Skip to content

feat:Add authentication log support #417

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
deepin-bot merged 2 commits into from
Nov 5, 2025
Merged

feat:Add authentication log support #417

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
12177a1
feat: Add authentication log support
re2zero Nov 5, 2025
5cf7431
fix: Fix auth logs can not be exported if with all.
re2zero Nov 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -60,8 +60,10 @@ CMakeCache.txt

# AI
.cursor
.cursorindexingignore
.specstory
.spec-workflow/
.promptx/

# index cache
.cache/
4 changes: 2 additions & 2 deletions .reuse/dep5
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,8 +13,8 @@ Files: .gitignore application/.gitignore
Copyright: None
License: CC0-1.0

# xml toml json conf yaml sh
Files: *.toml *.json *conf *.yaml *.sh *.h.in .project
# xml toml json conf yaml sh service
Files: *.toml *.json *conf *.yaml *.sh *.h.in .project *.service
Copyright: UnionTech Software Technology Co., Ltd.
License: CC0-1.0

Expand Down
206 changes: 205 additions & 1 deletion application/displaycontent.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -313,6 +313,11 @@ void DisplayContent::initConnections()
connect(m_pLogBackend, &LogBackend::auditFinished, this, &DisplayContent::slot_auditFinished,
Qt::QueuedConnection);

connect(m_pLogBackend, &LogBackend::authData, this, &DisplayContent::slot_authData,
Qt::QueuedConnection);
connect(m_pLogBackend, &LogBackend::authFinished, this, &DisplayContent::slot_authFinished,
Qt::QueuedConnection);

connect(m_pLogBackend, &LogBackend::coredumpData, this, &DisplayContent::slot_coredumpData,
Qt::QueuedConnection);
connect(m_pLogBackend, &LogBackend::coredumpFinished, this, &DisplayContent::slot_coredumpFinished,
Expand Down Expand Up @@ -885,6 +890,16 @@ void DisplayContent::insertAuditTable(const QList<LOG_MSG_AUDIT> &list, int star
parseListToModel(midList, m_pModel);
}

void DisplayContent::insertAuthTable(const QList<LOG_MSG_AUTH> &list, int start, int end)
{
qCDebug(logApp) << "DisplayContent::insertAuthTable called with start:" << start << "end:" << end;
QList<LOG_MSG_AUTH> midList = list;
if (end >= start) {
midList = midList.mid(start, end - start);
}
parseListToModel(midList, m_pModel);
}

void DisplayContent::insertCoredumpTable(const QList<LOG_MSG_COREDUMP> &list, int start, int end)
{
qCDebug(logApp) << "DisplayContent::insertCoredumpTable called with start:" << start << "end:" << end;
Expand Down Expand Up @@ -1714,6 +1729,8 @@ void DisplayContent::slot_BtnSelected(int btnId, int lId, QModelIndex idx)
generateKwinFile(filter);
} else if (treeData.contains(AUDIT_TREE_DATA, Qt::CaseInsensitive)) {
generateAuditFile(BUTTONID(m_curBtnId), AUDITTYPE(m_curAuditType));
} else if (treeData.contains(AUTH_TREE_DATA, Qt::CaseInsensitive)) {
generateAuthFile(BUTTONID(m_curBtnId));
} else if(treeData.contains(COREDUMP_TREE_DATA, Qt::CaseInsensitive)) {
generateCoredumpFile(btnId);
}
Expand Down Expand Up @@ -1836,6 +1853,9 @@ void DisplayContent::slot_logCatelogueClicked(const QModelIndex &index)
} else if (itemData.contains(AUDIT_TREE_DATA, Qt::CaseInsensitive)) {
m_flag = Audit;
m_pLogBackend->setFlag(m_flag);
} else if (itemData.contains(AUTH_TREE_DATA, Qt::CaseInsensitive)) {
m_flag = Auth;
m_pLogBackend->setFlag(m_flag);
} else if (itemData.contains(COREDUMP_TREE_DATA, Qt::CaseInsensitive)) {
m_flag = COREDUMP;
m_pLogBackend->setFlag(m_flag);
Expand Down Expand Up @@ -2381,6 +2401,35 @@ void DisplayContent::slot_auditData(const QList<LOG_MSG_AUDIT> &list)
}
}

void DisplayContent::slot_authFinished()
{
qCDebug(logApp) << "DisplayContent::slot_authFinished called";
if (m_flag != Auth) {
qCDebug(logApp) << "m_flag != Auth";
return;
}
m_isDataLoadComplete = true;
if (m_pLogBackend->authList.isEmpty()) {
setLoadState(DATA_COMPLETE);
createAuthTable(m_pLogBackend->authList);
}
}

void DisplayContent::slot_authData(const QList<LOG_MSG_AUTH> &list)
{
qCDebug(logApp) << "DisplayContent::slot_authData called";
if (m_flag != Auth) {
qCDebug(logApp) << "m_flag != Auth";
return;
}

if (m_firstLoadPageData && !list.isEmpty()) {
createAuthTable(list);
m_firstLoadPageData = false;
PERF_PRINT_END("POINT-03", "type=auth");
}
}

void DisplayContent::slot_coredumpFinished()
{
qCDebug(logApp) << "DisplayContent::slot_coredumpFinished called";
Expand Down Expand Up @@ -3294,6 +3343,43 @@ void DisplayContent::parseListToModel(QList<LOG_MSG_AUDIT> iList, QStandardItemM
}
}

void DisplayContent::parseListToModel(QList<LOG_MSG_AUTH> iList, QStandardItemModel *oPModel)
{
qCDebug(logApp) << "DisplayContent::parseListToModel AUTH called";
if (!oPModel) {
qCWarning(logApp) << "auth log parse model is empty";
return;
}

if (iList.isEmpty()) {
qCWarning(logApp) << "auth log parse model data is empty";
return;
}
QList<QStandardItem *> items;
DStandardItem *item = nullptr;
int listCount = iList.size();
for (int i = 0; i < listCount; i++) {
items.clear();
item = new DStandardItem(iList[i].dateTime);
item->setData(AUTH_TABLE_DATA);
item->setAccessibleText(QString("treeview_context_%1_%2").arg(i).arg(0));
items << item;
item = new DStandardItem(iList[i].hostName);
item->setData(AUTH_TABLE_DATA);
item->setAccessibleText(QString("treeview_context_%1_%2").arg(i).arg(1));
items << item;
item = new DStandardItem(iList[i].processName);
item->setData(AUTH_TABLE_DATA);
item->setAccessibleText(QString("treeview_context_%1_%2").arg(i).arg(2));
items << item;
item = new DStandardItem(iList[i].msg);
item->setData(AUTH_TABLE_DATA);
item->setAccessibleText(QString("treeview_context_%1_%2").arg(i).arg(3));
items << item;
oPModel->insertRow(oPModel->rowCount(), items);
}
}

void DisplayContent::parseListToModel(QList<LOG_MSG_COREDUMP> iList, QStandardItemModel *oPModel)
{
qCDebug(logApp) << "DisplayContent::parseListToModel called";
Expand Down Expand Up @@ -3416,13 +3502,16 @@ void DisplayContent::setLoadState(DisplayContent::LOAD_STATE iState, bool bSearc
break;
}
case DATA_NOT_AUDIT_ADMIN:
case DATA_NO_AUDIT_LOG:{
case DATA_NO_AUDIT_LOG:
case DATA_NO_AUTH_LOG:{
// 开启等保四时，若当前用户不是审计管理员，给出提示
m_treeView->show();
if (iState == DATA_NOT_AUDIT_ADMIN) {
notAuditLabel->setText(DApplication::translate("Warning", "Security level for the current system: high\n audit only administrators can view the audit log"));
} else if (iState == DATA_NO_AUDIT_LOG) {
notAuditLabel->setText(DApplication::translate("Warning", "Audit log is not exist."));
} else if (iState == DATA_NO_AUTH_LOG) {
notAuditLabel->setText(DApplication::translate("Warning", "Auth log is not exist."));
}
notAuditLabel->resize(m_treeView->viewport()->width(), m_treeView->viewport()->height());
notAuditLabel->show();
Expand Down Expand Up @@ -3691,6 +3780,10 @@ void DisplayContent::slot_refreshClicked(const QModelIndex &index)
m_flag = Audit;
m_pLogBackend->setFlag(m_flag);
generateAuditFile(m_curBtnId, m_curAuditType);
} else if (itemData.contains(AUTH_TREE_DATA, Qt::CaseInsensitive)) {
m_flag = Auth;
m_pLogBackend->setFlag(m_flag);
generateAuthFile(m_curBtnId);
} else if (itemData.contains(COREDUMP_TREE_DATA, Qt::CaseInsensitive)) {
m_flag = COREDUMP;
m_pLogBackend->setFlag(m_flag);
Expand Down Expand Up @@ -3857,6 +3950,82 @@ void DisplayContent::generateAuditFile(int id, int lId, const QString &iSearchSt
m_pLogBackend->parseByAudit(auditFilter);
}

void DisplayContent::generateAuthFile(int id, const QString &iSearchStr)
{
qCDebug(logApp) << "DisplayContent::generateAuthFile called";
Q_UNUSED(iSearchStr);

// 若不存在，则显示认证日志不存在
if (!DLDBusHandler::instance(this)->isFileExist("/var/log/auth.log")) {
setLoadState(DATA_NO_AUTH_LOG);
m_detailWgt->cleanText();
m_detailWgt->hideLine(true);
return;
}

m_pLogBackend->clearAllFilter();
clearAllDatas();
m_firstLoadPageData = true;
m_isDataLoadComplete = false;
setLoadState(DATA_LOADING);
createAuthTableForm();
QDateTime dt = QDateTime::currentDateTime();
dt.setTime(QTime());
AUTH_FILTERS authFilter;

switch (id) {
case ALL:
break;
case ONE_DAY: {
QDateTime dtStart = dt;
QDateTime dtEnd = dt;
dtEnd.setTime(QTime(23, 59, 59, 999));
authFilter.timeFilterBegin = dtStart.toMSecsSinceEpoch();
authFilter.timeFilterEnd = dtEnd.toMSecsSinceEpoch();
}
break;
case THREE_DAYS: {
QDateTime dtStart = dt;
QDateTime dtEnd = dt;
dtEnd.setTime(QTime(23, 59, 59, 999));
authFilter.timeFilterBegin = dtStart.addDays(-2).toMSecsSinceEpoch();
authFilter.timeFilterEnd = dtEnd.toMSecsSinceEpoch();
}
break;
case ONE_WEEK: {
QDateTime dtStart = dt;
QDateTime dtEnd = dt;
dtEnd.setTime(QTime(23, 59, 59, 999));
authFilter.timeFilterBegin = dtStart.addDays(-6).toMSecsSinceEpoch();
authFilter.timeFilterEnd = dtEnd.toMSecsSinceEpoch();
}
break;
case ONE_MONTH: {
QDateTime dtStart = dt;
QDateTime dtEnd = dt;
dtEnd.setTime(QTime(23, 59, 59, 999));
authFilter.timeFilterBegin = dtStart.addMonths(-1).toMSecsSinceEpoch();
authFilter.timeFilterEnd = dtEnd.toMSecsSinceEpoch();
}
break;
case THREE_MONTHS: {
QDateTime dtStart = dt;
QDateTime dtEnd = dt;
dtEnd.setTime(QTime(23, 59, 59, 999));
authFilter.timeFilterBegin = dtStart.addMonths(-3).toMSecsSinceEpoch();
authFilter.timeFilterEnd = dtEnd.toMSecsSinceEpoch();
}
break;
default:
break;
}

m_pLogBackend->m_authFilter = authFilter;

if (id >= ALL && id <= THREE_MONTHS)
m_pLogBackend->parseByAuth(authFilter);
}

void DisplayContent::createAuditTableForm()
{
qCDebug(logApp) << "DisplayContent::createAuditTableForm called";
Expand All @@ -3883,6 +4052,41 @@ void DisplayContent::createAuditTableForm()
#endif
}

void DisplayContent::createAuthTableForm()
{
qCDebug(logApp) << "DisplayContent::createAuthTableForm called";
m_pModel->clear();
m_pModel->setHorizontalHeaderLabels(QStringList()
<< DApplication::translate("Table", "Date and Time")
<< DApplication::translate("Table", "User")
<< DApplication::translate("Table", "Process")
<< DApplication::translate("Table", "Info"));
m_treeView->setColumnWidth(0, 140);
m_treeView->setColumnWidth(1, 100);
m_treeView->setColumnWidth(2, 100);
m_treeView->setColumnWidth(3, DATETIME_WIDTH);
}

void DisplayContent::createAuthTable(const QList<LOG_MSG_AUTH> &list)
{
qCDebug(logApp) << "DisplayContent::createAuthTable called";

if (list.isEmpty()) {
m_detailWgt->cleanText();
createAuthTableForm();
setLoadState(DATA_NO_SEARCH_RESULT);
return;
}

setLoadState(DATA_COMPLETE);
createAuthTableForm();
parseListToModel(list, m_pModel);
if (list.count() > 0) {
m_treeView->setCurrentIndex(m_pModel->index(0, 0));
slot_tableItemClicked(m_pModel->index(0, 0));
}
}

void DisplayContent::createAuditTable(const QList<LOG_MSG_AUDIT> &list)
{
qCDebug(logApp) << "DisplayContent::createAuditTable called";
Expand Down
10 changes: 10 additions & 0 deletions application/displaycontent.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,7 @@ class DisplayContent : public Dtk::Widget::DWidget
DATA_NO_SEARCH_RESULT, //搜索无记录
DATA_NOT_AUDIT_ADMIN, // 提示不是审计管理员
DATA_NO_AUDIT_LOG, // 提示没有审计日志
DATA_NO_AUTH_LOG, // 提示没有认证日志
COREDUMPCTL_NOT_INSTALLED, //未安装coredumpctl工具
DATA_NO_PERMISSION //没有权限查看
};
Expand Down Expand Up @@ -112,6 +113,11 @@ class DisplayContent : public Dtk::Widget::DWidget
void createAuditTableForm();
void createAuditTable(const QList<LOG_MSG_AUDIT> &list);

// 认证日志
void generateAuthFile(int id, const QString &iSearchStr = "");
void createAuthTableForm();
void createAuthTable(const QList<LOG_MSG_AUTH> &list);

//coredump log
void generateCoredumpFile(int id, const QString &iSearchStr = "");
void createCoredumpTableForm();
Expand All @@ -128,6 +134,7 @@ class DisplayContent : public Dtk::Widget::DWidget
void insertNormalTable(const QList<LOG_MSG_NORMAL> &list, int start, int end);
void insertOOCTable(const QList<LOG_FILE_OTHERORCUSTOM> &list, int start, int end);
void insertAuditTable(const QList<LOG_MSG_AUDIT> &list, int start, int end);
void insertAuthTable(const QList<LOG_MSG_AUTH> &list, int start, int end);
void insertCoredumpTable(const QList<LOG_MSG_COREDUMP> &list, int start, int end);
QString getAppName(const QString &filePath);

Expand Down Expand Up @@ -205,6 +212,8 @@ public slots:
void slot_OOCData(const QString &data);
void slot_auditFinished(bool bShowTip = false);
void slot_auditData(const QList<LOG_MSG_AUDIT> &list);
void slot_authFinished();
void slot_authData(const QList<LOG_MSG_AUTH> &list);
void slot_coredumpFinished();
void slot_coredumpData(const QList<LOG_MSG_COREDUMP> &list, bool newData);

Expand All @@ -230,6 +239,7 @@ public slots:
void parseListToModel(QList<LOG_MSG_DMESG> iList, QStandardItemModel *oPModel);
void parseListToModel(QList<LOG_FILE_OTHERORCUSTOM> iList, QStandardItemModel *oPModel);
void parseListToModel(QList<LOG_MSG_AUDIT> iList, QStandardItemModel *oPModel);
void parseListToModel(QList<LOG_MSG_AUTH> iList, QStandardItemModel *oPModel);
void parseListToModel(QList<LOG_MSG_COREDUMP> iList, QStandardItemModel *oPModel);
QString getIconByname(const QString &str);
void setLoadState(LOAD_STATE iState, bool bSearching = false);
Expand Down
4 changes: 4 additions & 0 deletions application/filtercontent.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -811,6 +811,10 @@ void FilterContent::slot_logCatelogueClicked(const QModelIndex &index)
qCDebug(logApp) << "slot_logCatelogueClicked AUDIT_TREE_DATA";
m_currentType = AUDIT_TABLE_DATA;
this->setSelectorVisible(false, false, false, true, false, false, false, true);
} else if (itemData.contains(AUTH_TREE_DATA)) {
qCDebug(logApp) << "slot_logCatelogueClicked AUTH_TREE_DATA";
m_currentType = AUTH_TABLE_DATA;
this->setSelectorVisible(false, false, false, true, true, false, false, false);
} else if (itemData.contains(COREDUMP_TREE_DATA)) {
qCDebug(logApp) << "slot_logCatelogueClicked COREDUMP_TREE_DATA";
m_currentType = COREDUMP_TREE_DATA;
Expand Down
Loading