1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
|
# Copyright (c) 2015-2017 LG Electronics, Inc.
#
# webos_app_generate_security_files
#
# This class is to be inherited by the recipe for every application that needs
# to generate permission and role files from its appinfo.json.
# This will happen implicitly, as all such applications will inherit from
# webos_app, which inherits this class.
#
# Keep this code in sync with that in appinstalld that does the same thing
# until [DRD-4417] is implemented.
#
inherit webos_system_bus
WEBOS_SYSTEM_BUS_CONFIGURE_FILES ??= "TRUE"
def webos_app_generate_security_files_write_permission_file(d, app_info):
import os
import json
app_id = app_info["id"]
key = app_id + "-*"
type = app_info["type"]
permission = {}
if "requiredPermissions" in app_info:
permission[key] = app_info["requiredPermissions"]
else:
permission[key] = []
pub_bus = False
prv_bus = False
trust_level = app_info.get("trustLevel", "default")
if trust_level == "default":
pub_bus = True
elif trust_level == "trusted":
pub_bus = True
prv_bus = True
elif trust_level == "netcast":
# According to https://wiki.lgsvl.com/display/webOSDocs/Security+Level+for+web+applications
# netcast level dosn't have access to public and private bus
pass
else:
bb.fatal("Unexpected trustLevel: " + trust_level)
if type == "web":
if "com.palm." in app_id or "com.webos." in app_id:
prv_bus = True
elif type == "qml":
prv_bus = True
pub_bus = True
if prv_bus:
permission[key].append("private")
pub_bus = True
if pub_bus:
permission[key].append("public")
dst_dir = d.getVar("D", True)
permissions_dir = d.getVar("webos_sysbus_permissionsdir", True)
permission_file = permissions_dir + "/" + app_id + ".app.json"
if not os.path.exists(dst_dir + permissions_dir):
os.makedirs(dst_dir + permissions_dir)
with open(dst_dir + permission_file, "w") as f:
json.dump(permission, f, indent=4)
f.write("\n")
return permission_file
def webos_app_generate_security_files_write_role_file(d, app_info):
import os
import json
app_id = app_info["id"]
role = {}
role["appId"] = app_id
role["type"] = "regular"
role["allowedNames"] = [app_id + "-*"]
role["permissions"] = [{"service": app_id + "-*", "outbound": ["*"] }]
dst_dir = d.getVar("D", True)
roles_dir = d.getVar("webos_sysbus_rolesdir", True)
role_file = roles_dir + "/" + app_id + ".app.json"
if not os.path.exists(dst_dir + roles_dir):
os.makedirs(dst_dir + roles_dir)
with open(dst_dir + role_file, "w") as f:
json.dump(role, f, indent=4)
f.write("\n")
return role_file
def webos_app_generate_security_files_get_immediate_subdirectories(root):
import os
return [name for name in os.listdir(root)
if os.path.isdir(os.path.join(root, name))]
def webos_app_generate_security_files_comment_remover(text):
import re
def replacer(match):
s = match.group(0)
return "" if s.startswith('/') else s
pattern = re.compile(r'//.*?$|/\*.*?\*/|\'(?:\\.|[^\\\'])*\'|"(?:\\.|[^\\"])*"',
re.DOTALL | re.MULTILINE
)
return re.sub(pattern, replacer, text)
def webos_app_generate_security_files_read_json(file):
""" Read a JSON file with comments: //, /**/ """
import json
with open(file, "r") as f:
content = f.read()
content = webos_app_generate_security_files_comment_remover(content)
return json.loads(content)
fakeroot python do_configure_security() {
import json
import os.path
if d.getVar("WEBOS_SYSTEM_BUS_CONFIGURE_FILES", True) != "TRUE":
return
dst_dir = d.getVar("D", True)
app_dir = dst_dir + d.getVar("webos_applicationsdir", True)
# ignore component that isn't app
if not os.path.exists(app_dir):
return
roles_dir = dst_dir + d.getVar("webos_sysbus_rolesdir", True)
pub_roles_dir = dst_dir + d.getVar("webos_sysbus_pubrolesdir", True)
prv_roles_dir = dst_dir + d.getVar("webos_sysbus_prvrolesdir", True)
apps = webos_app_generate_security_files_get_immediate_subdirectories(app_dir)
pkg_name = d.getVar("PN", True)
for app in apps:
app_info_file = app_dir + "/" + app + "/appinfo.json"
# ignore app that doesn't have appinfo.json
if not os.path.exists(app_info_file):
continue
# ignore app that already has role file
role_file = roles_dir + "/" + app + ".role.json"
if os.path.exists(role_file):
continue
# ignore app that already has public role file
pub_role_file = pub_roles_dir + "/" + app + ".json"
if os.path.exists(pub_role_file):
continue
# ignore app that already has private role file
prv_role_file = prv_roles_dir + "/" + app + ".json"
if os.path.exists(prv_role_file):
continue
app_info = webos_app_generate_security_files_read_json(app_info_file)
type = app_info["type"]
if type in ["qml", "web"]:
role_file = webos_app_generate_security_files_write_role_file(d, app_info)
permission_file = webos_app_generate_security_files_write_permission_file(d, app_info)
}
addtask configure_security after do_install before do_package
|
