FM / scripts

/usr/src/kernels/4.18.0-553.121.1.el8_10.x86_64/scripts/

/usr/src/kernels/4.18.0-553.121.1.el8_10.x86_64/scripts

Name	Size	Mode	Actions
basic/	-	0755	rm
clang-tools/	-	0755	rm
coccinelle/	-	0755	rm
dtc/	-	0755	rm
gcc-plugins/	-	0755	rm
gdb/	-	0755	rm
genksyms/	-	0755	rm
kconfig/	-	0755	rm
ksymoops/	-	0755	rm
mod/	-	0755	rm
package/	-	0755	rm
selinux/	-	0755	rm
adjust_autoksyms.sh	3010	0755	edit dl rm
asn1_compiler	28008	0755	edit dl rm
asn1_compiler.c	36391	0644	edit dl rm
bin2c	7024	0755	edit dl rm
bin2c.c	743	0644	edit dl rm
bloat-o-meter	3313	0755	edit dl rm
bootgraph.pl	6426	0755	edit dl rm
bpf_doc.py	25515	0755	edit dl rm
cc-can-link.sh	166	0755	edit dl rm
checkincludes.pl	1984	0755	edit dl rm
checkkconfigsymbols.py	15895	0755	edit dl rm
checkpatch.pl	197186	0755	edit dl rm
checkstack.pl	5303	0755	edit dl rm
checksyscalls.sh	7094	0755	edit dl rm
checkversion.pl	1938	0755	edit dl rm
check_00index.sh	1333	0755	edit dl rm
check_extable.sh	5049	0755	edit dl rm
clang-version.sh	635	0755	edit dl rm
cleanfile	3538	0755	edit dl rm
cleanpatch	5178	0755	edit dl rm
coccicheck	7407	0755	edit dl rm
config	4635	0755	edit dl rm
conmakehash	11616	0755	edit dl rm
conmakehash.c	6128	0644	edit dl rm
const_structs.checkpatch	964	0644	edit dl rm
decodecode	2525	0755	edit dl rm
decode_stacktrace.sh	3834	0755	edit dl rm
depmod.sh	1119	0755	edit dl rm
diffconfig	3821	0755	edit dl rm
documentation-file-ref-check	3548	0755	edit dl rm
export_report.pl	4654	0755	edit dl rm
extract-cert	11616	0755	edit dl rm
extract-cert.c	3541	0644	edit dl rm
extract-ikconfig	1734	0755	edit dl rm
extract-module-sig.pl	3742	0755	edit dl rm
extract-sys-certs.pl	3832	0755	edit dl rm
extract-vmlinux	1725	0755	edit dl rm
extract_xc3028.pl	45665	0755	edit dl rm
faddr2line	6303	0755	edit dl rm
file-size.sh	86	0755	edit dl rm
find-unused-docs.sh	1310	0755	edit dl rm
gcc-goto.sh	530	0755	edit dl rm
gcc-ld	711	0755	edit dl rm
gcc-plugin.sh	1090	0755	edit dl rm
gcc-version.sh	857	0755	edit dl rm
gcc-x86_32-has-stack-protector.sh	173	0755	edit dl rm
gcc-x86_64-has-stack-protector.sh	198	0755	edit dl rm
gen_initramfs_list.sh	8224	0755	edit dl rm
get_dvb_firmware	25824	0755	edit dl rm
get_maintainer.pl	67369	0755	edit dl rm
gfp-translate	1752	0755	edit dl rm
headerdep.pl	3582	0755	edit dl rm
headers.sh	512	0755	edit dl rm
headers_check.pl	3815	0755	edit dl rm
headers_install.sh	1397	0755	edit dl rm
insert-sys-cert.c	9084	0644	edit dl rm
kallsyms	19992	0755	edit dl rm
kallsyms.c	18580	0644	edit dl rm
Kbuild.include	15468	0644	edit dl rm
Kconfig.include	1173	0644	edit dl rm
kernel-doc	62560	0755	edit dl rm
ld-version.sh	269	0755	edit dl rm
leaking_addresses.pl	13160	0755	edit dl rm
Lindent	502	0755	edit dl rm
link-vmlinux.sh	9176	0755	edit dl rm
Makefile	1741	0644	edit dl rm
Makefile.asm-generic	1193	0644	edit dl rm
Makefile.build	19707	0644	edit dl rm
Makefile.clean	2883	0644	edit dl rm
Makefile.dtbinst	1116	0644	edit dl rm
Makefile.extrawarn	2770	0644	edit dl rm
Makefile.gcc-plugins	1861	0644	edit dl rm
Makefile.headersinst	4079	0644	edit dl rm
Makefile.host	6520	0644	edit dl rm
Makefile.kasan	1679	0644	edit dl rm
Makefile.kcov	319	0644	edit dl rm
Makefile.kcsan	118	0644	edit dl rm
Makefile.lib	15535	0644	edit dl rm
Makefile.modbuiltin	1717	0644	edit dl rm
Makefile.modinst	1149	0644	edit dl rm
Makefile.modpost	5430	0644	edit dl rm
Makefile.modsign	897	0644	edit dl rm
Makefile.ubsan	951	0644	edit dl rm
makelst	808	0755	edit dl rm
markup_oops.pl	8273	0755	edit dl rm
mkcompile_h	2628	0755	edit dl rm
mkmakefile	1218	0755	edit dl rm
mksysmap	1359	0755	edit dl rm
mkuboot.sh	414	0755	edit dl rm
module-common.lds	901	0644	edit dl rm
modules.order	0	0644	edit dl rm
namespace.pl	13358	0755	edit dl rm
objdiff	2917	0755	edit dl rm
parse-maintainers.pl	4646	0755	edit dl rm
patch-kernel	10185	0755	edit dl rm
pnmtologo	15720	0755	edit dl rm
pnmtologo.c	12197	0644	edit dl rm
profile2linkerlist.pl	410	0755	edit dl rm
prune-kernel	708	0755	edit dl rm
recordmcount	24008	0755	edit dl rm
recordmcount.c	17062	0644	edit dl rm
recordmcount.h	16772	0644	edit dl rm
recordmcount.pl	18709	0755	edit dl rm
setlocalversion	4013	0755	edit dl rm
show_delta	3076	0755	edit dl rm
sign-file	15768	0755	edit dl rm
sign-file.c	9994	0644	edit dl rm
sortextable	15712	0755	edit dl rm
sortextable.c	10411	0644	edit dl rm
sortextable.h	5614	0644	edit dl rm
spelling.txt	25611	0644	edit dl rm
sphinx-pre-install	14378	0755	edit dl rm
split-man.pl	600	0755	edit dl rm
stackdelta	1883	0755	edit dl rm
stackusage	794	0755	edit dl rm
subarch.include	641	0644	edit dl rm
tags.sh	9789	0755	edit dl rm
test_fortify.sh	2281	0644	edit dl rm
unifdef	36192	0755	edit dl rm
unifdef.c	35637	0644	edit dl rm
ver_linux	2747	0755	edit dl rm
xen-hypercalls.sh	386	0644	edit dl rm
xz_wrap.sh	562	0755	edit dl rm

Edit: /usr/src/kernels/4.18.0-553.121.1.el8_10.x86_64/scripts/insert-sys-cert.c (9084B)

/* Write the contents of the <certfile> into kernel symbol system_extra_cert
 *
 * Copyright (C) IBM Corporation, 2015
 *
 * Author: Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com>
 *
 * This software may be used and distributed according to the terms
 * of the GNU General Public License, incorporated herein by reference.
 *
 * Usage: insert-sys-cert [-s <System.map> -b <vmlinux> -c <certfile>
 */

#define _GNU_SOURCE
#include <stdio.h>
#include <ctype.h>
#include <string.h>
#include <limits.h>
#include <stdbool.h>
#include <errno.h>
#include <stdlib.h>
#include <stdarg.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/mman.h>
#include <fcntl.h>
#include <unistd.h>
#include <elf.h>

#define CERT_SYM  "system_extra_cert"
#define USED_SYM  "system_extra_cert_used"
#define LSIZE_SYM "system_certificate_list_size"

#define info(format, args...) fprintf(stderr, "INFO:    " format, ## args)
#define warn(format, args...) fprintf(stdout, "WARNING: " format, ## args)
#define  err(format, args...) fprintf(stderr, "ERROR:   " format, ## args)

#if UINTPTR_MAX == 0xffffffff
#define CURRENT_ELFCLASS ELFCLASS32
#define Elf_Ehdr	Elf32_Ehdr
#define Elf_Shdr	Elf32_Shdr
#define Elf_Sym		Elf32_Sym
#else
#define CURRENT_ELFCLASS ELFCLASS64
#define Elf_Ehdr	Elf64_Ehdr
#define Elf_Shdr	Elf64_Shdr
#define Elf_Sym		Elf64_Sym
#endif

static unsigned char endianness(void)
{
	uint16_t two_byte = 0x00FF;
	uint8_t low_address = *((uint8_t *)&two_byte);

if (low_address == 0)
		return ELFDATA2MSB;
	else
		return ELFDATA2LSB;
}

struct sym {
	char *name;
	unsigned long address;
	unsigned long offset;
	void *content;
	int size;
};

static unsigned long get_offset_from_address(Elf_Ehdr *hdr, unsigned long addr)
{
	Elf_Shdr *x;
	unsigned int i, num_sections;

x = (void *)hdr + hdr->e_shoff;
	if (hdr->e_shnum == SHN_UNDEF)
		num_sections = x[0].sh_size;
	else
		num_sections = hdr->e_shnum;

for (i = 1; i < num_sections; i++) {
		unsigned long start = x[i].sh_addr;
		unsigned long end = start + x[i].sh_size;
		unsigned long offset = x[i].sh_offset;

if (addr >= start && addr <= end)
			return addr - start + offset;
	}
	return 0;
}

#define LINE_SIZE 100

static void get_symbol_from_map(Elf_Ehdr *hdr, FILE *f, char *name,
				struct sym *s)
{
	char l[LINE_SIZE];
	char *w, *p, *n;

s->size = 0;
	s->address = 0;
	s->offset = 0;
	if (fseek(f, 0, SEEK_SET) != 0) {
		perror("File seek failed");
		exit(EXIT_FAILURE);
	}
	while (fgets(l, LINE_SIZE, f)) {
		p = strchr(l, '\n');
		if (!p) {
			err("Missing line ending.\n");
			return;
		}
		n = strstr(l, name);
		if (n)
			break;
	}
	if (!n) {
		err("Unable to find symbol: %s\n", name);
		return;
	}
	w = strchr(l, ' ');
	if (!w)
		return;

*w = '\0';
	s->address = strtoul(l, NULL, 16);
	if (s->address == 0)
		return;
	s->offset = get_offset_from_address(hdr, s->address);
	s->name = name;
	s->content = (void *)hdr + s->offset;
}

static Elf_Sym *find_elf_symbol(Elf_Ehdr *hdr, Elf_Shdr *symtab, char *name)
{
	Elf_Sym *sym, *symtab_start;
	char *strtab, *symname;
	unsigned int link;
	Elf_Shdr *x;
	int i, n;

x = (void *)hdr + hdr->e_shoff;
	link = symtab->sh_link;
	symtab_start = (void *)hdr + symtab->sh_offset;
	n = symtab->sh_size / symtab->sh_entsize;
	strtab = (void *)hdr + x[link].sh_offset;

for (i = 0; i < n; i++) {
		sym = &symtab_start[i];
		symname = strtab + sym->st_name;
		if (strcmp(symname, name) == 0)
			return sym;
	}
	err("Unable to find symbol: %s\n", name);
	return NULL;
}

static void get_symbol_from_table(Elf_Ehdr *hdr, Elf_Shdr *symtab,
				  char *name, struct sym *s)
{
	Elf_Shdr *sec;
	int secndx;
	Elf_Sym *elf_sym;
	Elf_Shdr *x;

x = (void *)hdr + hdr->e_shoff;
	s->size = 0;
	s->address = 0;
	s->offset = 0;
	elf_sym = find_elf_symbol(hdr, symtab, name);
	if (!elf_sym)
		return;
	secndx = elf_sym->st_shndx;
	if (!secndx)
		return;
	sec = &x[secndx];
	s->size = elf_sym->st_size;
	s->address = elf_sym->st_value;
	s->offset = s->address - sec->sh_addr
			       + sec->sh_offset;
	s->name = name;
	s->content = (void *)hdr + s->offset;
}

static Elf_Shdr *get_symbol_table(Elf_Ehdr *hdr)
{
	Elf_Shdr *x;
	unsigned int i, num_sections;

x = (void *)hdr + hdr->e_shoff;
	if (hdr->e_shnum == SHN_UNDEF)
		num_sections = x[0].sh_size;
	else
		num_sections = hdr->e_shnum;

for (i = 1; i < num_sections; i++)
		if (x[i].sh_type == SHT_SYMTAB)
			return &x[i];
	return NULL;
}

static void *map_file(char *file_name, int *size)
{
	struct stat st;
	void *map;
	int fd;

fd = open(file_name, O_RDWR);
	if (fd < 0) {
		perror(file_name);
		return NULL;
	}
	if (fstat(fd, &st)) {
		perror("Could not determine file size");
		close(fd);
		return NULL;
	}
	*size = st.st_size;
	map = mmap(NULL, *size, PROT_READ|PROT_WRITE, MAP_SHARED, fd, 0);
	if (map == MAP_FAILED) {
		perror("Mapping to memory failed");
		close(fd);
		return NULL;
	}
	close(fd);
	return map;
}

static char *read_file(char *file_name, int *size)
{
	struct stat st;
	char *buf;
	int fd;

fd = open(file_name, O_RDONLY);
	if (fd < 0) {
		perror(file_name);
		return NULL;
	}
	if (fstat(fd, &st)) {
		perror("Could not determine file size");
		close(fd);
		return NULL;
	}
	*size = st.st_size;
	buf = malloc(*size);
	if (!buf) {
		perror("Allocating memory failed");
		close(fd);
		return NULL;
	}
	if (read(fd, buf, *size) != *size) {
		perror("File read failed");
		close(fd);
		return NULL;
	}
	close(fd);
	return buf;
}

static void print_sym(Elf_Ehdr *hdr, struct sym *s)
{
	info("sym:    %s\n", s->name);
	info("addr:   0x%lx\n", s->address);
	info("size:   %d\n", s->size);
	info("offset: 0x%lx\n", (unsigned long)s->offset);
}

static void print_usage(char *e)
{
	printf("Usage %s [-s <System.map>] -b <vmlinux> -c <certfile>\n", e);
}

int main(int argc, char **argv)
{
	char *system_map_file = NULL;
	char *vmlinux_file = NULL;
	char *cert_file = NULL;
	int vmlinux_size;
	int cert_size;
	Elf_Ehdr *hdr;
	char *cert;
	FILE *system_map;
	unsigned long *lsize;
	int *used;
	int opt;
	Elf_Shdr *symtab = NULL;
	struct sym cert_sym, lsize_sym, used_sym;

while ((opt = getopt(argc, argv, "b:c:s:")) != -1) {
		switch (opt) {
		case 's':
			system_map_file = optarg;
			break;
		case 'b':
			vmlinux_file = optarg;
			break;
		case 'c':
			cert_file = optarg;
			break;
		default:
			break;
		}
	}

if (!vmlinux_file || !cert_file) {
		print_usage(argv[0]);
		exit(EXIT_FAILURE);
	}

cert = read_file(cert_file, &cert_size);
	if (!cert)
		exit(EXIT_FAILURE);

hdr = map_file(vmlinux_file, &vmlinux_size);
	if (!hdr)
		exit(EXIT_FAILURE);

if (vmlinux_size < sizeof(*hdr)) {
		err("Invalid ELF file.\n");
		exit(EXIT_FAILURE);
	}

if ((hdr->e_ident[EI_MAG0] != ELFMAG0) ||
	    (hdr->e_ident[EI_MAG1] != ELFMAG1) ||
	    (hdr->e_ident[EI_MAG2] != ELFMAG2) ||
	    (hdr->e_ident[EI_MAG3] != ELFMAG3)) {
		err("Invalid ELF magic.\n");
		exit(EXIT_FAILURE);
	}

if (hdr->e_ident[EI_CLASS] != CURRENT_ELFCLASS) {
		err("ELF class mismatch.\n");
		exit(EXIT_FAILURE);
	}

if (hdr->e_ident[EI_DATA] != endianness()) {
		err("ELF endian mismatch.\n");
		exit(EXIT_FAILURE);
	}

if (hdr->e_shoff > vmlinux_size) {
		err("Could not find section header.\n");
		exit(EXIT_FAILURE);
	}

symtab = get_symbol_table(hdr);
	if (!symtab) {
		warn("Could not find the symbol table.\n");
		if (!system_map_file) {
			err("Please provide a System.map file.\n");
			print_usage(argv[0]);
			exit(EXIT_FAILURE);
		}

system_map = fopen(system_map_file, "r");
		if (!system_map) {
			perror(system_map_file);
			exit(EXIT_FAILURE);
		}
		get_symbol_from_map(hdr, system_map, CERT_SYM, &cert_sym);
		get_symbol_from_map(hdr, system_map, USED_SYM, &used_sym);
		get_symbol_from_map(hdr, system_map, LSIZE_SYM, &lsize_sym);
		cert_sym.size = used_sym.address - cert_sym.address;
	} else {
		info("Symbol table found.\n");
		if (system_map_file)
			warn("System.map is ignored.\n");
		get_symbol_from_table(hdr, symtab, CERT_SYM, &cert_sym);
		get_symbol_from_table(hdr, symtab, USED_SYM, &used_sym);
		get_symbol_from_table(hdr, symtab, LSIZE_SYM, &lsize_sym);
	}

if (!cert_sym.offset || !lsize_sym.offset || !used_sym.offset)
		exit(EXIT_FAILURE);

print_sym(hdr, &cert_sym);
	print_sym(hdr, &used_sym);
	print_sym(hdr, &lsize_sym);

lsize = (unsigned long *)lsize_sym.content;
	used = (int *)used_sym.content;

if (cert_sym.size < cert_size) {
		err("Certificate is larger than the reserved area!\n");
		exit(EXIT_FAILURE);
	}

/* If the existing cert is the same, don't overwrite */
	if (cert_size == *used &&
	    strncmp(cert_sym.content, cert, cert_size) == 0) {
		warn("Certificate was already inserted.\n");
		exit(EXIT_SUCCESS);
	}

if (*used > 0)
		warn("Replacing previously inserted certificate.\n");

memcpy(cert_sym.content, cert, cert_size);
	if (cert_size < cert_sym.size)
		memset(cert_sym.content + cert_size,
			0, cert_sym.size - cert_size);

*lsize = *lsize + cert_size - *used;
	*used = cert_size;
	info("Inserted the contents of %s into %lx.\n", cert_file,
						cert_sym.address);
	info("Used %d bytes out of %d bytes reserved.\n", *used,
						 cert_sym.size);
	exit(EXIT_SUCCESS);
}

cmd: