File: //usr/lib/python3.9/site-packages/cockpit/__pycache__/superuser.cpython-39.opt-1.pyc
a
�/�h�& � @ s: d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZ d dl m
Z
m Z m Z m
Z
d dlmZ d dlmZ d dlmZmZ ddlmZ dd lmZmZ dd
lmZ dd l m Z m Z m Z dd l m!Z! dd
l"m#Z#m$Z$m%Z% e�&e'�Z(G dd� de �Z)G dd� dej*�Z+G dd� de+�Z,G dd� de%e+ej-dd�Z.dS )� N)�TemporaryDirectory)�List�Optional�Sequence�Tuple)�ferny)�make_bootloader)�Variant�bus� )�BridgeBeibootHelper)�
JsonObject�get_str)� BridgeConfig)�ConfiguredPeer�Peer� PeerError)� PolkitAgent)�Router� RoutingError� RoutingRulec sB e Zd ZU ejed< eeejd�� fdd� Zdd�dd�Z � Z
S ) �
SuperuserPeer� responder)�router�configr c s t � �||� || _d S �N)�super�__init__r )�selfr r r �� __class__� �5/usr/lib/python3.9/site-packages/cockpit/superuser.pyr - s zSuperuserPeer.__init__N��returnc � s� t �� 4 I d H ��`}d| jv rDt�d| j� |�t| j��I d H nt�d| j� | jg}d| jv r�t�d| j� t| dg�}|� |� t
|j t j
d��� }nd }t �|�}d| jv r�|�t� �}t �|�}d |� �g}n| j}| j| j||d
d �I d H } |d u�r| �|� z|�� I d H W n: t j�yZ }
z td t|
�d
�|
�W Y d }
~
n
d }
~
0 0 W d �I d H �q�1 I d H �s�0 Y d S )NZpkexecz-connecting polkit superuser peer transport %rz1connecting non-polkit superuser peer transport %rz# cockpit-bridgez$going to beiboot superuser bridge %rz --privileged)ZgadgetszSUDO_ASKPASS=ferny-askpassz
SUDO_ASKPASS=T)�stderrZstart_new_sessionzauthentication-failed)�message)�
contextlib�AsyncExitStack�args�logger�debug�enter_async_contextr r r �appendr Zstepsr ZBEIBOOT_GADGETS�encodeZInteractionAgent�env�
enter_contextr Zwrite_askpass_to_tmpdirZspawn�writeZ communicateZInteractionErrorr �str) r �contextZ
responders�helperZstage1ZagentZtmpdirZ
ferny_askpassr/ Z transport�excr! r! r" �do_connect_transport1 s2
z"SuperuserPeer.do_connect_transport) �__name__�
__module__� __qualname__r �AskpassHandler�__annotations__r r r r6 �
__classcell__r! r! r r" r * s
r c @ s* e Zd ZdZeeee edd�dd�ZdS )�CockpitResponder)z
ferny.askpass�cockpit.send-stderrN)�commandr) �fdsr% r$ c
� sj |dkrft j |d d��>}|�d� |�dgt jt jt�ddg�fg� W d � n1 s\0 Y d S )Nr> r )�fileno� �i� )�socket�popZsendmsgZ
SOL_SOCKETZ
SCM_RIGHTS�array)r r? r) r@ r% Zsockr! r! r" �do_custom_commandZ s
z"CockpitResponder.do_custom_command) r7 r8 r9 Zcommandsr2 r r �intrH r! r! r! r" r= W s r= c @ s. e Zd Zed�dd�Zeeedd�dd�ZdS ) �AuthorizeResponder)r c C s || _ d| _d S )NF)r �authorize_attempted)r r r! r! r" r c s zAuthorizeResponder.__init__z
str | None��messages�prompt�hintr$ c � s` | j rt�d� d S d| _ d�dd� t�� �d�D ��}| j�d|� ��I d H }|dkr\d S |S )NzAnoninteractive authorize during init already attempted, rejectingT� c s s | ]}|d �V qdS )Z02xNr! ��.0�cr! r! r" � <genexpr>m � z0AuthorizeResponder.do_askpass.<locals>.<genexpr>�asciizplain1:) rK r* �info�join�getpassZgetuserr. r Zrequest_authorization)r rM rN rO Zhexuser�passwordr! r! r" �
do_askpassg s
z AuthorizeResponder.do_askpassN)r7 r8 r9 r r r2 r[ r! r! r! r" rJ b s rJ c s| e Zd ZU dZee ed< eej ed< ee
ed< e j �
ddddd�Ze j jdg d�Ze j jdd d�Ze j jd
i d�Zeee d �d d
�Zeeeee d�dd�Zdd�eed�� fdd�Zdd� Zee j dd�dd�Z ee d �d d �Z d d � Z d!d"� Z!edd#�d$d%�Z"d&dd'�d(d)�Z#e j j$dgd*�edd+�d,d-��Z%e j �$� dd.�d/d0��Z&e j j$dgd*�edd1�d2d3��Z'� Z(S )4�SuperuserRoutingRuler! �superuser_configs�pending_prompt�peer�s�b�as)�value�none�a{sv})�optionsr$ c C s< |� d�}|r| jdkr d S | js*|dkr0| jS td��d S )N� superuser�root�tryz
access-denied)�get�currentr_ r )r rf rg r! r! r" �
apply_rule� s
z SuperuserRoutingRule.apply_rulerL c � sV |dk}t �� �� | _z2t�d|� | �d|d||� | jI d H W d | _S d | _0 d S )NZconfirmzprompting for %srP )�asyncioZget_running_loopZ
create_futurer^ r* r+ rN )r rM rN rO Zechor! r! r" r[ � s �z SuperuserRoutingRule.do_askpassF��
privileged)r ro c s8 t � �|� d | _d | _d | _|s.t�� dkr4d| _d S )Nr rh )r r r^ r_ Zstartup�os�getuidrk )r r ro r r! r" r � s z SuperuserRoutingRule.__init__c C s d| _ d | _d S )Nrd )rk r_ �r r! r! r" � peer_done� s z SuperuserRoutingRule.peer_doneN)�namer r$ c
� s� | j dkrt�dd��| jD ]}||jdfv r qHq t�dd|� d���d| _ t| j||�| _| j�| j � z | jj
| jj d�I d H W nZ t j
y� t�d d
�d �Y n: ttfy� } z t�dt|��|�W Y d }~n
d }~0 0 | jjj| _ d S ) Nrd zcockpit.Superuser.Errorz Superuser bridge already running�anyz Unknown superuser bridge type "�"�init)� init_hostz!cockpit.Superuser.Error.CancelledzOperation aborted)rk r
ZBusErrorr] rt r r r_ �add_done_callbackrs �startrx rm ZCancelledError�OSErrorr r2 r )r rt r r r5 r! r! r" �go� s
(zSuperuserRoutingRule.go)�configsc C s� t �dt|�� dd� |D �}t|�| _dd� | jD �| _dd� |D �| _t �d| j� | jd ur�| jj| jvr�t �d| jjj � | �
� d S ) Nzset_configs() with %d itemsc S s g | ]}|j r|�qS r! rn �rR r r! r! r" �
<listcomp>� rU z4SuperuserRoutingRule.set_configs.<locals>.<listcomp>c S s g | ]
}|j �qS r! )rt r~ r! r! r" r � rU c S s* i | ]"}|j r|j td t|j �id��qS )�labelre )r� r rQ r! r! r" �
<dictcomp>� rU z4SuperuserRoutingRule.set_configs.<locals>.<dictcomp>z bridges are now %sz= stopping superuser bridge '%s': it disappeared from configs) r* r+ �len�tupler] �bridges�methodsr_ r rt �stop)r r} r! r! r" � set_configs� s
z SuperuserRoutingRule.set_configsc C s | j d ur| j �� d | _ d S r )r^ �cancelrr r! r! r" �
cancel_prompt� s
z"SuperuserRoutingRule.cancel_promptc C s | � � | jd ur | j�� d S r )r� r_ �closerr r! r! r" �shutdown� s
z SuperuserRoutingRule.shutdown)�paramsr$ c C s< t |dd�}t| j�}t�| �||��| _| j�| j� d S )N�idru ) r rJ r rm Z create_taskr| �
_init_taskry �
_init_done)r r� rt r r! r! r" rw � s
zSuperuserRoutingRule.initzasyncio.Task[None])�taskr$ c C s& t �d|�� � | jjdd� | `d S )Nzsuperuser init done! %szsuperuser-init-done)r? )r* r+ � exceptionr Z
write_controlr� )r r� r! r! r" r� � s z SuperuserRoutingRule._init_done)Zin_types)rt r$ c � s | � || �I d H d S r )r| )r rt r! r! r" rz � s zSuperuserRoutingRule.startr# c C s | � � d S r )r� rr r! r! r" r� � s zSuperuserRoutingRule.stop)�replyr$ c C s0 | j d ur"t�d� | j �|� n
t�d� d S )Nz responding to pending promptz!got Answer, but no prompt pending)r^ r* r+ Z
set_result)r r� r! r! r" �answer� s
zSuperuserRoutingRule.answer))r7 r8 r9 r] r r r; r rm ZFuturer r
Z InterfaceZSignalrN ZPropertyr� rk r� r
r rl r2 r[ r �boolr rs r r: r| r� r� r� rw r� ZMethodrz r� r� r< r! r! r r" r\ s s.
r\ zcockpit.Superuser)Z interface)/rG rm r' rY Zloggingrp rE Ztempfiler �typingr r r r Zcockpit._vendorr Z cockpit._vendor.bei.bootloaderr Z cockpit._vendor.systemd_ctypesr r
Zbeipackr Zjsonutilr
r Zpackagesr r_ r r r Zpolkitr r r r r Z getLoggerr7 r* r r: r= rJ ZObjectr\ r! r! r! r" �<module> s,
-