File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/rbac_solaris.cpython-310.pyc
Back
o ;j@ � @ s� d Z ddlZddlZddlZe�e�ZdZdd� Z d dd�Z d!d d �Z d d � Z dd� Z dd� Zdd� Zdd� Zdd� Zdd� Zd!dd�Zd d � Zd d � ZdS )"z/ Module for Solaris' Role-Based Access Control � NZrbacc C s, t d dkrtjj�d�rtS dt� d�fS )zB Provides rbac if we are running on a solaris like system Zkernel�SunOS�profilesFz3 module can only be loaded on a solaris like system)Z __grains__�salt�utils�path�which�__virtualname__� r r �M/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/rbac_solaris.py� __virtual__ s �r Fc s i }dg� t jj�dd��-}|D ]"}t jj�|�}|�d�}|d �� dkr2� �|d �� �d�� qW d � n1 s=w Y t jj�d d��(}|D ] }t jj�|�}|�d �}t |�d krbqM|d ||d < qMW d � n1 suw Y | r�� fdd�|D �D ]}||= q�|S )z� List all available profiles default_only : boolean return only default profile CLI Example: .. code-block:: bash salt '*' rbac.profile_list ZAllz/etc/security/policy.conf�r�=r Z PROFS_GRANTED� �,Nz/etc/security/prof_attr�:� � c � g | ]}|� vr|�qS r r ��.0�p�Zdefault_profilesr r � <listcomp>C � z profile_list.<locals>.<listcomp>) r r �files�fopen� stringutils� to_unicode�split�strip�extend�len)� default_onlyr Z policy_conf�policyZ prof_attr�profiler r r r � profile_list s0 �� � � � r% Tc C s g }t jj�dd��]}|D ]R}t jj�|�}|�� �d�}t|�dkr$q |d | kr+q i }|d �� �d�D ] }|�� �d�\}}|d v rO|�� �d �||< q6|||< q6d |v r_|� |d � q W d � n1 sjw Y |r�t d d�D ] }||v r�|� |� qvt t |��S )a List profiles for user user : string username default_hidden : boolean hide default profiles CLI Example: .. code-block:: bash salt '*' rbac.profile_get leo salt '*' rbac.profile_get leo default_hidden=False �/etc/user_attrr r r r � �;r ��authsr �rolesr r NT)r" )r r r r r r r r r! r r% �remove�list�set) �userZdefault_hiddenZ user_profiles� user_attrr$ �attrs�attr�attr_key�attr_valr r r � profile_getI s4 �� � � r5 c s� i }|� d�}t� �� � � fdd�|D �}t�d|� |� |rNtd dj| d�tt | �| ��d��}|d d krN|d d |v rD|d n|d d �|d < |S t | d�}|D ]}||vr`d||< qU||v rid||< qUd||< qU|S )a$ Add profile to user user : string username profile : string profile name CLI Example: .. code-block:: bash salt '*' rbac.profile_add martine 'Primary Administrator' salt '*' rbac.profile_add martine 'User Management,User Security' r c � g | ]}|� v r|�qS r r r ��known_profilesr r r � r z profile_add.<locals>.<listcomp>zDrbac.profile_add - profiles=%s, known_profiles=%s, valid_profiles=%s� cmd.run_all� usermod -P "{profiles}" {login}��loginr �retcoder �stderr�stdout�r= �message�ErrorF�Unknown�Added�Failed) r r% �keys�log�debug�__salt__�format�joinr. r5 )r/ r$ �retr �valid_profiles�res�active_profilesr r r7 r � profile_add} s< ��� � rP c s� i }|� d�}t� �� � � fdd�|D ��t�d|� �� �rQtd dj| d��fdd�t| �D ��d��}|d d krQ|d d |v rG|d n|d d �|d< |S t| d�}|D ]}|�vrcd||< qX||v rld||< qXd||< qX|S )a# Remove profile from user user : string username profile : string profile name CLI Example: .. code-block:: bash salt '*' rbac.profile_rm jorge 'Primary Administrator' salt '*' rbac.profile_rm jorge 'User Management,User Security' r c r6 r r r r7 r r r � r z profile_rm.<locals>.<listcomp>zCrbac.profile_rm - profiles=%s, known_profiles=%s, valid_profiles=%sr9 r: c r r r r )rM r r r � r r; r= r r> r? r@ rB FrC rE �Remove) r r% rF rG rH rI rJ rK r5 )r/ r$ rL r rN rO r r )r8 rM r � profile_rm� s@ ���� � rR c C s� i } t jj�dd��c}|D ]W}t jj�|�}|�d�}t|�dkr"q i }|d �d�D ]}|�d�\}}|dv r@|�d �||< q+|||< q+||d< d |d v rd|d d d krd|d d = |d | |d < q W d � | S 1 spw Y | S )zo List all available roles CLI Example: .. code-block:: bash salt '*' rbac.role_list r& r r r r' r( r r) r �type�roler N�r r r r r r r r! )r+ r0 rT r1 r2 r3 r4 r r r � role_list� s. �� ��rV c C s� g }t jj�dd��_}|D ]T}t jj�|�}|�� �� �d�}t|�dkr&q |d | kr-q i }|d �� �d�D ] }|�� �d�\}}|d v rQ|�� �d �||< q8|||< q8d |v ra|� |d � q W d � n1 slw Y t t |��S ) z� List roles for user user : string username CLI Example: .. code-block:: bash salt '*' rbac.role_get leo r& r r r r r' r( r r) r r+ N) r r r r r r r r r! r r- r. )r/ Z user_rolesr0 rT r1 r2 r3 r4 r r r �role_get s* �� � rW c s� i }|� d�}t� �� � � fdd�|D �}t�d|� |� |rNtd dj| d�tt | �| ��d��}|d d krN|d d |v rD|d n|d d �|d < |S t | �}|D ]}||vr_d||< qT||v rhd||< qTd||< qT|S )z� Add role to user user : string username role : string role name CLI Example: .. code-block:: bash salt '*' rbac.role_add martine netcfg salt '*' rbac.role_add martine netcfg,zfssnap r c r6 r r �r r �� known_rolesr r r Y r z role_add.<locals>.<listcomp>z8rbac.role_add - roles=%s, known_roles=%s, valid_roles=%sr9 � usermod -R "{roles}" {login}�r< r+ r= r r> r? r@ rB rC rD rE ) r rV rF rG rH rI rJ rK r. rW )r/ rT rL r+ � valid_rolesrN � active_rolesr r rY r �role_addD s< ��� � r_ c s� i }|� d�}t� �� � � fdd�|D ��t�d|� �� �rQtd dj| d��fdd�t| �D ��d��}|d d krQ|d d |v rG|d n|d d �|d< |S t| �}|D ]}|�vrbd||< qW||v rkd||< qWd||< qW|S )z� Remove role from user user : string username role : string role name CLI Example: .. code-block:: bash salt '*' rbac.role_rm jorge netcfg salt '*' rbac.role_rm jorge netcfg,zfssnap r c r6 r r rX rY r r r � r zrole_rm.<locals>.<listcomp>z7rbac.role_rm - roles=%s, known_roles=%s, valid_roles=%sr9 r[ c r r r rX )r] r r r � r r\ r= r r> r? r@ rB rC rE rQ ) r rV rF rG rH rI rJ rK rW )r/ rT rL r+ rN r^ r r )rZ r] r �role_rm} s< ��� � r` c C s� i } t jj�dd��<}|D ]0}t jj�|�}|�d�}t|�dkr"q |d dd� dkr5|d � d �|d< |d | |d < q W d � | S 1 sIw Y | S ) zw List all available authorization CLI Example: .. code-block:: bash salt '*' rbac.auth_list z/etc/security/auth_attrr r � r ���N�.�*r rU )r* Z auth_attr�authr r r � auth_list� s � ��rf c C sJ g }t jj�dd��]}|D ]R}t jj�|�}|�� �d�}t|�dkr$q |d | kr+q i }|d �� �d�D ] }|�� �d�\}}|d v rO|�� �d �||< q6|||< q6d |v r_|� |d � q W d � n1 sjw Y |r�t d d| � ��} | d dkr�| d � � D ]}d |v r�|� |�� �d �� q�|� |�� � q�t t|��S )z� List authorization for user user : string username computed : boolean merge results from `auths` command into data from user_attr CLI Example: .. code-block:: bash salt '*' rbac.auth_get leo r& r r r r r' r( r r) r r* Nr9 zauths r= r? )r r r r r r r r r! r rI � splitlines�appendr- r. ) r/ ZcomputedZ user_authsr0 re r1 r2 r3 r4 rN r r r �auth_get� s8 �� � ri c s� i }|� d�}t� �� � � fdd�|D �}t�d|� |� |rOtd dj| d�tt | d�| ��d��}|d d krO|d d |v rE|d n|d d �|d< |S t | d�}|D ]}||vrad||< qV||v rjd||< qVd||< qV|S )a* Add authorization to user user : string username auth : string authorization name CLI Example: .. code-block:: bash salt '*' rbac.auth_add martine solaris.zone.manage salt '*' rbac.auth_add martine solaris.zone.manage,solaris.mail.mailq r c r6 r r rX �� known_authsr r r r z auth_add.<locals>.<listcomp>z8rbac.auth_add - auths=%s, known_auths=%s, valid_auths=%sr9 � usermod -A "{auths}" {login}F�r< r* r= r r> r? r@ rB rC rD rE ) r rf rF rG rH rI rJ rK r. ri )r/ re rL r* � valid_authsrN � active_auths�ar rj r �auth_add s< ��� � rq c s� i }|� d�}t� �� � � fdd�|D ��t�d|� �� �rRtd dj| d��fdd�t| d�D ��d ��}|d d krR|d d |v rH|d n|d d�|d< |S t| d�}|D ]}|�vrdd||< qY||v rmd||< qYd||< qY|S )a) Remove authorization from user user : string username auth : string authorization name CLI Example: .. code-block:: bash salt '*' rbac.auth_rm jorge solaris.zone.manage salt '*' rbac.auth_rm jorge solaris.zone.manage,solaris.mail.mailq r c r6 r r �r rp rj r r r Y r zauth_rm.<locals>.<listcomp>z7rbac.auth_rm - auths=%s, known_auths=%s, valid_auths=%sr9 rl c r r r rr )rn r r r g r Frm r= r r> r? r@ rB rC rE rQ ) r rf rF rG rH rI rJ rK ri )r/ re rL r* rN ro rp r )rk rn r �auth_rmD s@ ���� � rs )F)T)�__doc__�loggingZsalt.utils.filesr Zsalt.utils.path� getLogger�__name__rG r r r% r5 rP rR rV rW r_ r` rf ri rq rs r r r r �<module> s& -49;(+99 7 9
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings