File: //usr/lib/python3.12/site-packages/dnf/rpm/__pycache__/miscutils.cpython-312.pyc
�
� jE � � � d dl mZmZmZ d dlZd dlZd dlZd dlmZ d dl m
Z
ej d� Z da
d� Zd� Zd� Zd � Zy)
� )�print_function�absolute_import�unicode_literalsN)�which)�_�dnfc �v � t �.t d� a t j t d� t � t S )N�rpmkeysz3Using rpmkeys executable at %s to verify signatures)�_rpmkeys_binaryr �_logger�debugr � � �6/usr/lib/python3.12/site-packages/dnf/rpm/miscutils.py�_find_rpmkeys_binaryr s/ � �� � � �*���
�
�a�M�N�%� '� �r c �N � t | � dk s
| d dk7 s| d ryd\ }}}}| dd D ]o }d|v r y|j d � rd
}� |j d � rd
}�1|j d � rd
}�E|j d
� rd|v rd
}�]|j d
� r�o y |ry|s|ry|ryy)N� r s -:���� )FFFF� s : BADs : NOKEYTs : NOTTRUSTEDs
: NOTFOUNDs : OKs ignature,� )�len�endswith)�data� trusted_sig� missing_key� not_trusted�
not_signed�is r �_process_rpm_outputr $ s� � � �4�y�1�}��Q��5�(�D��H��8R�5�K��k�:�
�!�B�Z�� �q�=��
�Z�Z�
�
#� �K�
�Z�Z��
(� �K�
�Z�Z�
�
&� �J�
�Z�Z��
�\�Q�%6� �K����G�$�� � ��
�[�� �� r c �6 � t � }|� t j j |� s t j t
d� � yddd|dddd f}t t j � }d
|d < t j |||t j d | �
� 5 }|j � d }d d d � j }t |� t ur t! d� �|dk\ s|dk ryt# j% d� � }|r|S |rdS dS # 1 sw Y �`xY w)Nz4Cannot find rpmkeys executable to verify signatures.r r
z
--checksigz--rootz --verbosez#--define=_pkgverify_level signaturez --define=_pkgverify_flags 0x0�-�C�LC_ALL�/)�args�
executable�env�stdout�cwd�stdinr z Popen set return code to non-int�
)r �os�path�isfiler �criticalr �dict�environ�
subprocess�Popen�PIPE� communicate�
returncode�type�int�AssertionErrorr �split) �package� installroot�rpmkeys_binaryr& r( �pr r7 �rets r �_verifyPackageUsingRpmkeysrA C s � �)�+�N�� �R�W�W�^�^�N�%C�����Q�R�S��
�|�X�{�K� 1�3R� � �D� �r�z�z�
�C��C��M� � � ��%�� �?�?���
� ��}�}��q�!��
� � � �J� �J��s�"� � ?�@�@� �Q��*�q�.��
�d�j�j�� /�
0�C�
��
��1�!��!�%
�
�s � D�Dc �2 � t j |t j t j z t j z � } t || j j � }t j |� |S # t j |� w xY w)a
Takes a transaction set and a package, check it's sigs,
return 0 if they are all fine
return 1 if the gpg key can't be found
return 2 if the header is in someway damaged
return 3 if the key is not trusted
return 4 if the pkg is not gpg or pgp signed) r- �open�O_RDONLY�O_NOCTTY� O_CLOEXECrA �ts�rootDir�close)rG r< �fdno�values r �checkSigrL d sb � � �7�7�7�B�K�K�� � � 3�B�L�L� @� A�D��*�4���� � �?��
����� �L�� �����s � A? �?B)�
__future__r r r r- r3 �logging�shutilr �dnf.i18nr � getLoggerr r r r rA rL r r r �<module>rR sI �� I� H� � � � � �
�'�
�
�E�
"�����
�> "�B
r