[nanny] Initial Win32SessionFiltering

[Roberto Majadas <telemaco src gnome org>]

commit d7c7fbe8675ea4e09bb0cedcf5918d910f8ded23
Author: Roberto Majadas <roberto majadas openshine com>
Date:   Tue Sep 14 20:05:43 2010 +0200

    Initial Win32SessionFiltering

 daemon/src/Makefile.am              |    3 +-
 daemon/src/QuarterBack.py           |    1 +
 daemon/src/Win32SessionFiltering.py |  211 +++++++++++++++++++++++++++++++++++
 3 files changed, 214 insertions(+), 1 deletions(-)
---
diff --git a/daemon/src/Makefile.am b/daemon/src/Makefile.am
index 400ebb4..677c058 100644
--- a/daemon/src/Makefile.am
+++ b/daemon/src/Makefile.am
@@ -15,7 +15,8 @@ corelib_PYTHON =	 __init__.py 			\
 			LinuxSessionCKFiltering.py	\
 			Win32Filtering			\
 			Win32WebContentFiltering.py	\
-			Win32UsersManager.py		
+			Win32UsersManager.py		\
+			Win32SessionFiltering.py		
 
 if HAS_HACHOIR_REGEX
 dgimporterdir = $(pythondir)/nanny/daemon
diff --git a/daemon/src/QuarterBack.py b/daemon/src/QuarterBack.py
index 9711b8e..fb38bf3 100644
--- a/daemon/src/QuarterBack.py
+++ b/daemon/src/QuarterBack.py
@@ -40,6 +40,7 @@ elif os.name == "nt" :
     from Win32Filtering import Win32Filtering as FirewallFilter
     from Win32WebContentFiltering import Win32WebContentFiltering as WebContentFilter
     from Win32UsersManager import Win32UsersManager as UsersManager
+    from Win32SessionFiltering import Win32SessionFiltering as SessionFilter
 
 from Chrono import Chrono
 
diff --git a/daemon/src/Win32SessionFiltering.py b/daemon/src/Win32SessionFiltering.py
new file mode 100644
index 0000000..3bdfecf
--- /dev/null
+++ b/daemon/src/Win32SessionFiltering.py
@@ -0,0 +1,211 @@
+#!/usr/bin/env python
+#
+# Copyright (C) 2009,2010 Junta de Andalucia
+# 
+# Authors:
+#   Roberto Majadas <roberto.majadas at openshine.com>
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2, or (at your option)
+# any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301
+# USA
+
+import gobject
+import os
+
+from twisted.internet import reactor, threads
+from time import localtime, strftime
+
+
+class Win32SessionFiltering(gobject.GObject) :
+    def __init__(self, quarterback) :
+        gobject.GObject.__init__(self)
+        self.quarterback = quarterback
+
+        self.uids_blocked = []
+        self.desktop_blocked = []
+        
+        reactor.addSystemEventTrigger("before", "startup", self.start)
+        reactor.addSystemEventTrigger("before", "shutdown", self.stop)
+        
+        self.quarterback.connect('block-status', self.__update_cb)
+        self.quarterback.connect("update-blocks", self.__update_blocks_cb)
+
+    def start(self):
+#         if not os.path.exists("/var/lib/nanny/desktop_blocks_pids") :
+#             os.system("mkdir -p /var/lib/nanny/desktop_blocks_pids")
+        
+#         self.__update_blocks_cb(self.quarterback, self.quarterback.blocks)
+        print "Start Linux Session ConsoleKit Filtering"
+
+    def stop(self):
+        print "Stop Linux Session ConsoleKit Filtering"
+
+    def __update_blocks_cb(self, quarterback, blocks):
+#         for user_id in blocks.keys() :
+#             if not blocks[user_id].has_key(0) :
+#                 continue
+
+#             block_status, next_change = quarterback.is_blocked(user_id, 0)
+#             if quarterback.get_available_time(user_id, 0) == 0 or block_status == True:
+#                 if user_id in self.uids_blocked :
+#                     return
+
+#                 users = quarterback.usersmanager.get_users()
+#                 for uid, uname, ufname in users :
+#                     if str(uid) == user_id :
+#                         self.uids_blocked.append(user_id)
+#                         print "blocked session to user '%s'" % uname
+#                         return
+#             else:
+#                 if user_id in self.uids_blocked:
+#                     users = quarterback.usersmanager.get_users()
+#                     for uid, uname, ufname in users :
+#                         if str(uid) == user_id :
+#                             self.uids_blocked.pop(self.uids_blocked.index(user_id))
+#                             self.__kill_desktop_blockers(user_id)
+#                             print "Unblocked session to user '%s'" % uname
+
+
+    def __update_cb(self, quarterback, block_status, user_id, app_id, next_change, available_time):
+#         if app_id != 0 :
+#             return
+
+#         if block_status == True or available_time == 0 :
+#             if user_id in self.uids_blocked :
+#                 self.__logout_session_if_is_running(user_id)
+        
+#         if available_time == 0 :
+#             if user_id in self.uids_blocked :
+#                 return
+
+#             users = quarterback.usersmanager.get_users()
+#             for uid, uname, ufname in users :
+#                 if str(uid) == user_id :
+#                     self.uids_blocked.append(user_id)
+#                     self.__logout_session_if_is_running(user_id)
+#                     print "blocked session to user '%s'" % uname
+#                     return
+        
+#         if block_status == False:
+#             if user_id in self.uids_blocked:
+#                 users = quarterback.usersmanager.get_users()
+#                 for uid, uname, ufname in users :
+#                     if str(uid) == user_id :
+#                         self.uids_blocked.pop(self.uids_blocked.index(user_id))
+#                         self.__kill_desktop_blockers(user_id)
+#                         print "Unblocked session to user '%s'" % uname
+#             return
+#         else:
+#             if user_id in self.uids_blocked :
+#                 return
+            
+#             users = quarterback.usersmanager.get_users()
+#             for uid, uname, ufname in users :
+#                 if str(uid) == user_id :
+#                     self.uids_blocked.append(user_id)
+#                     self.__logout_session_if_is_running(user_id)
+#                     print "blocked session to user '%s'" % uname
+
+#             return
+
+    def __kill_desktop_blockers(self, user_id):
+        import glob
+        
+        for pid_file in glob.glob("/var/lib/nanny/desktop_blocks_pids/%s.*" % user_id):
+            try:
+                p = open(pid_file, "r")
+                pid = p.read()
+                os.kill(int(pid), 15)
+                print "Send SIGTERM to nanny-desktop-blocker (%s, %s)" % (pid, user_id)
+            except:
+                print "Something wrong killing desktop blocker (%s, %s)" % (pid, user_id)
+            
+        
+    def __logout_session_if_is_running(self, user_id):
+        try:
+            d = dbus.SystemBus()
+            manager = dbus.Interface(d.get_object("org.freedesktop.ConsoleKit", "/org/freedesktop/ConsoleKit/Manager"), 
+                                     "org.freedesktop.ConsoleKit.Manager")
+            sessions = manager.GetSessionsForUnixUser(int(user_id))
+            for session_name in sessions :
+                session = dbus.Interface(d.get_object("org.freedesktop.ConsoleKit", session_name),
+                                         "org.freedesktop.ConsoleKit.Session")
+                x11_display = session.GetX11Display()
+                if x11_display == "":
+                    continue
+
+                if session_name not in self.desktop_blocked :
+                    self.desktop_blocked.append(session_name)
+                    t = threads.deferToThread(self.__launch_desktop_blocker, session_name, user_id, x11_display)
+                    t.addCallback(self.__result_of_desktop_blocker)
+        except:
+            print "Crash __logout_session_if_is_running()"
+            
+    def __launch_desktop_blocker(self, session_name, user_id, x11_display):
+        print "Launch desktop-blocker to '%s'" % session_name
+        from os import environ 
+        env = environ.copy()
+        env["DISPLAY"] = x11_display
+
+        proclist = gtop.proclist(gtop.PROCLIST_KERN_PROC_UID, int(user_id))
+
+        if len(proclist) > 0 :
+            from subprocess import Popen, PIPE
+            lang_var = Popen('cat /proc/%s/environ | tr "\\000" "\\n" | grep ^LANG= ' % proclist[0] , shell=True, stdout=PIPE).stdout.readline().strip("\n")
+            if len(lang_var) > 0 :
+                env["LANG"] = lang_var.replace("LANG=","")
+
+            pid = Popen('nanny-desktop-blocker', env=env).pid
+        else:
+            pid = Popen('nanny-desktop-blocker', env=env).pid
+        
+        pid_file = "/var/lib/nanny/desktop_blocks_pids/%s.%s" % (user_id, os.path.basename(session_name))
+        fd = open(pid_file, "w")
+        fd.write(str(pid))
+        fd.close()
+
+        pid, ret = os.waitpid(pid, 0)
+        
+        if os.path.exists(pid_file) :
+            os.unlink(pid_file)
+
+        return session_name, user_id, ret
+
+    def __result_of_desktop_blocker(self, result):
+        session_name = result[0]
+        user_id = result[1]
+        ret_code = result[2]
+        print "Results desktop-blocker to '%s' (%s)" % (session_name, ret_code)
+        if ret_code == 0:
+            self.__remote_close_session(user_id)
+
+        if session_name in self.desktop_blocked :
+            self.desktop_blocked.pop(self.desktop_blocked.index(session_name))
+    
+    def __remote_close_session(self, user_id):
+        proclist = gtop.proclist(gtop.PROCLIST_KERN_PROC_UID, int(user_id))
+        for proc in proclist:
+            if gtop.proc_args(proc)[0] == "x-session-manager" or gtop.proc_args(proc)[0] == "gnome-session":
+                users = self.quarterback.usersmanager.get_users()
+                for uid, uname, ufname in users :
+                    if str(uid) == user_id :
+                        print "Sending Force logout petition to '%s'" % uname
+                        cmd='su %s -c "`grep -z DBUS_SESSION_BUS_ADDRESS /proc/%s/environ | sed -e "s:\\r::g"` dbus-send --dest=\'org.gnome.SessionManager\' /org/gnome/SessionManager org.gnome.SessionManager.Logout uint32:1"' % (uname, proc)
+                        os.system(cmd)
+                        return
+        
+            
+    
+        
+