diff options
| -rwxr-xr-x | perl-install/standalone/drakperm | 393 |
1 files changed, 393 insertions, 0 deletions
diff --git a/perl-install/standalone/drakperm b/perl-install/standalone/drakperm new file mode 100755 index 000000000..cb9076383 --- /dev/null +++ b/perl-install/standalone/drakperm @@ -0,0 +1,393 @@ +#!/usr/bin/perl + +use lib qw(/usr/lib/libDrakX); +use standalone; + +use MDK::Common; + +use Gtk; +init Gtk; + +use interactive; + +#- vars declaration +my ($default_perm_level) = "level ".chomp_(`cat /etc/sysconfig/msec | grep SECURE_LEVEL= |cut -d= -f2`); +my %CURENT; +my %perm = ( 'level 1' => 'perm.1', + 'level 2' => 'perm.2', + 'level 3' => 'perm.3', + 'level 4' => 'perm.4', + 'level 5' => 'perm.5', + 'editable'=> 'perm.local', + ); +my $perm_path= '/usr/share/msec/'; +my $rows_cnt = 0; +my $editable = 0; +my $modified = 0; +my $in = new interactive->vnew(); +#my $bg = Gtk::Gdk::Color->parse_color('grey'); +#- Widget declaration +my $W = new Gtk::Window('toplevel'); +my $scroll = new Gtk::ScrolledWindow; +my $Perm_list = new_with_titles Gtk::CList((_("path"),_("user"),_("group"),_("permissions"))); +my $vb = new Gtk::VBox(0,5); +my $select_box= new Gtk::HBox(0,5); +my $action_box= new Gtk::HBox(0,5); +my $up_down_box=new Gtk::HBox(0,5); +my $B_quit = new Gtk::Button('cancel'); +my $B_sav = new Gtk::Button('Ok'); +my $B_up = new Gtk::Button(_("UP")); +my $B_del = new Gtk::Button(_("delete")); +my $B_edit = new Gtk::Button(_("edit")); +my $B_down = new Gtk::Button(_("down")); +my $B_add = new Gtk::Button(_("add a rule")); +my $label_perm= new Gtk::Label(_("select perm file to see/edit")); +my $combo_perm= new Gtk::Combo; +my $tips = new Gtk::Tooltips; +my $pres = new Gtk::Label(_("Drakperm is used to see files to use in order to fix permissions, owners, and groups via msec.\nYou can also edit your own rules which will owerwrite the default rules.")); +my $F = new Gtk::Frame; +#- widgets settings +$combo_perm->set_popdown_strings(sort(keys %perm)); + +$tips->set_tip($B_add,_("Add a new rule at the end")); +$tips->set_tip($B_edit,_("Edit curent rule")); +$tips->set_tip($B_up,_("Up selected rule one level")); +$tips->set_tip($B_down,_("Down selected rule one level")); +$tips->set_tip($B_del,_("Delete selected rule")); + +#- signal management +$W->signal_connect(delete_event => \&killapp); +$Perm_list->signal_connect( select_row => \&row_setting_data ); +#$Perm_list->signal_connect( unselect_row => sub{ undef(%CURENT)}); +$B_sav->signal_connect( clicked => \&save_perm); +$B_quit->signal_connect( clicked => \&killapp); +$B_edit->signal_connect( clicked => \&row_setting_dialog ); +$B_add->signal_connect( clicked => sub{ + $Perm_list->insert( $rows_cnt ,''); + $Perm_list->select_row($rows_cnt , 0); + &row_setting_dialog; + $rows_cnt++; + }); +$B_del->signal_connect( clicked => sub { + $Perm_list->remove(${$CURENT{'clicked'}}{'row'}); + $rows_cnt--; + }); +$B_down->signal_connect( clicked => sub { + my $row = ${$CURENT{'clicked'}}{'row'}; + $Perm_list->row_move($row,$row+1); + $Perm_list->unselect_all; + $Perm_list->select_row($row+1,0); + $CURENT{'clicked'}{'row'} = $row+1; + }); +$B_up->signal_connect( clicked => sub { + my $row = ${$CURENT{'clicked'}}{'row'}; + $Perm_list->row_move($row,$row-1); + $Perm_list->unselect_all; + $Perm_list->select_row($row-1,0); + $CURENT{'clicked'}{'row'} = $row-1; + }); +$combo_perm->entry->signal_connect( changed => sub{ &display_perm($combo_perm->entry->get_text)}); +$Perm_list->signal_connect( button_press_event => sub{ + $editable or return 0; + my ($clist,$event) = @_; + if($event->{'type'} eq '2button_press'){ + &row_setting_dialog; + } + } ); + +#Viewing management +$select_box->add($label_perm); +$select_box->add($combo_perm); + +$scroll->add($Perm_list); +$scroll->set_policy('automatic','automatic'); + + +$Perm_list->set_shadow_type('out'); +$Perm_list->set_column_width( 0, 150 ); +$Perm_list->set_column_width( 1, 100 ); +$Perm_list->set_column_width( 2, 100 ); +$Perm_list->set_column_width( 3, 15 ); + +$up_down_box->add($B_up); +$up_down_box->add($B_down); +$up_down_box->add($B_add); +$up_down_box->add($B_edit); + +$action_box->add($B_sav); +$action_box->add($B_quit); + +$vb->pack_start($select_box,0,0,5); +$vb->pack_start($scroll,1,1,5); +$vb->pack_start($up_down_box,0,0,5); +$vb->pack_start($action_box,0,0,5); + +my $vb_ = new Gtk::VBox(0,5); +$F->add($vb); +$vb_->pack_start($pres,0,0,5); +$vb_->pack_start($F,1,1,5); + +$W->add($vb_); +$W->show_all; +$W->set_position('center'); + +&display_perm($default_perm_level); +$combo_perm->entry->set_text($default_perm_level); + +#- Gtk loop start here +main Gtk; + +#- Should never get here +exit 0; + + +#- Built in functions +sub killapp{ + $modified + and ($in->ask_okcancel('Warning','your changed are not saved do you whish to continue?') or return 0); + Gtk->exit(0); + return 0; +} + +#- Desc => set the Perm_list CList with the appropriate value +sub display_perm{ + local $perm_level = shift @_; + local $file = $perm_path.$perm{$perm_level}; + + $editable = ($perm_level =~ /^level \d/)?0:1; + + $Perm_list->clear(); + open F,$file; + while(<F>){ + m/^([^#]\S+)\s+([^.\s]+)(\.(\S+))?\s+(\d+)/ + or next; + @line = ( $1, + $2, + $4, + $5, + ); + $Perm_list->insert($i++,@line); + } + close F; + $up_down_box->set_sensitive($editable); + + $rows_cnt = $i; + undef(%CURENT); +} + +#- Desc => save the perm.local file if modification made +sub save_perm{ + $modified or return 0; + open F, '>'.$perm_path.'perm.local'; + for($i = 0 ; $i <= $rows_cnt;$i++){ + $line = $Perm_list->get_text( $i , 0 )."\t".$Perm_list->get_text($i,1).(($Perm_list->get_text($i,2))?".".$Perm_list->get_text($i,2):"")."\t".$Perm_list->get_text($i,3); + print F $line ; + } + close F; + $modified = 0; +} +#- on list selection we get all data concerning the curent selection +sub row_setting_data{ + my ( $widget, $row, $column, $event ) = @_; + %CURENT = ( 'clicked' =>{ 'row'=> $row, + 'col'=> $column, + }, + 'data' =>[ $Perm_list->get_text( $row,0), + $Perm_list->get_text( $row,1), + $Perm_list->get_text( $row,2), + $Perm_list->get_text( $row,3), + ] + ); +} + +#- Desc => Here is the complete subwindow for rule settings +sub row_setting_dialog{ + + $editable or return 0; + + my $row = ${$CURENT{'clicked'}}{'row'}; + + #- dlg widgets declaration + my $dlg = new Gtk::Dialog(); + my $ok = new Gtk::Button('ok'); + my $cancel = new Gtk::Button('cancel'); + my $browse = new Gtk::Button(_("browse")); + my $users = new Gtk::Combo; + my $groups = new Gtk::Combo; + my $file = new Gtk::Entry; + my $file_hbox=new Gtk::HBox(0,5); + my $usr_hbox= new Gtk::HBox(0,5); + my $usr_vbox= new Gtk::VBox(0,5); + my $usr_check=new Gtk::CheckButton(_("Current user")); + local @rights = ('user','group','other'); + local @check = ( '' , 'read','write','execute'); + my $hb_rights = new Gtk::HBox(0,15); + my $vb_rights = new Gtk::VBox(0,15); + my $F_rights = new Gtk::Frame(_("Permissions")); + my $F_path = new Gtk::Frame(_("Path")); + my $F_usr = new Gtk::Frame(_("Property")); + my $vb_specials = new Gtk::VBox(0,5); + my $sticky = new Gtk::CheckButton(_("sticky-bit")); + my $suid = new Gtk::CheckButton(_("Set-UID")); + my $gid = new Gtk::CheckButton(_("Set-GID")); + local $rght = ${$CURENT{'data'}}[3]; + local $s = (length($rght) == 4)?substr($rght,0,1):0 ; + local $user = ($s)?substr($rght,1,1):substr($rght,0,1); + local $group = ($s)?substr($rght,2,1):substr($rght,1,1); + local $other = ($s)?substr($rght,3,1):substr($rght,2,1); + foreach(@check){ + $vb_rights->add(new Gtk::Label($_)); + } + $hb_rights->add($vb_rights); + foreach $r (@rights){ + %{"$r"} = &get_right(${"$r"}); + ${'_vb'.$r} = new Gtk::VBox(0,5); + ${'_vb'.$r}->add(new Gtk::Label($r)); + foreach my $c (@check){ + $c eq '' and next; + ${"$r"."_$c"} = new Gtk::CheckButton; + ${"$r"}{$c} + and ${"$r"."_$c"}->set_active(1); + ${"_vb$r"}->add(${"$r"."_$c"}); + } + $hb_rights->add(${'_vb'.$r}); + } + + $vb_specials->add(new Gtk::Label(' ')); + $vb_specials->add($suid); + $vb_specials->add($gid); + $vb_specials->add($sticky); + $hb_rights->add($vb_specials); + + #- dlg widgets settings + local %s_right = &get_right($s); + $s_right{'execute'} and $sticky->set_active(1); + $s_right{'write'} and $gid->set_active(1); + $s_right{'read'} and $suid->set_active(1); + + $file->set_text(${$CURENT{'data'}}[0]); + + $users->set_popdown_strings(&get_user_or_group('users')); + $users->entry->set_text(${$CURENT{'data'}}[1]); + $users->entry->set_editable(0); + + $groups->set_popdown_strings(&get_user_or_group); + $groups->entry->set_text(${$CURENT{'data'}}[2]); + $groups->entry->set_editable(0); + $dlg->set_policy(0,0,1); + $dlg->set_modal(1); + + + if( ${$CURENT{'data'}}[1] eq 'current'){ + $usr_check->set_active(1); + $groups->set_sensitive(0); + $users->set_sensitive(0); + } + + $tips->set_tip($sticky,_("Used for directory:\n only owner of directory or file in this directory can delete it")); + $tips->set_tip($suid,_("Use owner id for execution")); + $tips->set_tip($gid,_("Use group id for execution")); + $tips->set_tip($usr_check,_("when checked, owner and group won't be changed")); + + #- event management + $cancel->signal_connect( clicked =>sub{ $dlg->destroy } ); + $browse->signal_connect( clicked => sub { + my $file_dlg = new Gtk::FileSelection(_("Path selection")); + $file_dlg->set_modal(1); + $file_dlg->show; + $file_dlg->set_filename( $file->get_text ); + $file_dlg->cancel_button->signal_connect( clicked => sub{ $file_dlg->destroy }); + $file_dlg->ok_button->signal_connect( clicked => sub{ + $file->set_text($file_dlg->get_filename); + $file_dlg->destroy; + }); + + }); + $ok->signal_connect( clicked => sub{ + $Perm_list->set_text($row,0,$file->get_text); + if($usr_check->get_active){ + $Perm_list->set_text($row,1,'current'); + $Perm_list->set_text($row,2,''); + }else{ + $Perm_list->set_text($row,1,$users->entry->get_text); + $Perm_list->set_text($row,2,$groups->entry->get_text); + } + #- mod calculation + $user = ($user_read->get_active?4:0)+($user_write->get_active?2:0)+($user_execute->get_active?1:0); + $group = ($group_read->get_active?4:0)+($group_write->get_active?2:0)+($group_execute->get_active?1:0); + $other = ($other_read->get_active?4:0)+($other_write->get_active?2:0)+($other_execute->get_active?1:0); + $s = ($sticky->get_active?1:0)+($suid->get_active?4:0)+($gid->get_active?2:0); + $Perm_list->set_text($row,3,(($s)?$s:'').$user.$group.$other); + $dlg->destroy; + $modified++; + }); + $usr_check->signal_connect( clicked => sub { + if($usr_check->get_active){ + $groups->set_sensitive(0); + $users->set_sensitive(0); + }else{ + $groups->set_sensitive(1); + $users->set_sensitive(1); + } + }); + + #- dlg widgets placement + $file_hbox->add($file); + $file_hbox->add($browse); + + $usr_vbox->add($usr_check); + $usr_vbox->add($usr_hbox); + + $usr_hbox->add(new Gtk::Label(_("user :"))); + $usr_hbox->add($users); + $usr_hbox->add(new Gtk::Label(_("group :"))); + $usr_hbox->add($groups); + + $F_path->add($file_hbox); + $F_rights->add($hb_rights); + $F_usr->add($usr_vbox); + + $dlg->vbox->add($F_path); + $dlg->vbox->add($F_usr); + $dlg->vbox->add($F_rights); + + $dlg->action_area->add($ok); + $dlg->action_area->add($cancel); + + $dlg->show_all; + +} + +#- Desc => return an array of the available users on the machine +sub get_user_or_group{ + my $what = @_; + local @users; + $what eq 'users' + and open F,'/etc/passwd' + or open F, '/etc/group'; + + while(<F>){ + m/^([^#:]+):[^:]+:[^:]+:/ + or next; + push @users,$1; + } + close F; + return sort(@users); +} + +#- Desc => return hash of boolean value for read write and execution permission from a value between 0 - 7 +sub get_right{ + my $right = shift @_; + my %rght = ('read'=>0,'write'=>0,'execute'=>0); + ($right - 4) >= 0 + and $rght{'read'}=1 + and $right = $right-4; + ($right - 2) >= 0 + and $rght{'write'}=1 + and $right = $right-2; + ($right - 1) >= 0 + and $rght{'execute'}=1 + and $right = $right-1; + return %rght; +} + |