11dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# This file is part of systemd.
21dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris#
3e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh# Copyright 2012-2013 Dan Walsh
41dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris#
51dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# systemd is free software; you can redistribute it and/or modify it
61dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# under the terms of the GNU General Public License as published by
71dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# the Free Software Foundation; either version 2 of the License, or
81dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# (at your option) any later version.
91dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris#
101dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# systemd is distributed in the hope that it will be useful, but
111dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# WITHOUT ANY WARRANTY; without even the implied warranty of
121dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
131dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# General Public License for more details.
141dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris#
151dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# You should have received a copy of the GNU General Public License
161dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris# along with systemd; If not, see <http://www.gnu.org/licenses/>.
171dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris
181dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__contains_word () {
191dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        local word=$1; shift
201dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        for w in $*; do [[ $w = $word ]] && return 0; done
211dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        return 1
221dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
231dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris
241dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_paths () {
251dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    dir -1 -F $* | grep '/' | cut -d'/' -f 1
261dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
271dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_ftypes () {
281dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    echo '-- -d -c -b -s -l -p'
291dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
301dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_networks () {
311dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -u 2> /dev/null | tail -n +3
321dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
331dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_booleans () {
341dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    getsebool -a 2> /dev/null
351dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
361dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_types () {
371dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -t 2> /dev/null | tail -n +3
381dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
391dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_admin_interaces () {
401dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    awk '/InterfaceVector.*_admin /{ print $2 }' /var/lib/sepolgen/interface_info | awk -F '_admin' '{ print $1 }'
411dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
421dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_user_role_interaces () {
431dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    awk '/InterfaceVector.*_role /{ print $2 }' /var/lib/sepolgen/interface_info | awk -F '_role' '{ print $1 }'
441dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
451dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_user_domains () {
461dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -auserdomain -x 2> /dev/null | tail -n +2
471dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
481dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_users () {
491dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -u 2> /dev/null | tail -n +2
501dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
511dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_classes () {
521dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -c 2> /dev/null | tail -n +2
531dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
541dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_port_types () {
551dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -aport_type -x 2> /dev/null | tail -n +2
561dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
571dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_domain_types () {
581dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -adomain -x 2> /dev/null | tail -n +2
591dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
601dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris__get_all_domains () {
611dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris    seinfo -adomain -x 2>/dev/null | sed 's/_t$//g'
621dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
631dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris_sepolicy () {
641dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        local command=${COMP_WORDS[1]}
651dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        local cur=${COMP_WORDS[COMP_CWORD]} prev=${COMP_WORDS[COMP_CWORD-1]}
661dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        local verb comps
671dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris
681dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        local -A VERBS=(
691dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [BOOLEANS]='booleans'
701dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [COMMUNICATE]='communicate'
711dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [GENERATE]='generate'
72e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh               [GUI]='gui'
731dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [INTERFACE]='interface'
741dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [MANPAGE]='manpage'
751dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [NETWORK]='network'
761dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [TRANSITION]='transition'
771dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        )
781dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris
791dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        COMMONOPTS='-P --policy -h --help'
801dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        local -A OPTS=(
811dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [booleans]='-h --help -p --path -a -all -b --boolean'
821dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [communicate]='-h --help -s --source -t --target -c --class -S --sourceaccess -T --targetaccess'
831dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [generate]='-a --admin --admin_user --application --cgi --confined_admin --customize  -d --domain --dbus --desktop_user -h --help --inetd --init -n --name --newtype -p --path --sandbox -T --test --term_user -u --user -w --writepath --x_user'
84e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh               [gui]='-h --help'
85e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh               [interface]='-h --help -a --list_admin -c --compile -i --interface -l --list -u --list_user -u --list_user -v --verbose'
86e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh               [manpage]='-h --help -p --path -a -all -o --os -d --domain -w --web -r --root'
871dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [network]='-h --help -d --domain -l --list -p --port -t --type '
881dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris               [transition]='-h --help -s --source -t --target'
891dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        )
901dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris
911dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        for ((i=0; $i <= $COMP_CWORD; i++)); do
921dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                if __contains_word "${COMP_WORDS[i]}" ${VERBS[*]} &&
931dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                 ! __contains_word "${COMP_WORDS[i-1]}" ${OPTS[ARG}]}; then
941dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                        verb=${COMP_WORDS[i]}
951dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                        break
961dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                fi
971dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        done
981dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris
991dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        if   [[ -z $verb ]]; then
1001dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "-P" -o "$prev" = "--policy" ]; then
1011dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $( compgen -f -- "$cur") )
1021dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                compopt -o filenames
1031dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1041dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            else
1051dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                comps="${VERBS[*]} ${COMMONOPTS}"
1061dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1071dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        elif [ "$verb" = "booleans" ]; then
1081dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "-b" -o "$prev" = "--boolean" ]; then
1091dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W "$( __get_all_booleans ) " -- "$cur") )
1101dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1111dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1121dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
1131dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            return 0
1141dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        elif [ "$verb" = "communicate" ]; then
1151dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "-s" -o "$prev" = "--source" -o "$prev" = "-t" -o "$prev" = "--target" ]; then
1161dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W "$( __get_all_domain_types ) " -- "$cur") )
1171dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1181dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif [ "$prev" = "-c" -o "$prev" = "--class" ]; then
1191dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W "$( __get_all_classes ) " -- "$cur") )
1201dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1211dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1221dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
1231dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            return 0
1241dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        elif [ "$verb" = "generate" ]; then
1251dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "--name" -o "$prev" = "-n" ]; then
1261dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1271dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif test "$prev" = "-p" || test "$prev" = "--path" ; then
1281dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $( compgen -d -- "$cur") )
1291dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                compopt -o filenames
1301dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1311dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif test "$prev" = "-w" || test "$prev" = "--writepath" ; then
1321dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $( compgen -d -- "$cur") )
1331dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                compopt -o filenames
1341dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1351dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif [ "$prev" = "--domain" -o "$prev" = "-d" ]; then
1361dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W "$( __get_all_domain_types ) " -- "$cur") )
1371dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
138e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh            elif [ "$prev" = "--newtype" ]; then
139e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                COMPREPLY=( $(compgen -W "-n --name -t --type" -- "$cur") )
140e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                return 0
1411dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif [ "$prev" = "--admin" -o "$prev" = "-a" ]; then
1421dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W "$( __get_all_admin_interaces ) " -- "$cur") )
1431dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1441dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif [ "$prev" = "--user" -o "$prev" = "-u" ]; then
145e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                COMPREPLY=( $(compgen -W "$( __get_all_users )" -- "$cur") )
1461dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1471dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif [[ "$cur" == "$verb" || "$cur" == "" || "$cur" == -* ]]; then
1481dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
1491dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1501dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1511dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            COMPREPLY=( $( compgen -f -- "$cur") )
1521dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            compopt -o filenames
1531dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            return 0
1541dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        elif [ "$verb" = "interface" ]; then
1551dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
1561dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            return 0
1571dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        elif [ "$verb" = "manpage" ]; then
1581dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "-d" -o "$prev" = "--domain" ]; then
1591dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W "$( __get_all_domains ) " -- "$cur") )
1601dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
161e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh            elif test "$prev" = "-r" || test "$prev" = "--root" ; then
162e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                COMPREPLY=( $( compgen -d -- "$cur") )
163e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                compopt -o filenames
164e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                return 0
1651dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif [ "$prev" = "-o" -o "$prev" = "--os" ]; then
1661dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1671dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            elif test "$prev" = "-p" || test "$prev" = "--path" ; then
1681dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $( compgen -d -- "$cur") )
1691dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                compopt -o filenames
1701dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1711dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1721dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
1731dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            return 0
1741dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        elif [ "$verb" = "network" ]; then
1751dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "-t" -o "$prev" = "--type" ]; then
176e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                COMPREPLY=( $(compgen -W "$( __get_all_port_types )" -- "$cur") )
1771dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1781dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1791dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "-d" -o "$prev" = "--domain" ]; then
180e6a1298e5421e5e499ac79243ff2f794dce6ec22Dan Walsh                COMPREPLY=( $(compgen -W "$( __get_all_domain_types )" -- "$cur") )
1811dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1821dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1831dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
1841dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            return 0
1851dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        elif [ "$verb" = "transition" ]; then
1861dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            if [ "$prev" = "-s" -o "$prev" = "--source" -o "$prev" = "-t" -o "$prev" = "--target" ]; then
1871dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                COMPREPLY=( $(compgen -W "$( __get_all_domain_types ) " -- "$cur") )
1881dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris                return 0
1891dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            fi
1901dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            COMPREPLY=( $(compgen -W '${OPTS[$verb]}' -- "$cur") )
1911dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris            return 0
1921dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        fi
1931dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        COMPREPLY=( $(compgen -W "$comps" -- "$cur") )
1941dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris        return 0
1951dce0bf16d6300d4858d611cb29de336bfd85f9aEric Paris}
1961dce0bf16d6300d4858d611cb29de336bfd85f9aEric Pariscomplete -F _sepolicy sepolicy
197