#!/bin/sh 
#refhashlist patcher 

cp /var/lib/aegis/refhashlist /var/lib/aegis/refhashlist.backup 

pathname=$1 
if [ "$pathname" == "" ];then exit 1; fi 

line=$(grep "${pathname}" /var/lib/aegis/refhashlist) 
#oldsha1=$(for ii in $(sha1sum /${pathname}); do echo $ii; break; done) #тут был реальный sha1 текущего файла 
oldsha1=$(i=0; for ii in $line; do i=$((i+1)); if [ $i -eq 6 ]; then echo $ii; break; fi; done;) #но лучше брать sha1 из refhashlist, чтобы не накосячить наверняка 
newsha1=$(for ii in $(sha1sum "/${pathname}"); do echo $ii; break; done) 
newline=$(echo ${line} | sed -e "s/${oldsha1}/${newsha1}/") 
sed -i -e "s@${line}@${newline}@" /var/lib/aegis/refhashlist 

accli -c tcb-sign -F /var/lib/aegis/refhashlist < /var/lib/aegis/refhashlist

#do something with something (with /etc/init/group-mce.conf)
refhashlist.sh etc/init/group-mce.conf #without first slash!