1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
|
module(..., package.seeall)
require("fs")
require("procps")
require("getopts")
require("format")
require("daemoncontrol")
require("validator")
local configfile = "/etc/shorewall/shorewall.conf"
local processname = "shorewall"
local baseurl = "/etc/shorewall/"
local config = {}
local function getloglevels()
local loglevels = {}
for i=1,8 do
table.insert(loglevels,i)
end
return loglevels
end
local function getdetails()
local f,error = io.popen("/sbin/shorewall status")
local fake = f:read("*l")
local fake = f:read("*l")
local programstatus = f:read("*l") or ""
local programstate = f:read("*l") or ""
f:close()
local f,error = io.popen("/sbin/shorewall version")
local programversion = "shorewall-" .. f:read("*l")
f:close()
return programversion,programstatus,programstate
end
local function read_config(file)
local path = baseurl .. file
if not (fs.is_file(path)) then
return {}
end
local filecontent = fs.read_file_as_array(path)
local output = {}
for k,v in pairs(filecontent) do
if not string.find ( v, "^[;#].*" ) then
table.insert(output, v)
end
end
return output
end
-- ################################################################################
-- PUBLIC FUNCTIONS
-- action should be a CFE
function startstop_service ( self, action )
local cmd = action.value
local cmdresult,cmdmessage,cmderror,cmdaction = daemoncontrol.daemoncontrol(processname, cmd)
action.descr=cmdmessage
action.errtxt=cmderror
-- Reporting back (true|false, the original acition)
return cmdresult,action
end
function getconfig()
local config = {}
config.params_list = cfe({
name = "params_list",
label="List of parameters",
type="select",
option=read_config("params"),
})
config.params_list.size=#config.params_list.option + 1
config.interfaces_list = cfe({
name = "interfaces_list",
label="List of interfaces",
type="select",
option=read_config("interfaces"),
})
config.interfaces_list.size=#config.interfaces_list.option + 1
config.zones_list = cfe({
name = "zones_list",
label="List of zones",
type="select",
option=read_config("zones"),
})
config.zones_list.size=#config.zones_list.option + 1
config.policies_list = cfe({
name = "policies_list",
label="List of policies",
type="select",
option=read_config("policy"),
})
config.policies_list.size=#config.policies_list.option + 1
config.rules_list = cfe({
name = "rules_list",
label="List of rules",
type="select",
option=read_config("rules"),
})
config.rules_list.size=#config.rules_list.option + 1
return config
end
function getstatus()
local status = {}
local programversion,programstatus,programstate = getdetails()
status.version = cfe({ name = "version",
label="Program version",
value=programversion,
})
status.status = cfe({ name="status",
label="Program status",
value=programstatus,
})
status.state = cfe({ name="state",
label="Program reports",
value=programstate,
})
return status
end
function configcheck ()
local check = {}
local f,err = io.popen("/bin/echo -n '>> Check starts at: ';/bin/date; /bin/echo; /etc/init.d/shorewall check; /bin/echo; /bin/echo -n '>> Check stops at: '; /bin/date;")
local checkresult = f:read("*a")
f:close()
check.checkresult = cfe({ name = "checkresult",
type="longtext",
label="Result of checking config",
value=checkresult,
})
return check
end
function get_defined_zones ()
local output = {}
for k,v in pairs(read_config("zones")) do
table.insert(output, string.match(v, "^%s*(%S*)"))
end
return output
end
function getlogfile ()
local logfile = {}
local cmdaction = "cat /var/log/messages | grep Shorewall"
local f, error = io.popen(cmdaction ,r)
local checkresult = f:read("*a")
f:close()
logfile.checkresult = cfe({ name = "checkresult",
type="longtext",
label="Result of logfiles",
value=checkresult,
})
logfile.filename = cfe({
name="filename",
label="File name",
value=cmdaction,
})
return logfile
end
function getfilelist ()
local filepath = baseurl
local listed_files = {}
local k,v
for name in posix.files(filepath) do
if not string.match(name, "^%.") and not string.match(name, "^Makefile") then
local filedetails = fs.stat(filepath .. name)
table.insert ( listed_files , cfe({name=name, value=filepath .. name, mtime=filedetails.mtime, size=filedetails.size,}) )
end
end
table.sort(listed_files, function (a,b) return (a.name < b.name) end )
return listed_files
end
function getfiledetails(self,search)
local file = {}
local path = nil
--Validate filename
local available_files = getfilelist()
for k,v in pairs(available_files) do
if ( tostring(available_files[k]["value"]) == tostring(search.value) ) then
path = tostring(search.value)
end
end
if not (path) or (path == "") then
file["filename"] = search
file["filename"]["label"] = "File name"
file["filename"]["errtxt"] = "Invalid path!"
return file
end
local filedetails = fs.stat(path)
file["filename"] = cfe({
name="filename",
label="File name",
value=path,
})
file["filesize"] = cfe({
name="filesize",
label="File size",
value=filedetails.size,
})
file["mtime"] = cfe({
name="mtime",
label="File name",
value=filedetails.mtime,
})
file["filecontent"] = cfe({
type="longtext",
name="filecontent",
label="File content",
value=fs.read_file(path),
})
return file
end
-- IMPORTANT! This function is a exception! It's not fed with CFE's
-- Parameter should be one of the ones defined in the variable 'variabletranslator'.
-- value should be whatever the new value should be.
function setconfigs(self,parameter,value)
-- Set variables
local variable = "SYSLOGD_OPTS"
local variabletranslator = ({
logfile = "-O",
loglevel = "-l",
smallerlogs = "-S",
maxsize = "-s",
numrotate = "-b",
localandnetworklog = "-L",
remotelogging = "-R",
})
cmdparameter = variabletranslator[parameter]
-- Report a error if someone tryes to use a invalid parameter
if not (cmdparameter) then
local availablevariables = ""
for k,v in pairs(variabletranslator) do
availablevariables = k .. ", " .. availablevariables
end
parameter = parameter or ""
return false, cfe({
name="syslog.model.setconfigs()",
errtxt="'" .. parameter .. "' is not a valid parameter!\nValid options are: " .. availablevariables,
})
end
--TODO: Validate so that user cant add values with '-' (could cause major breakage next time you do getopts)
-- This config-file only accepts one type of parameters (report error if someone uses wrong parameter)
if not (string.find(cmdparameter, "-%a$")) then
return false, cfe({
name="syslog.model.setconfigs()",
errtxt="Parameter must be formated '-a' (where a is one upper/lowercase letter [a-z])",
})
end
-- Validate userinput (if valid path/filename)
if (value) and (cmdparameter == "-O") then
local cmdresult, cmdmessage = validator.is_valid_filename(value, "/var/log" )
if not (cmdresult) then
return false, cfe({
name="syslog.model.setconfigs()",
errtxt=cmdmessage,
})
end
end
-- Validate userinput (Has the user entered a valid hostname and/or port)
if (value) and (cmdparameter == "-R") then
local hostport = format.string_to_table(value, ":")
local host = hostport[1]
local port = hostport[2]
if (port) and not (validator.is_port(port)) then
return false, cfe({
name="syslog.model.setconfigs.getopts.setoptsinfile()",
errtxt="You entered '" .. tostring(port) .. "' as port - This is not valid!",
})
end
end
-- Set/Unset checkbox variables
if (value) and ((cmdparameter == "-S") or (cmdparameter == "-L")) then value = "" end
local cmdresult, cmdmessage, cmderror = getopts.setoptsinfile(configfile,variable,cmdparameter,value)
if (cmderror) then
return false, cfe({
name="syslog.model.setconfigs.getopts.setoptsinfile()",
errtxt=cmderror,
})
end
return true, cfe({
name="syslog.model.setconfigs()",
value=cmdmessage,
})
end
-- modifications should be a CFE
function updatefilecontent (self, filetochange)
local path = nil
--Validate filename
local available_files = getfilelist()
for k,v in pairs(available_files) do
if ( tostring(available_files[k]["value"]) == tostring(filetochange.name) ) then
path = tostring(filetochange.name)
end
end
if not (path) then
filetochange.errtxt = "Invalid path!"
return filetochange
end
local file_result,err = fs.write_file(path, format.dostounix(filetochange.value))
return file_result, err
end
|