|
Server : Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 System : Linux server.jackjohnson.com 2.6.32-279.5.2.el6.x86_64 #1 SMP Fri Aug 24 01:07:11 UTC 2012 x86_64 User : jackjohn ( 502) PHP Version : 5.3.17 Disable Function : NONE Directory : /usr/lib/yum-plugins/ |
Upload File : |
cOc @ s d d k Z d d k Z d d k l Z d d k l Z d d k Z d d k Td d k Z d Z
e f Z d Z d d d d
d f Z
d Z d
e i i f d YZ d Z d Z d Z d Z d Z d Z d Z d Z d f d YZ d Z d Z d Z d Z d Z d Z d f d YZ! d! Z" d" Z# d# Z$ d$ Z% d% Z& d& Z' e( d' j o d( GHn d S() iN( t TYPE_INTERACTIVE( t UpdateMetadata( t *s 2.5s yum-plugin-securityt securityt bugfixt enhancementt recommendedt
newpackagec C s= t i i | d | d | d f | d | d | d f S( s- Compare two "std." tuples, (n, a, e, v, r). i i i ( t rpmUtilst miscutilst
compareEVR( t tup1t tup2( ( s /usr/lib/yum-plugins/security.pyt _rpm_tup_vercmp= s !t CliErrorc B s e Z d Z d d Z RS( s3
Command line interface related Exception.
t c C s t i i i | | | _ d S( N( t yumt Errorst YumBaseErrort __init__t args( t selfR ( ( s /usr/lib/yum-plugins/security.pyR H s ( t __name__t
__module__t __doc__R ( ( ( s /usr/lib/yum-plugins/security.pyR B s c C s_ t } xO | D]G } | i p q n y | i | Wq t i i j
o
q q Xq W| S( s3 Generate the info. from the updateinfo.xml files. ( R t enabledt addR R t RepoMDError( t repost md_infot repo( ( s /usr/lib/yum-plugins/security.pyt ysp_gen_metadataL s
c C s | d j o g S| S( sj Sometimes refs == None, if so return the empty list here.
So we don't have to check everywhere. N( t None( t refs( ( s /usr/lib/yum-plugins/security.pyt ysp__safe_refsY s
c C sC x< | D]4 } t i | | o | S| d | j o | Sq Wd S( Nt update_id( t fnmatchR ( t sec_cmdst pkgnamet noticet i( ( s /usr/lib/yum-plugins/security.pyt _match_sec_cmd` s c C s^ xW t | D]I } | d | j o q
n | d | j o q
n t | | | d <| SWd S( s# Check if the given ID is a match. t typet idN( R" t TrueR ( t used_mapR! t ref_typet ref_idst ref( ( s /usr/lib/yum-plugins/security.pyt _has_idh s
c C s t | i | | } | o t | d | <t S| i o+ | d | i j o t | d | d <t S| i o< | d d j o+ | d | i j o t | d | d <t S| i o" t | | d d | i o t S| i o" t | | d d
| i o t S| i o: | d d j o) | i p d | j p | d o t S| i o | d d j o t S| i p9 | i p/ | i p% | i p | i p | i p | i p t St
S( s; Do the package filtering for should_show and should_keep. t cmdR# R+ R* R t severityt sevt
referencest cvet bugzillaR ( R) R% R, t advisoryR3 R6 R1 t bzR t bugfixest False( t optsR& R' R- t rcmd( ( s /usr/lib/yum-plugins/security.pyt ysp_should_filter_pkgs s2 '' (c C s_ | t j o | d | j o | Sn x1 t | d D] } | d | j o q8 n | SWd S( NR* R5 ( t __update_info_types__R" ( t rnamet mdR0 ( ( s /usr/lib/yum-plugins/security.pyt ysp_has_info_md s
c C s h h d 6h d 6h d 6h d 6h d 6} x | i D] } t | d | <q3 Wx | i D] } t | d | <qU Wx | i D] } t | d | <qw Wx | i D] } t | d | <q Wx | i D] } t | d | <q W| S( NR7 R6 R+ R2 R4 ( R% R; R8 R9 R6 R3 ( R< R- R( ( ( s /usr/lib/yum-plugins/security.pyt ysp_gen_used_map s" )
c C s x3 | d D]' } | d | p | d | q q Wx3 | d D]' } | d | p | d | qA qA Wx3 | d D]' } | d | p | d | qw qw Wx3 | d D]' } | d | p | d | q q Wx3 | d D]' } | d | p | d
| q q Wd S( NR2 s$ No update information found for "%s"R+ s2 Advisory "%s" not found applicable for this systemR7 s, BZ "%s" not found applicable for this systemR6 s- CVE "%s" not found applicable for this systemR4 s2 Severity "%s" not found applicable for this system( ( R- t msgR( ( ( s /usr/lib/yum-plugins/security.pyt ysp_chk_used_map s( t UpdateinfoCommandc B s e Z h d d 6d d 6d d 6d d 6d d 6d d 6d d 6Z d
Z d Z d Z d
Z d Z d Z d Z d Z
h d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6Z x e D] Z
e
e e
<q Wd Z d Z d! Z d" Z RS(# t lists list-updateinfos
list-securitys list-sect infos info-updateinfos
info-securitys info-sect summarys summary-updateinfoc C s d g t | i i S( Nt
updateinfo( t sortedt direct_cmdst keys( R ( ( s /usr/lib/yum-plugins/security.pyt getNames s c C s d S( NsB [info|list|...] [security|...] [installed|available|all] [pkgs|id]( ( R ( ( s /usr/lib/yum-plugins/security.pyt getUsage s c C s d S( Ns% Acts on repository update information( ( R ( ( s /usr/lib/yum-plugins/security.pyt
getSummary s c C s d S( N( ( R t baset basecmdt extcmds( ( s /usr/lib/yum-plugins/security.pyt doCheck s c C sV d } d } d }
x | D] \ } } }
t t | d | } | d } | d j o | d o | d d } n t t | |
}
| oV xS t | d D]= } | d | j o q n t t t | d | } q Wq q Wxd| D]\\ } } }
d } | d
j o2 d } t | | d | d j o
d } qFn | d } | d j o | d o | d d } n | oq t | | oa x t | d D]H } | d | j o qn | d
| | t | d |
| |
f qWq t |
d o( | i d |
i | i |
i
GHq | d | | | d |
| |
f q Wd S( Ni R# R* R R3 s /Sec.R5 R+ R t alls s i s %s %-*s %-*s %st names %s: s %s%-*s %-*s %s( t maxt lenR" t strR
RB t hasattrt
fmtKeyValFillRV t _encRI ( R RQ R t list_typet show_typet iname2tupt dataRD t n_maxsizet r_maxsizet t_maxsizeR' t pkgtupt pkgt tnR0 t mark( ( s /usr/lib/yum-plugins/security.pyt list_show_pkgs sL
+
c C s h } x | D] \ } }
} | d | j o q
n | | | d <t | d oQ t i i } t i d }
|
i | o | i d g } q | i } n
| i } | d j o: t | |
d |
d j o | d } q | d } n | | q
Wd S( NR# t texts yum.verbose.maint skip_dataRU i s
Installed : trues
Installed : false(
RZ R t
logginglevelst DEBUG_3t loggingt getLoggert isEnabledForRi t __str__R
( R RQ R R] R^ R_ R` RD t show_pkg_info_doneR' Rd Re t
debug_log_lvlt vlogt obj( ( s /usr/lib/yum-plugins/security.pyt info_show_pkgs s$
c C s d } h } h }
h } x | D] \ } }
} | d | j o q" n | | | d <| i | d d d | | d <| d d j o? | d } | d j o
d } n |
i | d d |
| <q" q" Wd } xO d D]G } | | j o q n t t | | } | | j o
| } q q W| p t | | | d Sh d d 6d
d 6d d
6d d 6} d G| GHx d D] } | | j o qsn | | } | d j oF t |
d j o3 |
i d } | d j o | d | } qn d | | | | f GH| d j oX t |
d j oE xB t |
D]0 } | |
| | p d | d f } d | GHq-WqsqsWt | | | h | _ d S( Nc S s | GHd S( N( ( t x( ( s /usr/lib/yum-plugins/security.pyt _msg s R# R* i i R R3 R R R R s New Packaget Securityt Bugfixt Enhancements Updates Information Summary:t s %*u %s notice(s)t ?s %*u %s %s notice(s)( R s securitys bugfixR ( R s securitys bugfixR ( t getR RX RY t _check_running_kernelRM RK Rq ( R RQ R R] R^ R_ R` RD Rw t countst
sev_countsRq R' Rd Re R4 t maxsizet Tt sizet outTt nt snR ( ( s /usr/lib/yum-plugins/security.pyt summary_show_pkgs s` "
"
!c c s x | i D] } | d d j o q
n xb | d D]V } xM | d D]A } | d | d | d p d | d | d
f } | | f VqD Wq3 Wq
Wd S( NR* R t pkglistt packagesRV t archt epocht 0t versiont release( t notices( R R R' t upkgRe Rd ( ( s /usr/lib/yum-plugins/security.pyt
_get_new_pkgsG s
R7 t bugzillast bzsR9 R t secR6 t cvesR t newpackagess new-packagess new-packaget newc C s | | i j o | i | } nm | o) | d d j o | d } | d } n= | o | d | i j o
d } n | o
d } n d } | d j o | i | d | | i S| d j o | i | d | | i S| d j o | i | d | | i Sd S(
Ni RG RH RI i s updateinfo lists updateinfo infos updateinfo summary( s lists infos summary( RL t _cmd2filtt doCommand_liRh Ru R ( R RQ RR RS t
subcommand( ( s /usr/lib/yum-plugins/security.pyt doCommandc s&
c
C s t } g } xht | i | d d D]H\ } }
| o t | |
d | o q. n |
d } | | j o q. n t t t | i i | g } | d j o | o | i | q. n | d j o | o | i | q. n | i i
|
}
|
p q. n | d j o, |
d i | d o | i | q. n | i | | i | |
|
d f q. W| | | | d h | | d S( Nt keyc S s | d d S( i i ( ( Rv ( ( s /usr/lib/yum-plugins/security.pyt <lambda> s i t installedt updatest available( R s updates( t setRK R R) RG t reversedt rpmdbt searchNamesR t pkgSackt searchPkgTuplet verLEt appendR ( R RQ R] RS R RD t show_pkgst done_pkgsR` R' Rd R t ipkgst pkgs( ( s /usr/lib/yum-plugins/security.pyt doCommand_li_new{ s4
'
%
c C s d } d } t | d j o\ d } | d | i j o | i | i d } n | } | o | t j o
d } q{ n | | | f S( Ni i ( R RX R t popR? ( R RS t filt_typeR^ ( ( s /usr/lib/yum-plugins/security.pyt _parse_extcmds s c sh | i | _ t | i i t i d } d } | i i \ } | i | \ } } d | o$ | d d j o | i d n d j o. | i | | | | d | d g f S| _
t h t o nd d j o t
| } t | n; d j o t | } n d j o t | } n f d
}
g } x t | D] } x |
| | D] \ }
} h } |
\ | d <| d <| d
<| d <| d <| d
d j o d | d <n d | d
| d <| i | |
d | f qWqW| | | | | t | d | d g f S( Ns yum.verbose.mainc S s | GHd S( N( ( Rv ( ( s /usr/lib/yum-plugins/security.pyRD s R i R R RU R s new donec 3 s | d } t i | } x | D] \ } } o t | o q& n d j o% t | | d j o q& q n t | | o | | f Vq& q& Wd S( Ni R ( R t get_applicable_noticesRB R
R> ( Rd RV R R' ( R_ R R R- R] R< ( s /usr/lib/yum-plugins/security.pyt _show_pkgtup s
R t at et vt rR R R s %s:s %(n)s-%(epoch)s%(v)s-%(r)s.%(a)ss done( s updatess availables installeds all( s installeds all( R R t listEnabledRm Rn t pluginst cmdlineR R R R% RC R; t _get_name2allpkgtupt _get_name2instpkgtupt _get_name2oldpkgtupRK R RE ( R RQ RR RS R t loggerRD R R^ t name2tupR R` R& Rd R' t d( ( R_ R R- R R] R< s /usr/lib/yum-plugins/security.pyR sR
)
( R R RL RN RO RP RT Rh Ru R R R R? R R R R R ( ( ( s /usr/lib/yum-plugins/security.pyRF sD
( 2
c C s1 | i i d j o | i i d t n d S( sd
Verify that the program is being run by the root user.
@param base: a YumBase object.
i s, You need to be root to perform this command.N( t conft uidR t criticalR ( RQ ( ( s /usr/lib/yum-plugins/security.pyt yumcommands_checkRootUID s c C so | i p^ x[ | i i D]F } | i d j o0 | i d j o d } | i i | t q q Wn d S( Nt falseR s
You have enabled checking of packages via GPG keys. This is a good thing.
However, you do not have any GPG public keys installed. You need to download
the keys for packages you wish to install and install them.
You can do that by running the command:
rpm --import public.gpg.key
Alternatively you can specify the url to the key you would like to use
for a repository in the 'gpgkey' option in a repository section and yum
will install it for you.
For more information contact your distribution or package provider.
( t gpgKeyCheckR R t gpgcheckt gpgkeyR R R ( RQ R RD ( ( s /usr/lib/yum-plugins/security.pyt yumcommands_checkGPGKey s
c C s_ h } xR | D]J } | d | j o% t | | d | d j o q
n | | | d <q
W| S( Ni ( R
( RQ t pkgtupsR Rd ( ( s /usr/lib/yum-plugins/security.pyt _get_name2pkgtup s c C s( t d | i i } t | | S( s? Get the pkgtups for all installed pkgs. which have an update. c S s | d S( i ( ( Rv ( ( s /usr/lib/yum-plugins/security.pyR s ( t mapt upt getUpdatesTuplesR ( RQ t oupdates( ( s /usr/lib/yum-plugins/security.pyR s c C s t | | i i S( s) Get the pkgtups for all installed pkgs. ( R R t
simplePkgList( RQ ( ( s /usr/lib/yum-plugins/security.pyR s c C sN g } | i i D]$ } | | d | d d d d f q ~ } t | | S( sa Get the pkgtups for all installed pkgs. and munge that to be the
first possible pkgtup. i i R ( R R R ( RQ t _[1]t ptt ofirst( ( s /usr/lib/yum-plugins/security.pyR s At SecurityUpdateCommandc B s5 e Z d Z d Z d Z d Z d Z RS( c C s d g S( Ns update-minimal( ( R ( ( s /usr/lib/yum-plugins/security.pyRN s c C s d S( Ns [PACKAGE-wildcard]( ( R ( ( s /usr/lib/yum-plugins/security.pyRO # s c C s d S( Nsh Works like update, but goes to the 'newest' package match which fixes a problem that affects your system( ( R ( ( s /usr/lib/yum-plugins/security.pyRP & s c C s t | t | d S( N( R R ( R RQ RR RS ( ( s /usr/lib/yum-plugins/security.pyRT ) s
c C s t | d o | i i t n t | i i } | i i d } g | _ t
| } | i p/ | i p% | i
p | i p | i p | i } t d | i i } x t | D] } | i | }
| o |
i n x |
D] \ } } | d }
| o t | |
| o q n | o t | |
| | o q n | i d | d d | d d | d d | d
d | d Pq Wq Wt | i d j o! d
t | i } d | g f Sd d g f Sd S( Nt run_with_package_namesi c S s | d S( i ( ( Rv ( ( s /usr/lib/yum-plugins/security.pyR A s RV R i R i R i R i s% %d packages marked for minimal Updates% No Packages marked for minimal Update( RZ R R t __package_name__R R R R R R% RC R R: R8 R9 R6 R3 R R R RK R t reverseR) R> t updateRX t tsInfo( R RQ RR RS R R< R- t ndataR t oldpkgtupR` Rd R' RV RD ( ( s /usr/lib/yum-plugins/security.pyR - s: (
' ( R R RN RO RP RT R ( ( ( s /usr/lib/yum-plugins/security.pyR s
c C s | i } | p d St | d o
| i } n | i t | i t d } d } d } d } d } d } | i d d
d d | d d
d t d d | i d d
d d | d d d t d d | i d d
d d d d | d d d g d d | i d d
d d | d d d g d d d d | i d d
d d | d d d g d d d d | i d d
d d | d d! d g d d d d" d S(# s
Yum Plugin Config Hook:
Setup the option parser with the '--advisory', '--bz', '--cve',
'--security' and '--severity' command line options. Also the 'updateinfo'
and 'update-minimal' commands.
Nt plugin_option_groupc S s t | i _ d S( N( R, t valuesR ( t optR t valt parser( ( s /usr/lib/yum-plugins/security.pyt oseci s c S s t | i _ d S( N( R, R R: ( R R R R ( ( s /usr/lib/yum-plugins/security.pyt obugl s c S s | i i i | i d d S( Nt ,( R R6 t extendt split( R R R R ( ( s /usr/lib/yum-plugins/security.pyt ocven s c S s | i i i t | d S( N( R R9 R RY ( R R R R ( ( s /usr/lib/yum-plugins/security.pyt obzp s c S s | i i i | i d d S( NR ( R R8 R R ( R R R R ( ( s /usr/lib/yum-plugins/security.pyt oadvr s c S s | i i i | i d d S( NR ( R R3 R R ( R R R R ( ( s /usr/lib/yum-plugins/security.pyt osevt s s
--securityt actiont callbackt destR t defaultt helps" Include security relevant packagess
--bugfixesR: s Include bugfix relevant packagess --cveR* t stringR6 s, Include packages needed to fix the given CVEs --bzR9 t ints+ Include packages needed to fix the given BZs --sec-severityR3 s4 Include security relevant packages, of this severitys
--advisoryR8 s1 Include packages needed to fix the given advisory( t getOptParserRZ R t registerCommandRF R t
add_optionR; ( t conduitR R R R R R R ( ( s /usr/lib/yum-plugins/security.pyt config_hookX s>
c C sI | d } x8 | i | D]' \ } } t | | | | o t Sq Wt S( sA Do we want to keep this package to satisfy the security limits. i ( R R> R, R; ( R< Rd R R- RV R' ( ( s /usr/lib/yum-plugins/security.pyt ysp_should_keep_pkg s
c C s | i \ } } | i p% | i p | i p | i p | i } d } t | d j ox | d d j o) | d d j o h | d 6t d 6} n | d d j o) | d d j o h | d 6t d 6} q n t | o | d d
j o | h t d 6t d 6t d 6f S| d d j o h | d 6t d 6} n | d d j o h | d 6t d 6} n | d d j o | h t d 6t d 6f S| d t
i j o | h t d 6t d 6f Sn | o | | f S| p | i d d n | h t d 6t d 6t d 6f S( s4 Stuff we need to do in both list and update modes. i i RG i t obsoletesR t skipt list_cmdRH s update-minimalRD s check-updateR t upgradeRJ s' Skipping security plugin, other commandN( s obsoletess updates( s obsoletess updates( s updateR (
t
getCmdLineR R: R8 R9 R6 R RX R, R; RF RL t error( R R< R R t ret( ( s /usr/lib/yum-plugins/security.pyt ysp_check_func_enter s2 ""
c
s t \ } } | d o d S| d p d St d o i t n i d d t i i } f d } g | _ t | } i
i d d } | i } i
i d d
} | | i
7} t i
} d } d }
xd | D]\ } | d 7} | i } | | j p t | | | | | o | | qn |
d 7}
qWt | f d
|
o i d d |
| f n i d d | t i
| f d d S( sk
Yum Plugin Exclude Hook:
Check and remove packages that don't align with the security config.
R NR t registerPackageNamei s0 Limiting package lists to security relevant onesc s. i d d | | i f i | d S( s7 Deletes a package from all trees that yum knows about i s' --> %s from %s excluded (non-security)N( RH t repoidt
delPackage( Re ( R ( s /usr/lib/yum-plugins/security.pyt ysp_del_pkg s t pkgnarrowR R i i c s i d | S( i ( R ( Rv ( R ( s /usr/lib/yum-plugins/security.pyR s s6 %d package(s) needed for security, out of %d availables6 No packages needed for security; %d packages availablec s i d | S( i ( RH ( Rv ( R ( s /usr/lib/yum-plugins/security.pyR s ( R RZ R R RH R t getReposR R% RC t _baset doPackageListsR R R RV R RE R~ (
R R< RH R R R- t updsR R t tott cntRe RV ( ( R s /usr/lib/yum-plugins/security.pyt exclude_hook sB
c
C s+ t t i d p d St i i | i } | d d j o d St } x | i | D] \ } } | p | d d j o qY n t } | i i
| } | p qY n | d } d } | d d j o d | d } n d | d | | d
| d | d f } | d
| | d | PqY Wd S( Nt get_running_kernel_pkgtupi R* R R i R s %s:s
%s-%s%s-%s.%si i i s, Security: %s is an installed security updates- Security: %s is the currently running version( RZ R t miscR
t tsR R; R R, R R (
t ybR RD t kern_pkgtupt found_secRd R' t ipkgR t rpkg( ( s /usr/lib/yum-plugins/security.pyR~ s0
c sL t \ } } | d o d S| d o d St d o i t n i d d t i i } f d } d } d } g | _ t | } i
i } t } t t
t g }
t } x2 | D]* } | i |
j o | i | i q q Wt i }
x | D] } | i |
j o | d 7} n | i i } | |
j p t | |
| | | o q6n | i |
j o | d 7} n | i | i q6W| } t } x | o t } x | D] } | i | j o] x | i D]K \ } } | | j o2 | | j o | d 7} n | i | t } q
q
WqxZ | i D]O \ } } | | j o6 | | j o | d 7} n | i | i t } PqgqgWqWqWx, | D]$ } | i | j o | | qqWt | f d
| o% i d d | | | | f n i d d | d S(
sn
Yum Plugin PreResolve Hook:
Check and remove packages that don't align with the security config.
R NR R i s+ Limiting packages to security relevant onesc s7 i d d | i | i i f i | i d S( s) Deletes a package within a transaction. i s' --> %s from %s excluded (non-security)N( RH t poR t removeRd ( t tspkg( R t tsinfo( s /usr/lib/yum-plugins/security.pyR . s i i c s i d | S( i ( R ( Rv ( R ( s /usr/lib/yum-plugins/security.pyR l s sD %d package(s) needed (+%d related) for security, out of %d availables6 No packages needed for security; %d packages available( R RZ R R RH R R R R% RC t getTsInfot
getMembersR t TS_INSTALL_STATESt TS_ERASEt output_stateR R R R RV R R, R; t relatedtoRE ( R R< RH R R R R R- t tspkgst keep_pkgst count_statest
count_pkgsR R RV t scntt mini_depsolve_againR t reason( ( R R s /usr/lib/yum-plugins/security.pyt preresolve_hook s
%t __main__s8 This is a plugin that is supposed to run from inside YUM() R R$ t yum.pluginsR t
yum.update_mdR Rm t
yum.constantst rpmUtils.miscutilsR t requires_api_versiont plugin_typeR R? R
R R R R R" R) R1 R> RB RC RE RF R R R R R R R R R R R R~ R# R ( ( ( s /usr/lib/yum-plugins/security.pyt <module>* sL
1 9 < $ = X