Current File : //lib/python2.7/site-packages/salt/states/linux_acl.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l m Z d d l m
Z
d d l Z e j
e � Z d Z d � Z d d e e d � Z d d e d
� Z d d e e d � Z d e d � Z d S(
u�
Linux File Access Control Lists
The Linux ACL state module requires the `getfacl` and `setfacl` binaries.
Ensure a Linux ACL is present
.. code-block:: yaml
root:
acl.present:
- name: /root
- acl_type: user
- acl_name: damian
- perms: rwx
Ensure a Linux ACL does not exist
.. code-block:: yaml
root:
acl.absent:
- name: /root
- acl_type: user
- acl_name: damian
- perms: rwx
Ensure a Linux ACL list is present
.. code-block:: yaml
root:
acl.list_present:
- name: /root
- acl_type: user
- acl_name:
- damian
- homer
- perms: rwx
Ensure a Linux ACL list does not exist
.. code-block:: yaml
root:
acl.list_absent:
- name: /root
- acl_type: user
- acl_name:
- damian
- homer
- perms: rwx
i ( t absolute_importt print_functiont unicode_literalsN( t six( t CommandExecutionErroru aclc C@ s8 t j j j d � r. t j j j d � r. t St d f S( u(
Ensure getfacl & setfacl exist
u getfaclu setfacluW The linux_acl state cannot be loaded: the getfacl or setfacl binary is not in the path.( t saltt utilst patht whicht __virtualname__t False( ( ( s9 /usr/lib/python2.7/site-packages/salt/states/linux_acl.pyt __virtual__G s *u c
C@ s' i | d 6t d 6i d 6d d 6} i d d 6d d 6d
d 6d d
6} i d
d 6d d
6d d 6d d 6} t j j | � s� d j | � | d <t | d <| St d | d | �} | j d' � r� d j | j d � d
� }
| | j
d i � } t } n | }
| | } t } | d k r=| | j
d � j
|
d � }
n | }
| j
|
d( � s[| ryB g | |
D]' } t t
j | � � |
k ri| ^ qij � } Wn# t t t t f k
r�d( } n X| r�t g | D] } | j
| | � ^ q�� } t } xo | D]g } t } xH | | j
|
g � D]0 } |
| k r$| |
d | k r$t } Pq$q$W| st } PqqW| sd | d <q | |
d } d j | | d
@| | d @| | d @� } i i | d 6| d 6| d 6d 6i | d 6| d 6| d 6d 6} t d r7| j i d j | | | � d 6d( d 6| d 6� | Syu | r]t d | d | d t �n t d! | | | | d | d t �| j i d" j | � d 6t d 6| d 6� Wq t k
r�} | j i d# j | | j � d 6t d 6� q Xq#i i | d 6| d 6| d 6d 6} t d rW| j i d$ j | | � d 6d( d 6| d 6� d( | d <| Syu | r}t d | d | d t �n t d! | | | | d | d t �| j i d% j | � d 6t d 6| d 6� Wq#t k
r } | j i d# j | | j � d 6t d 6� q#Xn d& | d <t | d <| S() u�
Ensure a Linux ACL is present
name
The acl path
acl_type
The type of the acl is used for it can be 'user' or 'group'
acl_name
The user or group
perms
Set the permissions eg.: rwx
recurse
Set the permissions recursive in the path
force
Wipe out old permissions and ensure only the new permissions are set
u nameu resultu changesu u commenti u ri u wi u xi u -u {0} does not existu acl.getfaclt recursiveu d:u default:u :u defaultsu octalu$ Permissions are in the desired stateu {}{}{}u acl_nameu acl_typeu permsu newu oldu testu7 Updated permissions will be applied for {0}: {1} -> {2}u
acl.wipefaclst raise_erru acl.modfaclu Updated permissions for {0}u' Error updating permissions for {0}: {1}u, New permissions will be applied for {0}: {1}u Applied new permissions for {0}u ACL Type does not exist( u d:u default:N( t Truet osR t existst formatR
t __salt__t
startswitht joint splitt gett Nonet nextR t iterkeyst popt AttributeErrort
IndexErrort
StopIterationt KeyErrort sumt __opts__t updateR t strerror( t namet acl_typet acl_namet permst recurset forcet rett _octalt
_octal_lookupt __current_permst _acl_typet _current_permst _defaultt _search_namet it usert octal_sumt need_refreshR t acl_foundt user_aclt _numt new_permst changest exc( ( s9 /usr/lib/python2.7/site-packages/salt/states/linux_acl.pyt presentQ s�
""
"B
+
c C@ sV i | d 6t d 6i d 6d d 6} t j j | � sU d j | � | d <t | d <| St d | d | �} | j d � r� d j | j d � d � } | | j
d
i � } t } n | } | | } t } | d k r� | | j
d � j
| d � }
n | }
| j
| d � s| r>yB g | | D]' } t t
j | � � |
k r%| ^ q%j � } Wn# t t t t f k
r~d } n Xt }
x[ | D]S } t } x4 | | j
| g � D] } |
| k r�t } Pq�q�W| r�t }
Pq�q�W| s�|
r1d | d <t d rd | d <| St d | | | | d | �qRd | d <n d | d <t | d <| S( u8
Ensure a Linux ACL does not exist
name
The acl path
acl_type
The type of the acl is used for, it can be 'user' or 'group'
acl_names
The user or group
perms
Remove the permissions eg.: rwx
recurse
Set the permissions recursive in the path
u nameu resultu changesu u commentu {0} does not existu acl.getfaclR u d:u default:u :i u defaultsu Removing permissionsu testu acl.delfaclu$ Permissions are in the desired stateu ACL Type does not exist( u d:u default:N( R R R R R R
R R R R R R R R R R R R R R R ( R# R$ R% R& R' R) R, R- R. R/ R0 R1 R2 R4 R R5 R6 ( ( s9 /usr/lib/python2.7/site-packages/salt/states/linux_acl.pyt absent� sX
"B
c C@ s� | d- k r g } n i | d 6t d 6i d 6i d 6d d 6} i d d 6d d
6d d 6d
d 6} t g | D] } | j | | � ^ qj � } t j j | � s� d j | � | d <t | d <| St d | � }
| j
d. � rd j | j d � d � } |
| j d i � } t }
nm| } |
| } t }
| j d i � j d d- � } | j d i � j d d- � } g } t } xS | | D]G } x> | j
� D]0 } | j | j d � � | | | d k } q�Wq�W| d k r y | j | � Wq%t k
r�q%Xn% y | j | � Wn t k
r$n Xt | � t | � A} | r�| r�| r�i | d 6t d 6i d 6i d 6d j | � d 6} | S| d k r�|
| j d � j | d � } n | } | j | d- � s�|
r�yP i } xC | | D]7 } | r�t t j | � � | k r�| j | � q�q�WWn t t f k
r@d- } n X| r�i } xpt | � D] \ } } | | k r9| | d t g | D] } | j | | � ^ q�� k r�d | d <qy| j i i d j | � d 6| d 6| d 6d 6i d j | � d 6| d 6t j | | d � d 6d! 6� t d" rp| j i d# j | t j | | d � | � d 6d- d 6| d 6� | Sy� | r�t d$ | d% | d& t �n x1 | D]) } t d' | | | | d% | d& t �q�W| j i d( j | � d 6t d 6| d 6� Wqyt k
r5} | j i d) j | | j � d 6t d 6� qyXqZi i d j | � d 6| d 6| d 6d 6} t d" r�| j i d* j | | � d 6d- d 6| d 6� d- | d <| Sy� | r�t d$ | d% | d& t �n x1 | D]) } t d' | | | | d% | d& t �q�W| j i d+ j d j | � � d 6t d 6| d 6� WqZt k
rx} | j i d) j | | j � d 6t d 6� qZXqZWq�i i d j | � d 6| d 6| d 6d 6} t d" r�| j i d* j | | � d 6d- d 6| d 6� d- | d <| Sy� | rt d$ | d% | d& t �n x1 | D]) } t d' | | | | d% | d& t �q W| j i d+ j d j | � � d 6t d 6| d 6� Wq�t k
r�} | j i d) j | | j � d 6t d 6� q�Xn d, | d <t | d <| S(/ u�
Ensure a Linux ACL list is present
Takes a list of acl names and add them to the given path
name
The acl path
acl_type
The type of the acl is used for it can be 'user' or 'group'
acl_names
The list of users or groups
perms
Set the permissions eg.: rwx
recurse
Set the permissions recursive in the path
force
Wipe out old permissions and ensure only the new permissions are set
u nameu resultu changesu pchangesu u commenti u ri u wi u xi u -u {0} does not existu acl.getfaclu d:u default:u :u defaultsu groupu owneru utf-8u octalu useru, Permissions and {}s are in the desired stateu$ Permissions are in the desired stateu , u acl_nameu acl_typeu permsu newu oldu testu7 Updated permissions will be applied for {0}: {1} -> {2}u
acl.wipefaclsR R
u acl.modfaclu Updated permissions for {0}u' Error updating permissions for {0}: {1}u, New permissions will be applied for {0}: {1}u Applied new permissions for {0}u ACL Type does not existN( u d:u default:( R R R R R R R R R
R R R R t keyst appendt encodet removet
ValueErrort setR R R R! R R t enumeratet text_typeR R R" ( R# R$ t acl_namesR& R' R( R) R* R1 t _octal_permsR, R- R. R/ t
_origin_groupt
_origin_ownert _current_acl_typest
diff_permst keyt current_acl_namet diff_aclst
_search_namest usersR9 t countt search_nameR% R: ( ( s9 /usr/lib/python2.7/site-packages/salt/states/linux_acl.pyt list_present: s
"+
"!
9
c
C@ s | d k r g } n i | d 6t d 6i d 6d d 6} t j j | � sj d j | � | d <t | d <| St d | � } | j d � r� d
j | j
d
� d � } | | j d i � } t } n | } | | } t } | st | | j d � j | d � � } n t | � } | j | d � s,| r�yP i }
xC | | D]7 } | r@t
t j | � � | k r@|
j | � q@q@WWn t t f k
r�d }
n X|
r�d
| d <t d r�d | d <| Sx5 | D] } t d | | | d | �q�Wqd | d <n d | d <t | d <| S( u�
Ensure a Linux ACL list does not exist
Takes a list of acl names and remove them from the given path
name
The acl path
acl_type
The type of the acl is used for, it can be 'user' or 'group'
acl_names
The list of users or groups
perms
Remove the permissions eg.: rwx
recurse
Set the permissions recursive in the path
u nameu resultu changesu u commentu {0} does not existu acl.getfaclu d:u default:u :i u defaultsu Removing permissionsu testu acl.delfaclR u$ Permissions are in the desired stateu ACL Type does not existN( u d:u default:( R R R R R R R
R R R R R RB R R R R! R R R (
R# R$ RE R' R) R, R- R. R/ RN RO R1 R% ( ( s9 /usr/lib/python2.7/site-packages/salt/states/linux_acl.pyt list_absent� sP
( !
!
( t __doc__t
__future__R R R t loggingR t salt.extR t salt.exceptionsR t salt.utils.pathR t getLoggert __name__t logR R R
R; R< R RR RS ( ( ( s9 /usr/lib/python2.7/site-packages/salt/states/linux_acl.pyt <module>6 s
�X�
Mini Shell