# This file is part of systemd.
#
# Copyright 2011 Dan Walsh
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# systemd is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with systemd; If not, see <http://www.gnu.org/licenses/>.

__contains_word () {
        local word=$1; shift
        for w in $*; do [[ $w = $word ]] && return 0; done
        return 1
}

ALL_OPTS='-l --list -S -o -n --noheading -h --help'
MANAGED_OPTS='-a --add -m --modify -d --delete -D --deleteall -C --locallist '

__get_all_stores () {
    dir -1 -F /etc/selinux/ | grep '/' | cut -d'/' -f 1
}
__get_all_ftypes () {
    echo '-- -d -c -b -s -l -p'
}
__get_all_users () { 
    seinfo -u 2> /dev/null | tail -n +3 
}
__get_all_types () { 
    seinfo -t 2> /dev/null | tail -n +3 
}
__get_all_port_types () { 
    seinfo -aport_type -x 2>/dev/null | tail -n +2 
}
__get_all_domains () { 
    seinfo -adomain -x 2>/dev/null | tail -n +2 
}
__get_all_node_types () { 
    seinfo -anode_type -x 2>/dev/null | tail -n +2 
}
__get_all_file_types () { 
    seinfo -afile_type -x 2>/dev/null | tail -n +2 
}
__get_all_roles () { 
    seinfo -t 2> /dev/null | tail -n +3 
}
__get_all_stores () {
    dir -1 -F /etc/selinux/ | grep '/' | cut -d'/' -f 1
}
__get_boolean_opts () { echo '$ALL_OPTS --on -off -1 -0 -F' ; }
__get_user_opts () { echo '$ALL_OPTS $MANAGED_OPTS -L -r -R --role '; }
__get_login_opts () { echo '$ALL_OPTS $MANAGED_OPTS -s -r '; }
__get_port_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t -type -r --range -p --proto'; }
__get_interface_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t --type '; }
__get_node_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t --type -M --mask -p --proto'; }
__get_fcontext_opts () { echo '$ALL_OPTS $MANAGED_OPTS -t --type -e --equal -f --ftype '; }
__get_module_opts () { echo '$ALL_OPTS --enable --disable '; }
__get_dontaudit_opts () { echo '-S on off' ; }
__get_permissive_opts () { echo '$ALL_OPTS -a --add -d --delete' ; }

_semanage () {
        local command=${COMP_WORDS[1]}
        local cur=${COMP_WORDS[COMP_CWORD]} prev=${COMP_WORDS[COMP_CWORD-1]}
        local verb comps
        local -A VERBS=(
	       [LOGIN]='login'
	       [USER]='user'
	       [PORT]='port'
	       [INTERFACE]='interface'
	       [MODULE]='module'
	       [NODE]='node'
	       [FCONTEXT]='fcontext'
	       [BOOLEAN]='boolean'
	       [PERMISSIVE]='permissive'
	       [DONTAUDIT]='dontaudit'
        )

	if   [ "$prev" = "-a" -a "$command" = "permissive" ]; then
	        COMPREPLY=( $(compgen -W "$( __get_all_domains ) " -- "$cur") )
		return 0
	fi
	if   [ "$verb" = "" -a "$prev" = "semanage" ]; then
                comps="${VERBS[*]}"
	elif [ "$verb" = "" -a "$prev" = "-S" -o "$prev" = "--store" ]; then
	        COMPREPLY=( $(compgen -W "$( __get_all_stores ) " -- "$cur") )
		return 0
	elif [ "$verb" = "" -a "$prev" = "-p" -o "$prev" = "--proto" ]; then
	        COMPREPLY=( $(compgen -W "tcp udp" -- "$cur") )
		return 0
	elif [ "$verb" = "" -a "$prev" = "-r" -o "$prev" = "--roles" ]; then
	        COMPREPLY=( $(compgen -W "$( __get_all_roles ) " -- "$cur") )
		return 0
	elif [ "$verb" = "" -a "$prev" = "-s" -o "$prev" = "--seuser" ]; then
	        COMPREPLY=( $(compgen -W "$( __get_all_users ) " -- "$cur") )
		return 0
	elif [ "$verb" = "" -a "$prev" = "-f" -o "$prev" = "--ftype" ]; then
	        COMPREPLY=( $(compgen -W "$( __get_all_ftypes ) " -- "$cur") )
		return 0
	elif [ "$verb" = "" -a "$prev" = "-t" -o "$prev" = "--types" ]; then
	    if [ "$command" = "port" ]; then
	        COMPREPLY=( $(compgen -W "$( __get_all_port_types ) " -- "$cur") )
		return 0
	    fi
	    if [ "$command" = "fcontext" ]; then
	        COMPREPLY=( $(compgen -W "$( __get_all_file_types ) " -- "$cur") )
		return 0
	    fi
	    COMPREPLY=( $(compgen -W "$( __get_all_types ) " -- "$cur") )
	    return 0
        elif __contains_word "$command" ${VERBS[LOGIN]} ; then
                COMPREPLY=( $(compgen -W "$( __get_login_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[USER]} ; then
                COMPREPLY=( $(compgen -W "$( __get_user_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[PORT]} ; then
                COMPREPLY=( $(compgen -W "$( __get_port_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[INTERFACE]} ; then
                COMPREPLY=( $(compgen -W "$( __get_interface_opts ) " -- "$cur") )
		return 0p
        elif __contains_word "$command" ${VERBS[MODULE]} ; then
                COMPREPLY=( $(compgen -W "$( __get_module_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[NODE]} ; then
                COMPREPLY=( $(compgen -W "$( __get_node_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[FCONTEXT]} ; then
                COMPREPLY=( $(compgen -W "$( __get_fcontext_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[BOOLEAN]} ; then
                COMPREPLY=( $(compgen -W "$( __get_boolean_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[PERMISSIVE]} ; then
                COMPREPLY=( $(compgen -W "$( __get_permissive_opts ) " -- "$cur") )
		return 0
        elif __contains_word "$command" ${VERBS[DONTAUDIT]} ; then
                COMPREPLY=( $(compgen -W "$( __get_dontaudit_opts ) " -- "$cur") )
		return 0
        fi
        COMPREPLY=( $(compgen -W "$comps" -- "$cur") )
        return 0
}
complete -F _semanage semanage