1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
#!/usr/bin/perl -w
# pam-auth-update: update /etc/pam.d/common-* from /usr/share/pam-configs
#
# Update the /etc/pam.d/common-* files based on the per-package profiles
# provided in /usr/share/pam-configs/ taking into consideration user's
# preferences (as determined via debconf prompting).
#
# Written by Steve Langasek <steve.langasek@canonical.com>
#
# Copyright (C) 2008 Canonical Ltd.
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of version 3 of the GNU General Public License as
# published by the Free Software Foundation.
#
# # This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301,
# USA.
use strict;
use Debconf::Client::ConfModule ':all';
version('2.0');
my $capb=capb('backup');
my $inputdir = '/usr/share/pam-configs';
my $template = 'libpam-runtime/profiles';
my $errtemplate = 'libpam-runtime/conflicts';
my (%profiles, @sorted, @enabled, @conflicts);
opendir(DIR, $inputdir) || die "could not open config directory: $!";
while (my $profile = readdir(DIR)) {
next if ($profile eq '.' || $profile eq '..');
%{$profiles{$profile}} = parse_pam_profile($inputdir . '/' . $profile);
}
closedir DIR;
x_loadtemplatefile('/var/lib/dpkg/info/libpam-runtime.templates','libpam-runtime');
# always sort by priority, so we have consistency and don't have to
# shuffle later
@sorted = sort { $profiles{$b}->{'Priority'} <=> $profiles{$a}->{'Priority'} }
keys(%profiles);
subst($template, 'profile_names', join(', ',@sorted));
subst($template, 'profiles',
join(', ', map { $profiles{$_}->{'Name'} } @sorted));
# this needs to be replaced by proper detection of any profiles that are
# already enabled.
fset($template,'seen','false');
set($template,
join(', ', grep { $profiles{$_}->{'Default'} eq 'yes' } @sorted));
do {
@conflicts = ();
input('high',$template);
go();
@enabled = split(/, /, get($template));
# in case of conflicts, automatically unset the lower priority
# item of each pair
foreach my $elem (@enabled)
{
for (my $i=$#enabled; $i >= 0; $i--)
{
my $conflict = $enabled[$i];
if ($profiles{$elem}->{'Conflicts'}->{$conflict}) {
splice(@enabled,$i,1);
my $desc = $profiles{$elem}->{'Name'}
. ', ' . $profiles{$conflict}->{'Name'};
push(@conflicts,$desc);
}
}
}
if (@conflicts) {
subst($errtemplate, 'conflicts', join("\n", @conflicts));
input('high',$errtemplate);
}
fset($template,'seen','false');
set($template, join(', ', @enabled));
} while (@conflicts);
# simple function to parse a provided config file, in pseudo-RFC822
# format,
sub parse_pam_profile
{
my ($profile) = $_[0];
my $fieldname;
my %profile;
open(PROFILE, $profile) || die "could not read profile $profile: $!";
while (<PROFILE>) {
if (/^(\S+):\s+(.*)$/) {
$fieldname = $1;
if ($fieldname eq 'Conflicts') {
foreach my $elem (split(/, /, $2)) {
$profile{'Conflicts'}->{$elem} = 1;
}
} else {
$profile{$1} = $2;
}
} else {
chomp;
$profile{$fieldname} .= "\n$_";
}
}
close(PROFILE);
return %profile;
}
|
