b8ceb0c461
We extracted oval parser from rhel and used that for opensuse and SUSE Linux Enterpise Signed-off-by: Thomas Boerger <tboerger@suse.de> Signed-off-by: Jordi Massaguer Pla <jmassaguerpla@suse.de>
130 lines
3.3 KiB
Go
130 lines
3.3 KiB
Go
// Copyright 2015 clair authors
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package rhel
|
|
|
|
import (
|
|
"regexp"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"github.com/coreos/clair/updater"
|
|
"github.com/coreos/clair/utils/oval"
|
|
"github.com/coreos/clair/utils/types"
|
|
"github.com/coreos/pkg/capnslog"
|
|
)
|
|
|
|
const (
|
|
// Before this RHSA, it deals only with RHEL <= 4.
|
|
firstRHEL5RHSA = 20070044
|
|
firstConsideredRHEL = 5
|
|
)
|
|
|
|
var (
|
|
rhsaRegexp = regexp.MustCompile(`com.redhat.rhsa-(\d+).xml`)
|
|
log = capnslog.NewPackageLogger("github.com/coreos/clair", "updater/fetchers/rhel")
|
|
)
|
|
|
|
func init() {
|
|
rhelInfo := &RHELInfo{}
|
|
updater.RegisterFetcher(rhelInfo.DistName(),
|
|
&oval.OvalFetcher{OsInfo: rhelInfo})
|
|
}
|
|
|
|
// RHELInfo implements oval.OsInfo interface
|
|
// See oval.OsInfo for more info on what each method is
|
|
type RHELInfo struct {
|
|
}
|
|
|
|
func (f *RHELInfo) DistFile(item string) string {
|
|
rhsaFilePrefix := "com.redhat.rhsa-"
|
|
return f.OvalURI() + rhsaFilePrefix + item + ".xml"
|
|
}
|
|
|
|
func (f *RHELInfo) SecToken() string {
|
|
return "RHSA"
|
|
}
|
|
|
|
func (f *RHELInfo) IgnoredCriterions() []string {
|
|
return []string{
|
|
" is signed with Red Hat ",
|
|
" Client is installed",
|
|
" Workstation is installed",
|
|
" ComputeNode is installed",
|
|
}
|
|
}
|
|
|
|
func (f *RHELInfo) OvalURI() string {
|
|
return "https://www.redhat.com/security/data/oval/"
|
|
}
|
|
|
|
func (f *RHELInfo) DistName() string {
|
|
return "RHEL"
|
|
}
|
|
|
|
func (f *RHELInfo) Namespace() string {
|
|
// TODO this is where to set different labels for centos and rhel. See:
|
|
// https://github.com/coreos/clair/commit/ce8d31bbb323471bf2a69427e4a645b3ce8a25c1
|
|
// https://github.com/coreos/clair/pull/193
|
|
return "centos"
|
|
}
|
|
|
|
func (f *RHELInfo) ParseOsVersion(comment string) string {
|
|
if !strings.Contains(comment, " is installed") {
|
|
return ""
|
|
}
|
|
const prefixLen = len("Red Hat Enterprise Linux ")
|
|
osVersion := strings.TrimSpace(comment[prefixLen : prefixLen+strings.Index(comment[prefixLen:], " ")])
|
|
if !f.ValidOsVersion(osVersion) {
|
|
return ""
|
|
}
|
|
return osVersion
|
|
}
|
|
|
|
func (f *RHELInfo) ParsePackageNameVersion(comment string) (string, string) {
|
|
if !strings.Contains(comment, " is earlier than ") {
|
|
return "", ""
|
|
}
|
|
const prefixLen = len(" is earlier than ")
|
|
name := strings.TrimSpace(comment[:strings.Index(comment, " is earlier than ")])
|
|
version := comment[strings.Index(comment, " is earlier than ")+prefixLen:]
|
|
return name, version
|
|
}
|
|
|
|
func (f *RHELInfo) ParseFilenameDist(line string) string {
|
|
r := rhsaRegexp.FindStringSubmatch(line)
|
|
if len(r) != 2 {
|
|
return ""
|
|
}
|
|
rhsaNo, _ := strconv.Atoi(r[1])
|
|
if rhsaNo <= firstRHEL5RHSA {
|
|
return ""
|
|
}
|
|
return f.DistFile(r[1])
|
|
}
|
|
|
|
// Not in the interface
|
|
|
|
func (f *RHELInfo) ValidOsVersion(osVersion string) bool {
|
|
version, err := strconv.Atoi(osVersion)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
_, err = types.NewVersion(osVersion)
|
|
if err != nil {
|
|
return false
|
|
}
|
|
return version >= firstConsideredRHEL
|
|
}
|