mirror of
https://github.com/Pardus-LiderAhenk/ahenk
synced 2024-12-12 11:32:16 +03:00
71 lines
3.3 KiB
Python
71 lines
3.3 KiB
Python
|
#!/usr/bin/python3
|
||
|
|
# -*- coding: utf-8 -*-
|
||
|
|
# Author: Mine Dogan <mine.dogan@agem.com.tr>
|
||
|
|
|
||
|
|
import json
|
||
|
|
|
||
|
|
from base.plugin.abstract_plugin import AbstractPlugin
|
||
|
|
|
||
|
|
|
||
|
|
class GrantSudoAccess(AbstractPlugin):
|
||
|
|
def __init__(self, data, context):
|
||
|
|
super(AbstractPlugin, self).__init__()
|
||
|
|
self.data = data
|
||
|
|
self.context = context
|
||
|
|
self.sudoer_line = '{0} ALL = NOPASSWD : /usr/bin/apt-get, /usr/bin/apt , /usr/bin/aptitude'
|
||
|
|
self.sudoer_file_path = '/etc/sudoers.d/{0}_sudoers'
|
||
|
|
self.logger = self.get_logger()
|
||
|
|
|
||
|
|
def handle_policy(self):
|
||
|
|
|
||
|
|
username = self.context.get('username')
|
||
|
|
|
||
|
|
try:
|
||
|
|
if username is not None:
|
||
|
|
json_data = json.loads(self.data)
|
||
|
|
|
||
|
|
if str(json_data['privilege']) == 'True':
|
||
|
|
if self.is_exist(self.sudoer_file_path):
|
||
|
|
self.logger.debug('User sudoers is exist privilege to {}'.format(username))
|
||
|
|
else:
|
||
|
|
self.create_file(self.sudoer_file_path.format(username))
|
||
|
|
|
||
|
|
sudoer_data = self.read_file(self.sudoer_file_path.format(username))
|
||
|
|
self.write_file(self.sudoer_file_path.format(username), sudoer_data.replace(self.sudoer_line.format(username),
|
||
|
|
'') + '\n' + self.sudoer_line.format(username) + '\n')
|
||
|
|
|
||
|
|
self.logger.debug('User sudoers set privilege to {0}.'.format(username))
|
||
|
|
|
||
|
|
self.logger.debug('Creating response...')
|
||
|
|
self.context.create_response(self.get_message_code().POLICY_PROCESSED.value,
|
||
|
|
'User sudoers set privilege to {} successfully.'.format(username))
|
||
|
|
|
||
|
|
elif str(json_data['privilege']) == 'False':
|
||
|
|
|
||
|
|
if self.is_exist(self.sudoer_file_path.format(username)):
|
||
|
|
self.delete_file(self.sudoer_file_path.format(username))
|
||
|
|
self.logger.debug('User sudoers removed privilege from {0}.'.format(username))
|
||
|
|
self.logger.debug('Creating response...')
|
||
|
|
self.context.create_response(self.get_message_code().POLICY_PROCESSED.value,
|
||
|
|
'User sudoers removed privilege from {0} successfully.'.format(username))
|
||
|
|
else:
|
||
|
|
self.logger.debug("{0} user's privilege file not found".format(username))
|
||
|
|
|
||
|
|
else:
|
||
|
|
self.context.create_response(self.get_message_code().POLICY_PROCESSED.value, 'Missing parameter error.')
|
||
|
|
|
||
|
|
self.logger.debug('Sudoers profile is handled successfully.')
|
||
|
|
else:
|
||
|
|
self.logger.error('Username parameter is missing.')
|
||
|
|
self.context.create_response(self.get_message_code().POLICY_ERROR.value, 'Username is missing')
|
||
|
|
|
||
|
|
except Exception as e:
|
||
|
|
self.logger.error('A problem occurred while handling sudoers profile: {0}'.format(str(e)))
|
||
|
|
self.context.create_response(self.get_message_code().POLICY_ERROR.value,
|
||
|
|
'A problem occurred while handling sudoers profile: {0}'.format(str(e)))
|
||
|
|
|
||
|
|
|
||
|
|
def handle_policy(profile_data, context):
|
||
|
|
quota = GrantSudoAccess(profile_data, context)
|
||
|
|
quota.handle_policy()
|