Implemented HKCU interation functionality for Chromium applier

gpoa/frontend/__init__.py

@@ -9,15 +9,17 @@ from .chromium_applier import chromium_applier
 import logging
 
 class applier:
-    def __init__(self, sid):
+    def __init__(self, sid, username):
         self.storage = sqlite_registry('registry')
+        self.sid = sid
+        self.username = username
 
         self.appliers = dict({
             'control':  control_applier(self.storage),
             'polkit':   polkit_applier(self.storage),
             'systemd':  systemd_applier(self.storage),
-            'firefox':  firefox_applier(self.storage),
-            'chromium': chromium_applier(self.storage)
+            'firefox':  firefox_applier(self.storage, self.sid, self.username),
+            'chromium': chromium_applier(self.storage, self.sid, self.username)
         })
 
     def apply_parameters(self):

gpoa/frontend/chromium_applier.py

@@ -3,20 +3,31 @@ from .applier_frontend import applier_frontend
 import logging
 import json
 import os
+import util
 
 class chromium_applier(applier_frontend):
     __registry_branch = 'Software\\Policies\\Chromium'
     __managed_policies_path = '/etc/chromium/policies/managed'
     __recommended_policies_path = '/etc/chromium/policies/recommended'
+    # JSON file where Chromium stores its settings (and which is
+    # overwritten every exit.
+    __user_settings = '.config/chromium/Default'
 
-    def __init__(self, storage):
+    def __init__(self, storage, sid, username):
         self.storage = storage
+        self.sid = sid
+        self.username = username
+        self._is_machine_name = util.is_machine_name(self.username)
         self.policies = dict()
 
     def get_hklm_string_entry(self, hive_subkey):
         query_str = '{}\\{}'.format(self.__registry_branch, hive_subkey)
         return self.storage.get_hklm_entry(query_str)
 
+    def get_hkcu_string_entry(self, hive_subkey):
+        query_str = '{}\\{}'.format(self.__registry_branch, hive_subkey)
+        return self.storage.get_hkcu_entry(sid, query_str)
+
     def get_hklm_string_entry_default(self, hive_subkey, default):
         defval = str(default)
         response = self.get_hklm_string_entry(hive_subkey)
@@ -24,14 +35,44 @@ class chromium_applier(applier_frontend):
             return response.data
         return defval
 
+    def get_hkcu_string_entry_default(self, hive_subkey, default):
+        defval = str(default)
+        response = self.get_hkcu_string_entry(hive_subkey)
+        if response:
+            return response.data
+        return defval
+
     def set_policy(self, name, obj):
         self.policies[name] = obj
         logging.info('Chromium policy \'{}\' set to {}'.format(name, obj))
 
-    def get_home_page(self):
+    def set_user_policy(self, name, obj):
+        '''
+        Please not that writing user preferences file is not considered
+        a good practice and used mostly by various malware.
+        '''
+        if not self._is_machine_name:
+            prefdir = os.path.join(util.get_homedir(self.username), self.__user_settings)
+            os.makedirs(prefdir, exist_ok=True)
+
+            prefpath = os.path.join(prefdir, 'Preferences')
+            settings = dict()
+            with open(prefpath, 'r') as f:
+                settings = json.load(f)
+
+            settings[name] = obj
+
+            with open(prefpath, 'w') as f:
+                json.dump(settings, f)
+            logging.info('Set user ({}) property \'{}\' to {}'.format(self.username, name, obj))
+
+    def get_home_page(self, hkcu=False):
         return self.get_hklm_string_entry_default('HomepageLocation', 'about:blank')
 
-    def apply(self):
+    def machine_apply(self):
+        '''
+        Apply machine settings.
+        '''
         self.set_policy('HomepageLocation', self.get_home_page())
 
         destfile = os.path.join(self.__managed_policies_path, 'policies.json')
@@ -41,3 +82,18 @@ class chromium_applier(applier_frontend):
             json.dump(self.policies, f)
             logging.info('Wrote Chromium preferences to {}'.format(destfile))
 
+    def user_apply(self):
+        '''
+        Apply settings for the specified username.
+        '''
+        self.set_user_policy('homepage', self.get_home_page(hkcu=True))
+
+    def apply(self):
+        '''
+        All actual job done here.
+        '''
+        self.machine_apply()
+        if not self._is_machine_name:
+            logging.info('Running user applier for Chromium')
+            self.user_apply()
+

gpoa/frontend/firefox_applier.py

@@ -8,18 +8,21 @@
 # Software\Policies\Mozilla\Firefox
 
 import logging
-
-from .applier_frontend import applier_frontend
-
 import json
 import os
+import util
+
+from .applier_frontend import applier_frontend
 
 class firefox_applier(applier_frontend):
     __registry_branch = 'Software\\Policies\\Mozilla\\Firefox'
     __firefox_installdir = '/usr/lib64/firefox/distribution'
 
-    def __init__(self, storage):
+    def __init__(self, storage, sid, username):
         self.storage = storage
+        self.sid = sid
+        self.username = username
+        self._is_machine_name = util.is_machine_name(self.username)
         self.policies = dict()
         self.policies_json = dict({ 'policies': self.policies })
 

gpoa/main.py

@@ -64,7 +64,7 @@ class gpoa_controller:
         back = samba_backend(self.__lp, self.__creds, sid, dc, username)
         back.retrieve_and_store()
 
-        appl = frontend.applier(sid)
+        appl = frontend.applier(sid, username)
         appl.apply_parameters()
 
 def main():