#!/usr/bin/python2 # # The Qubes OS Project, http://www.qubes-os.org # # Copyright (C) 2012 Agnieszka Kostrzewa # Copyright (C) 2012 Marek Marczykowski # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. # # from qubes.qubes import QubesVmCollection from qubes.qubes import QubesVmLabels from qubes.qubes import QubesHost from qubes.qubes import system_path import subprocess from copy import copy from ui_settingsdlg import * from appmenu_select import * from firewall import * from backup_utils import get_path_for_vm class VMSettingsWindow(Ui_SettingsDialog, QDialog): tabs_indices = {"basic": 0, "advanced": 1, "firewall": 2, "devices": 3, "applications": 4, "services": 5,} def __init__(self, vm, app, qvm_collection, init_page="basic", parent=None): super(VMSettingsWindow, self).__init__(parent) self.app = app self.qvm_collection = qvm_collection self.vm = vm if self.vm.template: self.source_vm = self.vm.template else: self.source_vm = self.vm self.setupUi(self) self.setWindowTitle(self.tr("Settings: {vm}").format(vm=self.vm.name)) if init_page in self.tabs_indices: idx = self.tabs_indices[init_page] assert (idx in range(self.tabWidget.count())) self.tabWidget.setCurrentIndex(idx) self.connect(self.buttonBox, SIGNAL("accepted()"), self.save_and_apply) self.connect(self.buttonBox, SIGNAL("rejected()"), self.reject) self.tabWidget.currentChanged.connect(self.current_tab_changed) self.tabWidget.setTabEnabled(self.tabs_indices["firewall"], vm.is_networked() and not (vm.is_netvm() and not vm.is_proxyvm())) ###### basic tab self.__init_basic_tab__() ###### advanced tab self.__init_advanced_tab__() self.include_in_balancing.stateChanged.connect(self.include_in_balancing_state_changed) self.connect(self.init_mem, SIGNAL("editingFinished()"), self.check_mem_changes) self.connect(self.max_mem_size, SIGNAL("editingFinished()"), self.check_mem_changes) self.drive_path_button.clicked.connect(self.drive_path_button_pressed) ###### firewall tab if self.tabWidget.isTabEnabled(self.tabs_indices["firewall"]): model = QubesFirewallRulesModel() model.set_vm(vm) self.set_fw_model(model) self.newRuleButton.clicked.connect(self.new_rule_button_pressed) self.editRuleButton.clicked.connect(self.edit_rule_button_pressed) self.deleteRuleButton.clicked.connect(self.delete_rule_button_pressed) self.policyDenyRadioButton.clicked.connect(self.policy_changed) self.policyAllowRadioButton.clicked.connect(self.policy_changed) ####### devices tab self.__init_devices_tab__() self.connect(self.dev_list, SIGNAL("selected_changed()"), self.devices_selection_changed) ####### services tab self.__init_services_tab__() self.add_srv_button.clicked.connect(self.__add_service__) self.remove_srv_button.clicked.connect(self.__remove_service__) ####### apps tab if self.tabWidget.isTabEnabled(self.tabs_indices["applications"]): self.app_list = MultiSelectWidget(self) self.apps_layout.addWidget(self.app_list) self.AppListManager = AppmenuSelectManager(self.vm, self.app_list) def reject(self): self.done(0) #needed not to close the dialog before applying changes def accept(self): pass def save_and_apply(self): thread_monitor = ThreadMonitor() thread = threading.Thread (target=self.__save_changes__, args=(thread_monitor,)) thread.daemon = True thread.start() progress = QProgressDialog( self.tr("Applying settings to {0}...").format(self.vm.name), "", 0, 0) progress.setCancelButton(None) progress.setModal(True) progress.show() while not thread_monitor.is_finished(): self.app.processEvents() time.sleep (0.1) progress.hide() if not thread_monitor.success: QMessageBox.warning(None, self.tr("Error while changing settings for {0}!").format(self.vm.name), self.tr("ERROR: {0}").format(thread_monitor.error_msg)) self.done(0) def __save_changes__(self, thread_monitor): self.qvm_collection.lock_db_for_writing() self.anything_changed = False ret = [] try: ret_tmp = self.__apply_basic_tab__() if len(ret_tmp) > 0: ret += ["Basic tab:"] + ret_tmp ret_tmp = self.__apply_advanced_tab__() if len(ret_tmp) > 0: ret += ["Advanced tab:"] + ret_tmp ret_tmp = self.__apply_devices_tab__() if len(ret_tmp) > 0: ret += ["Devices tab:"] + ret_tmp ret_tmp = self.__apply_services_tab__() if len(ret_tmp) > 0: ret += ["Sevices tab:"] + ret_tmp except Exception as ex: ret.append(self.tr('Error while saving changes: ') + str(ex)) if self.anything_changed == True: self.qvm_collection.save() self.qvm_collection.unlock_db() try: if self.tabWidget.isTabEnabled(self.tabs_indices["firewall"]): self.fw_model.apply_rules(self.policyAllowRadioButton.isChecked(), self.dnsCheckBox.isChecked(), self.icmpCheckBox.isChecked(), self.yumproxyCheckBox.isChecked(), self.tempFullAccess.isChecked(), self.tempFullAccessTime.value()) except Exception as ex: ret += [self.tr("Firewall tab:"), str(ex)] try: if self.tabWidget.isTabEnabled(self.tabs_indices["applications"]): self.AppListManager.save_appmenu_select_changes() except Exception as ex: ret += [self.tr("Applications tab:"), str(ex)] if len(ret) > 0 : thread_monitor.set_error_msg('\n'.join(ret)) thread_monitor.set_finished() def current_tab_changed(self, idx): if idx == self.tabs_indices["firewall"]: if self.vm.netvm is not None and not self.vm.netvm.is_proxyvm(): QMessageBox.warning(None, self.tr("VM configuration problem!"), self.tr("The '{vm}' AppVM is not network connected to a " "FirewallVM!

" "You may edit the '{vm}' VM firewall rules, but these " "will not take any effect until you connect it to " "a working Firewall VM.").format(vm=self.vm.name)) ######### basic tab def __init_basic_tab__(self): self.vmname.setText(self.vm.name) self.vmname.setValidator(QRegExpValidator(QRegExp("[a-zA-Z0-9-]*", Qt.CaseInsensitive), None)) self.vmname.setEnabled(not self.vm.is_running()) #self.qvm_collection.lock_db_for_reading() #self.qvm_collection.load() #self.qvm_collection.unlock_db() if self.vm.qid == 0: self.vmlabel.setVisible(False) else: self.vmlabel.setVisible(True) self.label_list = QubesVmLabels.values() self.label_list.sort(key=lambda l: l.index) self.label_idx = 0 for (i, label) in enumerate(self.label_list): if label == self.vm.label: self.label_idx = i self.vmlabel.insertItem(i, label.name) self.vmlabel.setItemIcon (i, QIcon(label.icon_path)) self.vmlabel.setCurrentIndex(self.label_idx) self.vmlabel.setEnabled(not self.vm.is_running()) if not self.vm.is_template() and self.vm.template is not None: template_vm_list = [vm for vm in self.qvm_collection.values() if not vm.internal and vm.is_template()] self.template_idx = -1 i = 0 for vm in template_vm_list: if not self.vm.is_template_compatible(vm): continue text = vm.name if vm is self.qvm_collection.get_default_template(): text += self.tr(" (default)") if vm.qid == self.vm.template.qid: self.template_idx = i text += self.tr(" (current)") self.template_name.insertItem(i, text) i += 1 self.template_name.setCurrentIndex(self.template_idx) self.template_name.setEnabled(not self.vm.is_running()) else: self.template_name.setEnabled(False) self.template_idx = -1 if (not self.vm.is_netvm() or self.vm.is_proxyvm()): netvm_list = [vm for vm in self.qvm_collection.values() if not vm.internal and vm.is_netvm() and vm.qid != 0] self.netvm_idx = -1 default_netvm = self.qvm_collection.get_default_netvm() if default_netvm is not None: text = "default (%s)" % default_netvm.name if self.vm.uses_default_netvm: text += self.tr(" (current)") self.netvm_idx = 0 self.netVM.insertItem(0, text) for (i, vm) in enumerate(netvm_list): text = vm.name if self.vm.netvm is not None and vm.qid == self.vm.netvm.qid and not self.vm.uses_default_netvm: self.netvm_idx = i+1 text += self.tr(" (current)") self.netVM.insertItem(i+1, text) none_text = "none" if self.vm.netvm is None: none_text += self.tr(" (current)") self.netvm_idx = len(netvm_list)+1 self.netVM.insertItem(len(netvm_list)+1, none_text) self.netVM.setCurrentIndex(self.netvm_idx) else: self.netVM.setEnabled(False) self.netvm_idx = -1 self.include_in_backups.setChecked(self.vm.include_in_backups) if hasattr(self.vm, 'debug'): self.run_in_debug_mode.setVisible(True) self.run_in_debug_mode.setChecked(self.vm.debug) else: self.run_in_debug_mode.setVisible(False) if hasattr(self.vm, 'autostart'): self.autostart_vm.setVisible(True) self.autostart_vm.setChecked(self.vm.autostart) else: self.autostart_vm.setVisible(False) if hasattr(self.vm, 'seamless_gui_mode'): self.seamless_gui.setVisible(True) self.seamless_gui.setChecked(self.vm.seamless_gui_mode) else: self.seamless_gui.setVisible(False) #type self.type_label.setText(self.vm.type) #installed by rpm text = "Yes" if self.vm.installed_by_rpm == True else "No" self.rpm_label.setText(text) #networking info if self.vm.is_networked(): self.networking_groupbox.setEnabled(True) self.ip_label.setText(self.vm.ip if self.vm.ip is not None else "none") self.netmask_label.setText(self.vm.netmask if self.vm.netmask is not None else "none") self.gateway_label.setText(self.vm.netvm.gateway if self.vm.netvm is not None else "none") else: self.networking_groupbox.setEnabled(False) #max priv storage self.priv_img_size = self.vm.get_private_img_sz()/1024/1024 self.max_priv_storage.setMinimum(self.priv_img_size) self.max_priv_storage.setValue(self.priv_img_size) self.root_img_size = self.vm.get_root_img_sz()/1024/1024 self.root_resize.setValue(self.root_img_size) self.root_resize.setMinimum(self.root_img_size) self.root_resize.setEnabled(hasattr(self.vm, 'resize_root_img') and not self.vm.template) self.root_resize_label.setEnabled(self.root_resize.isEnabled()) def __apply_basic_tab__(self): msg = [] # vmname changed vmname = str(self.vmname.text()) if self.vm.name != vmname: if self.vm.is_running(): msg.append(self.tr("Can't change name of a running VM.")) elif self.qvm_collection.get_vm_by_name(vmname) is not None: msg.append( self.tr("Can't change VM name - a VM named {0}" "already exists in the system!").format(vmname)) else: oldname = self.vm.name try: self.vm.set_name(vmname) self.anything_changed = True except Exception as ex: msg.append(str(ex)) #vm label changed try: if self.vmlabel.isVisible(): if self.vmlabel.currentIndex() != self.label_idx: label = self.label_list[self.vmlabel.currentIndex()] self.vm.label = label self.anything_changed = True except Exception as ex: msg.append(str(ex)) #vm template changed try: if self.template_name.currentIndex() != self.template_idx: new_template_name = str(self.template_name.currentText()) new_template_name = new_template_name.split(' ')[0] template_vm = self.qvm_collection.get_vm_by_name(new_template_name) assert (template_vm is not None and template_vm.qid in self.qvm_collection) assert template_vm.is_template() self.vm.template = template_vm self.anything_changed = True except Exception as ex: msg.append(str(ex)) #vm netvm changed try: if self.netVM.currentIndex() != self.netvm_idx: new_netvm_name = str(self.netVM.currentText()) new_netvm_name = new_netvm_name.split(' ')[0] uses_default_netvm = False if new_netvm_name == "default": new_netvm_name = self.qvm_collection.get_default_netvm().name uses_default_netvm = True if new_netvm_name == "none": netvm = None else: netvm = self.qvm_collection.get_vm_by_name(new_netvm_name) assert (netvm is None or (netvm is not None and netvm.qid in self.qvm_collection and netvm.is_netvm())) self.vm.netvm = netvm self.vm.uses_default_netvm = uses_default_netvm self.anything_changed = True except Exception as ex: msg.append(str(ex)) #include in backups try: if self.vm.include_in_backups != self.include_in_backups.isChecked(): self.vm.include_in_backups = self.include_in_backups.isChecked() self.anything_changed = True except Exception as ex: msg.append(str(ex)) #run_in_debug_mode try: if self.run_in_debug_mode.isVisible(): if self.vm.debug != self.run_in_debug_mode.isChecked(): self.vm.debug = self.run_in_debug_mode.isChecked() self.anything_changed = True except Exception as ex: msg.append(str(ex)) #autostart_vm try: if self.autostart_vm.isVisible(): if self.vm.autostart != self.autostart_vm.isChecked(): self.vm.autostart = self.autostart_vm.isChecked() self.anything_changed = True except Exception as ex: msg.append(str(ex)) #seamless_gui try: if self.seamless_gui.isVisible(): if self.vm.seamless_gui_mode != self.seamless_gui.isChecked(): self.vm.seamless_gui_mode = self.seamless_gui.isChecked() self.anything_changed = True except Exception as ex: msg.append(str(ex)) #max priv storage priv_size = self.max_priv_storage.value() if self.priv_img_size != priv_size: try: self.vm.resize_private_img(priv_size*1024*1024) self.anything_changed = True except Exception as ex: msg.append(str(ex)) #max sys storage sys_size = self.root_resize.value() if self.root_img_size != sys_size: try: self.vm.resize_root_img(sys_size*1024*1024) self.anything_changed = True except Exception as ex: msg.append(str(ex)) return msg def check_mem_changes(self): if self.max_mem_size.value() < self.init_mem.value(): QMessageBox.warning(None, self.tr("Warning!"), self.tr("Max memory can not be less than initial memory.
" "Setting max memory to equal initial memory.")) self.max_mem_size.setValue(self.init_mem.value()) # Linux specific limit: init memory must not be below max_mem_size/10.79 in order to allow scaling up to max_mem_size (or else "add_memory() failed: -17" problem) if self.init_mem.value() * 10 < self.max_mem_size.value(): QMessageBox.warning(None, self.tr("Warning!"), self.tr("Initial memory can not be less than one tenth " "Max memory.
Setting initial memory to the minimum " "allowed value.")) self.init_mem.setValue(self.max_mem_size.value() / 10) ######### advanced tab def __init_advanced_tab__(self): #mem/cpu qubes_memory = QubesHost().memory_total/1024 self.init_mem.setValue(int(self.vm.memory)) self.init_mem.setMaximum(qubes_memory) self.max_mem_size.setValue(int(self.vm.maxmem)) self.max_mem_size.setMaximum(qubes_memory) self.vcpus.setMinimum(1) self.vcpus.setMaximum(QubesHost().no_cpus) self.vcpus.setValue(int(self.vm.vcpus)) self.include_in_balancing.setEnabled(True) self.include_in_balancing.setChecked(self.vm.services['meminfo-writer']==True) if self.vm.type == "HVM": self.include_in_balancing.setChecked(False) self.include_in_balancing.setEnabled(False) self.max_mem_size.setEnabled(self.include_in_balancing.isChecked()) #paths self.dir_path.setText(self.vm.dir_path) self.config_path.setText(self.vm.conf_file) if self.vm.template is not None: self.root_img_path.setText(self.vm.template.root_img) elif self.vm.root_img is not None: self.root_img_path.setText(self.vm.root_img) else: self.root_img_path.setText("n/a") if self.vm.volatile_img is not None: self.volatile_img_path.setText(self.vm.volatile_img) else: self.volatile_img_path.setText('n/a') self.private_img_path.setText(self.vm.private_img) #kernel #in case VM is HVM if not hasattr(self.vm, "kernel"): self.kernel_groupbox.setVisible(False) else: self.kernel_groupbox.setVisible(True) # construct available kernels list text = "default (" + self.qvm_collection.get_default_kernel() +")" kernel_list = [text] for k in os.listdir(system_path["qubes_kernels_base_dir"]): kernel_list.append(k) kernel_list.append("none") self.kernel_idx = 0 # put available kernels to a combobox for (i, k) in enumerate(kernel_list): text = k # and mark the current choice if (text.startswith("default") and self.vm.uses_default_kernel) or ( self.vm.kernel == k and not self.vm.uses_default_kernel) or (k=="none" and self.vm.kernel==None): text += " (current)" self.kernel_idx = i self.kernel.insertItem(i,text) self.kernel.setCurrentIndex(self.kernel_idx) #kernel opts if self.vm.uses_default_kernelopts: self.kernel_opts.setText(self.vm.kernelopts + " (default)") else: self.kernel_opts.setText(self.vm.kernelopts) if not hasattr(self.vm, "drive"): self.drive_groupbox.setVisible(False) else: self.drive_groupbox.setVisible(True) self.drive_groupbox.setChecked(self.vm.drive is not None) self.drive_running_warning.setVisible(self.vm.is_running()) self.drive_type.addItems(["hd", "cdrom"]) self.drive_type.setCurrentIndex(0) vm_list = [vm for vm in self.qvm_collection.values() if not vm .internal and vm.qid != self.vm.qid] # default to dom0 (in case of nonexisting vm already set...) self.drive_domain_idx = 0 for (i, vm) in enumerate(sorted(vm_list, key=lambda v: v.name)): if vm.qid == 0: self.drive_domain_idx = i self.drive_domain.insertItem(i, vm.name) if self.vm.drive is not None: (drv_type, drv_domain, drv_path) = self.vm.drive.split(":") if drv_type == "cdrom": self.drive_type.setCurrentIndex(1) else: self.drive_type.setCurrentIndex(0) for i in xrange(self.drive_domain.count()): if drv_domain == self.drive_domain.itemText(i): self.drive_domain_idx = i self.drive_path.setText(drv_path) self.drive_domain.setCurrentIndex(self.drive_domain_idx) if not hasattr(self.vm, "dispvm_netvm"): self.other_groupbox.setVisible(False) else: self.other_groupbox.setVisible(True) netvm_list = [vm for vm in self.qvm_collection.values() if not vm.internal and vm.is_netvm() and vm.qid != 0] self.dispvm_netvm_idx = -1 text = "default (same as VM own NetVM)" if self.vm.uses_default_dispvm_netvm: text += self.tr(" (current)") self.dispvm_netvm_idx = 0 self.dispvm_netvm.insertItem(0, text) for (i, vm) in enumerate(netvm_list): text = vm.name if self.vm.dispvm_netvm is not None and vm.qid == \ self.vm.dispvm_netvm.qid and not \ self.vm.uses_default_dispvm_netvm: self.dispvm_netvm_idx = i+1 text += self.tr(" (current)") self.dispvm_netvm.insertItem(i+1, text) none_text = "none" if self.vm.dispvm_netvm is None: none_text += self.tr(" (current)") self.dispvm_netvm_idx = len(netvm_list)+1 self.dispvm_netvm.insertItem(len(netvm_list)+1, none_text) self.dispvm_netvm.setCurrentIndex(self.dispvm_netvm_idx) def __apply_advanced_tab__(self): msg = [] #mem/cpu try: if self.init_mem.value() != int(self.vm.memory): self.vm.memory = self.init_mem.value() self.anything_changed = True if self.max_mem_size.value() != int(self.vm.maxmem): self.vm.maxmem = self.max_mem_size.value() self.anything_changed = True if self.vcpus.value() != int(self.vm.vcpus): self.vm.vcpus = self.vcpus.value() self.anything_changed = True except Exception as ex: msg.append(str(ex)) #include_in_memory_balancing applied in services tab #in case VM is not Linux if hasattr(self.vm, "kernel") and self.kernel_groupbox.isVisible(): try: if self.kernel.currentIndex() != self.kernel_idx: new_kernel = str(self.kernel.currentText()) new_kernel = new_kernel.split(' ')[0] if new_kernel == "default": kernel = self.qvm_collection.get_default_kernel() self.vm.uses_default_kernel = True elif new_kernel == "none": kernel = None self.vm.uses_default_kernel = False else: kernel = new_kernel self.vm.uses_default_kernel = False self.vm.kernel = kernel self.anything_changed = True except Exception as ex: msg.append(str(ex)) if hasattr(self.vm, "drive") and self.drive_groupbox.isVisible(): try: if not self.drive_groupbox.isChecked(): if self.vm.drive != None: self.vm.drive = None self.anything_changed = True else: new_domain = str(self.drive_domain.currentText()) if self.drive_domain.currentIndex() == self.drive_domain_idx: # strip "(current)" new_domain = new_domain.split(' ')[0] drive = "%s:%s:%s" % ( str(self.drive_type.currentText()), new_domain, str(self.drive_path.text()) ) if self.vm.drive != drive: self.vm.drive = drive self.anything_changed = True except Exception as ex: msg.append(str(ex)) #vm dispvm_netvm changed try: print self.dispvm_netvm.currentIndex() if self.dispvm_netvm.currentIndex() != self.dispvm_netvm_idx: new_dispvm_netvm_name = str(self.dispvm_netvm.currentText()) new_dispvm_netvm_name = new_dispvm_netvm_name.split(' ')[0] uses_default_dispvm_netvm = False if new_dispvm_netvm_name == "default": uses_default_dispvm_netvm = True if new_dispvm_netvm_name == "none": dispvm_netvm = None else: dispvm_netvm = self.qvm_collection.get_vm_by_name( new_dispvm_netvm_name) assert (dispvm_netvm is None or (dispvm_netvm.qid in self.qvm_collection and dispvm_netvm.is_netvm())) if uses_default_dispvm_netvm: self.vm.uses_default_dispvm_netvm = True else: self.vm.uses_default_dispvm_netvm = False self.vm.dispvm_netvm = dispvm_netvm self.anything_changed = True except Exception as ex: msg.append(str(ex)) return msg def drive_path_button_pressed(self): if str(self.drive_domain.currentText()) in ["dom0", "dom0 (current)"]: file_dialog = QFileDialog() file_dialog.setReadOnly(True) new_path = file_dialog.getOpenFileName(self, "Select drive image", str(self.drive_path.text())) else: drv_domain = str(self.drive_domain.currentText()) if drv_domain.count("(current)") > 0: drv_domain = drv_domain.split(' ')[0] backend_vm = self.qvm_collection.get_vm_by_name(drv_domain) if backend_vm: new_path = get_path_for_vm(backend_vm, "qubes.SelectFile") if new_path: self.drive_path.setText(new_path) ######## devices tab def __init_devices_tab__(self): self.dev_list = MultiSelectWidget(self) self.dev_list.add_all_button.setVisible(False) self.devices_layout.addWidget(self.dev_list) devs = [] lspci = subprocess.Popen(["/usr/sbin/lspci",], stdout = subprocess.PIPE) for dev in lspci.stdout: devs.append( (dev.rstrip(), dev.split(' ')[0]) ) class DevListWidgetItem(QListWidgetItem): def __init__(self, name, slot, parent = None): super(DevListWidgetItem, self).__init__(name, parent) self.slot = slot self.Type for d in devs: if d[1] in self.vm.pcidevs: self.dev_list.selected_list.addItem( DevListWidgetItem(d[0], d[1])) else: self.dev_list.available_list.addItem( DevListWidgetItem(d[0], d[1])) if self.dev_list.selected_list.count() > 0 and self.include_in_balancing.isChecked(): self.dmm_warning_adv.show() self.dmm_warning_dev.show() else: self.dmm_warning_adv.hide() self.dmm_warning_dev.hide() if self.vm.is_running(): self.dev_list.setEnabled(False) self.turn_off_vm_to_modify_devs.setVisible(True) else: self.dev_list.setEnabled(True) self.turn_off_vm_to_modify_devs.setVisible(False) def __apply_devices_tab__(self): msg = [] sth_changed = False added = [] try: for i in range(self.dev_list.selected_list.count()): item = self.dev_list.selected_list.item(i) if item.slot not in self.vm.pcidevs: added.append(item) if self.dev_list.selected_list.count() - len(added) < len(self.vm.pcidevs): #sth removed sth_changed = True elif len(added) > 0: sth_changed = True if sth_changed == True: pcidevs = [] for i in range(self.dev_list.selected_list.count()): slot = self.dev_list.selected_list.item(i).slot pcidevs.append(slot) self.vm.pcidevs = pcidevs self.anything_changed = True except Exception as ex: msg.append(str(ex)) return msg def include_in_balancing_state_changed(self, state): for r in range (self.services_list.count()): item = self.services_list.item(r) if str(item.text()) == 'meminfo-writer': item.setCheckState(state) break if self.dev_list.selected_list.count() > 0: if state == QtCore.Qt.Checked: self.dmm_warning_adv.show() self.dmm_warning_dev.show() else: self.dmm_warning_adv.hide() self.dmm_warning_dev.hide() self.max_mem_size.setEnabled(self.include_in_balancing.isChecked()) def devices_selection_changed(self): if self.include_in_balancing.isChecked(): if self.dev_list.selected_list.count() > 0 : self.dmm_warning_adv.show() self.dmm_warning_dev.show() else: self.dmm_warning_adv.hide() self.dmm_warning_dev.hide() ######## services tab def __init_services_tab__(self): for srv in self.vm.services: item = QListWidgetItem(srv) if self.vm.services[srv] == True: item.setCheckState(QtCore.Qt.Checked) else: item.setCheckState(QtCore.Qt.Unchecked) self.services_list.addItem(item) self.connect(self.services_list, SIGNAL("itemClicked(QListWidgetItem *)"), self.services_item_clicked) self.new_srv_dict = copy(self.vm.services) def __add_service__(self): srv = str(self.service_line_edit.text()).strip() if srv != "": if srv in self.new_srv_dict: QMessageBox.information(None, "", self.tr("Service already on the list!")) else: item = QListWidgetItem(srv) item.setCheckState(QtCore.Qt.Checked) self.services_list.addItem(item) self.new_srv_dict[srv] = True def __remove_service__(self): item = self.services_list.currentItem() if not item: return if str(item.text()) == 'meminfo-writer': QMessageBox.information(None, self.tr("Service can not be removed"), self.tr("Service meminfo-writer can not be removed from the list.")) return row = self.services_list.currentRow() item = self.services_list.takeItem(row) del self.new_srv_dict[str(item.text())] def services_item_clicked(self, item): if str(item.text()) == 'meminfo-writer': if item.checkState() == QtCore.Qt.Checked: if not self.include_in_balancing.isChecked(): self.include_in_balancing.setChecked(True) elif item.checkState() == QtCore.Qt.Unchecked: if self.include_in_balancing.isChecked(): self.include_in_balancing.setChecked(False) def __apply_services_tab__(self): msg = [] try: for r in range (self.services_list.count()): item = self.services_list.item(r) self.new_srv_dict[str(item.text())] = (item.checkState() == QtCore.Qt.Checked) balancing_was_checked = (self.vm.services['meminfo-writer']==True) balancing_is_checked = self.include_in_balancing.isChecked() meminfo_writer_checked = (self.new_srv_dict['meminfo-writer'] == True) if balancing_is_checked != meminfo_writer_checked: if balancing_is_checked != balancing_was_checked: self.new_srv_dict['meminfo-writer'] = balancing_is_checked if self.new_srv_dict != self.vm.services: self.vm.services = self.new_srv_dict self.anything_changed = True except Exception as ex: msg.append(str(ex)) return msg ######### firewall tab related def set_fw_model(self, model): self.fw_model = model self.rulesTreeView.setModel(model) self.rulesTreeView.header().setResizeMode(QHeaderView.ResizeToContents) self.rulesTreeView.header().setResizeMode(0, QHeaderView.Stretch) self.set_allow(model.allow) self.dnsCheckBox.setChecked(model.allowDns) self.icmpCheckBox.setChecked(model.allowIcmp) self.yumproxyCheckBox.setChecked(model.allowYumProxy) if model.tempFullAccessExpireTime: self.tempFullAccess.setChecked(True) self.tempFullAccessTime.setValue( (model.tempFullAccessExpireTime - int(datetime.datetime.now().strftime("%s")))/60) def set_allow(self, allow): self.policyAllowRadioButton.setChecked(allow) self.policyDenyRadioButton.setChecked(not allow) self.policy_changed(allow) def policy_changed(self, checked): self.tempFullAccessWidget.setEnabled(self.policyDenyRadioButton.isChecked()) def new_rule_button_pressed(self): dialog = NewFwRuleDlg() self.run_rule_dialog(dialog) def edit_rule_button_pressed(self): dialog = NewFwRuleDlg() dialog.set_ok_enabled(True) selected = self.rulesTreeView.selectedIndexes() if len(selected) > 0: row = self.rulesTreeView.selectedIndexes().pop().row() address = self.fw_model.get_column_string(0, row).replace(' ', '') dialog.addressComboBox.setItemText(0, address) dialog.addressComboBox.setCurrentIndex(0) service = self.fw_model.get_column_string(1, row) if service == "any": service = "" dialog.serviceComboBox.setItemText(0, service) dialog.serviceComboBox.setCurrentIndex(0) protocol = self.fw_model.get_column_string(2, row) if protocol == "tcp": dialog.tcp_radio.setChecked(True) elif protocol == "udp": dialog.udp_radio.setChecked(True) else: dialog.any_radio.setChecked(True) self.run_rule_dialog(dialog, row) def delete_rule_button_pressed(self): for i in set([index.row() for index in self.rulesTreeView.selectedIndexes()]): self.fw_model.removeChild(i) def run_rule_dialog(self, dialog, row = None): if dialog.exec_(): address = str(dialog.addressComboBox.currentText()) service = str(dialog.serviceComboBox.currentText()) port = None port2 = None unmask = address.split("/", 1) if len(unmask) == 2: address = unmask[0] netmask = int(unmask[1]) else: netmask = 32 if address == "*": address = "0.0.0.0" netmask = 0 if dialog.any_radio.isChecked(): protocol = "any" port = 0 else: if dialog.tcp_radio.isChecked(): protocol = "tcp" elif dialog.udp_radio.isChecked(): protocol = "udp" else: protocol = "any" try: range = service.split("-", 1) if len(range) == 2: port = int(range[0]) port2 = int(range[1]) else: port = int(service) except (TypeError, ValueError) as ex: port = self.fw_model.get_service_port(service) if port is not None: if port2 is not None and port2 <= port: QMessageBox.warning(None, self.tr("Invalid service ports range"), self.tr("Port {0} is lower than port {1}.").format( port2, port)) else: item = {"address": address, "netmask": netmask, "portBegin": port, "portEnd": port2, "proto": protocol, } if row is not None: self.fw_model.setChild(row, item) else: self.fw_model.appendChild(item) else: QMessageBox.warning(None, self.tr("Invalid service name"), self.tr("Service '{0}' is unknown.").format(service)) # Bases on the original code by: # Copyright (c) 2002-2007 Pascal Varet def handle_exception( exc_type, exc_value, exc_traceback ): import sys import os.path import traceback filename, line, dummy, dummy = traceback.extract_tb( exc_traceback ).pop() filename = os.path.basename( filename ) error = "%s: %s" % ( exc_type.__name__, exc_value ) strace = "" stacktrace = traceback.extract_tb( exc_traceback ) while len(stacktrace) > 0: (filename, line, func, txt) = stacktrace.pop() strace += "----\n" strace += "line: %s\n" %txt strace += "func: %s\n" %func strace += "line no.: %d\n" %line strace += "file: %s\n" %filename msg_box = QMessageBox() msg_box.setDetailedText(strace) msg_box.setIcon(QMessageBox.Critical) msg_box.setWindowTitle( "Houston, we have a problem...") msg_box.setText("Whoops. A critical error has occured. This is most likely a bug " "in Qubes Manager.

" "%s" % error + "
at line %d
of file %s.

" % ( line, filename )) msg_box.exec_() def main(): global qubes_host qubes_host = QubesHost() global app app = QApplication(sys.argv) app.setOrganizationName("The Qubes Project") app.setOrganizationDomain("http://qubes-os.org") app.setApplicationName("Qubes VM Settings") sys.excepthook = handle_exception qvm_collection = QubesVmCollection() qvm_collection.lock_db_for_reading() qvm_collection.load() qvm_collection.unlock_db() vm = None tab = "basic" if len(sys.argv) > 1: vm = qvm_collection.get_vm_by_name(sys.argv[1]) if vm is None or vm.qid not in qvm_collection: QMessageBox.critical(None, "Qubes VM Settings Error", "A VM with the name '{0}' does not exist in the system.".format(sys.argv[1])) sys.exit(1) if len(sys.argv) > 2: tab_arg = sys.argv[2] print tab_arg if tab_arg in VMSettingsWindow.tabs_indices: tab = tab_arg else: QMessageBox.warning(None, "Qubes VM Settings Error", "There is no such tab as '{0}'. Opening default tab instead.".format(tab_arg)) else: vms_list = [vm.name for vm in qvm_collection.values() if (vm.is_appvm() or vm.is_template())] vmname = QInputDialog.getItem(None, "Select VM", "Select VM:", vms_list, editable = False) if not vmname[1]: sys.exit(1) vm = qvm_collection.get_vm_by_name(vmname[0]) global settings_window settings_window = VMSettingsWindow(vm, app, qvm_collection, tab) settings_window.show() app.exec_() app.exit() if __name__ == "__main__": main() # vim:sw=4:et: