[PATCH] verify package cehcksums against metadata (#681224)

[Brian C. Lane]

From: "Brian C. Lane"

Anaconda uses yum's getPackage() function to grab packages. It needs to
have a function passed to it in order to verify the package checksum
against the metadata.

Resolves: rhbz#681224
---
 yuminstall.py |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletions(-)

diff --git a/yuminstall.py b/yuminstall.py
index 61a0b65..57f826a 100644
--- a/yuminstall.py
+++ b/yuminstall.py
@@ -177,7 +177,8 @@ class AnacondaCallback:
             while self.openfile is None:
                 trynumber += 1
                 try:
-                    fn = repo.getPackage(po)
+                    checkfunc = (self.ayum.verifyPkg, (po, 1), {})
+                    fn = repo.getPackage(po, checkfunc=checkfunc)

f = open(fn, 'r')
                     self.openfile = f
@@ -185,6 +186,9 @@ class AnacondaCallback:
                     self.ayum._handleFailure(po, trynumber)
                 except IOError:
                     self.ayum._handleFailure(po, trynumber)
+                except URLGrabError as e:
+                    log.error("URLGrabError: %s" % (e,))
+                    self.ayum._handleFailure(po, trynumber)
                 except yum.Errors.RepoError, e:
                     continue
             self.inProgressPo = po

[Brian C. Lane]

On Wed, Jun 27, 2012 at 03:44:24PM -0700, Brian C. Lane wrote:
> From: "Brian C. Lane"
>
> Anaconda uses yum's getPackage() function to grab packages. It needs to
> have a function passed to it in order to verify the package checksum
> against the metadata.
> Resolves: rhbz#681224

This should be applied to master and newui as well (with minor
adjustments).