2bfb27af56
Forbid root user creation as it could lead to a system without any non-priviledged user accouts. Fixes: <https://issues.guix.gnu.org/54666>. * gnu/installer/newt/user.scm (run-user-add-page): Forbid it.
291 lines
12 KiB
Scheme
291 lines
12 KiB
Scheme
;;; GNU Guix --- Functional package management for GNU
|
|
;;; Copyright © 2018 Mathieu Othacehe <m.othacehe@gmail.com>
|
|
;;; Copyright © 2019, 2020 Ludovic Courtès <ludo@gnu.org>
|
|
;;; Copyright © 2019 Tobias Geerinckx-Rice <me@tobias.gr>
|
|
;;;
|
|
;;; This file is part of GNU Guix.
|
|
;;;
|
|
;;; GNU Guix is free software; you can redistribute it and/or modify it
|
|
;;; under the terms of the GNU General Public License as published by
|
|
;;; the Free Software Foundation; either version 3 of the License, or (at
|
|
;;; your option) any later version.
|
|
;;;
|
|
;;; GNU Guix is distributed in the hope that it will be useful, but
|
|
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
;;; GNU General Public License for more details.
|
|
;;;
|
|
;;; You should have received a copy of the GNU General Public License
|
|
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
(define-module (gnu installer newt user)
|
|
#:use-module (gnu installer user)
|
|
#:use-module (gnu installer newt page)
|
|
#:use-module (gnu installer newt utils)
|
|
#:use-module (gnu installer utils)
|
|
#:use-module (guix i18n)
|
|
#:use-module (newt)
|
|
#:use-module (ice-9 match)
|
|
#:use-module (ice-9 receive)
|
|
#:use-module (srfi srfi-1)
|
|
#:use-module (srfi srfi-26)
|
|
#:use-module (srfi srfi-34)
|
|
#:use-module (srfi srfi-35)
|
|
#:export (run-user-page))
|
|
|
|
(define* (run-user-add-page #:key (name "") (real-name "")
|
|
(home-directory ""))
|
|
"Run a form to enter the user name, home directory, and password. Use NAME,
|
|
REAL-NAME, and HOME-DIRECTORY as the initial values in the form."
|
|
(define (pad-label label)
|
|
(string-pad-right label 25))
|
|
|
|
(define (root-account? name)
|
|
(string=? name "root"))
|
|
|
|
(let* ((label-name
|
|
(make-label -1 -1 (pad-label (G_ "Name"))))
|
|
(label-real-name
|
|
(make-label -1 -1 (pad-label (G_ "Real name"))))
|
|
(label-home-directory
|
|
(make-label -1 -1 (pad-label (G_ "Home directory"))))
|
|
(label-password
|
|
(make-label -1 -1 (pad-label (G_ "Password"))))
|
|
(entry-width 35)
|
|
(entry-name (make-entry -1 -1 entry-width
|
|
#:initial-value name))
|
|
(entry-real-name (make-entry -1 -1 entry-width
|
|
#:initial-value real-name))
|
|
(entry-home-directory (make-entry -1 -1 entry-width
|
|
#:initial-value home-directory))
|
|
(password-visible-cb
|
|
(make-checkbox -1 -1 (G_ "Show") #\space "x "))
|
|
(entry-password (make-entry -1 -1 entry-width
|
|
#:flags (logior FLAG-PASSWORD
|
|
FLAG-SCROLL)))
|
|
(entry-grid (make-grid 3 5))
|
|
(button-grid (make-grid 1 1))
|
|
(ok-button (make-button -1 -1 (G_ "OK")))
|
|
(grid (make-grid 1 2))
|
|
(title (G_ "User creation"))
|
|
(set-entry-grid-field
|
|
(cut set-grid-field entry-grid <> <> GRID-ELEMENT-COMPONENT <>))
|
|
(form (make-form)))
|
|
|
|
(set-entry-grid-field 0 0 label-name)
|
|
(set-entry-grid-field 1 0 entry-name)
|
|
(set-entry-grid-field 0 1 label-real-name)
|
|
(set-entry-grid-field 1 1 entry-real-name)
|
|
(set-entry-grid-field 0 2 label-home-directory)
|
|
(set-entry-grid-field 1 2 entry-home-directory)
|
|
(set-entry-grid-field 0 3 label-password)
|
|
(set-entry-grid-field 1 3 entry-password)
|
|
|
|
(set-grid-field entry-grid
|
|
2 3
|
|
GRID-ELEMENT-COMPONENT
|
|
password-visible-cb
|
|
#:pad-left 1)
|
|
|
|
(set-grid-field button-grid 0 0 GRID-ELEMENT-COMPONENT ok-button)
|
|
|
|
(add-component-callback
|
|
entry-name
|
|
(lambda ()
|
|
(set-entry-text entry-home-directory
|
|
(string-append "/home/" (entry-value entry-name)))
|
|
|
|
(when (string-null? (entry-value entry-real-name))
|
|
(set-entry-text entry-real-name
|
|
(string-titlecase (entry-value entry-name))))))
|
|
|
|
(add-component-callback
|
|
password-visible-cb
|
|
(lambda ()
|
|
(set-entry-flags entry-password
|
|
FLAG-PASSWORD
|
|
FLAG-ROLE-TOGGLE)))
|
|
|
|
(add-components-to-form form
|
|
label-name label-real-name
|
|
label-home-directory label-password
|
|
entry-name entry-real-name
|
|
entry-home-directory entry-password
|
|
password-visible-cb
|
|
ok-button)
|
|
|
|
(make-wrapped-grid-window (vertically-stacked-grid
|
|
GRID-ELEMENT-SUBGRID entry-grid
|
|
GRID-ELEMENT-SUBGRID button-grid)
|
|
title)
|
|
|
|
(let ((error-empty-field-page
|
|
(lambda ()
|
|
(run-error-page (G_ "Empty inputs are not allowed.")
|
|
(G_ "Empty input"))))
|
|
(error-root-page
|
|
(lambda ()
|
|
(run-error-page (G_ "Root account is automatically created.")
|
|
(G_ "Root account")))))
|
|
(receive (exit-reason argument)
|
|
(run-form form)
|
|
(dynamic-wind
|
|
(const #t)
|
|
(lambda ()
|
|
(when (eq? exit-reason 'exit-component)
|
|
(cond
|
|
((components=? argument ok-button)
|
|
(let ((name (entry-value entry-name))
|
|
(real-name (entry-value entry-real-name))
|
|
(home-directory (entry-value entry-home-directory))
|
|
(password (entry-value entry-password)))
|
|
(cond
|
|
;; Empty field.
|
|
((or (string=? name "")
|
|
(string=? home-directory ""))
|
|
(error-empty-field-page)
|
|
(run-user-add-page))
|
|
;; Reject root account.
|
|
((root-account? name)
|
|
(error-root-page)
|
|
(run-user-add-page))
|
|
(else
|
|
(let ((password (confirm-password password)))
|
|
(if password
|
|
(user
|
|
(name name)
|
|
(real-name real-name)
|
|
(home-directory home-directory)
|
|
(password (make-secret password)))
|
|
(run-user-add-page #:name name
|
|
#:real-name real-name
|
|
#:home-directory
|
|
home-directory))))))))))
|
|
(lambda ()
|
|
(destroy-form-and-pop form)))))))
|
|
|
|
(define* (confirm-password password #:optional (try-again (const #f)))
|
|
"Ask the user to confirm PASSWORD, a possibly empty string. Call TRY-AGAIN,
|
|
a thunk, if the confirmation doesn't match PASSWORD, and return its result."
|
|
(define confirmation
|
|
(run-input-page (G_ "Please confirm the password.")
|
|
(G_ "Password confirmation required")
|
|
#:allow-empty-input? #t
|
|
#:input-visibility-checkbox? #t))
|
|
|
|
(if (string=? password confirmation)
|
|
password
|
|
(begin
|
|
(run-error-page
|
|
(G_ "Password mismatch, please try again.")
|
|
(G_ "Password error"))
|
|
(try-again))))
|
|
|
|
(define (run-root-password-page)
|
|
(define password
|
|
;; TRANSLATORS: Leave "root" untranslated: it refers to the name of the
|
|
;; system administrator account.
|
|
(run-input-page (G_ "Please choose a password for the system \
|
|
administrator (\"root\").")
|
|
(G_ "System administrator password")
|
|
#:input-visibility-checkbox? #t))
|
|
|
|
(confirm-password password run-root-password-page))
|
|
|
|
(define (run-user-page)
|
|
(define (run users)
|
|
(let* ((listbox (make-listbox
|
|
-1 -1 10
|
|
(logior FLAG-SCROLL FLAG-BORDER)))
|
|
(info-textbox
|
|
(make-reflowed-textbox
|
|
-1 -1
|
|
(G_ "Please add at least one user to system\
|
|
using the 'Add' button.")
|
|
40 #:flags FLAG-BORDER))
|
|
(add-button (make-compact-button -1 -1 (G_ "Add")))
|
|
(del-button (make-compact-button -1 -1 (G_ "Delete")))
|
|
(listbox-button-grid
|
|
(apply
|
|
vertically-stacked-grid
|
|
GRID-ELEMENT-COMPONENT add-button
|
|
`(,@(if (null? users)
|
|
'()
|
|
(list GRID-ELEMENT-COMPONENT del-button)))))
|
|
(ok-button (make-button -1 -1 (G_ "OK")))
|
|
(exit-button (make-button -1 -1 (G_ "Exit")))
|
|
(title (G_ "User creation"))
|
|
(grid
|
|
(vertically-stacked-grid
|
|
GRID-ELEMENT-COMPONENT info-textbox
|
|
GRID-ELEMENT-SUBGRID (horizontal-stacked-grid
|
|
GRID-ELEMENT-COMPONENT listbox
|
|
GRID-ELEMENT-SUBGRID listbox-button-grid)
|
|
GRID-ELEMENT-SUBGRID (horizontal-stacked-grid
|
|
GRID-ELEMENT-COMPONENT ok-button
|
|
GRID-ELEMENT-COMPONENT exit-button)))
|
|
(sorted-users (sort users (lambda (a b)
|
|
(string<= (user-name a)
|
|
(user-name b)))))
|
|
(listbox-elements
|
|
(map
|
|
(lambda (user)
|
|
`((key . ,(append-entry-to-listbox listbox
|
|
(user-name user)))
|
|
(user . ,user)))
|
|
sorted-users))
|
|
(form (make-form)))
|
|
|
|
|
|
(add-form-to-grid grid form #t)
|
|
(make-wrapped-grid-window grid title)
|
|
(if (null? users)
|
|
(set-current-component form add-button)
|
|
(set-current-component form ok-button))
|
|
|
|
(receive (exit-reason argument)
|
|
(run-form-with-clients form '(add-users))
|
|
(dynamic-wind
|
|
(const #t)
|
|
(lambda ()
|
|
(match exit-reason
|
|
('exit-component
|
|
(cond
|
|
((components=? argument add-button)
|
|
(run (cons (run-user-add-page) users)))
|
|
((components=? argument del-button)
|
|
(let* ((current-user-key (current-listbox-entry listbox))
|
|
(users
|
|
(map (cut assoc-ref <> 'user)
|
|
(remove (lambda (element)
|
|
(equal? (assoc-ref element 'key)
|
|
current-user-key))
|
|
listbox-elements))))
|
|
(run users)))
|
|
((components=? argument ok-button)
|
|
(when (null? users)
|
|
(run-error-page (G_ "Please create at least one user.")
|
|
(G_ "No user"))
|
|
(run users))
|
|
(reverse users))
|
|
((components=? argument exit-button)
|
|
(abort-to-prompt 'installer-step 'abort))))
|
|
('exit-fd-ready
|
|
;; Read the complete user list at once.
|
|
(match argument
|
|
((('user ('name names) ('real-name real-names)
|
|
('home-directory homes) ('password passwords))
|
|
..1)
|
|
(map (lambda (name real-name home password)
|
|
(user (name name) (real-name real-name)
|
|
(home-directory home)
|
|
(password (make-secret password))))
|
|
names real-names homes passwords))))))
|
|
(lambda ()
|
|
(destroy-form-and-pop form))))))
|
|
|
|
;; Add a "root" user simply to convey the root password.
|
|
(cons (user (name "root")
|
|
(home-directory "/root")
|
|
(password (make-secret (run-root-password-page))))
|
|
(run '())))
|