This file is indexed.

/usr/lib/update-notifier/apt-cdrom-check is in update-notifier-common 0.154.1.

This file is owned by root:root, with mode 0o755.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
#!/bin/sh
#
# helper to check if we actually have an ubuntu CD
#
# Returncode:
# 0 - no ubuntu CD
# 1 - CD with packages 
# 2 - dist-upgrader CD
# 3 - aptoncd media
# (if the returncodes change, make sure to update src/cdroms.c)
# 

mount_point="$1"
aptoncd_file="$mount_point/aptoncd.info"

# sanity checks
if [ -z "$mount_point" ]; then
    exit 0
fi

if [ -f "$aptoncd_file" ]; then
    exit 3
fi

if [ ! -d "$mount_point/ubuntu" ] && [ ! -f "$mount_point/cdromupgrade" ]; then
    exit 0
fi

# check if there are "Packages" files on the cd (and ignore the 
# debian-installer dir)
find "$mount_point/dists/"  -name "Packages.gz" | grep -q -v debian-installer

# 1 means "no lines were selected" in grep (no Packages file but the 
# debian-installer ones)
if [ $? -eq 1 ]; then
    exit 0
fi

# get some apt-config vars
label_start=0
cdrom_id=""

apt_dir="/"
apt_state_dir="var/lib/apt/"
apt_cdrom_list="cdrom.list"
eval $(apt-config shell apt_dir Dir \
                        apt_state_dir Dir::State \
                        apt_cdrom_list Dir::State::cdroms)



# identifying ... [afkdsjaf] line
line=$(apt-cdrom -d="$1" -m ident|grep "\[.*\]")

# remove the stuff before "Identifying... [dasjflkd]" -> "dasjflkd"
line=${line%]*}
cdrom_id=${line#*\[}

if [ -z "$cdrom_id" ]; then
    # something bad happened here, we return "not yet scanned" as 
    # fallback (because we are cheap)
    return 1
fi

# [cdrom-id] -> cdrom-id  
if grep -s -q "$cdrom_id"  $apt_dir$apt_state_dir$apt_cdrom_list; then
    # already in sources.list, ignore
    exit 0
fi

# so this is a CD we don't know yet and it has packages. good!
THIS_VERSION=$(lsb_release -sr)
VERSION_ON_MEDIA=$(awk {'print $2'} "$mount_point/.disk/info")

# now check if it contains a signed dist-upgrader
for d in "$mount_point"/dists/*/main/dist-upgrader/binary-all/; do
    if [ -d "$d" ]; then
        # ok, we have one, now check the authentication 
        GPG="gpgv --ignore-time-conflict --keyring /etc/apt/trusted.gpg"
        if $GPG "$d/"*.tar.gz.gpg "$d"/*.tar.gz; then
	# verified ok, we have a valid upgrader, if it was not ok, the
	# fallback to the end is ok because we still have packages on it
            if dpkg --compare-versions "$THIS_VERSION" lt "$VERSION_ON_MEDIA"; then
                exit 2
            fi
        fi
    fi
done

# we got an ubuntu CD with packages
if dpkg --compare-versions "$THIS_VERSION" lt "$VERSION_ON_MEDIA"; then
    exit 1
fi