/mandos/trunk : revision 237.4.16

62

import functools

63

import cPickle as pickle

64

import multiprocessing

65

import types

66

65

67

66

import dbus

68

67

import dbus.service

265

264

self.server_state_changed(self.server.GetState())

266

265

267

266

268

def _timedelta_to_milliseconds(td):

269

"Convert a datetime.timedelta() to milliseconds"

270

return ((td.days * 24 * 60 * 60 * 1000)

271

+ (td.seconds * 1000)

272

+ (td.microseconds // 1000))

273

274

267

class Client(object):

275

268

"""A representation of a client host served by this server.

276

269

304

297

secret: bytestring; sent verbatim (over TLS) to client

305

298

timeout: datetime.timedelta(); How long from last_checked_ok

306

299

until this client is disabled

307

extended_timeout: extra long timeout when password has been sent

308

300

runtime_expansions: Allowed attributes for runtime expansion.

309

expires: datetime.datetime(); time (UTC) when a client will be

310

disabled, or None

311

301

"""

312

302

313

303

runtime_expansions = ("approval_delay", "approval_duration",

315

305

"host", "interval", "last_checked_ok",

316

306

"last_enabled", "name", "timeout")

317

307

308

@staticmethod

309

def _timedelta_to_milliseconds(td):

310

"Convert a datetime.timedelta() to milliseconds"

311

return ((td.days * 24 * 60 * 60 * 1000)

312

+ (td.seconds * 1000)

313

+ (td.microseconds // 1000))

314

318

315

def timeout_milliseconds(self):

319

316

"Return the 'timeout' attribute in milliseconds"

320

return _timedelta_to_milliseconds(self.timeout)

321

322

def extended_timeout_milliseconds(self):

323

"Return the 'extended_timeout' attribute in milliseconds"

324

return _timedelta_to_milliseconds(self.extended_timeout)

317

return self._timedelta_to_milliseconds(self.timeout)

325

318

326

319

def interval_milliseconds(self):

327

320

"Return the 'interval' attribute in milliseconds"

328

return _timedelta_to_milliseconds(self.interval)

329

321

return self._timedelta_to_milliseconds(self.interval)

322

330

323

def approval_delay_milliseconds(self):

331

return _timedelta_to_milliseconds(self.approval_delay)

324

return self._timedelta_to_milliseconds(self.approval_delay)

332

325

333

326

def __init__(self, name = None, disable_hook=None, config=None):

334

327

"""Note: the 'checker' key in 'config' sets the

361

354

self.last_enabled = None

362

355

self.last_checked_ok = None

363

356

self.timeout = string_to_delta(config["timeout"])

364

self.extended_timeout = string_to_delta(config["extended_timeout"])

365

357

self.interval = string_to_delta(config["interval"])

366

358

self.disable_hook = disable_hook

367

359

self.checker = None

368

360

self.checker_initiator_tag = None

369

361

self.disable_initiator_tag = None

370

self.expires = None

371

362

self.checker_callback_tag = None

372

363

self.checker_command = config["checker"]

373

364

self.current_checker_command = None

393

384

# Already enabled

394

385

return

395

386

self.send_changedstate()

387

self.last_enabled = datetime.datetime.utcnow()

396

388

# Schedule a new checker to be started an 'interval' from now,

397

389

# and every interval from then on.

398

390

self.checker_initiator_tag = (gobject.timeout_add

399

391

(self.interval_milliseconds(),

400

392

self.start_checker))

401

393

# Schedule a disable() when 'timeout' has passed

402

self.expires = datetime.datetime.utcnow() + self.timeout

403

394

self.disable_initiator_tag = (gobject.timeout_add

404

395

(self.timeout_milliseconds(),

405

396

self.disable))

406

397

self.enabled = True

407

self.last_enabled = datetime.datetime.utcnow()

408

398

# Also start a new checker *right now*.

409

399

self.start_checker()

410

400

419

409

if getattr(self, "disable_initiator_tag", False):

420

410

gobject.source_remove(self.disable_initiator_tag)

421

411

self.disable_initiator_tag = None

422

self.expires = None

423

412

if getattr(self, "checker_initiator_tag", False):

424

413

gobject.source_remove(self.checker_initiator_tag)

425

414

self.checker_initiator_tag = None

451

440

logger.warning("Checker for %(name)s crashed?",

452

441

vars(self))

453

442

454

def checked_ok(self, timeout=None):

443

def checked_ok(self):

455

444

"""Bump up the timeout for this client.

456

445

457

446

This should only be called when the client has been seen,

458

447

alive and well.

459

448

"""

460

if timeout is None:

461

timeout = self.timeout

462

449

self.last_checked_ok = datetime.datetime.utcnow()

463

450

gobject.source_remove(self.disable_initiator_tag)

464

self.expires = datetime.datetime.utcnow() + timeout

465

451

self.disable_initiator_tag = (gobject.timeout_add

466

(_timedelta_to_milliseconds(timeout),

452

(self.timeout_milliseconds(),

467

453

self.disable))

468

454

469

455

def need_approval(self):

510

496

'replace')))

511

497

for attr in

512

498

self.runtime_expansions)

513

499

514

500

try:

515

501

command = self.checker_command % escaped_attrs

516

502

except TypeError as error:

562

548

raise

563

549

self.checker = None

564

550

565

566

551

def dbus_service_property(dbus_interface, signature="v",

567

552

access="readwrite", byte_arrays=False):

568

553

"""Decorators for marking methods of a DBusObjectWithProperties to

614

599

615

600

class DBusObjectWithProperties(dbus.service.Object):

616

601

"""A D-Bus object with properties.

617

602

618

603

Classes inheriting from this can use the dbus_service_property

619

604

decorator to expose methods as D-Bus properties. It exposes the

620

605

standard Get(), Set(), and GetAll() methods on the D-Bus.

627

612

def _get_all_dbus_properties(self):

628

613

"""Returns a generator of (name, attribute) pairs

629

614

"""

630

return ((prop.__get__(self)._dbus_name, prop.__get__(self))

631

for cls in self.__class__.__mro__

632

for name, prop in inspect.getmembers(cls, self._is_dbus_property))

615

return ((prop._dbus_name, prop)

616

for name, prop in

617

inspect.getmembers(self, self._is_dbus_property))

633

618

634

619

def _get_dbus_property(self, interface_name, property_name):

635

620

"""Returns a bound method if one exists which is a D-Bus

636

621

property with the specified name and interface.

637

622

"""

638

for cls in self.__class__.__mro__:

639

for name, value in inspect.getmembers(cls, self._is_dbus_property):

640

if value._dbus_name == property_name and value._dbus_interface == interface_name:

641

return value.__get__(self)

642

623

for name in (property_name,

624

property_name + "_dbus_property"):

625

prop = getattr(self, name, None)

626

if (prop is None

627

or not self._is_dbus_property(prop)

628

or prop._dbus_name != property_name

629

or (interface_name and prop._dbus_interface

630

and interface_name != prop._dbus_interface)):

631

continue

632

return prop

643

633

# No such property

644

634

raise DBusPropertyNotFound(self.dbus_object_path + ":"

645

635

+ interface_name + "."

646

636

+ property_name)

647

648

637

649

638

@dbus.service.method(dbus.PROPERTIES_IFACE, in_signature="ss",

650

639

out_signature="v")

680

669

def GetAll(self, interface_name):

681

670

"""Standard D-Bus property GetAll() method, see D-Bus

682

671

standard.

683

672

684

673

Note: Will not include properties with access="write".

685

674

"""

686

675

all = {}

748

737

return xmlstring

749

738

750

739

751

def datetime_to_dbus (dt, variant_level=0):

752

"""Convert a UTC datetime.datetime() to a D-Bus type."""

753

if dt is None:

754

return dbus.String("", variant_level = variant_level)

755

return dbus.String(dt.isoformat(),

756

variant_level=variant_level)

757

758

class transitional_dbus_metaclass(DBusObjectWithProperties.__metaclass__):

759

def __new__(mcs, name, bases, attr):

760

for attrname, old_dbusobj in inspect.getmembers(bases[0]):

761

new_interface = getattr(old_dbusobj, "_dbus_interface", "").replace("se.bsnet.fukt.", "se.recompile.")

762

if (getattr(old_dbusobj, "_dbus_is_signal", False)

763

and old_dbusobj._dbus_interface.startswith("se.bsnet.fukt.Mandos")):

764

unwrappedfunc = dict(zip(old_dbusobj.func_code.co_freevars,

765

old_dbusobj.__closure__))["func"].cell_contents

766

newfunc = types.FunctionType(unwrappedfunc.func_code,

767

unwrappedfunc.func_globals,

768

unwrappedfunc.func_name,

769

unwrappedfunc.func_defaults,

770

unwrappedfunc.func_closure)

771

new_dbusfunc = dbus.service.signal(

772

new_interface, old_dbusobj._dbus_signature)(newfunc)

773

attr["_transitional_" + attrname] = new_dbusfunc

774

775

def fixscope(func1, func2):

776

def newcall(*args, **kwargs):

777

func1(*args, **kwargs)

778

func2(*args, **kwargs)

779

return newcall

780

781

attr[attrname] = fixscope(old_dbusobj, new_dbusfunc)

782

783

elif (getattr(old_dbusobj, "_dbus_is_method", False)

784

and old_dbusobj._dbus_interface.startswith("se.bsnet.fukt.Mandos")):

785

new_dbusfunc = (dbus.service.method

786

(new_interface,

787

old_dbusobj._dbus_in_signature,

788

old_dbusobj._dbus_out_signature)

789

(types.FunctionType

790

(old_dbusobj.func_code,

791

old_dbusobj.func_globals,

792

old_dbusobj.func_name,

793

old_dbusobj.func_defaults,

794

old_dbusobj.func_closure)))

795

796

attr[attrname] = new_dbusfunc

797

elif (getattr(old_dbusobj, "_dbus_is_property", False)

798

and old_dbusobj._dbus_interface.startswith("se.bsnet.fukt.Mandos")):

799

new_dbusfunc = (dbus_service_property

800

(new_interface,

801

old_dbusobj._dbus_signature,

802

old_dbusobj._dbus_access,

803

old_dbusobj._dbus_get_args_options["byte_arrays"])

804

(types.FunctionType

805

(old_dbusobj.func_code,

806

old_dbusobj.func_globals,

807

old_dbusobj.func_name,

808

old_dbusobj.func_defaults,

809

old_dbusobj.func_closure)))

810

811

attr[attrname] = new_dbusfunc

812

return type.__new__(mcs, name, bases, attr)

813

814

740

class ClientDBus(Client, DBusObjectWithProperties):

815

741

"""A Client class using D-Bus

816

742

838

764

DBusObjectWithProperties.__init__(self, self.bus,

839

765

self.dbus_object_path)

840

766

841

def notifychangeproperty(transform_func,

842

dbus_name, type_func=lambda x: x,

843

variant_level=1):

844

""" Modify a variable so that its a property that announce its

845

changes to DBus.

846

transform_fun: Function that takes a value and transform it to

847

DBus type.

848

dbus_name: DBus name of the variable

849

type_func: Function that transform the value before sending it

850

to DBus

851

variant_level: DBus variant level. default: 1

852

"""

853

real_value = [None,]

854

def setter(self, value):

855

old_value = real_value[0]

856

real_value[0] = value

857

if hasattr(self, "dbus_object_path"):

858

if type_func(old_value) != type_func(real_value[0]):

859

dbus_value = transform_func(type_func(real_value[0]),

860

variant_level)

861

self.PropertyChanged(dbus.String(dbus_name),

862

dbus_value)

863

864

return property(lambda self: real_value[0], setter)

865

866

867

expires = notifychangeproperty(datetime_to_dbus, "Expires")

868

approvals_pending = notifychangeproperty(dbus.Boolean,

869

"ApprovalPending",

870

type_func = bool)

871

enabled = notifychangeproperty(dbus.Boolean, "Enabled")

872

last_enabled = notifychangeproperty(datetime_to_dbus,

873

"LastEnabled")

874

checker = notifychangeproperty(dbus.Boolean, "CheckerRunning",

875

type_func = lambda checker: checker is not None)

876

last_checked_ok = notifychangeproperty(datetime_to_dbus,

877

"LastCheckedOK")

878

last_approval_request = notifychangeproperty(datetime_to_dbus,

879

"LastApprovalRequest")

880

approved_by_default = notifychangeproperty(dbus.Boolean,

881

"ApprovedByDefault")

882

approval_delay = notifychangeproperty(dbus.UInt16, "ApprovalDelay",

883