Current File : //usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyo
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z e j e
� Z d Z d � Z
e d � Z e d � Z d � Z d � Z d
� Z d � Z d � Z d
� Z d � Z e d � Z d � Z d � Z d S( u/
Module for Solaris' Role-Based Access Control
i ( t absolute_importt unicode_literalst print_functionNu rbacc C@ s< t d d k r) t j j j d � r) t St d j t � f S( uB
Provides rbac if we are running on a solaris like system
u kernelu SunOSu profilesu6 {0} module can only be loaded on a solaris like system( t
__grains__t saltt utilst patht whicht __virtualname__t Falset format( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt __virtual__ s
%c
C@ sb i } d g } t j j j d d � �u } xk | D]c } t j j j | � } | j d � } | d j � d k r1 | j | d j � j d � � q1 q1 WWd QXt j j j d
d � �f } x\ | D]T } t j j j | � } | j d � } t | � d k rq� n | d
| | d <q� WWd QX| r^x7 g | D] } | | k r.| ^ q.D]
} | | =qJWn | S( u�
List all available profiles
default_only : boolean
return only default profile
CLI Example:
.. code-block:: bash
salt '*' rbac.profile_list
u Allu /etc/security/policy.confu ru =i u
PROFS_GRANTEDi u ,Nu /etc/security/prof_attru :i i (
R R t filest fopent stringutilst
to_unicodet splitt stript extendt len( t default_onlyt profilest default_profilest policy_conft policyt prof_attrt profilet p( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt profile_list" s&
-
,c
C@ sv g } t j j j d d � �} x� | D]� } t j j j | � } | j � j d � } t | � d k rp q( n | d | k r� q( n i } xn | d j � j d � D]S } | j � j d � \ } } | d k r� | j � j d � | | <q� | | | <q� Wd
| k r( | j | d
� q( q( WWd
QX| rfx6 t
d t � D]" } | | k r=| j | � q=q=Wn t
t | � � S( u
List profiles for user
user : string
username
default_hidden : boolean
hide default profiles
CLI Example:
.. code-block:: bash
salt '*' rbac.profile_get leo
salt '*' rbac.profile_get leo default_hidden=False
u /etc/user_attru ru :i i i u ;u =u authsu profilesu rolesu ,NR ( u authsu profilesu roles( R R R R
R R R R R R R t Truet removet listt set( t usert default_hiddent
user_profilest user_attrR t attrst attrt attr_keyt attr_val( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt profile_getO s,
c C@ sY i } | j d � } t � j � } g | D] } | | k r+ | ^ q+ } t j d | | | � t | � d k r� t d d j d | d d j t t
| � | � � � � } | d d k r� i | d d 6d | k r� | d n | d
d 6| d <| Sn t
| t � } xJ | D]B } | | k r.d
| | <q| | k rGd | | <qd | | <qW| S( u$
Add profile to user
user : string
username
profile : string
profile name
CLI Example:
.. code-block:: bash
salt '*' rbac.profile_add martine 'Primary Administrator'
salt '*' rbac.profile_add martine 'User Management,User Security'
u ,uD rbac.profile_add - profiles=%s, known_profiles=%s, valid_profiles=%si u cmd.run_allu usermod -P "{profiles}" {login}t loginR u retcodeu stderru stdoutu messageu Erroru Unknownu Addedu Failed( R R t keyst logt debugR t __salt__R
t joinR R) R ( R! R t retR t known_profilesR t valid_profilest rest active_profiles( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt profile_add� s4 %% (
c
C@ sn i } | j d � } t � j � } g | D] } | | k r+ | ^ q+ } t j d | | | � t | � d k rt d d j d | d d j g t | � D] } | | k r� | ^ q� � � � } | d d k ri | d d 6d | k r� | d n | d
d 6| d <| Sn t | t
� } xJ | D]B } | | k rCd
| | <q$| | k r\d | | <q$d | | <q$W| S( u#
Remove profile from user
user : string
username
profile : string
profile name
CLI Example:
.. code-block:: bash
salt '*' rbac.profile_rm jorge 'Primary Administrator'
salt '*' rbac.profile_rm jorge 'User Management,User Security'
u ,uC rbac.profile_rm - profiles=%s, known_profiles=%s, valid_profiles=%si u cmd.run_allu usermod -P "{profiles}" {login}R* R u retcodeu stderru stdoutu messageu Erroru Unknownu Failedu Remove( R R R+ R, R- R R. R
R/ R) R ( R! R R0 R R1 R R2 R3 R4 ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt
profile_rm� s4 %: (
c
C@ s+ i } t j j j d d � �} x� | D]� } t j j j | � } | j d � } t | � d k rj q( n i } x\ | d j d � D]G } | j d � \ } } | d k r� | j d � | | <q� | | | <q� W| | d <d | d k r( | d d d
k r( | d d =| d | | d <q( q( WWd QX| S( uo
List all available roles
CLI Example:
.. code-block:: bash
salt '*' rbac.role_list
u /etc/user_attru ru :i i u ;u =u authsu profilesu rolesu ,u typeu rolei N( u authsu profilesu roles( R R R R
R R R R ( t rolesR$ t roleR% R& R' R( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt role_list� s$
$ c
C@ s= g } t j j j d d � �
} x| D]� } t j j j | � } | j � j � j d � } t | � d k rv q( n | d | k r� q( n i } xn | d j � j d � D]S } | j � j d � \ } } | d k r� | j � j d � | | <q� | | | <q� Wd | k r( | j | d � q( q( WWd
QXt
t | � � S( u�
List roles for user
user : string
username
CLI Example:
.. code-block:: bash
salt '*' rbac.role_get leo
u /etc/user_attru ru :i i i u ;u =u authsu profilesu rolesu ,N( u authsu profilesu roles( R R R R
R R R R R R R R ( R! t
user_rolesR$ R8 R% R& R' R( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt role_get s$
c C@ sV i } | j d � } t � j � } g | D] } | | k r+ | ^ q+ } t j d | | | � t | � d k r� t d d j d | d d j t t
| � | � � � � } | d d k r� i | d d 6d | k r� | d n | d
d 6| d <| Sn t
| � } xJ | D]B } | | k r+d
| | <q | | k rDd | | <q d | | <q W| S( u�
Add role to user
user : string
username
role : string
role name
CLI Example:
.. code-block:: bash
salt '*' rbac.role_add martine netcfg
salt '*' rbac.role_add martine netcfg,zfssnap
u ,u8 rbac.role_add - roles=%s, known_roles=%s, valid_roles=%si u cmd.run_allu usermod -R "{roles}" {login}R* R7 u retcodeu stderru stdoutu messageu Erroru Unknownu Addedu Failed( R R9 R+ R, R- R R. R
R/ R R; ( R! R8 R0 R7 t known_rolest rt valid_rolesR3 t active_roles( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt role_addD s4 %% (
c
C@ sk i } | j d � } t � j � } g | D] } | | k r+ | ^ q+ } t j d | | | � t | � d k rt d d j d | d d j g t | � D] } | | k r� | ^ q� � � � } | d d k ri | d d 6d | k r� | d n | d
d 6| d <| Sn t | � } xJ | D]B } | | k r@d
| | <q!| | k rYd | | <q!d | | <q!W| S( u�
Remove role from user
user : string
username
role : string
role name
CLI Example:
.. code-block:: bash
salt '*' rbac.role_rm jorge netcfg
salt '*' rbac.role_rm jorge netcfg,zfssnap
u ,u7 rbac.role_rm - roles=%s, known_roles=%s, valid_roles=%si u cmd.run_allu usermod -R "{roles}" {login}R* R7 u retcodeu stderru stdoutu messageu Erroru Unknownu Failedu Remove(
R R9 R+ R, R- R R. R
R/ R; ( R! R8 R0 R7 R< R= R> R3 R? ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt role_rm{ s4 %: (
c C@ s� i } t j j j d d � �� } x� | D]� } t j j j | � } | j d � } t | � d k rj q( n | d d d k r� d j | d � | d <n | d | | d <q( WWd
QX| S( uw
List all available authorization
CLI Example:
.. code-block:: bash
salt '*' rbac.auth_list
u /etc/security/auth_attru ru :i i i����u .u {0}*i N( R R R R
R R R R R
( t authst auth_attrt auth( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt auth_list� s
c
C@ s� g } t j j j d d � �} x� | D]� } t j j j | � } | j � j d � } t | � d k rp q( n | d | k r� q( n i } xn | d j � j d � D]S } | j � j d � \ } } | d k r� | j � j d � | | <q� | | | <q� Wd | k r( | j | d � q( q( WWd
QX| r�t
d d j | � � } | d d k r�xY | d j � D]D } d | k r�| j | j � j d � � qg| j
| j � � qgWq�n t t | � � S( u�
List authorization for user
user : string
username
computed : boolean
merge results from `auths` command into data from user_attr
CLI Example:
.. code-block:: bash
salt '*' rbac.auth_get leo
u /etc/user_attru ru :i i i u ;u =u authsu profilesu rolesu ,Nu cmd.run_allu auths {0}u retcodeu stdout( u authsu profilesu roles( R R R R
R R R R R R R. R
t
splitlinest appendR R (
R! t computedt
user_authsR$ RD R% R& R' R( R3 ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt auth_get� s2
c
C@ s\ i } | j d � } t � j � } g | D] } | | k r+ | ^ q+ } t j d | | | � t | � d k r� t d d j d | d d j t t
| t � | � � � � } | d d k r� i | d d 6d | k r� | d n | d
d 6| d <| Sn t
| t � } xJ | D]B } | | k r1d
| | <q| | k rJd | | <qd | | <qW| S( u*
Add authorization to user
user : string
username
auth : string
authorization name
CLI Example:
.. code-block:: bash
salt '*' rbac.auth_add martine solaris.zone.manage
salt '*' rbac.auth_add martine solaris.zone.manage,solaris.mail.mailq
u ,u8 rbac.auth_add - auths=%s, known_auths=%s, valid_auths=%si u cmd.run_allu usermod -A "{auths}" {login}R* RB u retcodeu stderru stdoutu messageu Erroru Unknownu Addedu Failed( R RE R+ R, R- R R. R
R/ R RJ R (
R! RD R0 RB t known_authsR= t valid_authsR3 t active_authst a( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt auth_add s4 %( (
c
C@ sq i } | j d � } t � j � } g | D] } | | k r+ | ^ q+ } t j d | | | � t | � d k rt d d j d | d d j g t | t
� D] } | | k r� | ^ q� � � � } | d d k ri | d d 6d | k r� | d n | d
d 6| d <| Sn t | t
� } xJ | D]B } | | k rFd
| | <q'| | k r_d | | <q'd | | <q'W| S( u)
Remove authorization from user
user : string
username
auth : string
authorization name
CLI Example:
.. code-block:: bash
salt '*' rbac.auth_rm jorge solaris.zone.manage
salt '*' rbac.auth_rm jorge solaris.zone.manage,solaris.mail.mailq
u ,u7 rbac.auth_rm - auths=%s, known_auths=%s, valid_auths=%si u cmd.run_allu usermod -A "{auths}" {login}R* RB u retcodeu stderru stdoutu messageu Erroru Unknownu Failedu Remove( R RE R+ R, R- R R. R
R/ RJ R ( R! RD R0 RB RK RN RL R3 RM ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt auth_rm> s4 %= (
( t __doc__t
__future__R R R t loggingt salt.utils.filesR t salt.utils.patht getLoggert __name__R, R R R R R R) R5 R6 R9 R; R@ RA RE RJ RO RP ( ( ( s= /usr/lib/python2.7/site-packages/salt/modules/rbac_solaris.pyt <module> s& - 4 7 7 ( + 7 7 7 7
Mini Shell