nautilus-07-lockdown.diff revision 20260
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/libnautilus-private/Makefile.am nautilus-2.26.3/libnautilus-private/Makefile.am
17807N/A--- nautilus-2.26.3.old/libnautilus-private/Makefile.am 2009-04-20 11:57:19.000000000 +0100
17807N/A+++ nautilus-2.26.3/libnautilus-private/Makefile.am 2009-07-13 11:41:43.040463000 +0100
17807N/A@@ -124,6 +124,8 @@ libnautilus_private_la_SOURCES = \
17807N/A nautilus-lib-self-check-functions.h \
9802N/A nautilus-link.c \
9802N/A nautilus-link.h \
9802N/A+ nautilus-lockdown.c \
9802N/A+ nautilus-lockdown.h \
9802N/A nautilus-marshal.c \
9802N/A nautilus-marshal.h \
9802N/A nautilus-merged-directory.c \
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/libnautilus-private/nautilus-directory-async.c nautilus-2.26.3/libnautilus-private/nautilus-directory-async.c
17807N/A--- nautilus-2.26.3.old/libnautilus-private/nautilus-directory-async.c 2009-05-13 12:30:32.000000000 +0100
17807N/A+++ nautilus-2.26.3/libnautilus-private/nautilus-directory-async.c 2009-07-13 11:41:43.043014000 +0100
17807N/A@@ -856,6 +857,10 @@ should_skip_file (NautilusDirectory *dir
9802N/A return TRUE;
9802N/A }
9802N/A
17807N/A+ if (nautilus_lockdown_is_forbidden_file(directory, info)) {
17807N/A+ return TRUE;
17807N/A+ }
17807N/A+
9802N/A return FALSE;
9802N/A }
17807N/A
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/libnautilus-private/nautilus-directory.c nautilus-2.26.3/libnautilus-private/nautilus-directory.c
17807N/A--- nautilus-2.26.3.old/libnautilus-private/nautilus-directory.c 2009-04-20 11:57:19.000000000 +0100
17807N/A+++ nautilus-2.26.3/libnautilus-private/nautilus-directory.c 2009-07-13 11:41:43.045220000 +0100
17807N/A@@ -342,6 +342,7 @@ add_preferences_callbacks (void)
9802N/A eel_preferences_add_callback (NAUTILUS_PREFERENCES_SHOW_BACKUP_FILES,
9802N/A filtering_changed_callback,
9802N/A NULL);
9802N/A+ nautilus_lockdown_notify_add(filtering_changed_callback, NULL) ;
9802N/A eel_preferences_add_callback (NAUTILUS_PREFERENCES_SHOW_TEXT_IN_ICONS,
9802N/A async_data_preference_changed_callback,
9802N/A NULL);
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/libnautilus-private/nautilus-file.c nautilus-2.26.3/libnautilus-private/nautilus-file.c
17807N/A--- nautilus-2.26.3.old/libnautilus-private/nautilus-file.c 2009-07-13 11:38:13.506664000 +0100
17807N/A+++ nautilus-2.26.3/libnautilus-private/nautilus-file.c 2009-07-13 11:41:43.048782000 +0100
17807N/A@@ -47,6 +47,7 @@
9802N/A #include "nautilus-users-groups-cache.h"
9802N/A #include "nautilus-vfs-file.h"
9802N/A #include "nautilus-saved-search-file.h"
9802N/A+#include "nautilus-lockdown.h"
9802N/A #include <eel/eel-debug.h>
9802N/A #include <eel/eel-glib-extensions.h>
9802N/A #include <eel/eel-gtk-extensions.h>
17807N/A@@ -2814,7 +2815,8 @@ nautilus_file_should_show (NautilusFile
17807N/A return TRUE;
17807N/A } else {
17807N/A return (show_hidden || (!nautilus_file_is_hidden_file (file) && !is_file_hidden (file))) &&
17807N/A- (show_backup || !nautilus_file_is_backup_file (file)) &&
17807N/A+ (show_backup || !nautilus_file_is_backup_file (file) &&
17807N/A+ !nautilus_lockdown_is_forbidden_nautilus_file(file)) &&
17807N/A (show_foreign || !(nautilus_file_is_in_desktop (file) && nautilus_file_is_foreign_link (file)));
17807N/A }
9802N/A }
19925N/A/opt/dtbld/bin/diff -uNr nautilus-2.30.1.original/libnautilus-private/nautilus-lockdown.c nautilus-2.30.1/libnautilus-private/nautilus-lockdown.c
19925N/A--- nautilus-2.30.1.original/libnautilus-private/nautilus-lockdown.c 1970-01-01 01:00:00.000000000 +0100
19925N/A+++ nautilus-2.30.1/libnautilus-private/nautilus-lockdown.c 2010-12-27 16:00:56.538090205 +0100
20260N/A@@ -0,0 +1,419 @@
9802N/A+/* -*- Mode: C; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 8 -*- */
9802N/A+/*
9802N/A+ * Copyright (C) 2004 Sun Microsystems, Inc.
9802N/A+ *
9802N/A+ * This program is free software; you can redistribute it and/or
9802N/A+ * modify it under the terms of the GNU General Public License as
9802N/A+ * published by the Free Software Foundation; either version 2 of the
9802N/A+ * License, or (at your option) any later version.
9802N/A+ *
9802N/A+ * This program is distributed in the hope that it will be useful, but
9802N/A+ * WITHOUT ANY WARRANTY; without even the implied warranty of
9802N/A+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
9802N/A+ * General Public License for more details.
9802N/A+ *
9802N/A+ * You should have received a copy of the GNU General Public License
9802N/A+ * along with this program; if not, write to the Free Software
9802N/A+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
9802N/A+ * 02111-1307, USA.
9802N/A+ *
9802N/A+ * Authors:
9802N/A+ * Matt Keenan <matt.keenan@sun.com>
9802N/A+ * Mark McLoughlin <mark@skynet.ie>
9802N/A+ */
9802N/A+
9802N/A+#include <config.h>
9802N/A+
9802N/A+#include "nautilus-lockdown.h"
9802N/A+#include "nautilus-global-preferences.h"
9802N/A+#include "nautilus-program-choosing.h"
9802N/A+#include <eel/eel-preferences.h>
17807N/A+#include <eel/eel-string.h>
9802N/A+#include <libgnome/gnome-desktop-item.h>
9802N/A+
19925N/A+#include <exec_attr.h>
19925N/A+#include <user_attr.h>
19925N/A+#include <secdb.h>
19925N/A+#include <pwd.h>
19925N/A+
9802N/A+#include <string.h>
9802N/A+
9802N/A+#define N_LISTENERS 3
9802N/A+
9802N/A+typedef struct {
9802N/A+ guint initialized : 1;
9802N/A+ guint disable_command_line : 1;
9802N/A+ guint restrict_application_launching : 1;
9802N/A+
17807N/A+ char** allowed_applications;
9802N/A+
9802N/A+ guint listeners [N_LISTENERS];
9802N/A+
9802N/A+ GSList *closures;
9802N/A+} NautilusLockdown ;
9802N/A+
9802N/A+const gchar *command_line_execs[] = {
9802N/A+ "/usr/bin/gnome-terminal",
9802N/A+ "/usr/bin/xterm",
9802N/A+};
9802N/A+#define NUMBER_COMMAND_LINE_EXECS 2
9802N/A+
9802N/A+static NautilusLockdown nautilus_lockdown = { 0, };
9802N/A+
9802N/A+
9802N/A+static inline void
9802N/A+nautilus_lockdown_invoke_closures (NautilusLockdown *lockdown)
9802N/A+{
9802N/A+ GSList *l;
9802N/A+
9802N/A+ for (l = lockdown->closures; l; l = l->next)
9802N/A+ g_closure_invoke (l->data, NULL, 0, NULL, NULL);
9802N/A+}
9802N/A+
9802N/A+static void
9802N/A+disable_command_line_notify (NautilusLockdown *lockdown)
9802N/A+{
9802N/A+ lockdown->disable_command_line =
9802N/A+ eel_preferences_get_boolean(
9802N/A+ NAUTILUS_PREFERENCES_DISABLE_COMMANDLINE) ;
9802N/A+ nautilus_lockdown_invoke_closures (lockdown);
9802N/A+}
9802N/A+
9802N/A+static void
9802N/A+restrict_application_launching_notify (NautilusLockdown *lockdown)
9802N/A+{
9802N/A+ lockdown->restrict_application_launching =
9802N/A+ eel_preferences_get_boolean (
9802N/A+ NAUTILUS_PREFERENCES_RESTRICT_APP_LAUNCHING);
9802N/A+ nautilus_lockdown_invoke_closures (lockdown);
9802N/A+}
9802N/A+
9802N/A+static void
9802N/A+allowed_applications_notify (NautilusLockdown *lockdown)
9802N/A+{
17807N/A+ g_strfreev(lockdown->allowed_applications) ;
9802N/A+ lockdown->allowed_applications =
17807N/A+ eel_preferences_get_string_array(
9802N/A+ NAUTILUS_PREFERENCES_ALLOWED_APPLICATIONS) ;
9802N/A+ nautilus_lockdown_invoke_closures (lockdown);
9802N/A+}
9802N/A+
9802N/A+static gboolean
9802N/A+nautilus_lockdown_load_bool (NautilusLockdown *lockdown,
9802N/A+ const char *key,
9802N/A+ EelPreferencesCallback notify_func)
9802N/A+{
9802N/A+ gboolean retval = eel_preferences_get_boolean (key);
9802N/A+
9802N/A+ eel_preferences_add_callback(key, notify_func, lockdown) ;
9802N/A+ return retval;
9802N/A+}
9802N/A+
17807N/A+static char**
9802N/A+nautilus_lockdown_load_allowed_applications (NautilusLockdown *lockdown)
9802N/A+{
17807N/A+ char **retval;
9802N/A+
17807N/A+ retval = eel_preferences_get_string_array(
9802N/A+ NAUTILUS_PREFERENCES_ALLOWED_APPLICATIONS) ;
9802N/A+ eel_preferences_add_callback(NAUTILUS_PREFERENCES_ALLOWED_APPLICATIONS,
9802N/A+ allowed_applications_notify, lockdown) ;
9802N/A+ return retval;
9802N/A+}
9802N/A+
9802N/A+void
9802N/A+nautilus_lockdown_init (void)
9802N/A+{
19925N/A+ if (nautilus_lockdown_is_user_authorized())
19925N/A+ {
19925N/A+ nautilus_lockdown.disable_command_line = FALSE;
19925N/A+ nautilus_lockdown.restrict_application_launching = FALSE;
19925N/A+ nautilus_lockdown.initialized = TRUE;
19925N/A+ return;
19925N/A+ }
19925N/A+
9802N/A+ nautilus_lockdown.disable_command_line =
9802N/A+ nautilus_lockdown_load_bool (
9802N/A+ &nautilus_lockdown,
9802N/A+ NAUTILUS_PREFERENCES_DISABLE_COMMANDLINE,
9802N/A+ disable_command_line_notify);
9802N/A+ nautilus_lockdown.restrict_application_launching =
9802N/A+ nautilus_lockdown_load_bool (
9802N/A+ &nautilus_lockdown,
9802N/A+ NAUTILUS_PREFERENCES_RESTRICT_APP_LAUNCHING,
9802N/A+ restrict_application_launching_notify) ;
9802N/A+ nautilus_lockdown.allowed_applications =
9802N/A+ nautilus_lockdown_load_allowed_applications (
9802N/A+ &nautilus_lockdown) ;
9802N/A+ nautilus_lockdown.initialized = TRUE;
9802N/A+}
9802N/A+
9802N/A+void
9802N/A+nautilus_lockdown_finalize (void)
9802N/A+{
9802N/A+ GSList *l = NULL ;
9802N/A+
9802N/A+ g_assert (nautilus_lockdown.initialized == TRUE);
9802N/A+ eel_preferences_remove_callback(
9802N/A+ NAUTILUS_PREFERENCES_DISABLE_COMMANDLINE,
9802N/A+ disable_command_line_notify,
9802N/A+ &nautilus_lockdown) ;
9802N/A+ eel_preferences_remove_callback(
9802N/A+ NAUTILUS_PREFERENCES_RESTRICT_APP_LAUNCHING,
9802N/A+ restrict_application_launching_notify,
9802N/A+ &nautilus_lockdown) ;
9802N/A+ eel_preferences_remove_callback(
9802N/A+ NAUTILUS_PREFERENCES_ALLOWED_APPLICATIONS,
9802N/A+ allowed_applications_notify,
9802N/A+ &nautilus_lockdown) ;
17807N/A+ g_strfreev(nautilus_lockdown.allowed_applications) ;
9802N/A+ for (l = nautilus_lockdown.closures; l; l = l->next) {
9802N/A+ g_closure_unref (l->data);
9802N/A+ }
9802N/A+ g_slist_free (nautilus_lockdown.closures);
9802N/A+ nautilus_lockdown.closures = NULL;
9802N/A+ nautilus_lockdown.initialized = FALSE;
9802N/A+}
9802N/A+
9802N/A+gboolean
9802N/A+nautilus_lockdown_is_command_line_disabled (void)
9802N/A+{
9802N/A+ g_assert (nautilus_lockdown.initialized == TRUE);
9802N/A+ return nautilus_lockdown.disable_command_line;
9802N/A+}
9802N/A+
9802N/A+gboolean
9802N/A+nautilus_lockdown_is_app_launching_restricted (void)
9802N/A+{
9802N/A+ g_assert (nautilus_lockdown.initialized == TRUE);
9802N/A+ return nautilus_lockdown.restrict_application_launching;
9802N/A+}
9802N/A+
17807N/A+char**
9802N/A+nautilus_lockdown_get_allowed_apps (void)
9802N/A+{
9802N/A+ g_assert (nautilus_lockdown.initialized == TRUE);
9802N/A+ return nautilus_lockdown.allowed_applications;
9802N/A+}
9802N/A+
9802N/A+static GClosure *
9802N/A+nautilus_lockdown_notify_find (GSList *closures,
9802N/A+ GCallback callback_func,
9802N/A+ gpointer user_data)
9802N/A+{
9802N/A+ GSList *l;
9802N/A+
9802N/A+ for (l = closures; l; l = l->next) {
9802N/A+ GCClosure *cclosure = l->data;
9802N/A+ GClosure *closure = l->data;
9802N/A+
9802N/A+ if (closure->data == user_data &&
9802N/A+ cclosure->callback == callback_func)
9802N/A+ return closure;
9802N/A+ }
9802N/A+
9802N/A+ return NULL;
9802N/A+}
9802N/A+
9802N/A+static void
9802N/A+marshal_user_data (GClosure *closure,
9802N/A+ GValue *return_value,
9802N/A+ guint n_param_values,
9802N/A+ const GValue *param_values,
9802N/A+ gpointer invocation_hint,
9802N/A+ gpointer marshal_data)
9802N/A+{
9802N/A+ GCClosure *cclosure = (GCClosure*) closure;
9802N/A+
9802N/A+ g_return_if_fail (cclosure->callback != NULL);
9802N/A+ g_return_if_fail (n_param_values == 0);
9802N/A+
9802N/A+ ((void (*) (gpointer *))cclosure->callback) (closure->data);
9802N/A+}
9802N/A+
9802N/A+void
9802N/A+nautilus_lockdown_notify_add (GCallback callback_func,
9802N/A+ gpointer user_data)
9802N/A+{
9802N/A+ GClosure *closure;
9802N/A+
9802N/A+ g_assert (nautilus_lockdown_notify_find (nautilus_lockdown.closures,
9802N/A+ callback_func,
9802N/A+ user_data) == NULL);
9802N/A+ closure = g_cclosure_new (callback_func, user_data, NULL);
9802N/A+ g_closure_set_marshal (closure, marshal_user_data);
9802N/A+ nautilus_lockdown.closures = g_slist_append (nautilus_lockdown.closures,
9802N/A+ closure);
9802N/A+}
9802N/A+
9802N/A+void
9802N/A+nautilus_lockdown_notify_remove (GCallback callback_func,
9802N/A+ gpointer user_data)
9802N/A+{
9802N/A+ GClosure *closure;
9802N/A+
9802N/A+ closure = nautilus_lockdown_notify_find (nautilus_lockdown.closures,
9802N/A+ callback_func,
9802N/A+ user_data);
9802N/A+ g_assert (closure != NULL);
9802N/A+ nautilus_lockdown.closures = g_slist_remove (nautilus_lockdown.closures,
9802N/A+ closure);
9802N/A+ g_closure_unref (closure);
9802N/A+}
9802N/A+
9802N/A+static gboolean nautilus_lockdown_is_forbidden_uri(const char *uri)
9802N/A+{
9802N/A+ GnomeDesktopItem *item = NULL ;
9802N/A+ GError *error = NULL ;
9802N/A+ const char *command = NULL ;
9802N/A+ gboolean ret_code = FALSE ;
9802N/A+
9802N/A+ item = gnome_desktop_item_new_from_uri(uri, 0, &error) ;
9802N/A+ if (error != NULL) {
9802N/A+ g_error_free(error) ;
9802N/A+ return ret_code ;
9802N/A+ }
9802N/A+ command = gnome_desktop_item_get_string(item, GNOME_DESKTOP_ITEM_EXEC) ;
9802N/A+ if (command == NULL) { return ret_code ; }
9802N/A+ return nautilus_lockdown_is_forbidden_command(command) ;
9802N/A+}
9802N/A+
9802N/A+static const char *GNOME_APP_MIME = "application/x-gnome-app-info" ;
9802N/A+static const char *DESKTOP_MIME = "application/x-desktop" ;
9802N/A+
9802N/A+gboolean nautilus_lockdown_is_forbidden_file(NautilusDirectory *directory,
17807N/A+ GFileInfo *file)
9802N/A+{
17807N/A+ const char *mime_type = g_file_info_get_content_type(file) ;
9802N/A+
9802N/A+ if (nautilus_lockdown.restrict_application_launching &&
9802N/A+ mime_type != NULL &&
9802N/A+ (strcmp(mime_type, GNOME_APP_MIME) == 0 ||
9802N/A+ strcmp(mime_type, DESKTOP_MIME) == 0)) {
17807N/A+ return nautilus_lockdown_is_forbidden_command(
17807N/A+ nautilus_directory_get_file_uri(directory, g_file_info_get_name(file)));
9802N/A+ }
9802N/A+ return FALSE ;
9802N/A+}
9802N/A+
9802N/A+gboolean nautilus_lockdown_is_forbidden_nautilus_file(NautilusFile *file)
9802N/A+{
9802N/A+ if (nautilus_lockdown.restrict_application_launching &&
9802N/A+ (nautilus_file_is_mime_type(file, GNOME_APP_MIME) ||
9802N/A+ nautilus_file_is_mime_type(file, DESKTOP_MIME))) {
9802N/A+ return nautilus_lockdown_is_forbidden_uri(nautilus_file_get_uri(file)) ;
9802N/A+ }
9802N/A+ return FALSE ;
9802N/A+}
9802N/A+
9802N/A+gboolean nautilus_lockdown_is_forbidden_command(const char *command)
9802N/A+{
9802N/A+ char *commandCopy = NULL ;
9802N/A+ char *program = NULL ;
17807N/A+ char *allowed_app;
12337N/A+ gboolean retCode = FALSE ;
9802N/A+
9802N/A+ if (!nautilus_lockdown.restrict_application_launching) { return retCode ; }
9802N/A+ commandCopy = g_shell_unquote(command, NULL) ;
9802N/A+ if (commandCopy == NULL) { commandCopy = g_strdup(command) ; }
9802N/A+ strtok(commandCopy, " ") ;
9802N/A+ if (g_path_is_absolute(commandCopy)) {
9802N/A+ program = commandCopy ;
9802N/A+ }
9802N/A+ else {
9802N/A+ char *stripped = g_path_get_basename(commandCopy) ;
9802N/A+
9802N/A+ program = g_find_program_in_path(stripped) ;
9802N/A+ g_free(stripped) ;
9802N/A+ g_free(commandCopy) ;
9802N/A+ }
17807N/A+ retCode = TRUE;
9802N/A+ if (program != NULL) {
17807N/A+ int i = 0;
17807N/A+ allowed_app = nautilus_lockdown.allowed_applications[i];
17807N/A+ while (allowed_app != NULL) {
17807N/A+ if (!strcmp(allowed_app, program)) {
17807N/A+ retCode = FALSE;
17807N/A+ break;
19925N/A+ } else if (!strcmp(allowed_app, command)) {
19925N/A+ retCode = FALSE;
19925N/A+ break;
17807N/A+ }
19925N/A+
17807N/A+ allowed_app = nautilus_lockdown.allowed_applications[++i];
17807N/A+ }
9802N/A+ g_free(program) ;
9802N/A+ }
9802N/A+ return retCode ;
9802N/A+}
9802N/A+
19925N/A+static gboolean
19925N/A+has_root_role (char *username)
19925N/A+{
19925N/A+ userattr_t *userattr = NULL;
19925N/A+ gchar *rolelist = NULL;
19925N/A+ gchar *rolename = NULL;
20260N/A+ static gboolean ret_val = FALSE;
20260N/A+ static gboolean cached_root = FALSE;
19925N/A+
20260N/A+ if (cached_root == FALSE && (userattr = getusernam(username)) != NULL)
19925N/A+ {
19925N/A+ rolelist = kva_match(userattr->attr, USERATTR_ROLES_KW);
19925N/A+ rolename = strtok(rolelist, ",");
19925N/A+ while (rolename != NULL) {
19925N/A+ if (strcmp (rolename, ROOT_ROLE) == 0) {
19925N/A+ ret_val = TRUE;
19925N/A+ break;
19925N/A+ }
19925N/A+ rolename = strtok(NULL, ",");
19925N/A+ }
19925N/A+
19925N/A+ free_userattr(userattr);
20260N/A+ cached_root = TRUE;
19925N/A+ }
19925N/A+
19925N/A+ return ret_val;
19925N/A+}
19925N/A+
19925N/A+static gboolean
19925N/A+has_admin_profile (char *username)
19925N/A+{
19925N/A+ execattr_t *execattr = NULL;
20260N/A+ static gboolean ret_val = FALSE;
20260N/A+ static gboolean cached_admin = FALSE;
19925N/A+
20260N/A+ if (cached_admin == FALSE && (execattr = getexecuser (username, NULL, NULL, GET_ALL)) != NULL)
19925N/A+ {
19925N/A+ while (execattr != NULL) {
20260N/A+ if (strcmp (execattr->name, SYSTEM_ADMINISTRATOR_PROF) == 0)
19925N/A+ {
19925N/A+ ret_val = TRUE;
19925N/A+ break;
19925N/A+ }
19925N/A+ execattr = execattr->next;
19925N/A+ }
19925N/A+ free_execattr (execattr);
20260N/A+ cached_admin = TRUE;
19925N/A+ }
19925N/A+ return ret_val;
19925N/A+}
19925N/A+
19925N/A+gboolean nautilus_lockdown_is_user_authorized(void) {
19925N/A+ uid_t uid = getuid();
19925N/A+ struct passwd *pw;
19925N/A+
19925N/A+ if ((pw = getpwuid(uid)) == NULL)
19925N/A+ return FALSE;
19925N/A+
19925N/A+ if (has_admin_profile (pw->pw_name))
19925N/A+ return TRUE;
19925N/A+
19925N/A+ if (has_root_role (pw->pw_name))
19925N/A+ return TRUE;
19925N/A+
19925N/A+ if (uid == 0)
19925N/A+ return TRUE;
19925N/A+
19925N/A+ return FALSE;
19925N/A+}
19925N/A+
19925N/A/opt/dtbld/bin/diff -uNr nautilus-2.30.1.original/libnautilus-private/nautilus-lockdown.h nautilus-2.30.1/libnautilus-private/nautilus-lockdown.h
19925N/A--- nautilus-2.30.1.original/libnautilus-private/nautilus-lockdown.h 1970-01-01 01:00:00.000000000 +0100
19925N/A+++ nautilus-2.30.1/libnautilus-private/nautilus-lockdown.h 2010-12-27 16:00:00.379749810 +0100
20260N/A@@ -0,0 +1,59 @@
12886N/A+/* -*- Mode: C; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 8 -*- */
12886N/A+/*
12886N/A+ * Copyright (C) 2004 Sun Microsystems, Inc.
12886N/A+ *
12886N/A+ * This program is free software; you can redistribute it and/or
12886N/A+ * modify it under the terms of the GNU General Public License as
12886N/A+ * published by the Free Software Foundation; either version 2 of the
12886N/A+ * License, or (at your option) any later version.
12886N/A+ *
12886N/A+ * This program is distributed in the hope that it will be useful, but
12886N/A+ * WITHOUT ANY WARRANTY; without even the implied warranty of
12886N/A+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12886N/A+ * General Public License for more details.
12886N/A+ *
12886N/A+ * You should have received a copy of the GNU General Public License
12886N/A+ * along with this program; if not, write to the Free Software
12886N/A+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
12886N/A+ * 02111-1307, USA.
12886N/A+ *
12886N/A+ * Authors:
12886N/A+ * Matt Keenan <matt.keenan@sun.com>
12886N/A+ * Mark McLoughlin <mark@skynet.ie>
12886N/A+ */
12886N/A+
12886N/A+#ifndef __NAUTILUS_LOCKDOWN_H__
12886N/A+#define __NAUTILUS_LOCKDOWN_H__
12886N/A+
12886N/A+#include <libgnomevfs/gnome-vfs.h>
12886N/A+#include <glib.h>
12886N/A+#include <glib-object.h>
12886N/A+#include "nautilus-directory.h"
12886N/A+
12886N/A+G_BEGIN_DECLS
12886N/A+
12886N/A+void nautilus_lockdown_init (void);
12886N/A+void nautilus_lockdown_finalize (void);
12886N/A+
12886N/A+void nautilus_lockdown_notify_add (GCallback callback_func,
12886N/A+ gpointer user_data);
12886N/A+void nautilus_lockdown_notify_remove (GCallback callback_func,
12886N/A+ gpointer user_data);
12886N/A+
12886N/A+gboolean nautilus_lockdown_is_command_line_disabled(void) ;
12886N/A+gboolean nautilus_lockdown_is_app_launching_restricted(void) ;
17807N/A+char** nautilus_lockdown_get_allowed_apps(void) ;
12886N/A+
12886N/A+gboolean nautilus_lockdown_is_forbidden_file(NautilusDirectory *directory,
17807N/A+ GFileInfo *file) ;
12886N/A+gboolean nautilus_lockdown_is_forbidden_nautilus_file(NautilusFile *file) ;
12886N/A+gboolean nautilus_lockdown_is_forbidden_command(const char *command) ;
12886N/A+
19925N/A+gboolean nautilus_lockdown_is_user_authorized(void);
19925N/A+
19925N/A+#define SYSTEM_ADMINISTRATOR_PROF "System Administrator"
19925N/A+#define ROOT_ROLE "root"
19925N/A+
12886N/A+G_END_DECLS
12886N/A+
12886N/A+#endif /* __NAUTILUS_LOCKDOWN_H__ */
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/src/file-manager/fm-directory-view.c nautilus-2.26.3/src/file-manager/fm-directory-view.c
17807N/A--- nautilus-2.26.3.old/src/file-manager/fm-directory-view.c 2009-05-18 20:44:27.000000000 +0100
17807N/A+++ nautilus-2.26.3/src/file-manager/fm-directory-view.c 2009-07-13 11:41:43.055406000 +0100
17807N/A@@ -314,6 +314,7 @@ static void reset_update_interval
17807N/A static void schedule_idle_display_of_pending_files (FMDirectoryView *view);
17807N/A static void unschedule_display_of_pending_files (FMDirectoryView *view);
17807N/A static void disconnect_model_handlers (FMDirectoryView *view);
17807N/A+static void lockdown_changed_callback (gpointer context);
17807N/A static void metadata_for_directory_as_file_ready_callback (NautilusFile *file,
17807N/A gpointer callback_data);
17807N/A static void metadata_for_files_in_directory_ready_callback (NautilusDirectory *directory,
17807N/A@@ -9575,6 +9579,15 @@ fm_directory_view_handle_uri_list_drop (
17807N/A g_free (container_uri);
17807N/A }
17807N/A
17807N/A+static void lockdown_changed_callback(gpointer context)
17807N/A+{
17807N/A+ FMDirectoryView *directory_view = FM_DIRECTORY_VIEW(context) ;
17807N/A+
17807N/A+ if (directory_view != NULL && directory_view->details->model != NULL) {
17807N/A+ load_directory(directory_view, directory_view->details->model) ;
17807N/A+ }
17807N/A+}
17807N/A+
17807N/A void
17807N/A fm_directory_view_handle_text_drop (FMDirectoryView *view,
17807N/A const char *text,
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/src/file-manager/fm-tree-model.c nautilus-2.26.3/src/file-manager/fm-tree-model.c
17807N/A--- nautilus-2.26.3.old/src/file-manager/fm-tree-model.c 2009-04-20 11:57:20.000000000 +0100
17807N/A+++ nautilus-2.26.3/src/file-manager/fm-tree-model.c 2009-07-13 11:41:43.056901000 +0100
17807N/A@@ -38,6 +38,8 @@
17807N/A #include <gtk/gtk.h>
17807N/A #include <string.h>
17807N/A
17807N/A+#include <libnautilus-private/nautilus-lockdown.h>
17807N/A+
17807N/A enum {
17807N/A ROW_LOADED,
17807N/A LAST_SIGNAL
17807N/A@@ -1707,6 +1709,14 @@ fm_tree_model_set_show_hidden_files (FMT
17807N/A schedule_monitoring_update (model);
17807N/A }
17807N/A
17807N/A+void fm_tree_model_refresh_permissions(FMTreeModel *model)
17807N/A+{
17807N/A+ g_return_if_fail(FM_IS_TREE_MODEL(model)) ;
17807N/A+ stop_monitoring(model) ;
17807N/A+ destroy_by_function(model, nautilus_lockdown_is_forbidden_nautilus_file) ;
17807N/A+ schedule_monitoring_update(model) ;
17807N/A+}
17807N/A+
17807N/A static gboolean
17807N/A file_is_not_directory (NautilusFile *file)
17807N/A {
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/src/file-manager/fm-tree-view.c nautilus-2.26.3/src/file-manager/fm-tree-view.c
17807N/A--- nautilus-2.26.3.old/src/file-manager/fm-tree-view.c 2009-05-18 20:44:27.000000000 +0100
17807N/A+++ nautilus-2.26.3/src/file-manager/fm-tree-view.c 2009-07-13 11:41:43.059783000 +0100
17807N/A@@ -1485,6 +1485,7 @@ update_filtering_from_preferences (FMTre
17807N/A fm_tree_model_set_show_only_directories
17807N/A (view->details->child_model,
17807N/A eel_preferences_get_boolean (NAUTILUS_PREFERENCES_TREE_SHOW_ONLY_DIRECTORIES));
17807N/A+ fm_tree_model_refresh_permissions(view->details->child_model) ;
17807N/A }
17807N/A
17807N/A static void
17807N/A@@ -1543,6 +1544,7 @@ fm_tree_view_init (FMTreeView *view)
17807N/A filtering_changed_callback, view, G_OBJECT (view));
17807N/A eel_preferences_add_callback_while_alive (NAUTILUS_PREFERENCES_SHOW_BACKUP_FILES,
17807N/A filtering_changed_callback, view, G_OBJECT (view));
17807N/A+ nautilus_lockdown_notify_add (filtering_changed_callback, view);
17807N/A eel_preferences_add_callback_while_alive (NAUTILUS_PREFERENCES_TREE_SHOW_ONLY_DIRECTORIES,
17807N/A filtering_changed_callback, view, G_OBJECT (view));
17807N/A
17807N/A@@ -1610,6 +1612,8 @@ fm_tree_view_finalize (GObject *object)
17807N/A
17807N/A view = FM_TREE_VIEW (object);
17807N/A
17807N/A+ nautilus_lockdown_notify_remove (filtering_changed_callback, view);
17807N/A+
17807N/A g_free (view->details);
12886N/A
17807N/A G_OBJECT_CLASS (parent_class)->finalize (object);
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/src/nautilus-window-menus.c nautilus-2.26.3/src/nautilus-window-menus.c
17807N/A--- nautilus-2.26.3.old/src/nautilus-window-menus.c 2009-05-18 20:44:27.000000000 +0100
17807N/A+++ nautilus-2.26.3/src/nautilus-window-menus.c 2009-07-13 11:41:43.061038000 +0100
17807N/A@@ -49,6 +49,7 @@
17807N/A #include <libnautilus-private/nautilus-global-preferences.h>
17807N/A #include <libnautilus-private/nautilus-icon-names.h>
17807N/A #include <libnautilus-private/nautilus-ui-utilities.h>
17807N/A+#include <libnautilus-private/nautilus-lockdown.h>
17807N/A #include <libnautilus-private/nautilus-module.h>
17807N/A #include <libnautilus-private/nautilus-undo-manager.h>
17807N/A #include <libnautilus-private/nautilus-search-directory.h>
17807N/A@@ -1021,6 +1022,34 @@ add_extension_menu_items (NautilusWindow
17807N/A }
17807N/A }
11976N/A
17807N/A+static gboolean
17807N/A+load_extension_menus_idle(gpointer context)
17807N/A+{
17807N/A+ NautilusWindow *window = NAUTILUS_WINDOW(context);
17807N/A+
17807N/A+ nautilus_window_load_extension_menus(window);
17807N/A+ return FALSE;
17807N/A+}
17807N/A+
17807N/A+static void
17807N/A+lockdown_changed_callback(gpointer context)
17807N/A+{
17807N/A+ NautilusWindow *window = NAUTILUS_WINDOW(context);
17807N/A+ g_idle_add(load_extension_menus_idle, window);
17807N/A+}
17807N/A+
17807N/A+void
17807N/A+nautilus_window_menus_lockdown_notify_remove (NautilusWindow *window)
17807N/A+{
17807N/A+ nautilus_lockdown_notify_remove(lockdown_changed_callback, window);
17807N/A+}
17807N/A+
17807N/A+void
17807N/A+nautilus_window_menus_lockdown_notify_add (NautilusWindow *window)
17807N/A+{
17807N/A+ nautilus_lockdown_notify_add(lockdown_changed_callback, window);
17807N/A+}
17807N/A+
17807N/A void
17807N/A nautilus_window_load_extension_menus (NautilusWindow *window)
17807N/A {
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/src/nautilus-window.c nautilus-2.26.3/src/nautilus-window.c
17807N/A--- nautilus-2.26.3.old/src/nautilus-window.c 2009-04-20 11:57:20.000000000 +0100
17807N/A+++ nautilus-2.26.3/src/nautilus-window.c 2009-07-13 11:41:43.064214000 +0100
17807N/A@@ -629,6 +629,8 @@ nautilus_window_finalize (GObject *objec
17807N/A
17807N/A g_object_unref (window->details->ui_manager);
17807N/A
17807N/A+ nautilus_window_menus_lockdown_notify_remove(window);
17807N/A+
17807N/A G_OBJECT_CLASS (nautilus_window_parent_class)->finalize (object);
17807N/A }
17807N/A
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/src/nautilus-main.c nautilus-2.26.3/src/nautilus-main.c
17807N/A--- nautilus-2.26.3.old/src/nautilus-main.c 2009-05-18 20:44:27.000000000 +0100
17807N/A+++ nautilus-2.26.3/src/nautilus-main.c 2009-07-13 11:41:43.077497000 +0100
17807N/A@@ -464,6 +465,7 @@ main (int argc, char *argv[])
17807N/A (NAUTILUS_PREFERENCES_DESKTOP_IS_HOME_DIR, TRUE);
17807N/A }
17807N/A
17807N/A+ nautilus_lockdown_init ();
17807N/A application = NULL;
17807N/A
17807N/A /* Do either the self-check or the real work. */
17807N/A@@ -525,6 +527,7 @@ main (int argc, char *argv[])
17807N/A g_object_unref (application);
17807N/A }
17807N/A
17807N/A+ nautilus_lockdown_finalize ();
17807N/A eel_debug_shut_down ();
17807N/A
17807N/A nautilus_application_save_accel_map (NULL);
17807N/A/jds/bin/diff -uprN nautilus-2.26.3.old/libnautilus-private/nautilus-program-choosing.c nautilus-2.26.3/libnautilus-private/nautilus-program-choosing.c
17807N/A--- nautilus-2.26.3.old/libnautilus-private/nautilus-program-choosing.c 2009-04-20 11:57:19.000000000 +0100
17807N/A+++ nautilus-2.26.3/libnautilus-private/nautilus-program-choosing.c 2009-07-13 11:41:43.078947000 +0100
17807N/A@@ -158,6 +158,22 @@ nautilus_launch_application (GAppInfo *a
17807N/A eel_g_list_free_deep (uris);
17807N/A }
16372N/A
16372N/A+static gboolean
16372N/A+command_is_allowed (const char *full_command)
16372N/A+{
17807N/A+ gboolean allowed = !nautilus_lockdown_is_forbidden_command(full_command);
17807N/A+ if (!allowed) {
16372N/A+ eel_show_error_dialog
17807N/A+ /* SUN_BRANDING */
17807N/A+ (_("Sorry, This is a restricted application which "
17807N/A+ "you may not run."),
17807N/A+ /* SUN_BRANDING */
17807N/A+ _("Restricted Application"),
17807N/A+ NULL);
17807N/A+ }
17807N/A+ return allowed;
16372N/A+}
17807N/A+
17807N/A void
17807N/A nautilus_launch_application_by_uri (GAppInfo *application,
17807N/A GList *uris,
17807N/A@@ -335,8 +351,22 @@ nautilus_launch_application_from_command
17807N/A }
16372N/A }
16372N/A
16372N/A+ if (!command_is_allowed (command_string)) {
16372N/A+ g_free (full_command);
16372N/A+ return;
16372N/A+ }
16372N/A+
16372N/A if (use_terminal) {
16372N/A- eel_gnome_open_terminal_on_screen (full_command, screen);
16372N/A+ if (!nautilus_lockdown_is_command_line_disabled ()) {
16372N/A+ eel_gnome_open_terminal_on_screen (full_command, screen);
16372N/A+ } else {
16372N/A+ eel_show_error_dialog
16372N/A+ /* SUN_BRANDING */
16372N/A+ (_("Sorry, this command requires a terminal "),
16372N/A+ /* SUN_BRANDING */
16372N/A+ _("Terminal access is restricted."),
16372N/A+ NULL);
16372N/A+ }
16372N/A } else {
17807N/A gdk_spawn_command_line_on_screen (screen, full_command, NULL);
16372N/A }
17807N/A@@ -387,6 +417,10 @@ nautilus_launch_desktop_file (GdkScreen
17807N/A parent_window);
17807N/A return;
17807N/A }
16372N/A+
17807N/A+ if (!command_is_allowed (g_app_info_get_executable (app_info))) {
16372N/A+ return;
16372N/A+ }
17807N/A
17807N/A /* count the number of uris with local paths */
17807N/A count = 0;
17807N/Adiff -ruN nautilus-2.27.4.orig/libnautilus-private/nautilus-directory-async.c nautilus-2.27.4/libnautilus-private/nautilus-directory-async.c
17807N/A--- nautilus-2.27.4.orig/libnautilus-private/nautilus-directory-async.c 2009-07-23 15:47:20.972324079 +0100
17807N/A+++ nautilus-2.27.4/libnautilus-private/nautilus-directory-async.c 2009-07-23 15:48:27.250174766 +0100
17807N/A@@ -32,6 +32,7 @@
17807N/A #include "nautilus-signaller.h"
17807N/A #include "nautilus-global-preferences.h"
17807N/A #include "nautilus-link.h"
17807N/A+#include "nautilus-lockdown.h"
17807N/A #include "nautilus-marshal.h"
17807N/A #include <eel/eel-glib-extensions.h>
17807N/A #include <eel/eel-string.h>
17807N/Adiff -ruN nautilus-2.27.4.orig/src/nautilus-main.c nautilus-2.27.4/src/nautilus-main.c
17807N/A--- nautilus-2.27.4.orig/src/nautilus-main.c 2009-07-23 15:47:20.959902926 +0100
17807N/A+++ nautilus-2.27.4/src/nautilus-main.c 2009-07-23 15:49:22.737922718 +0100
17807N/A@@ -47,6 +47,7 @@
17807N/A #include <gio/gdesktopappinfo.h>
17807N/A #include <libnautilus-private/nautilus-debug-log.h>
17807N/A #include <libnautilus-private/nautilus-global-preferences.h>
17807N/A+#include <libnautilus-private/nautilus-lockdown.h>
17807N/A #include <libnautilus-private/nautilus-lib-self-check-functions.h>
17807N/A #include <libnautilus-private/nautilus-icon-names.h>
17807N/A #include <libxml/parser.h>
17807N/Adiff -ruN nautilus-2.27.91.orig/libnautilus-private/nautilus-global-preferences.h nautilus-2.27.91/libnautilus-private/nautilus-global-preferences.h
17807N/A--- nautilus-2.27.91.orig/libnautilus-private/nautilus-global-preferences.h 2009-08-25 14:16:47.618321840 +0100
17807N/A+++ nautilus-2.27.91/libnautilus-private/nautilus-global-preferences.h 2009-08-25 14:17:34.366770658 +0100
17807N/A@@ -228,6 +228,9 @@
17807N/A #define NAUTILUS_PREFERENCES_DESKTOP_NETWORK_VISIBLE "desktop/network_icon_visible"
17807N/A #define NAUTILUS_PREFERENCES_DESKTOP_NETWORK_NAME "desktop/network_icon_name"
17807N/A #define NAUTILUS_PREFERENCES_DESKTOP_PRIMARY_SCREEN "desktop/primary_screen"
17807N/A+#define NAUTILUS_PREFERENCES_DISABLE_COMMANDLINE "/desktop/gnome/lockdown/disable_command_line"
17807N/A+#define NAUTILUS_PREFERENCES_RESTRICT_APP_LAUNCHING "/desktop/gnome/lockdown/restrict_application_launching"
17807N/A+#define NAUTILUS_PREFERENCES_ALLOWED_APPLICATIONS "/desktop/gnome/lockdown/allowed_applications"
17807N/A
17807N/A /* Lockdown */
17807N/A #define NAUTILUS_PREFERENCES_LOCKDOWN_COMMAND_LINE "/desktop/gnome/lockdown/disable_command_line"
17807N/Adiff -ruN nautilus-2.27.91.orig/src/file-manager/fm-directory-view.c nautilus-2.27.91/src/file-manager/fm-directory-view.c
17807N/A--- nautilus-2.27.91.orig/src/file-manager/fm-directory-view.c 2009-08-25 14:16:47.523491404 +0100
17807N/A+++ nautilus-2.27.91/src/file-manager/fm-directory-view.c 2009-08-25 14:20:03.740747515 +0100
17807N/A@@ -1943,6 +1943,7 @@
17807N/A sort_directories_first_changed_callback, view);
17807N/A eel_preferences_add_callback (NAUTILUS_PREFERENCES_LOCKDOWN_COMMAND_LINE,
17807N/A lockdown_disable_command_line_changed_callback, view);
17807N/A+ nautilus_lockdown_notify_add (lockdown_changed_callback, view);
17806N/A }
17806N/A
17806N/A static void
17807N/A@@ -2059,6 +2060,7 @@
17807N/A sort_directories_first_changed_callback, view);
17807N/A eel_preferences_remove_callback (NAUTILUS_PREFERENCES_LOCKDOWN_COMMAND_LINE,
17807N/A lockdown_disable_command_line_changed_callback, view);
17807N/A+ nautilus_lockdown_notify_remove (lockdown_changed_callback, view);
17806N/A
17807N/A unschedule_pop_up_location_context_menu (view);
17807N/A if (view->details->location_popup_event != NULL) {
18256N/Adiff -ruN nautilus-2.29.2.orig/src/nautilus-window.c nautilus-2.29.2/src/nautilus-window.c
18256N/A--- nautilus-2.29.2.orig/src/nautilus-window.c 2010-02-01 22:58:18.483524915 +0000
18256N/A+++ nautilus-2.29.2/src/nautilus-window.c 2010-02-01 23:00:45.641679123 +0000
18256N/A@@ -629,7 +629,7 @@
18256N/A
18256N/A slot = nautilus_window_open_slot (window->details->active_pane, 0);
18256N/A nautilus_window_set_active_slot (window, slot);
18256N/A-
18256N/A+ nautilus_window_menus_lockdown_notify_add (window);
18256N/A return object;
18256N/A }
18256N/A
18256N/Adiff -ruN nautilus-2.29.2.orig/src/nautilus-window-private.h nautilus-2.29.2/src/nautilus-window-private.h
18256N/A--- nautilus-2.29.2.orig/src/nautilus-window-private.h 2010-02-01 23:01:51.066830219 +0000
18256N/A+++ nautilus-2.29.2/src/nautilus-window-private.h 2010-02-01 23:02:35.249306426 +0000
18256N/A@@ -160,6 +160,8 @@
18256N/A const char *status);
18256N/A void nautilus_window_load_view_as_menus (NautilusWindow *window);
18256N/A void nautilus_window_load_extension_menus (NautilusWindow *window);
18256N/A+void nautilus_window_menus_lockdown_notify_add (NautilusWindow *window);
18256N/A+void nautilus_window_menus_lockdown_notify_remove (NautilusWindow *window);
18256N/A void nautilus_window_initialize_menus (NautilusWindow *window);
18256N/A void nautilus_window_remove_trash_monitor_callback (NautilusWindow *window);
18256N/A NautilusWindowPane *nautilus_window_get_next_pane (NautilusWindow *window);