4a41f0b3e5
The Oslo libraries have moved all of their code out of the 'oslo' namespace package into per-library packages. The namespace package was retained during kilo for backwards compatibility, but will be removed by the liberty-2 milestone. This change removes the use of the namespace package, replacing it with the new package names. The patches in the libraries will be put on hold until application patches have landed, or L2, whichever comes first. At that point, new versions of the libraries without namespace packages will be released as a major version update. Please merge this patch, or an equivalent, before L2 to avoid problems with those library releases. Blueprint: remove-namespace-packages https://blueprints.launchpad.net/oslo-incubator/+spec/remove-namespace-packages Change-Id: If51059c31c82d5235e2ae21143911b5561783ca6
103 lines
3.6 KiB
Python
103 lines
3.6 KiB
Python
# Copyright (c) 2014 Hewlett-Packard Development Company, L.P.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
# implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
import json
|
|
import locale
|
|
import os
|
|
import stat
|
|
|
|
from oslo_config import cfg
|
|
|
|
from os_collect_config import exc
|
|
from os_collect_config.openstack.common import log
|
|
|
|
LOCAL_DEFAULT_PATHS = ['/var/lib/os-collect-config/local-data']
|
|
CONF = cfg.CONF
|
|
|
|
opts = [
|
|
cfg.MultiStrOpt('path',
|
|
default=LOCAL_DEFAULT_PATHS,
|
|
help='Local directory to scan for Metadata files.')
|
|
]
|
|
name = 'local'
|
|
logger = log.getLogger(__name__)
|
|
|
|
|
|
def _dest_looks_insecure(local_path):
|
|
'''We allow group writable so owner can let others write.'''
|
|
looks_insecure = False
|
|
uid = os.getuid()
|
|
st = os.stat(local_path)
|
|
if uid != st[stat.ST_UID]:
|
|
logger.error('%s is owned by another user. This is a'
|
|
' security risk.' % local_path)
|
|
looks_insecure = True
|
|
if st.st_mode & stat.S_IWOTH:
|
|
logger.error('%s is world writable. This is a security risk.'
|
|
% local_path)
|
|
looks_insecure = True
|
|
return looks_insecure
|
|
|
|
|
|
class Collector(object):
|
|
def __init__(self, requests_impl=None):
|
|
pass
|
|
|
|
def collect(self):
|
|
if len(cfg.CONF.local.path) == 0:
|
|
raise exc.LocalMetadataNotAvailable
|
|
final_content = []
|
|
for local_path in cfg.CONF.local.path:
|
|
try:
|
|
os.stat(local_path)
|
|
except OSError:
|
|
logger.warn("%s not found. Skipping", local_path)
|
|
continue
|
|
if _dest_looks_insecure(local_path):
|
|
raise exc.LocalMetadataNotAvailable
|
|
for data_file in os.listdir(local_path):
|
|
if data_file.startswith('.'):
|
|
continue
|
|
data_file = os.path.join(local_path, data_file)
|
|
if os.path.isdir(data_file):
|
|
continue
|
|
st = os.stat(data_file)
|
|
if st.st_mode & stat.S_IWOTH:
|
|
logger.error(
|
|
'%s is world writable. This is a security risk.' %
|
|
data_file)
|
|
raise exc.LocalMetadataNotAvailable
|
|
with open(data_file) as metadata:
|
|
try:
|
|
value = json.loads(metadata.read())
|
|
except ValueError as e:
|
|
logger.error(
|
|
'%s is not valid JSON (%s)' % (data_file, e))
|
|
raise exc.LocalMetadataNotAvailable
|
|
basename = os.path.basename(data_file)
|
|
final_content.append((basename, value))
|
|
if not final_content:
|
|
logger.warn('No local metadata found (%s)' %
|
|
cfg.CONF.local.path)
|
|
|
|
# Now sort specifically by C locale
|
|
def locale_aware_by_first_item(data):
|
|
return locale.strxfrm(data[0])
|
|
save_locale = locale.getdefaultlocale()
|
|
locale.setlocale(locale.LC_ALL, 'C')
|
|
sorted_content = sorted(final_content, key=locale_aware_by_first_item)
|
|
locale.setlocale(locale.LC_ALL, save_locale)
|
|
return sorted_content
|