blob: af54bbc89d7c9b4902c48ae12471cc95e4300c50 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
# vim:sw=4:et
#############################################################################
# File : CheckPAMModules.py
# Package : rpmlint
# Author : Ludwig Nussel
# Purpose : Check for pam modules that are not authorized by the security team
#############################################################################
from Filter import *
import AbstractCheck
import re
import os
import string
PAM_WHITELIST = Config.getOption('PAMModules.WhiteList', ()) # set of file names
pam_module_re = re.compile('^(?:/usr)?/lib(?:64)?/security/([^/]+\.so)$')
class PAMModulesCheck(AbstractCheck.AbstractCheck):
def __init__(self):
AbstractCheck.AbstractCheck.__init__(self, "CheckPAMModules")
def check(self, pkg):
global PAM_WHITELIST
if pkg.isSource():
return
files = pkg.files()
for f in files:
if f in pkg.ghostFiles():
continue
m = pam_module_re.match(f)
if m:
bn = m.groups()[0]
if not bn in PAM_WHITELIST:
printError(pkg, "suse-pam-unauthorized-module", bn)
check=PAMModulesCheck()
if Config.info:
addDetails(
'suse-pam-unauthorized-module',
"""The package installs a PAM module. If the package
is intended for inclusion in any SUSE product please open a bug
report to request review of the service by the security team.""",
)
|
