← Back
Editing: miscutils.cpython-312.pyc
� � jE � � � d dl mZmZmZ d dlZd dlZd dlZd dlmZ d dl m Z ej d� Z da d� Zd� Zd� Zd � Zy) � )�print_function�absolute_import�unicode_literalsN)�which)�_�dnfc �v � t �.t d� a t j t d� t � t S )N�rpmkeysz3Using rpmkeys executable at %s to verify signatures)�_rpmkeys_binaryr �_logger�debugr � � �6/usr/lib/python3.12/site-packages/dnf/rpm/miscutils.py�_find_rpmkeys_binaryr s/ � �� � � �*��� � �a�M�N�%� '� �r c �N � t | � dk s | d dk7 s| d ryd\ }}}}| dd D ]o }d|v r y|j d � rd }� |j d � rd }�1|j d � rd }�E|j d � rd|v rd }�]|j d � r�o y |ry|s|ry|ryy)N� r s -:���� )FFFF� s : BADs : NOKEYTs : NOTTRUSTEDs : NOTFOUNDs : OKs ignature,� )�len�endswith)�data� trusted_sig� missing_key� not_trusted� not_signed�is r �_process_rpm_outputr $ s� � � �4�y�1�}��Q��5�(�D��H��8R�5�K��k�:� �!�B�Z�� �q�=�� �Z�Z� � #� �K� �Z�Z�� (� �K� �Z�Z� � &� �J� �Z�Z�� �\�Q�%6� �K����G�$�� � �� �[�� �� r c �6 � t � }|� t j j |� s t j t d� � yddd|dddd f}t t j � }d |d < t j |||t j d | � � 5 }|j � d }d d d � j }t |� t ur t! d� �|dk\ s|dk ryt# j% d� � }|r|S |rdS dS # 1 sw Y �`xY w)Nz4Cannot find rpmkeys executable to verify signatures.r r z --checksigz--rootz --verbosez#--define=_pkgverify_level signaturez --define=_pkgverify_flags 0x0�-�C�LC_ALL�/)�args� executable�env�stdout�cwd�stdinr z Popen set return code to non-int� )r �os�path�isfiler �criticalr �dict�environ� subprocess�Popen�PIPE� communicate� returncode�type�int�AssertionErrorr �split) �package� installroot�rpmkeys_binaryr& r( �pr r7 �rets r �_verifyPackageUsingRpmkeysrA C s � �)�+�N�� �R�W�W�^�^�N�%C�����Q�R�S�� �|�X�{�K� 1�3R� � �D� �r�z�z� �C��C��M� � � ��%�� �?�?��� � ��}�}��q�!�� � � � �J� �J��s�"� � ?�@�@� �Q��*�q�.�� �d�j�j�� /� 0�C� �� ��1�!��!�% � �s � D�Dc �2 � t j |t j t j z t j z � } t || j j � }t j |� |S # t j |� w xY w)a Takes a transaction set and a package, check it's sigs, return 0 if they are all fine return 1 if the gpg key can't be found return 2 if the header is in someway damaged return 3 if the key is not trusted return 4 if the pkg is not gpg or pgp signed) r- �open�O_RDONLY�O_NOCTTY� O_CLOEXECrA �ts�rootDir�close)rG r< �fdno�values r �checkSigrL d sb � � �7�7�7�B�K�K�� � � 3�B�L�L� @� A�D��*�4���� � �?�� ����� �L�� �����s � A? �?B)� __future__r r r r- r3 �logging�shutilr �dnf.i18nr � getLoggerr r r r rA rL r r r �<module>rR sI �� I� H� � � � � � �'� � �E� "����� �> "�B r
Save File
Cancel