain + ".Mandos"
71
client_interface = domain + ".Mandos.Client"
75
dbus.OBJECT_MANAGER_IFACE
76
except AttributeError:
77
dbus.OBJECT_MANAGER_IFACE = "org.freedesktop.DBus.ObjectManager"
60
domain = 'se.recompile'
61
server_interface = domain + '.Mandos'
62
client_interface = domain + '.Mandos.Client'
80
65
def isoformat_to_datetime(iso):
81
66
"Parse an ISO 8601 date string to a datetime.datetime()"
93
int(second), # Whole seconds
94
int(fraction*1000000)) # Microseconds
97
class MandosClientPropertyCache:
78
int(second), # Whole seconds
79
int(fraction*1000000)) # Microseconds
81
class MandosClientPropertyCache(object):
98
82
"""This wraps a Mandos Client D-Bus proxy object, caches the
99
83
properties and calls a hook function when any of them are
102
86
def __init__(self, proxy_object=None, properties=None, **kwargs):
103
self.proxy = proxy_object # Mandos Client proxy object
87
self.proxy = proxy_object # Mandos Client proxy object
104
88
self.properties = dict() if properties is None else properties
105
89
self.property_changed_match = (
106
90
self.proxy.connect_to_signal("PropertiesChanged",
107
91
self.properties_changed,
108
92
dbus.PROPERTIES_IFACE,
109
93
byte_arrays=True))
111
95
if properties is None:
112
self.properties.update(self.proxy.GetAll(
114
dbus_interface=dbus.PROPERTIES_IFACE))
96
self.properties.update(
97
self.proxy.GetAll(client_interface,
99
= dbus.PROPERTIES_IFACE))
116
101
super(MandosClientPropertyCache, self).__init__(**kwargs)
118
103
def properties_changed(self, interface, properties, invalidated):
119
104
"""This is called whenever we get a PropertiesChanged signal
120
105
It updates the changed properties in the "properties" dict.
122
107
# Update properties dict with new value
123
if interface == client_interface:
124
self.properties.update(properties)
108
self.properties.update(properties)
126
110
def delete(self):
127
111
self.property_changed_match.remove()
172
158
client_interface,
173
159
byte_arrays=True))
174
log.debug("Created client %s", self.properties["Name"])
160
self.logger('Created client {}'
161
.format(self.properties["Name"]), level=0)
176
163
def using_timer(self, flag):
177
164
"""Call this method with True or False when timer should be
178
165
activated or deactivated.
180
167
if flag and self._update_timer_callback_tag is None:
181
168
# Will update the shown timer value every second
182
self._update_timer_callback_tag = (
183
GLib.timeout_add(1000,
184
glib_safely(self.update_timer)))
169
self._update_timer_callback_tag = (gobject.timeout_add
185
172
elif not (flag or self._update_timer_callback_tag is None):
186
GLib.source_remove(self._update_timer_callback_tag)
173
gobject.source_remove(self._update_timer_callback_tag)
187
174
self._update_timer_callback_tag = None
189
176
def checker_completed(self, exitstatus, condition, command):
190
177
if exitstatus == 0:
191
log.debug('Checker for client %s (command "%s")'
192
" succeeded", self.properties["Name"], command)
178
self.logger('Checker for client {} (command "{}")'
179
' succeeded'.format(self.properties["Name"],
196
184
if os.WIFEXITED(condition):
197
log.info('Checker for client %s (command "%s") failed'
198
" with exit code %d", self.properties["Name"],
199
command, os.WEXITSTATUS(condition))
185
self.logger('Checker for client {} (command "{}") failed'
187
.format(self.properties["Name"], command,
188
os.WEXITSTATUS(condition)))
200
189
elif os.WIFSIGNALED(condition):
201
log.info('Checker for client %s (command "%s") was'
202
" killed by signal %d", self.properties["Name"],
203
command, os.WTERMSIG(condition))
190
self.logger('Checker for client {} (command "{}") was'
191
' killed by signal {}'
192
.format(self.properties["Name"], command,
193
os.WTERMSIG(condition)))
194
elif os.WCOREDUMP(condition):
195
self.logger('Checker for client {} (command "{}") dumped'
196
' core'.format(self.properties["Name"],
199
self.logger('Checker for client {} completed'
201
.format(self.properties["Name"]))
206
204
def checker_started(self, command):
207
205
"""Server signals that a checker started."""
208
log.debug('Client %s started checker "%s"',
209
self.properties["Name"], command)
206
self.logger('Client {} started checker "{}"'
207
.format(self.properties["Name"],
211
210
def got_secret(self):
212
log.info("Client %s received its secret",
213
self.properties["Name"])
211
self.logger('Client {} received its secret'
212
.format(self.properties["Name"]))
215
214
def need_approval(self, timeout, default):
217
message = "Client %s needs approval within %f seconds"
216
message = 'Client {} needs approval within {} seconds'
219
message = "Client %s will get its secret in %f seconds"
220
log.info(message, self.properties["Name"], timeout/1000)
218
message = 'Client {} will get its secret in {} seconds'
219
self.logger(message.format(self.properties["Name"],
222
222
def rejected(self, reason):
223
log.info("Client %s was rejected; reason: %s",
224
self.properties["Name"], reason)
223
self.logger('Client {} was rejected; reason: {}'
224
.format(self.properties["Name"], reason))
226
226
def selectable(self):
227
227
"""Make this a "selectable" widget.
228
228
This overrides the method from urwid.FlowWidget."""
231
231
def rows(self, maxcolrow, focus=False):
232
232
"""How many rows this widget will occupy might depend on
233
233
whether we have focus or not.
234
234
This overrides the method from urwid.FlowWidget"""
235
235
return self.current_widget(focus).rows(maxcolrow, focus=focus)
237
237
def current_widget(self, focus=False):
238
238
if focus or self.opened:
239
239
return self._focus_widget
240
240
return self._widget
242
242
def update(self):
243
243
"Called when what is visible on the screen should be updated."
244
244
# How to add standout mode to a style
245
with_standout = {"normal": "standout",
246
"bold": "bold-standout",
248
"underline-blink-standout",
249
"bold-underline-blink":
250
"bold-underline-blink-standout",
245
with_standout = { "normal": "standout",
246
"bold": "bold-standout",
248
"underline-blink-standout",
249
"bold-underline-blink":
250
"bold-underline-blink-standout",
253
253
# Rebuild focus and non-focus widgets using current properties
255
255
# Base part of a client. Name!
256
base = "{name}: ".format(name=self.properties["Name"])
256
base = '{name}: '.format(name=self.properties["Name"])
257
257
if not self.properties["Enabled"]:
258
258
message = "DISABLED"
259
259
self.using_timer(False)
260
260
elif self.properties["ApprovalPending"]:
261
timeout = datetime.timedelta(
262
milliseconds=self.properties["ApprovalDelay"])
261
timeout = datetime.timedelta(milliseconds
263
264
last_approval_request = isoformat_to_datetime(
264
265
self.properties["LastApprovalRequest"])
265
266
if last_approval_request is not None:
326
326
if self.delete_hook is not None:
327
327
self.delete_hook(self)
328
328
return super(MandosClientWidget, self).delete(**kwargs)
330
330
def render(self, maxcolrow, focus=False):
331
331
"""Render differently if we have focus.
332
332
This overrides the method from urwid.FlowWidget"""
333
333
return self.current_widget(focus).render(maxcolrow,
336
336
def keypress(self, maxcolrow, key):
338
338
This overrides the method from urwid.FlowWidget"""
340
self.proxy.Set(client_interface, "Enabled",
341
dbus.Boolean(True), ignore_reply=True,
342
dbus_interface=dbus.PROPERTIES_IFACE)
340
self.proxy.Enable(dbus_interface = client_interface,
344
self.proxy.Set(client_interface, "Enabled", False,
346
dbus_interface=dbus.PROPERTIES_IFACE)
343
self.proxy.Disable(dbus_interface = client_interface,
348
346
self.proxy.Approve(dbus.Boolean(True, variant_level=1),
349
dbus_interface=client_interface,
347
dbus_interface = client_interface,
350
348
ignore_reply=True)
352
350
self.proxy.Approve(dbus.Boolean(False, variant_level=1),
353
dbus_interface=client_interface,
351
dbus_interface = client_interface,
354
352
ignore_reply=True)
355
353
elif key == "R" or key == "_" or key == "ctrl k":
356
354
self.server_proxy_object.RemoveClient(self.proxy
358
356
ignore_reply=True)
360
self.proxy.Set(client_interface, "CheckerRunning",
361
dbus.Boolean(True), ignore_reply=True,
362
dbus_interface=dbus.PROPERTIES_IFACE)
358
self.proxy.StartChecker(dbus_interface = client_interface,
364
self.proxy.Set(client_interface, "CheckerRunning",
365
dbus.Boolean(False), ignore_reply=True,
366
dbus_interface=dbus.PROPERTIES_IFACE)
361
self.proxy.StopChecker(dbus_interface = client_interface,
368
self.proxy.CheckedOK(dbus_interface=client_interface,
364
self.proxy.CheckedOK(dbus_interface = client_interface,
369
365
ignore_reply=True)
371
367
# elif key == "p" or key == "=":
392
def glib_safely(func, retval=True):
393
def safe_func(*args, **kwargs):
395
return func(*args, **kwargs)
402
388
class ConstrainedListBox(urwid.ListBox):
403
389
"""Like a normal urwid.ListBox, but will consume all "up" or
404
390
"down" key presses, thus not allowing any containing widgets to
405
391
use them as an excuse to shift focus away from this widget.
407
393
def keypress(self, *args, **kwargs):
408
ret = (super(ConstrainedListBox, self)
409
.keypress(*args, **kwargs))
394
ret = super(ConstrainedListBox, self).keypress(*args, **kwargs)
410
395
if ret in ("up", "down"):
400
class UserInterface(object):
416
401
"""This is the entire user interface - the whole screen
417
402
with boxes, lists of client widgets, etc.
419
def __init__(self, max_log_length=1000):
404
def __init__(self, max_log_length=1000, log_level=1):
420
405
DBusGMainLoop(set_as_default=True)
422
407
self.screen = urwid.curses_display.Screen()
424
409
self.screen.register_palette((
426
411
"default", "default", None),
442
426
"bold,underline,blink,standout", "default",
443
427
"bold,underline,blink,standout"),
446
430
if urwid.supports_unicode():
447
self.divider = "─" # \u2500
431
self.divider = "─" # \u2500
432
#self.divider = "━" # \u2501
449
self.divider = "_" # \u005f
434
#self.divider = "-" # \u002d
435
self.divider = "_" # \u005f
451
437
self.screen.start()
453
439
self.size = self.screen.get_cols_rows()
455
441
self.clients = urwid.SimpleListWalker([])
456
442
self.clients_dict = {}
458
444
# We will add Text widgets to this list
459
self.log = urwid.SimpleListWalker([])
460
446
self.max_log_length = max_log_length
448
self.log_level = log_level
462
450
# We keep a reference to the log widget so we can remove it
463
451
# from the ListWalker without it getting destroyed
464
452
self.logbox = ConstrainedListBox(self.log)
466
454
# This keeps track of whether self.uilist currently has
467
455
# self.logbox in it or not
468
456
self.log_visible = True
469
457
self.log_wrap = "any"
471
self.loghandler = UILogHandler(self)
474
self.add_log_line(("bold",
475
"Mandos Monitor version " + version))
476
self.add_log_line(("bold", "q: Quit ?: Help"))
478
self.busname = domain + ".Mandos"
479
self.main_loop = GLib.MainLoop()
481
def client_not_found(self, key_id, address):
482
log.info("Client with address %s and key ID %s could"
483
" not be found", address, key_id)
460
self.log_message_raw(("bold",
461
"Mandos Monitor version " + version))
462
self.log_message_raw(("bold",
465
self.busname = domain + '.Mandos'
466
self.main_loop = gobject.MainLoop()
468
def client_not_found(self, fingerprint, address):
469
self.log_message("Client with address {} and fingerprint {}"
470
" could not be found"
471
.format(address, fingerprint))
485
473
def rebuild(self):
486
474
"""This rebuilds the User Interface.
487
475
Call this when the widget layout needs to change"""
489
# self.uilist.append(urwid.ListBox(self.clients))
477
#self.uilist.append(urwid.ListBox(self.clients))
490
478
self.uilist.append(urwid.Frame(ConstrainedListBox(self.
492
# header=urwid.Divider(),
480
#header=urwid.Divider(),
494
footer=urwid.Divider(
495
div_char=self.divider)))
483
urwid.Divider(div_char=
496
485
if self.log_visible:
497
486
self.uilist.append(self.logbox)
498
487
self.topwidget = urwid.Pile(self.uilist)
500
def add_log_line(self, markup):
489
def log_message(self, message, level=1):
490
"""Log message formatted with timestamp"""
491
if level < self.log_level:
493
timestamp = datetime.datetime.now().isoformat()
494
self.log_message_raw("{}: {}".format(timestamp, message),
497
def log_message_raw(self, markup, level=1):
498
"""Add a log message to the log buffer."""
499
if level < self.log_level:
501
501
self.log.append(urwid.Text(markup, wrap=self.log_wrap))
502
if self.max_log_length:
503
if len(self.log) > self.max_log_length:
504
del self.log[0:(len(self.log) - self.max_log_length)]
505
self.logbox.set_focus(len(self.logbox.body.contents)-1,
502
if (self.max_log_length
503
and len(self.log) > self.max_log_length):
504
del self.log[0:len(self.log)-self.max_log_length-1]
505
self.logbox.set_focus(len(self.logbox.body.contents),
506
506
coming_from="above")
509
509
def toggle_log_display(self):
510
510
"""Toggle visibility of the log buffer."""
511
511
self.log_visible = not self.log_visible
513
log.debug("Log visibility changed to: %s", self.log_visible)
513
self.log_message("Log visibility changed to: {}"
514
.format(self.log_visible), level=0)
515
516
def change_log_display(self):
516
517
"""Change type of log display.
517
518
Currently, this toggles wrapping of text lines."""
521
522
self.log_wrap = "clip"
522
523
for textwidget in self.log:
523
524
textwidget.set_wrap_mode(self.log_wrap)
524
log.debug("Wrap mode: %s", self.log_wrap)
526
def find_and_remove_client(self, path, interfaces):
525
self.log_message("Wrap mode: {}".format(self.log_wrap),
528
def find_and_remove_client(self, path, name):
527
529
"""Find a client by its object path and remove it.
529
This is connected to the InterfacesRemoved signal from the
531
This is connected to the ClientRemoved signal from the
530
532
Mandos server object."""
531
if client_interface not in interfaces:
532
# Not a Mandos client object; ignore
535
534
client = self.clients_dict[path]
538
log.warning("Unknown client %s removed", path)
537
self.log_message("Unknown client {!r} ({!r}) removed"
542
def add_new_client(self, path, ifs_and_props):
543
"""Find a client by its object path and remove it.
545
This is connected to the InterfacesAdded signal from the
546
Mandos server object.
548
if client_interface not in ifs_and_props:
549
# Not a Mandos client object; ignore
542
def add_new_client(self, path):
551
543
client_proxy_object = self.bus.get_object(self.busname, path)
552
self.add_client(MandosClientWidget(
553
server_proxy_object=self.mandos_serv,
554
proxy_object=client_proxy_object,
555
update_hook=self.refresh,
556
delete_hook=self.remove_client,
557
properties=dict(ifs_and_props[client_interface])),
544
self.add_client(MandosClientWidget(server_proxy_object
547
=client_proxy_object,
560
556
def add_client(self, client, path=None):
561
557
self.clients.append(client)
564
560
self.clients_dict[path] = client
565
561
self.clients.sort(key=lambda c: c.properties["Name"])
568
564
def remove_client(self, client, path=None):
569
565
self.clients.remove(client)
571
567
path = client.proxy.object_path
572
568
del self.clients_dict[path]
575
571
def refresh(self):
576
572
"""Redraw the screen"""
577
573
canvas = self.topwidget.render(self.size, focus=True)
578
574
self.screen.draw_screen(self.size, canvas)
581
577
"""Start the main loop and exit when it's done."""
582
log.addHandler(self.loghandler)
583
self.orig_log_propagate = log.propagate
584
log.propagate = False
585
self.orig_log_level = log.level
587
578
self.bus = dbus.SystemBus()
588
579
mandos_dbus_objc = self.bus.get_object(
589
580
self.busname, "/", follow_name_owner_changes=True)
590
self.mandos_serv = dbus.Interface(
591
mandos_dbus_objc, dbus_interface=server_interface)
581
self.mandos_serv = dbus.Interface(mandos_dbus_objc,
593
585
mandos_clients = (self.mandos_serv
594
586
.GetAllClientsWithProperties())
595
587
if not mandos_clients:
596
log.warning("Note: Server has no clients.")
588
self.log_message_raw(("bold", "Note: Server has no clients."))
597
589
except dbus.exceptions.DBusException:
598
log.warning("Note: No Mandos server running.")
590
self.log_message_raw(("bold", "Note: No Mandos server running."))
599
591
mandos_clients = dbus.Dictionary()
601
593
(self.mandos_serv
602
.connect_to_signal("InterfacesRemoved",
594
.connect_to_signal("ClientRemoved",
603
595
self.find_and_remove_client,
604
dbus_interface=dbus.OBJECT_MANAGER_IFACE,
596
dbus_interface=server_interface,
605
597
byte_arrays=True))
606
598
(self.mandos_serv
607
.connect_to_signal("InterfacesAdded",
599
.connect_to_signal("ClientAdded",
608
600
self.add_new_client,
609
dbus_interface=dbus.OBJECT_MANAGER_IFACE,
601
dbus_interface=server_interface,
610
602
byte_arrays=True))
611
603
(self.mandos_serv
612
604
.connect_to_signal("ClientNotFound",
616
608
for path, client in mandos_clients.items():
617
609
client_proxy_object = self.bus.get_object(self.busname,
619
self.add_client(MandosClientWidget(
620
server_proxy_object=self.mandos_serv,
621
proxy_object=client_proxy_object,
623
update_hook=self.refresh,
624
delete_hook=self.remove_client),
611
self.add_client(MandosClientWidget(server_proxy_object
614
=client_proxy_object,
628
self._input_callback_tag = (
630
GLib.IOChannel.unix_new(sys.stdin.fileno()),
631
GLib.PRIORITY_DEFAULT, GLib.IO_IN,
632
glib_safely(self.process_input)))
625
self._input_callback_tag = (gobject.io_add_watch
633
629
self.main_loop.run()
634
630
# Main loop has finished, we should close everything now
635
GLib.source_remove(self._input_callback_tag)
636
with warnings.catch_warnings():
637
warnings.simplefilter("ignore", BytesWarning)
631
gobject.source_remove(self._input_callback_tag)
641
635
self.main_loop.quit()
642
log.removeHandler(self.loghandler)
643
log.propagate = self.orig_log_propagate
645
637
def process_input(self, source, condition):
646
638
keys = self.screen.get_input()
647
translations = {"ctrl n": "down", # Emacs
648
"ctrl p": "up", # Emacs
649
"ctrl v": "page down", # Emacs
650
"meta v": "page up", # Emacs
651
" ": "page down", # less
652
"f": "page down", # less
653
"b": "page up", # less
639
translations = { "ctrl n": "down", # Emacs
640
"ctrl p": "up", # Emacs
641
"ctrl v": "page down", # Emacs
642
"meta v": "page up", # Emacs
643
" ": "page down", # less
644
"f": "page down", # less
645
"b": "page up", # less
659
651
key = translations[key]
660
652
except KeyError: # :-)
663
655
if key == "q" or key == "Q":
706
699
self.topwidget.set_focus(self.logbox)
709
if log.level < logging.INFO:
710
log.setLevel(logging.INFO)
711
log.info("Verbose mode: Off")
702
if self.log_level == 0:
704
self.log_message("Verbose mode: Off")
713
log.setLevel(logging.NOTSET)
714
log.info("Verbose mode: On")
715
# elif (key == "end" or key == "meta >" or key == "G"
717
# pass # xxx end-of-buffer
718
# elif (key == "home" or key == "meta <" or key == "g"
720
# pass # xxx beginning-of-buffer
721
# elif key == "ctrl e" or key == "$":
722
# pass # xxx move-end-of-line
723
# elif key == "ctrl a" or key == "^":
724
# pass # xxx move-beginning-of-line
725
# elif key == "ctrl b" or key == "meta (" or key == "h":
727
# elif key == "ctrl f" or key == "meta )" or key == "l":
730
# pass # scroll up log
732
# pass # scroll down log
707
self.log_message("Verbose mode: On")
708
#elif (key == "end" or key == "meta >" or key == "G"
710
# pass # xxx end-of-buffer
711
#elif (key == "home" or key == "meta <" or key == "g"
713
# pass # xxx beginning-of-buffer
714
#elif key == "ctrl e" or key == "$":
715
# pass # xxx move-end-of-line
716
#elif key == "ctrl a" or key == "^":
717
# pass # xxx move-beginning-of-line
718
#elif key == "ctrl b" or key == "meta (" or key == "h":
720
#elif key == "ctrl f" or key == "meta )" or key == "l":
723
# pass # scroll up log
725
# pass # scroll down log
733
726
elif self.topwidget.selectable():
734
727
self.topwidget.keypress(self.size, key)
739
class UILogHandler(logging.Handler):
740
def __init__(self, ui, *args, **kwargs):
742
super(UILogHandler, self).__init__(*args, **kwargs)
744
logging.Formatter("%(asctime)s: %(message)s"))
745
def emit(self, record):
746
msg = self.format(record)
747
if record.levelno > logging.INFO:
749
self.ui.add_log_line(msg)
752
731
ui = UserInterface()
755
734
except KeyboardInterrupt:
756
with warnings.catch_warnings():
757
warnings.filterwarnings("ignore", "", BytesWarning)
760
with warnings.catch_warnings():
761
warnings.filterwarnings("ignore", "", BytesWarning)
736
except Exception as e:
737
ui.log_message(str(e))