1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
#########################################################################
#
# Subroutine for the 'checksrc' command
#
#########################################################################
#
# Copyright Rainer Wichmann (2005)
#
# License Information:
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
#
commandCHECKSRC() {
printINFO "About to run \"$action\""
needEXE ls gpg
cd "${basedir}/source" || printFATAL "could not cd to ${basedir}/source"
LIST=`ls samhain*.tar.gz 2>/dev/null`
if test x$? != x0
then
printINFO "No sources available."
fi
for ff in $LIST
do
sh_version=`echo "$ff" | sed 's/.*samhain\-//g' | sed 's/\.tar\.gz//g'`
if test x"${sh_version}" = x
then
printFATAL "Cannot determine version for $ff"
fi
if test "$ff" != "samhain-${sh_version}.tar.gz"
then
printFATAL "Version number not correctly extracted from $ff"
fi
if test -f "samhain-${sh_version}.tar.gz.asc"
then
:
else
printWARNING "No detached signature for $ff found"
if test x"$cs_delete" = x1
then
if test x"$simulate" = x0
then
printLOG "REMOVE $ff: No detached signature found."
rm -f "$ff"
else
printLOG "REMOVE $ff: No detached signature found."
printINFO "rm -f $ff"
fi
else
printLOG "BAD: $ff (no signature)"
fi
continue
fi
sig_lines=`(LANG="C"; gpg --status-fd 1 --verify "samhain-${sh_version}.tar.gz.asc" "samhain-${sh_version}.tar.gz" 2>/dev/null)`
sig_ok=`echo ${sig_lines} | grep 'GOODSIG'`
sig_nokey=`echo ${sig_lines} | grep 'NO_PUBKEY'`
if test x"${sig_nokey}" != x
then
printWARNING "Public key (ID 0F571F6C) not found, trying to import it."
gpg --import ${basedir}/private/0F571F6C.asc 2>&5
sig_lines=`(LANG="C"; gpg --status-fd 1 --verify "samhain-${sh_version}.tar.gz.asc" "samhain-${sh_version}.tar.gz" 2>/dev/null)`
sig_ok=`echo ${sig_lines} | grep 'GOODSIG'`
sig_nokey=`echo ${sig_lines} | grep 'NO_PUBKEY'`
fi
if test x"${sig_nokey}" != x
then
printFATAL "Importing public key failed."
fi
if test x"${sig_ok}" = x
then
printWARNING "File $ff has no good signature"
if test x"$cs_delete" = x1
then
if test x"$simulate" = x0
then
printLOG "REMOVE $ff: No good signature found."
rm -f "$ff"
else
printLOG "REMOVE $ff: No good signature found."
printINFO "rm -f $ff"
fi
else
printLOG "BAD: $ff (invalid signature)"
fi
continue
fi
printLOG "OK: $ff"
done
if test x"$cs_delete" = x1
then
printLOG "Checked sources in ${basedir}/source/ (delete=on)"
else
printLOG "Checked sources in ${basedir}/source/ (delete=off)"
fi
return 0
}
|
