OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	06/06/2024 02:31:58 PM	rwxr-xr-x
📄 aa-exec	22.16 KB	06/29/2023 11:30:47 AM	rwxr-xr-x
📄 aa-remove-unknown	2.86 KB	06/29/2023 11:30:39 AM	rwxr-xr-x
📄 aa-status	7.11 KB	06/29/2023 11:30:39 AM	rwxr-xr-x
📄 add-shell	695 bytes	01/26/2016 06:17:55 PM	rwxr-xr-x
📄 addgroup	36.4 KB	07/02/2015 08:11:22 PM	rwxr-xr-x
📄 adduser	36.4 KB	07/02/2015 08:11:22 PM	rwxr-xr-x
📄 apparmor_status	7.11 KB	06/29/2023 11:30:39 AM	rwxr-xr-x
📄 arp	54.09 KB	06/30/2014 01:19:24 PM	rwxr-xr-x
📄 arpd	46.74 KB	04/16/2019 12:37:11 PM	rwxr-xr-x
📄 chat	26.01 KB	07/23/2020 03:09:52 PM	rwxr-xr-x
📄 chgpasswd	53.33 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 chpasswd	49.43 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 chroot	38.8 KB	03/02/2017 06:07:22 PM	rwxr-xr-x
📄 cpgr	51.48 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 cppw	51.48 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 cron	43.43 KB	05/10/2022 10:15:25 PM	rwxr-xr-x
📄 delgroup	16.13 KB	07/02/2015 08:11:22 PM	rwxr-xr-x
📄 deluser	16.13 KB	07/02/2015 08:11:22 PM	rwxr-xr-x
📄 dnsmasq	379.6 KB	04/18/2023 08:21:30 AM	rwxr-xr-x
📄 dpkg-divert	0 bytes	01/01/1970 12:00:00 AM	---------
📄 dpkg-preconfigure	3.52 KB	05/08/2019 06:33:33 PM	rwxr-xr-x
📄 dpkg-reconfigure	4.23 KB	05/08/2019 06:33:33 PM	rwxr-xr-x
📄 dpkg-statoverride	0 bytes	01/01/1970 12:00:00 AM	---------
📄 e2freefrag	10.24 KB	06/03/2022 08:47:31 PM	rwxr-xr-x
📄 e4defrag	26.53 KB	06/03/2022 08:47:31 PM	rwxr-xr-x
📄 faillock	14.4 KB	02/02/2023 06:52:20 PM	rwxr-xr-x
📄 fanatic	35.21 KB	12/12/2017 04:13:01 PM	rwxr-xr-x
📄 fanctl	41.97 KB	04/23/2019 10:35:14 AM	rwxr-xr-x
📄 fdformat	22.57 KB	06/14/2022 09:28:54 PM	rwxr-xr-x
📄 filefrag	14.31 KB	06/03/2022 08:47:31 PM	rwxr-xr-x
📄 genl	46.69 KB	04/16/2019 12:37:11 PM	rwxr-xr-x
📄 groupadd	57.42 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 groupdel	65.83 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 groupmod	67.7 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 grpck	53.31 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 grpconv	49.19 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 grpunconv	49.2 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 iconvconfig	26.66 KB	11/28/2023 02:47:37 PM	rwxr-xr-x
📄 invoke-rc.d	19.41 KB	11/29/2016 05:28:22 PM	rwxr-xr-x
📄 ip6tables-apply	6.85 KB	02/19/2016 03:20:21 PM	rwxr-xr-x
📄 iptables-apply	6.85 KB	02/19/2016 03:20:21 PM	rwxr-xr-x
📄 ldattach	26.63 KB	06/14/2022 09:28:54 PM	rwxr-xr-x
📄 logrotate	63.11 KB	08/10/2017 03:16:07 PM	rwxr-xr-x
📄 mkinitramfs	10.24 KB	10/07/2019 10:53:35 AM	rwxr-xr-x
📄 mklost+found	10.25 KB	06/03/2022 08:47:31 PM	rwxr-xr-x
📄 netplan	17.94 KB	09/27/2019 04:27:57 PM	rwxr-xr-x
📄 newusers	73.84 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 nfnl_osf	14.37 KB	02/19/2016 03:21:11 PM	rwxr-xr-x
📄 nologin	5.95 KB	02/07/2024 10:59:50 AM	rwxr-xr-x
📄 pam-auth-update	19.09 KB	02/02/2023 06:50:45 PM	rwxr-xr-x
📄 pam_getenv	2.82 KB	02/02/2023 06:50:45 PM	rwxr-xr-x
📄 pam_timestamp_check	10.38 KB	02/02/2023 06:52:20 PM	rwxr-xr-x
📄 pppd	385.73 KB	07/23/2020 03:09:52 PM	rwxr-xr--
📄 pppdump	18.1 KB	07/23/2020 03:09:52 PM	rwxr-xr-x
📄 pppoe-discovery	18 KB	07/23/2020 03:09:52 PM	rwxr-xr-x
📄 pppstats	13.99 KB	07/23/2020 03:09:51 PM	rwxr-xr-x
📄 pwck	45.36 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 pwconv	41.27 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 pwunconv	36.43 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 readprofile	14.52 KB	06/14/2022 09:28:54 PM	rwxr-xr-x
📄 remove-shell	749 bytes	01/26/2016 06:17:55 PM	rwxr-xr-x
📄 rfkill	10.29 KB	06/20/2018 11:54:19 AM	rwxr-xr-x
📄 rmt	54.95 KB	12/06/2023 12:12:24 PM	rwxr-xr-x
📄 rmt-tar	54.95 KB	12/06/2023 12:12:24 PM	rwxr-xr-x
📄 rsyslogd	585.28 KB	05/23/2022 05:31:02 PM	rwxr-xr-x
📄 rtcwake	38.8 KB	06/14/2022 09:28:54 PM	rwxr-xr-x
📄 service	9.82 KB	09/12/2016 08:57:57 AM	rwxr-xr-x
📄 setvesablank	10.27 KB	09/22/2016 05:33:23 PM	rwxr-xr-x
📄 sshd	772.48 KB	01/09/2024 03:07:56 PM	rwxr-xr-x
📄 tarcat	936 bytes	12/06/2023 12:12:23 PM	rwxr-xr-x
📄 tunelp	22.53 KB	06/14/2022 09:28:54 PM	rwxr-xr-x
📄 tzconfig	106 bytes	01/03/2024 12:40:26 PM	rwxr-xr-x
📄 update-alternatives	46.61 KB	05/27/2022 10:37:03 AM	rwxr-xr-x
📄 update-ca-certificates	5.25 KB	05/24/2023 12:18:18 PM	rwxr-xr-x
📄 update-initramfs	8.38 KB	10/07/2019 10:53:35 AM	rwxr-xr-x
📄 update-mime	8.84 KB	10/30/2015 03:39:30 PM	rwxr-xr-x
📄 update-passwd	30.41 KB	01/02/2016 11:13:25 PM	rwxr-xr-x
📄 update-rc.d	14.1 KB	02/29/2016 12:24:38 PM	rwxr-xr-x
📄 useradd	118.72 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 userdel	81.92 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 usermod	118.5 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 vcstime	6.26 KB	09/22/2016 05:33:23 PM	rwxr-xr-x
📄 vigr	55.7 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 vipw	55.7 KB	02/07/2024 10:59:49 AM	rwxr-xr-x
📄 visudo	187.89 KB	05/24/2023 01:48:57 PM	rwxr-xr-x
📄 zic	50.54 KB	11/28/2023 02:47:37 PM	rwxr-xr-x

Editing: mkinitramfs

#!/bin/sh

umask 0022
export PATH='/usr/bin:/sbin:/bin'

# Defaults
keep="n"
CONFDIR="/etc/initramfs-tools"
verbose="n"
test -e /bin/busybox && BUSYBOXDIR=/bin
test -e /usr/lib/initramfs-tools/bin/busybox && BUSYBOXDIR=/usr/lib/initramfs-tools/bin
export BUSYBOXDIR

OPTIONS=`getopt -o c:d:ko:r:v -n "$0" -- "$@"`

# Check for non-GNU getopt
if [ $? != 0 ] ; then echo "W: non-GNU getopt" >&2 ; exit 1 ; fi

eval set -- "$OPTIONS"

while true; do
	case "$1" in
	-c)
		compress="$2"
		shift 2
		;;
	-d)
		CONFDIR="$2"
		shift 2
		if [ ! -d "${CONFDIR}" ]; then
			echo "${0}: ${CONFDIR}: Not a directory" >&2
			exit 1
		fi
		;;
	-o)
		outfile="$2"
		shift 2
		;;
	-k)
		keep="y"
		shift
		;;
	-r)
		ROOT="$2"
		shift 2
		;;
	-v)
		verbose="y"
		shift
		;;
	--)
		shift
		break
		;;
	*)
		echo "Internal error!" >&2
		exit 1
		;;
	esac
done

# For dependency ordered mkinitramfs hook scripts.
. /usr/share/initramfs-tools/scripts/functions
. /usr/share/initramfs-tools/hook-functions

. "${CONFDIR}/initramfs.conf"
EXTRA_CONF=''
for i in /usr/share/initramfs-tools/conf.d/* ${CONFDIR}/conf.d/*; do
	[ -e $i ] && EXTRA_CONF="${EXTRA_CONF} $(basename $i \
		| grep '^[[:alnum:]][[:alnum:]\._-]*$' | grep -v '\.dpkg-.*$')";
done
# FIXME: deprecated those settings on mkinitramfs run
# 	 these conf dirs are for boot scripts and land on initramfs
for i in ${EXTRA_CONF}; do
	if [ -d  ${CONFDIR}/conf.d/${i} ]; then
		echo "Warning: ${CONFDIR}/conf.d/${i} is a directory instead of file, ignoring."
	elif [ -e  ${CONFDIR}/conf.d/${i} ]; then
		. ${CONFDIR}/conf.d/${i}
	elif [ -e  /usr/share/initramfs-tools/conf.d/${i} ]; then
		. /usr/share/initramfs-tools/conf.d/${i}
	fi
done

# source package confs
for i in /usr/share/initramfs-tools/conf-hooks.d/*; do
	if [ -d "${i}" ]; then
		echo "Warning: ${i} is a directory instead of file, ignoring."
	elif [ -e "${i}" ]; then
		. "${i}"
	fi
done

if [ -n "${UMASK:-}" ]; then
	umask "${UMASK}"
fi

if [ -z "${outfile}" ]; then
	usage
fi

touch "$outfile"
outfile="$(readlink -f "$outfile")"

# And by "version" we really mean path to kernel modules
# This is braindead, and exists to preserve the interface with mkinitrd
if [ ${#} -ne 1 ]; then
	version="$(uname -r)"
else
	version="${1}"
fi

case "${version}" in
/lib/modules/*/[!/]*)
	;;
/lib/modules/[!/]*)
	version="${version#/lib/modules/}"
	version="${version%%/*}"
	;;
esac

case "${version}" in
*/*)
	echo "$PROG: ${version} is not a valid kernel version" >&2
	exit 1
	;;
esac

# Check userspace and kernel support for compressed initramfs images
if [ -z "${compress:-}" ]; then
	compress=${COMPRESS}
else
	COMPRESS=${compress}
fi

if ! command -v "${compress}" >/dev/null 2>&1; then
	compress=gzip
	[ "${verbose}" = y ] && \
		echo "No ${COMPRESS} in ${PATH}, using gzip"
	COMPRESS=gzip
fi

if dpkg --compare-versions "${version}" lt "2.6.38" 2>/dev/null; then
	compress=gzip
	[ "${verbose}" = y ] && \
		echo "linux-2.6 likely misses ${COMPRESS} support, using gzip"
fi

[ "${compress}" = lzop ] && compress="lzop -9"
[ "${compress}" = xz ] && compress="xz --check=crc32"

if [ -d "${outfile}" ]; then
	echo "${outfile} is a directory" >&2
	exit 1
fi

MODULESDIR="/lib/modules/${version}"

if [ ! -e "${MODULESDIR}" ]; then
	echo "WARNING: missing ${MODULESDIR}"
	echo "Ensure all necessary drivers are built into the linux image!"
fi
if [ ! -e "${MODULESDIR}/modules.dep" ]; then
	depmod ${version}
fi

# Prepare to clean up temporary files on exit
DESTDIR=
__TMPCPIOGZ=
__TMPEARLYCPIO=
clean_on_exit() {
	if [ "${keep}" = "y" ]; then
		echo "Working files in ${DESTDIR:-<not yet created>}, early initramfs in ${__TMPEARLYCPIO:-<not yet created>} and overlay in ${__TMPCPIOGZ:-<not yet created>}"
	else
		for path in "${DESTDIR}" "${__TMPCPIOGZ}" "${__TMPEARLYCPIO}"; do
			test -z "${path}" || rm -rf "${path}"
		done
	fi
}
trap clean_on_exit EXIT
trap "exit 1" INT TERM	# makes the EXIT trap effective even when killed

# Create temporary directory and files for initramfs contents
[ -n "${TMPDIR}" ] && [ ! -w "${TMPDIR}" ] && unset TMPDIR
DESTDIR="$(mktemp -d ${TMPDIR:-/var/tmp}/mkinitramfs_XXXXXX)" || exit 1
chmod 755 "${DESTDIR}"
__TMPCPIOGZ="$(mktemp ${TMPDIR:-/var/tmp}/mkinitramfs-OL_XXXXXX)" || exit 1
__TMPEARLYCPIO="$(mktemp ${TMPDIR:-/var/tmp}/mkinitramfs-FW_XXXXXX)" || exit 1

DPKG_ARCH=`dpkg --print-architecture`

# Export environment for hook scripts.
#
export MODULESDIR
export version
export CONFDIR
export DESTDIR
export DPKG_ARCH
export verbose
export MODULES
export BUSYBOX
export COMPCACHE_SIZE

# Private, used by 'catenate_cpiogz'.
export __TMPCPIOGZ

# Private, used by 'prepend_earlyinitramfs'.
export __TMPEARLYCPIO

for d in bin conf/conf.d etc lib/modules run sbin scripts ${MODULESDIR}; do
	mkdir -p "${DESTDIR}/${d}"
done

# Copy in modules.builtin and modules.order (not generated by depmod)
for x in modules.builtin modules.order; do
	if [ -f "${MODULESDIR}/${x}" ]; then
		cp -p "${MODULESDIR}/${x}" "${DESTDIR}${MODULESDIR}/${x}"
	fi
done

# MODULES=list case.  Always honour.
for x in "${CONFDIR}/modules" /usr/share/initramfs-tools/modules.d/*; do
	if [ -f "${x}" ]; then
		add_modules_from_file "${x}"
	fi
done

# MODULES=most is default
case "${MODULES}" in
dep)
	dep_add_modules
	;;
most)
	auto_add_modules
	;;
netboot)
	auto_add_modules base
	auto_add_modules net
	;;
list)
	# nothing to add
	;;
*)
	echo "W: mkinitramfs: unsupported MODULES setting: ${MODULES}."
	echo "W: mkinitramfs: Falling back to MODULES=most."
	auto_add_modules
	;;
esac

# Resolve hidden dependencies
hidden_dep_add_modules

# First file executed by linux
cp -p /usr/share/initramfs-tools/init ${DESTDIR}/init

# add existant boot scripts
for b in $(cd /usr/share/initramfs-tools/scripts/ && find . \
	-regextype posix-extended -regex '.*/[[:alnum:]\._-]+$' -type f); do
	option=$(sed '/^OPTION=/!d;$d;s/^OPTION=//;s/[[:space:]]*$//' "/usr/share/initramfs-tools/scripts/${b}")
	[ -z "${option}" ] || eval test -n \"\${$option}\" -a \"\${$option}\" != \"n\" || continue

[ -d "${DESTDIR}/scripts/$(dirname "${b}")" ] \
		|| mkdir -p "${DESTDIR}/scripts/$(dirname "${b}")"
	cp -p "/usr/share/initramfs-tools/scripts/${b}" \
		"${DESTDIR}/scripts/$(dirname "${b}")/"
done
for b in $(cd "${CONFDIR}/scripts" && find . \
	-regextype posix-extended -regex '.*/[[:alnum:]\._-]+$' -type f); do
	option=$(sed '/^OPTION=/!d;$d;s/^OPTION=//;s/[[:space:]]*$//' "${CONFDIR}/scripts/${b}")
	[ -z "${option}" ] || eval test -n \"\${$option}\" -a \"\${$option}\" != \"n\" || continue

[ -d "${DESTDIR}/scripts/$(dirname "${b}")" ] \
		|| mkdir -p "${DESTDIR}/scripts/$(dirname "${b}")"
	cp -p "${CONFDIR}/scripts/${b}" "${DESTDIR}/scripts/$(dirname "${b}")/"
done

echo "DPKG_ARCH=${DPKG_ARCH}" > ${DESTDIR}/conf/arch.conf
cp -p "${CONFDIR}/initramfs.conf" ${DESTDIR}/conf
for i in ${EXTRA_CONF}; do
	if [ -e "${CONFDIR}/conf.d/${i}" ]; then
		copy_file config "${CONFDIR}/conf.d/${i}" /conf/conf.d
	elif [ -e "/usr/share/initramfs-tools/conf.d/${i}" ]; then
		copy_file config "/usr/share/initramfs-tools/conf.d/${i}" \
			/conf/conf.d
	fi
done

# ROOT hardcoding
if [ -n "${ROOT:-}" ]; then
	echo "ROOT=${ROOT}" > ${DESTDIR}/conf/conf.d/root
fi

if ! command -v ldd >/dev/null 2>&1 ; then
	echo "WARNING: no ldd around - install libc-bin" >&2
	exit 1
fi

# fstab and mtab
touch "${DESTDIR}/etc/fstab"
ln -s /proc/mounts "${DESTDIR}/etc/mtab"

# install wait-for-root binary.
copy_exec /usr/lib/initramfs-tools/bin/wait-for-root /sbin

# module-init-tools
copy_exec /sbin/modprobe /sbin
copy_exec /sbin/rmmod /sbin
mkdir -p "${DESTDIR}/etc/modprobe.d"
cp -a /etc/modprobe.d/* "${DESTDIR}/etc/modprobe.d/"

# workaround: libgcc always needed on old-abi arm
if [ "$DPKG_ARCH" = arm ] || [ "$DPKG_ARCH" = armeb ]; then
	cp -a /lib/libgcc_s.so.1 "${DESTDIR}/lib/"
fi

run_scripts_optional /usr/share/initramfs-tools/hooks
run_scripts_optional "${CONFDIR}"/hooks

# cache boot run order
for b in $(cd "${DESTDIR}/scripts" && find . -mindepth 1 -type d); do
	cache_run_scripts "${DESTDIR}" "/scripts/${b#./}"
done

# generate module deps
depmod -a -b "${DESTDIR}" ${version}
rm -f "${DESTDIR}/lib/modules/${version}"/modules.*map

# make sure that library search path is up to date
cp -ar /etc/ld.so.conf* "$DESTDIR"/etc/
if ! ldconfig -r "$DESTDIR" ; then
	[ $(id -u) != "0" ] \
	&& echo "ldconfig might need uid=0 (root) for chroot()" >&2
fi

# Apply DSDT to initramfs
if [ -e "${CONFDIR}/DSDT.aml" ]; then
	copy_file DSDT "${CONFDIR}/DSDT.aml"
fi

# Make sure there is a final sh in initramfs
if [ ! -e "${DESTDIR}/bin/sh" ]; then
	copy_exec /bin/sh "${DESTDIR}/bin/"
fi

# Remove any looping or broken symbolic links, since they break cpio.
[ "${verbose}" = y ] && xargs_verbose="-t"
(cd "${DESTDIR}" && find . -type l -printf '%p %Y\n' | sed -n 's/ [LN]$//p' \
	| xargs ${xargs_verbose:-} -rL1 rm -f)

# dirty hack for armhf's double-linker situation; if we have one of
# the two known eglibc linkers, nuke both and re-create sanity
if [ "$DPKG_ARCH" = armhf ]; then
	if [ -e "${DESTDIR}/lib/arm-linux-gnueabihf/ld-linux.so.3" ] || \
	   [ -e "${DESTDIR}/lib/ld-linux-armhf.so.3" ]; then
		rm -f "${DESTDIR}/lib/arm-linux-gnueabihf/ld-linux.so.3"
		rm -f "${DESTDIR}/lib/ld-linux-armhf.so.3"
		cp -aL /lib/ld-linux-armhf.so.3 "${DESTDIR}/lib/"
		ln -sf /lib/ld-linux-armhf.so.3 "${DESTDIR}/lib/arm-linux-gnueabihf/ld-linux.so.3"
	fi
fi

[ "${verbose}" = y ] && echo "Building cpio ${outfile} initramfs"

if [ -s "${__TMPEARLYCPIO}" ]; then
	cat "${__TMPEARLYCPIO}" >"${outfile}" || exit 1
else
	# truncate
	> "${outfile}"
fi

(
# preserve permissions if root builds the image, see #633582
[ "$(id -ru)" != 0 ] && cpio_owner_root="-R 0:0"

# work around lack of "set -o pipefail" for the following pipe:
# cd "${DESTDIR}" && find . | cpio --quiet $cpio_owner_root -o -H newc | gzip >>"${outfile}" || exit 1
exec 3>&1
eval `
	# http://cfaj.freeshell.org/shell/cus-faq-2.html
	exec 4>&1 >&3 3>&-
	cd  "${DESTDIR}"
	{
		find . 4>&-; echo "ec1=$?;" >&4
	} | {
		cpio --quiet $cpio_owner_root -o -H newc 4>&-; echo "ec2=$?;" >&4
	} | ${compress} >>"${outfile}"
	echo "ec3=$?;" >&4
`
if [ "$ec1" -ne 0 ]; then
	echo "E: mkinitramfs failure find $ec1 cpio $ec2 $compress $ec3"
	exit "$ec1"
fi
if [ "$ec2" -ne 0 ]; then
	echo "E: mkinitramfs failure cpio $ec2 $compress $ec3"
	exit "$ec2"
fi
if [ "$ec3" -ne 0 ]; then
	echo "E: mkinitramfs failure $compress $ec3"
	exit "$ec3"
fi
) || exit 1

if [ -s "${__TMPCPIOGZ}" ]; then
	cat "${__TMPCPIOGZ}" >>"${outfile}" || exit 1
fi

exit 0