[1] | 1 | #########################################################################
|
---|
| 2 | #
|
---|
| 3 | # Subroutine for the 'checksrc' command
|
---|
| 4 | #
|
---|
| 5 | #########################################################################
|
---|
[27] | 6 | #
|
---|
| 7 | # Copyright Rainer Wichmann (2005)
|
---|
| 8 | #
|
---|
| 9 | # License Information:
|
---|
| 10 | # This program is free software; you can redistribute it and/or modify
|
---|
| 11 | # it under the terms of the GNU General Public License as published by
|
---|
| 12 | # the Free Software Foundation; either version 2 of the License, or
|
---|
| 13 | # (at your option) any later version.
|
---|
| 14 | #
|
---|
| 15 | # This program is distributed in the hope that it will be useful,
|
---|
| 16 | # but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
| 17 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
| 18 | # GNU General Public License for more details.
|
---|
| 19 | #
|
---|
| 20 | # You should have received a copy of the GNU General Public License
|
---|
| 21 | # along with this program; if not, write to the Free Software
|
---|
| 22 | # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
---|
| 23 | #
|
---|
[1] | 24 |
|
---|
| 25 | commandCHECKSRC() {
|
---|
| 26 | printINFO "About to run \"$action\""
|
---|
| 27 |
|
---|
| 28 | needEXE ls gpg
|
---|
| 29 |
|
---|
| 30 |
|
---|
| 31 | cd "${basedir}/source" || printFATAL "could not cd to ${basedir}/source"
|
---|
| 32 |
|
---|
| 33 | LIST=`ls samhain*.tar.gz 2>/dev/null`
|
---|
| 34 | if test x$? != x0
|
---|
| 35 | then
|
---|
| 36 | printINFO "No sources available."
|
---|
| 37 | fi
|
---|
| 38 |
|
---|
| 39 | for ff in $LIST
|
---|
| 40 | do
|
---|
| 41 | sh_version=`echo "$ff" | sed 's/.*samhain\-//g' | sed 's/\.tar\.gz//g'`
|
---|
| 42 | if test x"${sh_version}" = x
|
---|
| 43 | then
|
---|
| 44 | printFATAL "Cannot determine version for $ff"
|
---|
| 45 | fi
|
---|
| 46 |
|
---|
| 47 | if test "$ff" != "samhain-${sh_version}.tar.gz"
|
---|
| 48 | then
|
---|
| 49 | printFATAL "Version number not correctly extracted from $ff"
|
---|
| 50 | fi
|
---|
| 51 |
|
---|
| 52 | if test -f "samhain-${sh_version}.tar.gz.asc"
|
---|
| 53 | then
|
---|
| 54 | :
|
---|
| 55 | else
|
---|
| 56 | printWARNING "No detached signature for $ff found"
|
---|
| 57 | if test x"$cs_delete" = x1
|
---|
| 58 | then
|
---|
| 59 | if test x"$simulate" = x0
|
---|
| 60 | then
|
---|
| 61 | printLOG "REMOVE $ff: No detached signature found."
|
---|
| 62 | rm -f "$ff"
|
---|
| 63 | else
|
---|
| 64 | printLOG "REMOVE $ff: No detached signature found."
|
---|
| 65 | printINFO "rm -f $ff"
|
---|
| 66 | fi
|
---|
| 67 | else
|
---|
| 68 | printLOG "BAD: $ff (no signature)"
|
---|
| 69 | fi
|
---|
| 70 | continue
|
---|
| 71 | fi
|
---|
| 72 |
|
---|
| 73 | sig_lines=`(LANG="C"; gpg --status-fd 1 --verify "samhain-${sh_version}.tar.gz.asc" "samhain-${sh_version}.tar.gz" 2>/dev/null)`
|
---|
| 74 | sig_ok=`echo ${sig_lines} | grep 'GOODSIG'`
|
---|
| 75 | sig_nokey=`echo ${sig_lines} | grep 'NO_PUBKEY'`
|
---|
| 76 |
|
---|
| 77 | if test x"${sig_nokey}" != x
|
---|
| 78 | then
|
---|
| 79 | printWARNING "Public key (ID 0F571F6C) not found, trying to import it."
|
---|
| 80 | gpg --import ${basedir}/private/0F571F6C.asc 2>&5
|
---|
| 81 | sig_lines=`(LANG="C"; gpg --status-fd 1 --verify "samhain-${sh_version}.tar.gz.asc" "samhain-${sh_version}.tar.gz" 2>/dev/null)`
|
---|
| 82 | sig_ok=`echo ${sig_lines} | grep 'GOODSIG'`
|
---|
| 83 | sig_nokey=`echo ${sig_lines} | grep 'NO_PUBKEY'`
|
---|
| 84 | fi
|
---|
| 85 |
|
---|
| 86 | if test x"${sig_nokey}" != x
|
---|
| 87 | then
|
---|
| 88 | printFATAL "Importing public key failed."
|
---|
| 89 | fi
|
---|
| 90 |
|
---|
| 91 | if test x"${sig_ok}" = x
|
---|
| 92 | then
|
---|
| 93 | printWARNING "File $ff has no good signature"
|
---|
| 94 | if test x"$cs_delete" = x1
|
---|
| 95 | then
|
---|
| 96 | if test x"$simulate" = x0
|
---|
| 97 | then
|
---|
| 98 | printLOG "REMOVE $ff: No good signature found."
|
---|
| 99 | rm -f "$ff"
|
---|
| 100 | else
|
---|
| 101 | printLOG "REMOVE $ff: No good signature found."
|
---|
| 102 | printINFO "rm -f $ff"
|
---|
| 103 | fi
|
---|
| 104 | else
|
---|
| 105 | printLOG "BAD: $ff (invalid signature)"
|
---|
| 106 | fi
|
---|
| 107 | continue
|
---|
| 108 | fi
|
---|
| 109 | printLOG "OK: $ff"
|
---|
| 110 |
|
---|
| 111 | done
|
---|
| 112 |
|
---|
| 113 | if test x"$cs_delete" = x1
|
---|
| 114 | then
|
---|
| 115 | printLOG "Checked sources in ${basedir}/source/ (delete=on)"
|
---|
| 116 | else
|
---|
| 117 | printLOG "Checked sources in ${basedir}/source/ (delete=off)"
|
---|
| 118 | fi
|
---|
| 119 | return 0
|
---|
| 120 | }
|
---|