1#!/bin/sh 2#- 3# Copyright (c) 2012 Devin Teske 4# All Rights Reserved. 5# 6# Redistribution and use in source and binary forms, with or without 7# modification, are permitted provided that the following conditions 8# are met: 9# 1. Redistributions of source code must retain the above copyright 10# notice, this list of conditions and the following disclaimer. 11# 2. Redistributions in binary form must reproduce the above copyright 12# notice, this list of conditions and the following disclaimer in the 13# documentation and/or other materials provided with the distribution. 14# 15# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING BUT NOT LIMITED TO, THE 17# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20# DAMAGES (INLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25# SUCH DAMAGE. 26# 27# $FreeBSD$ 28# 29############################################################ INCLUDES 30 31BSDCFG_LIBE="/usr/libexec/bsdconfig" 32. $BSDCFG_LIBE/include/common.subr || exit 1 33f_include $BSDCFG_LIBE/include/dialog.subr 34f_include $BSDCFG_LIBE/include/mustberoot.subr 35f_include $BSDCFG_LIBE/include/sysrc.subr 36 37APP_DIR="130.security" 38f_include_lang $BSDCFG_LIBE/$APP_DIR/include/messages.subr 39 40ipgm=$( f_index_menu_selection $BSDCFG_LIBE/$APP_DIR/INDEX "$pgm" ) 41[ $? -eq $SUCCESS -a "$ipgm" ] && pgm="$ipgm" 42 43############################################################ FUNCTIONS 44 45# dialog_menu_main 46# 47# Display the dialog(1)-based application main menu. 48# 49dialog_menu_main() 50{ 51 local menu_list size 52 local hline="$hline_arrows_tab_enter" 53 local prompt="$msg_menu_text" 54 55 menu_list=" 56 'X <<< $msg_exit' '$msg_exit_this_menu' 57 " # END-QUOTE 58 59 case "$( f_sysrc_get kern_securelevel_enable )" in 60 [Yy][Ee][Ss]) 61 local kern_securelevel="$( f_sysrc_get kern_securelevel )" 62 if [ ${#kern_securelevel} -eq 1 ] && 63 f_isinteger "$kern_securelevel" 64 then menu_list="$menu_list 65 '2 [$kern_securelevel] $msg_securelevel'" 66 else menu_list="$menu_list 67 '2 [X] $msg_securelevel'" 68 fi 69 menu_list="$menu_list '$msg_securelevel_desc'" 70 ;; 71 *) menu_list="$menu_list 72 '2 [ ] $msg_securelevel' '$msg_securelevel_desc'" 73 esac 74 75 case "$( f_sysrc_get nfs_reserved_port_only )" in 76 [Yy][Ee][Ss]) menu_list="$menu_list 77 '3 [X] $msg_nfs_port' '$msg_nfs_port_desc'";; 78 *) menu_list="$menu_list 79 '3 [ ] $msg_nfs_port' '$msg_nfs_port_desc'";; 80 esac 81 82 size=$( eval f_dialog_menu_size \ 83 \"\$DIALOG_TITLE\" \ 84 \"\$DIALOG_BACKTITLE\" \ 85 \"\$prompt\" \ 86 \"\$hline\" \ 87 $menu_list ) 88 89 eval $DIALOG \ 90 --clear --title \"\$DIALOG_TITLE\" \ 91 --backtitle \"\$DIALOG_BACKTITLE\" \ 92 --hline \"\$hline\" \ 93 --ok-label \"\$msg_ok\" \ 94 --cancel-label \"\$msg_cancel\" \ 95 --menu \"\$prompt\" $size \ 96 $menu_list \ 97 2> "$DIALOG_TMPDIR/dialog.menu.$$" 98} 99 100############################################################ MAIN 101 102# Incorporate rc-file if it exists 103[ -f "$HOME/.bsdconfigrc" ] && f_include "$HOME/.bsdconfigrc" 104 105# 106# Process command-line arguments 107# 108while getopts hSX flag; do 109 case "$flag" in 110 h|\?) f_usage $BSDCFG_LIBE/$APP_DIR/USAGE "PROGRAM_NAME" "$pgm";; 111 esac 112done 113shift $(( $OPTIND - 1 )) 114 115# 116# Initialize 117# 118f_dialog_init 119f_dialog_title "$msg_system_security_options_menu" 120f_dialog_backtitle "${ipgm:+bsdconfig }$pgm" 121f_mustberoot_init 122 123# 124# Launch application main menu 125# 126while :; do 127 dialog_menu_main 128 retval=$? 129 mtag=$( f_dialog_menutag ) 130 131 [ $retval -eq 0 ] || f_die 132 133 case "$mtag" in 134 "X <<< $msg_exit") break ;; 135 "2 ["?"] $msg_securelevel") # Configure securelevels for the system 136 $BSDCFG_LIBE/$APP_DIR/kern_securelevel ${USE_XDIALOG:+-X} ;; 137 "3 [X] $msg_nfs_port") # Require that NFS clients use reserved ports 138 f_sysrc_set nfs_reserved_port_only "NO";; 139 "3 [ ] $msg_nfs_port") # Same; Toggle value 140 f_sysrc_set nfs_reserved_port_only "YES";; 141 esac 142 143done 144 145exit $SUCCESS 146 147################################################################################ 148# END 149################################################################################ 150