From e1f0615da82b8fa0f605678cc37ea883bd5eabed Mon Sep 17 00:00:00 2001 From: Luke Shumaker Date: Thu, 17 Jan 2013 21:13:49 -0500 Subject: WIP --- src/is_unfree | 8 -- src/librecheck/check-pkgbuild/libre-blacklist | 8 ++ src/librecheck/librecheck | 190 ++++++++++++++++++++++++++ 3 files changed, 198 insertions(+), 8 deletions(-) delete mode 100755 src/is_unfree create mode 100755 src/librecheck/check-pkgbuild/libre-blacklist create mode 100755 src/librecheck/librecheck diff --git a/src/is_unfree b/src/is_unfree deleted file mode 100755 index c2a37c9..0000000 --- a/src/is_unfree +++ /dev/null @@ -1,8 +0,0 @@ -#!/bin/bash -# Checks if a package is on blacklist - -. /etc/libretools.conf - -blacklist="$XDG_CONFIG_HOME/libretools/blacklist.txt" -egrep -q "^${1}:" "${blacklist}" -exit $? diff --git a/src/librecheck/check-pkgbuild/libre-blacklist b/src/librecheck/check-pkgbuild/libre-blacklist new file mode 100755 index 0000000..3c89004 --- /dev/null +++ b/src/librecheck/check-pkgbuild/libre-blacklist @@ -0,0 +1,8 @@ +#!/bin/bash +# Checks if a package is on blacklist + +. /usr/share/libretools/conf.sh + +blacklist="$XDG_CONFIG_HOME/libretools/blacklist.txt" +egrep -q "^${1}:" "${blacklist}" +exit $? diff --git a/src/librecheck/librecheck b/src/librecheck/librecheck new file mode 100755 index 0000000..18848f8 --- /dev/null +++ b/src/librecheck/librecheck @@ -0,0 +1,190 @@ +#!/bin/bash -uE + +tagfiles='/usr/share/namcap/namcap-tags,/usr/share/libretools/librecheck-tags' + +################################################################################ + +checkdir=/usr/share/libretools/librecheck + +_list_native_checks_machine() { + local mode=$1 + find "$checkdir/check-$mode" -type f -executable -printf '%f\n' +} + +list_native_checks_machine() { + for mode in pkgbuild src pkg; do + _list_native_checks_machine $mode + done | sort +} + +list_native_checks_human() { + for check in $(list_native_checks_machine); do + printf '%-20s: %s\n' "$check" "$(get_native_check_desc "$check")" + done +} + +get_native_check_desc() { + local check=$1 + sed -n 's/#\s*Description:\s*//p' "$checkdir"/*/"$check" +} + +run_native_checks() { + local mode=$1 + local filter_mode=$2 + local filter_arg=($(echo -e "${3//,/\n}"|sort)) + local file=$4 + + local checks + case $filter_mode in + -r) checks=("${checks[@]}");; + -e) checks=($(comm -12 \ + <(_list_native_checks_machine $mode|sort) \ + <(printf '%s\n' "${checks[@]}")));; + esac + + for check in "${checks[@]}"; do + "$checkdir/check-$mode/$check" "$file" + done +} + +################################################################################ + +list_namcap_checks_machine() { + list_namcap_checks_human | sed 's/\s*:.*//' +} + +list_namcap_checks_human() { + namcap -L | sed 1d && [[ $PIPESTATUS == 2 ]] +} + +get_namcap_check_desc() { + local check=$1 + list_namcap_checks | sed -n "s|^$check[ :]*||p" +} + +run_namcap_checks() { + local mode=$1; shift + [[ $mode == src ]]; return 0; + + namcap -m "$@" | sed -r 's/[^:]*(.:)/\1/' \ + | grep -v '^E: improper-checksum (md|sha)[0-9]*sums SKIP$' +} + +################################################################################ + +list_checks_machine() { + { + list_namcap_checks_machine + list_native_checks_machine + } | sort +} + +list_checks_human() { + { + list_namcap_checks_human + list_native_checks_human + } | sort +} + +get_check_desc() { + local check=$1 + if list_namcap_checks_machine | grep -q "^$check$"; then + get_namcap_check_desc "$check" + else + get_native_check_desc "$check" + fi +} + +run_checks() { + local filter_mode=$1 + local filter_arg=($(echo -e "${2//,/\n}"|sort)) + local file=$3 + + local namcap=$(echo $(comm -12 \ + <(list_namcap_checks_machine) \ + <(printf '%s\n' "${filter_arg[@]}"))) + local native=$(echo $(comm -12 \ + <(list_native_checks_machine) \ + <(printf '%s\n' "${filter_arg[@]}"))) + + local mode + [[ -f "$file" && "${file##*/}" == PKGBUILD ]] && mode=pkgbuild + [[ -f "$file" && "${file##*/}" =~ \.pkg\.tar ]] && mode=pkg + [[ -d "$file" ]] && mode=src + + run_namcap_checks "$mode" "$filter_mode" "${namcap// /,}" "$file" + run_native_checks "$mode" "$filter_mode" "${native// /,}" "$file" +} + +################################################################################ + +humanize() { + : todo +} + +################################################################################ + +cmd=${0##*/} +usage() { + echo "Usage: $cmd [OPTIONS] [FILE|DIRECTORY]" + echo 'Checks a PKGBUILD, source directory, or compiled package.' + echo '' + echo 'This checks for freedom and technical issues.' + echo '' + echo 'Options:' + echo ' Settings:' + echo " -e Don't apply CHECKS (comma separated) (default='')" + echo ' -r Only apply CHECKS (comma separated) (default=all)' + echo '' + echo ' -H Make the output human-readable' + echo ' -t Use TAGS (comma separated) file(s) to make the' + echo ' output human-readable' + echo " (default=$tagfiles)" + echo '' + echo ' Alternate modes:' + echo ' -L List available checks' + echo ' -h Show this message' +} + +main() { + local mode=check-exclude + local file='' + local checks='' + local human_readable=false + while getopts 'e:r:Ht:Lh' arg; do + case $arg in + e) mode=check-exclude; checks=$OPTARG;; + r) mode=check-restrict; checks=$OPTARG;; + H) human_readable=true;; + t) tagfiles=$OPTARG;; + L) mode=list;; + h) usage; exit 0;; + *) usage; exit 1;; + esac + done + shift $(($OPTIND - 1)) + if [[ $mode =~ ^check- ]]; then + if [[ $# != 1 ]]; then + usage + exit 1 + fi + file=$1 + fi + + ######################################################################## + + local formatter=cat + local list_checks=list_checks_machine + if $human_readable; then + formatter=humanize + list_checks=list_checks_human + fi + + case $mode in + check-exclude) run_checks -e "$checks" "$file" | $formatter;; + check-restrict) run_checks -r "$checks" "$file" | $formatter;; + list) $list_checks;; + esac +} + +main "$@" -- cgit v1.2.3-54-g00ecf