OXIESEC PANEL

Name	Size	Modified	Perms	Actions
📁 ..	-	03/09/2026 06:59:03 PM	rwxr-xr-x
📄 brp-fix-pyc-reproducibility	560 bytes	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 brp-ldconfig	417 bytes	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 brp-mangle-shebangs	4.41 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 brp-python-bytecompile	5.64 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 brp-strip-lto	575 bytes	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 compileall2.py	21.59 KB	10/01/2024 12:46:16 PM	rw-r--r--	Delete
📄 config.guess	42.91 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 config.sub	35.46 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 dist.sh	1.94 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 find-provides	1.19 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 find-requires	1013 bytes	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 gpgverify	3.54 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 kmodtool	9.03 KB	09/17/2025 07:11:47 AM	rwxr-xr-x	Delete
📄 macros	15.85 KB	10/30/2025 10:48:44 AM	rw-r--r--	Delete
📄 redhat-annobin-cc1	89 bytes	10/30/2025 10:48:44 AM	r--r--r--	Delete
📄 redhat-annobin-plugin-select.sh	6.05 KB	10/30/2025 10:48:44 AM	rwxr-xr-x	Delete
📄 redhat-annobin-select-annobin-built-plugin	89 bytes	10/30/2025 10:48:44 AM	r--r--r--	Delete
📄 redhat-annobin-select-gcc-built-plugin	93 bytes	10/30/2025 10:48:44 AM	r--r--r--	Delete
📄 redhat-hardened-cc1	153 bytes	10/30/2025 10:48:44 AM	r--r--r--	Delete
📄 redhat-hardened-clang.cfg	6 bytes	10/30/2025 10:48:44 AM	r--r--r--	Delete
📄 redhat-hardened-ld	47 bytes	10/30/2025 10:48:44 AM	r--r--r--	Delete
📄 rpmrc	5.52 KB	10/30/2025 10:48:44 AM	rw-r--r--	Delete
📄 rpmsort	2.11 KB	09/17/2025 07:11:47 AM	rwxr-xr-x	Delete

Editing: kmodtool

#!/usr/bin/bash

# kmodtool - Helper script for building kernel module RPMs
#            An original version appeared in Fedora. This version is
#            generally called only by the %kernel_module_package RPM macro
#            during the process of building Driver Update Packages (which
#            are also known as "kmods" in the Fedora community).
#
# Copyright (c) 2003-2010 Ville Skyttä <ville.skytta@iki.fi>,
#                         Thorsten Leemhuis <fedora@leemhuis.info>
#                         Jon Masters <jcm@redhat.com>
#
# Permission is hereby granted, free of charge, to any person obtaining
# a copy of this software and associated documentation files (the
# "Software"), to deal in the Software without restriction, including
# without limitation the rights to use, copy, modify, merge, publish,
# distribute, sublicense, and/or sell copies of the Software, and to
# permit persons to whom the Software is furnished to do so, subject to
# the following conditions:
#
# The above copyright notice and this permission notice shall be
# included in all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

# Changelog:
#
#            2010/07/28 - Add fixes for filelists in line with LF standard
#			- Remove now defunct "framepointer" kernel variant
#			- Change version to "rhel6-rh2" as a consequence.
#
#            2010/01/10 - Simplified for RHEL6. We are working on upstream
#                         moving to a newer format and in any case do not
#                         need to retain support for really old systems.

shopt -s extglob

myprog="kmodtool"
myver="0.10.10_rhel9"
knownvariants=@(debug|kdump|zfcpdump)
kmod_name=
kver=
verrel=
variant=

get_verrel ()
{
  verrel=${1:-$(uname -r)}
  verrel=${verrel/%[.+]$knownvariants/}
}

print_verrel ()
{
  get_verrel "$@"
  echo "${verrel}"
}

get_variant ()
{
  get_verrel "$@"
  variant=${1:-$(uname -r)}
  variant=${variant/#$verrel?(.+)/}
  variant=${variant:-'""'}
}

print_variant ()
{
  get_variant $@
  echo "${variant}"
}

# Detect flavor separator character. We have to do that due to
# a systemd-tailored patch for kernel spec[1][2] introduced in Fedora and then
# imported in RHEL 8 that broke all OOT kmod infrastructure for the flavored
# kernels.
#
# [1] https://lists.fedoraproject.org/pipermail/kernel/2013-June/004262.html
# [2] https://src.fedoraproject.org/rpms/kernel/c/faf25207dc86666a611c45ae3ffaf385c170bd2a
#
# $1 - kver
# $2 - variant
get_variant_char ()
{
  variant="$2"
  [ "$variant" != "default" ] || variant=""

get_verrel "$1"

variant_char=""
  [ -n "$variant" ] || return 0

# We expect that the flavored kernel is already installed in the buildroot
  variant_char="+"
  [ -e "/usr/src/kernels/${verrel}+${variant}" ] && return 0

variant_char="."
}

print_variant_char ()
{
  get_variant_char "$@"
  echo "${variant_char}"
}

print_kernel_source ()
{
  get_variant_char "$@"
  echo "/usr/src/kernels/${verrel}${variant_char}${variant}"
}

get_filelist() {
	local IFS=$'\n'
	filelist=($(cat))

if [ ${#filelist[@]} -gt 0 ];
	then
		for ((n = 0; n < ${#filelist[@]}; n++));
		do
			line="${filelist[n]}"
			line=$(echo "$line" \
				| sed -e "s/%verrel/$verrel/g" \
				| sed -e "s/%variant/$variant/g" \
				| sed -e "s/%dashvariant/$dashvariant/g" \
				| sed -e "s/%dotvariant/$dotvariant/g" \
				| sed -e "s/\+%1/$dotvariant/g" \
				| sed -e "s/\.%1/$dotvariant/g" \
				| sed -e "s/\-%1/$dotvariant/g" \
				| sed -e "s/%2/$verrel/g")
			echo "$line"
		done
	else
		echo "%defattr(644,root,root,755)"
		echo "/lib/modules/${verrel}${dotvariant}"
	fi
}

get_rpmtemplate ()
{
    local variant="${1}"

get_variant_char "${verrel}" "${variant}"

local dashvariant="${variant:+-${variant}}"
    local dotvariant="${variant:+${variant_char}${variant}}"

echo "%package       -n kmod-${kmod_name}${dashvariant}"

if [ -z "$kmod_provides_summary" ]; then
        echo "Summary:          ${kmod_name} kernel module(s)"
    fi

if [ -z "$kmod_provides_group" ]; then
        echo "Group:            System Environment/Kernel"
    fi

if [ ! -z "$kmod_version" ]; then
        echo "Version: %{kmod_version}"
    fi

if [ ! -z "$kmod_release" ]; then
        echo "Release: %{kmod_release}"
    fi

cat <<EOF
Provides:         kernel-modules >= ${verrel}${dotvariant}
Provides:         kernel${dashvariant}-modules >= ${verrel}
Provides:         ${kmod_name}-kmod = %{?epoch:%{epoch}:}%{version}-%{release}
Requires(post):   /usr/sbin/depmod
Requires(postun): /usr/sbin/depmod
Requires(post):   /usr/sbin/weak-modules
Requires(postun): /usr/sbin/weak-modules
EOF

if [ "yes" != "$nobuildreqs" ]
    then
        cat <<EOF
BuildRequires:    kernel${dashvariant}-devel
BuildRequires:    kernel-abi-stablelists
BuildRequires:    redhat-rpm-config kernel-rpm-macros
BuildRequires:    elfutils-libelf-devel kmod
EOF
    fi

if [ "" != "$override_preamble" ]
    then
        cat "$override_preamble"
    fi

cat <<EOF
%description   -n kmod-${kmod_name}${dashvariant}
This package provides the ${kmod_name} kernel modules built for
the Linux kernel ${verrel}${dotvariant} for the %{_target_cpu}
family of processors.
EOF

##############################################################################
## The following are not part of this script directly, they are scripts     ##
## that will be executed by RPM during various stages of package processing ##
##############################################################################

cat <<EOF
%post          -n kmod-${kmod_name}${dashvariant}
if [ -e "/boot/System.map-${verrel}${dotvariant}" ]; then
    /usr/sbin/depmod -aeF "/boot/System.map-${verrel}${dotvariant}" "${verrel}${dotvariant}" > /dev/null || :
fi

modules=( \$(find /lib/modules/${verrel}${dotvariant}/extra/${kmod_name} | grep -E '\.ko(\.gz|\.bz2|\.xz|\.zst)?$') )
if [ -x "/usr/sbin/weak-modules" ]; then
    printf '%s\n' "\${modules[@]}" \
    | /usr/sbin/weak-modules --add-modules
fi
EOF

cat <<EOF
%preun         -n kmod-${kmod_name}${dashvariant}
rpm -ql kmod-${kmod_name}${dashvariant}-%{kmod_version}-%{kmod_release}.$(arch) | grep -E '\.ko(\.gz|\.bz2|\.xz|\.zst)?$' > /var/run/rpm-kmod-${kmod_name}${dashvariant}-modules
EOF

cat <<EOF
%postun        -n kmod-${kmod_name}${dashvariant}
if [ -e "/boot/System.map-${verrel}${dotvariant}" ]; then
    /usr/sbin/depmod -aeF "/boot/System.map-${verrel}${dotvariant}" "${verrel}${dotvariant}" > /dev/null || :
fi

modules=( \$(cat /var/run/rpm-kmod-${kmod_name}${dashvariant}-modules) )
rm /var/run/rpm-kmod-${kmod_name}${dashvariant}-modules
if [ -x "/usr/sbin/weak-modules" ]; then
    printf '%s\n' "\${modules[@]}" \
    | /usr/sbin/weak-modules --remove-modules
fi
EOF

echo "%files         -n kmod-${kmod_name}${dashvariant}"

if [ "" == "$override_filelist" ];
then
    echo "%defattr(644,root,root,755)"
    echo "/lib/modules/${verrel}${dotvariant}"
else
    cat "$override_filelist" | get_filelist
fi
}

print_rpmtemplate ()
{
  kmod_name="${1}"
  shift
  kver="${1}"
  get_verrel "${1}"
  shift
  if [ -z "${kmod_name}" ] ; then
    echo "Please provide the kmodule-name as first parameter." >&2
    exit 2
  elif [ -z "${kver}" ] ; then
    echo "Please provide the kver as second parameter." >&2
    exit 2
  elif [ -z "${verrel}" ] ; then
    echo "Couldn't find out the verrel." >&2
    exit 2
  fi

for variant in "$@" ; do
      if [ "default" == "$variant" ];
      then
            get_rpmtemplate ""
      else
            get_rpmtemplate "${variant}"
      fi
  done
}

usage ()
{
  cat <<EOF
You called: ${invocation}

Usage: ${myprog} <command> <option>+
 Commands:
  verrel <uname>
    - Get "base" version-release.
  variant <uname>
    - Get variant from uname.
  variant_char <uname> <variant>
    - Get kernel variant separator character.
  kernel_source <uname> <variant>
    - Get path to kernel source directory.
  rpmtemplate <mainpgkname> <uname> <variants>
    - Return a template for use in a source RPM
  version
    - Output version number and exit.
EOF
}

invocation="$(basename ${0}) $@"
while [ "${1}" ] ; do
  case "${1}" in
    verrel)
      shift
      print_verrel "$@"
      exit $?
      ;;
    variant)
      shift
      print_variant "$@"
      exit $?
      ;;
    variant_char)
      shift
      print_variant_char "$@"
      exit $?
      ;;
    kernel_source)
      shift
      print_kernel_source "$@"
      exit $?
      ;;
    rpmtemplate)
      shift
      print_rpmtemplate "$@"
      exit $?
      ;;
    version)
      echo "${myprog} ${myver}"
      exit 0
      ;;
    *)
      echo "Error: Unknown option '${1}'." >&2
      usage >&2
      exit 2
      ;;
  esac
done

# Local variables:
# mode: sh
# sh-indentation: 2
# indent-tabs-mode: nil
# End:
# ex: ts=2 sw=2 et