CasperSecurity
# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.
from sos.report.plugins import Plugin, RedHatPlugin, UbuntuPlugin
class NetworkManager(Plugin, RedHatPlugin, UbuntuPlugin):
short_desc = 'NetworkManager service configuration'
plugin_name = 'networkmanager'
profiles = ('network', 'hardware', 'system')
packages = ('NetworkManager', 'network-manager')
def setup(self):
self.system_connection_files = [
"/etc/NetworkManager/system-connections/",
"/usr/lib/NetworkManager/system-connections/",
"/run/NetworkManager/system-connections/",
]
self.add_copy_spec(self.system_connection_files)
self.add_copy_spec([
"/etc/NetworkManager/NetworkManager.conf",
"/etc/NetworkManager/dispatcher.d",
"/etc/NetworkManager/conf.d",
"/usr/lib/NetworkManager/conf.d",
"/run/NetworkManager/conf.d",
"/var/lib/NetworkManager/NetworkManager-intern.conf",
])
self.add_journal(units="NetworkManager")
self.add_cmd_output("NetworkManager --print-config")
# There are some incompatible changes in nmcli since
# the release of NetworkManager >= 0.9.9. In addition,
# NetworkManager >= 0.9.9 will use the long names of
# "nmcli" objects.
# All versions conform to the following templates with different
# strings for the object being operated on.
nmcli_con_details_template = "nmcli con %s id"
nmcli_dev_details_template = "nmcli dev %s"
# test NetworkManager status for the specified major version
def test_nm_status(version=1):
status_template = "nmcli --terse --fields RUNNING %s status"
obj_table = [
"nm", # < 0.9.9
"general" # >= 0.9.9
]
status = self.exec_cmd(status_template % obj_table[version])
return (status['status'] == 0 and
status['output'].lower().startswith("running"))
# NetworkManager >= 0.9.9 (Use short name of objects for nmcli)
if test_nm_status(version=1):
self.add_cmd_output([
"nmcli general status",
"nmcli con",
"nmcli -f all con",
"nmcli con show --active",
"nmcli dev"])
nmcli_con_details_cmd = nmcli_con_details_template % "show"
nmcli_dev_details_cmd = nmcli_dev_details_template % "show"
# NetworkManager < 0.9.9 (Use short name of objects for nmcli)
elif test_nm_status(version=0):
self.add_cmd_output([
"nmcli nm status",
"nmcli con",
"nmcli con status",
"nmcli dev"])
nmcli_con_details_cmd = nmcli_con_details_template % "list id"
nmcli_dev_details_cmd = nmcli_dev_details_template % "list iface"
# No grokkable NetworkManager version present
else:
nmcli_con_details_cmd = ""
nmcli_dev_details_cmd = ""
if len(nmcli_con_details_cmd) > 0:
nmcli_con_show_result = self.exec_cmd(
"nmcli --terse --fields NAME con"
)
if nmcli_con_show_result['status'] == 0:
for con in nmcli_con_show_result['output'].splitlines():
if con[0:7] == 'Warning':
continue
# nm names may contain embedded quotes (" and '). These
# will cause an exception in shlex.split() if the quotes
# are unbalanced. This may happen with names like:
# "Foobar's Wireless Network". Although the problem will
# occur for both single and double quote characters the
# former is considerably more likely in object names since
# it is syntactically valid in many human languages.
#
# Reverse the normal sos quoting convention here and place
# double quotes around the innermost quoted string.
self.add_cmd_output(f'{nmcli_con_details_cmd} "{con}"')
self.add_device_cmd(
nmcli_dev_details_cmd + ' "%(dev)s"',
devices='ethernet'
)
self.add_cmd_tags({
"nmcli dev show": "nmcli_dev_show",
"nmcli dev show .*": "nmcli_dev_show_sos"
})
def postproc(self):
for sc_path in self.system_connection_files:
self.do_path_regex_sub(
f"{sc_path}",
r"(password|psk|mka-cak|password-raw|pin|preshared-key"
r"|private-key|secrets|wep-key[0-9])=(.*)",
r"\1=***",
)
# vim: set et ts=4 sw=4 :