From 22342664951ac32756ceb7ade59ada90f92c8793 Mon Sep 17 00:00:00 2001
From: kali <kali@leap.se>
Date: Thu, 4 Apr 2013 01:47:12 +0900
Subject: Several fixes in wizard

Closes:#2061

o Rewording of setup steps in wizard, to make them more meaningful to the non-technical user. Closes: #2061
o Fix typo in wizard
o Fix multiple drawing of services if going back
o Make registration errors show in red
o Add a warning if EIP service needs admin password. Addresses part of #2062
---
 src/leap/util/privilege_policies.py | 78 +++++++++++++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 src/leap/util/privilege_policies.py

(limited to 'src/leap/util')

diff --git a/src/leap/util/privilege_policies.py b/src/leap/util/privilege_policies.py
new file mode 100644
index 00000000..5bf1b476
--- /dev/null
+++ b/src/leap/util/privilege_policies.py
@@ -0,0 +1,78 @@
+# -*- coding: utf-8 -*-
+# privilege_policies.py
+# Copyright (C) 2013 LEAP
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+"""
+Helpers to determine if the needed policies for privilege escalation
+are operative under this client run.
+"""
+import logging
+import os
+import platform
+
+from abc import ABCMeta, abstractmethod
+
+logger = logging.getLogger(__name__)
+
+
+def is_missing_policy_permissions():
+    """
+    Returns True if we do not have implemented a policy checker for this
+    platform, or if the policy checker exists but it cannot find the
+    appropriate policy mechanisms in place.
+    """
+    _system = platform.system()
+    platform_checker = _system + "PolicyChecker"
+    policy_checker = globals().get(platform_checker, None)
+    if not policy_checker:
+        # it is true that we miss permission to escalate
+        # privileges without asking for password each time.
+        logger.debug("we could not find a policy checker implementation "
+                     "for %s" % (_system,))
+        return True
+    return policy_checker().is_missing_policy_permissions()
+
+
+class PolicyChecker:
+    """
+    Abstract PolicyChecker class
+    """
+
+    __metaclass__ = ABCMeta
+
+    @abstractmethod
+    def is_missing_policy_permissions(self):
+        """
+        Returns True if we could not find any policy mechanisms that
+        are defined to be in used for this particular platform.
+
+        @rtype: bool
+        """
+        return True
+
+
+class LinuxPolicyChecker(PolicyChecker):
+    """
+    PolicyChecker for Linux
+    """
+    LINUX_POLKIT_FILE = ("/usr/share/polkit-1/actions/"
+                         "net.openvpn.gui.leap.policy")
+
+    def is_missing_policy_permissions(self):
+        """
+        Returns True if we could not find the appropriate policykit file
+        in place
+        """
+        return not os.path.isfile(self.LINUX_POLKIT_FILE)
-- 
cgit v1.2.3


From e75fe6ffd58b067b3fc32196ad245d26a1287e99 Mon Sep 17 00:00:00 2001
From: kali <kali@leap.se>
Date: Tue, 9 Apr 2013 00:43:13 +0900
Subject: fixes as per review

---
 src/leap/util/privilege_policies.py | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'src/leap/util')

diff --git a/src/leap/util/privilege_policies.py b/src/leap/util/privilege_policies.py
index 5bf1b476..e74c4d33 100644
--- a/src/leap/util/privilege_policies.py
+++ b/src/leap/util/privilege_policies.py
@@ -32,6 +32,8 @@ def is_missing_policy_permissions():
     Returns True if we do not have implemented a policy checker for this
     platform, or if the policy checker exists but it cannot find the
     appropriate policy mechanisms in place.
+
+    @rtype: bool
     """
     _system = platform.system()
     platform_checker = _system + "PolicyChecker"
@@ -74,5 +76,7 @@ class LinuxPolicyChecker(PolicyChecker):
         """
         Returns True if we could not find the appropriate policykit file
         in place
+
+        @rtype: bool
         """
         return not os.path.isfile(self.LINUX_POLKIT_FILE)
-- 
cgit v1.2.3