Radish alpha
H
HardenedBSD-pkg
rad:z3QDZAW2FAfuLvihrhiyDC9fAD8G9
HardenedBSD Package Manager
Radicle
Git
Commits › 63ca2f2
Add a periodic scritp to check for dependencies
Baptiste Daroussin committed 18 days ago
commit 63ca2f2cc80a9f0c9989fe7b2c365094816a724f
parent acda5a9
2 files changed +88 -1
modified scripts/Makefile.autosetup
@@ -15,7 +15,8 @@ PDAILY= periodic/411.pkg-backup \
	periodic/490.status-pkg-changes

PSECURITY=	periodic/410.pkg-audit \

		periodic/405.pkg-base-audit \
- 
		periodic/460.pkg-checksum
+ 
		periodic/460.pkg-checksum \
+ 
		periodic/470.pkg-dependencies

PWEEKLY=	periodic/400.status-pkg

COMPLETION=	completion/_pkg \

		completion/_pkg.bash
added scripts/periodic/470.pkg-dependencies.in
@@ -0,0 +1,86 @@
+ 
#!/bin/sh -
+ 
#
+
+ 
if [ -r /etc/defaults/periodic.conf ]; then
+ 
	. /etc/defaults/periodic.conf
+ 
	source_periodic_confs
+ 
fi
+
+ 
. /etc/periodic/security/security.functions
+
+ 
: ${security_status_pkg_dependencies_enable:=YES}
+ 
: ${security_status_pkg_dependencies_period:=daily}
+ 
: ${security_status_pkg_dependencies_chroots=$pkg_chroots}
+ 
: ${security_status_pkg_dependencies_jails=$pkg_jails}
+
+ 
check_deps_pkg() {
+ 
	local pkgargs="$1"
+ 
	local rc
+
+ 
	rc=$(${pkgcmd} ${pkgargs} check -qdan 2>&1 |
+ 
		tee /dev/stderr |
+ 
		wc -l)
+ 
	[ $rc -gt 1 ] && rc=1
+
+ 
	return $rc
+ 
}
+
+ 
check_deps_pkg_all() {
+ 
	local rc=0
+
+ 
	if [ -n "${security_status_pkg_dependencies_chroots}" -o \
+ 
		-n "${security_status_pkg_dependencies_jails}" ]; then
+ 
	echo "Host system:"
+ 
	fi
+
+ 
	check_deps_pkg ''
+ 
	[ $? -eq 1 ] && rc=1
+
+ 
	for c in $security_status_pkg_dependencies_chroots ; do
+ 
		echo
+ 
		echo "chroot: $c"
+ 
		check_deps_pkg "-c $c"
+ 
		[ $? -eq 1 ] && rc=1
+ 
	done
+
+ 
	case $security_status_pkg_dependencies_jails in
+ 
		\*)
+ 
			jails=$(jls -q -h name | sed -e 1d)
+ 
			;;
+ 
		'')
+ 
			jails=
+ 
			;;
+ 
		*)
+ 
			jails=$security_status_pkg_dependencies_jails
+ 
			;;
+ 
	esac
+
+ 
	for j in $jails ; do
+ 
		echo
+ 
		echo "jail: $j"
+ 
		check_deps_pkg "-j $j"
+ 
		[ $? -eq 1 ] && rc=1
+ 
	done
+
+ 
	return $rc
+ 
}
+
+ 
rc=0
+
+ 
if check_yesno_period security_status_pkg_dependencies_enable
+ 
then
+ 
	pkgcmd=%prefix%/sbin/pkg
+
+ 
	echo
+ 
	echo 'Checking for packages with missing dependencies:'
+
+ 
	if ! ${pkgcmd} -N >/dev/null 2>&1 ; then
+ 
		echo 'pkg-dependencies is enabled but pkg is not used'
+ 
		rc=2
+ 
	else
+ 
	    check_deps_pkg_all
+ 
	    rc=$?
+ 
	fi
+ 
fi
+
+ 
exit $rc