#!/bin/sh
#refhashlist patcher

cp /var/lib/aegis/refhashlist /var/lib/aegis/refhashlist.backup

pathname=$1
if [ "$pathname" == "" ]; then exit 1; fi

line=$(grep "${pathname}" /var/lib/aegis/refhashlist)
if [ "$line" == "" ]; then exit 2;
else
        #oldsha1=$(for ii in $(sha1sum /${pathname}); do echo $ii; break; done) #real file sha1
        #oldsha1=$(i=0; for ii in $line; do i=$((i+1)); if [ $i -eq 6 ]; then echo $ii; break; fi; done;) #sha1 parsed from line, not real sha1
        oldsha1=$(echo ${line} | sed -re "s/.*([a-f0-9]{40}).*/\1/") #faster sha1 extraction using regexp
        newsha1=$(for ii in $(sha1sum "/${pathname}"); do echo $ii; break; done)
        newline=$(echo ${line} | sed -e "s/${oldsha1}/${newsha1}/")
        sed -i -e "s@${line}@${newline}@" /var/lib/aegis/refhashlist

        accli -c tcb-sign -F /var/lib/aegis/refhashlist < /var/lib/aegis/refhashlist
fi

RM696-21-3_PR_001:/# export A=`sha1sum /tmp/enable-swap.conf |cut -b1-40`;
RM696-21-3_PR_001:/# perl -pi -w -e 's#40 (.*) A(.*)enable-swap#40 $ENV{A} A$2enable-swap#smg' /var/lib/aegis/refhashlist
RM696-21-3_PR_001:/# accli -c tcb-sign -F /var/lib/aegis/refhashlist -i /var/lib/aegis/refhashlist
RM696-21-3_PR_001:/# validator-init; aegis-loader;echo 1 > /sys/kernel/security/validator/flush
RM696-21-3_PR_001:~# reboot