1#!/bin/sh 2#- 3# Copyright (c) 2012 Devin Teske 4# All Rights Reserved. 5# 6# Redistribution and use in source and binary forms, with or without 7# modification, are permitted provided that the following conditions 8# are met: 9# 1. Redistributions of source code must retain the above copyright 10# notice, this list of conditions and the following disclaimer. 11# 2. Redistributions in binary form must reproduce the above copyright 12# notice, this list of conditions and the following disclaimer in the 13# documentation and/or other materials provided with the distribution. 14# 15# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING BUT NOT LIMITED TO, THE 17# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20# DAMAGES (INLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25# SUCH DAMAGE. 26# 27# $FreeBSD$ 28# 29############################################################ INCLUDES 30 31BSDCFG_SHARE="/usr/share/bsdconfig" 32. $BSDCFG_SHARE/common.subr || exit 1 33f_include $BSDCFG_SHARE/dialog.subr 34f_include $BSDCFG_SHARE/mustberoot.subr 35f_include $BSDCFG_SHARE/sysrc.subr 36 37BSDCFG_LIBE="/usr/libexec/bsdconfig" APP_DIR="130.security" 38f_include_lang $BSDCFG_LIBE/$APP_DIR/include/messages.subr 39 40ipgm=$( f_index_menu_selection $BSDCFG_LIBE/$APP_DIR/INDEX "$pgm" ) 41[ $? -eq $SUCCESS -a "$ipgm" ] && pgm="$ipgm" 42 43############################################################ FUNCTIONS 44 45# dialog_menu_main 46# 47# Display the dialog(1)-based application main menu. 48# 49dialog_menu_main() 50{ 51 local menu_list size 52 local hline="$hline_arrows_tab_enter" 53 local prompt="$msg_menu_text" 54 55 menu_list=" 56 'X <<< $msg_exit' '$msg_exit_this_menu' 57 " # END-QUOTE 58 59 case "$( f_sysrc_get kern_securelevel_enable )" in 60 [Yy][Ee][Ss]) 61 local kern_securelevel="$( f_sysrc_get kern_securelevel )" 62 if [ ${#kern_securelevel} -eq 1 ] && 63 f_isinteger "$kern_securelevel" 64 then menu_list="$menu_list 65 '2 [$kern_securelevel] $msg_securelevel'" 66 else menu_list="$menu_list 67 '2 [X] $msg_securelevel'" 68 fi 69 menu_list="$menu_list '$msg_securelevel_desc'" 70 ;; 71 *) menu_list="$menu_list 72 '2 [ ] $msg_securelevel' '$msg_securelevel_desc'" 73 esac 74 75 case "$( f_sysrc_get nfs_reserved_port_only )" in 76 [Yy][Ee][Ss]) menu_list="$menu_list 77 '3 [X] $msg_nfs_port' '$msg_nfs_port_desc'";; 78 *) menu_list="$menu_list 79 '3 [ ] $msg_nfs_port' '$msg_nfs_port_desc'";; 80 esac 81 82 size=$( eval f_dialog_menu_size \ 83 \"\$DIALOG_TITLE\" \ 84 \"\$DIALOG_BACKTITLE\" \ 85 \"\$prompt\" \ 86 \"\$hline\" \ 87 $menu_list ) 88 89 local dialog_menu 90 dialog_menu=$( eval $DIALOG \ 91 --clear --title \"\$DIALOG_TITLE\" \ 92 --backtitle \"\$DIALOG_BACKTITLE\" \ 93 --hline \"\$hline\" \ 94 --ok-label \"\$msg_ok\" \ 95 --cancel-label \"\$msg_cancel\" \ 96 --menu \"\$prompt\" $size \ 97 $menu_list \ 98 2>&1 >&$DIALOG_TERMINAL_PASSTHRU_FD 99 ) 100 local retval=$? 101 setvar DIALOG_MENU_$$ "$dialog_menu" 102 return $retval 103} 104 105############################################################ MAIN 106 107# Incorporate rc-file if it exists 108[ -f "$HOME/.bsdconfigrc" ] && f_include "$HOME/.bsdconfigrc" 109 110# 111# Process command-line arguments 112# 113while getopts hSX flag; do 114 case "$flag" in 115 h|\?) f_usage $BSDCFG_LIBE/$APP_DIR/USAGE "PROGRAM_NAME" "$pgm";; 116 esac 117done 118shift $(( $OPTIND - 1 )) 119 120# 121# Initialize 122# 123f_dialog_init 124f_dialog_title "$msg_system_security_options_menu" 125f_dialog_backtitle "${ipgm:+bsdconfig }$pgm" 126f_mustberoot_init 127 128# 129# Launch application main menu 130# 131while :; do 132 dialog_menu_main 133 retval=$? 134 mtag=$( f_dialog_menutag ) 135 136 [ $retval -eq 0 ] || f_die 137 138 case "$mtag" in 139 "X <<< $msg_exit") break ;; 140 "2 ["?"] $msg_securelevel") # Configure securelevels for the system 141 $BSDCFG_LIBE/$APP_DIR/kern_securelevel ${USE_XDIALOG:+-X} ;; 142 "3 [X] $msg_nfs_port") # Require that NFS clients use reserved ports 143 f_sysrc_set nfs_reserved_port_only "NO";; 144 "3 [ ] $msg_nfs_port") # Same; Toggle value 145 f_sysrc_set nfs_reserved_port_only "YES";; 146 esac 147 148done 149 150exit $SUCCESS 151 152################################################################################ 153# END 154################################################################################ 155