관리-도구
편집 파일: superuser.cpython-39.pyc
a ��g�& � @ s: d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZ d dl m Z m Z m Z m Z d dlmZ d dlmZ d dlmZmZ ddlmZ dd lmZmZ dd lmZ dd l m Z m Z m Z dd l m!Z! dd l"m#Z#m$Z$m%Z% e�&e'�Z(G dd� de �Z)G dd� dej*�Z+G dd� de+�Z,G dd� de%e+ej-dd�Z.dS )� N)�TemporaryDirectory)�List�Optional�Sequence�Tuple)�ferny)�make_bootloader)�Variant�bus� )�BridgeBeibootHelper)� JsonObject�get_str)� BridgeConfig)�ConfiguredPeer�Peer� PeerError)� PolkitAgent)�Router� RoutingError� RoutingRulec sB e Zd ZU ejed< eeejd�� fdd� Zdd�dd�Z � Z S ) � SuperuserPeer� responder)�router�configr c s t � �||� || _d S �N)�super�__init__r )�selfr r r �� __class__� �5/usr/lib/python3.9/site-packages/cockpit/superuser.pyr - s zSuperuserPeer.__init__N��returnc � s� t �� 4 I d H ��`}d| jv rDt�d| j� |�t| j��I d H nt�d| j� | jg}d| jv r�t�d| j� t| dg�}|� |� t |j t j d��� }nd }t �|�}d| jv r�|�t� �}t �|�}d |� �g}n| j}| j| j||d d �I d H } |d u�r| �|� z|�� I d H W n: t j�yZ } z td t| �d �| �W Y d } ~ n d } ~ 0 0 W d �I d H �q�1 I d H �s�0 Y d S )NZpkexecz-connecting polkit superuser peer transport %rz1connecting non-polkit superuser peer transport %rz# cockpit-bridgez$going to beiboot superuser bridge %rz --privileged)ZgadgetszSUDO_ASKPASS=ferny-askpassz SUDO_ASKPASS=T)�stderrZstart_new_sessionzauthentication-failed)�message)� contextlib�AsyncExitStack�args�logger�debug�enter_async_contextr r r �appendr Zstepsr ZBEIBOOT_GADGETS�encodeZInteractionAgent�env� enter_contextr Zwrite_askpass_to_tmpdirZspawn�writeZ communicateZInteractionErrorr �str) r �contextZ responders�helperZstage1ZagentZtmpdirZ ferny_askpassr/ Z transport�excr! r! r" �do_connect_transport1 s2 z"SuperuserPeer.do_connect_transport) �__name__� __module__� __qualname__r �AskpassHandler�__annotations__r r r r6 � __classcell__r! r! r r" r * s r c @ s* e Zd ZdZeeee edd�dd�ZdS )�CockpitResponder)z ferny.askpass�cockpit.send-stderrN)�commandr) �fdsr% r$ c � sj |dkrft j |d d��>}|�d� |�dgt jt jt�ddg�fg� W d � n1 s\0 Y d S )Nr> r )�fileno� �i� )�socket�popZsendmsgZ SOL_SOCKETZ SCM_RIGHTS�array)r r? r) r@ r% Zsockr! r! r" �do_custom_commandZ s z"CockpitResponder.do_custom_command) r7 r8 r9 Zcommandsr2 r r �intrH r! r! r! r" r= W s r= c @ s. e Zd Zed�dd�Zeeedd�dd�ZdS ) �AuthorizeResponder)r c C s || _ d| _d S )NF)r �authorize_attempted)r r r! r! r" r c s zAuthorizeResponder.__init__z str | None��messages�prompt�hintr$ c � s` | j rt�d� d S d| _ d�dd� t�� �d�D ��}| j�d|� ��I d H }|dkr\d S |S )NzAnoninteractive authorize during init already attempted, rejectingT� c s s | ]}|d �V qdS )Z02xNr! ��.0�cr! r! r" � <genexpr>m � z0AuthorizeResponder.do_askpass.<locals>.<genexpr>�asciizplain1:) rK r* �info�join�getpassZgetuserr. r Zrequest_authorization)r rM rN rO Zhexuser�passwordr! r! r" � do_askpassg s z AuthorizeResponder.do_askpassN)r7 r8 r9 r r r2 r[ r! r! r! r" rJ b s rJ c s| e Zd ZU dZee ed< eej ed< ee ed< e j � ddddd�Ze j jdg d�Ze j jdd d�Ze j jd i d�Zeee d �d d �Zeeeee d�dd�Zdd�eed�� fdd�Zdd� Zee j dd�dd�Z ee d �d d �Z d d � Z d!d"� Z!edd#�d$d%�Z"d&dd'�d(d)�Z#e j j$dgd*�edd+�d,d-��Z%e j �$� dd.�d/d0��Z&e j j$dgd*�edd1�d2d3��Z'� Z(S )4�SuperuserRoutingRuler! �superuser_configs�pending_prompt�peer�s�b�as)�value�none�a{sv})�optionsr$ c C s< |� d�}|r| jdkr d S | js*|dkr0| jS td��d S )N� superuser�root�tryz access-denied)�get�currentr_ r )r rf rg r! r! r" � apply_rule� s z SuperuserRoutingRule.apply_rulerL c � sd | j d u sJ �|dk}t�� �� | _ z2t�d|� | �d|d||� | j I d H W d | _ S d | _ 0 d S )NZconfirmzprompting for %srP )r^ �asyncioZget_running_loopZ create_futurer* r+ rN )r rM rN rO Zechor! r! r" r[ � s �z SuperuserRoutingRule.do_askpassF�� privileged)r ro c s8 t � �|� d | _d | _d | _|s.t�� dkr4d| _d S )Nr rh )r r r^ r_ �startup�os�getuidrk )r r ro r r! r" r � s z SuperuserRoutingRule.__init__c C s d| _ d | _d S )Nrd )rk r_ �r r! r! r" � peer_done� s z SuperuserRoutingRule.peer_doneN)�namer r$ c � s | j dkrt�dd��| jd u s$J �| jd u s2J �| jD ]}||jdfv r8 qdq8t�dd|� d���d| _ t| j||�| _| j� | j � z | jj | jj d�I d H W nZ t jy� t�d d �d �Y n: ttfy� } z t�dt|��|�W Y d }~n d }~0 0 | jjj| _ d S ) Nrd zcockpit.Superuser.Errorz Superuser bridge already running�anyz Unknown superuser bridge type "�"�init)� init_hostz!cockpit.Superuser.Error.CancelledzOperation aborted)rk r ZBusErrorr_ rp r] ru r r �add_done_callbackrt �startry rm ZCancelledError�OSErrorr r2 r )r ru r r r5 r! r! r" �go� s$ (zSuperuserRoutingRule.go)�configsc C s� t �dt|�� dd� |D �}t|�| _dd� | jD �| _dd� |D �| _t �d| j� | jd ur�| jj| jvr�t �d| jjj � | � � d S ) Nzset_configs() with %d itemsc S s g | ]}|j r|�qS r! rn �rR r r! r! r" � <listcomp>� rU z4SuperuserRoutingRule.set_configs.<locals>.<listcomp>c S s g | ] }|j �qS r! )ru r r! r! r" r� � rU c S s* i | ]"}|j r|j td t|j �id��qS )�labelre )r� r rQ r! r! r" � <dictcomp>� rU z4SuperuserRoutingRule.set_configs.<locals>.<dictcomp>z bridges are now %sz= stopping superuser bridge '%s': it disappeared from configs) r* r+ �len�tupler] �bridges�methodsr_ r ru �stop)r r~ r! r! r" � set_configs� s z SuperuserRoutingRule.set_configsc C s | j d ur| j �� d | _ d S r )r^ �cancelrs r! r! r" � cancel_prompt� s z"SuperuserRoutingRule.cancel_promptc C s. | � � | jd ur | j�� | jd u s*J �d S r )r� r_ �closers r! r! r" �shutdown� s z SuperuserRoutingRule.shutdown)�paramsr$ c C s< t |dd�}t| j�}t�| �||��| _| j�| j� d S )N�idrv ) r rJ r rm Z create_taskr} � _init_taskrz � _init_done)r r� ru r r! r! r" rx � s zSuperuserRoutingRule.initzasyncio.Task[None])�taskr$ c C s& t �d|�� � | jjdd� | `d S )Nzsuperuser init done! %szsuperuser-init-done)r? )r* r+ � exceptionr Z write_controlr� )r r� r! r! r" r� � s z SuperuserRoutingRule._init_done)Zin_types)ru r$ c � s | � || �I d H d S r )r} )r ru r! r! r" r{ � s zSuperuserRoutingRule.startr# c C s | � � d S r )r� rs r! r! r" r� � s zSuperuserRoutingRule.stop)�replyr$ c C s0 | j d ur"t�d� | j �|� n t�d� d S )Nz responding to pending promptz!got Answer, but no prompt pending)r^ r* r+ Z set_result)r r� r! r! r" �answer� s zSuperuserRoutingRule.answer))r7 r8 r9 r] r r r; r rm ZFuturer r Z InterfaceZSignalrN ZPropertyr� rk r� r r rl r2 r[ r �boolr rt r r: r} r� r� r� rx r� ZMethodr{ r� r� r< r! r! r r" r\ s s. r\ zcockpit.Superuser)Z interface)/rG rm r' rY Zloggingrq rE Ztempfiler �typingr r r r Zcockpit._vendorr Z cockpit._vendor.bei.bootloaderr Z cockpit._vendor.systemd_ctypesr r Zbeipackr Zjsonutilr r Zpackagesr r_ r r r Zpolkitr r r r r Z getLoggerr7 r* r r: r= rJ ZObjectr\ r! r! r! r" �<module> s, -