152 lines
5.2 KiB
Python
152 lines
5.2 KiB
Python
## usersPage.py - show selinux mappings
|
|
## Copyright (C) 2006,2007,2008 Red Hat, Inc.
|
|
|
|
## This program is free software; you can redistribute it and/or modify
|
|
## it under the terms of the GNU General Public License as published by
|
|
## the Free Software Foundation; either version 2 of the License, or
|
|
## (at your option) any later version.
|
|
|
|
## This program is distributed in the hope that it will be useful,
|
|
## but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
## GNU General Public License for more details.
|
|
|
|
## You should have received a copy of the GNU General Public License
|
|
## along with this program; if not, write to the Free Software
|
|
## Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
|
|
## Author: Dan Walsh
|
|
import string
|
|
import gtk
|
|
import gtk.glade
|
|
import os
|
|
import gobject
|
|
import sys
|
|
import commands
|
|
import seobject
|
|
from semanagePage import *
|
|
|
|
##
|
|
## I18N
|
|
##
|
|
PROGNAME = "policycoreutils"
|
|
import gettext
|
|
gettext.bindtextdomain(PROGNAME, "/usr/share/locale")
|
|
gettext.textdomain(PROGNAME)
|
|
try:
|
|
gettext.install(PROGNAME, localedir="/usr/share/locale", unicode=1)
|
|
except IOError:
|
|
import __builtin__
|
|
__builtin__.__dict__['_'] = unicode
|
|
|
|
|
|
class usersPage(semanagePage):
|
|
|
|
def __init__(self, xml):
|
|
semanagePage.__init__(self, xml, "users", _("SELinux User"))
|
|
|
|
self.store = gtk.ListStore(gobject.TYPE_STRING, gobject.TYPE_STRING, gobject.TYPE_STRING, gobject.TYPE_STRING, gobject.TYPE_STRING)
|
|
self.view.set_model(self.store)
|
|
self.store.set_sort_column_id(0, gtk.SORT_ASCENDING)
|
|
|
|
col = gtk.TreeViewColumn(_("SELinux\nUser"), gtk.CellRendererText(), text=0)
|
|
col.set_sort_column_id(0)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
|
|
col = gtk.TreeViewColumn(_("MLS/\nMCS Range"), gtk.CellRendererText(), text=1)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
|
|
col = gtk.TreeViewColumn(_("SELinux Roles"), gtk.CellRendererText(), text=2)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
|
|
self.load()
|
|
self.selinuxUserEntry = xml.get_widget("selinuxUserEntry")
|
|
self.mlsRangeEntry = xml.get_widget("mlsRangeEntry")
|
|
self.selinuxRolesEntry = xml.get_widget("selinuxRolesEntry")
|
|
|
|
def load(self, filter=""):
|
|
self.filter = filter
|
|
self.user = seobject.seluserRecords()
|
|
dict = self.user.get_all()
|
|
keys = dict.keys()
|
|
keys.sort()
|
|
self.store.clear()
|
|
for k in keys:
|
|
range = seobject.translate(dict[k][2])
|
|
if not (self.match(k, filter) or self.match(dict[k][0], filter) or self.match(range, filter) or self.match(dict[k][3], filter)):
|
|
continue
|
|
|
|
iter = self.store.append()
|
|
self.store.set_value(iter, 0, k)
|
|
self.store.set_value(iter, 1, range)
|
|
self.store.set_value(iter, 2, dict[k][3])
|
|
self.view.get_selection().select_path((0,))
|
|
|
|
def delete(self):
|
|
if semanagePage.delete(self) == gtk.RESPONSE_NO:
|
|
return None
|
|
|
|
def dialogInit(self):
|
|
store, iter = self.view.get_selection().get_selected()
|
|
self.selinuxUserEntry.set_text(store.get_value(iter, 0))
|
|
self.selinuxUserEntry.set_sensitive(False)
|
|
self.mlsRangeEntry.set_text(store.get_value(iter, 1))
|
|
self.selinuxRolesEntry.set_text(store.get_value(iter, 2))
|
|
|
|
def dialogClear(self):
|
|
self.selinuxUserEntry.set_text("")
|
|
self.selinuxUserEntry.set_sensitive(True)
|
|
self.mlsRangeEntry.set_text("s0")
|
|
self.selinuxRolesEntry.set_text("")
|
|
|
|
def add(self):
|
|
user = self.selinuxUserEntry.get_text()
|
|
range = self.mlsRangeEntry.get_text()
|
|
roles = self.selinuxRolesEntry.get_text()
|
|
|
|
self.wait()
|
|
(rc, out) = commands.getstatusoutput("semanage user -a -R '%s' -r %s %s" % (roles, range, user))
|
|
self.ready()
|
|
if rc != 0:
|
|
self.error(out)
|
|
return False
|
|
iter = self.store.append()
|
|
self.store.set_value(iter, 0, user)
|
|
self.store.set_value(iter, 1, range)
|
|
self.store.set_value(iter, 2, roles)
|
|
|
|
def modify(self):
|
|
user = self.selinuxUserEntry.get_text()
|
|
range = self.mlsRangeEntry.get_text()
|
|
roles = self.selinuxRolesEntry.get_text()
|
|
|
|
self.wait()
|
|
(rc, out) = commands.getstatusoutput("semanage user -m -R '%s' -r %s %s" % (roles, range, user))
|
|
self.ready()
|
|
|
|
if rc != 0:
|
|
self.error(out)
|
|
return False
|
|
self.load(self.filter)
|
|
|
|
def delete(self):
|
|
store, iter = self.view.get_selection().get_selected()
|
|
try:
|
|
user = store.get_value(iter, 0)
|
|
if user == "root" or user == "user_u":
|
|
raise ValueError(_("SELinux user '%s' is required") % user)
|
|
|
|
self.wait()
|
|
(rc, out) = commands.getstatusoutput("semanage user -d %s" % user)
|
|
self.ready()
|
|
if rc != 0:
|
|
self.error(out)
|
|
return False
|
|
store.remove(iter)
|
|
self.view.get_selection().select_path((0,))
|
|
except ValueError, e:
|
|
self.error(e.args[0])
|