CasperSecurity
o
�v�f�+ � @ sp d Z ddlZddlZddlZddlZddlZddlZddlZdd� Zdd� Z d dd �Z
ddg dddfd
d �Z dS )
z Functions to manage sandboxes� Nc C s� i }| � dd�d | � dd� �� D ]'}|�� sqz |�� dd� \}}W n ty4 t�d|� Y qw |||< qdd � |�� D �S )
z�Determine necessary packages for given report.
Return list of (pkgname, version) pairs. version might be None for unknown
package versions.
�Package� �
� DependenciesN� �%invalid Package/Dependencies line: %sc S s g | ]\}}||f�qS � r )�.0�p�vr r �5/usr/lib/python3/dist-packages/apport/sandboxutils.py�
<listcomp>% s z#needed_packages.<locals>.<listcomp>)�get�
splitlines�strip�split�
ValueError�apport�warning�items)�report�pkgs�line�pkg�versionr r r �needed_packages s $ �
r c C sx i }| � dd�d | � dd� �� D ]'}|�� sqz |�� dd� \}}W n ty4 t�d|� Y qw |||< q|S )z0Return package -> version dictionary from reportr r r r Nr r )r r r r r r r )r �pkg_versr r r r r r �report_package_versions( s $ �
r Fc s t � }t � }d| v r<| d �� D ]*}|�� sq|�� }t|�dv r:d|d v r:d|d v r:tj�|d �} |�| � qn
t j
� | d �� � }tj�
|�sQt�|� |D ]+}t jj|d|| d | �d
�d �}
|
rx|rrt �d ||
f � |�|
� qSt �d
|� qS� fdd�|D �S )a� Determine necessary runtime packages for given report.
This determines libraries dynamically loaded at runtime in two cases:
1. The executable has already run: /proc/pid/maps is used, from the report
2. The executable has not already run: shared_libraries() is used
The libraries are resolved to the packages that installed them.
Return list of (pkgname, None) pairs.
When pkgmap_cache_dir is specified, it is used as a cache for
get_file_package().
�ProcMaps)� � �x� z.so� �ExecutablePathT�
DistroRelease� Architecture��release�archz0dynamically loaded %s needs package %s, queueingz/%s is needed, but cannot be mapped to a packagec s g | ] }|� � |�f�qS r )r )r r
�� pkg_versionsr r r
h s z+needed_runtime_packages.<locals>.<listcomp>)�setr r r �len�os�path�realpath�addr � fileutils�shared_libraries�values�exists�makedirs� packaging�get_file_packager �logr ) r �sandbox�pkgmap_cache_dirr+ �verboser �libsr �cols�libr r r* r �needed_runtime_packages: s< $
��
�� �r@ c C s� |rt j�|�}t j�|�st �|� d}ntjdd�}t�t j
|� d}|r.t j�|�}n
tjdd�}t�t j
|� t j� || d �} g }
d| vsXd| � d d
�| � d d
� v r\t
| �}
g } |D ] } | �| d f� q`|d
krpd }d }
|r�| � d d
�d | � d d
� }t�d�}t|�|��}
|
r�t�d|
� ztjj||| d |
|||| � d�|
d� }W n ty� } z
t�t|�� W Y d }~nd }~ww | r�z|tjj||| d | |||| � d�|
ddd� 7 }W n ty� } z
t�t|�� W Y d }~nd }~ww t| �}t| || ||�}
dD ]N}|| v �rXtjj | | d| | d | � d�d�}|dk�r6| d dk�r6d| d< d}|�rOt�d||f |� |
�||� |�f� �q t�d || | � �q |
�r�z|tjj||| d |
|||| � d�|
d� 7 }W n t�y� } z
t�t|�� W Y d }~nd }~ww d | v �r�dD ]!}|| v �r�t j� || | ��s�t�d ||| | | d � �q�|�r�|| d < t� d � |||fS ) a0 Build a sandbox with the packages that belong to a particular report.
This downloads and unpacks all packages from the report's Package and
Dependencies fields, plus all packages that ship the files from ProcMaps
(often, runtime plugins do not appear in Dependencies), plus optionally
some extra ones, for the distro release and architecture of the report.
For unpackaged executables, there are no Dependencies. Packages for shared
libaries are unpacked.
report is an apport.Report object to build a sandbox for. Presence of the
Package field determines whether to determine dependencies through
packaging (via the optional report['Dependencies'] field), or through ldd
via needed_runtime_packages() -> shared_libraries(). Usually
report['Architecture'] and report['Uname'] are present.
config_dir points to a directory with by-release configuration files for
the packaging system, or "system"; this is passed to
apport.packaging.install_packages(), see that method for details.
cache_dir points to a directory where the downloaded packages and debug
symbols are kept, which is useful if you create sandboxes very often. If
not given, the downloaded packages get deleted at program exit.
sandbox_dir points to a directory with a permanently unpacked sandbox with
the already unpacked packages. This speeds up operations even further if
you need to create sandboxes for different reports very often; but the
sandboxes can become very big over time, and you must ensure that an
already existing sandbox matches the DistroRelease: and Architecture: of
report. If not given, a temporary directory will be created which gets
deleted at program exit.
extra_packages can specify a list of additional packages to install which
are not derived from the report and will be installed along with their
dependencies.
If verbose is True (False by default), this will write some additional
logging to stdout.
If log_timestamps is True, these log messages will be prefixed with the
current time.
If dynamic_origins is True (False by default), the sandbox will be built
with packages from foreign origins that appear in the report's
Packages:/Dependencies:.
Return a tuple (sandbox_dir, cache_dir, outdated_msg).
T�apport_sandbox_)�prefixF�
apport_cache_r% r z[originr r r N�systemr z+\[origin: ([a-zA-Z0-9][a-zA-Z0-9\+\.\-]+)\]z Origins: %sr& )� architecture�origins)rE rF � install_dbg� install_deps)�InterpreterPathr$ r' � systemctl�
SourcePackage�systemdz/bin/systemctlr$ z%Installing extra package %s to get %sz%Cannot find package which ships %s %sz2%s %s does not exist (report specified package %s)�RetraceOutdatedPackagesz
built sandbox) r. r/ �abspath�isdirr6 �tempfile�mkdtemp�atexit�register�shutil�rmtree�joinr r �append�re�compiler, �findallr r9 r7 �install_packages� SystemError�fatal�strr r@ r8 r5 �memdbg)r �
config_dir� cache_dir� sandbox_dir�extra_packagesr< �log_timestamps�dynamic_origins�permanent_rootdirr; r �
extra_pkgsr
rF �pkg_list�m� outdated_msg�er+ r/ r r r r � make_sandboxk s� 4
$
���
���
�
�
���
��
rl )F) �__doc__rR r. �os.pathrX rT rP r r r r@ rl r r r r �<module> s 0
1�