mirror of
https://github.com/Pardus-LiderAhenk/ahenk
synced 2024-11-22 01:32:16 +03:00
usb rule manage has been added for client
This commit is contained in:
Tuncay ÇOLAK
parent
965e2f20d0
commit
58b25abdd2
3 changed files with 337 additions and 0 deletions
47
src/plugins/usb/delete-usb-rules.py
Normal file
47
src/plugins/usb/delete-usb-rules.py
Normal file
|
|
@ -0,0 +1,47 @@
|
||||||
|
#!/usr/bin/python3
|
||||||
|
# -*- coding: utf-8 -*-
|
||||||
|
|
||||||
|
from base.plugin.abstract_plugin import AbstractPlugin
|
||||||
|
|
||||||
|
|
||||||
|
class DeleteUsbRule(AbstractPlugin):
|
||||||
|
def __init__(self, task, context):
|
||||||
|
super(DeleteUsbRule, self).__init__()
|
||||||
|
self.task = task
|
||||||
|
self.context = context
|
||||||
|
self.logger = self.get_logger()
|
||||||
|
self.message_code = self.get_message_code()
|
||||||
|
self.whitelist_path = "/etc/udev/rules.d/99-ahenk-task-whitelist.rules"
|
||||||
|
self.blacklist_path = "/etc/udev/rules.d/99-ahenk-task-blacklist.rules"
|
||||||
|
|
||||||
|
def handle_task(self):
|
||||||
|
try:
|
||||||
|
ruleIsExist = False
|
||||||
|
message = "İstemciye ait USB kuralları başarıyla silindi."
|
||||||
|
if self.is_exist(self.whitelist_path):
|
||||||
|
self.delete_file(self.whitelist_path)
|
||||||
|
ruleIsExist = True
|
||||||
|
|
||||||
|
if self.is_exist(self.blacklist_path):
|
||||||
|
self.delete_file(self.blacklist_path)
|
||||||
|
ruleIsExist = True
|
||||||
|
|
||||||
|
if ruleIsExist:
|
||||||
|
message = "İstemciye ait USB kuralları başarıyla silindi."
|
||||||
|
self.execute('udevadm control --reload-rules')
|
||||||
|
self.logger.debug('Blacklist/Whitelist was reloaded.')
|
||||||
|
else:
|
||||||
|
message = "İstemciye ait tanımlı USB kuralı bulunmamaktadır."
|
||||||
|
|
||||||
|
self.logger.info('USB rule task is handled successfully.')
|
||||||
|
self.context.create_response(code=self.message_code.TASK_PROCESSED.value,
|
||||||
|
message=message)
|
||||||
|
except Exception as e:
|
||||||
|
self.logger.error('A problem occurred while deleting USB rules. Error Message: {0}'.format(str(e)))
|
||||||
|
self.context.create_response(code=self.message_code.TASK_ERROR.value,
|
||||||
|
message='USB kuralları silinirken hata oluştu: {0}'.format(str(e)))
|
||||||
|
|
||||||
|
|
||||||
|
def handle_task(task, context):
|
||||||
|
manage = DeleteUsbRule(task, context)
|
||||||
|
manage.handle_task()
|
||||||
73
src/plugins/usb/get-usb-rules.py
Normal file
73
src/plugins/usb/get-usb-rules.py
Normal file
|
|
@ -0,0 +1,73 @@
|
||||||
|
#!/usr/bin/python3
|
||||||
|
# -*- coding: utf-8 -*-
|
||||||
|
|
||||||
|
from base.plugin.abstract_plugin import AbstractPlugin
|
||||||
|
import json
|
||||||
|
|
||||||
|
|
||||||
|
class GetUsbRules(AbstractPlugin):
|
||||||
|
def __init__(self, task, context):
|
||||||
|
super(GetUsbRules, self).__init__()
|
||||||
|
self.task = task
|
||||||
|
self.context = context
|
||||||
|
self.logger = self.get_logger()
|
||||||
|
self.message_code = self.get_message_code()
|
||||||
|
self.whitelist_path = "/etc/udev/rules.d/99-ahenk-task-whitelist.rules"
|
||||||
|
self.blacklist_path = "/etc/udev/rules.d/99-ahenk-task-blacklist.rules"
|
||||||
|
self.usb_rule_list = []
|
||||||
|
|
||||||
|
def handle_task(self):
|
||||||
|
try:
|
||||||
|
rule_type = "whitelist"
|
||||||
|
if self.is_exist(self.whitelist_path):
|
||||||
|
lines = self.read_file_by_line(self.whitelist_path)
|
||||||
|
for line in lines:
|
||||||
|
self.get_usb_item(line, rule_type)
|
||||||
|
|
||||||
|
if self.is_exist(self.blacklist_path):
|
||||||
|
rule_type = "blacklist"
|
||||||
|
lines = self.read_file_by_line(self.blacklist_path)
|
||||||
|
for line in lines:
|
||||||
|
self.get_usb_item(line, rule_type)
|
||||||
|
message = "İstemciye ait USB kuralları başarıyla alındı."
|
||||||
|
if len(self.usb_rule_list) == 0:
|
||||||
|
message = "İstemciye ait tanımlı USB kuralı bulunmamaktadır."
|
||||||
|
|
||||||
|
self.logger.info('Get USB rule task is handled successfully.')
|
||||||
|
self.context.create_response(code=self.message_code.TASK_PROCESSED.value,
|
||||||
|
message=message,
|
||||||
|
data=json.dumps({'usb_list': self.usb_rule_list, 'type': rule_type}),
|
||||||
|
content_type=self.get_content_type().APPLICATION_JSON.value)
|
||||||
|
except Exception as e:
|
||||||
|
self.logger.error('A problem occurred while getting USB rules. Error Message: {0}'.format(str(e)))
|
||||||
|
self.context.create_response(code=self.message_code.TASK_ERROR.value,
|
||||||
|
message='USB kuralları getirilirken hata oluştu: {0}'.format(str(e)))
|
||||||
|
|
||||||
|
def get_usb_item(self, line, type):
|
||||||
|
line_parser_list = line.rstrip().split(', ')
|
||||||
|
item_obj = {}
|
||||||
|
authorized_str = 'ATTR{authorized}="1"'
|
||||||
|
if type == "blacklist":
|
||||||
|
authorized_str = 'ATTR{authorized}="0"'
|
||||||
|
if authorized_str in line_parser_list:
|
||||||
|
for item in line_parser_list:
|
||||||
|
if "ATTR{manufacturer}" in item:
|
||||||
|
manufacturer = item.split("==")[1]
|
||||||
|
manufacturer = manufacturer.replace('"', '')
|
||||||
|
item_obj["vendor"] = manufacturer
|
||||||
|
if "ATTR{product}" in item:
|
||||||
|
model = item.split("==")[1]
|
||||||
|
model = model.replace('"', '')
|
||||||
|
item_obj["model"] = model
|
||||||
|
if "ATTR{serial}" in item:
|
||||||
|
serial_mumber = item.split("==")[1]
|
||||||
|
serial_mumber = serial_mumber.replace('"', '')
|
||||||
|
item_obj["serialNumber"] = serial_mumber
|
||||||
|
if len(item_obj):
|
||||||
|
self.usb_rule_list.append(item_obj)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
def handle_task(task, context):
|
||||||
|
manage = GetUsbRules(task, context)
|
||||||
|
manage.handle_task()
|
||||||
217
src/plugins/usb/manage-usb-rules.py
Normal file
217
src/plugins/usb/manage-usb-rules.py
Normal file
|
|
@ -0,0 +1,217 @@
|
||||||
|
#!/usr/bin/python3
|
||||||
|
# -*- coding: utf-8 -*-
|
||||||
|
|
||||||
|
import json
|
||||||
|
|
||||||
|
from base.plugin.abstract_plugin import AbstractPlugin
|
||||||
|
|
||||||
|
|
||||||
|
class UsbRule(AbstractPlugin):
|
||||||
|
def __init__(self, task, context):
|
||||||
|
super(UsbRule, self).__init__()
|
||||||
|
self.task = task
|
||||||
|
self.context = context
|
||||||
|
self.logger = self.get_logger()
|
||||||
|
self.message_code = self.get_message_code()
|
||||||
|
self.logger.info("---->>> "+ str(self.task))
|
||||||
|
self.script = '/bin/bash ' + self.Ahenk.plugins_path() + 'usb/scripts/{0}'
|
||||||
|
self.script_path = self.Ahenk.plugins_path() + 'usb/scripts/{0}'
|
||||||
|
self.items = []
|
||||||
|
self.command_vendor = "grep -lw '{0}' /sys/bus/usb/devices/*/manufacturer | grep -o -P '.{{0,}}/.{{0,0}}'"
|
||||||
|
self.command_model = "grep -lw '{0}' {1}product"
|
||||||
|
self.command_serial = "grep -lw '{0}' {1}serial"
|
||||||
|
self.command_authorized = "echo '{0}' > {1}authorized"
|
||||||
|
self.command_serial_is_exist = 'if test -e {0}serial; then echo "exist"; else echo "not found"; fi'
|
||||||
|
self.logger.debug('Parameters were initialized.')
|
||||||
|
self.whitelist_path = "/etc/udev/rules.d/99-ahenk-task-whitelist.rules"
|
||||||
|
self.blacklist_path = "/etc/udev/rules.d/99-ahenk-task-blacklist.rules"
|
||||||
|
|
||||||
|
def handle_task(self):
|
||||||
|
try:
|
||||||
|
if self.has_attr_json(self.task, 'items') is True:
|
||||||
|
self.items = self.task['items']
|
||||||
|
self.logger.debug('Blacklist/Whitelist will be created task.')
|
||||||
|
if self.has_attr_json(self.task, 'type') is True:
|
||||||
|
self.logger.debug('BlackList Whitelist will be created....')
|
||||||
|
self.create_blacklist_whitelist()
|
||||||
|
|
||||||
|
self.logger.info('USB rule task is handled successfully.')
|
||||||
|
self.context.create_response(code=self.message_code.TASK_PROCESSED.value,
|
||||||
|
message='İstemciye ait USB kuralları başarıyla güncellendi.')
|
||||||
|
|
||||||
|
except Exception as e:
|
||||||
|
self.logger.error('A problem occurred while handling USB rule task. Error Message: {0}'.format(str(e)))
|
||||||
|
self.context.create_response(code=self.message_code.TASK_ERROR.value,
|
||||||
|
message='İstemciye ait USB kuralların uygulanırken bir hata oluştu: {0}'.format(str(e)))
|
||||||
|
|
||||||
|
def organize_rule_files(self, is_whitelist):
|
||||||
|
if is_whitelist == 0:
|
||||||
|
if self.is_exist(self.whitelist_path):
|
||||||
|
self.delete_file(self.whitelist_path)
|
||||||
|
self.execute('> {0}'.format(self.blacklist_path))
|
||||||
|
else:
|
||||||
|
if self.is_exist(self.blacklist_path):
|
||||||
|
self.delete_file(self.blacklist_path)
|
||||||
|
self.execute('> {0}'.format(self.whitelist_path))
|
||||||
|
|
||||||
|
def write_whitelist_line(self, vendor, model, serial_number, is_first_line):
|
||||||
|
command_blackandwhitelist = 'echo ' + "'"
|
||||||
|
symbol = '='
|
||||||
|
authorized = '1'
|
||||||
|
if is_first_line is True:
|
||||||
|
command_blackandwhitelist = 'ex -sc ' + "'1i|"
|
||||||
|
symbol = '!'
|
||||||
|
authorized = '0'
|
||||||
|
command_blackandwhitelist += 'ACTION==\"add|change\", SUBSYSTEM==\"usb\", '
|
||||||
|
if vendor is not None and len(vendor) > 0:
|
||||||
|
command_blackandwhitelist += 'ATTR{manufacturer}' + symbol + '=\"' + vendor + '\", '
|
||||||
|
if model is not None and len(model) > 0:
|
||||||
|
command_blackandwhitelist += 'ATTR{product}' + symbol + '=\"' + model + '\", '
|
||||||
|
if serial_number is not None and len(serial_number) > 0:
|
||||||
|
command_blackandwhitelist += 'ATTR{serial}' + symbol + '=\"' + serial_number + '\", '
|
||||||
|
command_blackandwhitelist += 'ATTR{authorized}=\"' + authorized + '\"' + "'"
|
||||||
|
if is_first_line is False:
|
||||||
|
command_blackandwhitelist += ' >> '
|
||||||
|
else:
|
||||||
|
command_blackandwhitelist += ' -cx '
|
||||||
|
command_blackandwhitelist += self.whitelist_path
|
||||||
|
self.logger.debug(command_blackandwhitelist)
|
||||||
|
self.write_rule_line(command_blackandwhitelist)
|
||||||
|
|
||||||
|
def write_rule_line(self, command):
|
||||||
|
p_result_code, p_out, p_err = self.execute(command)
|
||||||
|
if p_result_code == 0:
|
||||||
|
self.logger.debug('Rule line is added successfully')
|
||||||
|
elif p_result_code != 0:
|
||||||
|
self.logger.debug('Error while adding rule line to /etc/udev/rules.d/ , Error message : {0}'.format(p_err))
|
||||||
|
|
||||||
|
def create_rule_line(self, vendor, model, serial_number, is_whitelist):
|
||||||
|
if is_whitelist == 0:
|
||||||
|
command_blackandwhitelist = 'echo ' + "'" + 'ACTION ==\"add|change\", SUBSYSTEM==\"usb\", '
|
||||||
|
if vendor is not None and len(vendor) > 0:
|
||||||
|
command_blackandwhitelist += 'ATTR{manufacturer}==\"' + vendor + '\", '
|
||||||
|
if model is not None and len(model) > 0:
|
||||||
|
command_blackandwhitelist += 'ATTR{product}==\"' + model + '\", '
|
||||||
|
if serial_number is not None and len(serial_number) > 0:
|
||||||
|
command_blackandwhitelist += 'ATTR{serial}==\"' + serial_number + '\", '
|
||||||
|
command_blackandwhitelist += 'ATTR{authorized}=\"0\"' + "'" + '>> {0}'.format(self.blacklist_path)
|
||||||
|
self.write_rule_line(command_blackandwhitelist)
|
||||||
|
else:
|
||||||
|
self.write_whitelist_line(vendor, model, serial_number, True)
|
||||||
|
self.write_whitelist_line(vendor, model, serial_number, False)
|
||||||
|
|
||||||
|
def create_blacklist_whitelist(self):
|
||||||
|
self.logger.debug('usb storage will be enabled')
|
||||||
|
self.execute(self.script.format('ENABLED_usbstorage.sh'), result=True)
|
||||||
|
self.logger.debug('usb storage enabled')
|
||||||
|
if self.task['type'] == 'blacklist':
|
||||||
|
is_whitelist = 0
|
||||||
|
else:
|
||||||
|
is_whitelist = 1
|
||||||
|
self.logger.debug('Rule files are organizing....')
|
||||||
|
self.organize_rule_files(is_whitelist)
|
||||||
|
self.logger.debug('Rule files are organized')
|
||||||
|
|
||||||
|
for item in self.items:
|
||||||
|
item_parameters = json.loads(str(json.dumps(item)))
|
||||||
|
vendor = item_parameters['vendor']
|
||||||
|
model = item_parameters['model']
|
||||||
|
serial_number = item_parameters['serialNumber']
|
||||||
|
|
||||||
|
self.create_rule_line(vendor, model, serial_number, is_whitelist)
|
||||||
|
|
||||||
|
self.logger.debug('vendor, model and serial number is set....')
|
||||||
|
self.logger.debug(self.command_vendor.format(vendor))
|
||||||
|
result_code, p_out, p_err = self.execute(self.command_vendor.format(vendor), result=True)
|
||||||
|
folder_list = str(p_out).split('\n')
|
||||||
|
folder_list.pop()
|
||||||
|
|
||||||
|
if p_out == '' and vendor != '':
|
||||||
|
self.logger.debug('Device has not been found because of vendor. Vendor: {0}'.format(vendor))
|
||||||
|
|
||||||
|
if vendor == '':
|
||||||
|
folder_list = []
|
||||||
|
folder_list.append('/sys/bus/usb/devices/*/')
|
||||||
|
|
||||||
|
for folder in folder_list:
|
||||||
|
|
||||||
|
result_code, p_out, p_err = self.execute(self.command_model.format(model, folder), result=True)
|
||||||
|
|
||||||
|
if p_out == '' and model != '':
|
||||||
|
self.logger.debug(
|
||||||
|
'Device model has not been found in this directory. Directory: {0}, Vendor: {1}, Model: {2}'.format(
|
||||||
|
folder, vendor, model))
|
||||||
|
|
||||||
|
else:
|
||||||
|
model_folder_list = str(p_out).split('\n')
|
||||||
|
model_folder_list.pop()
|
||||||
|
|
||||||
|
if p_out == '':
|
||||||
|
model_folder_list.append(folder)
|
||||||
|
|
||||||
|
if vendor == '' and model == '':
|
||||||
|
model_folder_list = []
|
||||||
|
model_folder_list.append('/sys/bus/usb/devices/*/')
|
||||||
|
|
||||||
|
for model_folder in model_folder_list:
|
||||||
|
if 'product' in model_folder:
|
||||||
|
model_folder = model_folder.strip('product')
|
||||||
|
|
||||||
|
if model_folder != '/sys/bus/usb/devices/*/':
|
||||||
|
result_code, p_out, p_err = self.execute(self.command_serial_is_exist.format(model_folder),
|
||||||
|
result=True)
|
||||||
|
|
||||||
|
if 'exist' in p_out or model_folder == '/sys/bus/usb/devices/*/':
|
||||||
|
result_code, p_out, p_err = self.execute(
|
||||||
|
self.command_serial.format(serial_number, model_folder),
|
||||||
|
result=True)
|
||||||
|
if p_out == '' and serial_number != '':
|
||||||
|
self.logger.debug(
|
||||||
|
'Device serial number has not been found in this directory. Directory: {0}, Vendor: {1}, Model: {2}, Serial Number: {3}'.format(
|
||||||
|
model_folder, vendor,
|
||||||
|
model, serial_number))
|
||||||
|
else:
|
||||||
|
serial_folder_list = str(p_out).split('\n')
|
||||||
|
serial_folder_list.pop()
|
||||||
|
|
||||||
|
if p_out == '':
|
||||||
|
serial_folder_list.append(model_folder)
|
||||||
|
|
||||||
|
for serial_folder in serial_folder_list:
|
||||||
|
serial_folder = serial_folder.strip('serial')
|
||||||
|
if self.task['type'] == 'whitelist':
|
||||||
|
self.execute(self.command_authorized.format('1', serial_folder), result=True)
|
||||||
|
self.logger.debug(
|
||||||
|
'Enabled the device. Directory: {0}, Vendor: {1}, Model: {2}, Serial Number: {3}'.format(
|
||||||
|
serial_folder, vendor, model, serial_number))
|
||||||
|
elif self.task['type'] == 'blacklist':
|
||||||
|
self.execute(self.command_authorized.format('0', serial_folder), result=True)
|
||||||
|
self.logger.debug(
|
||||||
|
'Disabled the device. Directory: {0}, Vendor: {1}, Model: {2}, Serial Number: {3}'.format(
|
||||||
|
serial_folder, vendor, model, serial_number))
|
||||||
|
|
||||||
|
elif 'not found' in p_out:
|
||||||
|
dir = ''
|
||||||
|
if model != '':
|
||||||
|
dir = model_folder
|
||||||
|
elif vendor != '':
|
||||||
|
dir = folder
|
||||||
|
|
||||||
|
if self.task['type'] == 'whitelist':
|
||||||
|
self.execute(self.command_authorized.format('1', dir), result=True)
|
||||||
|
self.logger.debug(
|
||||||
|
'Enabled the device. Directory: {0}, Vendor: {1}, Model: {2}, Serial Number: {3}'.format(
|
||||||
|
dir, vendor, model, serial_number))
|
||||||
|
elif self.task['type'] == 'blacklist':
|
||||||
|
self.execute(self.command_authorized.format('0', dir), result=True)
|
||||||
|
self.logger.debug(
|
||||||
|
'Disabled the device. Directory: {0}, Vendor: {1}, Model: {2}, Serial Number: {3}'.format(
|
||||||
|
dir, vendor, model, serial_number))
|
||||||
|
|
||||||
|
self.execute('udevadm control --reload-rules')
|
||||||
|
self.logger.debug('Blacklist/Whitelist was created.')
|
||||||
|
|
||||||
|
|
||||||
|
def handle_task(task, context):
|
||||||
|
manage = UsbRule(task, context)
|
||||||
|
manage.handle_task()
|
||||||
Loading…
Reference in a new issue