tool to use glsa.py

glsa-check.py (text/plain), 4.92 KB, created by Marius Mauch (RETIRED) on 2003-11-05 09:53:02 UTC

#!/usr/bin/python

# $Header: /home/cvsroot/gentoo-projects/gentoo-security/GLSA/user-tools/glsa-check.py,v 1.4 2003/11/04 23:00:35 genone Exp $

# This program is licensed under the GPL, version 2

import os,string,sys
from getopt import getopt,GetoptError

__program__ = "glsa-check"
__author__ = "Marius Mauch <[e-mail]>"
__version__ = "0.2.1"

optionmap = [
["-l", "--list", "list all unapplied GLSA"],
["-d", "--dump", "--print", "show all information about the given GLSA"],
["-t", "--test", "test if this system is affected by the given GLSA"],
["-p", "--pretend", "show the necessary commands to apply this GLSA"],
["-f", "--fix", "try to auto-apply this GLSA (experimental)"],
["-c", "--commit", "--inject", "commit the given GLSA into the checkfile"],
["-i", "--info", "show the current glsa-check configuration"],
["-h", "--help", "show this help message"],
["-v", "--version", "some information about this tool"]
]

# print a warning as this is beta code
sys.stderr.write("WARNING: This tool is completely new and not very tested, so it should not be used\n")
sys.stderr.write("on production systems. It's mainly a test tool for the new GLSA release/distribution\n")
sys.stderr.write("system. Please report any success or failure to with this tool to:\n")
sys.stderr.write("        "+__author__+"\n\n")

# option parsing
args = []
params = []
try:
	args, params = getopt(sys.argv[1:], "dplfchivt", \
		["dump", "print", "list", "pretend", "fix", "commit", "inject", "help", "info", "version", "test"])
	args = [a for a,b in args]
	
	# sanity checking
	if len(args) <= 0:
		print "no option given: what should I do ?"
		mode="help"
	elif len(args) > 1:
		print "please use only one option per call"
		mode = "help"
	else:
		# in what mode are we ?
		args = args[0]
		for m in optionmap:
			if args in [o for o in m[:-1]]:
				mode = m[1][2:]
except GetoptError:
	print "unknown option given"
	mode = "help"

# we need a set of glsa for most operation modes
if len(params) <= 0 and mode in ["fix", "test", "pretend", "dump", "commit"]:
	print
	print "no GLSA given, so we'll do nothing for now. "
	print "If you want to run on all GLSA please tell me so "
	print "(specify all or world as parameter)"
	print
	mode = "help"
elif len(params) <= 0 and mode == "list":
	params.append("new")
	
# show help message
if mode == "help":
	print
	print "Syntax: glsa-check <option> [glsa-list]"
	print
	for m in optionmap:
		print m[0] + "\t" + m[1] + "   \t: " + m[-1]
		for o in m[2:-1]:
			print "\t" + o
	print
	print "glsa-list can contain an arbitrary number of GLSA ids "
	print "or the special identifiers 'all' and 'new'"
	print
	sys.exit(1)

# we need root priviledges for write access
if mode in ["fix", "commit", "inject"] and os.geteuid() != 0:
	print
	print "This tool needs root access to "+mode+" this GLSA"
	print
	sys.exit(2)

# show version and copyright information
if mode == "version":
	print
	print __program__ + ", version " + __version__
	print "Author: " + __author__
	print "This program is licensed under the GPL, version 2"
	print
	sys.exit(0)

# delay this for speed increase
from glsa import *

# show configuration:
if mode == "info":
	ckeys = config.keys()
	ckeys.sort()
	for k in ckeys:
		print k + "\t: " + config[k]
	sys.exit(0)

# build glsa lists
completelist = get_glsa_list(config["GLSA_DIR"])

if os.access(config["CHECKFILE"], os.R_OK):
	checklist = [line.strip() for line in open(config["CHECKFILE"], "r").readlines()]
else:
	checklist = []
todolist = [e for e in completelist if e not in checklist]

glsalist = []
if "new" in params:
	glsalist = todolist
	params.remove("new")
if "all" in params:
	glsalist = completelist
	params.remove("all")
glsalist.extend([g for g in params if g not in glsalist])

# list short information for given or new GLSA
if mode == "list":
	for myid in glsalist:
		myglsa = glsa(myid)
		if myglsa.status == "applied":
			status = "[A]"
		else:
			status = "[N]"
		print myglsa.nr, status, myglsa.package, ": ", myglsa.summary, "(" + myglsa.severity + ")"
	sys.exit(0)

# dump, fix, commit and fix are nearly the same code, only the glsa method call differs
if mode in ["dump", "fix", "commit", "pretend"]:
	for myid in glsalist:
		if mode == "dump":
			glsa(myid).dump()
		elif mode == "fix":
			glsa(myid).fix()
		elif mode == "pretend":
			glsa(myid).pretend()
		elif mode == "commit":
			print "injecting " + myid
			glsa(myid).check_in()
		if glsalist[-1] != myid:
			print 
			print 60*'*'
			print
	sys.exit(0)

# test is a bit different as glsa.test() produces no output
if mode == "test":
	outputlist = []
	for myid in glsalist:
		myglsa = glsa(myid)
		if myglsa.test():
			outputlist.append((myglsa.nr, myglsa.package))
	if len(outputlist) > 0:
		print "This system is affected by the following GLSA:"
		for g,p in outputlist:
			print g, "(" + p + ")"
	else:
		print "This system is not affected by any of the listed GLSA"
	sys.exit(0)
	
# something wrong here, all valid paths are covered with sys.exit()
print "nothing more to do"
sys.exit(2)