File Explorer

1# This program is free software; you can redistribute it and/or modify2# it under the terms of the GNU General Public License as published by3# the Free Software Foundation; either version 2 of the License, or4# (at your option) any later version.5#6# This program is distributed in the hope that it will be useful,7# but WITHOUT ANY WARRANTY; without even the implied warranty of8# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the9# GNU Library General Public License for more details.10#11# You should have received a copy of the GNU General Public License12# along with this program; if not, write to the Free Software13# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.14# Copyright 2003 Duke University15 16from __future__ import print_function, absolute_import, unicode_literals17 18import os19import subprocess20import logging21from shutil import which22 23from dnf.i18n import _24 25_logger = logging.getLogger('dnf')26_rpmkeys_binary = None27 28def _find_rpmkeys_binary():29    global _rpmkeys_binary30    if _rpmkeys_binary is None:31        _rpmkeys_binary = which("rpmkeys")32        _logger.debug(_('Using rpmkeys executable at %s to verify signatures'),33                      _rpmkeys_binary)34    return _rpmkeys_binary35 36def _process_rpm_output(data):37    # No signatures or digests = corrupt package.38    # There is at least one line for -: and another (empty) entry after the39    # last newline.40    if len(data) < 3 or data[0] != b'-:' or data[-1]:41        return 242    seen_sig, missing_key, not_trusted, not_signed = False, False, False, False43    for i in data[1:-1]:44        if b': BAD' in i:45            return 246        elif i.endswith(b': NOKEY'):47            missing_key = True48        elif i.endswith(b': NOTTRUSTED'):49            not_trusted = True50        elif i.endswith(b': NOTFOUND'):51            not_signed = True52        elif not i.endswith(b': OK'):53            return 254    if not_trusted:55        return 356    elif missing_key:57        return 158    elif not_signed:59        return 460    # we still check return code, so this is safe61    return 062 63def _verifyPackageUsingRpmkeys(package, installroot):64    rpmkeys_binary = _find_rpmkeys_binary()65    if rpmkeys_binary is None or not os.path.isfile(rpmkeys_binary):66        _logger.critical(_('Cannot find rpmkeys executable to verify signatures.'))67        return 268 69    # "--define=_pkgverify_level signature" enforces signature checking;70    # "--define=_pkgverify_flags 0x0" ensures that all signatures are checked.71    args = ('rpmkeys', '--checksig', '--root', installroot, '--verbose',72            '--define=_pkgverify_level signature', '--define=_pkgverify_flags 0x0',73            '-')74    env = dict(os.environ)75    env['LC_ALL'] = 'C'76    with subprocess.Popen(77            args=args,78            executable=rpmkeys_binary,79            env=env,80            stdout=subprocess.PIPE,81            cwd='/',82            stdin=package) as p:83        data = p.communicate()[0]84    returncode = p.returncode85    if type(returncode) is not int:86        raise AssertionError('Popen set return code to non-int')87    # rpmkeys can return something other than 0 or 1 in the case of a88    # fatal error (OOM, abort() called, SIGSEGV, etc)89    if returncode >= 2 or returncode < 0:90        return 291    ret = _process_rpm_output(data.split(b'\n'))92    if ret:93        return ret94    return 2 if returncode else 095 96def checkSig(ts, package):97    """Takes a transaction set and a package, check it's sigs,98    return 0 if they are all fine99    return 1 if the gpg key can't be found100    return 2 if the header is in someway damaged101    return 3 if the key is not trusted102    return 4 if the pkg is not gpg or pgp signed"""103 104    fdno = os.open(package, os.O_RDONLY|os.O_NOCTTY|os.O_CLOEXEC)105    try:106        value = _verifyPackageUsingRpmkeys(fdno, ts.ts.rootDir)107    finally:108        os.close(fdno)109    return value110