diff options
Diffstat (limited to 'sudoers/sudoers.xsl')
| -rw-r--r-- | sudoers/sudoers.xsl | 259 |
1 files changed, 259 insertions, 0 deletions
diff --git a/sudoers/sudoers.xsl b/sudoers/sudoers.xsl new file mode 100644 index 0000000..7fc4748 --- /dev/null +++ b/sudoers/sudoers.xsl @@ -0,0 +1,259 @@ +<?xml version="1.0" encoding="UTF-8"?> +<xsl:stylesheet version="1.0" + xmlns:xsl="http://www.w3.org/1999/XSL/Transform" + xmlns:xs="http://www.w3.org/2001/XMLSchema" + xmlns:xd="http://www.pnp-software.com/XSLTdoc" + xmlns:md="http://freeipa.org/xsl/metadata/1.0" + xmlns:sudoers="http://freeipa.org/xml/rng/sudo/1.0"> + + <md:output_handler> + <file name="/etc/sudoers" owner="root" group="root" permission="440"/> + </md:output_handler> + + <xsl:output method="text" indent="no"/> + <xsl:strip-space elements="*"/> + + <xsl:template match="/"> + <xsl:text># IPA generated /etc/sudoers: DO NOT EDIT

</xsl:text> + <xsl:apply-templates select="sudoers:ipa"/> + </xsl:template> + + <xsl:template match="sudoers:ipa"> + <xsl:apply-templates> + <xsl:with-param name="sudoers:ipaconfig"/> + </xsl:apply-templates> + </xsl:template> + + <xsl:template match="sudoers:ipaconfig"> + <xsl:apply-templates> + <xsl:with-param name="sudoers:sudoers" select="''"/> + </xsl:apply-templates> + </xsl:template> + + + <xsl:template match="sudoers:metadata"> + </xsl:template> + + <xd:doc> + <xd:short>This is the short description with <code>HTML tags</code>.</xd:short> + <xd:detail> + And here comes a <b>more detailed</b> + description showed only in the detailed view of the documentation. + </xd:detail> + </xd:doc> + <xsl:template match="sudoers:sudoers"> + <xsl:variable name="name"> + <xsl:apply-templates select="sudoers:subject"> + </xsl:apply-templates> + </xsl:variable> + + <xsl:apply-templates select="sudoers:command|sudoers:option"> + <xsl:with-param name="name" select="$name"/> + </xsl:apply-templates> + </xsl:template> + + + + <xsl:template match="sudoers:subject"> + <xsl:call-template name="format_name"> + <xsl:with-param name="name" select="sudoers:name"/> + <xsl:with-param name="type" select="sudoers:type"/> + </xsl:call-template> + </xsl:template> + + <xsl:template match="sudoers:option"> + <xsl:param name="name"/> + <xsl:text>Default</xsl:text> + <xsl:choose> + <xsl:when test="$name = 'ALL'"> + <xsl:text> </xsl:text> + </xsl:when> + <xsl:otherwise> + <xsl:text>:</xsl:text> + <xsl:value-of select="$name"/> + <xsl:text> </xsl:text> + </xsl:otherwise> + </xsl:choose> + <xsl:for-each select="*"> + <xsl:choose> + <!-- boolean options --> + <xsl:when test="name()='always_set_home' or + name()='authenticate' or + name()='env_editor' or + name()='env_reset' or + name()='fqdn' or + name()='ignore_dot' or + name()='ignore_local_sudoers' or + name()='insults' or + name()='log_host' or + name()='log_year' or + name()='long_otp_prompt' or + name()='mail_always' or + name()='mail_badpass' or + name()='mail_no_host' or + name()='mail_no_perms' or + name()='mail_no_user' or + name()='noexec' or + name()='path_info' or + name()='passprompt_override' or + name()='preserve_groups' or + name()='requiretty' or + name()='root_sudo' or + name()='rootpw' or + name()='runaspw' or + name()='set_home' or + name()='set_logname' or + name()='setenv' or + name()='shell_noargs' or + name()='stay_setuid' or + name()='targetpw' or + name()='tty_tickets' + "> + <xsl:if test=". = 'off'"> + <xsl:text>!</xsl:text> + </xsl:if> + <xsl:value-of select="name()"/> + </xsl:when> + + <!-- integer option --> + <xsl:when test="name()='passwd_tries'" > + <xsl:value-of select="name()"/> + <xsl:text>=</xsl:text> + <xsl:value-of select="."/> + </xsl:when> + + <!-- integer/booleans option, we handle them like integers --> + <xsl:when test="name()='loglinelen' or + name()='passwd_timeout' or + name()='timestamp_timeout' or + name()='umask' + "> + <xsl:value-of select="name()"/> + <xsl:text>=</xsl:text> + <xsl:value-of select="."/> + </xsl:when> + + <!-- string options --> + <xsl:when test="name()='badpass_message' or + name()='editor' or + name()='mailsub' or + name()='noexec_file' or + name()='passprompt' or + name()='role' or + name()='runas_default' or + name()='syslog_badpri' or + name()='syslog_goodpri' or + name()='timestampdir' or + name()='timestampowner' or + name()='type' + "> + <xsl:value-of select="name()"/> + <xsl:text>="</xsl:text> + <xsl:value-of select="."/> + <xsl:text>"</xsl:text> + </xsl:when> + <!-- string/boolean options --> + <xsl:when test="name()='exempt_group' or + name()='lecture' or + name()='lecture_file' or + name()='listpw' or + name()='logfile' or + name()='mailerflags' or + name()='mailerpath' or + name()='mailto' or + name()='syslog' or + name()='verifypw' + "> + <xsl:choose> + <xsl:when test=".='off'"> + <xsl:text>!</xsl:text> + <xsl:value-of select="name()"/> + </xsl:when> + <xsl:otherwise> + <xsl:value-of select="name()"/> + <xsl:text>="</xsl:text> + <xsl:value-of select="."/> + <xsl:text>"</xsl:text> + </xsl:otherwise> + </xsl:choose> + </xsl:when> + + <!-- list/boolean options --> + <xsl:when test="name()='env_check' or + name()='env_delete' or + name()='env_keep' + "> + <xsl:choose> + <xsl:when test=".='off'"> + <xsl:text>!</xsl:text> + <xsl:value-of select="name()"/> + </xsl:when> + <xsl:otherwise> + <xsl:value-of select="name()"/> + <xsl:text>="</xsl:text> + <xsl:value-of select="."/> + <xsl:text>"</xsl:text> + </xsl:otherwise> + </xsl:choose> + </xsl:when> + </xsl:choose> + </xsl:for-each> + <xsl:text>
</xsl:text> + </xsl:template> + + <xsl:template match="sudoers:command"> + <xsl:param name="name"/> + <xsl:variable name="command" select="sudoers:path"/> + <xsl:variable name="runas" select="sudoers:runas"/> + <xsl:variable name="tag"> + <xsl:call-template name="format_tag"> + <xsl:with-param name="tag" select="sudoers:tag"/> + </xsl:call-template> + </xsl:variable> + + <xsl:value-of select="$name"/> + <xsl:text> ALL = </xsl:text> + <xsl:if test="$runas != ''"> + <xsl:text>(</xsl:text> + <xsl:value-of select="$runas"/> + <xsl:text>) </xsl:text> + </xsl:if> + <xsl:if test="$tag != ''"> + <xsl:value-of select="$tag"/> + <xsl:text> </xsl:text> + </xsl:if> + <xsl:value-of select="$command"/> + <xsl:text>
</xsl:text> + </xsl:template> + + <xsl:template name="format_name"> + <xsl:param name="name"/> + <xsl:param name="type"/> + + <xsl:choose> + <xsl:when test="$type = 'ALL'"> + <xsl:text>ALL</xsl:text> + </xsl:when> + <xsl:otherwise> + <xsl:choose> + <xsl:when test="$type = 'netgroup'"> + <xsl:text>+</xsl:text> + </xsl:when> + <xsl:when test="$type = 'posixGroup'"> + <xsl:text>%</xsl:text> + </xsl:when> + </xsl:choose> + <xsl:value-of select="$name"/> + </xsl:otherwise> + </xsl:choose> + </xsl:template> + + <xsl:template name="format_tag"> + <xsl:param name="tag"/> + + <xsl:if test="$tag != ''"> + <xsl:value-of select="$tag"/> + <xsl:text>:</xsl:text> + </xsl:if> + </xsl:template> +</xsl:stylesheet> |