mirror of
https://github.com/topjohnwu/selinux.git
synced 2024-11-30 15:00:22 +00:00
9b4e9c4bf0
A change in seobject.py file_type_str_to_option made the "file type"
list not compatible with items in this ComboBox.
See commit 317743bbe2 ("python/semanage: fix export of fcontext socket
entries")
Avoid this in the future by populating the ComboBox using keys from
file_type_str_to_option.
This change disables translations on the file types, but those cause
other issues (adding file context fails the same way as with 'socket
file' since the translated strings differ form
file_type_str_to_option.keys, 'properties' of a file context entry
shows no file type for the same reason).
Fixes:
Traceback (most recent call last):
File "/usr/share/system-config-selinux/system-config-selinux.py", line 136, in add
self.tabs[self.notebook.get_current_page()].addDialog()
File "/usr/share/system-config-selinux/semanagePage.py", line 143, in addDialog
if self.add() is False:
File "/usr/share/system-config-selinux/fcontextPage.py", line 195, in add
(rc, out) = getstatusoutput("semanage fcontext -a -t %s -r %s -f '%s' '%s'" % (type, mls, seobject.file_type_str_to_option[ftype], fspec))
KeyError: 'socket file'
Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
231 lines
8.3 KiB
Python
231 lines
8.3 KiB
Python
## fcontextPage.py - show selinux mappings
|
|
## Copyright (C) 2006 Red Hat, Inc.
|
|
|
|
## This program is free software; you can redistribute it and/or modify
|
|
## it under the terms of the GNU General Public License as published by
|
|
## the Free Software Foundation; either version 2 of the License, or
|
|
## (at your option) any later version.
|
|
|
|
## This program is distributed in the hope that it will be useful,
|
|
## but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
## GNU General Public License for more details.
|
|
|
|
## You should have received a copy of the GNU General Public License
|
|
## along with this program; if not, write to the Free Software
|
|
## Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
|
|
## Author: Dan Walsh
|
|
from gi.repository import GObject, Gtk
|
|
import seobject
|
|
try:
|
|
from subprocess import getstatusoutput
|
|
except ImportError:
|
|
from commands import getstatusoutput
|
|
|
|
from semanagePage import *
|
|
|
|
SPEC_COL = 0
|
|
TYPE_COL = 1
|
|
FTYPE_COL = 2
|
|
|
|
|
|
class context:
|
|
|
|
def __init__(self, scontext):
|
|
self.scontext = scontext
|
|
con = scontext.split(":")
|
|
self.type = con[0]
|
|
if len(con) > 1:
|
|
self.mls = con[1]
|
|
else:
|
|
self.mls = "s0"
|
|
|
|
def __str__(self):
|
|
return self.scontext
|
|
|
|
##
|
|
## I18N
|
|
##
|
|
PROGNAME = "policycoreutils"
|
|
try:
|
|
import gettext
|
|
kwargs = {}
|
|
if sys.version_info < (3,):
|
|
kwargs['unicode'] = True
|
|
gettext.install(PROGNAME,
|
|
localedir="/usr/share/locale",
|
|
codeset='utf-8',
|
|
**kwargs)
|
|
except:
|
|
try:
|
|
import builtins
|
|
builtins.__dict__['_'] = str
|
|
except ImportError:
|
|
import __builtin__
|
|
__builtin__.__dict__['_'] = unicode
|
|
|
|
|
|
class fcontextPage(semanagePage):
|
|
|
|
def __init__(self, xml):
|
|
semanagePage.__init__(self, xml, "fcontext", _("File Labeling"))
|
|
self.fcontextFilter = xml.get_object("fcontextFilterEntry")
|
|
self.fcontextFilter.connect("focus_out_event", self.filter_changed)
|
|
self.fcontextFilter.connect("activate", self.filter_changed)
|
|
|
|
self.store = Gtk.ListStore(GObject.TYPE_STRING, GObject.TYPE_STRING, GObject.TYPE_STRING)
|
|
self.view = xml.get_object("fcontextView")
|
|
self.view.set_model(self.store)
|
|
self.view.set_search_equal_func(self.search)
|
|
|
|
col = Gtk.TreeViewColumn(_("File\nSpecification"), Gtk.CellRendererText(), text=SPEC_COL)
|
|
col.set_sizing(Gtk.TreeViewColumnSizing.FIXED)
|
|
col.set_fixed_width(250)
|
|
|
|
col.set_sort_column_id(SPEC_COL)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
col = Gtk.TreeViewColumn(_("Selinux\nFile Type"), Gtk.CellRendererText(), text=TYPE_COL)
|
|
|
|
col.set_sizing(Gtk.TreeViewColumnSizing.FIXED)
|
|
col.set_fixed_width(250)
|
|
col.set_sort_column_id(TYPE_COL)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
col = Gtk.TreeViewColumn(_("File\nType"), Gtk.CellRendererText(), text=2)
|
|
col.set_sort_column_id(FTYPE_COL)
|
|
col.set_resizable(True)
|
|
self.view.append_column(col)
|
|
|
|
self.store.set_sort_column_id(SPEC_COL, Gtk.SortType.ASCENDING)
|
|
self.load()
|
|
self.fcontextEntry = xml.get_object("fcontextEntry")
|
|
self.fcontextFileTypeCombo = xml.get_object("fcontextFileTypeCombo")
|
|
# Populate file type combo_box
|
|
liststore = self.fcontextFileTypeCombo.get_model()
|
|
for ftype in seobject.file_type_str_to_option.keys():
|
|
iter = liststore.append()
|
|
liststore.set_value(iter, 0, ftype)
|
|
iter = liststore.get_iter_first()
|
|
self.fcontextFileTypeCombo.set_active_iter(iter)
|
|
self.fcontextTypeEntry = xml.get_object("fcontextTypeEntry")
|
|
self.fcontextMLSEntry = xml.get_object("fcontextMLSEntry")
|
|
|
|
def match(self, fcon_dict, k, filter):
|
|
try:
|
|
f = filter.lower()
|
|
for con in k:
|
|
k = con.lower()
|
|
if k.find(f) >= 0:
|
|
return True
|
|
for con in fcon_dict[k]:
|
|
k = con.lower()
|
|
if k.find(f) >= 0:
|
|
return True
|
|
except:
|
|
pass
|
|
return False
|
|
|
|
def load(self, filter=""):
|
|
self.filter = filter
|
|
self.fcontext = seobject.fcontextRecords()
|
|
self.store.clear()
|
|
fcon_dict = self.fcontext.get_all(self.local)
|
|
for k in sorted(fcon_dict.keys()):
|
|
if not self.match(fcon_dict, k, filter):
|
|
continue
|
|
iter = self.store.append()
|
|
self.store.set_value(iter, SPEC_COL, k[0])
|
|
self.store.set_value(iter, FTYPE_COL, k[1])
|
|
if fcon_dict[k]:
|
|
rec = "%s:%s" % (fcon_dict[k][2], seobject.translate(fcon_dict[k][3], False))
|
|
else:
|
|
rec = "<<None>>"
|
|
self.store.set_value(iter, TYPE_COL, rec)
|
|
self.view.get_selection().select_path((0,))
|
|
|
|
def filter_changed(self, *arg):
|
|
filter = arg[0].get_text()
|
|
if filter != self.filter:
|
|
self.load(filter)
|
|
|
|
def dialogInit(self):
|
|
store, iter = self.view.get_selection().get_selected()
|
|
self.fcontextEntry.set_text(store.get_value(iter, SPEC_COL))
|
|
self.fcontextEntry.set_sensitive(False)
|
|
scontext = store.get_value(iter, TYPE_COL)
|
|
scon = context(scontext)
|
|
self.fcontextTypeEntry.set_text(scon.type)
|
|
self.fcontextMLSEntry.set_text(scon.mls)
|
|
type = store.get_value(iter, FTYPE_COL)
|
|
liststore = self.fcontextFileTypeCombo.get_model()
|
|
iter = liststore.get_iter_first()
|
|
while iter != None and liststore.get_value(iter, 0) != type:
|
|
iter = liststore.iter_next(iter)
|
|
if iter != None:
|
|
self.fcontextFileTypeCombo.set_active_iter(iter)
|
|
self.fcontextFileTypeCombo.set_sensitive(False)
|
|
|
|
def dialogClear(self):
|
|
self.fcontextEntry.set_text("")
|
|
self.fcontextEntry.set_sensitive(True)
|
|
self.fcontextFileTypeCombo.set_sensitive(True)
|
|
self.fcontextFileTypeCombo.set_active(0)
|
|
self.fcontextTypeEntry.set_text("")
|
|
self.fcontextMLSEntry.set_text("s0")
|
|
|
|
def delete(self):
|
|
store, iter = self.view.get_selection().get_selected()
|
|
try:
|
|
fspec = store.get_value(iter, SPEC_COL)
|
|
ftype = store.get_value(iter, FTYPE_COL)
|
|
self.wait()
|
|
(rc, out) = getstatusoutput("semanage fcontext -d -f '%s' '%s'" % (seobject.file_type_str_to_option[ftype], fspec))
|
|
self.ready()
|
|
|
|
if rc != 0:
|
|
return self.error(out)
|
|
store.remove(iter)
|
|
self.view.get_selection().select_path((0,))
|
|
except ValueError as e:
|
|
self.error(e.args[0])
|
|
|
|
def add(self):
|
|
fspec = self.fcontextEntry.get_text().strip()
|
|
type = self.fcontextTypeEntry.get_text().strip()
|
|
mls = self.fcontextMLSEntry.get_text().strip()
|
|
list_model = self.fcontextFileTypeCombo.get_model()
|
|
it = self.fcontextFileTypeCombo.get_active_iter()
|
|
ftype = list_model.get_value(it, 0)
|
|
self.wait()
|
|
(rc, out) = getstatusoutput("semanage fcontext -a -t %s -r %s -f '%s' '%s'" % (type, mls, seobject.file_type_str_to_option[ftype], fspec))
|
|
self.ready()
|
|
if rc != 0:
|
|
self.error(out)
|
|
return False
|
|
|
|
iter = self.store.append()
|
|
self.store.set_value(iter, SPEC_COL, fspec)
|
|
self.store.set_value(iter, FTYPE_COL, ftype)
|
|
self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls))
|
|
|
|
def modify(self):
|
|
fspec = self.fcontextEntry.get_text().strip()
|
|
type = self.fcontextTypeEntry.get_text().strip()
|
|
mls = self.fcontextMLSEntry.get_text().strip()
|
|
list_model = self.fcontextFileTypeCombo.get_model()
|
|
iter = self.fcontextFileTypeCombo.get_active_iter()
|
|
ftype = list_model.get_value(iter, 0)
|
|
self.wait()
|
|
(rc, out) = getstatusoutput("semanage fcontext -m -t %s -r %s -f '%s' '%s'" % (type, mls, seobject.file_type_str_to_option[ftype], fspec))
|
|
self.ready()
|
|
if rc != 0:
|
|
self.error(out)
|
|
return False
|
|
|
|
store, iter = self.view.get_selection().get_selected()
|
|
self.store.set_value(iter, SPEC_COL, fspec)
|
|
self.store.set_value(iter, FTYPE_COL, ftype)
|
|
self.store.set_value(iter, TYPE_COL, "%s:%s" % (type, mls))
|