1#!/bin/sh 2#- 3# Copyright (c) 2012 Devin Teske 4# All Rights Reserved. 5# 6# Redistribution and use in source and binary forms, with or without 7# modification, are permitted provided that the following conditions 8# are met: 9# 1. Redistributions of source code must retain the above copyright 10# notice, this list of conditions and the following disclaimer. 11# 2. Redistributions in binary form must reproduce the above copyright 12# notice, this list of conditions and the following disclaimer in the 13# documentation and/or other materials provided with the distribution. 14# 15# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING BUT NOT LIMITED TO, THE 17# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20# DAMAGES (INLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25# SUCH DAMAGE. 26# 27# $FreeBSD$ 28# 29############################################################ INCLUDES 30 31BSDCFG_SHARE="/usr/share/bsdconfig" 32. $BSDCFG_SHARE/common.subr || exit 1 33f_dprintf "%s: loading includes..." "$0" 34f_include $BSDCFG_SHARE/dialog.subr 35f_include $BSDCFG_SHARE/mustberoot.subr 36f_include $BSDCFG_SHARE/sysrc.subr 37 38BSDCFG_LIBE="/usr/libexec/bsdconfig" APP_DIR="130.security" 39f_include_lang $BSDCFG_LIBE/$APP_DIR/include/messages.subr 40 41ipgm=$( f_index_menusel_keyword $BSDCFG_LIBE/$APP_DIR/INDEX "$pgm" ) 42[ $? -eq $SUCCESS -a "$ipgm" ] && pgm="$ipgm" 43 44############################################################ FUNCTIONS 45 46# dialog_menu_main 47# 48# Display the dialog(1)-based application main menu. 49# 50dialog_menu_main() 51{ 52 local menu_list size 53 local hline="$hline_arrows_tab_enter" 54 local prompt="$msg_menu_text" 55 56 menu_list=" 57 'X <<< $msg_exit' '$msg_exit_this_menu' 58 " # END-QUOTE 59 60 case "$( f_sysrc_get kern_securelevel_enable )" in 61 [Yy][Ee][Ss]) 62 local kern_securelevel="$( f_sysrc_get kern_securelevel )" 63 if [ ${#kern_securelevel} -eq 1 ] && 64 f_isinteger "$kern_securelevel" 65 then menu_list="$menu_list 66 '2 [$kern_securelevel] $msg_securelevel'" 67 else menu_list="$menu_list 68 '2 [X] $msg_securelevel'" 69 fi 70 menu_list="$menu_list '$msg_securelevel_desc'" 71 ;; 72 *) menu_list="$menu_list 73 '2 [ ] $msg_securelevel' '$msg_securelevel_desc'" 74 esac 75 76 case "$( f_sysrc_get nfs_reserved_port_only )" in 77 [Yy][Ee][Ss]) menu_list="$menu_list 78 '3 [X] $msg_nfs_port' '$msg_nfs_port_desc'";; 79 *) menu_list="$menu_list 80 '3 [ ] $msg_nfs_port' '$msg_nfs_port_desc'";; 81 esac 82 83 size=$( eval f_dialog_menu_size \ 84 \"\$DIALOG_TITLE\" \ 85 \"\$DIALOG_BACKTITLE\" \ 86 \"\$prompt\" \ 87 \"\$hline\" \ 88 $menu_list ) 89 90 local dialog_menu 91 dialog_menu=$( eval $DIALOG \ 92 --clear --title \"\$DIALOG_TITLE\" \ 93 --backtitle \"\$DIALOG_BACKTITLE\" \ 94 --hline \"\$hline\" \ 95 --ok-label \"\$msg_ok\" \ 96 --cancel-label \"\$msg_cancel\" \ 97 --menu \"\$prompt\" $size \ 98 $menu_list \ 99 2>&1 >&$DIALOG_TERMINAL_PASSTHRU_FD 100 ) 101 local retval=$? 102 setvar DIALOG_MENU_$$ "$dialog_menu" 103 return $retval 104} 105 106############################################################ MAIN 107 108# Incorporate rc-file if it exists 109[ -f "$HOME/.bsdconfigrc" ] && f_include "$HOME/.bsdconfigrc" 110 111# 112# Process command-line arguments 113# 114while getopts hSX flag; do 115 case "$flag" in 116 h|\?) f_usage $BSDCFG_LIBE/$APP_DIR/USAGE "PROGRAM_NAME" "$pgm";; 117 esac 118done 119shift $(( $OPTIND - 1 )) 120 121# 122# Initialize 123# 124f_dialog_title "$msg_system_security_options_menu" 125f_dialog_backtitle "${ipgm:+bsdconfig }$pgm" 126f_mustberoot_init 127 128# 129# Launch application main menu 130# 131while :; do 132 dialog_menu_main 133 retval=$? 134 mtag=$( f_dialog_menutag ) 135 136 [ $retval -eq 0 ] || f_die 137 138 case "$mtag" in 139 "X <<< $msg_exit") break ;; 140 "2 ["?"] $msg_securelevel") # Configure securelevels for the system 141 $BSDCFG_LIBE/$APP_DIR/kern_securelevel ${USE_XDIALOG:+-X} ;; 142 "3 [X] $msg_nfs_port") # Require that NFS clients use reserved ports 143 f_sysrc_set nfs_reserved_port_only "NO";; 144 "3 [ ] $msg_nfs_port") # Same; Toggle value 145 f_sysrc_set nfs_reserved_port_only "YES";; 146 esac 147 148done 149 150exit $SUCCESS 151 152################################################################################ 153# END 154################################################################################ 155