관리-도구
편집 파일: miscutils.cpython-36.pyc
3 ��f � @ sv d dl mZmZmZ d dlZd dlZd dlZd dlmZ d dl m Z ej d�Z da dd� Zdd � Zd d � Zd d � ZdS )� )�print_function�absolute_import�unicode_literalsN)�which)�_Zdnfc C s$ t d kr td�a tjtd�t � t S )N�rpmkeysz3Using rpmkeys executable at %s to verify signatures)�_rpmkeys_binaryr �_logger�debugr � r r � /usr/lib/python3.6/miscutils.py�_find_rpmkeys_binary s r c C s� t | �dk s | d dks | d r$dS d\}}}}x^| dd� D ]N}d|krNdS |jd�r^d }q>|jd �rnd }q>|jd �r~d }q>|jd �s>dS q>W |r�dS |r�dS |r�d S dS )N� r s -:� � Fs : BADs : NOKEYTs : NOTTRUSTEDs : NOTFOUNDs : OK� ���)FFFFr )�len�endswith)�dataZseen_sigZ missing_keyZ not_trustedZ not_signed�ir r r �_process_rpm_output$ s* r c C s� t � }|d ks tjj|� r.tjtd�� dS ddd|dddd f}tj||d d itj d | d ��}|j � d }W d Q R X |j }t |�t k r�td��|dks�|dk r�dS t|jd��}|r�|S |r�dS dS )Nz4Cannot find rpmkeys executable to verify signatures.r r z --checksigz--rootz --verbosez#--define=_pkgverify_level signaturez --define=_pkgverify_flags 0x0�-�LC_ALL�C�/)�args� executable�env�stdout�cwd�stdinr z Popen set return code to non-int� )r �os�path�isfiler Zcriticalr � subprocess�Popen�PIPEZ communicate� returncode�type�int�AssertionErrorr �split)�packageZ installrootZrpmkeys_binaryr �pr r) �retr r r �_verifyPackageUsingRpmkeys? s0 r1 c C s> t j|t jt jB t jB �}zt|| jj�}W dt j|� X |S )a Takes a transaction set and a package, check it's sigs, return 0 if they are all fine return 1 if the gpg key can't be found return 2 if the header is in someway damaged return 3 if the key is not trusted return 4 if the pkg is not gpg or pgp signedN) r# �open�O_RDONLY�O_NOCTTY� O_CLOEXECr1 �tsZrootDir�close)r6 r. Zfdno�valuer r r �checkSig^ s r9 )Z __future__r r r r# r& ZloggingZshutilr Zdnf.i18nr Z getLoggerr r r r r1 r9 r r r r �<module> s