difftreelog
feat functional polkit prompt
in: trunk
7 files changed
Cargo.lockdiffbeforeafterboth--- a/Cargo.lock
+++ b/Cargo.lock
@@ -883,6 +883,7 @@
name = "polkit-shared"
version = "0.1.0"
dependencies = [
+ "nix",
"serde",
"zbus",
]
cmds/polkit-backend/src/main.rsdiffbeforeafterboth--- a/cmds/polkit-backend/src/main.rs
+++ b/cmds/polkit-backend/src/main.rs
@@ -45,7 +45,7 @@
.prompt_text(
echo,
&prompt.to_string_lossy(),
- "Polkit prompt request",
+ "PAM prompt request",
&[],
)
.map_err(|e| {
@@ -81,7 +81,7 @@
let prompt = prompt.to_string_lossy();
let result = self
.0
- .prompt_radio(&prompt, "Polkit prompt request", &[])
+ .prompt_radio(&prompt, "PAM prompt request", &[])
.map_err(|_| ErrorCode::CONV_ERR)?;
Ok(result)
}
cmds/remowt-agent/src/main.rsdiffbeforeafterboth1use std::borrow::Cow;1use std::collections::HashMap;2use std::collections::{BTreeMap, HashMap};2use std::io::{stdout, Write};3use std::io::{stdout, Write};3use std::marker::PhantomData;4use std::marker::PhantomData;4use std::sync::{Mutex, RwLock};5use std::sync::{Mutex, RwLock};5use std::{future, process};6use std::{future, process};677use clap::Parser;8use clap::Parser;8use polkit_shared::{BackendRequest, Identity};9use polkit_shared::{emphasize, BackendRequest, Identity, PidDisplay};9use tokio::runtime::Handle;10use tokio::runtime::Handle;10use tokio::task::{AbortHandle, JoinHandle, LocalSet};11use tokio::task::{AbortHandle, JoinHandle, LocalSet};11use tracing::trace;12use tracing::trace;12use ui_prompt::dbus::DbusPrompterInterface;13use ui_prompt::dbus::DbusPrompterInterface;13use ui_prompt::rofi::RofiPrompter;14use ui_prompt::rofi::RofiPrompter;14use ui_prompt::Prompter;15use ui_prompt::{PrependSourcePrompter, Prompter, Source};15use zbus::zvariant::{OwnedValue, Str};16use zbus::zvariant::{OwnedValue, Str};16use zbus::ObjectServer;17use zbus::{fdo, ObjectServer};17use zbus::{interface, proxy, Connection};18use zbus::{interface, proxy, Connection};18use zbus_polkit::policykit1::Subject;19use zbus_polkit::policykit1::Subject;192081 action_id: String,82 action_id: String,82 message: String,83 message: String,83 icon_name: String,84 icon_name: String,84 details: HashMap<String, String>,85 mut details: BTreeMap<String, String>,85 cookie: String,86 cookie: String,86 identities: Vec<Identity>,87 identities: Vec<Identity>,87 ) -> zbus::fdo::Result<()> {88 ) -> zbus::fdo::Result<()> {89 use std::fmt::Write;88 trace!("begin auth");90 trace!("begin auth");89 let task = {91 let task = {90 let connection = self.connection.clone();92 let connection = self.connection.clone();91 let helper = self.helper.clone();93 let helper = self.helper.clone();92 let cookie = cookie.clone();94 let cookie = cookie.clone();93 tokio::task::spawn(async move {95 tokio::task::spawn(async move {94 trace!("conversation task");96 trace!("conversation task");97 let mut description = format!("{message}\n\n<b>Action id:</b> {action_id}",);98 if let Some(subject) = details.remove("polkit.caller-pid") {99 let _ = write!(description, "\n<b>Caller:</b> ");100 if let Ok(pid) = subject.parse::<u32>() {101 let _ = write!(description, "{}", PidDisplay(pid));102 } else {103 let _ = write!(description, "{}", emphasize("invalid pid"));104 }105 }106 if let Some(subject) = details.remove("polkit.subject-pid") {107 let _ = write!(description, "\n<b>Subject:</b> ");108 if let Ok(pid) = subject.parse::<u32>() {109 let _ = write!(description, "{}", PidDisplay(pid));110 } else {111 let _ = write!(description, "{}", emphasize("invalid pid"));112 }113 }114 let mut prompter = PrependSourcePrompter {115 source: vec![Source(Cow::Borrowed("polkit agent"))],116 description: description.clone(),117 prompter: RofiPrompter,118 };119120 let identity_displays: Vec<String> =121 identities.iter().map(|v| v.to_string()).collect();122 let identity_displays: Vec<&str> =123 identity_displays.iter().map(|v| v.as_str()).collect();124 let choosen_identity = match identity_displays.len() {125 0 => {126 return Err(fdo::Error::AuthFailed(127 "no identity to authenticate as".to_owned(),128 ))129 }130 1 => 0,131 _ => {132 prompter133 .prompt_enum(134 "Identity",135 "Select identity to use for polkit authorization",136 &identity_displays,137 &[],138 )139 .await?140 }141 };142143 let _ = write!(144 description,145 "\n<b>Identity:</b> {}",146 identities[choosen_identity as usize]147 );148 prompter.description = description;149150 prompter.source.push(Source(Cow::Borrowed("polkit daemon")));95 let prompter = TemporaryPrompterInterface::new(connection, RofiPrompter).await;151 let prompter = TemporaryPrompterInterface::new(connection, prompter).await;96 helper152 helper97 .init_conversation(153 .init_conversation(98 BackendRequest {154 BackendRequest {99 cookie: cookie.to_owned(),155 cookie: cookie.to_owned(),100 environment: HashMap::new(),156 environment: HashMap::new(),101 prompter_path: prompter.path.clone(),157 prompter_path: prompter.path.clone(),102 // TODO: Let user choose158 // TODO: Let user choose103 identity: identities.get(0).expect("first always exists").clone(),159 identity: identities[choosen_identity as usize].clone(),104 }, // cookie.to_owned(), HashMap::new(), prompter.path.clone()160 }, // cookie.to_owned(), HashMap::new(), prompter.path.clone()105 )161 )106 .await?;162 .await?;135 }191 }136}192}137193138const OBJ_PATH: &str = "/0lach/polkitAgent";194const OBJ_PATH: &str = "/org/freedesktop/PolicyKit1/AuthenticationAgent";139195140#[proxy(196#[proxy(141 interface = "lach.PolkitHelper",197 interface = "lach.PolkitHelper",crates/polkit-shared/Cargo.tomldiffbeforeafterboth--- a/crates/polkit-shared/Cargo.toml
+++ b/crates/polkit-shared/Cargo.toml
@@ -4,5 +4,6 @@
edition = "2021"
[dependencies]
+nix = "0.29.0"
serde = { version = "1.0.204", features = ["derive"] }
zbus = "4.4.0"
crates/polkit-shared/src/lib.rsdiffbeforeafterboth--- a/crates/polkit-shared/src/lib.rs
+++ b/crates/polkit-shared/src/lib.rs
@@ -1,14 +1,83 @@
use std::collections::HashMap;
+use std::{fmt, fs};
+use nix::unistd::{Uid, User};
use serde::{Deserialize, Serialize};
-use zbus::zvariant::{OwnedValue, Type};
+use zbus::zvariant::{OwnedValue, Type, Value};
+
+pub fn emphasize(s: impl AsRef<str>) -> String {
+ format!("<span style=\"italic\"><{}></span>", escape(s),)
+}
+fn command(s: impl AsRef<str>) -> String {
+ format!("<u><tt>{}</tt></u>", s.as_ref())
+}
+fn escape(s: impl AsRef<str>) -> String {
+ s.as_ref()
+ .replace("&", """)
+ .replace("<", "<")
+ .replace(">", ">")
+}
+pub struct PidDisplay(pub u32);
+impl fmt::Display for PidDisplay {
+ fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+ if self.0 == 1 {
+ emphasize("init").fmt(f)
+ } else if let Ok(proc) = fs::read_to_string(format!("/proc/{}/cmdline", self.0)) {
+ write!(
+ f,
+ "<sub>command</sub>{}",
+ command(
+ proc.replace("\0", " ")
+ .strip_suffix(" ")
+ .expect("cmdline should end with NUL")
+ )
+ )
+ } else if let Ok(proc) = fs::read_to_string(format!("/proc/{}/comm", self.0)) {
+ write!(f, "<sub>process</sub>{}", command(proc.replace("\0", " ")))
+ } else {
+ emphasize("unknown process").fmt(f)
+ }
+ }
+}
+
#[derive(Serialize, Deserialize, Type, PartialEq, Debug)]
pub struct Identity {
pub kind: String,
pub details: HashMap<String, OwnedValue>,
}
+impl fmt::Display for Identity {
+ fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+ match self.kind.as_str() {
+ "unix-user" => match self.details.get("uid").map(|v| &**v) {
+ Some(Value::U32(uid)) => match User::from_uid(Uid::from_raw(*uid)) {
+ Ok(Some(u)) => write!(
+ f,
+ "<sub>user</sub>{}<sup>{}</sup>{}",
+ u.name,
+ u.uid,
+ if u.gecos.is_empty() {
+ "".to_owned()
+ } else {
+ format!(": {}", escape(u.gecos.to_string_lossy()))
+ }
+ ),
+ Ok(None) => emphasize("not found").fmt(f),
+ Err(e) => {
+ let user = format!("could not get user: {e}");
+ emphasize(&user).fmt(f)?;
+ Ok(())
+ }
+ },
+
+ _ => emphasize("unknown uid").fmt(f),
+ },
+ _ => emphasize(format!("identity of unknown kind: {}", self.kind)).fmt(f),
+ }
+ }
+}
+
impl Clone for Identity {
fn clone(&self) -> Self {
Self {
crates/ui-prompt/src/lib.rsdiffbeforeafterboth--- a/crates/ui-prompt/src/lib.rs
+++ b/crates/ui-prompt/src/lib.rs
@@ -18,7 +18,7 @@
#[cfg_attr(feature = "dbus", derive(zbus::zvariant::Type))]
#[derive(serde::Serialize, serde::Deserialize, Clone)]
-pub struct Source(Cow<'static, str>);
+pub struct Source(pub Cow<'static, str>);
impl fmt::Display for Source {
fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
write!(f, "<u>{}</u>", self.0)
@@ -79,8 +79,9 @@
}
pub struct PrependSourcePrompter<P> {
- prompter: P,
- source: Vec<Source>,
+ pub prompter: P,
+ pub source: Vec<Source>,
+ pub description: String,
}
impl<P> PrependSourcePrompter<P> {
fn source(&self, input: &[Source]) -> Vec<Source> {
@@ -88,11 +89,31 @@
out.extend(input.iter().cloned());
out
}
+ fn description(&self, input: &str) -> String {
+ if self.description.is_empty() {
+ input.to_owned()
+ } else if input.is_empty() {
+ self.description.to_owned()
+ } else {
+ format!("{input}\n\n{}", self.description)
+ }
+ }
}
impl<P> Prompter for PrependSourcePrompter<P>
where
P: Prompter + Sync,
{
+ async fn prompt_radio(
+ &self,
+ prompt: &str,
+ description: &str,
+ source: &[Source],
+ ) -> Result<bool> {
+ self.prompter
+ .prompt_radio(prompt, &self.description(description), &self.source(source))
+ .await
+ }
+
async fn prompt_enum(
&self,
prompt: &str,
@@ -101,7 +122,12 @@
source: &[Source],
) -> Result<u32> {
self.prompter
- .prompt_enum(prompt, description, variants, &self.source(source))
+ .prompt_enum(
+ prompt,
+ dbg!(&self.description(description)),
+ variants,
+ &self.source(source),
+ )
.await
}
@@ -113,13 +139,18 @@
source: &[Source],
) -> Result<String> {
self.prompter
- .prompt_text(echo, prompt, description, &self.source(source))
+ .prompt_text(
+ echo,
+ prompt,
+ &self.description(description),
+ &self.source(source),
+ )
.await
}
async fn display_text(&self, error: bool, description: &str, source: &[Source]) -> Result<()> {
self.prompter
- .display_text(error, description, &self.source(source))
+ .display_text(error, &self.description(description), &self.source(source))
.await
}
}
crates/ui-prompt/src/rofi.rsdiffbeforeafterboth--- a/crates/ui-prompt/src/rofi.rs
+++ b/crates/ui-prompt/src/rofi.rs
@@ -27,7 +27,10 @@
description.to_owned()
} else {
let mut out = format!("{description}\n\n<b>Requested on ",);
- for s in source.iter() {
+ for (i, s) in source.iter().enumerate() {
+ if i != 0 {
+ out.push_str(" -> ");
+ }
out.push_str(&s.to_string());
}
out.push_str("</b>");
@@ -43,6 +46,7 @@
fixup_prompt(prompt),
"-format",
"i",
+ "-markup-rows",
]);
cmd.stdin(Stdio::piped());
cmd.stdout(Stdio::piped());
@@ -100,7 +104,10 @@
description.to_owned()
} else {
let mut out = format!("{description}\n\n<b>Requested on ",);
- for s in source.iter() {
+ for (i, s) in source.iter().enumerate() {
+ if i != 0 {
+ out.push_str(" -> ");
+ }
out.push_str(&s.to_string());
}
out.push_str("</b>");