152 lines
5.8 KiB
Bash
152 lines
5.8 KiB
Bash
|
# This file is part of systemd.
|
||
|
|
#
|
||
|
|
# Copyright 2011 Dan Walsh
|
||
|
|
#
|
||
|
|
# systemd is free software; you can redistribute it and/or modify it
|
||
|
|
# under the terms of the GNU General Public License as published by
|
||
|
|
# the Free Software Foundation; either version 2 of the License, or
|
||
|
|
# (at your option) any later version.
|
||
|
|
#
|
||
|
|
# systemd is distributed in the hope that it will be useful, but
|
||
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||
|
|
# General Public License for more details.
|
||
|
|
#
|
||
|
|
# You should have received a copy of the GNU General Public License
|
||
|
|
# along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
||
|
|
|
||
|
|
__contains_word () {
|
||
|
|
local word=$1; shift
|
||
|
|
for w in $*; do [[ $w = $word ]] && return 0; done
|
||
|
|
return 1
|
||
|
|
}
|
||
|
|
|
||
|
|
ALL_OPTS='-l --list -S -o -n --noheading -h --help'
|
||
|
|
MANAGED_OPTS='-a --add -m --modify -d --delete -D --deleteall -C --locallist '
|
||
|
|
|
||
|
|
__get_all_stores () {
|
||
|
|
dir -1 -F /etc/selinux/ | grep '/' | cut -d'/' -f 1
|
||
|
|
}
|
||
|
|
__get_all_ftypes () {
|
||
|
|
echo '-- -d -c -b -s -l -p'
|
||
|
|
}
|
||
|
|
__get_all_users () {
|
||
|
|
seinfo -u 2> /dev/null | tail -n +3
|
||
|
|
}
|
||
|
|
__get_all_types () {
|
||
|
|
seinfo -t 2> /dev/null | tail -n +3
|
||
|
|
}
|
||
|
|
__get_all_port_types () {
|
||
|
|
seinfo -aport_type -x 2>/dev/null | tail -n +2
|
||
|
|
}
|
||
|
|
__get_all_domains () {
|
||
|
|
seinfo -adomain -x 2>/dev/null | tail -n +2
|
||
|
|
}
|
||
|
|
__get_all_node_types () {
|
||
|
|
seinfo -anode_type -x 2>/dev/null | tail -n +2
|
||
|
|
}
|
||
|
|
__get_all_file_types () {
|
||
|
|
seinfo -afile_type -x 2>/dev/null | tail -n +2
|
||
|
|
}
|
||
|
|
__get_all_roles () {
|
||
|
|
seinfo -t 2> /dev/null | tail -n +3
|
||
|
|
}
|
||
|
|
__get_all_stores () {
|
||
|
|
dir -1 -F /etc/selinux/ | grep '/' | cut -d'/' -f 1
|
||
|
|
}
|
||
|
|
__get_boolean_opts () { echo '$ALL_OPTS --on -off -1 -0 -F' ; }
|
||
|
|
__get_user_opts () { echo '$ALL_OPTS $MANAGED_OPTS -L -r -R --role '; }
|
||
|
|
__get_login_opts () { echo '$ALL_OPTS $MANAGED_OPTS -s -r '; }
|
||
|
|
__get_port_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t -type -r --range -p --proto'; }
|
||
|
|
__get_interface_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t --type '; }
|
||
|
|
__get_node_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t --type -M --mask -p --proto'; }
|
||
|
|
__get_fcontext_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t --type -e --equal -f --ftype '; }
|
||
|
|
__get_module_opts () { echo '$ALL_OPTS --enable --disable '; }
|
||
|
|
__get_dontaudit_opts () { echo '-S on off' ; }
|
||
|
|
__get_permissive_opts () { echo '$ALL_OPTS -a --add -d --delete' ; }
|
||
|
|
|
||
|
|
_semanage () {
|
||
|
|
local command=${COMP_WORDS[1]}
|
||
|
|
local cur=${COMP_WORDS[COMP_CWORD]} prev=${COMP_WORDS[COMP_CWORD-1]}
|
||
|
|
local verb comps
|
||
|
|
local -A VERBS=(
|
||
|
|
[LOGIN]='login'
|
||
|
|
[USER]='user'
|
||
|
|
[PORT]='port'
|
||
|
|
[INTERFACE]='interface'
|
||
|
|
[MODULE]='module'
|
||
|
|
[NODE]='node'
|
||
|
|
[FCONTEXT]='fcontext'
|
||
|
|
[BOOLEAN]='boolean'
|
||
|
|
[PERMISSIVE]='permissive'
|
||
|
|
[DONTAUDIT]='dontaudit'
|
||
|
|
)
|
||
|
|
|
||
|
|
if [ "$prev" = "-a" -a "$command" = "permissive" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_domains ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
fi
|
||
|
|
if [ "$verb" = "" -a "$prev" = "semanage" ]; then
|
||
|
|
comps="${VERBS[*]}"
|
||
|
|
elif [ "$verb" = "" -a "$prev" = "-S" -o "$prev" = "--store" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_stores ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif [ "$verb" = "" -a "$prev" = "-p" -o "$prev" = "--proto" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "tcp udp" -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif [ "$verb" = "" -a "$prev" = "-r" -o "$prev" = "--roles" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_roles ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif [ "$verb" = "" -a "$prev" = "-s" -o "$prev" = "--seuser" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_users ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif [ "$verb" = "" -a "$prev" = "-f" -o "$prev" = "--ftype" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_ftypes ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif [ "$verb" = "" -a "$prev" = "-t" -o "$prev" = "--types" ]; then
|
||
|
|
if [ "$command" = "port" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_port_types ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
fi
|
||
|
|
if [ "$command" = "fcontext" ]; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_file_types ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
fi
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_all_types ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[LOGIN]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_login_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[USER]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_user_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[PORT]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_port_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[INTERFACE]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_interface_opts ) " -- "$cur") )
|
||
|
|
return 0p
|
||
|
|
elif __contains_word "$command" ${VERBS[MODULE]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_module_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[NODE]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_node_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[FCONTEXT]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_fcontext_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[BOOLEAN]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_boolean_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[PERMISSIVE]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_permissive_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
elif __contains_word "$command" ${VERBS[DONTAUDIT]} ; then
|
||
|
|
COMPREPLY=( $(compgen -W "$( __get_dontaudit_opts ) " -- "$cur") )
|
||
|
|
return 0
|
||
|
|
fi
|
||
|
|
COMPREPLY=( $(compgen -W "$comps" -- "$cur") )
|
||
|
|
return 0
|
||
|
|
}
|
||
|
|
complete -F _semanage semanage
|