From fef7fc12480207f13732f68f097d28dfbd84b2d5 Mon Sep 17 00:00:00 2001 From: Victor Dubiniuk Date: Fri, 5 Feb 2016 21:09:27 +0300 Subject: [PATCH] CLI commands to check app and core signatures --- core/command/integrity/checkapp.php | 69 ++++++++++++++++++++++++++++ core/command/integrity/checkcore.php | 66 ++++++++++++++++++++++++++ core/register_command.php | 7 +++ 3 files changed, 142 insertions(+) create mode 100644 core/command/integrity/checkapp.php create mode 100644 core/command/integrity/checkcore.php diff --git a/core/command/integrity/checkapp.php b/core/command/integrity/checkapp.php new file mode 100644 index 00000000000..26fa9dd655a --- /dev/null +++ b/core/command/integrity/checkapp.php @@ -0,0 +1,69 @@ + + * @author Björn Schießle + * @author Christian Kampka + * @author Joas Schilling + * @author Lukas Reschke + * @author Morris Jobke + * @author Robin McCorkell + * @author Thomas Müller + * @author Victor Dubiniuk + * @author Vincent Petry + * + * @copyright Copyright (c) 2016, ownCloud, Inc. + * @license AGPL-3.0 + * + * This code is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License, version 3, + * as published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License, version 3, + * along with this program. If not, see + * + */ +namespace OC\Core\Command\Integrity; + +use OC\IntegrityCheck\Checker; +use OC\Core\Command\Base; +use Symfony\Component\Console\Input\InputInterface; +use Symfony\Component\Console\Input\InputArgument; +use Symfony\Component\Console\Output\OutputInterface; + +/** + * Class SignApp + * + * @package OC\Core\Command\Integrity + */ +class CheckApp extends Base { + public function __construct(Checker $checker) { + parent::__construct(); + $this->checker = $checker; + } + + /** + * {@inheritdoc } + */ + protected function configure() { + parent::configure(); + $this + ->setName('integrity:check-app') + ->setDescription('Check an app integrity using a signature.') + ->addArgument('appid', null, InputArgument::REQUIRED, 'Application to check'); + } + + /** + * {@inheritdoc } + */ + protected function execute(InputInterface $input, OutputInterface $output) { + $appid = $input->getArgument('appid'); + $result = $this->checker->verifyAppSignature($appid); + $this->writeArrayInOutputFormat($input, $output, $result); + } + +} diff --git a/core/command/integrity/checkcore.php b/core/command/integrity/checkcore.php new file mode 100644 index 00000000000..366076441ee --- /dev/null +++ b/core/command/integrity/checkcore.php @@ -0,0 +1,66 @@ + + * @author Björn Schießle + * @author Christian Kampka + * @author Joas Schilling + * @author Lukas Reschke + * @author Morris Jobke + * @author Robin McCorkell + * @author Thomas Müller + * @author Victor Dubiniuk + * @author Vincent Petry + * + * @copyright Copyright (c) 2016, ownCloud, Inc. + * @license AGPL-3.0 + * + * This code is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License, version 3, + * as published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License, version 3, + * along with this program. If not, see + * + */ + +namespace OC\Core\Command\Integrity; + +use OC\IntegrityCheck\Checker; +use OC\Core\Command\Base; +use Symfony\Component\Console\Input\InputInterface; +use Symfony\Component\Console\Output\OutputInterface; + +/** + * Class SignApp + * + * @package OC\Core\Command\Integrity + */ +class CheckCore extends Base { + public function __construct(Checker $checker) { + parent::__construct(); + $this->checker = $checker; + } + + /** + * {@inheritdoc } + */ + protected function configure() { + parent::configure(); + $this + ->setName('integrity:check-core') + ->setDescription('Check a core integrity using a signature.'); + } + + /** + * {@inheritdoc } + */ + protected function execute(InputInterface $input, OutputInterface $output) { + $result = $this->checker->verifyCoreSignature(); + $this->writeArrayInOutputFormat($input, $output, $result); + } +} diff --git a/core/register_command.php b/core/register_command.php index 5f9a2675873..2e9e80fe8d7 100644 --- a/core/register_command.php +++ b/core/register_command.php @@ -43,6 +43,13 @@ $application->add(new \OC\Core\Command\Integrity\SignCore( \OC::$server->getIntegrityCodeChecker(), new \OC\IntegrityCheck\Helpers\FileAccessHelper() )); +$application->add(new \OC\Core\Command\Integrity\CheckApp( + \OC::$server->getIntegrityCodeChecker() +)); +$application->add(new \OC\Core\Command\Integrity\CheckCore( + \OC::$server->getIntegrityCodeChecker() +)); + if (\OC::$server->getConfig()->getSystemValue('installed', false)) { $application->add(new OC\Core\Command\App\Disable(\OC::$server->getAppManager())); -- 2.39.5