dak/new_security_install.py

   1 #!/usr/bin/env python
   2
   3 # Wrapper for Debian Security team
   4 # Copyright (C) 2006  Anthony Towns <ajt@debian.org>
   5
   6 # This program is free software; you can redistribute it and/or modify
   7 # it under the terms of the GNU General Public License as published by
   8 # the Free Software Foundation; either version 2 of the License, or
   9 # (at your option) any later version.
  10
  11 # This program is distributed in the hope that it will be useful, but
  12 # WITHOUT ANY WARRANTY; without even the implied warranty of
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14 # General Public License for more details.
  15
  16 # You should have received a copy of the GNU General Public License
  17 # along with this program; if not, write to the Free Software
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
  19 # USA
  20
  21 ################################################################################
  22
  23 import daklib.queue, daklib.logging, daklib.utils, daklib.database
  24 import apt_pkg, os, sys, pwd, time, re, commands
  25
  26 re_taint_free = re.compile(r"^['/;\-\+\.~\s\w]+$");
  27
  28 Cnf = None
  29 Options = None
  30 Upload = None
  31 Logger = None
  32
  33 advisory = None
  34 changes = []
  35 srcverarches = {}
  36
  37 def init():
  38     global Cnf, Upload, Options, Logger
  39
  40     Cnf = daklib.utils.get_conf()
  41     Cnf["Dinstall::Options::No-Mail"] = "y"
  42     Arguments = [('h', "help", "Security-Install::Options::Help"),
  43                  ('a', "automatic", "Security-Install::Options::Automatic"),
  44                  ('n', "no-action", "Security-Install::Options::No-Action"),
  45                  ('s', "sudo", "Security-Install::Options::Sudo"),
  46                  (' ', "no-upload", "Security-Install::Options::No-Upload"),
  47                  ('u', "fg-upload", "Security-Install::Options::Foreground-Upload"),
  48                  (' ', "drop-advisory", "Security-Install::Options::Drop-Advisory"),
  49                  ('A', "approve", "Security-Install::Options::Approve"),
  50                  ('R', "reject", "Security-Install::Options::Reject"),
  51                  ('D', "disembargo", "Security-Install::Options::Disembargo") ]
  52
  53     for i in Arguments:
  54         Cnf[i[2]] = ""
  55
  56     arguments = apt_pkg.ParseCommandLine(Cnf, Arguments, sys.argv)
  57
  58     Options = Cnf.SubTree("Security-Install::Options")
  59
  60     whoami = os.getuid()
  61     whoamifull = pwd.getpwuid(whoami)
  62     username = whoamifull[0]
  63     if username != "dak":
  64         print "Non-dak user: %s" % username
  65         Options["Sudo"] = "y"
  66
  67     if Options["Help"]:
  68         print "help yourself"
  69         sys.exit(0)
  70
  71     if len(arguments) == 0:
  72         daklib.utils.fubar("Process what?")
  73
  74     Upload = daklib.queue.Upload(Cnf)
  75     if Options["No-Action"]:
  76         Options["Sudo"] = ""
  77     if not Options["Sudo"] and not Options["No-Action"]:
  78         Logger = Upload.Logger = daklib.logging.Logger(Cnf, "new-security-install")
  79
  80     return arguments
  81
  82 def quit():
  83     if Logger:
  84         Logger.close()
  85     sys.exit(0)
  86
  87 def load_args(arguments):
  88     global advisory, changes
  89
  90     adv_ids = {}
  91     if not arguments[0].endswith(".changes"):
  92         adv_ids [arguments[0]] = 1
  93         arguments = arguments[1:]
  94
  95     null_adv_changes = []
  96
  97     changesfiles = {}
  98     for a in arguments:
  99         if "/" in a:
 100             daklib.utils.fubar("can only deal with files in the current directory")
 101         if not a.endswith(".changes"):
 102             daklib.utils.fubar("not a .changes file: %s" % (a))
 103         Upload.init_vars()
 104         Upload.pkg.changes_file = a
 105         Upload.update_vars()
 106         if "adv id" in Upload.pkg.changes:
 107             changesfiles[a] = 1
 108             adv_ids[Upload.pkg.changes["adv id"]] = 1
 109         else:
 110             null_adv_changes.append(a)
 111
 112     adv_ids = adv_ids.keys()
 113     if len(adv_ids) > 1:
 114         daklib.utils.fubar("multiple advisories selected: %s" % (", ".join(adv_ids)))
 115     if adv_ids == []:
 116         advisory = None
 117     else:
 118         advisory = adv_ids[0]
 119
 120     changes = changesfiles.keys()
 121     return null_adv_changes
 122
 123 def load_adv_changes():
 124     global srcverarches, changes
 125
 126     for c in os.listdir("."):
 127         if not c.endswith(".changes"): continue
 128         Upload.init_vars()
 129         Upload.pkg.changes_file = c
 130         Upload.update_vars()
 131         if "adv id" not in Upload.pkg.changes:
 132             continue
 133         if Upload.pkg.changes["adv id"] != advisory:
 134             continue
 135
 136         if c not in changes: changes.append(c)
 137         srcver = "%s %s" % (Upload.pkg.changes["source"],
 138                             Upload.pkg.changes["version"])
 139         srcverarches.setdefault(srcver, {})
 140         for arch in Upload.pkg.changes["architecture"].keys():
 141             srcverarches[srcver][arch] = 1
 142
 143 def advisory_info():
 144     if advisory != None:
 145         print "Advisory: %s" % (advisory)
 146     print "Changes:"
 147     for c in changes:
 148         print " %s" % (c)
 149
 150     print "Packages:"
 151     svs = srcverarches.keys()
 152     svs.sort()
 153     for sv in svs:
 154         as = srcverarches[sv].keys()
 155         as.sort()
 156         print " %s (%s)" % (sv, ", ".join(as))
 157
 158 def prompt(opts, default):
 159     p = ""
 160     v = {}
 161     for o in opts:
 162         v[o[0].upper()] = o
 163         if o[0] == default:
 164             p += ", [%s]%s" % (o[0], o[1:])
 165         else:
 166             p += ", " + o
 167     p = p[2:] + "? "
 168     a = None
 169
 170     if Options["Automatic"]:
 171         a = default
 172
 173     while a not in v:
 174         a = daklib.utils.our_raw_input(p) + default
 175         a = a[:1].upper()
 176
 177     return v[a]
 178
 179 def add_changes(extras):
 180     for c in extras:
 181         changes.append(c)
 182         Upload.init_vars()
 183         Upload.pkg.changes_file = c
 184         Upload.update_vars()
 185         srcver = "%s %s" % (Upload.pkg.changes["source"], Upload.pkg.changes["version"])
 186         srcverarches.setdefault(srcver, {})
 187         for arch in Upload.pkg.changes["architecture"].keys():
 188             srcverarches[srcver][arch] = 1
 189         Upload.pkg.changes["adv id"] = advisory
 190         Upload.dump_vars(os.getcwd())
 191
 192 def yes_no(prompt):
 193     if Options["Automatic"]: return True
 194     while 1:
 195         answer = daklib.utils.our_raw_input(prompt + " ").lower()
 196         if answer in "yn":
 197             return answer == "y"
 198         print "Invalid answer; please try again."
 199
 200 def do_upload():
 201     if Options["No-Upload"]:
 202         print "Not uploading as requested"
 203     elif Options["Foreground-Upload"]:
 204         actually_upload(changes)
 205     else:
 206         child = os.fork()
 207         if child == 0:
 208             actually_upload(changes)
 209             os._exit(0)
 210         print "Uploading in the background"
 211
 212 def actually_upload(changes_files):
 213     file_list = ""
 214     suites = {}
 215     component_mapping = {}
 216     for component in Cnf.SubTree("Security-Install::ComponentMappings").List():
 217         component_mapping[component] = Cnf["Security-Install::ComponentMappings::%s" % (component)]
 218     uploads = {}; # uploads[uri] = file_list
 219     changesfiles = {}; # changesfiles[uri] = file_list
 220     package_list = {} # package_list[source_name][version]
 221     changes_files.sort(daklib.utils.changes_compare)
 222     for changes_file in changes_files:
 223         changes_file = daklib.utils.validate_changes_file_arg(changes_file)
 224         # Reset variables
 225         components = {}
 226         upload_uris = {}
 227         file_list = []
 228         Upload.init_vars()
 229         # Parse the .dak file for the .changes file
 230         Upload.pkg.changes_file = changes_file
 231         Upload.update_vars()
 232         files = Upload.pkg.files
 233         changes = Upload.pkg.changes
 234         dsc = Upload.pkg.dsc
 235         # We have the changes, now return if its amd64, to not upload them to ftp-master
 236         if changes["distribution"].has_key("oldstable-security") and changes["architecture"].has_key("amd64"):
 237             print "Not uploading amd64 oldstable-security changes to ftp-master\n"
 238             continue
 239         # Build the file list for this .changes file
 240         for file in files.keys():
 241             poolname = os.path.join(Cnf["Dir::Root"], Cnf["Dir::PoolRoot"],
 242                                     daklib.utils.poolify(changes["source"], files[file]["component"]),
 243                                     file)
 244             file_list.append(poolname)
 245             orig_component = files[file].get("original component", files[file]["component"])
 246             components[orig_component] = ""
 247         # Determine the upload uri for this .changes file
 248         for component in components.keys():
 249             upload_uri = component_mapping.get(component)
 250             if upload_uri:
 251                 upload_uris[upload_uri] = ""
 252         num_upload_uris = len(upload_uris.keys())
 253         if num_upload_uris == 0:
 254             daklib.utils.fubar("%s: No valid upload URI found from components (%s)."
 255                         % (changes_file, ", ".join(components.keys())))
 256         elif num_upload_uris > 1:
 257             daklib.utils.fubar("%s: more than one upload URI (%s) from components (%s)."
 258                         % (changes_file, ", ".join(upload_uris.keys()),
 259                            ", ".join(components.keys())))
 260         upload_uri = upload_uris.keys()[0]
 261         # Update the file list for the upload uri
 262         if not uploads.has_key(upload_uri):
 263             uploads[upload_uri] = []
 264         uploads[upload_uri].extend(file_list)
 265         # Update the changes list for the upload uri
 266         if not changesfiles.has_key(upload_uri):
 267             changesfiles[upload_uri] = []
 268         changesfiles[upload_uri].append(changes_file)
 269         # Remember the suites and source name/version
 270         for suite in changes["distribution"].keys():
 271             suites[suite] = ""
 272         # Remember the source name and version
 273         if changes["architecture"].has_key("source") and \
 274            changes["distribution"].has_key("testing"):
 275             if not package_list.has_key(dsc["source"]):
 276                 package_list[dsc["source"]] = {}
 277             package_list[dsc["source"]][dsc["version"]] = ""
 278
 279     for uri in uploads.keys():
 280         uploads[uri].extend(changesfiles[uri])
 281         (host, path) = uri.split(":")
 282         file_list = " ".join(uploads[uri])
 283         print "Uploading files to %s..." % (host)
 284         spawn("lftp -c 'open %s; cd %s; put %s'" % (host, path, file_list))
 285
 286     if not Options["No-Action"]:
 287         filename = "%s/testing-processed" % (Cnf["Dir::Log"])
 288         file = daklib.utils.open_file(filename, 'a')
 289         for source in package_list.keys():
 290             for version in package_list[source].keys():
 291                 file.write(" ".join([source, version])+'\n')
 292         file.close()
 293
 294 def generate_advisory(template):
 295     global changes, advisory
 296
 297     adv_packages = []
 298     updated_pkgs = {};  # updated_pkgs[distro][arch][file] = {path,md5,size}
 299
 300     for arg in changes:
 301         arg = daklib.utils.validate_changes_file_arg(arg)
 302         Upload.pkg.changes_file = arg
 303         Upload.init_vars()
 304         Upload.update_vars()
 305
 306         src = Upload.pkg.changes["source"]
 307         src_ver = "%s (%s)" % (src, Upload.pkg.changes["version"])
 308         if src_ver not in adv_packages:
 309             adv_packages.append(src_ver)
 310
 311         suites = Upload.pkg.changes["distribution"].keys()
 312         for suite in suites:
 313             if not updated_pkgs.has_key(suite):
 314                 updated_pkgs[suite] = {}
 315
 316         files = Upload.pkg.files
 317         for file in files.keys():
 318             arch = files[file]["architecture"]
 319             md5 = files[file]["md5sum"]
 320             size = files[file]["size"]
 321             poolname = Cnf["Dir::PoolRoot"] + \
 322                 daklib.utils.poolify(src, files[file]["component"])
 323             if arch == "source" and file.endswith(".dsc"):
 324                 dscpoolname = poolname
 325             for suite in suites:
 326                 if not updated_pkgs[suite].has_key(arch):
 327                     updated_pkgs[suite][arch] = {}
 328                 updated_pkgs[suite][arch][file] = {
 329                     "md5": md5, "size": size, "poolname": poolname }
 330
 331         dsc_files = Upload.pkg.dsc_files
 332         for file in dsc_files.keys():
 333             arch = "source"
 334             if not dsc_files[file].has_key("files id"):
 335                 continue
 336
 337             # otherwise, it's already in the pool and needs to be
 338             # listed specially
 339             md5 = dsc_files[file]["md5sum"]
 340             size = dsc_files[file]["size"]
 341             for suite in suites:
 342                 if not updated_pkgs[suite].has_key(arch):
 343                     updated_pkgs[suite][arch] = {}
 344                 updated_pkgs[suite][arch][file] = {
 345                     "md5": md5, "size": size, "poolname": dscpoolname }
 346
 347     if os.environ.has_key("SUDO_UID"):
 348         whoami = long(os.environ["SUDO_UID"])
 349     else:
 350         whoami = os.getuid()
 351     whoamifull = pwd.getpwuid(whoami)
 352     username = whoamifull[4].split(",")[0]
 353
 354     Subst = {
 355         "__ADVISORY__": advisory,
 356         "__WHOAMI__": username,
 357         "__DATE__": time.strftime("%B %d, %Y", time.gmtime(time.time())),
 358         "__PACKAGE__": ", ".join(adv_packages),
 359         "__DAK_ADDRESS__": Cnf["Dinstall::MyEmailAddress"]
 360         }
 361
 362     if Cnf.has_key("Dinstall::Bcc"):
 363         Subst["__BCC__"] = "Bcc: %s" % (Cnf["Dinstall::Bcc"])
 364
 365     adv = ""
 366     archive = Cnf["Archive::%s::PrimaryMirror" % (daklib.utils.where_am_i())]
 367     for suite in updated_pkgs.keys():
 368         ver = Cnf["Suite::%s::Version" % suite]
 369         if ver != "": ver += " "
 370         suite_header = "%s %s(%s)" % (Cnf["Dinstall::MyDistribution"],
 371                                        ver, suite)
 372         adv += "%s\n%s\n\n" % (suite_header, "-"*len(suite_header))
 373
 374         arches = Cnf.ValueList("Suite::%s::Architectures" % suite)
 375         if "source" in arches:
 376             arches.remove("source")
 377         if "all" in arches:
 378             arches.remove("all")
 379         arches.sort()
 380
 381         adv += "%s updates are available for %s.\n\n" % (
 382                 suite.capitalize(), daklib.utils.join_with_commas_and(arches))
 383
 384         for a in ["source", "all"] + arches:
 385             if not updated_pkgs[suite].has_key(a):
 386                 continue
 387
 388             if a == "source":
 389                 adv += "Source archives:\n\n"
 390             elif a == "all":
 391                 adv += "Architecture independent packages:\n\n"
 392             else:
 393                 adv += "%s architecture (%s)\n\n" % (a,
 394                         Cnf["Architectures::%s" % a])
 395
 396             for file in updated_pkgs[suite][a].keys():
 397                 adv += "  http://%s/%s%s\n" % (
 398                                 archive, updated_pkgs[suite][a][file]["poolname"], file)
 399                 adv += "    Size/MD5 checksum: %8s %s\n" % (
 400                         updated_pkgs[suite][a][file]["size"],
 401                         updated_pkgs[suite][a][file]["md5"])
 402             adv += "\n"
 403     adv = adv.rstrip()
 404
 405     Subst["__ADVISORY_TEXT__"] = adv
 406
 407     adv = daklib.utils.TemplateSubst(Subst, template)
 408     return adv
 409
 410 def spawn(command):
 411     if not re_taint_free.match(command):
 412         daklib.utils.fubar("Invalid character in \"%s\"." % (command))
 413
 414     if Options["No-Action"]:
 415         print "[%s]" % (command)
 416     else:
 417         (result, output) = commands.getstatusoutput(command)
 418         if (result != 0):
 419             daklib.utils.fubar("Invocation of '%s' failed:\n%s\n" % (command, output), result)
 420
 421
 422 ##################### ! ! ! N O T E ! ! !  #####################
 423 #
 424 # These functions will be reinvoked by semi-priveleged users, be careful not
 425 # to invoke external programs that will escalate privileges, etc.
 426 #
 427 ##################### ! ! ! N O T E ! ! !  #####################
 428
 429 def sudo(arg, fn, exit):
 430     if Options["Sudo"]:
 431         if advisory == None:
 432             daklib.utils.fubar("Must set advisory name")
 433         os.spawnl(os.P_WAIT, "/usr/bin/sudo", "/usr/bin/sudo", "-u", "dak", "-H",
 434                   "/usr/local/bin/dak", "new-security-install", "-"+arg, "--", advisory)
 435     else:
 436         fn()
 437     if exit:
 438         quit()
 439
 440 def do_Approve(): sudo("A", _do_Approve, True)
 441 def _do_Approve():
 442     # 1. dump advisory in drafts
 443     draft = "/org/security.debian.org/advisories/drafts/%s" % (advisory)
 444     print "Advisory in %s" % (draft)
 445     if not Options["No-Action"]:
 446         adv_file = "./advisory.%s" % (advisory)
 447         if not os.path.exists(adv_file):
 448             adv_file = Cnf["Dir::Templates"]+"/security-install.advisory"
 449         adv_fd = os.open(draft, os.O_RDWR|os.O_CREAT|os.O_EXCL, 0664)
 450         os.write(adv_fd, generate_advisory(adv_file))
 451         os.close(adv_fd)
 452         adv_fd = None
 453
 454     # 2. run dak process-accepted on changes
 455     print "Accepting packages..."
 456     spawn("dak process-accepted -pa %s" % (" ".join(changes)))
 457
 458     # 3. run dak make-suite-file-list / apt-ftparchve / dak generate-releases
 459     print "Updating file lists for apt-ftparchive..."
 460     spawn("dak make-suite-file-list")
 461     print "Updating Packages and Sources files..."
 462     spawn("apt-ftparchive generate %s" % (daklib.utils.which_apt_conf_file()))
 463     print "Updating Release files..."
 464     spawn("dak generate-releases")
 465     print "Triggering security mirrors..."
 466     spawn("sudo -u archvsync /home/archvsync/signal_security")
 467
 468     # 4. chdir to done - do upload
 469     if not Options["No-Action"]:
 470         os.chdir(Cnf["Dir::Queue::Done"])
 471     do_upload()
 472
 473 def do_Disembargo(): sudo("D", _do_Disembargo, True)
 474 def _do_Disembargo():
 475     if os.getcwd() != Cnf["Dir::Queue::Embargoed"].rstrip("/"):
 476         daklib.utils.fubar("Can only disembargo from %s" % Cnf["Dir::Queue::Embargoed"])
 477
 478     dest = Cnf["Dir::Queue::Unembargoed"]
 479     emb_q = daklib.database.get_or_set_queue_id("embargoed")
 480     une_q = daklib.database.get_or_set_queue_id("unembargoed")
 481
 482     for c in changes:
 483         print "Disembargoing %s" % (c)
 484
 485         Upload.init_vars()
 486         Upload.pkg.changes_file = c
 487         Upload.update_vars()
 488
 489         if "source" in Upload.pkg.changes["architecture"].keys():
 490             print "Adding %s %s to disembargo table" % (Upload.pkg.changes["source"], Upload.pkg.changes["version"])
 491             Upload.projectB.query("INSERT INTO disembargo (package, version) VALUES ('%s', '%s')" % (Upload.pkg.changes["source"], Upload.pkg.changes["version"]))
 492
 493         files = {}
 494         for suite in Upload.pkg.changes["distribution"].keys():
 495             if suite not in Cnf.ValueList("Dinstall::QueueBuildSuites"):
 496                 continue
 497             dest_dir = Cnf["Dir::QueueBuild"]
 498             if Cnf.FindB("Dinstall::SecurityQueueBuild"):
 499                 dest_dir = os.path.join(dest_dir, suite)
 500             for file in Upload.pkg.files.keys():
 501                 files[os.path.join(dest_dir, file)] = 1
 502
 503         files = files.keys()
 504         Upload.projectB.query("BEGIN WORK")
 505         for f in files:
 506             Upload.projectB.query("UPDATE queue_build SET queue = %s WHERE filename = '%s' AND queue = %s" % (une_q, f, emb_q))
 507         Upload.projectB.query("COMMIT WORK")
 508
 509         for file in Upload.pkg.files.keys():
 510             daklib.utils.copy(file, os.path.join(dest, file))
 511             os.unlink(file)
 512
 513     for c in changes:
 514         daklib.utils.copy(c, os.path.join(dest, c))
 515         os.unlink(c)
 516         k = c[:-8] + ".dak"
 517         daklib.utils.copy(k, os.path.join(dest, k))
 518         os.unlink(k)
 519
 520 def do_Reject(): sudo("R", _do_Reject, True)
 521 def _do_Reject():
 522     global changes
 523     for c in changes:
 524         print "Rejecting %s..." % (c)
 525         Upload.init_vars()
 526         Upload.pkg.changes_file = c
 527         Upload.update_vars()
 528         files = {}
 529         for suite in Upload.pkg.changes["distribution"].keys():
 530             if suite not in Cnf.ValueList("Dinstall::QueueBuildSuites"):
 531                 continue
 532             dest_dir = Cnf["Dir::QueueBuild"]
 533             if Cnf.FindB("Dinstall::SecurityQueueBuild"):
 534                 dest_dir = os.path.join(dest_dir, suite)
 535             for file in Upload.pkg.files.keys():
 536                 files[os.path.join(dest_dir, file)] = 1
 537
 538         files = files.keys()
 539
 540         aborted = Upload.do_reject()
 541         if not aborted:
 542             os.unlink(c[:-8]+".dak")
 543             for f in files:
 544                 Upload.projectB.query(
 545                     "DELETE FROM queue_build WHERE filename = '%s'" % (f))
 546                 os.unlink(f)
 547
 548     print "Updating buildd information..."
 549     spawn("/org/security.debian.org/dak/config/debian-security/cron.buildd")
 550
 551     adv_file = "./advisory.%s" % (advisory)
 552     if os.path.exists(adv_file):
 553         os.unlink(adv_file)
 554
 555 def do_DropAdvisory():
 556     for c in changes:
 557         Upload.init_vars()
 558         Upload.pkg.changes_file = c
 559         Upload.update_vars()
 560         del Upload.pkg.changes["adv id"]
 561         Upload.dump_vars(os.getcwd())
 562     quit()
 563
 564 def do_Edit():
 565     adv_file = "./advisory.%s" % (advisory)
 566     if not os.path.exists(adv_file):
 567         daklib.utils.copy(Cnf["Dir::Templates"]+"/security-install.advisory", adv_file)
 568     editor = os.environ.get("EDITOR", "vi")
 569     result = os.system("%s %s" % (editor, adv_file))
 570     if result != 0:
 571         daklib.utils.fubar("%s invocation failed for %s." % (editor, adv_file))
 572
 573 def do_Show():
 574     adv_file = "./advisory.%s" % (advisory)
 575     if not os.path.exists(adv_file):
 576         adv_file = Cnf["Dir::Templates"]+"/security-install.advisory"
 577     print "====\n%s\n====" % (generate_advisory(adv_file))
 578
 579 def do_Quit():
 580     quit()
 581
 582 def main():
 583     global changes
 584
 585     args = init()
 586     extras = load_args(args)
 587     if advisory:
 588         load_adv_changes()
 589     if extras:
 590         if not advisory:
 591             changes = extras
 592         else:
 593             if srcverarches == {}:
 594                 if not yes_no("Create new advisory %s?" % (advisory)):
 595                     print "Not doing anything, then"
 596                     quit()
 597             else:
 598                 advisory_info()
 599                 doextras = []
 600                 for c in extras:
 601                     if yes_no("Add %s to %s?" % (c, advisory)):
 602                         doextras.append(c)
 603                 extras = doextras
 604             add_changes(extras)
 605
 606     if not advisory:
 607         daklib.utils.fubar("Must specify an advisory id")
 608
 609     if not changes:
 610         daklib.utils.fubar("No changes specified")
 611
 612     if Options["Approve"]:
 613         advisory_info()
 614         do_Approve()
 615     elif Options["Reject"]:
 616         advisory_info()
 617         do_Reject()
 618     elif Options["Disembargo"]:
 619         advisory_info()
 620         do_Disembargo()
 621     elif Options["Drop-Advisory"]:
 622         advisory_info()
 623         do_DropAdvisory()
 624     else:
 625         while 1:
 626             default = "Q"
 627             opts = ["Approve", "Edit advisory"]
 628             if os.path.exists("./advisory.%s" % advisory):
 629                 default = "A"
 630             else:
 631                 default = "E"
 632             if os.getcwd() == Cnf["Dir::Queue::Embargoed"].rstrip("/"):
 633                 opts.append("Disembargo")
 634             opts += ["Show advisory", "Reject", "Quit"]
 635
 636             advisory_info()
 637             what = prompt(opts, default)
 638
 639             if what == "Quit":
 640                 do_Quit()
 641             elif what == "Approve":
 642                 do_Approve()
 643             elif what == "Edit advisory":
 644                 do_Edit()
 645             elif what == "Show advisory":
 646                 do_Show()
 647             elif what == "Disembargo":
 648                 do_Disembargo()
 649             elif what == "Reject":
 650                 do_Reject()
 651             else:
 652                 daklib.utils.fubar("Impossible answer '%s', wtf?" % (what))
 653
 654 ################################################################################
 655
 656 if __name__ == '__main__':
 657     main()
 658
 659 ################################################################################