pam_usb/tools/pamusb-conf

#!/usr/bin/env python
#
# Copyright (c) 2003-2007 Andrea Luzzardi <scox@sig11.org>
#
# This file is part of the pam_usb project. pam_usb is free software;
# you can redistribute it and/or modify it under the terms of the GNU General
# Public License version 2, as published by the Free Software Foundation.
#
# pam_usb is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
# FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
# details.
#
# You should have received a copy of the GNU General Public License along with
# this program; if not, write to the Free Software Foundation, Inc., 59 Temple
# Place, Suite 330, Boston, MA  02111-1307  USA


import dbus
import sys
import os
from xml.dom import minidom

class Device:
	def __init__(self, udi):
		self.__udi = udi
		self.__findStorageDevice()
		deviceObj = bus.get_object('org.freedesktop.Hal',
				udi)
		deviceProperties = deviceObj.GetAllProperties(
				dbus_interface = 'org.freedesktop.Hal.Device')
		self.vendor = deviceProperties['usb_device.vendor']
		self.product = deviceProperties['info.product']
		self.serialNumber = deviceProperties['usb_device.serial']

	def __findStorageDevice(self):
		for child in halManager.FindDeviceByCapability('storage'):
			obj = bus.get_object('org.freedesktop.Hal',
					child)
			properties = obj.GetAllProperties(
					dbus_interface = 'org.freedesktop.Hal.Device')
			if properties['storage.physical_device'] == self.__udi + '_if0':
				self.__storageUdi = child
				return
		raise Exception, '%s is not a storage device.' % self.__udi

	def __repr__(self):
		return "%s %s (%s)" % (self.vendor, self.product, self.serialNumber)

	def volumes(self):
		vols = []
		for volume in halManager.FindDeviceByCapability('volume'):
			deviceObj = bus.get_object('org.freedesktop.Hal',
					volume)
			deviceProperties = deviceObj.GetAllProperties(
					dbus_interface = 'org.freedesktop.Hal.Device')
			if deviceProperties['block.storage_device'] != self.__storageUdi:
				continue
			vols.append({'uuid' : deviceProperties['volume.uuid'],
				'device' : deviceProperties['block.device']})
			return vols

def listOptions(question, options, autodetect = True):
	if autodetect == True and len(options) == 1:
		return 0
	while True:
		try:
			print question
			for i in range(len(options)):
				print "%d) %s" % (i, options[i])
			print
			sys.stdout.write('[%s-%s]: ' % (0, len(options) - 1))
			optionId = int(sys.stdin.readline())
			print
			if optionId not in range(len(options)):
				raise Exception
			return optionId
		except KeyboardInterrupt: sys.exit()
		except Exception: pass
		else: break

def writeConf(options, doc):
	try:
		f = open(options['configFile'], 'w')
		f.write(doc.toxml())
		f.close()
	except Exception, err:
		print 'Unable to save %s: %s' % (options['configFile'], err)
		sys.exit(1)
	else:
		print 'Done.'

def shouldSave(options, items):
	print "\n".join(["%s\t\t: %s" % item for item in items])
	print
	print 'Save to %s ?' % options['configFile']
	sys.stdout.write('[y/n] ')
	if sys.stdin.readline().strip() != 'y':
		sys.exit(1)

def addUser(options):
	print 'adding user %s' % options['userName']
	try:
		doc = minidom.parse(options['configFile'])
	except Exception, err:
		print 'Unable to read %s: %s' % (options['configFile'], err)
		sys.exit(1)
	devSection = doc.getElementsByTagName('devices')
	if len(devSection) == 0:
		print 'Malformed configuration file: No <devices> section found.'
		sys.exit(1)
	devicesObj = devSection[0].getElementsByTagName('device')
	if len(devicesObj) == 0:
		print 'No devices found.'
		print 'You must add a device (--add-device) before adding users'
		sys.exit(1)

	devices = []
	for device in devicesObj:
		devices.append(device.getAttribute('id'))
	print devices
	device = devices[listOptions("Which device would you like to use for authentication ?",
		devices, False)]

	shouldSave(options, [
		('User', options['userName']),
		('Device', device)
		])

	users = doc.getElementsByTagName('users')
	user = doc.createElement('user')
	user.attributes['id'] = options['userName']
	e = doc.createElement('device')
	t = doc.createTextNode(device)
	e.appendChild(t)
	user.appendChild(e)
	users[0].appendChild(user)
	writeConf(options, doc)

def addDevice(options):
	devices = []

	for udi in halManager.FindDeviceStringMatch('info.bus', 'usb_device'):
		try:
			devices.append(Device(udi))
		except Exception, ex:
			pass

	if len(devices) == 0:
		print 'No devices detected.'
		sys.exit()
	device = devices[listOptions("Please select the device you wish to add.", devices)]

	volumes = device.volumes()
	volume = volumes[listOptions("Which volume would you like to use for " \
			"storing data ?",
			["%s (UUID: %s)" % (volume['device'],
				volume['uuid'])
				for volume in volumes]
			)]

	uuid = volume['uuid']
	if volume['uuid'] == '':
		print 'WARNING: No UUID detected for device %s. One time pads will be disabled.' % volume['device']
		uuid = "<UNDEFINED>"

	shouldSave(options,[
		('Name', options['deviceName']),
		('Vendor', device.vendor),
		('Model', device.product),
		('Serial', device.serialNumber),
		('UUID', uuid)
		])

	try:
		doc = minidom.parse(options['configFile'])
	except Exception, err:
		print 'Unable to read %s: %s' % (options['configFile'], err)
		sys.exit(1)

	devs = doc.getElementsByTagName('devices')
	dev = doc.createElement('device')
	dev.attributes['id'] = options['deviceName']
	devs[0].appendChild(dev)

	for name, value in (('vendor', device.vendor),
			('model', device.product),
			('serial', device.serialNumber),
			('volume_uuid', volume['uuid'])):
		if value == '':
			continue
		e = doc.createElement(name)
		t = doc.createTextNode(value)
		e.appendChild(t)
		dev.appendChild(e)

	# Disable one time pads if there's no device UUID
	if volume['uuid'] == '':
		e = doc.createElement('option')
		e.setAttribute('name', 'one_time_pad')
		e.appendChild(doc.createTextNode('false'))
		dev.appendChild(e)
	writeConf(options, doc)

def usage():
	print 'Usage: %s [--config file] --add-device <name> [--no-autodetect]' % os.path.basename(__file__)
	sys.exit(1)

import getopt

try:
	opts, args = getopt.getopt(sys.argv[1:], "hd:nu:c:",
			["help", "add-device=", "add-user=", "config="])
except getopt.GetoptError:
	usage()

if len(args) != 0:
	usage()

options = { 'deviceName' : None, 'userName' : None,
		'configFile' : '/etc/pamusb.conf' }

for o, a in opts:
	if o in ("-h", "--help"):
		usage()
	if o in ("-d", "--add-device"):
		options['deviceName'] = a
	if o in ("-u", "--add-user"):
		options['userName'] = a
	if o in ("-c", "--config"):
		options['configFile'] = a

if options['deviceName'] is not None and options['userName'] is not None:
	print 'You cannot use both --add-user and --add-device'
	usage()

if options['deviceName'] is None and options['userName'] is None:
	usage()

if options['deviceName'] is not None:
	bus = dbus.SystemBus()
	halService = bus.get_object('org.freedesktop.Hal',
			'/org/freedesktop/Hal/Manager')
	halManager = dbus.Interface(halService, 'org.freedesktop.Hal.Manager')
	try:
		addDevice(options)
	except KeyboardInterrupt:
		sys.exit(1)

if options['userName'] is not None:
	try:
		addUser(options)
	except KeyboardInterrupt:
		sys.exit(1)