xen-project/xen
1
0 Fork 1
mirror of https://github.com/xen-project/xen.git synced 2026-10-28 10:11:27 +01:00
Code Issues Activity
Files
0d7d0c0cf2480bf6c1a8a997b9020e39b28b5ab2
xen/tools/security/python/xensec_gen/cgi-bin/policy.cgi
T
kaf24@firebug.cl.cam.ac.uk f0756c96a0 A new ACM security tool providing support to aid in the 
creation/generation of the XML security policy files for the Xen ACM
security architecture.  It is a python- based, web-based tool named
xensec_gen that allows users to create or modify XML policy files
through a browser.  The resulting XML policy files can then be copied
or moved to the appropriate location in the /etc/xen/acm-security
directory structure in order to be translated into binary and used
within the Xen system.

Signed-off-by: Tom Lendacky <toml@us.ibm.com>
2005-12-13 17:12:59 +01:00

1326 lines
34 KiB
Python
Raw Blame History

#!/usr/bin/python
#
# The Initial Developer of the Original Code is International
# Business Machines Corporation. Portions created by IBM
# Corporation are Copyright (C) 2005 International Business
# Machines Corporation. All Rights Reserved.
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License,
# or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
import os
import cgi
import cgitb; cgitb.enable( )
import time
import xml.dom.minidom
import xml.sax
import xml.sax.handler
from StringIO import StringIO
from sets import Set
def getSavedData( ):
global formData, policyXml, formVariables, formCSNames
global templateCSMTypes, templateCSMDel, templateCSMType, templateCSMAdd
global allCSMTypes
# Process the XML upload policy file
if formData.has_key( 'i_policy' ):
dataList = formData.getlist( 'i_policy' )
if len( dataList ) > 0:
policyXml = dataList[0]
# Process all the hidden input variables (if present)
for formVar in formVariables:
if formVar[2] == '':
continue
if formData.has_key( formVar[2] ):
dataList = formData.getlist( formVar[2] )
if len( dataList ) > 0:
if isinstance( formVar[1], list ):
exec 'formVar[1] = ' + dataList[0]
else:
formVar[1] = dataList[0]
# The form can contain any number of "Conflict Sets"
# so update the list of form variables to include
# each conflict set (hidden input variable)
for csName in formCSNames[1]:
newCS( csName )
if formData.has_key( allCSMTypes[csName][2] ):
dataList = formData.getlist( allCSMTypes[csName][2] )
if len( dataList ) > 0:
exec 'allCSMTypes[csName][1] = ' + dataList[0]
def getCurrentTime( ):
return time.strftime( '%Y-%m-%d %H:%M:%S', time.localtime( ) )
def getName( domNode ):
nameNodes = domNode.getElementsByTagName( 'Name' )
if len( nameNodes ) == 0:
formatXmlError( '"<Name>" tag is missing' )
return None
name = ''
for childNode in nameNodes[0].childNodes:
if childNode.nodeType == xml.dom.Node.TEXT_NODE:
name = name + childNode.data
return name
def getDate( domNode ):
dateNodes = domNode.getElementsByTagName( 'Date' )
if len( dateNodes ) == 0:
formatXmlError( '"<Date>" tag is missing' )
return None
date = ''
for childNode in dateNodes[0].childNodes:
if childNode.nodeType == xml.dom.Node.TEXT_NODE:
date = date + childNode.data
return date
def getSteTypes( domNode, missingIsError = 0 ):
steNodes = domNode.getElementsByTagName( 'SimpleTypeEnforcementTypes' )
if len( steNodes ) == 0:
if missingIsError == 1:
formatXmlError( '"<SimpleTypeEnforcementTypes>" tag is missing' )
return None
else:
return []
return getTypes( steNodes[0] )
def getChWTypes( domNode, missingIsError = 0 ):
chwNodes = domNode.getElementsByTagName( 'ChineseWallTypes' )
if len( chwNodes ) == 0:
if missingIsError == 1:
formatXmlError( '"<ChineseWallTypes>" tag is missing' )
return None
else:
return []
return getTypes( chwNodes[0] )
def getTypes( domNode ):
types = []
domNodes = domNode.getElementsByTagName( 'Type' )
if len( domNodes ) == 0:
formatXmlError( '"<Type>" tag is missing' )
return None
for domNode in domNodes:
typeText = ''
for childNode in domNode.childNodes:
if childNode.nodeType == xml.dom.Node.TEXT_NODE:
typeText = typeText + childNode.data
if typeText == '':
formatXmlError( 'No text associated with the "<Type>" tag' )
return None
types.append( typeText )
return types
def formatXmlError( msg, xml = '', lineNum = -1, colNum = -1 ):
global xmlMessages, xmlError
xmlError = 1
addMsg = cgi.escape( msg )
if lineNum != -1:
sio = StringIO( xml )
for xmlLine in sio:
lineNum = lineNum - 1
if lineNum == 0:
break;
addMsg += '<BR><PRE>' + cgi.escape( xmlLine.rstrip( ) )
if colNum != -1:
errLine = ''
for i in range( colNum ):
errLine = errLine + '-'
addMsg += '\n' + errLine + '^'
addMsg += '</PRE>'
xmlMessages.append( addMsg )
def formatXmlGenError( msg ):
global xmlMessages, xmlIncomplete
xmlIncomplete = 1
xmlMessages.append( cgi.escape( msg ) )
def parseXml( xmlInput ):
global xmlMessages, xmlError, xmlLine, xmlColumn
xmlParser = xml.sax.make_parser( )
try:
domDoc = xml.dom.minidom.parseString( xmlInput, xmlParser )
except xml.sax.SAXParseException, xmlErr:
msg = ''
msg = msg + 'XML parsing error occurred at line '
msg = msg + `xmlErr.getLineNumber( )`
msg = msg + ', column '
msg = msg + `xmlErr.getColumnNumber( )`
msg = msg + ': reason = "'
msg = msg + xmlErr.getMessage( )
msg = msg + '"'
formatXmlError( msg, xmlInput, xmlErr.getLineNumber( ), xmlErr.getColumnNumber( ) )
return None
except xml.sax.SAXException, xmlErr:
msg = ''
msg = msg + 'XML Parsing error: ' + `xmlErr`
formatXmlError( msg, xmlInput, xmlErr.getLineNumber( ), xmlErr.getColumnNumber( ) )
return None
return domDoc
def parsePolicyXml( ):
global policyXml
global formPolicyName, formPolicyDate, formPolicyOrder
global formSteTypes, formChWallTypes
global allCSMTypes
domDoc = parseXml( policyXml )
if domDoc == None:
return
domRoot = domDoc.documentElement
domHeaders = domRoot.getElementsByTagName( 'PolicyHeader' )
if len( domHeaders ) == 0:
msg = ''
msg = msg + '"<PolicyHeader>" tag is missing.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
pName = getName( domHeaders[0] )
if pName == None:
msg = ''
msg = msg + 'Error processing the Policy header information.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
formPolicyName[1] = pName
pDate = getDate( domHeaders[0] )
if pDate == None:
msg = ''
msg = msg + 'Error processing the Policy header information.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
formPolicyDate[1] = pDate
pOrder = ''
domStes = domRoot.getElementsByTagName( 'SimpleTypeEnforcement' )
if len( domStes ) > 0:
if domStes[0].hasAttribute( 'priority' ):
if domStes[0].getAttribute( 'priority' ) != 'PrimaryPolicyComponent':
msg = ''
msg = msg + 'Error processing the "<SimpleTypeEnforcement>" tag.\n'
msg = msg + 'The "priority" attribute value is not valid.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
pOrder = 'v_Ste'
steTypes = getSteTypes( domStes[0], 1 )
if steTypes == None:
msg = ''
msg = msg + 'Error processing the SimpleTypeEnforcement types.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
formSteTypes[1] = steTypes
domChWalls = domRoot.getElementsByTagName( 'ChineseWall' )
if len( domChWalls ) > 0:
if domChWalls[0].hasAttribute( 'priority' ):
if domChWalls[0].getAttribute( 'priority' ) != 'PrimaryPolicyComponent':
msg = ''
msg = msg + 'Error processing the "<ChineseWall>" tag.\n'
msg = msg + 'The "priority" attribute value is not valid.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
if pOrder != '':
msg = ''
msg = msg + 'Error processing the "<ChineseWall>" tag.\n'
msg = msg + 'The "priority" attribute has been previously specified.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
pOrder = 'v_ChWall'
chwTypes = getChWTypes( domChWalls[0], 1 )
if chwTypes == None:
msg = ''
msg = msg + 'Error processing the ChineseWall types.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
formChWallTypes[1] = chwTypes
csNodes = domChWalls[0].getElementsByTagName( 'ConflictSets' )
if len( csNodes ) == 0:
msg = ''
msg = msg + 'Required "<ConflictSets>" tag missing.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
cNodes = csNodes[0].getElementsByTagName( 'Conflict' )
if len( cNodes ) == 0:
msg = ''
msg = msg + 'Required "<Conflict>" tag missing.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
for cNode in cNodes:
csName = cNode.getAttribute( 'name' )
newCS( csName, 1 )
csMemberList = getTypes( cNode )
if csMemberList == None:
msg = ''
msg = msg + 'Error processing the Conflict Set members.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
# Verify the conflict set members are valid types
ctSet = Set( formChWallTypes[1] )
csSet = Set( csMemberList )
if not csSet.issubset( ctSet ):
msg = ''
msg = msg + 'Error processing Conflict Set "' + csName + '".\n'
msg = msg + 'Members of the conflict set are not valid '
msg = msg + 'Chinese Wall types.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
allCSMTypes[csName][1] = csMemberList
if pOrder != '':
formPolicyOrder[1] = pOrder
else:
if (len( domStes ) > 0) or (len( domChWalls ) > 0):
msg = ''
msg = msg + 'The "priority" attribute has not been specified.\n'
msg = msg + 'It must be specified on one of the access control types.\n'
msg = msg + 'Please validate the Policy file used.'
formatXmlError( msg )
return
def modFormTemplate( formTemplate, suffix ):
formVar = [x for x in formTemplate]
if formVar[2] != '':
formVar[2] = formVar[2] + suffix
if formVar[3] != '':
formVar[3] = formVar[3] + suffix
if (formVar[0] != 'button') and (formVar[4] != ''):
formVar[4] = formVar[4] + suffix
return formVar;
def removeDups( curList ):
newList = []
curSet = Set( curList )
for x in curSet:
newList.append( x )
newList.sort( )
return newList
def newCS( csName, addToList = 0 ):
global formCSNames
global templateCSDel, allCSDel
global templateCSMTypes, templateCSMDel, templateCSMType, templateCSMAdd
global allCSMTypes, allCSMDel, allCSMType, allCSMAdd
csSuffix = '_' + csName
# Make sure we have an actual name and check one of the 'all'
# variables to be sure it hasn't been previously defined
if (len( csName ) > 0) and (not allCSMTypes.has_key( csName )):
allCSDel[csName] = modFormTemplate( templateCSDel, csSuffix )
allCSMTypes[csName] = modFormTemplate( templateCSMTypes, csSuffix )
allCSMDel[csName] = modFormTemplate( templateCSMDel, csSuffix )
allCSMType[csName] = modFormTemplate( templateCSMType, csSuffix )
allCSMAdd[csName] = modFormTemplate( templateCSMAdd, csSuffix )
if addToList == 1:
formCSNames[1].append( csName )
formCSNames[1] = removeDups( formCSNames[1] )
def updateInfo( ):
global formData, formPolicyName, formPolicyDate, formPolicyOrder
if formData.has_key( formPolicyName[3] ):
formPolicyName[1] = formData[formPolicyName[3]].value
elif formData.has_key( formPolicyUpdate[3] ):
formPolicyName[1] = ''
if formData.has_key( formPolicyDate[3] ):
formPolicyDate[1] = formData[formPolicyDate[3]].value
elif formData.has_key( formPolicyUpdate[3] ):
formPolicyDate[1] = ''
if formData.has_key( formPolicyOrder[3] ):
formPolicyOrder[1] = formData[formPolicyOrder[3]].value
def addSteType( ):
global formData, formSteType, formSteTypes
if (formData.has_key( formDefaultButton[3] )) or (formData.has_key( formSteAdd[3] )):
if formData.has_key( formSteType[3] ):
type = formData[formSteType[3]].value
type = type.strip( )
if len( type ) > 0:
formSteTypes[1].append( type )
formSteTypes[1] = removeDups( formSteTypes[1] )
def delSteType( ):
global formData, formSteTypes
if formData.has_key( formSteTypes[3] ):
typeList = formData.getlist( formSteTypes[3] )
for type in typeList:
type = type.strip( )
formSteTypes[1].remove( type )
def addChWallType( ):
global formData, formChWallType, formChWallTypes
if (formData.has_key( formDefaultButton[3] )) or (formData.has_key( formChWallAdd[3] )):
if formData.has_key( formChWallType[3] ):
type = formData[formChWallType[3]].value
type = type.strip( )
if len( type ) > 0:
formChWallTypes[1].append( type )
formChWallTypes[1] = removeDups( formChWallTypes[1] )
def delChWallType( ):
global formData, formChWallTypes
if formData.has_key( formChWallTypes[3] ):
typeList = formData.getlist( formChWallTypes[3] )
for type in typeList:
type = type.strip( )
formChWallTypes[1].remove( type )
def addCS( ):
global formData, formCSNames
if (formData.has_key( formDefaultButton[3] )) or (formData.has_key( formCSAdd[3] )):
if formData.has_key( formCSName[3] ):
csName = formData[formCSName[3]].value
csName = csName.strip( )
newCS( csName, 1 )
def delCS( csName ):
global formData, formCSNames, allCSDel
global allCSMTypes, allCSMDel, allCSMType, allCSMAdd
csName = csName.strip( )
formCSNames[1].remove( csName )
del allCSDel[csName]
del allCSMTypes[csName]
del allCSMDel[csName]
del allCSMType[csName]
del allCSMAdd[csName]
def addCSMember( csName ):
global formData, allCSMType, allCSMTypes
formVar = allCSMType[csName]
if formData.has_key( formVar[3] ):
csmList = formData.getlist( formVar[3] )
formVar = allCSMTypes[csName]
for csm in csmList:
csm = csm.strip( )
formVar[1].append( csm )
formVar[1] = removeDups( formVar[1] )
def delCSMember( csName ):
global formData, allCSMTypes
formVar = allCSMTypes[csName]
if formData.has_key( formVar[3] ):
csmList = formData.getlist( formVar[3] )
for csm in csmList:
csm = csm.strip( )
formVar[1].remove( csm )
def processRequest( ):
global policyXml
global formData, formPolicyUpdate
global formSteAdd, formSteDel
global formChWallAdd, formChWallDel
global formCSAdd, allCSDel
global formCSNames, allCSMAdd, allCSMDel
if policyXml != '':
parsePolicyXml( )
# Allow the updating of the header information whenever
# an action is performed
updateInfo( )
# Allow the adding of types/sets if the user has hit the
# enter key when attempting to add a type/set
addSteType( )
addChWallType( )
addCS( )
if formData.has_key( formSteDel[3] ):
delSteType( )
elif formData.has_key( formChWallDel[3] ):
delChWallType( )
else:
for csName in formCSNames[1]:
if formData.has_key( allCSDel[csName][3] ):
delCS( csName )
continue
if formData.has_key( allCSMAdd[csName][3] ):
addCSMember( csName )
elif formData.has_key( allCSMDel[csName][3] ):
delCSMember( csName )
def makeName( name, suffix='' ):
rName = name
if suffix != '':
rName = rName + '_' + suffix
return rName
def makeNameAttr( name, suffix='' ):
return 'name="' + makeName( name, suffix ) + '"'
def makeValue( value, suffix='' ):
rValue = value
if isinstance( value, list ):
rValue = '['
for val in value:
rValue = rValue + '\'' + val
if suffix != '':
rValue = rValue + '_' + suffix
rValue = rValue + '\','
rValue = rValue + ']'
else:
if suffix != '':
rValue = rValue + '_' + suffix
return rValue
def makeValueAttr( value, suffix='' ):
return 'value="' + makeValue( value, suffix ) + '"'
def sendHtmlFormVar( formVar, attrs='' ):
nameAttr = ''
valueAttr = ''
htmlText = ''
if formVar[0] == 'text':
if formVar[3] != '':
nameAttr = makeNameAttr( formVar[3] )
valueAttr = makeValueAttr( formVar[1] )
print '<INPUT type="text"', nameAttr, valueAttr, attrs, '>'
elif formVar[0] == 'list':
if formVar[3] != '':
nameAttr = makeNameAttr( formVar[3] )
print '<SELECT', nameAttr, attrs, '>'
for option in formVar[1]:
print '<OPTION>' + option + '</OPTION>'
print '</SELECT>'
elif formVar[0] == 'button':
if formVar[3] != '':
nameAttr = makeNameAttr( formVar[3] )
if formVar[4] != '':
valueAttr = makeValueAttr( formVar[4] )
print '<INPUT type="submit"', nameAttr, valueAttr, attrs, '>'
elif formVar[0] == 'radiobutton':
if formVar[3] != '':
nameAttr = makeNameAttr( formVar[3] )
valueAttr = makeValueAttr( formVar[4][rb_select] )
htmlText = formVar[5][rb_select]
if formVar[4][rb_select] == formVar[1]:
checked = 'checked'
else:
checked = ''
print '<INPUT type="radio"', nameAttr, valueAttr, attrs, checked, '>', htmlText
elif formVar[0] == 'radiobutton-all':
if formVar[3] != '':
nameAttr = makeNameAttr( formVar[3] )
buttonVals = formVar[4]
buttonTexts = formVar[5]
for i, buttonVal in enumerate( buttonVals ):
htmlText = ''
addAttrs = ''
checked = ''
valueAttr = makeValueAttr( buttonVal )
if formVar[5] != '':
htmlText = formVar[5][i]
if attrs != '':
addAttrs = attrs[i]
if buttonVal == formVar[1]:
checked = 'checked'
print '<INPUT type="radio"', nameAttr, valueAttr, addAttrs, checked, '>', htmlText, '<BR>'
if formVar[2] != '':
nameAttr = makeNameAttr( formVar[2] )
valueAttr = makeValueAttr( formVar[1] )
print '<INPUT type="hidden"', nameAttr, valueAttr, '>'
def sendHtmlHeaders( ):
# HTML headers
print 'Content-Type: text/html'
print
def sendPolicyHtml( ):
global xmlError, xmlIncomplete, xmlMessages, formXmlGen
print '<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"'
print ' "http://www.w3.org/TR/html4/loose.dtd">'
print '<HTML>'
sendHtmlHead( )
print '<BODY>'
# An input XML file was specified that had errors, output the
# error information
if xmlError == 1:
print '<P>'
print 'An error has been encountered while processing the input '
print 'XML file:'
print '<UL>'
for msg in xmlMessages:
print '<LI>'
print msg
print '</UL>'
print '</BODY>'
print '</HTML>'
return
# When attempting to generate the XML output, all required data was not
# present, output the error information
if xmlIncomplete == 1:
print '<P>'
print 'An error has been encountered while validating the data'
print 'required for the output XML file:'
print '<UL>'
for msg in xmlMessages:
print '<LI>'
print msg
print '</UL>'
print '</BODY>'
print '</HTML>'
return
print '<CENTER>'
print '<FORM action="' + os.environ['SCRIPT_NAME'] + '" method="post">'
print '<TABLE class="container">'
print ' <COLGROUP>'
print ' <COL width="100%">'
print ' </COLGROUP>'
print ' <TR>'
print ' <TD>'
print ' <TABLE>'
print ' <TR>'
print ' <TD>'
sendHtmlFormVar( formDefaultButton, 'class="hidden"' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
sendHtmlFormVar( formXmlGen )
print ' </TD>'
print ' </TR>'
print ' </TABLE>'
print ' </TD>'
print ' </TR>'
# Policy header
print ' <TR>'
print ' <TD>'
sendPHeaderHtml( )
print ' </TD>'
print ' </TR>'
# Separator
print ' <TR><TD><HR></TD></TR>'
# Policy (types)
print ' <TR>'
print ' <TD>'
print ' <TABLE class="full">'
print ' <TR>'
print ' <TD width="49%">'
sendPSteHtml( )
print ' </TD>'
print ' <TD width="2%">&nbsp;</TD>'
print ' <TD width="49%">'
sendPChWallHtml( )
print ' </TD>'
print ' </TR>'
print ' </TABLE>'
print ' </TD>'
print ' </TR>'
print '</TABLE>'
print '</FORM>'
print '</CENTER>'
print '</BODY>'
print '</HTML>'
def sendHtmlHead( ):
global headTitle
print '<HEAD>'
print '<STYLE type="text/css">'
print '<!--'
print 'BODY {background-color: #EEEEFF;}'
print 'TABLE.container {width: 90%; border: 1px solid black; border-collapse: seperate;}'
print 'TABLE.fullbox {width: 100%; border: 1px solid black; border-collapse: collapse;}'
print 'TABLE.full {width: 100%; border: 0px solid black; border-collapse: collapse;}'
print 'THEAD {font-weight: bold; font-size: larger;}'
print 'TD {border: 0px solid black; vertical-align: top;}'
print 'TD.heading {border: 0px solid black; vertical-align: top; font-weight: bold; font-size: larger;}'
print 'TD.subheading {border: 0px solid black; vertical-align: top; font-size: smaller;}'
print 'TD.fullbox {border: 1px solid black; vertical-align: top;}'
print 'SELECT.full {width: 100%;}'
print 'INPUT.full {width: 100%;}'
print 'INPUT.link {cursor: pointer; background-color: #EEEEFF; border: 0px; text-decoration: underline; color: blue;}'
print 'INPUT.hidden {visibility: hidden; width: 1px; height: 1px;}'
print ':link {color: blue;}'
print ':visited {color: red;}'
print '-->'
print '</STYLE>'
print '<TITLE>', headTitle, '</TITLE>'
print '</HEAD>'
def sendPHeaderHtml( ):
global formPolicyName, formPolicyDate, formPolicyOrder, formPolicyUpdate
# Policy header definition
print '<TABLE class="full">'
print ' <COLGROUP>'
print ' <COL width="20%">'
print ' <COL width="80%">'
print ' </COLGROUP>'
print ' <TR>'
print ' <TD align="center" colspan="2" class="heading">Policy Information</TD>'
print ' </TR>'
print ' <TR>'
print ' <TD align="right">Name:</TD>'
print ' <TD align="left">'
sendHtmlFormVar( formPolicyName, 'class="full"' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD align="right">Date:</TD>'
print ' <TD align="left">'
sendHtmlFormVar( formPolicyDate, 'class="full"' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD align="right">Primary Policy:</TD>'
print ' <TD align="left">'
sendHtmlFormVar( formPolicyOrder )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD align="center" colspan="2">'
sendHtmlFormVar( formPolicyUpdate )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD align="center" colspan="2" class="subheading">'
print ' (The Policy Information is updated whenever an action is performed'
print ' or it can be updated separately using the "Update" button)'
print ' </TD>'
print ' </TR>'
print '</TABLE>'
def sendPSteHtml( ):
global formSteTypes, formSteDel, formSteType, formSteAdd
# Simple Type Enforcement...
print '<TABLE class="full">'
print ' <COLGROUP>'
print ' <COL width="20%">'
print ' <COL width="80%">'
print ' </COLGROUP>'
print ' <TR>'
print ' <TD align="center" colspan="2" class="heading">Simple Type Enforcement Types</TD>'
print ' </TR>'
print ' <TR>'
print ' <TD colspan="2">'
sendHtmlFormVar( formSteTypes, 'class="full" size="4" multiple' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
sendHtmlFormVar( formSteDel, 'class="full"' )
print ' </TD>'
print ' <TD>'
print ' Delete the type(s) selected above'
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD colspan="2">'
sendHtmlFormVar( formSteType, 'class="full"' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
sendHtmlFormVar( formSteAdd, 'class="full"' )
print ' </TD>'
print ' <TD>'
print ' Create a new type with the above name'
print ' </TD>'
print ' </TR>'
print '</TABLE>'
def sendPChWallHtml( ):
global formChWallTypes, formChWallDel, formChWallType, formChWallAdd
global formCSNames, formCSName, formCSAdd, allCSDel
global allCSMTypes, allCSMDel, allCSMType, allCSMAdd
# Chinese Wall...
print '<TABLE class="full">'
print ' <COLGROUP>'
print ' <COL width="20%">'
print ' <COL width="80%">'
print ' </COLGROUP>'
print ' <TR>'
print ' <TD align="center" colspan="2" class="heading">Chinese Wall Types</TD>'
print ' </TR>'
print ' <TR>'
print ' <TD colspan="2">'
sendHtmlFormVar( formChWallTypes, 'class="full" size="4" multiple' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
sendHtmlFormVar( formChWallDel, 'class="full"' )
print ' </TD>'
print ' <TD>'
print ' Delete the type(s) selected above'
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD colspan="2">'
sendHtmlFormVar( formChWallType, 'class="full"' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
sendHtmlFormVar( formChWallAdd, 'class="full"' )
print ' </TD>'
print ' <TD>'
print ' Create a new type with the above name'
print ' </TD>'
print ' </TR>'
# Chinese Wall Conflict Sets...
print ' <TR>'
print ' <TD colspan="2">'
print ' <TABLE class="full">'
print ' <COLGROUP>'
print ' <COL width="20%">'
print ' <COL width="30%">'
print ' <COL width="50%">'
print ' </COLGROUP>'
print ' <THEAD>'
print ' <TR>'
print ' <TD align="center" colspan="3"><HR></TD>'
print ' </TR>'
print ' <TR>'
print ' <TD align="center" colspan="3">Chinese Wall Conflict Sets</TD>'
print ' </TR>'
print ' </THEAD>'
print ' <TR>'
print ' <TD colspan="3">'
sendHtmlFormVar( formCSName, 'class="full"' )
sendHtmlFormVar( formCSNames )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
sendHtmlFormVar( formCSAdd, 'class="full"' )
print ' </TD>'
print ' <TD colspan="2">'
print ' Create a new conflict set with the above name'
print ' </TD>'
print ' </TR>'
print ' </TABLE>'
print ' </TD>'
print ' </TR>'
if len( formCSNames[1] ) > 0:
print ' <TR>'
print ' <TD colspan="2">'
print ' &nbsp;'
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD colspan="2">'
print ' <TABLE class="fullbox">'
print ' <COLGROUP>'
print ' <COL width="50%">'
print ' <COL width="50%">'
print ' </COLGROUP>'
print ' <THEAD>'
print ' <TR>'
print ' <TD class="fullbox">Name</TD>'
print ' <TD class="fullbox">Actions</TD>'
print ' </TR>'
print ' </THEAD>'
for i, csName in enumerate( formCSNames[1] ):
print ' <TR>'
print ' <TD class="fullbox">' + csName + '</TD>'
print ' <TD class="fullbox">'
print ' <A href="#' + csName + '">Edit</A>'
formVar = allCSDel[csName]
sendHtmlFormVar( formVar, 'class="link"' )
print ' </TD>'
print ' </TABLE>'
print ' </TD>'
print ' </TR>'
for csName in formCSNames[1]:
print ' <TR><TD colspan="2"><HR></TD></TR>'
print ' <TR>'
print ' <TD align="center" colspan="2" class="heading"><A name="' + csName + '">Conflict Set: ' + csName + '</A></TD>'
print ' </TR>'
print ' <TR>'
print ' <TD colspan="2">'
formVar = allCSMTypes[csName];
sendHtmlFormVar( formVar, 'class="full" size="4" multiple"' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
formVar = allCSMDel[csName]
sendHtmlFormVar( formVar, 'class="full"' )
print ' </TD>'
print ' <TD>'
print ' Delete the type(s) selected above'
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD colspan="2">'
ctSet = Set( formChWallTypes[1] )
csSet = Set( allCSMTypes[csName][1] )
formVar = allCSMType[csName]
formVar[1] = []
for chwallType in ctSet.difference( csSet ):
formVar[1].append( chwallType )
formVar[1].sort( )
sendHtmlFormVar( formVar, 'class="full" size="2" multiple' )
print ' </TD>'
print ' </TR>'
print ' <TR>'
print ' <TD>'
formVar = allCSMAdd[csName]
sendHtmlFormVar( formVar, 'class="full"' )
print ' </TD>'
print ' <TD>'
print ' Add the type(s) selected above'
print ' </TD>'
print ' </TR>'
print '</TABLE>'
def checkXmlData( ):
global xmlIncomplete
# Validate the Policy Header requirements
if ( len( formPolicyName[1] ) > 0 ) or ( len( formPolicyDate[1] ) > 0 ):
if ( len( formPolicyName[1] ) == 0 ) or ( len( formPolicyDate[1] ) == 0 ):
msg = ''
msg = msg + 'The XML policy schema requires that the Policy '
msg = msg + 'Information Name and Date fields both have values '
msg = msg + 'or both not have values.'
formatXmlGenError( msg )
if formPolicyOrder[1] == 'v_ChWall':
if len( formChWallTypes[1] ) == 0:
msg = ''
msg = msg + 'You have specified the primary policy to be '
msg = msg + 'Chinese Wall but have not created any Chinese '
msg = msg + 'Wall types. Please create some Chinese Wall '
msg = msg + 'types or change the primary policy.'
formatXmlGenError( msg )
if formPolicyOrder[1] == 'v_Ste':
if len( formSteTypes[1] ) == 0:
msg = ''
msg = msg + 'You have specified the primary policy to be '
msg = msg + 'Simple Type Enforcement but have not created '
msg = msg + 'any Simple Type Enforcement types. Please create '
msg = msg + 'some Simple Type Enforcement types or change the '
msg = msg + 'primary policy.'
formatXmlGenError( msg )
# Validate the Chinese Wall required data
if len( formChWallTypes[1] ) > 0:
if len( formCSNames[1] ) == 0:
msg = ''
msg = msg + 'The XML policy schema for the Chinese Wall '
msg = msg + 'requires at least one Conflict Set be defined.'
formatXmlGenError( msg )
def sendXmlHeaders( ):
# HTML headers
print 'Content-Type: text/xml'
print 'Content-Disposition: attachment; filename=security_policy.xml'
print
def sendPolicyXml( ):
print '<?xml version="1.0"?>'
print '<SecurityPolicyDefinition xmlns="http://www.ibm.com"'
print ' xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
print ' xsi:schemaLocation="http://www.ibm.com security_policy.xsd">'
# Policy header
sendPHeaderXml( )
# Policy (types)
sendPSteXml( )
sendPChWallXml( )
print '</SecurityPolicyDefinition>'
def sendPHeaderXml( ):
global formPolicyName, formPolicyDate
# Policy header definition
if ( len( formPolicyName[1] ) > 0 ) or ( len( formPolicyDate[1] ) > 0 ):
print '<PolicyHeader>'
print ' <Name>' + formPolicyName[1] + '</Name>'
print ' <Date>' + formPolicyDate[1] + '</Date>'
print '</PolicyHeader>'
def sendPSteXml( ):
global formPolicyOrder, formSteTypes
# Simple Type Enforcement...
if len( formSteTypes[1] ) == 0:
return
if formPolicyOrder[1] == 'v_Ste':
print '<SimpleTypeEnforcement priority="PrimaryPolicyComponent">'
else:
print '<SimpleTypeEnforcement>'
print ' <SimpleTypeEnforcementTypes>'
for steType in formSteTypes[1]:
print ' <Type>' + steType + '</Type>'
print ' </SimpleTypeEnforcementTypes>'
print '</SimpleTypeEnforcement>'
def sendPChWallXml( ):
global formPolicyOrder, formChWallTypes
global formCSNames, allCSMTypes
# Chinese Wall...
if len( formChWallTypes[1] ) == 0:
return
if formPolicyOrder[1] == 'v_ChWall':
print '<ChineseWall priority="PrimaryPolicyComponent">'
else:
print '<ChineseWall>'
print ' <ChineseWallTypes>'
for chWallType in formChWallTypes[1]:
print ' <Type>' + chWallType + '</Type>'
print ' </ChineseWallTypes>'
# Chinese Wall Conflict Sets...
print ' <ConflictSets>'
for cs in formCSNames[1]:
formVar = allCSMTypes[cs]
if len( formVar[1] ) == 0:
continue
print ' <Conflict name="' + cs + '">'
for csm in formVar[1]:
print ' <Type>' + csm + '</Type>'
print ' </Conflict>'
print ' </ConflictSets>'
print '</ChineseWall>'
# Set up initial HTML variables
headTitle = 'Xen Policy Generation'
# Form variables
# The format of these variables is as follows:
# [ p0, p1, p2, p3, p4, p5 ]
# p0 = input type
# p1 = the current value of the variable
# p2 = the hidden input name attribute
# p3 = the name attribute
# p4 = the value attribute
# p5 = text to associate with the tag
formPolicyName = [ 'text',
'',
'h_policyName',
'i_policyName',
'',
'',
]
formPolicyDate = [ 'text',
getCurrentTime( ),
'h_policyDate',
'i_policyDate',
'',
'',
]
formPolicyOrder = [ 'radiobutton-all',
'v_ChWall',
'h_policyOrder',
'i_policyOrder',
[ 'v_Ste', 'v_ChWall' ],
[ 'Simple Type Enforcement', 'Chinese Wall' ],
]
formPolicyUpdate = [ 'button',
'',
'',
'i_PolicyUpdate',
'Update',
'',
]
formSteTypes = [ 'list',
[],
'h_steTypes',
'i_steTypes',
'',
'',
]
formSteDel = [ 'button',
'',
'',
'i_steDel',
'Delete',
'',
]
formSteType = [ 'text',
'',
'',
'i_steType',
'',
'',
]
formSteAdd = [ 'button',
'',
'',
'i_steAdd',
'New',
'',
]
formChWallTypes = [ 'list',
[],
'h_chwallTypes',
'i_chwallTypes',
'',
'',
]
formChWallDel = [ 'button',
'',
'',
'i_chwallDel',
'Delete',
'',
]
formChWallType = [ 'text',
'',
'',
'i_chwallType',
'',
'',
]
formChWallAdd = [ 'button',
'',
'',
'i_chwallAdd',
'New',
'',
]
formCSNames = [ '',
[],
'h_csNames',
'',
'',
'',
]
formCSName = [ 'text',
'',
'',
'i_csName',
'',
'',
]
formCSAdd = [ 'button',
'',
'',
'i_csAdd',
'New',
'',
]
formXmlGen = [ 'button',
'',
'',
'i_xmlGen',
'Generate XML',
'',
]
formDefaultButton = [ 'button',
'',
'',
'i_defaultButton',
'.',
'',
]
# This is a set of templates used for each conflict set
# Each conflict set is initially assigned these templates,
# then each form attribute value is changed to append
# "_conflict-set-name" for uniqueness
templateCSDel = [ 'button',
'',
'',
'i_csDel',
'Delete',
'',
]
allCSDel = {};
templateCSMTypes = [ 'list',
[],
'h_csmTypes',
'i_csmTypes',
'',
'',
]
templateCSMDel = [ 'button',
'',
'',
'i_csmDel',
'Delete',
'',
]
templateCSMType = [ 'list',
[],
'',
'i_csmType',
'',
'',
]
templateCSMAdd = [ 'button',
'',
'',
'i_csmAdd',
'Add',
'',
]
allCSMTypes = {};
allCSMDel = {};
allCSMType = {};
allCSMAdd = {};
# A list of all form variables used for saving info across requests
formVariables = [ formPolicyName,
formPolicyDate,
formPolicyOrder,
formSteTypes,
formChWallTypes,
formCSNames,
]
policyXml = ''
xmlError = 0
xmlIncomplete = 0
xmlMessages = []
# Extract any form data
formData = cgi.FieldStorage( )
# Process the form
getSavedData( )
processRequest( )
if formData.has_key( formXmlGen[3] ):
# Generate and send the XML file
checkXmlData( )
if xmlIncomplete == 0:
sendXmlHeaders( )
sendPolicyXml( )
if (not formData.has_key( formXmlGen[3] )) or (xmlIncomplete == 1 ):
# Send HTML to continue processing the form
sendHtmlHeaders( )
sendPolicyHtml( )
Reference in new issue View Git Blame Copy Permalink