/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos-monitor

  • Committer: Teddy Hogeborn
  • Date: 2017-08-20 14:14:14 UTC
  • Revision ID: teddy@recompile.se-20170820141414-m034xuebg7ccaeui
Add some more restrictions to the systemd service file.

* mandos.service ([Service]/ProtectKernelTunables): New; set to "yes".
  ([Service]/ProtectControlGroups): - '' -

Show diffs side-by-side

added added

removed removed

Lines of Context:
mandos-monitor
 
1
#!/usr/bin/python
 
2
# -*- mode: python; coding: utf-8 -*-
 
3
#
 
4
# Mandos Monitor - Control and monitor the Mandos server
 
5
#
 
6
# Copyright © 2009-2017 Teddy Hogeborn
 
7
# Copyright © 2009-2017 Björn Påhlsson
 
8
#
 
9
# This program is free software: you can redistribute it and/or modify
 
10
# it under the terms of the GNU General Public License as published by
 
11
# the Free Software Foundation, either version 3 of the License, or
 
12
# (at your option) any later version.
 
13
#
 
14
#     This program is distributed in the hope that it will be useful,
 
15
#     but WITHOUT ANY WARRANTY; without even the implied warranty of
 
16
#     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 
17
#     GNU General Public License for more details.
 
18
#
 
19
# You should have received a copy of the GNU General Public License
 
20
# along with this program.  If not, see
 
21
# <http://www.gnu.org/licenses/>.
 
22
#
 
23
# Contact the authors at <mandos@recompile.se>.
 
24
#
 
25
 
 
26
from __future__ import (division, absolute_import, print_function,
 
27
                        unicode_literals)
 
28
try:
 
29
    from future_builtins import *
 
30
except ImportError:
 
31
    pass
 
32
 
 
33
import sys
 
34
import os
 
35
 
 
36
import datetime
 
37
 
 
38
import urwid.curses_display
 
39
import urwid
 
40
 
 
41
from dbus.mainloop.glib import DBusGMainLoop
 
42
from gi.repository import GLib
 
43
 
 
44
import dbus
 
45
 
 
46
import locale
 
47
 
 
48
import logging
 
49
 
 
50
if sys.version_info.major == 2:
 
51
    str = unicode
 
52
 
 
53
locale.setlocale(locale.LC_ALL, '')
 
54
 
 
55
logging.getLogger('dbus.proxies').setLevel(logging.CRITICAL)
 
56
 
 
57
# Some useful constants
 
58
domain = 'se.recompile'
 
59
server_interface = domain + '.Mandos'
 
60
client_interface = domain + '.Mandos.Client'
 
61
version = "1.7.15"
 
62
 
 
63
try:
 
64
    dbus.OBJECT_MANAGER_IFACE
 
65
except AttributeError:
 
66
    dbus.OBJECT_MANAGER_IFACE = "org.freedesktop.DBus.ObjectManager"
 
67
 
 
68
 
 
69
def isoformat_to_datetime(iso):
 
70
    "Parse an ISO 8601 date string to a datetime.datetime()"
 
71
    if not iso:
 
72
        return None
 
73
    d, t = iso.split("T", 1)
 
74
    year, month, day = d.split("-", 2)
 
75
    hour, minute, second = t.split(":", 2)
 
76
    second, fraction = divmod(float(second), 1)
 
77
    return datetime.datetime(int(year),
 
78
                             int(month),
 
79
                             int(day),
 
80
                             int(hour),
 
81
                             int(minute),
 
82
                             int(second),            # Whole seconds
 
83
                             int(fraction*1000000))  # Microseconds
 
84
 
 
85
 
 
86
class MandosClientPropertyCache(object):
 
87
    """This wraps a Mandos Client D-Bus proxy object, caches the
 
88
    properties and calls a hook function when any of them are
 
89
    changed.
 
90
    """
 
91
    def __init__(self, proxy_object=None, properties=None, **kwargs):
 
92
        self.proxy = proxy_object  # Mandos Client proxy object
 
93
        self.properties = dict() if properties is None else properties
 
94
        self.property_changed_match = (
 
95
            self.proxy.connect_to_signal("PropertiesChanged",
 
96
                                         self.properties_changed,
 
97
                                         dbus.PROPERTIES_IFACE,
 
98
                                         byte_arrays=True))
 
99
 
 
100
        if properties is None:
 
101
            self.properties.update(self.proxy.GetAll(
 
102
                client_interface,
 
103
                dbus_interface=dbus.PROPERTIES_IFACE))
 
104
 
 
105
        super(MandosClientPropertyCache, self).__init__(**kwargs)
 
106
 
 
107
    def properties_changed(self, interface, properties, invalidated):
 
108
        """This is called whenever we get a PropertiesChanged signal
 
109
        It updates the changed properties in the "properties" dict.
 
110
        """
 
111
        # Update properties dict with new value
 
112
        if interface == client_interface:
 
113
            self.properties.update(properties)
 
114
 
 
115
    def delete(self):
 
116
        self.property_changed_match.remove()
 
117
 
 
118
 
 
119
class MandosClientWidget(urwid.FlowWidget, MandosClientPropertyCache):
 
120
    """A Mandos Client which is visible on the screen.
 
121
    """
 
122
 
 
123
    def __init__(self, server_proxy_object=None, update_hook=None,
 
124
                 delete_hook=None, logger=None, **kwargs):
 
125
        # Called on update
 
126
        self.update_hook = update_hook
 
127
        # Called on delete
 
128
        self.delete_hook = delete_hook
 
129
        # Mandos Server proxy object
 
130
        self.server_proxy_object = server_proxy_object
 
131
        # Logger
 
132
        self.logger = logger
 
133
 
 
134
        self._update_timer_callback_tag = None
 
135
 
 
136
        # The widget shown normally
 
137
        self._text_widget = urwid.Text("")
 
138
        # The widget shown when we have focus
 
139
        self._focus_text_widget = urwid.Text("")
 
140
        super(MandosClientWidget, self).__init__(**kwargs)
 
141
        self.update()
 
142
        self.opened = False
 
143
 
 
144
        self.match_objects = (
 
145
            self.proxy.connect_to_signal("CheckerCompleted",
 
146
                                         self.checker_completed,
 
147
                                         client_interface,
 
148
                                         byte_arrays=True),
 
149
            self.proxy.connect_to_signal("CheckerStarted",
 
150
                                         self.checker_started,
 
151
                                         client_interface,
 
152
                                         byte_arrays=True),
 
153
            self.proxy.connect_to_signal("GotSecret",
 
154
                                         self.got_secret,
 
155
                                         client_interface,
 
156
                                         byte_arrays=True),
 
157
            self.proxy.connect_to_signal("NeedApproval",
 
158
                                         self.need_approval,
 
159
                                         client_interface,
 
160
                                         byte_arrays=True),
 
161
            self.proxy.connect_to_signal("Rejected",
 
162
                                         self.rejected,
 
163
                                         client_interface,
 
164
                                         byte_arrays=True))
 
165
        self.logger('Created client {}'
 
166
                    .format(self.properties["Name"]), level=0)
 
167
 
 
168
    def using_timer(self, flag):
 
169
        """Call this method with True or False when timer should be
 
170
        activated or deactivated.
 
171
        """
 
172
        if flag and self._update_timer_callback_tag is None:
 
173
            # Will update the shown timer value every second
 
174
            self._update_timer_callback_tag = (GLib.timeout_add
 
175
                                               (1000,
 
176
                                                self.update_timer))
 
177
        elif not (flag or self._update_timer_callback_tag is None):
 
178
            GLib.source_remove(self._update_timer_callback_tag)
 
179
            self._update_timer_callback_tag = None
 
180
 
 
181
    def checker_completed(self, exitstatus, condition, command):
 
182
        if exitstatus == 0:
 
183
            self.logger('Checker for client {} (command "{}")'
 
184
                        ' succeeded'.format(self.properties["Name"],
 
185
                                            command), level=0)
 
186
            self.update()
 
187
            return
 
188
        # Checker failed
 
189
        if os.WIFEXITED(condition):
 
190
            self.logger('Checker for client {} (command "{}") failed'
 
191
                        ' with exit code {}'
 
192
                        .format(self.properties["Name"], command,
 
193
                                os.WEXITSTATUS(condition)))
 
194
        elif os.WIFSIGNALED(condition):
 
195
            self.logger('Checker for client {} (command "{}") was'
 
196
                        ' killed by signal {}'
 
197
                        .format(self.properties["Name"], command,
 
198
                                os.WTERMSIG(condition)))
 
199
        self.update()
 
200
 
 
201
    def checker_started(self, command):
 
202
        """Server signals that a checker started."""
 
203
        self.logger('Client {} started checker "{}"'
 
204
                    .format(self.properties["Name"],
 
205
                            command), level=0)
 
206
 
 
207
    def got_secret(self):
 
208
        self.logger('Client {} received its secret'
 
209
                    .format(self.properties["Name"]))
 
210
 
 
211
    def need_approval(self, timeout, default):
 
212
        if not default:
 
213
            message = 'Client {} needs approval within {} seconds'
 
214
        else:
 
215
            message = 'Client {} will get its secret in {} seconds'
 
216
        self.logger(message.format(self.properties["Name"],
 
217
                                   timeout/1000))
 
218
 
 
219
    def rejected(self, reason):
 
220
        self.logger('Client {} was rejected; reason: {}'
 
221
                    .format(self.properties["Name"], reason))
 
222
 
 
223
    def selectable(self):
 
224
        """Make this a "selectable" widget.
 
225
        This overrides the method from urwid.FlowWidget."""
 
226
        return True
 
227
 
 
228
    def rows(self, maxcolrow, focus=False):
 
229
        """How many rows this widget will occupy might depend on
 
230
        whether we have focus or not.
 
231
        This overrides the method from urwid.FlowWidget"""
 
232
        return self.current_widget(focus).rows(maxcolrow, focus=focus)
 
233
 
 
234
    def current_widget(self, focus=False):
 
235
        if focus or self.opened:
 
236
            return self._focus_widget
 
237
        return self._widget
 
238
 
 
239
    def update(self):
 
240
        "Called when what is visible on the screen should be updated."
 
241
        # How to add standout mode to a style
 
242
        with_standout = {"normal": "standout",
 
243
                         "bold": "bold-standout",
 
244
                         "underline-blink":
 
245
                         "underline-blink-standout",
 
246
                         "bold-underline-blink":
 
247
                         "bold-underline-blink-standout",
 
248
                         }
 
249
 
 
250
        # Rebuild focus and non-focus widgets using current properties
 
251
 
 
252
        # Base part of a client. Name!
 
253
        base = '{name}: '.format(name=self.properties["Name"])
 
254
        if not self.properties["Enabled"]:
 
255
            message = "DISABLED"
 
256
            self.using_timer(False)
 
257
        elif self.properties["ApprovalPending"]:
 
258
            timeout = datetime.timedelta(
 
259
                milliseconds=self.properties["ApprovalDelay"])
 
260
            last_approval_request = isoformat_to_datetime(
 
261
                self.properties["LastApprovalRequest"])
 
262
            if last_approval_request is not None:
 
263
                timer = max(timeout - (datetime.datetime.utcnow()
 
264
                                       - last_approval_request),
 
265
                            datetime.timedelta())
 
266
            else:
 
267
                timer = datetime.timedelta()
 
268
            if self.properties["ApprovedByDefault"]:
 
269
                message = "Approval in {}. (d)eny?"
 
270
            else:
 
271
                message = "Denial in {}. (a)pprove?"
 
272
            message = message.format(str(timer).rsplit(".", 1)[0])
 
273
            self.using_timer(True)
 
274
        elif self.properties["LastCheckerStatus"] != 0:
 
275
            # When checker has failed, show timer until client expires
 
276
            expires = self.properties["Expires"]
 
277
            if expires == "":
 
278
                timer = datetime.timedelta(0)
 
279
            else:
 
280
                expires = (datetime.datetime.strptime
 
281
                           (expires, '%Y-%m-%dT%H:%M:%S.%f'))
 
282
                timer = max(expires - datetime.datetime.utcnow(),
 
283
                            datetime.timedelta())
 
284
            message = ('A checker has failed! Time until client'
 
285
                       ' gets disabled: {}'
 
286
                       .format(str(timer).rsplit(".", 1)[0]))
 
287
            self.using_timer(True)
 
288
        else:
 
289
            message = "enabled"
 
290
            self.using_timer(False)
 
291
        self._text = "{}{}".format(base, message)
 
292
 
 
293
        if not urwid.supports_unicode():
 
294
            self._text = self._text.encode("ascii", "replace")
 
295
        textlist = [("normal", self._text)]
 
296
        self._text_widget.set_text(textlist)
 
297
        self._focus_text_widget.set_text([(with_standout[text[0]],
 
298
                                           text[1])
 
299
                                          if isinstance(text, tuple)
 
300
                                          else text
 
301
                                          for text in textlist])
 
302
        self._widget = self._text_widget
 
303
        self._focus_widget = urwid.AttrWrap(self._focus_text_widget,
 
304
                                            "standout")
 
305
        # Run update hook, if any
 
306
        if self.update_hook is not None:
 
307
            self.update_hook()
 
308
 
 
309
    def update_timer(self):
 
310
        """called by GLib. Will indefinitely loop until
 
311
        GLib.source_remove() on tag is called
 
312
        """
 
313
        self.update()
 
314
        return True             # Keep calling this
 
315
 
 
316
    def delete(self, **kwargs):
 
317
        if self._update_timer_callback_tag is not None:
 
318
            GLib.source_remove(self._update_timer_callback_tag)
 
319
            self._update_timer_callback_tag = None
 
320
        for match in self.match_objects:
 
321
            match.remove()
 
322
        self.match_objects = ()
 
323
        if self.delete_hook is not None:
 
324
            self.delete_hook(self)
 
325
        return super(MandosClientWidget, self).delete(**kwargs)
 
326
 
 
327
    def render(self, maxcolrow, focus=False):
 
328
        """Render differently if we have focus.
 
329
        This overrides the method from urwid.FlowWidget"""
 
330
        return self.current_widget(focus).render(maxcolrow,
 
331
                                                 focus=focus)
 
332
 
 
333
    def keypress(self, maxcolrow, key):
 
334
        """Handle keys.
 
335
        This overrides the method from urwid.FlowWidget"""
 
336
        if key == "+":
 
337
            self.proxy.Set(client_interface, "Enabled",
 
338
                           dbus.Boolean(True), ignore_reply=True,
 
339
                           dbus_interface=dbus.PROPERTIES_IFACE)
 
340
        elif key == "-":
 
341
            self.proxy.Set(client_interface, "Enabled", False,
 
342
                           ignore_reply=True,
 
343
                           dbus_interface=dbus.PROPERTIES_IFACE)
 
344
        elif key == "a":
 
345
            self.proxy.Approve(dbus.Boolean(True, variant_level=1),
 
346
                               dbus_interface=client_interface,
 
347
                               ignore_reply=True)
 
348
        elif key == "d":
 
349
            self.proxy.Approve(dbus.Boolean(False, variant_level=1),
 
350
                               dbus_interface=client_interface,
 
351
                               ignore_reply=True)
 
352
        elif key == "R" or key == "_" or key == "ctrl k":
 
353
            self.server_proxy_object.RemoveClient(self.proxy
 
354
                                                  .object_path,
 
355
                                                  ignore_reply=True)
 
356
        elif key == "s":
 
357
            self.proxy.Set(client_interface, "CheckerRunning",
 
358
                           dbus.Boolean(True), ignore_reply=True,
 
359
                           dbus_interface=dbus.PROPERTIES_IFACE)
 
360
        elif key == "S":
 
361
            self.proxy.Set(client_interface, "CheckerRunning",
 
362
                           dbus.Boolean(False), ignore_reply=True,
 
363
                           dbus_interface=dbus.PROPERTIES_IFACE)
 
364
        elif key == "C":
 
365
            self.proxy.CheckedOK(dbus_interface=client_interface,
 
366
                                 ignore_reply=True)
 
367
        # xxx
 
368
#         elif key == "p" or key == "=":
 
369
#             self.proxy.pause()
 
370
#         elif key == "u" or key == ":":
 
371
#             self.proxy.unpause()
 
372
#         elif key == "RET":
 
373
#             self.open()
 
374
        else:
 
375
            return key
 
376
 
 
377
    def properties_changed(self, interface, properties, invalidated):
 
378
        """Call self.update() if any properties changed.
 
379
        This overrides the method from MandosClientPropertyCache"""
 
380
        old_values = {key: self.properties.get(key)
 
381
                      for key in properties.keys()}
 
382
        super(MandosClientWidget, self).properties_changed(
 
383
            interface, properties, invalidated)
 
384
        if any(old_values[key] != self.properties.get(key)
 
385
               for key in old_values):
 
386
            self.update()
 
387
 
 
388
 
 
389
class ConstrainedListBox(urwid.ListBox):
 
390
    """Like a normal urwid.ListBox, but will consume all "up" or
 
391
    "down" key presses, thus not allowing any containing widgets to
 
392
    use them as an excuse to shift focus away from this widget.
 
393
    """
 
394
    def keypress(self, *args, **kwargs):
 
395
        ret = (super(ConstrainedListBox, self)
 
396
               .keypress(*args, **kwargs))
 
397
        if ret in ("up", "down"):
 
398
            return
 
399
        return ret
 
400
 
 
401
 
 
402
class UserInterface(object):
 
403
    """This is the entire user interface - the whole screen
 
404
    with boxes, lists of client widgets, etc.
 
405
    """
 
406
    def __init__(self, max_log_length=1000, log_level=1):
 
407
        DBusGMainLoop(set_as_default=True)
 
408
 
 
409
        self.screen = urwid.curses_display.Screen()
 
410
 
 
411
        self.screen.register_palette((
 
412
                ("normal",
 
413
                 "default", "default", None),
 
414
                ("bold",
 
415
                 "bold", "default", "bold"),
 
416
                ("underline-blink",
 
417
                 "underline,blink", "default", "underline,blink"),
 
418
                ("standout",
 
419
                 "standout", "default", "standout"),
 
420
                ("bold-underline-blink",
 
421
                 "bold,underline,blink", "default",
 
422
                 "bold,underline,blink"),
 
423
                ("bold-standout",
 
424
                 "bold,standout", "default", "bold,standout"),
 
425
                ("underline-blink-standout",
 
426
                 "underline,blink,standout", "default",
 
427
                 "underline,blink,standout"),
 
428
                ("bold-underline-blink-standout",
 
429
                 "bold,underline,blink,standout", "default",
 
430
                 "bold,underline,blink,standout"),
 
431
                ))
 
432
 
 
433
        if urwid.supports_unicode():
 
434
            self.divider = "─"  # \u2500
 
435
        else:
 
436
            self.divider = "_"  # \u005f
 
437
 
 
438
        self.screen.start()
 
439
 
 
440
        self.size = self.screen.get_cols_rows()
 
441
 
 
442
        self.clients = urwid.SimpleListWalker([])
 
443
        self.clients_dict = {}
 
444
 
 
445
        # We will add Text widgets to this list
 
446
        self.log = []
 
447
        self.max_log_length = max_log_length
 
448
 
 
449
        self.log_level = log_level
 
450
 
 
451
        # We keep a reference to the log widget so we can remove it
 
452
        # from the ListWalker without it getting destroyed
 
453
        self.logbox = ConstrainedListBox(self.log)
 
454
 
 
455
        # This keeps track of whether self.uilist currently has
 
456
        # self.logbox in it or not
 
457
        self.log_visible = True
 
458
        self.log_wrap = "any"
 
459
 
 
460
        self.rebuild()
 
461
        self.log_message_raw(("bold",
 
462
                              "Mandos Monitor version " + version))
 
463
        self.log_message_raw(("bold",
 
464
                              "q: Quit  ?: Help"))
 
465
 
 
466
        self.busname = domain + '.Mandos'
 
467
        self.main_loop = GLib.MainLoop()
 
468
 
 
469
    def client_not_found(self, fingerprint, address):
 
470
        self.log_message("Client with address {} and fingerprint {}"
 
471
                         " could not be found"
 
472
                         .format(address, fingerprint))
 
473
 
 
474
    def rebuild(self):
 
475
        """This rebuilds the User Interface.
 
476
        Call this when the widget layout needs to change"""
 
477
        self.uilist = []
 
478
        # self.uilist.append(urwid.ListBox(self.clients))
 
479
        self.uilist.append(urwid.Frame(ConstrainedListBox(self.
 
480
                                                          clients),
 
481
                                       # header=urwid.Divider(),
 
482
                                       header=None,
 
483
                                       footer=urwid.Divider(
 
484
                                           div_char=self.divider)))
 
485
        if self.log_visible:
 
486
            self.uilist.append(self.logbox)
 
487
        self.topwidget = urwid.Pile(self.uilist)
 
488
 
 
489
    def log_message(self, message, level=1):
 
490
        """Log message formatted with timestamp"""
 
491
        if level < self.log_level:
 
492
            return
 
493
        timestamp = datetime.datetime.now().isoformat()
 
494
        self.log_message_raw("{}: {}".format(timestamp, message),
 
495
                             level=level)
 
496
 
 
497
    def log_message_raw(self, markup, level=1):
 
498
        """Add a log message to the log buffer."""
 
499
        if level < self.log_level:
 
500
            return
 
501
        self.log.append(urwid.Text(markup, wrap=self.log_wrap))
 
502
        if self.max_log_length:
 
503
            if len(self.log) > self.max_log_length:
 
504
                del self.log[0:len(self.log)-self.max_log_length-1]
 
505
        self.logbox.set_focus(len(self.logbox.body.contents),
 
506
                              coming_from="above")
 
507
        self.refresh()
 
508
 
 
509
    def toggle_log_display(self):
 
510
        """Toggle visibility of the log buffer."""
 
511
        self.log_visible = not self.log_visible
 
512
        self.rebuild()
 
513
        self.log_message("Log visibility changed to: {}"
 
514
                         .format(self.log_visible), level=0)
 
515
 
 
516
    def change_log_display(self):
 
517
        """Change type of log display.
 
518
        Currently, this toggles wrapping of text lines."""
 
519
        if self.log_wrap == "clip":
 
520
            self.log_wrap = "any"
 
521
        else:
 
522
            self.log_wrap = "clip"
 
523
        for textwidget in self.log:
 
524
            textwidget.set_wrap_mode(self.log_wrap)
 
525
        self.log_message("Wrap mode: {}".format(self.log_wrap),
 
526
                         level=0)
 
527
 
 
528
    def find_and_remove_client(self, path, interfaces):
 
529
        """Find a client by its object path and remove it.
 
530
 
 
531
        This is connected to the InterfacesRemoved signal from the
 
532
        Mandos server object."""
 
533
        if client_interface not in interfaces:
 
534
            # Not a Mandos client object; ignore
 
535
            return
 
536
        try:
 
537
            client = self.clients_dict[path]
 
538
        except KeyError:
 
539
            # not found?
 
540
            self.log_message("Unknown client {!r} removed"
 
541
                             .format(path))
 
542
            return
 
543
        client.delete()
 
544
 
 
545
    def add_new_client(self, path, ifs_and_props):
 
546
        """Find a client by its object path and remove it.
 
547
 
 
548
        This is connected to the InterfacesAdded signal from the
 
549
        Mandos server object.
 
550
        """
 
551
        if client_interface not in ifs_and_props:
 
552
            # Not a Mandos client object; ignore
 
553
            return
 
554
        client_proxy_object = self.bus.get_object(self.busname, path)
 
555
        self.add_client(MandosClientWidget(
 
556
            server_proxy_object=self.mandos_serv,
 
557
            proxy_object=client_proxy_object,
 
558
            update_hook=self.refresh,
 
559
            delete_hook=self.remove_client,
 
560
            logger=self.log_message,
 
561
            properties=dict(ifs_and_props[client_interface])),
 
562
                        path=path)
 
563
 
 
564
    def add_client(self, client, path=None):
 
565
        self.clients.append(client)
 
566
        if path is None:
 
567
            path = client.proxy.object_path
 
568
        self.clients_dict[path] = client
 
569
        self.clients.sort(key=lambda c: c.properties["Name"])
 
570
        self.refresh()
 
571
 
 
572
    def remove_client(self, client, path=None):
 
573
        self.clients.remove(client)
 
574
        if path is None:
 
575
            path = client.proxy.object_path
 
576
        del self.clients_dict[path]
 
577
        self.refresh()
 
578
 
 
579
    def refresh(self):
 
580
        """Redraw the screen"""
 
581
        canvas = self.topwidget.render(self.size, focus=True)
 
582
        self.screen.draw_screen(self.size, canvas)
 
583
 
 
584
    def run(self):
 
585
        """Start the main loop and exit when it's done."""
 
586
        self.bus = dbus.SystemBus()
 
587
        mandos_dbus_objc = self.bus.get_object(
 
588
            self.busname, "/", follow_name_owner_changes=True)
 
589
        self.mandos_serv = dbus.Interface(
 
590
            mandos_dbus_objc, dbus_interface=server_interface)
 
591
        try:
 
592
            mandos_clients = (self.mandos_serv
 
593
                              .GetAllClientsWithProperties())
 
594
            if not mandos_clients:
 
595
                self.log_message_raw(("bold",
 
596
                                      "Note: Server has no clients."))
 
597
        except dbus.exceptions.DBusException:
 
598
            self.log_message_raw(("bold",
 
599
                                  "Note: No Mandos server running."))
 
600
            mandos_clients = dbus.Dictionary()
 
601
 
 
602
        (self.mandos_serv
 
603
         .connect_to_signal("InterfacesRemoved",
 
604
                            self.find_and_remove_client,
 
605
                            dbus_interface=dbus.OBJECT_MANAGER_IFACE,
 
606
                            byte_arrays=True))
 
607
        (self.mandos_serv
 
608
         .connect_to_signal("InterfacesAdded",
 
609
                            self.add_new_client,
 
610
                            dbus_interface=dbus.OBJECT_MANAGER_IFACE,
 
611
                            byte_arrays=True))
 
612
        (self.mandos_serv
 
613
         .connect_to_signal("ClientNotFound",
 
614
                            self.client_not_found,
 
615
                            dbus_interface=server_interface,
 
616
                            byte_arrays=True))
 
617
        for path, client in mandos_clients.items():
 
618
            client_proxy_object = self.bus.get_object(self.busname,
 
619
                                                      path)
 
620
            self.add_client(MandosClientWidget(
 
621
                server_proxy_object=self.mandos_serv,
 
622
                proxy_object=client_proxy_object,
 
623
                properties=client,
 
624
                update_hook=self.refresh,
 
625
                delete_hook=self.remove_client,
 
626
                logger=self.log_message),
 
627
                            path=path)
 
628
 
 
629
        self.refresh()
 
630
        self._input_callback_tag = (GLib.io_add_watch
 
631
                                    (sys.stdin.fileno(),
 
632
                                     GLib.IO_IN,
 
633
                                     self.process_input))
 
634
        self.main_loop.run()
 
635
        # Main loop has finished, we should close everything now
 
636
        GLib.source_remove(self._input_callback_tag)
 
637
        self.screen.stop()
 
638
 
 
639
    def stop(self):
 
640
        self.main_loop.quit()
 
641
 
 
642
    def process_input(self, source, condition):
 
643
        keys = self.screen.get_input()
 
644
        translations = {"ctrl n": "down",       # Emacs
 
645
                        "ctrl p": "up",         # Emacs
 
646
                        "ctrl v": "page down",  # Emacs
 
647
                        "meta v": "page up",    # Emacs
 
648
                        " ": "page down",       # less
 
649
                        "f": "page down",       # less
 
650
                        "b": "page up",         # less
 
651
                        "j": "down",            # vi
 
652
                        "k": "up",              # vi
 
653
                        }
 
654
        for key in keys:
 
655
            try:
 
656
                key = translations[key]
 
657
            except KeyError:    # :-)
 
658
                pass
 
659
 
 
660
            if key == "q" or key == "Q":
 
661
                self.stop()
 
662
                break
 
663
            elif key == "window resize":
 
664
                self.size = self.screen.get_cols_rows()
 
665
                self.refresh()
 
666
            elif key == "ctrl l":
 
667
                self.screen.clear()
 
668
                self.refresh()
 
669
            elif key == "l" or key == "D":
 
670
                self.toggle_log_display()
 
671
                self.refresh()
 
672
            elif key == "w" or key == "i":
 
673
                self.change_log_display()
 
674
                self.refresh()
 
675
            elif key == "?" or key == "f1" or key == "esc":
 
676
                if not self.log_visible:
 
677
                    self.log_visible = True
 
678
                    self.rebuild()
 
679
                self.log_message_raw(("bold",
 
680
                                      "  ".
 
681
                                      join(("q: Quit",
 
682
                                            "?: Help",
 
683
                                            "l: Log window toggle",
 
684
                                            "TAB: Switch window",
 
685
                                            "w: Wrap (log lines)",
 
686
                                            "v: Toggle verbose log",
 
687
                                            ))))
 
688
                self.log_message_raw(("bold",
 
689
                                      "  "
 
690
                                      .join(("Clients:",
 
691
                                             "+: Enable",
 
692
                                             "-: Disable",
 
693
                                             "R: Remove",
 
694
                                             "s: Start new checker",
 
695
                                             "S: Stop checker",
 
696
                                             "C: Checker OK",
 
697
                                             "a: Approve",
 
698
                                             "d: Deny"))))
 
699
                self.refresh()
 
700
            elif key == "tab":
 
701
                if self.topwidget.get_focus() is self.logbox:
 
702
                    self.topwidget.set_focus(0)
 
703
                else:
 
704
                    self.topwidget.set_focus(self.logbox)
 
705
                self.refresh()
 
706
            elif key == "v":
 
707
                if self.log_level == 0:
 
708
                    self.log_level = 1
 
709
                    self.log_message("Verbose mode: Off")
 
710
                else:
 
711
                    self.log_level = 0
 
712
                    self.log_message("Verbose mode: On")
 
713
            # elif (key == "end" or key == "meta >" or key == "G"
 
714
            #       or key == ">"):
 
715
            #     pass            # xxx end-of-buffer
 
716
            # elif (key == "home" or key == "meta <" or key == "g"
 
717
            #       or key == "<"):
 
718
            #     pass            # xxx beginning-of-buffer
 
719
            # elif key == "ctrl e" or key == "$":
 
720
            #     pass            # xxx move-end-of-line
 
721
            # elif key == "ctrl a" or key == "^":
 
722
            #     pass            # xxx move-beginning-of-line
 
723
            # elif key == "ctrl b" or key == "meta (" or key == "h":
 
724
            #     pass            # xxx left
 
725
            # elif key == "ctrl f" or key == "meta )" or key == "l":
 
726
            #     pass            # xxx right
 
727
            # elif key == "a":
 
728
            #     pass            # scroll up log
 
729
            # elif key == "z":
 
730
            #     pass            # scroll down log
 
731
            elif self.topwidget.selectable():
 
732
                self.topwidget.keypress(self.size, key)
 
733
                self.refresh()
 
734
        return True
 
735
 
 
736
 
 
737
ui = UserInterface()
 
738
try:
 
739
    ui.run()
 
740
except KeyboardInterrupt:
 
741
    ui.screen.stop()
 
742
except Exception as e:
 
743
    ui.log_message(str(e))
 
744
    ui.screen.stop()
 
745
    raise