/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-monitor

  • Committer: Teddy Hogeborn
  • Date: 2015-08-10 07:34:37 UTC
  • Revision ID: teddy@recompile.se-20150810073437-3m8jgt13nqric6vf
Revert change to D-Bus API.

The D-Bus API signal CheckerCompleted is documented to provide a
wait(2) status value.  Since the server switched to using subprocess
to run checkers, it no longer has access to a wait(2) status value.  A
previous change to work around this made the D-Bus API incompatible.
Revert this change by constructing a fake wait(2) status value; this
keeps the D-Bus API stable.

* DBUS-API (CheckerCompleted): Revert incompatible change.
* mandos (ClientDBus.checker_callback): Construct fake wait(2) status.
* mandos-monitor (MandosClientWidget.checker_completed): Revert to
                                                         using
                                                         original API
                                                         with wait(2)
                                                         condition
                                                         value.

Show diffs side-by-side

added added

removed removed

Lines of Context:
3
3
4
4
# Mandos Monitor - Control and monitor the Mandos server
5
5
6
 
# Copyright © 2009-2014 Teddy Hogeborn
7
 
# Copyright © 2009-2014 Björn Påhlsson
 
6
# Copyright © 2009-2015 Teddy Hogeborn
 
7
# Copyright © 2009-2015 Björn Påhlsson
8
8
9
9
# This program is free software: you can redistribute it and/or modify
10
10
# it under the terms of the GNU General Public License as published by
48
48
 
49
49
import locale
50
50
 
51
 
if sys.version_info[0] == 2:
 
51
if sys.version_info.major == 2:
52
52
    str = unicode
53
53
 
54
54
locale.setlocale(locale.LC_ALL, '')
60
60
domain = 'se.recompile'
61
61
server_interface = domain + '.Mandos'
62
62
client_interface = domain + '.Mandos.Client'
63
 
version = "1.6.7"
 
63
version = "1.6.9"
64
64
 
65
65
def isoformat_to_datetime(iso):
66
66
    "Parse an ISO 8601 date string to a datetime.datetime()"
87
87
        self.proxy = proxy_object # Mandos Client proxy object
88
88
        self.properties = dict() if properties is None else properties
89
89
        self.property_changed_match = (
90
 
            self.proxy.connect_to_signal("PropertyChanged",
91
 
                                         self._property_changed,
92
 
                                         client_interface,
 
90
            self.proxy.connect_to_signal("PropertiesChanged",
 
91
                                         self.properties_changed,
 
92
                                         dbus.PROPERTIES_IFACE,
93
93
                                         byte_arrays=True))
94
94
        
95
95
        if properties is None:
100
100
        
101
101
        super(MandosClientPropertyCache, self).__init__(**kwargs)
102
102
    
103
 
    def _property_changed(self, property, value):
104
 
        """Helper which takes positional arguments"""
105
 
        return self.property_changed(property=property, value=value)
106
 
    
107
 
    def property_changed(self, property=None, value=None):
108
 
        """This is called whenever we get a PropertyChanged signal
109
 
        It updates the changed property in the "properties" dict.
 
103
    def properties_changed(self, interface, properties, invalidated):
 
104
        """This is called whenever we get a PropertiesChanged signal
 
105
        It updates the changed properties in the "properties" dict.
110
106
        """
111
107
        # Update properties dict with new value
112
 
        self.properties[property] = value
 
108
        self.properties.update(properties)
113
109
    
114
110
    def delete(self):
115
111
        self.property_changed_match.remove()
161
157
                                         self.rejected,
162
158
                                         client_interface,
163
159
                                         byte_arrays=True))
164
 
        self.logger('Created client {0}'
 
160
        self.logger('Created client {}'
165
161
                    .format(self.properties["Name"]), level=0)
166
162
    
167
163
    def using_timer(self, flag):
179
175
    
180
176
    def checker_completed(self, exitstatus, condition, command):
181
177
        if exitstatus == 0:
182
 
            self.logger('Checker for client {0} (command "{1}")'
 
178
            self.logger('Checker for client {} (command "{}")'
183
179
                        ' succeeded'.format(self.properties["Name"],
184
180
                                            command), level=0)
185
181
            self.update()
186
182
            return
187
183
        # Checker failed
188
184
        if os.WIFEXITED(condition):
189
 
            self.logger('Checker for client {0} (command "{1}")'
190
 
                        ' failed with exit code {2}'
 
185
            self.logger('Checker for client {} (command "{}") failed'
 
186
                        ' with exit code {}'
191
187
                        .format(self.properties["Name"], command,
192
188
                                os.WEXITSTATUS(condition)))
193
189
        elif os.WIFSIGNALED(condition):
194
 
            self.logger('Checker for client {0} (command "{1}") was'
195
 
                        ' killed by signal {2}'
 
190
            self.logger('Checker for client {} (command "{}") was'
 
191
                        ' killed by signal {}'
196
192
                        .format(self.properties["Name"], command,
197
193
                                os.WTERMSIG(condition)))
198
 
        elif os.WCOREDUMP(condition):
199
 
            self.logger('Checker for client {0} (command "{1}")'
200
 
                        ' dumped core'
201
 
                        .format(self.properties["Name"], command))
202
 
        else:
203
 
            self.logger('Checker for client {0} completed'
204
 
                        ' mysteriously'
205
 
                        .format(self.properties["Name"]))
206
194
        self.update()
207
195
    
208
196
    def checker_started(self, command):
209
197
        """Server signals that a checker started."""
210
 
        self.logger('Client {0} started checker "{1}"'
 
198
        self.logger('Client {} started checker "{}"'
211
199
                    .format(self.properties["Name"],
212
200
                            command), level=0)
213
201
    
214
202
    def got_secret(self):
215
 
        self.logger('Client {0} received its secret'
 
203
        self.logger('Client {} received its secret'
216
204
                    .format(self.properties["Name"]))
217
205
    
218
206
    def need_approval(self, timeout, default):
219
207
        if not default:
220
 
            message = 'Client {0} needs approval within {1} seconds'
 
208
            message = 'Client {} needs approval within {} seconds'
221
209
        else:
222
 
            message = 'Client {0} will get its secret in {1} seconds'
 
210
            message = 'Client {} will get its secret in {} seconds'
223
211
        self.logger(message.format(self.properties["Name"],
224
212
                                   timeout/1000))
225
213
    
226
214
    def rejected(self, reason):
227
 
        self.logger('Client {0} was rejected; reason: {1}'
 
215
        self.logger('Client {} was rejected; reason: {}'
228
216
                    .format(self.properties["Name"], reason))
229
217
    
230
218
    def selectable(self):
274
262
            else:
275
263
                timer = datetime.timedelta()
276
264
            if self.properties["ApprovedByDefault"]:
277
 
                message = "Approval in {0}. (d)eny?"
 
265
                message = "Approval in {}. (d)eny?"
278
266
            else:
279
 
                message = "Denial in {0}. (a)pprove?"
 
267
                message = "Denial in {}. (a)pprove?"
280
268
            message = message.format(str(timer).rsplit(".", 1)[0])
281
269
            self.using_timer(True)
282
270
        elif self.properties["LastCheckerStatus"] != 0:
290
278
                timer = max(expires - datetime.datetime.utcnow(),
291
279
                            datetime.timedelta())
292
280
            message = ('A checker has failed! Time until client'
293
 
                       ' gets disabled: {0}'
 
281
                       ' gets disabled: {}'
294
282
                       .format(str(timer).rsplit(".", 1)[0]))
295
283
            self.using_timer(True)
296
284
        else:
297
285
            message = "enabled"
298
286
            self.using_timer(False)
299
 
        self._text = "{0}{1}".format(base, message)
 
287
        self._text = "{}{}".format(base, message)
300
288
        
301
289
        if not urwid.supports_unicode():
302
290
            self._text = self._text.encode("ascii", "replace")
341
329
        """Handle keys.
342
330
        This overrides the method from urwid.FlowWidget"""
343
331
        if key == "+":
344
 
            self.proxy.Enable(dbus_interface = client_interface,
345
 
                              ignore_reply=True)
 
332
            self.proxy.Set(client_interface, "Enabled",
 
333
                           dbus.Boolean(True), ignore_reply = True,
 
334
                           dbus_interface = dbus.PROPERTIES_IFACE)
346
335
        elif key == "-":
347
 
            self.proxy.Disable(dbus_interface = client_interface,
348
 
                               ignore_reply=True)
 
336
            self.proxy.Set(client_interface, "Enabled", False,
 
337
                           ignore_reply = True,
 
338
                           dbus_interface = dbus.PROPERTIES_IFACE)
349
339
        elif key == "a":
350
340
            self.proxy.Approve(dbus.Boolean(True, variant_level=1),
351
341
                               dbus_interface = client_interface,
359
349
                                                  .object_path,
360
350
                                                  ignore_reply=True)
361
351
        elif key == "s":
362
 
            self.proxy.StartChecker(dbus_interface = client_interface,
363
 
                                    ignore_reply=True)
 
352
            self.proxy.Set(client_interface, "CheckerRunning",
 
353
                           dbus.Boolean(True), ignore_reply = True,
 
354
                           dbus_interface = dbus.PROPERTIES_IFACE)
364
355
        elif key == "S":
365
 
            self.proxy.StopChecker(dbus_interface = client_interface,
366
 
                                   ignore_reply=True)
 
356
            self.proxy.Set(client_interface, "CheckerRunning",
 
357
                           dbus.Boolean(False), ignore_reply = True,
 
358
                           dbus_interface = dbus.PROPERTIES_IFACE)
367
359
        elif key == "C":
368
360
            self.proxy.CheckedOK(dbus_interface = client_interface,
369
361
                                 ignore_reply=True)
377
369
        else:
378
370
            return key
379
371
    
380
 
    def property_changed(self, property=None, **kwargs):
381
 
        """Call self.update() if old value is not new value.
 
372
    def properties_changed(self, interface, properties, invalidated):
 
373
        """Call self.update() if any properties changed.
382
374
        This overrides the method from MandosClientPropertyCache"""
383
 
        property_name = str(property)
384
 
        old_value = self.properties.get(property_name)
385
 
        super(MandosClientWidget, self).property_changed(
386
 
            property=property, **kwargs)
387
 
        if self.properties.get(property_name) != old_value:
 
375
        old_values = { key: self.properties.get(key)
 
376
                       for key in properties.keys() }
 
377
        super(MandosClientWidget, self).properties_changed(
 
378
            interface, properties, invalidated)
 
379
        if any(old_values[key] != self.properties.get(key)
 
380
               for key in old_values):
388
381
            self.update()
389
382
 
390
383
 
469
462
        self.main_loop = gobject.MainLoop()
470
463
    
471
464
    def client_not_found(self, fingerprint, address):
472
 
        self.log_message("Client with address {0} and fingerprint"
473
 
                         " {1} could not be found"
 
465
        self.log_message("Client with address {} and fingerprint {}"
 
466
                         " could not be found"
474
467
                         .format(address, fingerprint))
475
468
    
476
469
    def rebuild(self):
494
487
        if level < self.log_level:
495
488
            return
496
489
        timestamp = datetime.datetime.now().isoformat()
497
 
        self.log_message_raw("{0}: {1}".format(timestamp, message),
 
490
        self.log_message_raw("{}: {}".format(timestamp, message),
498
491
                             level=level)
499
492
    
500
493
    def log_message_raw(self, markup, level=1):
513
506
        """Toggle visibility of the log buffer."""
514
507
        self.log_visible = not self.log_visible
515
508
        self.rebuild()
516
 
        self.log_message("Log visibility changed to: {0}"
 
509
        self.log_message("Log visibility changed to: {}"
517
510
                         .format(self.log_visible), level=0)
518
511
    
519
512
    def change_log_display(self):
525
518
            self.log_wrap = "clip"
526
519
        for textwidget in self.log:
527
520
            textwidget.set_wrap_mode(self.log_wrap)
528
 
        self.log_message("Wrap mode: {0}".format(self.log_wrap),
 
521
        self.log_message("Wrap mode: {}".format(self.log_wrap),
529
522
                         level=0)
530
523
    
531
524
    def find_and_remove_client(self, path, name):
537
530
            client = self.clients_dict[path]
538
531
        except KeyError:
539
532
            # not found?
540
 
            self.log_message("Unknown client {0!r} ({1!r}) removed"
 
533
            self.log_message("Unknown client {!r} ({!r}) removed"
541
534
                             .format(name, path))
542
535
            return
543
536
        client.delete()
661
654
            elif key == "window resize":
662
655
                self.size = self.screen.get_cols_rows()
663
656
                self.refresh()
664
 
            elif key == "\f":  # Ctrl-L
 
657
            elif key == "ctrl l":
 
658
                self.screen.clear()
665
659
                self.refresh()
666
660
            elif key == "l" or key == "D":
667
661
                self.toggle_log_display()