X-Git-Url: https://jxself.org/git/?a=blobdiff_plain;f=kconfig_hardened_check%2F__init__.py;h=4aa03473fe4b4e21eb26de9f03f615038bcbe3d2;hb=ba85d0b9d9b64f8ed926b9a7e9662c3390bcbbb0;hp=8f244985ecbb4d55f6ee53426e9ac6462d9eeb7f;hpb=b630183a7fd78183d24f01fd5a1cdf02410e5626;p=kconfig-hardened-check.git diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py index 8f24498..4aa0347 100644 --- a/kconfig_hardened_check/__init__.py +++ b/kconfig_hardened_check/__init__.py @@ -12,6 +12,7 @@ This module performs input/output. # pylint: disable=missing-function-docstring,line-too-long,invalid-name,too-many-branches,too-many-statements +import gzip import sys from argparse import ArgumentParser from collections import OrderedDict @@ -22,8 +23,16 @@ from .checks import add_kconfig_checks, add_cmdline_checks, normalize_cmdline_op from .engine import populate_with_data, perform_checks +def _open(file: str, *args, **kwargs): + open_method = open + if file.endswith(".gz"): + open_method = gzip.open + + return open_method(file, *args, **kwargs) + + def detect_arch(fname, archs): - with open(fname, 'r', encoding='utf-8') as f: + with _open(fname, 'rt', encoding='utf-8') as f: arch_pattern = re.compile("CONFIG_[a-zA-Z0-9_]*=y") arch = None for line in f.readlines(): @@ -40,7 +49,7 @@ def detect_arch(fname, archs): def detect_kernel_version(fname): - with open(fname, 'r', encoding='utf-8') as f: + with _open(fname, 'rt', encoding='utf-8') as f: ver_pattern = re.compile("# Linux/.* Kernel Configuration") for line in f.readlines(): if ver_pattern.match(line): @@ -58,7 +67,7 @@ def detect_kernel_version(fname): def detect_compiler(fname): gcc_version = None clang_version = None - with open(fname, 'r', encoding='utf-8') as f: + with _open(fname, 'rt', encoding='utf-8') as f: gcc_version_pattern = re.compile("CONFIG_GCC_VERSION=[0-9]*") clang_version_pattern = re.compile("CONFIG_CLANG_VERSION=[0-9]*") for line in f.readlines(): @@ -146,7 +155,7 @@ def print_checklist(mode, checklist, with_results): def parse_kconfig_file(parsed_options, fname): - with open(fname, 'r', encoding='utf-8') as f: + with _open(fname, 'rt', encoding='utf-8') as f: opt_is_on = re.compile("CONFIG_[a-zA-Z0-9_]*=[a-zA-Z0-9_\"]*") opt_is_off = re.compile("# CONFIG_[a-zA-Z0-9_]* is not set") @@ -204,7 +213,7 @@ def main(): parser.add_argument('-p', '--print', choices=supported_archs, help='print security hardening preferences for the selected architecture') parser.add_argument('-c', '--config', - help='check the kernel kconfig file against these preferences') + help='check the kernel kconfig file against these preferences (also supports *.gz files)') parser.add_argument('-l', '--cmdline', help='check the kernel cmdline file against these preferences') parser.add_argument('-m', '--mode', choices=report_modes,