Current File : //usr/lib/python3.9/site-packages/cockpit/__pycache__/superuser.cpython-39.opt-1.pyc
a
��j]0 � @ sn d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl m
Z
d dl m Z d dl
mZ d dlmZ d dlmZ d dlmZmZmZ dd lmZ dd
lmZmZ dd l m Z dd l m Z m Z m!Z! dd
l"m#Z# ddl$m%Z%m&Z&m'Z' e�(e)�Z*e+e,d�dd�Z-e e,d�dd�Z.G dd� de �Z/G dd� dej0�Z1G dd� de1�Z2G dd � d e'e1ej3d d �Z4dS ) � N)�basename)�TemporaryDirectory)�Sequence)�ferny)�make_bootloader)�Bus�Variant�bus� )�BridgeBeibootHelper)�
JsonObject�get_str)� BridgeConfig)�ConfiguredPeer�Peer� PeerError)� PolkitAgent)�Router� RoutingError� RoutingRule)� sudo_path�returnc C sF z&t j| ddgt jt jt jdd� W dS t jtfy@ Y dS 0 d S )Nz-Az--helpT)�stdin�stdout�stderr�checkF)�
subprocess�runZDEVNULLZCalledProcessError�OSError)r � r �5/usr/lib/python3.9/site-packages/cockpit/superuser.py�sudo_supports_askpass! s �r! )�configr c C sB | j s
dS t�| jd �}|d u r&dS t|�dkr>t|�s>dS dS )NFr ZsudoT)�
privileged�shutil�which�spawnr r! )r" �commandr r r �is_valid_superuser_config0 s r( c sV e Zd ZU ejed< eeejd�� fdd� Zde e
j d�dd�Z d d
�d d �Z
� ZS )
�
SuperuserPeer� responder)�routerr" r* c s t � �||� || _d S �N)�super�__init__r* )�selfr+ r" r* �� __class__r r r. > s zSuperuserPeer.__init__z
Sequence[str])�argsr r c � s� t �t jt j�\}}t�� }dt�� � d�}t� � }|�
ddddd|dd d
d d �fd
d
dd �fdd
dd �fdd|d �fdd|d �fdd|d �fddt � |d �|dfgd �fgg � }|�
d� |�|�I d H |j� fdd�|d �I d H \} }
| S ) Nzcockpit-superuser-z.servicezorg.freedesktop.systemd1z/org/freedesktop/systemd1z org.freedesktop.systemd1.Manager�StartTransientUnitzssa(sv)a(sa(sv))ZfailZ Description�szCockpit privileged bridge)�t�v�Type�execZUser�rootZStandardInputFileDescriptor�hZ StandardOutputFileDescriptorZStandardErrorFileDescriptorZ ExecStartza(sasb)r FTc s � S r, r r �r/ r r �<lambda>h � z4SuperuserPeer.start_transient_unit.<locals>.<lambda>)�sock)�socketZ
socketpairZAF_UNIXZ SOCK_STREAM�asyncio�get_running_loop�os�getpidr Zdefault_systemZmessage_new_method_callr$ r% Z#set_allow_interactive_authorizationZ
call_asyncZcreate_connection) r/ r2 r ZoursZtheirsZloopZ unit_name�system�msg� transportZprotocolr r; r �start_transient_unitB s4 � �
z"SuperuserPeer.start_transient_unitN�r c � s� t �� 4 I d H ���}| jjrBt�d| j� |�t| j ��I d H nt�d| j� | j g}d| jv r�t�d| j� t
| dg�}|� |� t |j
tjd��� }nd }t�|�}d| jv r�|�t� �}t�|�}d|� �g}n| j}| jjd k�r| j| j|d
�I d H } n| j| j||d d �I d H } |d u�r2| �|� z|�� I d H W n: tj�y~ }
z t d
t |
�d�|
�W Y d }
~
n
d }
~
0 0 W d �I d H �q�1 I d H �s�0 Y d S )Nz-connecting polkit superuser peer transport %rz1connecting non-polkit superuser peer transport %rz# cockpit-bridgez$going to beiboot superuser bridge %rz --privileged)ZgadgetszSUDO_ASKPASS=ferny-askpassz
SUDO_ASKPASS=r3 )r T)r Zstart_new_sessionzauthentication-failed)�message) �
contextlib�AsyncExitStackr" �polkit�logger�debugr2 �enter_async_contextr r* r �appendr Zstepsr ZBEIBOOT_GADGETS�encodeZInteractionAgent�env�
enter_contextr Zwrite_askpass_to_tmpdir�methodrG r& �writeZ communicateZInteractionErrorr �str) r/ �contextZ
responders�helperZstage1ZagentZtmpdirZ
ferny_askpassrR rF �excr r r �do_connect_transportl s6
z"SuperuserPeer.do_connect_transport)�__name__�
__module__� __qualname__r �AskpassHandler�__annotations__r r r. �objectr@ Z TransportrG rZ �
__classcell__r r r0 r r) ; s
*r) c @ s& e Zd ZdZeddedd�dd�ZdS )�CockpitResponder)z
ferny.askpass�cockpit.send-stderrztuple[object, ...]z list[int]N)r' r2 �fdsr r c
� sj |dkrft j |d d��>}|�d� |�dgt jt jt�ddg�fg� W d � n1 s\0 Y d S )Nrc r )�fileno� �i� )r? �popZsendmsgZ
SOL_SOCKETZ
SCM_RIGHTS�array)r/ r' r2 rd r r> r r r �do_custom_command� s
z"CockpitResponder.do_custom_command)r[ r\ r] ZcommandsrV rk r r r r rb � s �rb c @ s. e Zd Zed�dd�Zeeedd�dd�ZdS ) �AuthorizeResponder)r+ c C s || _ d| _d S )NF)r+ �authorize_attempted)r/ r+ r r r r. � s zAuthorizeResponder.__init__�
str | None��messages�prompt�hintr c � s` | j rt�d� d S d| _ d�dd� t�� �d�D ��}| j�d|� ��I d H }|dkr\d S |S )NzAnoninteractive authorize during init already attempted, rejectingT� c s s | ]}|d �V qdS )Z02xNr ��.0�cr r r � <genexpr>� r= z0AuthorizeResponder.do_askpass.<locals>.<genexpr>�asciizplain1:) rm rM �info�join�getpassZgetuserrQ r+ Zrequest_authorization)r/ rp rq rr Zhexuser�passwordr r r �
do_askpass� s
z AuthorizeResponder.do_askpassN)r[ r\ r] r r. rV r} r r r r rl � s rl c s~ e Zd ZU dZee ed< ded< ded< ej� ddddd�Z
ejj d g d
�Z ejj dd d
�Z
ejj d i d
�Zed
d�dd�Zeeedd�dd�Zdd�eed�� fdd�Zdd�d d �Zeejdd �d d �Zee dd!�d"d#�Zdd�d$d%�Zdd�d&d'�Z edd(�d)d*�Z d+dd,�d-d.�Z ejj dgd/�edd0�d1d2��Z ej� � dd�d3d4��Z!ejj dgd/�edd5�d6d7��Z"� Z#S )8�SuperuserRoutingRuler �superuser_configszasyncio.Future[str] | None�pending_promptzSuperuserPeer | None�peerr4 �b�as)�value�none�a{sv}z Peer | None)�optionsr c C s< |� d�}|r| jdkr d S | js*|dkr0| jS td��d S )N� superuserr9 �tryz
access-denied)�get�currentr� r )r/ r� r� r r r �
apply_rule� s
z SuperuserRoutingRule.apply_rulern ro c � sV |dk}t �� �� | _z2t�d|� | �d|d||� | jI d H W d | _S d | _0 d S )NZconfirmzprompting for %srs )r@ rA Z
create_futurer� rM rN rq )r/ rp rq rr Zechor r r r} � s �z SuperuserRoutingRule.do_askpassF)r# )r+ r# c s8 t � �|� d | _d | _d | _|s.t�� dkr4d| _d S )Nr r9 )r- r. r� r� ZstartuprB �getuidr� )r/ r+ r# r0 r r r. � s z SuperuserRoutingRule.__init__NrH c C s d| _ d | _d S )Nr� )r� r� r; r r r � peer_done� s z SuperuserRoutingRule.peer_done)�namer* r c
� s� | j dkrt�dd��| jD ]}||jdfv r qHq t�dd|� d���d| _ t| j||�| _| j�| j � z | jj
| jj d�I d H W nZ t j
y� t�d d
�d �Y n: ttfy� } z t�dt|��|�W Y d }~n
d }~0 0 | jjj| _ d S ) Nr� zcockpit.Superuser.Errorz Superuser bridge already running�anyz Unknown superuser bridge type "�"�init)� init_hostz!cockpit.Superuser.Error.CancelledzOperation aborted)r� r ZBusErrorr r� r) r+ r� �add_done_callbackr� �startr� r@ ZCancelledErrorr r rV r" )r/ r� r* r" rY r r r �go� s
(zSuperuserRoutingRule.go)�configsr c C s� t �dt|�� dd� |D �}t|�| _dd� | jD �| _dd� |D �| _t �d| j� | jd ur�| jj| jvr�t �d| jjj � | �
� d S ) Nzset_configs() with %d itemsc S s g | ]}t |�r|�qS r )r( �ru r" r r r �
<listcomp> r= z4SuperuserRoutingRule.set_configs.<locals>.<listcomp>c S s g | ]
}|j �qS r )r� r� r r r r� r= c S s* i | ]"}|j r|j td t|j �id��qS )�labelr� )r� r rt r r r �
<dictcomp>
r= z4SuperuserRoutingRule.set_configs.<locals>.<dictcomp>z bridges are now %sz= stopping superuser bridge '%s': it disappeared from configs) rM rN �len�tupler �bridges�methodsr� r" r� �shutdown)r/ r� r r r � set_configs s
z SuperuserRoutingRule.set_configsc C s | j d ur| j �� d | _ d S r, )r� �cancelr; r r r �
cancel_prompt s
z"SuperuserRoutingRule.cancel_promptc C s | � � | jd ur | j�� d S r, )r� r� �closer; r r r r� s
z SuperuserRoutingRule.shutdown)�paramsr c C s< t |dd�}t| j�}t�| �||��| _| j�| j� d S )N�idr� ) r
rl r+ r@ Z create_taskr� �
_init_taskr� �
_init_done)r/ r� r� r* r r r r� # s
zSuperuserRoutingRule.initzasyncio.Task[None])�taskr c C s& t �d|�� � | jjdd� | `d S )Nzsuperuser init done! %szsuperuser-init-done)r' )rM rN � exceptionr+ Z
write_controlr� )r/ r� r r r r� ) s z SuperuserRoutingRule._init_done)Zin_types)r� r c � s | � || �I d H d S r, )r� )r/ r� r r r r� / s zSuperuserRoutingRule.startc C s | � � d S r, )r� r; r r r �stop3 s zSuperuserRoutingRule.stop)�replyr c C s0 | j d ur"t�d� | j �|� n
t�d� d S )Nz responding to pending promptz!got Answer, but no prompt pending)r� rM rN Z
set_result)r/ r� r r r �answer7 s
zSuperuserRoutingRule.answer)$r[ r\ r] r r r r_ r Z InterfaceZSignalrq ZPropertyr� r� r� r r� rV r} r �boolr. r� r r^ r� r� r� r� r� r� ZMethodr� r� r� ra r r r0 r r~ � s.
r~ zcockpit.Superuser)Z interface)5rj r@ rJ r{ ZloggingrB r$ r? r Zos.pathr Ztempfiler �typingr Zcockpit._vendorr Z cockpit._vendor.bei.bootloaderr Z cockpit._vendor.systemd_ctypesr r r Zbeipackr Zjsonutilr r
Zpackagesr r� r r r rL r r+ r r r Z getLoggerr[ rM rV r� r! r( r) r^ rb rl ZObjectr~ r r r r �<module> s6
Z
Mini Shell