Sindbad~EG File Manager
a
� �i\ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZdgZddiZdZed�Zed�Zed�Z G dd � d e �Z d-d d �Z d
d� Z d.dd�Z!dd� Z"dd� Z#dd� Z$dd� Z%dd� Z&d d � Z'ej(d d � �Z)ej(d d!� �Z*d"d#� Z+d$d%� Z,d/d'd(�Z-d0d)d*�Z.d1d+d,�Z/dS )2� NZrsa4096�gpg)�type�kindZrole�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__�
__module__� __qualname__� r
r
�)/usr/libexec/kcare/python/kcsig_verify.pyr s r �latin1c C sN t | �}|tu r| S |tu r&| �|�S |tu r:tt| ��S tdt|� ��d S )NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str�
ValueError)�data�encoding�dtyper
r
r r s
r c C s@ t | �}|tu r| S |tu r&| �d�S |tu r8| �d�S t�d S )Nzutf-8)r �ntyper �decoder r �NotImplementedError)r r r
r
r �nstr( s
r �wc C sL | d }t ||��}|�|� W d � n1 s20 Y t�|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr
r
r � atomic_write3 s (r( c C s4 t | ��}|�� W d � S 1 s&0 Y d S �N)r �read)r# r' r
r
r � read_file; s
r+ c C s t �t| ��S r) )�json�loadsr+ )r# r
r
r � read_json@ s r. c G s6 dt | � }| D ] }t|�}|dt |�|f 7 }q|S )Ns %ds %d%s)�lenr )�parts�result�pZbpr
r
r �paeD s
r3 c s t � fdd�|D �� S )Nc s g | ] }� | �qS r
r
)�.0r' �r r
r �
<listcomp>O r z pae_fields.<locals>.<listcomp>)r3 )r �fieldsr
r5 r �
pae_fieldsM s r8 c C s t | t| d �S )Nr )r8 �
PAE_FIELDSr5 r
r
r �pae_typeR s r: c C s$ | d t vr tdt| d � ��d S )Nr zinvalid key type: )r9 r r )r r
r
r � check_keyV s r; c c s\ |r | V nLt jtdd��.}|�t| �� |�� |jV W d � n1 sN0 Y d S )Nz kcsig-data-��dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr r �flush�name)r � data_is_filer' r
r
r �
temp_datafile[ s rE c c s4 t j| |d�}z|V W t�|� n t�|� 0 d S )N)r> r= )r? �mkdtemp�shutil�rmtree)r> r= Ztemp_dirr
r
r �temp_directoryf s rI c C s� t tdd��p}dd|d| dd|g}tj|tjtjtjd�}|�|�\}}|jd krntd
t|� d t|� ��W d � n1 s�0 Y d S ) Nz
kcsig-gpgtmp-r< r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: �
) rI rA �
subprocess�Popen�PIPE� communicate�
returncode� Exceptionr )�keyfile�datafile�sigdataZtmp_dir�cmdr2 rL rM r
r
r �run_gpg_verifyo s
rY c C s� t |� tjtdd��v}|�t�t|d ��� |�� t ||��,}t�t| ��}t
|j ||� W d � n1 st0 Y W d � n1 s�0 Y d S )Nz
kcsig-key-r< r ) r; r? r@ rA r �base64� b64decoder rB rE rY rC )� signaturer r rD �key_filerV rW r
r
r �
verify_keyy s r^ Fc C s� d}i }| � � D ]j\}}||vr*d||< qzt||| ||� W n0 typ } zt|�||< W Y d }~qd }~0 0 |d7 }q||fS )Nr zno corresponding root key� )�itemsr^ rT r ) �
signatures�keysr rD �count�errors�keyid�sig�er
r
r � verify_count� s "
rh c C s� |� dd�}|� dd�}i }|p"t}i }| d �� D ]�\}} zXt| � | d |vrhd�| d |�||< n*| d |k r�d �| d |�||< n| ||< W q4 ty� }
z$t|
�||< W Y d }
~
q4W Y d }
~
q4d }
~
0 0 q4i } |�� D ]B\}} t| d
|d t| �d �\} }
| |k �r|
||< q�| | |< q�d } | �� D ]b\}} z t | d
| | |d
d� W n2 t�y� }
zt|
�||< W Y d }
~
nd }
~
0 0 | d7 } �q0| �s�t
dt � |� ��d S )N� thresholdi' �
min_seriali��rb r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}ra r5 r T)r rD r_ z!Error validating file signature: )
�get�AVAILABLE_KINDSr` r; �formatrT r rh r: r^ r r, �dumps)rW rV � root_keys�kindsri rj rd Zapplicable_keysre r rg Z
verified_keysrc Z root_errorsr
r
r �_verify� s> $
" rq c C s$ t | �}t |�}t||||d� d S )N)rp )r. rq )ZsigfilerV Zrootfilerp rW ro r
r
r �verify� s rr )r )r )F)N)N)0rZ �
contextlibr, r! rG rO r? �Any�Dict�Iterator�List�Mapping�Optional�Sequence�Tuple�UnionZAnyKeyZ
ReleaseKeyZRootKeyZRootKeysZ SignatureZanystrrl r9 rA r r r r rT r r r r( r+ r. r3 r8 r: r; �contextmanagerrE rI rY r^ rh rq rr r
r
r
r �<module> s>
+
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists