1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
|
import ConfigParser
import grp
import logging
import os
import platform
from leap.util.fileutil import which, mkdir_p
from leap.baseapp.permcheck import (is_pkexec_in_system,
is_auth_agent_running)
logger = logging.getLogger(name=__name__)
class EIPNoPkexecAvailable(Exception):
pass
class EIPNoPolkitAuthAgentAvailable(Exception):
pass
def build_ovpn_options(daemon=False):
"""
build a list of options
to be passed in the
openvpn invocation
@rtype: list
@rparam: options
"""
# XXX review which of the
# options we don't need.
# TODO pass also the config file,
# since we will need to take some
# things from there if present.
# get user/group name
# also from config.
user = os.getlogin()
gid = os.getgroups()[-1]
group = grp.getgrgid(gid).gr_name
opts = []
opts.append('--persist-tun')
opts.append('--persist-key')
# set user and group
opts.append('--user')
opts.append('%s' % user)
opts.append('--group')
opts.append('%s' % group)
opts.append('--management-client-user')
opts.append('%s' % user)
opts.append('--management-signal')
# set default options for management
# interface. unix sockets or telnet interface for win.
# XXX take them from the config object.
ourplatform = platform.system()
if ourplatform in ("Linux", "Mac"):
opts.append('--management')
opts.append('/tmp/.eip.sock')
opts.append('unix')
if ourplatform == "Windows":
opts.append('--management')
opts.append('localhost')
# XXX which is a good choice?
opts.append('7777')
# remaining config options, in a file
# NOTE: we will build this file from
# the service definition file.
ovpncnf = os.path.expanduser(
'~/.config/leap/openvpn.conf')
opts.append('--config')
opts.append(ovpncnf)
# we cannot run in daemon mode
# with the current subp setting.
# see: https://leap.se/code/issues/383
#if daemon is True:
# opts.append('--daemon')
return opts
def build_ovpn_command(config, debug=False):
"""
build a string with the
complete openvpn invocation
@param config: config object
@type config: ConfigParser instance
@rtype [string, [list of strings]]
@rparam: a list containing the command string
and a list of options.
"""
command = []
use_pkexec = True
ovpn = None
if config.has_option('openvpn', 'use_pkexec'):
use_pkexec = config.get('openvpn', 'use_pkexec')
if platform.system() == "Linux" and use_pkexec:
# XXX check for both pkexec (done)
# AND a suitable authentication
# agent running.
logger.info('use_pkexec set to True')
if not is_pkexec_in_system():
logger.error('no pkexec in system')
raise EIPNoPkexecAvailable
if not is_auth_agent_running():
logger.warning(
"no polkit auth agent found. "
"pkexec will use its own text "
"based authentication agent. "
"that's probably a bad idea")
raise EIPNoPolkitAuthAgentAvailable
command.append('pkexec')
if config.has_option('openvpn',
'openvpn_binary'):
ovpn = config.get('openvpn',
'openvpn_binary')
if not ovpn and config.has_option('DEFAULT',
'openvpn_binary'):
ovpn = config.get('DEFAULT',
'openvpn_binary')
if ovpn:
command.append(ovpn)
daemon_mode = not debug
for opt in build_ovpn_options(daemon=daemon_mode):
command.append(opt)
# XXX check len and raise proper error
return [command[0], command[1:]]
def get_sensible_defaults():
"""
gathers a dict of sensible defaults,
platform sensitive,
to be used to initialize the config parser
@rtype: dict
@rparam: default options.
"""
# this way we're passing a simple dict
# that will initialize the configparser
# and will get written to "DEFAULTS" section,
# which is fine for now.
# if we want to write to a particular section
# we can better pass a tuple of triples
# (('section1', 'foo', '23'),)
# and config.set them
defaults = dict()
defaults['openvpn_binary'] = which('openvpn')
defaults['autostart'] = 'true'
# TODO
# - management.
return defaults
def get_config(config_file=None):
"""
temporary method for getting configs,
mainly for early stage development process.
in the future we will get preferences
from the storage api
@rtype: ConfigParser instance
@rparam: a config object
"""
# TODO
# - refactor out common things and get
# them to util/ or baseapp/
defaults = get_sensible_defaults()
config = ConfigParser.ConfigParser(defaults)
if not config_file:
fpath = os.path.expanduser(
'~/.config/leap/eip.cfg')
if not os.path.isfile(fpath):
dpath, cfile = os.path.split(fpath)
if not os.path.isdir(dpath):
mkdir_p(dpath)
with open(fpath, 'wb') as configfile:
config.write(configfile)
config_file = open(fpath)
#TODO
# - get a more sensible path for win/mac
# - convert config_file to list;
# look in places like /etc/leap/eip.cfg
# for global settings.
# - raise warnings/error if bad options.
# at this point, the file should exist.
# errors would have been raised above.
config.readfp(config_file)
return config
|
