mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-01-21 07:55:00 +00:00
ed519187c5
- Since a new option has been introduced the privacy app. Tests: - When the patch is applied and service is restart, privacy app's setup is run again and notification is shown when it has already been dismissed. Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org> Reviewed-by: Benedek Nagy <contact@nbenedek.me>
129 lines
4.2 KiB
Python
129 lines
4.2 KiB
Python
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
"""FreedomBox app to the Privacy app."""
|
|
|
|
import logging
|
|
import subprocess
|
|
from typing import Literal
|
|
|
|
from django.utils.translation import gettext_lazy as _
|
|
from django.utils.translation import gettext_noop
|
|
|
|
from plinth import app as app_module
|
|
from plinth import kvstore, menu
|
|
from plinth.config import DropinConfigs
|
|
from plinth.modules.backups.components import BackupRestore
|
|
from plinth.package import Packages
|
|
|
|
from . import manifest, privileged
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
_description = [_('Manage system-wide privacy settings.')]
|
|
|
|
|
|
class PrivacyApp(app_module.App):
|
|
"""FreedomBox app for Privacy."""
|
|
|
|
app_id = 'privacy'
|
|
|
|
_version = 4
|
|
|
|
can_be_disabled = False
|
|
|
|
def __init__(self) -> None:
|
|
"""Create components for the app."""
|
|
super().__init__()
|
|
|
|
info = app_module.Info(app_id=self.app_id, version=self._version,
|
|
is_essential=True, name=_('Privacy'),
|
|
icon='fa-eye-slash', description=_description,
|
|
manual_page=None, tags=manifest.tags)
|
|
self.add(info)
|
|
|
|
menu_item = menu.Menu('menu-privacy', info.name, info.icon, info.tags,
|
|
'privacy:index', parent_url_name='system:data',
|
|
order=10)
|
|
self.add(menu_item)
|
|
|
|
packages = Packages('packages-privacy', ['popularity-contest', 'gpg'])
|
|
self.add(packages)
|
|
|
|
dropin_configs = DropinConfigs('dropin-configs-privacy', [
|
|
'/etc/dpkg/origins/freedombox',
|
|
])
|
|
self.add(dropin_configs)
|
|
|
|
backup_restore = BackupRestore('backup-restore-privacy',
|
|
**manifest.backup)
|
|
self.add(backup_restore)
|
|
|
|
def setup(self, old_version):
|
|
"""Install and configure the app."""
|
|
super().setup(old_version)
|
|
privileged.setup()
|
|
if old_version == 0:
|
|
privileged.set_configuration(enable_popcon=True)
|
|
|
|
if old_version < 4:
|
|
_show_privacy_notification()
|
|
|
|
|
|
def _show_privacy_notification():
|
|
"""Show a notification asking user to review privacy settings."""
|
|
from plinth.notification import Notification
|
|
message = gettext_noop(
|
|
'Please update privacy settings to match your preferences.')
|
|
data = {
|
|
'app_name': 'translate:' + gettext_noop('Privacy'),
|
|
'app_icon': 'fa-eye-slash'
|
|
}
|
|
title = gettext_noop('Review privacy setting')
|
|
actions_ = [{
|
|
'type': 'link',
|
|
'class': 'primary',
|
|
'text': gettext_noop('Go to {app_name}'),
|
|
'url': 'privacy:index'
|
|
}, {
|
|
'type': 'dismiss'
|
|
}]
|
|
Notification.update_or_create(id='privacy-review', app_id='privacy',
|
|
severity='info', title=title,
|
|
message=message, actions=actions_, data=data,
|
|
group='admin', dismissed=False)
|
|
|
|
|
|
def get_ip_lookup_url():
|
|
"""Return the URL to use to lookup external IP address."""
|
|
return kvstore.get_default('ip_lookup_url',
|
|
'https://ddns.freedombox.org/ip/')
|
|
|
|
|
|
def set_ip_lookup_url(ip_lookup_url: str):
|
|
"""Set the URL to use to lookup external IP address."""
|
|
kvstore.set('ip_lookup_url', ip_lookup_url)
|
|
|
|
|
|
def lookup_public_address(ip_type: Literal['ipv4', 'ipv6']) -> str:
|
|
"""Return the IP of this server/network by querying an external server."""
|
|
lookup_url = get_ip_lookup_url()
|
|
if not lookup_url:
|
|
raise RuntimeError('Lookup URL not configured')
|
|
|
|
ip_option = '-6' if ip_type == 'ipv6' else '-4'
|
|
try:
|
|
ip_address = subprocess.check_output([
|
|
'wget', ip_option, '-o', '/dev/null', '-t', '3', '-T', '3', '-O',
|
|
'-', lookup_url
|
|
])
|
|
return ip_address.decode().strip().lower()
|
|
except subprocess.CalledProcessError as exception:
|
|
logger.warning('Unable to lookup external IP with URL %s: %s',
|
|
lookup_url, exception)
|
|
message_map = {
|
|
4: 'Network failure',
|
|
5: 'SSL error',
|
|
8: 'Server reponded with error'
|
|
}
|
|
raise RuntimeError(
|
|
message_map.get(exception.returncode, 'Unknown error'))
|