Mini Shell
3
C��eZd � @ s2 d dl Z d dlmZ d dlmZ d dlmZmZ d dlmZ d dl m
Z
e
e �Z dd� Z
G d d
� d
e�Ze� ZG d d � d e�ZG d
d� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd � d e�ZG d d � d e�ZG d d � d e�ZG d!d"� d"e�Z dS )#� N)�Signal)�_)� constants�regexes)�users)�get_module_loggerc C s | j jj|�}|s | j j� }|S )z�Get a policy corresponding to the name or default policy.
If no policy is found for the name the default policy is returned.
)ZanacondaZpwpolicy�
get_policyZ PwPolicyData)Zkickstart_dataZ policy_name�policy� r
�&/usr/lib64/python3.6/input_checking.pyr s
r c @ s e Zd ZdZdd� Zdd� ZdS )�PwqualitySettingsCachea1 Cache for libpwquality settings used for password validation.
Libpwquality settings instantiation is probably not exactly cheap
and we might need the settings for checking every password (even when
it is being typed by the user) so it makes sense to cache the objects
for reuse. As there might be multiple active policies for different
passwords we need to be able to cache multiple policies based on
minimum password length, as we don't input anything else to libpwquality
than minimum password length and the password itself.
c C s
i | _ d S )N)�
_pwq_settings)�selfr
r
r �__init__6 s z PwqualitySettingsCache.__init__c C s8 | j j|�}|d kr4tj� }|j� ||_|| j |< |S )N)r
�get� pwqualityZ PWQSettingsZ read_config�minlen)r r Zsettingsr
r
r �get_settings_by_minlen9 s
z-PwqualitySettingsCache.get_settings_by_minlenN)�__name__�
__module__� __qualname__�__doc__r r r
r
r
r r + s
r c @ s� e Zd ZdZdd� Zedd� �Zejdd� �Zedd� �Zejd d� �Zed
d � �Z e jd d � �Z ed
d� �Z
edd� �Z e jdd� �Z edd� �Z e jdd� �Z edd� �Z
e
jdd� �Z
dS )�PasswordCheckRequestz�A wrapper for a password check request.
This in general means the password to be checked as well as its validation criteria
such as minimum length, if it can be empty, etc.
c C s2 d| _ d| _d | _d | _d| _d| _tjj| _ d S )N� �root)
� _password�_password_confirmation�_policy�_pwquality_settings� _username� _fullnamer �
SecretType�PASSWORD� _secret_type)r r
r
r r M s z PasswordCheckRequest.__init__c C s | j S )zlPassword string to be checked.
:returns: password string for the check
:rtype: str
)r )r r
r
r �passwordV s z PasswordCheckRequest.passwordc C s
|| _ d S )N)r )r Z new_passwordr
r
r r$ _ s c C s | j S )zxContent of the password confirmation field.
:returns: password confirmation string
:rtype: str
)r )r r
r
r �password_confirmationc s z*PasswordCheckRequest.password_confirmationc C s
|| _ d S )N)r )r Znew_password_confirmationr
r
r r% l s c C s | j S )zLPassword quality policy.
:returns: password quality policy
)r )r r
r
r r p s zPasswordCheckRequest.policyc C s
|| _ d S )N)r )r Z
new_policyr
r
r r x s c C s | j stj| jj�| _ | j S )z�Settings for libpwquality (if any).
:returns: libpwquality settings
:rtype: pwquality settings object or None
)r �pwquality_settings_cacher r r )r r
r
r �pwquality_settings| s z'PasswordCheckRequest.pwquality_settingsc C s | j S )a The username for which the password is being set.
If no username is provided, "root" will be used.
Use username=None to disable the username check.
:returns: username corresponding to the password
:rtype: str or None
)r )r r
r
r �username� s
z PasswordCheckRequest.usernamec C s
|| _ d S )N)r )r � new_usernamer
r
r r( � s c C s | j S )z�The full name of the user for which the password is being set.
If no full name is provided, "root" will be used.
:returns: full user name corresponding to the password
:rtype: str or None
)r )r r
r
r �fullname� s z PasswordCheckRequest.fullnamec C s
|| _ d S )N)r )r � new_fullnamer
r
r r* � s c C s | j S )z�Type of secret that is being checked.
At the moment is either a password or a passphrase and this property decides how it will be
called in error and status messages.
:returns: secret type
:rtype: Enum
)r# )r r
r
r � secret_type� s
z PasswordCheckRequest.secret_typec C s" |t jkrtdj|���|| _dS )zYSet type of secret being checked.
:param Enum new_type: new secret type
zUnknown secret type: {}N)r r! � RuntimeError�formatr# )r �new_typer
r
r r, � s
N)r r r r r �propertyr$ �setterr% r r' r( r* r, r
r
r
r r F s r c @ sL e Zd ZdZdd� Zedd� �Zejdd� �Zedd� �Zejd d� �Zd
S ) � CheckResultzResult of an input check.c C s d| _ d| _t� | _d S )NFr )�_success�_error_messager �error_message_changed)r r
r
r r � s zCheckResult.__init__c C s | j S )N)r3 )r r
r
r �success� s zCheckResult.successc C s
|| _ d S )N)r3 )r �valuer
r
r r6 � s c C s | j S )z�Optional error message describing why the input is not valid.
:returns: why the input is bad (provided it is bad) or None
:rtype: str or None
)r4 )r r
r
r �
error_message� s zCheckResult.error_messagec C s || _ | jj|� d S )N)r4 r5 �emit)r Znew_error_messager
r
r r8 � s N) r r r r r r0 r6 r1 r8 r
r
r
r r2 � s r2 c s� e Zd ZdZ� fdd�Zedd� �Zejdd� �Zedd� �Zejd d� �Zed
d � �Z e jd d � �Z ed
d� �Z
e
jdd� �Z
� Z S )�PasswordValidityCheckResultz+A wrapper for results for a password check.c sF t � j� d| _t� | _d| _t� | _d| _t� | _d| _ t� | _
d S )Nr r F) �superr �_password_scorer �password_score_changed� _status_text�status_text_changed�_password_quality�password_quality_changed�
_length_ok�length_ok_changed)r )� __class__r
r r � s
z$PasswordValidityCheckResult.__init__c C s | j S )z�A high-level integer score indicating password quality.
Goes from 0 (invalid password) to 4 (valid & very strong password).
Mainly used to drive the password quality indicator in the GUI.
)r< )r r
r
r �password_score� s z*PasswordValidityCheckResult.password_scorec C s || _ | jj|� d S )N)r< r= r9 )r Z new_scorer
r
r rE � s c C s | j S )z�A short overall status message describing the password.
Generally something like "Good.", "Too short.", "Empty.", etc.
:rtype: short status message
:rtype: str
)r> )r r
r
r � status_text� s z'PasswordValidityCheckResult.status_textc C s || _ | jj|� d S )N)r> r? r9 )r Znew_status_textr
r
r rF s c C s | j S )ai More fine grained integer indicator describing password strength.
This basically exports the quality score assigned by libpwquality to the password,
which goes from 0 (unacceptable password) to 100 (strong password).
Note of caution though about using the password quality value - it is intended
mainly for on-line password strength hints, not for long-term stability,
even just because password dictionary updates and other peculiarities of password
strength judging.
:returns: password quality value as reported by libpwquality
:rtype: int
)r@ )r r
r
r �password_quality s z,PasswordValidityCheckResult.password_qualityc C s || _ | jj|� d S )N)r@ rA r9 )r r7 r
r
r rG s c C s | j S )zwReports if the password is long enough.
:returns: if the password is long enough
:rtype: bool
)rB )r r
r
r � length_ok! s z%PasswordValidityCheckResult.length_okc C s || _ | jj|� d S )N)rB rC r9 )r r7 r
r
r rH * s ) r r r r r r0 rE r1 rF rG rH �
__classcell__r
r
)rD r r: � s r: c @ sF e Zd ZdZdd� Zedd� �Zedd� �Zejdd� �Zd d
� Z d S ) �
InputCheckzInput checking base class.c C s t � | _d| _d S )NF)r2 �_result�_skip)r r
r
r r 3 s zInputCheck.__init__c C s | j S )N)rK )r r
r
r �result7 s zInputCheck.resultc C s | j S )z/A flag hinting if this check should be skipped.)rL )r r
r
r �skip; s zInputCheck.skipc C s |rd| j _d| j _|| _d S )Nr T)rM r8 r6 rL )r r7 r
r
r rN @ s c C s t �dS )z�Run the check.
:param check_request: arbitrary input data to be processed
Subclasses need to always implement this.
N)�NotImplementedError)r �
check_requestr
r
r �runK s zInputCheck.runN)
r r r r r r0 rM rN r1 rQ r
r
r
r rJ 0 s rJ c s( e Zd ZdZ� fdd�Zdd� Z� ZS )�PasswordValidityCheckz-Check the validity and quality of a password.c s t � j� t� | _d S )N)r; r r: rK )r )rD r
r r X s
z PasswordValidityCheck.__init__c C sz d}d}d}y|j j|jd|j�}W n. tjk
rR } z|jd }W Y dd}~X nX |jjrxt |j�|jj
kpt|j }nt |j�|jj
k}|js�|jjr�d}nd}t t j
jj�}n�|s�d}t t j
jj�}t t j|j �}nf|r�d}t t j
jj�}nN|dk �rd}t t j
jj�}n0|dk �r.d }t t j
jj�}nd
}t t j
jj�}| }|| j_|| j_|| j_|| j_|| j_ || j_ dS ) a� Check the validity and quality of a password.
This is how password quality checking works:
- starts with a password and an optional parameters
- will report if this password can be used at all (score >0)
- will report how strong the password approximately is on a scale of 1-100
- if the password is unusable it will be reported why
This function uses libpwquality to check the password strength.
Pwquality will raise a PWQError on a weak password but this function does
not pass that forward.
If the password fails the PWQSettings conditions, the score will be set to 0
and the resulting error message will contain the reason why the password is bad.
:param check_request: a password check request wrapper
:type check_request: a PasswordCheckRequest instance
:returns: a password check result wrapper
:rtype: a PasswordCheckResult instance
Fr r N� � � �F � � ) r' �checkr$ r( r ZPWQError�argsr Zemptyok�lenr r r Z SecretStatusZEMPTYr7 Z TOO_SHORTZSECRET_TOO_SHORTr, ZWEAKZFAIRZGOODZSTRONGrM r6 rE rF rG r8 rH ) r rP rH r8 Z
pw_quality�eZpw_scorerF r6 r
r
r rQ \ sJ
zPasswordValidityCheck.run)r r r r r rQ rI r
r
)rD r rR U s rR c sB e Zd ZdZ� fdd�Zedd� �Zejdd� �Zdd� Z� Z S ) �PasswordConfirmationCheckz4Check if the password & password confirmation match.c s t � j� d| _d S )NF)r; r � _success_if_confirmation_empty)r )rD r
r r � s
z"PasswordConfirmationCheck.__init__c C s | j S )a� Enables success-if-confirmation-empty mode.
This property can be used to tell the check to report success if the confirmation filed is empty,
which is a paradigm used by Anaconda uses for two things:
- to make it possible for users to exit without setting a valid password
- to make it possible to exit the spoke if only the password is set
but confirmation is empty
)r^ )r r
r
r � success_if_confirmation_empty� s
z7PasswordConfirmationCheck.success_if_confirmation_emptyc C s
|| _ d S )N)r^ )r r7 r
r
r r_ � s c C s^ | j r |j r d| j_d| j_n:|j|jkrJttj|j �| j_d| j_nd| j_d| j_dS )zQIf the user has entered confirmation data, check whether it matches the password.r TFN)
r_ r% rM r8 r6 r$ r r ZSECRET_CONFIRM_ERROR_GUIr, )r rP r
r
r rQ � s
z PasswordConfirmationCheck.run)
r r r r r r0 r_ r1 rQ rI r
r
)rD r r] � s
r] c @ s e Zd ZdZdd� ZdS )�PasswordASCIICheckz�Check if the password contains non-ASCII characters.
Non-ASCII characters might be hard to type in the console and in the LUKS volume unlocking
screen, so check if the password contains them so we can warn the user.
c C sP t dd� |jD ��}|jr<|r<ttj|j �| j_d| j_nd| j_d| j_dS )z3Fail if the password contains non-ASCII characters.c s s | ]}|t jkV qd S )N)r ZPW_ASCII_CHARS)�.0�charr
r
r � <genexpr>� s z)PasswordASCIICheck.run.<locals>.<genexpr>Fr TN) �anyr$ r r Z SECRET_ASCIIr, rM r8 r6 )r rP Z
has_non_ASCIIr
r
r rQ � s
zPasswordASCIICheck.runN)r r r r rQ r
r
r
r r` � s r` c @ s e Zd ZdZdd� ZdS )�PasswordEmptyCheckz Check if the password is set.c C s8 |j rd| j_d| j_n ttj|j �| j_d| j_dS )z3Check whether a password has been specified at all.r TFN)r$ rM r8 r6 r r ZSECRET_EMPTY_ERRORr, )r rP r
r
r rQ � s
zPasswordEmptyCheck.runN)r r r r rQ r
r
r
r re � s re c sB e Zd ZdZ� fdd�Zedd� �Zejdd� �Zdd� Z� Z S ) �
UsernameCheckz Check if the username is valid.c s t � j� d| _d S )NF)r; r �_success_if_username_empty)r )rD r
r r � s
zUsernameCheck.__init__c C s | j S )z/Should empty username be considered a success ?)rg )r r
r
r �success_if_username_empty� s z'UsernameCheck.success_if_username_emptyc C s
|| _ d S )N)rg )r r7 r
r
r rh � s c C sD | j r |j r d| j_d| j_n tj|j�\}}|| j_|| j_dS )z Check if the username is valid.r TN)rh r( rM r8 r6 r Zcheck_username)r rP r6 r8 r
r
r rQ s
zUsernameCheck.run)
r r r r r r0 rh r1 rQ rI r
r
)rD r rf � s
rf c @ s e Zd ZdZdd� ZdS )�
FullnameCheckzjCheck if the full user name is valid.
Most importantly the full user name cannot contain colons.
c C s8 t jj|j�r d| j_d| j_ntd�| j_d| j_dS )z%Check if the full user name is valid.r Tz)Full name cannot contain colon charactersFN)r Z GECOS_VALID�matchr* rM r8 r6 r )r rP r
r
r rQ s
zFullnameCheck.runN)r r r r rQ r
r
r
r ri s ri c @ s2 e Zd ZdZdd� Zedd� �Zejdd� �ZdS )�
InputFieldz�An input field containing data to be checked.
The input field can have an initial value that can be
monitored for change via signals.
c C s& || _ || _t� | _d| _t� | _d S )NF)�_initial_content�_contentr �changed� _initial_change_signal_fired�changed_from_initial_state)r Zinitial_contentr
r
r r & s
zInputField.__init__c C s | j S )N)rm )r r
r
r �content- s zInputField.contentc C sD | j }|| _ ||kr@| jj� | j r@|| jkr@| jj� d| _d S )NT)rm rn r9 ro rl rp )r Z new_contentZ old_contentr
r
r rq 1 s
N)r r r r r r0 rq r1 r
r
r
r rk s rk c @ s� e Zd ZdZdd� Zedd� �Zedd� �Zedd � �Zed
d � �Z ed d
� �Z
edd� �Z edd� �Z edd� �Z
edd� �Zejdd� �Zedd� �Zejdd� �Zedd� �Zejd d� �Zd d � Zd d � Zd!S )"�PasswordCheckera� Run multiple password and input checks in a given order and report the results.
All added checks (in insertion order) will be run and results returned as error message
and success value (True/False). If any check fails success will be False and the
error message of the first check to fail will be returned.
It's also possible to mark individual checks to be skipped by setting their skip property to True.
Such check will be skipped during the checking run.
c C sz t |�| _t |�| _g | _d| _d| _g | _g | _|| _d | _ d| _
t j j
| _| jjj| j� | jjj| j� t� | _d S )NFr )rk r r �_checksr3 r4 �_failed_checks�_successful_checksr r r r r! r" r# r$ rn Zconnect�
run_checksr% r � checks_done)r Zinitial_password_contentZ%initial_password_confirmation_contentr r
r
r r I s
zPasswordChecker.__init__c C s | j S )zMain password field.)r )r r
r
r r$ ] s zPasswordChecker.passwordc C s | j S )z Password confirmation field.)r )r r
r
r r% b s z%PasswordChecker.password_confirmationc C s | j S )N)rs )r r
r
r �checksg s zPasswordChecker.checksc C s | j S )N)r3 )r r
r
r r6 k s zPasswordChecker.successc C s | j S )N)r4 )r r
r
r r8 o s z PasswordChecker.error_messagec C s | j S )z�List of successful checks during the last checking run.
If no checks have succeeded the list will be empty.
:returns: list of successful checks (if any)
:rtype: list
)ru )r r
r
r �successful_checkss s z!PasswordChecker.successful_checksc C s | j S )z�List of checks failed during the last checking run.
If no checks have failed the list will be empty.
:returns: list of failed checks (if any)
:rtype: list
)rt )r r
r
r �
failed_checks~ s z PasswordChecker.failed_checksc C s | j S )N)r )r r
r
r r � s zPasswordChecker.policyc C s | j S )N)r )r r
r
r r( � s zPasswordChecker.usernamec C s
|| _ d S )N)r )r r) r
r
r r( � s c C s | j S )z�The full name of the user for which the password is being set.
If no full name is provided, "root" will be used.
:returns: full user name corresponding to the password
:rtype: str or None
)r )r r
r
r r* � s zPasswordChecker.fullnamec C s
|| _ d S )N)r )r r+ r
r
r r* � s c C s | j S )z�Type of secret that is being checked.
At the moment is either a password or a passphrase and this property decides how it will be
called in error and status messages.
:returns: secret type
:rtype: Enum
)r# )r r
r
r r, � s
zPasswordChecker.secret_typec C s" |t jkrtdj|���|| _dS )zYSet type of secret being checked.
:param Enum new_type: new secret type
zUnknown secret type: {}N)r r! r- r. r# )r r/ r
r
r r, � s
c C s | j j|� dS )z%Add check instance to list of checks.N)rs �append)r Zcheck_instancer
r
r � add_check� s zPasswordChecker.add_checkc C s� t � }| jj|_| jj|_| j|_| j|_| j|_| j|_g | _d}xN| j D ]D}|j
sL|j |� |j j
rv| jj|� qL| js�|j j}| jj|� qLW | jr�|| _d| _n d| _d| _| jj| j� d S )Nr FT)r r$ rq r% r r( r* r, rt rx rN rQ rM r6 ru r{ rz r8 r4 r3 rw r9 )r rP r8 rY r
r
r rv � s.
zPasswordChecker.run_checksN)r r r r r r0 r$ r% rx r6 r8 ry rz r r( r1 r* r, r| rv r
r
r
r rr > s$
rr ) r Zpyanaconda.core.signalr Zpyanaconda.core.i18nr Zpyanaconda.corer r r Zpyanaconda.anaconda_loggersr r �logr �objectr r& r r2 r: rJ rR r] r` re rf ri rk rr r
r
r
r �<module> s* z Q%X$