Difference between revisions of "Template:View code wrapper"
Line 1: | Line 1: | ||
− | {{View_code | + | {{View_code|:Code/tp-theft}} |
Revision as of 05:16, 21 January 2007
#!/usr/bin/perl # # tp-theft v0.5.1 # (http://thinkwiki.org/wiki/Script_for_theft_alarm_using_HDAPS) # Provided under the GNU General Public License version 2 or later or # the GNU Free Documentation License version 1.2 or later, at your option. # See http://www.gnu.org/copyleft/gpl.html for the Warranty Disclaimer. # This script uses the HDAPS accelerometer found on recent ThinkPad models # to emit an audio alarm when the laptop is tilted. In sufficiently # populated environments, it can be used as a laptop theft deterrent. # Uses a state machine and some heuristics to reduce false alarms. # # By default the alarm will be activated only when the KDE screen saver is # locked. If you you open the laptop lid (or press the lid button) shortly # before or after the beginning of movement, the alarm will be suspended # (except for a brief warning) and you will get a few seconds of grace to # unlock the screen saver. You can disable this functionality by passing # the "--arm" parameter, or by setting $use_kde=0 and $use_lid=0. # # There is also an option to track a BlueTooth device (e.g., a mobile phone). # In this case, the alarm is activated (and optionally, the KDE desktop is # locked) whenever the device is turned off or too distant for a given period, # and deactivated when the BlueTooth device is nearby. You need to provide the # device's BD address. If both KDE screen saver and BlueTooth checking are # enabled, then the alarm will be activated when *either* the screensaver # is enabled or the BlueTooth device is amiss. # # To control the sound and blinkenlights, and adjust the alarm activation # parameters, see the variables below. use strict; use warnings; use FileHandle; use IO::Pipe; use Time::HiRes qw(sleep time); use POSIX qw(:errno_h :signal_h); ############################## # Siren volume and content # Alarm audio volume (0..100) my $alarm_volume = 70; # Alarm command (default: synthesize a siren for 1.0 seconds): my $alarm_cmd = "sox -t nul /dev/null -t wav -s -w -c2 -r48000 -t raw - synth 1.0 sine 2000-4000 sine 4000-2000 | aplay -q -fS16_LE -c2 -r48000"; # my $alarm_cmd = "aplay keep_your_hands_off_me.wav"; # Warning audio volume (0..100) my $warn_volume = 45; # Alarm command (default: synthesize a biref siren): my $warn_cmd = "sox -t nul /dev/null -t wav -s -w -c2 -r48000 -t raw - synth 0.10 sine 2000-4000 sine 4000-2000 | aplay -q -fS16_LE -c2 -r48000"; # my $warn_cmd = "aplay warning.wav"; # Set ibm_acpi volume (0..15), if ibm_acpi is loaded with "experimental=1". # Combining $acpi_volume=15 and $alarm_volume=100 makes the alarm # dangerously loud. my $acpi_volume = 10; # Blink system LEDs when alarm activated? my $use_led = 'safe'; # 0=off, 'safe'=only LEDs whose state you can recover, 'all'=pretty blinkenlights! # Blink ThinkLight when alarm activated? my $use_light = 0; # 0=off, 1=on # Use AC state to monitor my $use_ac_state = 1; # 0=off, 1=on ############################## # Activation control # Tilt threshold (increase value to decrease sensitivity): my $thresh = 0.20; # Minimum movement duration between warning and alarm: my $min_hold = 1.3; # When armed, any movement triggers alarm. How long should it remain armed? my $arm_persist = 6; # After this many seconds of no movement, will allow a grace period again: my $grace_relax = 15; # Activate according to KDE screen saver? Otherwise, always active: my $use_kde = 1; # When screen saver locked, wait this long before activation: my $kde_lock_delay = 8; # Provide grace period if laptop lid is opened? my $use_lid = 1; # Opening a lid will grant this many seconds of grace (once): my $lid_grace = 7; # Lid must to be opened within this time to hold/pause alarm: my $lid_grace_window = 8; # Alarm will hold off this long when grace is available: my $lid_hold = 3; # Control arming according by presence of a BlueTooth token my $use_bluetooth = 0; # Lock KDE screen saver when BlueTootk is not present? my $bluetooth_lock_kde = 1; # BD address of BlueTooth token (use "hcitool scan" to find this) my $bluetooth_token_addr = '00:00:00:00:00:00'; # Consider token amiss when its received signal leve is below this (see "hcitool rssi") my $bluetooth_min_rssi = -10; # Activate if BlueTooth token not seen this long: my $bluetooth_activate_period = 12; # Disactivate if BlueTooth token seen this recently: my $bluetooth_deactivate_period = 5; # If BlueTooth detection activated KDE lock, don't do it again for this long my $bluetooth_lock_kde_interval = 30; # If BlueTooth wasn't polled for this long, disregard recent history my $bluetooth_reset_period = 10; ############################## # Other setup vars my $interval = 0.1; # sampling intervalm in seconds my $depth = 10; # number of recent samples to analyze my $verbose = 2; # 0=nothing, 1=alarms, 2=state transitions, 3=everything my $kde_check_interval = 1.5; # KDE screen saver check is expensive my $bluetooth_sleep = 1; # Sleep interval in BlueTooth check loop my $pos_file = '/sys/devices/platform/hdaps/position'; my $lid_file = '/proc/acpi/button/lid/LID/state'; my $led_file = '/proc/acpi/ibm/led'; my $light_file = '/proc/acpi/ibm/light'; my $bay_file = '/proc/acpi/ibm/bay'; my $volume_file = '/proc/acpi/ibm/volume'; # load ibm_acpi with experimental=1 my $bluetooth_file = '/proc/acpi/ibm/bluetooth'; # load ibm_acpi with experimental=1 my $ac_state_file = '/proc/acpi/ac_adapter/AC/state'; # ac state my $alsactl = '/usr/sbin/alsactl'; my $amixer = 'amixer'; my $kdesktop_lock = '/usr/bin/kdesktop_lock'; my $hcitool = '/usr/bin/hcitool'; my $l2ping = '/usr/bin/l2ping'; ############################## # Utility functions sub say { my ($verb, $what) = @_; print(gmtime().": $what\n") if $verb<=$verbose; } sub slurp { # read whole file my ($filename) = @_; local $/; my $fh = new FileHandle($filename,"<") or return; return <$fh>; } sub burp { # write whole file my ($filename) = shift; my $fh = new FileHandle($filename,">") or die "Can't open $filename for writing: $!"; print $fh @_ or die "Can't write to $filename: $!"; close $fh or die "Can't close $filename after writing: $!"; } sub stddev { # standard deviation of list my $sum=0; my $sumsq=0; my $n=$#_+1; for my $v (@_) { $sum += $v; $sumsq += $v*$v; } return sqrt($n*$sumsq - $sum*$sum)/($n*($n-1)); } sub frac { my ($x) = @_; return $x-int($x); } sub max { return $_[0] > $_[1] ? $_[0] : $_[1]; } my $alarm_file; # flags ongoing alarm (and also stores saved mixer settings) sub sound_alarm { # Sound alarm. Forks bash code which sets given volumes, runs the given # command, and then restores the given volumes to their saved values. my ($name, $volume, $acpi_volume, $cmd) = @_; return if (defined($alarm_file) && -f $alarm_file); say(1,$name); $alarm_file = `mktemp /tmp/tp-theft-tmp.XXXXXXXX` or die "mktemp: $?"; chomp($alarm_file); my ($acpi_vol_file, $acpi_vol_set, $acpi_vol_restore); if ($_=slurp($volume_file) and m/^level:\s+(\d+)\n/) { $acpi_vol_file = $volume_file; $acpi_vol_set = "level $acpi_volume"; $acpi_vol_restore = "level $1"; if (m/^mute:\s+on$/m) { $acpi_vol_set = "up,".$acpi_vol_set; # unmute first $acpi_vol_restore .= ",mute"; # mute last } } else { $acpi_vol_file='/dev/null'; $acpi_vol_set=''; $acpi_vol_restore=''; } system('/bin/bash', '-c', <<"EOF")==0 or die "Failed: $?"; ( trap \"echo '$acpi_vol_restore' > $acpi_vol_file; sleep 0.1; $alsactl -f $alarm_file restore; rm -f $alarm_file \" EXIT HUP QUIT TERM $alsactl -f $alarm_file store && # store ALSA echo '$acpi_vol_set' > $acpi_vol_file && sleep 0.1 && # set ACPI $amixer -q set Master $volume% unmute && # set ALSA Master $amixer -q set PCM 100% unmute && # set alsa PCM $cmd ) & # invoke command EOF } ############################## # KDE screen saver lock check if ($use_kde) { # Basic sanity check `/sbin/pidof kdesktop`; $?==0 or die "Can't use KDE, it's not running.\n"; } sub kdesktop_lock_status { # See if kdesktop_lock is running and check its cmdline and automatic lock delay my $bin = $kdesktop_lock; my $pids = `/sbin/pidof $bin`; return 'off' unless $?==0; for my $pid (split(/\s+/,$pids)) { next unless $pid =~ m/^\d+$/; # Attached to display ":0" or "localhost:0"? my $environ = slurp("/proc/$pid/environ") or next; my $good=0; my $home; for (split(/\x00/,$environ)) { $good=1 if m/^DISPLAY=(localhost)?:0$/; $home=$1 if m/^HOME=(.+)$/; # also remember its $HOME } next unless $good; # Check command line my $cmdline = slurp("/proc/$pid/cmdline") or next; $cmdline =~ m/^[^\x00]+\x00(?:([^\x00]+)\x00)?/ or die "Cannot parse $bin command line\n"; if (!defined($1)) { # Read KDE screensaver lock time defined($home) or die "Cannot find HOME in environment of $bin process"; my $rc_path = "$home/.kde/share/config/kdesktoprc"; my $rc = new FileHandle($rc_path,"<") or die "Error opening $rc_path: $!"; while (<$rc>) { m/^LockGrace=(\d+)$/ and return ('auto', $1/1000.0); }; die "Cannot parse $rc_path"; } elsif ($1 eq '--forcelock') { return "force"; } } return 'off'; } my $last_kls_update = 0; # time of last update my $last_kls = 'init'; # last state seen my $last_kls_start; # when that state started my @last_kls_opwhy = (); sub check_kde_lock { # De/activate according to KDE screen saver: my $now=time(); return @last_kls_opwhy if $now < $last_kls_update + $kde_check_interval; my ($kls, $auto_delay) = kdesktop_lock_status(); $last_kls_update = time(); if ($kls ne $last_kls) { $last_kls = $kls; $last_kls_start = $now; } if ($kls eq 'off') { # no screen saver @last_kls_opwhy = (0, 'KDE screen saver not locked'); } elsif ($kls eq 'auto') { # screen saver with automatic lock if ($now >= $last_kls_start + $auto_delay + $kde_lock_delay) { @last_kls_opwhy = (1, 'KDE screen saver is auto-locked'); } } elsif ($kls eq 'force') { # screen saver with forced lock if ($now >= $last_kls_start + $kde_lock_delay) { @last_kls_opwhy = (1, 'KDE screen saver is forced-locked'); } } return @last_kls_opwhy; } # Lock KDE desktop sub force_kde_lock { return if ($last_kls eq 'auto' or $last_kls eq 'force'); say(1, "Locking KDE desktop"); # system('dcop kdesktop KScreensaverIface lock') or die "Cannot lock KDE dekstop: $!" my %oldENV = %ENV; my $kde_pids = `/sbin/pidof -x /usr/bin/startkde`; for my $kde_pid (split(/\s+/,$kde_pids)) { my $kde_env = slurp("/proc/$kde_pid/environ") or next; %ENV = (); for (split(/\x00/,$kde_env)) { m/^(DISPLAY|HOME|XAUTHORITY|USER|DBUS_SESSION_BUS_ADDRESS)=(.+)$/ and $ENV{$1} = $2; } next unless defined($ENV{DISPLAY}) and $ENV{DISPLAY} =~ m/^:/; system('dcop kdesktop KScreensaverIface lock') and die "Cannot lock KDE dekstop: $!" } my %ENV = %oldENV; } ############################## # Lid checking if ($use_lid) { # sanity check slurp($lid_file) or die "Can't use lid via $lid_file: $!"; } my $last_lid_status = 'open'; my $last_lid_open = 0; sub check_lid { my $lid = slurp($lid_file) or return; if ($lid =~ m/state: *open$/) { $last_lid_open = time() if ($last_lid_status eq 'closed'); $last_lid_status = 'open'; } else { $last_lid_status = 'closed'; } return $last_lid_status; } ############################## # AC state checking my $ac_state; sub read_ac_state { open F, $ac_state_file; if ((<F>) =~ /^state:\s*(on|off)-line$/) { $ac_state=$1; } close F; return($1); } read_ac_state; ### used for testing print "AC: $ac_state\n"; ############################## # LED blinking # Flash LEDs sub led_activate { return if $use_led eq '0'; my $ledf = new FileHandle($led_file,">"); if (!defined($ledf)) { print "Cannot open $led_file, disabling LED indicator: $!\n"; $use_led = '0'; return; } $ledf->autoflush(1); my $base = time()*2.5; print $ledf '0 '.((frac($base)>0.7)?'on':'off')."\n"; # power if ($use_led eq 'all') { # battery -- we can't recover these print $ledf '1 '.((frac($base+0.50)>0.7)?'on':'off')."\n"; # battery, orange print $ledf '2 '.((frac($base+0.25)>0.7)?'on':'off')."\n"; # battery, yellow } print $ledf '4 '.((frac($base)>0.7)?'on':'off')."\n"; # bay print $ledf '7 '.((frac($base+0.725)>0.7)?'on':'off')."\n"; # standby } # Restore LEDs to normal state sub led_restore { return if $use_led eq '0'; my $ledf = new FileHandle($led_file,">") or die "Cannot open $led_file: $!\n"; $ledf->autoflush(1); print $ledf "0 on\n"; # power=on if ($use_led eq 'all') { # battery -- we can't recover these print $ledf "1 on\n"; print $ledf "2 on\n"; } print $ledf "7 off\n"; # power=off if (my $baydata = slurp($bay_file)) { my $is_bay = ($baydata =~ m/^status:\s*occupied$/m)?'on':'off'; print $ledf "4 $is_bay\n"; # reset to correct status } else { print $ledf "4 on\n"; # force bay on, we don't know correct status } } ############################## # ThinkLight blinking sub light_activate { return if $use_light eq '0'; my $lightf = new FileHandle($light_file,">"); if (!defined($lightf)) { print "Cannot open $light_file, disabling ThinkLight indicator: $!\n"; $use_light = '0'; return; } my $base = time()/2; print $lightf (check_lid() eq 'open' && ((frac($base)<0.1)?'on':'off'))."\n"; } sub light_restore { return if $use_light eq '0'; my $lightf = new FileHandle($light_file,">") or die "Cannot open $light_file: $!\n"; print $lightf "off\n"; # ThinkLight } ############################## # BlueTooth token detection { my $temporary_bt = 0; my $bt_pid; my $bt_pipe; my $bluetooth_last_seen = 0; # last time we saw the BlueTooth token my $bluetooth_last_read = 0; # last time we polled the BlueTooth child process my $bluetooth_ignore_missing_until = time() + $bluetooth_reset_period; if ($use_bluetooth) { # If BlueTooth is disabled, temporarily enable it slurp($bluetooth_file) or die "Can't control bluetooth via $bluetooth_file: $!"; my $bt_status = slurp($bluetooth_file); $temporary_bt = $bt_status =~ m/status:[\t]*disabled/; if ($temporary_bt) { say(1, 'BlueTooth was disabled, enabling'); burp($bluetooth_file, "enable\n"); sleep(1); } } sub bluetooth_reset { # disregard recent (negative) history $bluetooth_ignore_missing_until = max($bluetooth_ignore_missing_until, time() + $bluetooth_reset_period); } sub check_bluetooth { if (!defined($bt_pid)) { # Create new child process, which will loop checking # for the token. Each time it sees the token, it writes # the current time to a pipe that's read by the main process. $bt_pipe = new IO::Pipe; $bt_pid = fork(); die "Cannot fork BlueTooth check: $!" unless defined($bt_pid); if (!$bt_pid) { # Child $bt_pipe->writer(); $bt_pipe->autoflush(1); open(STDOUT, ">/dev/null"); open(STDERR, ">/dev/null"); while(1) { # Is the BlueTooth token reachable? my $res = system($l2ping,'-c','1','-t',1,$bluetooth_token_addr); die "Failed invoking l2ping: $!\n" if $res&0xFF; if ($res==0) { # Is the BlueTooth sufficiently close, as judged by signal strength? $res = `$hcitool rssi $bluetooth_token_addr`; if ($?==0 && $res =~ m/^RSSI return value: (-?[0-9]+)$/) { my $rssi = $1; printf $bt_pipe "%d\n", time() if ($rssi > $bluetooth_min_rssi); } } sleep($bluetooth_sleep); } } $bt_pipe->reader(); $bt_pipe->blocking(0); } while (1) { my $res = <$bt_pipe>; last if ($!==POSIX::EAGAIN); # busy die "Error reading from BlueTooth check child process\n" unless defined($res); $bluetooth_last_seen = $res; } my $now = time(); bluetooth_reset() if ($now > $bluetooth_last_read + $bluetooth_reset_period); $bluetooth_last_read = time(); if ($now > max($bluetooth_last_seen + $bluetooth_activate_period, $bluetooth_ignore_missing_until)) { if ($bluetooth_lock_kde) { force_kde_lock(); $bluetooth_ignore_missing_until = max($bluetooth_ignore_missing_until, time() + $bluetooth_lock_kde_interval); } return (1, "BlueTooth token not seen for $bluetooth_activate_period seconds, activating."); } elsif ($now < $bluetooth_last_seen + $bluetooth_deactivate_period) { return (0, "BlueTooth token seen during last $bluetooth_deactivate_period seconds, deactivating."); } return (); } sub bluetooth_restore { if ($temporary_bt) { say(1, 'Disabling BlueTooth'); burp($bluetooth_file, "disable\n"); } if ($bt_pid) { kill(SIGTERM, $bt_pid); waitpid($bt_pid, 0); } } } ############################## # Main code my $state; # See state machine in main loop my %state_names=(0 =>'disabled ', 0.5=>'activating ', 1 =>'active+grace', 2 =>'active ', 3 =>'hold+grace ', 4 =>'armed+grace ', 5 =>'hold ', 6 =>'armed ', 7 =>'armed-force ' ); my $state_end = 0; my $last_tilt = 0; my $arm_forced = 0; my (@XHIST, @YHIST); # sensor history my $initpower=read_ac_state(); #check power state when script runs sub set_state { my ($st, $why) = @_; say(2, "state=[".$state_names{$st}."] ($why)"); (@XHIST, @YHIST) = () if $st==0.5; led_restore() and light_restore() if defined($state) && $st==0; $state = $st; } sub get_pos { my $pos = slurp($pos_file); return undef if $!{EBUSY}; die "Can't open HDAPS file $pos_file: $!\n" if (!defined($pos) || $!); $pos =~ m/^\((-?\d+),(-?\d+)\)$/ or die "Can't parse $pos_file content\n"; return ($1,$2); } for (@ARGV) { m/^--arm/ && do { $arm_forced=1; $use_lid=0; $use_kde=0; last; }; die "Unknown parameter\n"; } set_state( ($use_kde || $use_bluetooth) ? 0 : 0.5, "init"); eval { $SIG{'HUP'}=$SIG{'INT'}=$SIG{'ABRT'}=$SIG{'QUIT'}=$SIG{'SEGV'}=$SIG{'TERM'} = sub { die "signal\n" }; while (1) { sleep(($state==0 && $use_kde) ? $kde_check_interval : $interval); check_lid() if $use_lid; # Check screensaver and BlueTooth. Activate if either says so, # otherwise deactivate if either says so. my ($op1, $why1); ($op1, $why1) = check_kde_lock() if $use_kde; my ($op2, $why2); ($op2, $why2) = check_bluetooth() if $use_bluetooth; my ($op, $why) = ( !defined($op1) || ( defined($op2) && $op2>$op1 ) ) ? ($op2,$why2) : ($op1,$why1); if (defined($op)) { if ($op==1 && $state==0) { set_state(0.5, $why); } if ($op==0 && $state>0) { set_state(0, $why); bluetooth_reset(); } } next unless $state>0; # Collect and analyze sensor data: my $now = time(); my $tilted; my ($x,$y) = get_pos() or next; # Hopefully the error is transient push(@XHIST,$x); push(@YHIST,$y); if ($state>0.5) { shift(@XHIST); shift(@YHIST); my $xdev = stddev(@XHIST); my $ydev = stddev(@YHIST); say(3,"X: v=$xdev (".join(',',@XHIST).") Y: v=$ydev (".join(",",@YHIST).")"); $tilted = ($xdev>$thresh || $ydev>$thresh); $last_tilt = $now if $tilted; } # ac state check and set when system started on battery and later plugged power cord my $power = read_ac_state(); if ($initpower eq 'off' && $power eq 'on') { $initpower='on'; } # Decide: state machine transitions if ($state==0.5) { # ACTIVATING (collecting motion data will soon activate) if ($#XHIST >= $depth && $#YHIST >= $depth) { set_state($arm_forced?7:$use_lid?1:2, "finished data collection"); } } elsif ($state==1) { # ACTIVE+GRACE (quiet for a long time, awaiting movement) if ($tilted) { set_state(3, "motion detected, holding for $lid_hold seconds, open lid for grace"); $state_end = $now + $lid_hold; sound_alarm("WARNING", $warn_volume, $acpi_volume, $warn_cmd); } } elsif ($state==2) { # ACTIVE (short for a shorter time, awaiting movement) if ($tilted) { set_state(5, "motion detected, holding for $min_hold seconds"); $state_end = $now + $min_hold; sound_alarm("WARNING", $warn_volume, $acpi_volume, $warn_cmd); } else { if ($use_lid && ($now > $last_tilt + $grace_relax )) { set_state(1, "$grace_relax seconds since last motion, so allowing grace again"); } } } elsif ($state==3) { # HOLD+GRACE (recent movemvent, but still holding off alarm; after long quiet) if ($now < $last_lid_open + $lid_grace) { set_state(5, "lid opened, holding for $lid_grace seconds grace period"); $state_end = $now + $lid_grace; } elsif ($now >= $state_end) { my $delta = $lid_grace_window - $lid_hold; $state_end = $now + $delta; set_state(4, "hold ended, arming but allowing grace for $delta more seconds"); } } elsif ($state==4) { # ARMED+GRACE (armed, but recently quiet so allow grace if lid opened) if ($now < $last_lid_open + $lid_grace) { set_state(5, "lid opened, holding for $lid_grace seconds grace period"); $state_end = $now + $lid_grace; } elsif ($now >= $state_end) { set_state(6, "grace window ended"); } } elsif ($state==5) { # HOLD (recent movement, but still holding off alarm; there was recent action) if ($now >= $state_end) { set_state(6, "hold ended, arming"); } } elsif ($state==6) { # ARMED (sound alarm on any movement) if ($now > $last_tilt + $arm_persist) { set_state(2, "no motion for $arm_persist seconds, unarming"); } } # LEDs: if ($state>0) { led_activate(); light_activate(); } # Alarm: # included initpower state if (($state==4 || $state==6 || $state==7) && ($tilted || ($power eq 'off') && $initpower eq 'on')) { sound_alarm("ALARM", $alarm_volume, $acpi_volume, $alarm_cmd); } } }; print "Shutting down.\n" if $verbose>1; led_restore() and light_restore() if ($state>0); bluetooth_restore(); die "$@" if $@;