e6a1298e54
Too difficult to break out into seperate patches at this point. Since almost no other groups are using sepolicy yet, I will push together.
196 lines
7.9 KiB
Bash
196 lines
7.9 KiB
Bash
# This file is part of systemd.
|
|
#
|
|
# Copyright 2012-2013 Dan Walsh
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# systemd is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
# General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
__contains_word () {
|
|
local word=$1; shift
|
|
for w in $*; do [[ $w = $word ]] && return 0; done
|
|
return 1
|
|
}
|
|
|
|
__get_all_paths () {
|
|
dir -1 -F $* | grep '/' | cut -d'/' -f 1
|
|
}
|
|
__get_all_ftypes () {
|
|
echo '-- -d -c -b -s -l -p'
|
|
}
|
|
__get_all_networks () {
|
|
seinfo -u 2> /dev/null | tail -n +3
|
|
}
|
|
__get_all_booleans () {
|
|
getsebool -a 2> /dev/null
|
|
}
|
|
__get_all_types () {
|
|
seinfo -t 2> /dev/null | tail -n +3
|
|
}
|
|
__get_all_admin_interaces () {
|
|
awk '/InterfaceVector.*_admin /{ print $2 }' /var/lib/sepolgen/interface_info | awk -F '_admin' '{ print $1 }'
|
|
}
|
|
__get_all_user_role_interaces () {
|
|
awk '/InterfaceVector.*_role /{ print $2 }' /var/lib/sepolgen/interface_info | awk -F '_role' '{ print $1 }'
|
|
}
|
|
__get_all_user_domains () {
|
|
seinfo -auserdomain -x 2> /dev/null | tail -n +2
|
|
}
|
|
__get_all_users () {
|
|
seinfo -u 2> /dev/null | tail -n +2
|
|
}
|
|
__get_all_classes () {
|
|
seinfo -c 2> /dev/null | tail -n +2
|
|
}
|
|
__get_all_port_types () {
|
|
seinfo -aport_type -x 2> /dev/null | tail -n +2
|
|
}
|
|
__get_all_domain_types () {
|
|
seinfo -adomain -x 2> /dev/null | tail -n +2
|
|
}
|
|
__get_all_domains () {
|
|
seinfo -adomain -x 2>/dev/null | sed 's/_t$//g'
|
|
}
|
|
_sepolicy () {
|
|
local command=${COMP_WORDS[1]}
|
|
local cur=${COMP_WORDS[COMP_CWORD]} prev=${COMP_WORDS[COMP_CWORD-1]}
|
|
local verb comps
|
|
|
|
local -A VERBS=(
|
|
[BOOLEANS]='booleans'
|
|
[COMMUNICATE]='communicate'
|
|
[GENERATE]='generate'
|
|
[GUI]='gui'
|
|
[INTERFACE]='interface'
|
|
[MANPAGE]='manpage'
|
|
[NETWORK]='network'
|
|
[TRANSITION]='transition'
|
|
)
|
|
|
|
COMMONOPTS='-P --policy -h --help'
|
|
local -A OPTS=(
|
|
[booleans]='-h --help -p --path -a -all -b --boolean'
|
|
[communicate]='-h --help -s --source -t --target -c --class -S --sourceaccess -T --targetaccess'
|
|
[generate]='-a --admin --admin_user --application --cgi --confined_admin --customize -d --domain --dbus --desktop_user -h --help --inetd --init -n --name --newtype -p --path --sandbox -T --test --term_user -u --user -w --writepath --x_user'
|
|
[gui]='-h --help'
|
|
[interface]='-h --help -a --list_admin -c --compile -i --interface -l --list -u --list_user -u --list_user -v --verbose'
|
|
[manpage]='-h --help -p --path -a -all -o --os -d --domain -w --web -r --root'
|
|
[network]='-h --help -d --domain -l --list -p --port -t --type '
|
|
[transition]='-h --help -s --source -t --target'
|
|
)
|
|
|
|
for ((i=0; $i <= $COMP_CWORD; i++)); do
|
|
if __contains_word "${COMP_WORDS[i]}" ${VERBS[*]} &&
|
|
! __contains_word "${COMP_WORDS[i-1]}" ${OPTS[ARG}]}; then
|
|
verb=${COMP_WORDS[i]}
|
|
break
|
|
fi
|
|
done
|
|
|
|
if [[ -z $verb ]]; then
|
|
if [ "$prev" = "-P" -o "$prev" = "--policy" ]; then
|
|
COMPREPLY=( $( compgen -f -- "$cur") )
|
|
compopt -o filenames
|
|
return 0
|
|
else
|
|
comps="${VERBS[*]} ${COMMONOPTS}"
|
|
fi
|
|
elif [ "$verb" = "booleans" ]; then
|
|
if [ "$prev" = "-b" -o "$prev" = "--boolean" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_booleans ) " -- "$cur") )
|
|
return 0
|
|
fi
|
|
COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
|
|
return 0
|
|
elif [ "$verb" = "communicate" ]; then
|
|
if [ "$prev" = "-s" -o "$prev" = "--source" -o "$prev" = "-t" -o "$prev" = "--target" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_domain_types ) " -- "$cur") )
|
|
return 0
|
|
elif [ "$prev" = "-c" -o "$prev" = "--class" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_classes ) " -- "$cur") )
|
|
return 0
|
|
fi
|
|
COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
|
|
return 0
|
|
elif [ "$verb" = "generate" ]; then
|
|
if [ "$prev" = "--name" -o "$prev" = "-n" ]; then
|
|
return 0
|
|
elif test "$prev" = "-p" || test "$prev" = "--path" ; then
|
|
COMPREPLY=( $( compgen -d -- "$cur") )
|
|
compopt -o filenames
|
|
return 0
|
|
elif test "$prev" = "-w" || test "$prev" = "--writepath" ; then
|
|
COMPREPLY=( $( compgen -d -- "$cur") )
|
|
compopt -o filenames
|
|
return 0
|
|
elif [ "$prev" = "--domain" -o "$prev" = "-d" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_domain_types ) " -- "$cur") )
|
|
return 0
|
|
elif [ "$prev" = "--newtype" ]; then
|
|
COMPREPLY=( $(compgen -W "-n --name -t --type" -- "$cur") )
|
|
return 0
|
|
elif [ "$prev" = "--admin" -o "$prev" = "-a" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_admin_interaces ) " -- "$cur") )
|
|
return 0
|
|
elif [ "$prev" = "--user" -o "$prev" = "-u" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_users )" -- "$cur") )
|
|
return 0
|
|
elif [[ "$cur" == "$verb" || "$cur" == "" || "$cur" == -* ]]; then
|
|
COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
|
|
return 0
|
|
fi
|
|
COMPREPLY=( $( compgen -f -- "$cur") )
|
|
compopt -o filenames
|
|
return 0
|
|
elif [ "$verb" = "interface" ]; then
|
|
COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
|
|
return 0
|
|
elif [ "$verb" = "manpage" ]; then
|
|
if [ "$prev" = "-d" -o "$prev" = "--domain" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_domains ) " -- "$cur") )
|
|
return 0
|
|
elif test "$prev" = "-r" || test "$prev" = "--root" ; then
|
|
COMPREPLY=( $( compgen -d -- "$cur") )
|
|
compopt -o filenames
|
|
return 0
|
|
elif [ "$prev" = "-o" -o "$prev" = "--os" ]; then
|
|
return 0
|
|
elif test "$prev" = "-p" || test "$prev" = "--path" ; then
|
|
COMPREPLY=( $( compgen -d -- "$cur") )
|
|
compopt -o filenames
|
|
return 0
|
|
fi
|
|
COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
|
|
return 0
|
|
elif [ "$verb" = "network" ]; then
|
|
if [ "$prev" = "-t" -o "$prev" = "--type" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_port_types )" -- "$cur") )
|
|
return 0
|
|
fi
|
|
if [ "$prev" = "-d" -o "$prev" = "--domain" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_domain_types )" -- "$cur") )
|
|
return 0
|
|
fi
|
|
COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
|
|
return 0
|
|
elif [ "$verb" = "transition" ]; then
|
|
if [ "$prev" = "-s" -o "$prev" = "--source" -o "$prev" = "-t" -o "$prev" = "--target" ]; then
|
|
COMPREPLY=( $(compgen -W "$( __get_all_domain_types ) " -- "$cur") )
|
|
return 0
|
|
fi
|
|
COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
|
|
return 0
|
|
fi
|
|
COMPREPLY=( $(compgen -W "$comps" -- "$cur") )
|
|
return 0
|
|
}
|
|
complete -F _sepolicy sepolicy
|