123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119 |
- #!/usr/bin/python2
- #
- # The Qubes OS Project, http://www.qubes-os.org
- #
- # Copyright (C) 2010 Rafal Wojtczuk <rafal@invisiblethingslab.com>
- #
- # This program is free software; you can redistribute it and/or
- # modify it under the terms of the GNU General Public License
- # as published by the Free Software Foundation; either version 2
- # of the License, or (at your option) any later version.
- #
- # This program is distributed in the hope that it will be useful,
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- # GNU General Public License for more details.
- #
- # You should have received a copy of the GNU General Public License
- # along with this program; if not, write to the Free Software
- # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
- #
- #
- import os
- import os.path
- import re
- import sys
- import subprocess
- import shutil
- import glob
- import grp
- from qubes.qubes import QubesVmCollection
- updates_dir = "/var/lib/qubes/updates"
- updates_rpm_dir = updates_dir + "/rpm"
- updates_repodata_dir = updates_dir + "/repodata"
- updates_error_file = updates_dir + "/errors"
- updates_error_file_handle = None
- comps_file = None
- if os.path.exists('/usr/share/qubes/Qubes-comps.xml'):
- comps_file = '/usr/share/qubes/Qubes-comps.xml'
- package_regex = re.compile(r"^[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789._+-]{1,128}.rpm$")
- gpg_ok_regex = re.compile(r"pgp md5 OK$")
- def dom0updates_fatal(pkg, msg):
- global updates_error_file_handle
- print >> sys.stderr, msg
- if updates_error_file_handle is None:
- updates_error_file_handle = open(updates_error_file, "a")
- updates_error_file_handle.write(msg + "\n")
- os.remove(pkg)
- def handle_dom0updates(updatevm):
- global updates_error_file_handle
- source=os.getenv("QREXEC_REMOTE_DOMAIN")
- if source != updatevm.name:
- print >> sys.stderr, 'Domain ' + str(source) + ' not allowed to send dom0 updates'
- exit(1)
- # Clean old packages
- if os.path.exists(updates_rpm_dir):
- shutil.rmtree(updates_rpm_dir)
- if os.path.exists(updates_repodata_dir):
- shutil.rmtree(updates_repodata_dir)
- if os.path.exists(updates_error_file):
- os.remove(updates_error_file)
- qubes_gid = grp.getgrnam('qubes').gr_gid
- os.mkdir(updates_rpm_dir)
- os.chown(updates_rpm_dir, -1, qubes_gid)
- os.chmod(updates_rpm_dir, 0775)
- subprocess.check_call(["/usr/lib/qubes/qfile-dom0-unpacker", str(os.getuid()), updates_rpm_dir])
- # Verify received files
- for untrusted_f in os.listdir(updates_rpm_dir):
- if not package_regex.match(untrusted_f):
- dom0updates_fatal(updates_rpm_dir + '/' + untrusted_f, 'Domain ' + source + ' sent unexpected file: ' + untrusted_f)
- else:
- f = untrusted_f
- full_path = updates_rpm_dir + "/" + f
- if os.path.islink(full_path) or not os.path.isfile(full_path):
- dom0updates_fatal(full_path, 'Domain ' + source + ' sent not regular file')
- p = subprocess.Popen (["/bin/rpm", "-K", full_path],
- stdout=subprocess.PIPE)
- output = p.communicate()[0]
- if p.returncode != 0:
- dom0updates_fatal(full_path, 'Error while verifing %s signature: %s' % (f, output))
- if not gpg_ok_regex.search(output.strip()):
- dom0updates_fatal(full_path, 'Domain ' + source + ' sent not signed rpm: ' + f)
- if updates_error_file_handle is not None:
- updates_error_file_handle.close()
- # After updates received - create repo metadata
- createrepo_cmd = ["/usr/bin/createrepo"]
- if comps_file:
- createrepo_cmd += ["-g", comps_file]
- createrepo_cmd += ["-q", updates_dir]
- subprocess.check_call(createrepo_cmd)
- os.chown(updates_repodata_dir, -1, qubes_gid)
- os.chmod(updates_repodata_dir, 0775)
- # Clean old cache
- subprocess.call(["sudo", "/usr/bin/yum", "-q", "clean", "all"], stdout=sys.stderr)
- # This will fail because of "smart" detection of no-network, but it will invalidate the cache
- try:
- null = open('/dev/null','w')
- subprocess.call(["/usr/bin/pkcon", "refresh"], stdout=null)
- null.close()
- except:
- pass
- exit(0)
- def main():
- qvm_collection = QubesVmCollection()
- qvm_collection.lock_db_for_reading()
- qvm_collection.load()
- qvm_collection.unlock_db()
-
- updatevm = qvm_collection.get_updatevm_vm()
- handle_dom0updates(updatevm)
- main()
|