%PDF-
%PDF-
Mini Shell
Mini Shell
# -*- coding: utf-8 -*-
#
# D-Bus based interface for software-properties
#
# Copyright © 2010 Harald Sitter <apachelogger@ubuntu.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License along
# with this program; if not, write to the Free Software Foundation, Inc.,
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
from gi.repository import GLib
import dbus.service
import logging
import subprocess
import tempfile
import sys
import threading
from aptsources.sourceslist import SourceEntry
from dbus.mainloop.glib import DBusGMainLoop
from softwareproperties.LivepatchService import LivepatchService
from softwareproperties.SoftwareProperties import SoftwareProperties
DBUS_BUS_NAME = 'com.ubuntu.SoftwareProperties'
DBUS_PATH = '/'
DBUS_INTERFACE_NAME = 'com.ubuntu.SoftwareProperties'
DBusGMainLoop(set_as_default=True)
def _to_unicode(string):
if sys.version < '3':
return string.encode('utf-8')
else:
return string
class PermissionDeniedByPolicy(dbus.DBusException):
_dbus_error_name = 'com.ubuntu.SoftwareProperties.PermissionDeniedByPolicy'
class SoftwarePropertiesDBus(dbus.service.Object, SoftwareProperties):
def __init__(self, bus, options=None, datadir=None, rootdir="/"):
# init software properties
SoftwareProperties.__init__(self, options=options, datadir=datadir, rootdir=rootdir)
# used in _check_policykit_priviledge
self.dbus_info = None
self.polkit = None
# init dbus service
bus_name = dbus.service.BusName(DBUS_INTERFACE_NAME, bus=bus)
dbus.service.Object.__init__(self, bus_name, DBUS_PATH)
# useful for testing
self.enforce_polkit = True
logging.debug("waiting for connections")
self._livepatch_service = LivepatchService()
# override set_modified_sourceslist to emit a signal
def save_sourceslist(self):
super(SoftwarePropertiesDBus, self).save_sourceslist()
self.SourcesListModified()
def write_config(self):
super(SoftwarePropertiesDBus, self).write_config()
self.ConfigModified()
# ------------------ SIGNALS
@dbus.service.signal(dbus_interface=DBUS_INTERFACE_NAME, signature='')
def SourcesListModified(self):
""" emit signal when the sources.list got modified """
logging.debug("SourcesListModified signal")
@dbus.service.signal(dbus_interface=DBUS_INTERFACE_NAME, signature='')
def ConfigModified(self):
""" emit signal when the sources.list got modified """
logging.debug("ConfigModified signal")
@dbus.service.signal(dbus_interface=DBUS_INTERFACE_NAME, signature='')
def KeysModified(self):
""" emit signal when the apt keys got modified """
logging.debug("KeysModified signal")
@dbus.service.signal(dbus_interface=DBUS_INTERFACE_NAME, signature='')
def AuthFailed(self):
""" emit signal when the policykit authentication failed """
logging.debug("Auth signal")
@dbus.service.signal(dbus_interface=DBUS_INTERFACE_NAME, signature='')
def CdromScanFailed(self):
""" emit signal when adding a cdrom failed """
logging.debug("Cdrom scan failed signal")
# ------------------ METHODS
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='', out_signature='')
def Revert(self, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.revert()
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='', out_signature='')
def Reload(self, sender=None, conn=None):
self.reload_sourceslist()
# Enabler/Disablers
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='')
def EnableChildSource(self, template, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.enable_child_source(_to_unicode(template))
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='')
def DisableChildSource(self, template, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.disable_child_source(_to_unicode(template))
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='')
def EnableComponent(self, component, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.enable_component(_to_unicode(component))
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='')
def DisableComponent(self, component, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.disable_component(_to_unicode(component))
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='', out_signature='')
def EnableSourceCodeSources(self, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.enable_source_code_sources()
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='', out_signature='')
def DisableSourceCodeSources(self, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.disable_source_code_sources()
self.save_sourceslist()
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='')
def ToggleSourceUse(self, source, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.toggle_source_use(_to_unicode(source))
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='ss', out_signature='b')
def ReplaceSourceEntry(self, old, new, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
return self.replace_source_entry(
_to_unicode(old), _to_unicode(new))
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='', out_signature='')
def ChangeMainDownloadServer(self, server, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.change_main_download_server(_to_unicode(server))
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='', out_signature='')
def AddCdromSource(self, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self._add_cdrom_source()
def _add_cdrom_source(self):
""" add a (already inserted) cdrom """
tmp = tempfile.NamedTemporaryFile()
# need to call it here because python-apt does not support
# AutoDetect mode yet
cmd = ["apt-cdrom", "add",
"-o", "Debug::aptcdrom=1",
"-o", "Debug::identcdrom=1",
"-o", "acquire::cdrom::AutoDetect=1",
"-o", "acquire::cdrom::NoMount=1",
"-o", "Dir::Etc::sourcelist=%s" % tmp.name,
]
p = subprocess.Popen(cmd)
# wait for the process to finish
GLib.timeout_add(500, self._wait_for_cdrom_scan_finish, p, tmp)
def _wait_for_cdrom_scan_finish(self, p, tmp):
""" glib timeout helper to wait for the cdrom scanner to finish """
# keep the timeout running
if p.poll() is None:
return True
# else we have a return code
res = p.poll()
if res != 0:
self.CdromScanFailed()
return False
# read tmp file with source name
line = ""
# (read only last line)
for x in open(tmp.name):
line = x
if line != "":
self.sourceslist.list.insert(0, SourceEntry(line))
self.set_modified_sourceslist()
return False
# Setters
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='b', out_signature='')
def SetPopconPariticipation(self, participates, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.set_popcon_pariticipation(participates)
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='i', out_signature='')
def SetUpdateAutomationLevel(self, state, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.set_update_automation_level(state)
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='i', out_signature='')
def SetReleaseUpgradesPolicy(self, state, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.set_release_upgrades_policy(state)
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='i', out_signature='')
def SetUpdateInterval(self, days, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.set_update_interval(days)
# Sources
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='')
def AddSourceFromLine(self, sourceLine, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.add_source_from_line(_to_unicode(sourceLine))
self.KeysModified()
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='')
def RemoveSource(self, source, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
self.remove_source(_to_unicode(source))
# GPG Keys
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='b')
def AddKey(self, path, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
return self.add_key(path)
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='b')
def AddKeyFromData(self, keyData, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
return self.add_key_from_data(keyData)
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='s', out_signature='b')
def RemoveKey(self, keyid, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
return self.remove_key(keyid)
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='', out_signature='b')
def UpdateKeys(self, sender=None, conn=None):
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
return self.update_keys()
# LivePatch
@dbus.service.method(DBUS_INTERFACE_NAME,
sender_keyword="sender", connection_keyword="conn",
in_signature='bs', out_signature='bs', async_callbacks=('reply_handler', 'error_handler'))
def SetLivepatchEnabled(self, enabled, token, reply_handler, error_handler, sender=None, conn=None):
def enable_thread_func():
ret = self._livepatch_service.set_enabled(enabled, token)
GLib.idle_add(lambda: reply_handler(*ret))
self._check_policykit_privilege(
sender, conn, "com.ubuntu.softwareproperties.applychanges")
threading.Thread(target=enable_thread_func).start()
# helper from jockey
def _check_policykit_privilege(self, sender, conn, privilege):
'''Verify that sender has a given PolicyKit privilege.
sender is the sender's (private) D-BUS name, such as ":1:42"
(sender_keyword in @dbus.service.methods). conn is
the dbus.Connection object (connection_keyword in
@dbus.service.methods). privilege is the PolicyKit privilege string.
This method returns if the caller is privileged, and otherwise throws a
PermissionDeniedByPolicy exception.
'''
if sender is None and conn is None:
# called locally, not through D-BUS
return
if not self.enforce_polkit:
# that happens for testing purposes when running on the session
# bus, and it does not make sense to restrict operations here
return
# get peer PID
if self.dbus_info is None:
self.dbus_info = dbus.Interface(conn.get_object('org.freedesktop.DBus',
'/org/freedesktop/DBus/Bus', False), 'org.freedesktop.DBus')
pid = self.dbus_info.GetConnectionUnixProcessID(sender)
# query PolicyKit
if self.polkit is None:
self.polkit = dbus.Interface(dbus.SystemBus().get_object(
'org.freedesktop.PolicyKit1',
'/org/freedesktop/PolicyKit1/Authority', False),
'org.freedesktop.PolicyKit1.Authority')
try:
# we don't need is_challenge return here, since we call with AllowUserInteraction
(is_auth, _, details) = self.polkit.CheckAuthorization(
('system-bus-name', {'name': dbus.String(sender, variant_level = 1)}),
privilege, {'': ''}, dbus.UInt32(1), '', timeout=600)
except dbus.DBusException as e:
if e._dbus_error_name == 'org.freedesktop.DBus.Error.ServiceUnknown':
# polkitd timed out, connect again
self.polkit = None
return self._check_polkit_privilege(sender, conn, privilege)
else:
raise
if not is_auth:
logging.debug('_check_polkit_privilege: sender %s on connection %s pid %i is not authorized for %s: %s' %
(sender, conn, pid, privilege, str(details)))
self.AuthFailed()
raise PermissionDeniedByPolicy(privilege)
Zerion Mini Shell 1.0