Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-28 17:29:28 -05:00
Code Issues Packages Projects Releases Wiki Activity

refactoring

Browse Source
This commit is contained in:
Patrick Schleizer 2023-01-08 07:16:18 -05:00
parent 96d6ca7ae0
commit f3b84e15be
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 3 additions and 56 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
usr/libexec/security-misc/cold-boot-attack-defense-kexec-prepare
View File

@ -7,62 +7,9 @@
#set -x
set -e
## Get the kernel command-line arguments
cmdline=$(cat /proc/cmdline)
if [ "$cmdline" = "" ]; then
echo "$0: ERROR: /proc/cmdline is empty!"
exit 1
fi
boot_image_full=$(echo "$cmdline" | grep -o 'BOOT_IMAGE=\S*')
## example boot_image_full:
## BOOT_IMAGE=/vmlinuz-5.10.0-20-amd64
## BOOT_IMAGE=/boot/vmlinuz-5.10.0-20-amd64
if [ "$boot_image_full" = "" ]; then
echo "$0: ERROR: /proc/cmdline does not contain BOOT_IMAGE!"
exit 1
fi
boot_image=$(echo "$boot_image_full" | cut -d '=' -f 2)
## example boot_image:
## /vmlinuz-5.10.0-20-amd64
## /boot/vmlinuz-5.10.0-20-amd64
if [ "$boot_image" = "" ]; then
echo "$0: ERROR: boot_image detection failed (is empty)!"
exit 1
fi
boot_image_without_boot_slash=$(echo "$kernel" | sed "s#boot/##")
if [ "$boot_image_without_boot_slash" = "" ]; then
echo "$0: ERROR: boot_image_without_boot_slash detection failed (is empty)!"
exit 1
fi
if test -r "/boot/$boot_image_without_boot_slash" ; then
kernel="/boot/$boot_image_without_boot_slash"
elif test -r "/$boot_image_without_boot_slash" ; then
kernel="/$boot_image_without_boot_slash"
fi
## example kernel:
## /boot//vmlinuz-5.10.0-20-amd64
initrd=$(echo "$kernel" | sed "s#vmlinuz#initrd.img#")
## example initrd:
## /boot//initrd.img-5.10.0-20-amd64
if ! test -r "$kernel"; then
echo "$0: ERROR: Kernel File '$kernel' not found or not readable!"
exit 1
fi
if ! test -r "$initrd"; then
echo "$0: ERROR: Initrd File '$initrd' not found or not readable!"
exit 1
fi
## provided by helper-scripts
kernel=$(kernel-file-detect)
initrd=$(initrd-file-detect)
if systemctl list-jobs --no-legend | grep "poweroff.target" | grep -q "start"; then
wiperamexit="yes"