rootasrole 4.0.3

A better alternative to sudo(-rs)/su
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

use std::{collections::HashMap, path::PathBuf};

use bon::Builder;
use capctl::CapSet;
use indexmap::IndexSet;

use jiff::SignedDuration;
use pest_derive::Parser;
use rootasrole_core::{
    database::{
        actor::{SActor, SGroups, SUserType},
        options::{
            EnvBehavior, EnvKey, OptType, PathBehavior, SAuthentication, SBounding, SInfo,
            SPrivileged, SUMask, TimestampType, WorkdirBehavior,
        },
        structs::{IdTask, SetBehavior},
    },
    util::StorageMethod,
};

#[derive(Parser)]
#[grammar = "chsr/cli/cli.pest"]
pub struct Cli;

#[derive(Debug, PartialEq, Eq, Clone, Copy)]
pub enum RoleType {
    All,
    Actors,
    Tasks,
}

#[derive(Debug, PartialEq, Eq, Clone, Copy)]
pub enum TaskType {
    All,
    Commands,
    Credentials,
}

#[derive(Debug, PartialEq, Eq, Default, Clone, Copy)]
pub enum InputAction {
    Help,
    List,
    Set,
    Add,
    Del,
    Purge,
    Convert,
    #[default]
    None,
}

#[derive(Debug, PartialEq, Eq, Clone, Copy)]
pub enum SetListType {
    White,
    Black,
    Check,
    Set,
}

#[derive(Debug, PartialEq, Eq, Clone, Copy)]
#[repr(usize)]
pub enum TimeoutOpt {
    Duration = 0,
    Type,
    MaxUsage,
}

#[allow(clippy::struct_excessive_bools)]
#[derive(Debug, Default)]
pub struct Inputs {
    pub action: InputAction,
    pub editor: bool,
    pub editor_path: Option<PathBuf>,
    pub editor_type: Option<StorageMethod>,
    pub setlist_type: Option<SetListType>,
    pub timeout_arg: Option<[bool; 3]>,
    pub timeout_type: Option<TimestampType>,
    pub timeout_duration: Option<SignedDuration>,
    pub timeout_max_usage: Option<u64>,
    pub policy: bool,
    pub policy_path: Option<String>,
    pub role_id: Option<String>,
    pub role_type: Option<RoleType>,
    pub actors: Option<Vec<SActor>>,
    pub task_id: Option<IdTask>,
    pub task_type: Option<TaskType>,
    pub cmd_policy: Option<SetBehavior>,
    pub cmd_id: Option<Vec<String>>,
    pub cred_caps: Option<CapSet>,
    pub cred_setuid: Option<SUserType>,
    pub cred_setgid: Option<SGroups>,
    pub cred_policy: Option<SetBehavior>,
    pub options: bool,
    pub options_type: Option<OptType>,
    pub options_path: Option<String>,
    pub options_path_policy: Option<PathBehavior>,
    pub options_key_env: Option<IndexSet<EnvKey>>,
    pub options_env_values: Option<HashMap<String, String>>,
    pub options_env_policy: Option<EnvBehavior>,
    pub options_root: Option<SPrivileged>,
    pub options_bounding: Option<SBounding>,
    pub options_auth: Option<SAuthentication>,
    pub options_execinfo: Option<SInfo>,
    pub options_umask: Option<SUMask>,
    pub options_workdir_policy: Option<WorkdirBehavior>,
    pub convertion: Option<Convertion>,
    pub convert_reconfigure: bool,
}

#[derive(Builder, Debug, Default)]
pub struct Convertion {
    pub from_type: Option<StorageMethod>,
    pub from: Option<PathBuf>,
    pub to_type: StorageMethod,
    pub to: PathBuf,
}