mirror of
https://git.proxmox.com/git/fwupd
synced 2025-06-14 13:43:53 +00:00
ae0c3fe38a
We tried to solve this by matching the org.fwupd.hsi AppStream ID, but in some cases the resolution depends on what actually failed. Add "the action the user is supposed to do" as flags so that the front-end can translate this in the appropriate way, for instance, using a different string for log events and HSI dialogs.
113 lines
3.2 KiB
C
113 lines
3.2 KiB
C
/*
|
|
* Copyright (C) 2020 Richard Hughes <richard@hughsie.com>
|
|
*
|
|
* SPDX-License-Identifier: LGPL-2.1+
|
|
*/
|
|
|
|
#include "config.h"
|
|
|
|
#include <fwupdplugin.h>
|
|
|
|
struct FuPluginData {
|
|
GFile *file;
|
|
GFileMonitor *monitor;
|
|
};
|
|
|
|
static void
|
|
fu_plugin_linux_tainted_init(FuPlugin *plugin)
|
|
{
|
|
fu_plugin_alloc_data(plugin, sizeof(FuPluginData));
|
|
}
|
|
|
|
static void
|
|
fu_plugin_linux_tainted_destroy(FuPlugin *plugin)
|
|
{
|
|
FuPluginData *priv = fu_plugin_get_data(plugin);
|
|
if (priv->file != NULL)
|
|
g_object_unref(priv->file);
|
|
if (priv->monitor != NULL) {
|
|
g_file_monitor_cancel(priv->monitor);
|
|
g_object_unref(priv->monitor);
|
|
}
|
|
}
|
|
|
|
static void
|
|
fu_plugin_linux_tainted_changed_cb(GFileMonitor *monitor,
|
|
GFile *file,
|
|
GFile *other_file,
|
|
GFileMonitorEvent event_type,
|
|
gpointer user_data)
|
|
{
|
|
FuPlugin *plugin = FU_PLUGIN(user_data);
|
|
FuContext *ctx = fu_plugin_get_context(plugin);
|
|
fu_context_security_changed(ctx);
|
|
}
|
|
|
|
static gboolean
|
|
fu_plugin_linux_tainted_startup(FuPlugin *plugin, FuProgress *progress, GError **error)
|
|
{
|
|
FuPluginData *priv = fu_plugin_get_data(plugin);
|
|
g_autofree gchar *fn = NULL;
|
|
g_autofree gchar *procfs = NULL;
|
|
|
|
procfs = fu_path_from_kind(FU_PATH_KIND_PROCFS);
|
|
fn = g_build_filename(procfs, "sys", "kernel", "tainted", NULL);
|
|
priv->file = g_file_new_for_path(fn);
|
|
priv->monitor = g_file_monitor(priv->file, G_FILE_MONITOR_NONE, NULL, error);
|
|
if (priv->monitor == NULL)
|
|
return FALSE;
|
|
g_signal_connect(G_FILE_MONITOR(priv->monitor),
|
|
"changed",
|
|
G_CALLBACK(fu_plugin_linux_tainted_changed_cb),
|
|
plugin);
|
|
return TRUE;
|
|
}
|
|
|
|
static void
|
|
fu_plugin_linux_tainted_add_security_attrs(FuPlugin *plugin, FuSecurityAttrs *attrs)
|
|
{
|
|
FuPluginData *priv = fu_plugin_get_data(plugin);
|
|
gsize bufsz = 0;
|
|
g_autofree gchar *buf = NULL;
|
|
g_autoptr(FwupdSecurityAttr) attr = NULL;
|
|
g_autoptr(GError) error_local = NULL;
|
|
|
|
/* create attr */
|
|
attr = fwupd_security_attr_new(FWUPD_SECURITY_ATTR_ID_KERNEL_TAINTED);
|
|
fwupd_security_attr_set_plugin(attr, fu_plugin_get_name(plugin));
|
|
fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_RUNTIME_ISSUE);
|
|
fu_security_attrs_append(attrs, attr);
|
|
|
|
if (priv == NULL) {
|
|
fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_MISSING_DATA);
|
|
return;
|
|
}
|
|
|
|
/* load file */
|
|
if (!g_file_load_contents(priv->file, NULL, &buf, &bufsz, NULL, &error_local)) {
|
|
g_autofree gchar *fn = g_file_get_path(priv->file);
|
|
g_warning("could not open %s: %s", fn, error_local->message);
|
|
fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_VALID);
|
|
return;
|
|
}
|
|
if (g_strcmp0(buf, "0\n") != 0) {
|
|
fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_TAINTED);
|
|
fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_ACTION_CONFIG_OS);
|
|
return;
|
|
}
|
|
|
|
/* success */
|
|
fwupd_security_attr_add_flag(attr, FWUPD_SECURITY_ATTR_FLAG_SUCCESS);
|
|
fwupd_security_attr_set_result(attr, FWUPD_SECURITY_ATTR_RESULT_NOT_TAINTED);
|
|
}
|
|
|
|
void
|
|
fu_plugin_init_vfuncs(FuPluginVfuncs *vfuncs)
|
|
{
|
|
vfuncs->build_hash = FU_BUILD_HASH;
|
|
vfuncs->init = fu_plugin_linux_tainted_init;
|
|
vfuncs->destroy = fu_plugin_linux_tainted_destroy;
|
|
vfuncs->startup = fu_plugin_linux_tainted_startup;
|
|
vfuncs->add_security_attrs = fu_plugin_linux_tainted_add_security_attrs;
|
|
}
|