From 2cb0ff1e1f5a40daf47714bb4bec60a29b419f6a Mon Sep 17 00:00:00 2001
From: Benjamin Bohard <bbohard@cadoles.com>
Date: Fri, 18 Jun 2021 09:06:24 +0200
Subject: [PATCH] Gestion des ouvertures de ports

---
 dicos/50_smb.xml             | 25 ++++++++++++++++++++-----
 posttemplate/02-smb_partages | 12 ++++++++++++
 2 files changed, 32 insertions(+), 5 deletions(-)
 create mode 100755 posttemplate/02-smb_partages

diff --git a/dicos/50_smb.xml b/dicos/50_smb.xml
index 762e3a2..0247219 100644
--- a/dicos/50_smb.xml
+++ b/dicos/50_smb.xml
@@ -1,6 +1,14 @@
 <?xml version="1.0" encoding="utf-8"?>
 <creole>
     <files>
+        <service_access service='smbd'>
+            <port>139</port>
+            <port>445</port>
+        </service_access>
+        <service_restriction service='smbd'>
+            <ip interface='auto' netmask='smb_share_allowed_netmask' netmask_type='SymLinkOption' ip_type='SymLinkOption'>smb_share_allowed_network</ip>
+        </service_restriction>
+
     </files>
     <containers>
         <container name='partage' id='52'>
@@ -11,20 +19,27 @@
     </containers>
     <variables>
         <family name='Partages smb'>
-            <variable name='use_smb_share' type='oui/non' description='Configurer des répertoires partagés' mode='expert'>
+            <variable name='use_smb_share' type='oui/non' description='Configurer des répertoires partagés' mode='normal'>
                 <value>non</value>
             </variable>
-            <variable name='smb_share_name' type='string' description='Nom du répertoire partagé' mandatory='True' mode='expert' multi='True'/>
-            <variable name='smb_share_path' type='string' description='Chemin du partage' mandatory='True' mode='expert'/>
+            <variable name='smb_share_path' type='string' description='Chemin du partage' mandatory='True' mode='normal'/>
+            <variable name='smb_share_name' type='string' description='Nom du répertoire partagé' mandatory='True' mode='normal' multi='True'/>
+            <variable name='smb_share_allowed_network' type='network' description='Adresses autorisées à se connecter aux partages' mode='normal' multi='True' mandatory='True'/>
+            <variable name='smb_share_allowed_network' type='netmask' description='Masque de sous-réseau des réseaux autorisés à se connecter aux partages' mode='normal' mandatory='True'/>
         </family>
     </variables>
     <constraints>
-        <group master='smb_share_name'>
-            <slave>smb_share_path</slave>
+        <group master='smb_share_path'>
+            <slave>smb_share_name</slave>
+        </group>
+        <group master='smb_share_allowed_network'>
+            <slave>smb_share_allowed_netmask</slave>
         </group>
         <condition name='disabled_if_in' source='use_smb_share' fallback='True'>
             <param>non</param>
             <target type='variable'>smb_share_name</target>
+            <target type='variable'>smb_share_allowed_network</target>
+            <target type='variable'>smb_share_allowed_netmask</target>
             <target type='filelist'>smb_share</target>
         </condition>
     </constraints>
diff --git a/posttemplate/02-smb_partages b/posttemplate/02-smb_partages
new file mode 100755
index 0000000..883ddbd
--- /dev/null
+++ b/posttemplate/02-smb_partages
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+# partages multiples
+if [ "$(CreoleGet use_smb_share non)" = "oui" ]; then
+    for path in $(CreoleGet smb_share_path); do
+    if [ ! -d $path ]; then
+	    /bin/mkdir -p $path
+	    chmod g+ws $path
+    fi
+    done
+fi
+exit 0