OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/09/2024 07:13:26 AM	rwxr-xr-x
📄 apache2.py	1.77 KB	02/23/2021 04:35:16 PM	rw-r--r--
📄 cloud-init.py	176 bytes	04/21/2023 07:44:30 PM	rw-r--r--
📄 cryptsetup.py	1.06 KB	08/03/2020 09:28:48 PM	rw-r--r--
📄 isc-dhcp-client.py	1.75 KB	02/26/2021 04:58:50 PM	rw-r--r--
📄 openssh-client.py	1.14 KB	03/30/2022 01:17:14 PM	rw-r--r--
📄 openssh-server.py	1011 bytes	03/30/2022 01:17:14 PM	rw-r--r--
📄 postfix.py	2.68 KB	08/12/2021 12:43:19 PM	rw-r--r--
📄 slapd.py	1.89 KB	05/12/2022 01:52:38 PM	rw-r--r--
📄 source_apparmor.py	2.8 KB	03/22/2018 08:08:03 PM	rw-r--r--
📄 source_apport.py	569 bytes	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_byobu.py	417 bytes	04/07/2016 10:05:52 PM	rw-r--r--
📄 source_console-setup.py	374 bytes	04/23/2019 12:04:14 PM	rw-r--r--
📄 source_debian-installer.py	1.86 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_fontconfig.py	162 bytes	10/28/2017 05:14:27 PM	rw-r--r--
📄 source_grub2.py	3.69 KB	02/01/2023 05:49:01 PM	rw-r--r--
📄 source_linux-firmware.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-meta-oem-osp1.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-meta-oem.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-meta.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-nexus7.py	948 bytes	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-oem-osp1.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-oem.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-signed-oem-osp1.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-signed-oem.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux-signed.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_linux.py	6.11 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_mdadm.py	2.2 KB	01/14/2020 07:10:59 PM	rw-r--r--
📄 source_mysql-5.7.py	2.46 KB	08/19/2021 04:34:52 PM	rw-r--r--
📄 source_openjdk-lts.py	1.7 KB	05/09/2023 09:01:08 PM	rw-r--r--
📄 source_plymouth.py	1.26 KB	04/04/2019 03:41:18 PM	rw-r--r--
📄 source_shadow.py	720 bytes	11/29/2022 12:25:19 PM	rw-r--r--
📄 source_shim-signed.py	1.95 KB	01/31/2023 11:57:37 AM	rw-r--r--
📄 source_shim.py	1.95 KB	01/31/2023 11:57:37 AM	rw-r--r--
📄 source_sudo.py	1.13 KB	04/04/2023 12:44:58 PM	rw-r--r--
📄 source_ubiquity.py	7.55 KB	11/11/2019 09:57:56 PM	rw-r--r--
📄 source_ubuntu-advantage-tools.py	1.22 KB	08/08/2024 02:00:59 PM	rw-r--r--
📄 source_ubuntu-release-upgrader.py	2.19 KB	06/06/2019 06:46:11 PM	rw-r--r--
📄 source_unattended-upgrades.py	705 bytes	02/17/2020 11:37:03 AM	rw-r--r--
📄 source_update-manager.py	2.24 KB	09/10/2024 11:52:38 AM	rw-r--r--
📄 systemd.py	872 bytes	03/02/2023 12:58:02 PM	rw-r--r--
📄 udev.py	455 bytes	03/02/2023 12:58:02 PM	rw-r--r--
📄 ureadahead.py	475 bytes	04/09/2019 09:01:18 PM	rw-r--r--

Name

Size

Modified

Perms

📁 ..

05/09/2024 07:13:26 AM

rwxr-xr-x

📄 apache2.py

1.77 KB

02/23/2021 04:35:16 PM

rw-r--r--

📄 cloud-init.py

176 bytes

04/21/2023 07:44:30 PM

rw-r--r--

📄 cryptsetup.py

1.06 KB

08/03/2020 09:28:48 PM

rw-r--r--

📄 isc-dhcp-client.py

1.75 KB

02/26/2021 04:58:50 PM

rw-r--r--

📄 openssh-client.py

1.14 KB

03/30/2022 01:17:14 PM

rw-r--r--

📄 openssh-server.py

1011 bytes

03/30/2022 01:17:14 PM

rw-r--r--

📄 postfix.py

2.68 KB

08/12/2021 12:43:19 PM

rw-r--r--

📄 slapd.py

1.89 KB

05/12/2022 01:52:38 PM

rw-r--r--

📄 source_apparmor.py

2.8 KB

03/22/2018 08:08:03 PM

rw-r--r--

📄 source_apport.py

569 bytes

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_byobu.py

417 bytes

04/07/2016 10:05:52 PM

rw-r--r--

📄 source_console-setup.py

374 bytes

04/23/2019 12:04:14 PM

rw-r--r--

📄 source_debian-installer.py

1.86 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_fontconfig.py

162 bytes

10/28/2017 05:14:27 PM

rw-r--r--

📄 source_grub2.py

3.69 KB

02/01/2023 05:49:01 PM

rw-r--r--

📄 source_linux-firmware.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-meta-oem-osp1.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-meta-oem.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-meta.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-nexus7.py

948 bytes

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-oem-osp1.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-oem.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-signed-oem-osp1.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-signed-oem.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux-signed.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_linux.py

6.11 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_mdadm.py

2.2 KB

01/14/2020 07:10:59 PM

rw-r--r--

📄 source_mysql-5.7.py

2.46 KB

08/19/2021 04:34:52 PM

rw-r--r--

📄 source_openjdk-lts.py

1.7 KB

05/09/2023 09:01:08 PM

rw-r--r--

📄 source_plymouth.py

1.26 KB

04/04/2019 03:41:18 PM

rw-r--r--

📄 source_shadow.py

720 bytes

11/29/2022 12:25:19 PM

rw-r--r--

📄 source_shim-signed.py

1.95 KB

01/31/2023 11:57:37 AM

rw-r--r--

📄 source_shim.py

1.95 KB

01/31/2023 11:57:37 AM

rw-r--r--

📄 source_sudo.py

1.13 KB

04/04/2023 12:44:58 PM

rw-r--r--

📄 source_ubiquity.py

7.55 KB

11/11/2019 09:57:56 PM

rw-r--r--

📄 source_ubuntu-advantage-tools.py

1.22 KB

08/08/2024 02:00:59 PM

rw-r--r--

📄 source_ubuntu-release-upgrader.py

2.19 KB

06/06/2019 06:46:11 PM

rw-r--r--

📄 source_unattended-upgrades.py

705 bytes

02/17/2020 11:37:03 AM

rw-r--r--

📄 source_update-manager.py

2.24 KB

09/10/2024 11:52:38 AM

rw-r--r--

📄 systemd.py

872 bytes

03/02/2023 12:58:02 PM

rw-r--r--

📄 udev.py

455 bytes

03/02/2023 12:58:02 PM

rw-r--r--

📄 ureadahead.py

475 bytes

04/09/2019 09:01:18 PM

rw-r--r--

Editing: source_shim-signed.py

'''apport package hook for shim and shim-signed

import errno
import os
import re

from apport.hookutils import (
    command_available,
    command_output,
    recent_syslog,
    attach_file,
    attach_root_command_outputs)

efiarch = {'amd64': 'x64',
           'i386': 'ia32',
           'arm64': 'aa64'
          }
grubarch = {'amd64': 'x86_64',
            'i386': 'i386',
            'arm64': 'arm64'
           }

def add_info(report, ui):
    efiboot = '/boot/efi/EFI/ubuntu'
    if command_available('efibootmgr'):
        report['EFIBootMgr'] = command_output(['efibootmgr', '-v'])
    else:
        report['EFIBootMgr'] = 'efibootmgr not available'
    commands = {}
    try:
        directory = os.stat(efiboot)
    except OSError as e:
        if e.errno == errno.ENOENT:
            report['Missing'] = '/boot/efi/EFI/ubuntu directory is missing'
            return
        if e.errno == errno.EACCES:
            directory= True
    if directory:
        arch = report['Architecture']
        commands['BootEFIContents'] = 'ls %s' % efiboot
        commands['ShimDiff'] = 'diff %s/shim%s.efi /usr/lib/shim/shim%s.efi.signed' % (efiboot, efiarch[arch], efiarch[arch])
        commands['GrubDiff'] = 'diff %s/grub%s.efi /usr/lib/grub/%s-efi-signed/grub%s.efi.signed' %(efiboot, efiarch[arch], grubarch[arch], efiarch[arch])

efivars_dir = '/sys/firmware/efi/efivars'
    sb_var = os.path.join(efivars_dir,
                          'SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c')
    mok_var = os.path.join(efivars_dir,
                           'MokSBStateRT-605dab50-e046-4300-abb6-3dd810dd8b23')

attach_file(report, '/proc/sys/kernel/moksbstate_disabled')
    commands['SecureBoot'] = 'od -An -t u1 %s' % sb_var
    commands['MokSBStateRT'] = 'od -An -t u1 %s' % mok_var
    attach_root_command_outputs(report, commands)
    report['EFITables'] = recent_syslog(re.compile(r'(efi|esrt):|Secure boot'))