69 lines
2.6 KiB
Python
69 lines
2.6 KiB
Python
|
# -*- encoding: utf-8 -*-
|
||
|
|
#
|
||
|
|
# The Qubes OS Project, http://www.qubes-os.org
|
||
|
|
#
|
||
|
|
# Copyright (C) 2020 Marek Marczykowski-Górecki
|
||
|
|
# <marmarek@invisiblethingslab.com>
|
||
|
|
#
|
||
|
|
# This library is free software; you can redistribute it and/or
|
||
|
|
# modify it under the terms of the GNU Lesser General Public
|
||
|
|
# License as published by the Free Software Foundation; either
|
||
|
|
# version 2.1 of the License, or (at your option) any later version.
|
||
|
|
#
|
||
|
|
# This library is distributed in the hope that it will be useful,
|
||
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||
|
|
# Lesser General Public License for more details.
|
||
|
|
#
|
||
|
|
# You should have received a copy of the GNU Lesser General Public
|
||
|
|
# License along with this library; if not, see <https://www.gnu.org/licenses/>.
|
||
|
|
|
||
|
|
"""Extension responsible for announcing supported features"""
|
||
|
|
|
||
|
|
import qubes.ext
|
||
|
|
import qubes.config
|
||
|
|
|
||
|
|
# pylint: disable=too-few-public-methods
|
||
|
|
|
||
|
|
class SupportedFeaturesExtension(qubes.ext.Extension):
|
||
|
|
"""This extension handles VM announcing non-service features as
|
||
|
|
'supported-feature.*' features.
|
||
|
|
"""
|
||
|
|
|
||
|
|
@qubes.ext.handler('features-request')
|
||
|
|
def supported_features(self, vm, event, untrusted_features):
|
||
|
|
"""Handle advertisement of supported features"""
|
||
|
|
# pylint: disable=no-self-use,unused-argument
|
||
|
|
|
||
|
|
if getattr(vm, 'template', None):
|
||
|
|
vm.log.warning(
|
||
|
|
'Ignoring qubes.FeaturesRequest from template-based VM')
|
||
|
|
return
|
||
|
|
|
||
|
|
new_supported_features = set()
|
||
|
|
for requested_feature in untrusted_features:
|
||
|
|
if not requested_feature.startswith('supported-feature.'):
|
||
|
|
continue
|
||
|
|
if untrusted_features[requested_feature] == '1':
|
||
|
|
# only allow to advertise feature as supported, lack of entry
|
||
|
|
# means feature is not supported
|
||
|
|
new_supported_features.add(requested_feature)
|
||
|
|
del untrusted_features
|
||
|
|
|
||
|
|
# if no feature is supported, ignore the whole thing - do not clear
|
||
|
|
# all features in case of empty request (manual or such)
|
||
|
|
if not new_supported_features:
|
||
|
|
return
|
||
|
|
|
||
|
|
old_supported_features = set(
|
||
|
|
feat for feat in vm.features
|
||
|
|
if feat.startswith('supported-feature.') and vm.features[feat])
|
||
|
|
|
||
|
|
for feature in new_supported_features.difference(
|
||
|
|
old_supported_features):
|
||
|
|
vm.features[feature] = True
|
||
|
|
|
||
|
|
for feature in old_supported_features.difference(
|
||
|
|
new_supported_features):
|
||
|
|
del vm.features[feature]
|