mirror of
https://github.com/SELinuxProject/selinux
synced 2024-12-09 07:39:07 +00:00
3217d717c8
This ensures that user cannot leave the object class selection blank. Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
224 lines
8.0 KiB
Python
224 lines
8.0 KiB
Python
## fcontextPage.py - show selinux mappings
|
|
## Copyright (C) 2006 Red Hat, Inc.
|
|
|
|
## This program is free software; you can redistribute it and/or modify
|
|
## it under the terms of the GNU General Public License as published by
|
|
## the Free Software Foundation; either version 2 of the License, or
|
|
## (at your option) any later version.
|
|
|
|
## This program is distributed in the hope that it will be useful,
|
|
## but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
## GNU General Public License for more details.
|
|
|
|
## You should have received a copy of the GNU General Public License
|
|
## along with this program; if not, write to the Free Software
|
|
## Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
|
|
## Author: Dan Walsh
|
|
from gi.repository import GObject, Gtk
|
|
import seobject
|
|
try:
|
|
from subprocess import getstatusoutput
|
|
except ImportError:
|
|
from commands import getstatusoutput
|
|
|
|
from semanagePage import *
|
|
|
|
SPEC_COL = 0
|
|
TYPE_COL = 1
|
|
FTYPE_COL = 2
|
|
|
|
|
|
class context:
|
|
|
|
def __init__(self, scontext):
|
|
self.scontext = scontext
|
|
con = scontext.split(":")
|
|
self.type = con[0]
|
|
if len(con) > 1:
|
|
self.mls = con[1]
|
|
else:
|
|
self.mls = "s0"
|
|
|
|
def __str__(self):
|
|
return self.scontext
|
|
|
|
##
|
|
## I18N
|
|
##
|
|
PROGNAME = "policycoreutils"
|
|
try:
|
|
import gettext
|
|
kwargs = {}
|
|
if sys.version_info < (3,):
|
|
kwargs['unicode'] = True
|
|
gettext.install(PROGNAME,
|
|
localedir="/usr/share/locale",
|
|
codeset='utf-8',
|
|
**kwargs)
|
|
except:
|
|
try:
|
|
import builtins
|
|
builtins.__dict__['_'] = str
|
|
except ImportError:
|
|
import __builtin__
|
|
__builtin__.__dict__['_'] = unicode
|
|
|
|
|
|
class fcontextPage(semanagePage):
|
|
|
|
def __init__(self, xml):
|
|
semanagePage.__init__(self, xml, "fcontext", _("File Labeling"))
|
|
self.fcontextFilter = xml.get_object("fcontextFilterEntry")
|
|
self.fcontextFilter.connect("focus_out_event", self.filter_changed)
|
|
self.fcontextFilter.connect("activate", self.filter_changed)
|
|
|
|
self.store = Gtk.ListStore(GObject.TYPE_STRING, GObject.TYPE_STRING, GObject.TYPE_STRING)
|
|
self.view = xml.get_object("fcontextView")
|
|
self.view.set_model(self.store)
|
|
self.view.set_search_equal_func(self.search)
|
|
|
|
col = Gtk.TreeViewColumn(_("File\nSpecification"), Gtk.CellRendererText(), text=SPEC_COL)
|
|
col.set_sizing(Gtk.TreeViewColumnSizing.FIXED)
|
|
col.set_fixed_width(250)
|
|
|
|
col.set_sort_column_id(SPEC_COL)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
col = Gtk.TreeViewColumn(_("Selinux\nFile Type"), Gtk.CellRendererText(), text=TYPE_COL)
|
|
|
|
col.set_sizing(Gtk.TreeViewColumnSizing.FIXED)
|
|
col.set_fixed_width(250)
|
|
col.set_sort_column_id(TYPE_COL)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
col = Gtk.TreeViewColumn(_("File\nType"), Gtk.CellRendererText(), text=2)
|
|
col.set_sort_column_id(FTYPE_COL)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
|
|
self.store.set_sort_column_id(SPEC_COL, Gtk.SortType.ASCENDING)
|
|
self.load()
|
|
self.fcontextEntry = xml.get_object("fcontextEntry")
|
|
self.fcontextFileTypeCombo = xml.get_object("fcontextFileTypeCombo")
|
|
self.fcontextTypeEntry = xml.get_object("fcontextTypeEntry")
|
|
self.fcontextMLSEntry = xml.get_object("fcontextMLSEntry")
|
|
|
|
def match(self, fcon_dict, k, filter):
|
|
try:
|
|
f = filter.lower()
|
|
for con in k:
|
|
k = con.lower()
|
|
if k.find(f) >= 0:
|
|
return True
|
|
for con in fcon_dict[k]:
|
|
k = con.lower()
|
|
if k.find(f) >= 0:
|
|
return True
|
|
except:
|
|
pass
|
|
return False
|
|
|
|
def load(self, filter=""):
|
|
self.filter = filter
|
|
self.fcontext = seobject.fcontextRecords()
|
|
self.store.clear()
|
|
fcon_dict = self.fcontext.get_all(self.local)
|
|
for k in sorted(fcon_dict.keys()):
|
|
if not self.match(fcon_dict, k, filter):
|
|
continue
|
|
iter = self.store.append()
|
|
self.store.set_value(iter, SPEC_COL, k[0])
|
|
self.store.set_value(iter, FTYPE_COL, k[1])
|
|
if fcon_dict[k]:
|
|
rec = "%s:%s" % (fcon_dict[k][2], seobject.translate(fcon_dict[k][3], False))
|
|
else:
|
|
rec = "<<None>>"
|
|
self.store.set_value(iter, TYPE_COL, rec)
|
|
self.view.get_selection().select_path((0,))
|
|
|
|
def filter_changed(self, *arg):
|
|
filter = arg[0].get_text()
|
|
if filter != self.filter:
|
|
self.load(filter)
|
|
|
|
def dialogInit(self):
|
|
store, iter = self.view.get_selection().get_selected()
|
|
self.fcontextEntry.set_text(store.get_value(iter, SPEC_COL))
|
|
self.fcontextEntry.set_sensitive(False)
|
|
scontext = store.get_value(iter, TYPE_COL)
|
|
scon = context(scontext)
|
|
self.fcontextTypeEntry.set_text(scon.type)
|
|
self.fcontextMLSEntry.set_text(scon.mls)
|
|
type = store.get_value(iter, FTYPE_COL)
|
|
liststore = self.fcontextFileTypeCombo.get_model()
|
|
iter = liststore.get_iter_first()
|
|
while iter != None and liststore.get_value(iter, 0) != type:
|
|
iter = liststore.iter_next(iter)
|
|
if iter != None:
|
|
self.fcontextFileTypeCombo.set_active_iter(iter)
|
|
self.fcontextFileTypeCombo.set_sensitive(False)
|
|
|
|
def dialogClear(self):
|
|
self.fcontextEntry.set_text("")
|
|
self.fcontextEntry.set_sensitive(True)
|
|
self.fcontextFileTypeCombo.set_sensitive(True)
|
|
self.fcontextFileTypeCombo.set_active(0)
|
|
self.fcontextTypeEntry.set_text("")
|
|
self.fcontextMLSEntry.set_text("s0")
|
|
|
|
def delete(self):
|
|
store, iter = self.view.get_selection().get_selected()
|
|
try:
|
|
fspec = store.get_value(iter, SPEC_COL)
|
|
ftype = store.get_value(iter, FTYPE_COL)
|
|
self.wait()
|
|
(rc, out) = getstatusoutput("semanage fcontext -d -f '%s' '%s'" % (seobject.file_type_str_to_option[ftype], fspec))
|
|
self.ready()
|
|
|
|
if rc != 0:
|
|
return self.error(out)
|
|
store.remove(iter)
|
|
self.view.get_selection().select_path((0,))
|
|
except ValueError as e:
|
|
self.error(e.args[0])
|
|
|
|
def add(self):
|
|
fspec = self.fcontextEntry.get_text().strip()
|
|
type = self.fcontextTypeEntry.get_text().strip()
|
|
mls = self.fcontextMLSEntry.get_text().strip()
|
|
list_model = self.fcontextFileTypeCombo.get_model()
|
|
it = self.fcontextFileTypeCombo.get_active_iter()
|
|
ftype = list_model.get_value(it, 0)
|
|
self.wait()
|
|
(rc, out) = getstatusoutput("semanage fcontext -a -t %s -r %s -f '%s' '%s'" % (type, mls, seobject.file_type_str_to_option[ftype], fspec))
|
|
self.ready()
|
|
if rc != 0:
|
|
self.error(out)
|
|
return False
|
|
|
|
iter = self.store.append()
|
|
self.store.set_value(iter, SPEC_COL, fspec)
|
|
self.store.set_value(iter, FTYPE_COL, ftype)
|
|
self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls))
|
|
|
|
def modify(self):
|
|
fspec = self.fcontextEntry.get_text().strip()
|
|
type = self.fcontextTypeEntry.get_text().strip()
|
|
mls = self.fcontextMLSEntry.get_text().strip()
|
|
list_model = self.fcontextFileTypeCombo.get_model()
|
|
iter = self.fcontextFileTypeCombo.get_active_iter()
|
|
ftype = list_model.get_value(iter, 0)
|
|
self.wait()
|
|
(rc, out) = getstatusoutput("semanage fcontext -m -t %s -r %s -f '%s' '%s'" % (type, mls, seobject.file_type_str_to_option[ftype], fspec))
|
|
self.ready()
|
|
if rc != 0:
|
|
self.error(out)
|
|
return False
|
|
|
|
store, iter = self.view.get_selection().get_selected()
|
|
self.store.set_value(iter, SPEC_COL, fspec)
|
|
self.store.set_value(iter, FTYPE_COL, ftype)
|
|
self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls))
|