gpupdate/gpoa/gpt/drives.py

#
# GPOA - GPO Applier for Linux
#
# Copyright (C) 2019-2020 BaseALT Ltd.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import json
from base64 import b64decode
from Crypto.Cipher import AES
from .dynamic_attributes import DynamicAttributes
from util.xml import get_xml_root

def decrypt_pass(cpassword):
    '''
    AES key for cpassword decryption: http://msdn.microsoft.com/en-us/library/2c15cbf0-f086-4c74-8b70-1f2fa45dd4be%28v=PROT.13%29#endNote2
    '''
    if not cpassword:
        return cpassword

    key = (
            b'\x4e\x99\x06\xe8'
            b'\xfc\xb6\x6c\xc9'
            b'\xfa\xf4\x93\x10'
            b'\x62\x0f\xfe\xe8'
            b'\xf4\x96\xe8\x06'
            b'\xcc\x05\x79\x90'
            b'\x20\x9b\x09\xa4'
            b'\x33\xb6\x6c\x1b'
    )
    cpass_len = len(cpassword)
    padded_pass = (cpassword + "=" * ((4 - cpass_len % 4) % 4))
    password = b64decode(padded_pass)
    decrypter = AES.new(key, AES.MODE_CBC, '\x00' * 16)

    # decrypt() returns byte array which is immutable and we need to
    # strip padding, then convert UTF-16LE to UTF-8
    binstr = decrypter.decrypt(password)
    by = list()
    for item in binstr:
        if item != 16:
            by.append(item)
    utf16str = bytes(by).decode('utf-16', 'ignore')
    utf8str = utf16str.encode('utf8')

    return utf8str.decode()

def read_drives(drives_file):
    drives = list()

    for drive in get_xml_root(drives_file):
        drive_obj = drivemap()

        props = drive.find('Properties')
        drive_obj.set_login(props.get('username'))
        drive_obj.set_pass(decrypt_pass(props.get('cpassword')))
        drive_obj.set_dir(props.get('letter'))
        drive_obj.set_path(props.get('path'))
        drive_obj.set_action(props.get('action'))
        drive_obj.set_thisDrive(props.get('thisDrive'))
        drive_obj.set_allDrives(props.get('allDrives'))
        drive_obj.set_label(props.get('label'))
        drive_obj.set_persistent(props.get('persistent'))
        drive_obj.set_useLetter(props.get('useLetter'))

        drives.append(drive_obj)

    return drives

def merge_drives(storage, sid, drive_objects, policy_name):
    for drive in drive_objects:
        storage.add_drive(sid, drive, policy_name)

def json2drive(json_str):
    json_obj = json.loads(json_str)
    drive_obj = drivemap()

    drive_obj.set_login(json_obj['login'])
    drive_obj.set_pass(json_obj['password'])
    drive_obj.set_dir(json_obj['dir'])
    drive_obj.set_path(json_obj['path'])

    return drive_obj

class drivemap(DynamicAttributes):
    def __init__(self):
        self.login = None
        self.password = None
        self.dir = None
        self.path = None
        self.action = None
        self.thisDrive = None
        self.allDrives = None
        self.label = None
        self.persistent = None
        self.useLetter = None

    def set_login(self, username):
        self.login = username
        if not username:
            self.login = ''

    def set_pass(self, password):
        self.password = password
        if not password:
            self.password = ''

    def set_dir(self, path):
        self.dir = path

    def set_path(self, path):
        self.path = path

    def set_action(self, action):
        self.action = action

    def set_thisDrive(self, thisDrive):
        self.thisDrive = thisDrive

    def set_allDrives(self, allDrives):
        self.allDrives = allDrives

    def set_label(self, label):
        self.label = label

    def set_persistent(self, persistent):
        self.persistent = persistent

    def set_useLetter(self, useLetter):
        self.useLetter = useLetter

    def to_json(self):
        drive = dict()
        drive['login'] = self.login
        drive['password'] = self.password
        drive['dir'] = self.dir
        drive['path'] = self.path

        contents = dict()
        contents['drive'] = drive

        return json.dumps(contents)