From 2f97ec532422ea22ba1d04ddc683e64863d05234 Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Sun, 6 May 2018 10:51:32 +0100 Subject: initial iptables revision --- core/scripts/iptables-conf.sh | 229 ++++++++++++++++++++++ core/scripts/iptables.sh | 435 ++++++------------------------------------ 2 files changed, 292 insertions(+), 372 deletions(-) create mode 100644 core/scripts/iptables-conf.sh (limited to 'core/scripts') diff --git a/core/scripts/iptables-conf.sh b/core/scripts/iptables-conf.sh new file mode 100644 index 0000000..cd3185b --- /dev/null +++ b/core/scripts/iptables-conf.sh @@ -0,0 +1,229 @@ +#!/bin/bash + + + +iptables_clear () { + echo "clear all iptables tables" + + iptables -F + iptables -X + iptables -t nat -F + iptables -t nat -X + iptables -t mangle -F + iptables -t mangle -X + iptables -t raw -F + iptables -t raw -X + iptables -t security -F + iptables -t security -X + iptables -N blocker + + iptables -N srv_dhcp + iptables -N srv_rip + iptables -N srv_icmp + iptables -N srv_dns_in + iptables -N srv_dns_out + iptables -N srv_http_in + iptables -N srv_http_out + iptables -N srv_https_in + iptables -N srv_https_out + iptables -N srv_ssh_in + iptables -N srv_ssh_out + iptables -N srv_git_in + iptables -N srv_git_out + iptables -N srv_db_in + iptables -N srv_db_out + + + iptables -N cli_dns_in + iptables -N cli_dns_out + iptables -N cli_http_in + iptables -N cli_http_out + iptables -N cli_https_in + iptables -N cli_https_out + iptables -N cli_ssh_in + iptables -N cli_ssh_out + iptables -N cli_pops_in + iptables -N cli_pops_out + iptables -N cli_smtps_in + iptables -N cli_smtps_out + iptables -N cli_irc_in + iptables -N cli_irc_out + iptables -N cli_ftp_in + iptables -N cli_ftp_out + iptables -N cli_git_in + iptables -N cli_git_out + iptables -N cli_gpg_in + iptables -N cli_gpg_out + + # Set Default Rules + iptables -P INPUT DROP + iptables -P FORWARD DROP + iptables -P OUTPUT DROP + +} + +iptables_log () { + ## log everything else and drop + $IPT -A OUTPUT -j LOG --log-level 7 --log-prefix "iptables: OUTPUT: " + $IPT -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " + $IPT -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " + $IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " + $IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " +} + + +iptables_tables () { + echo "start adding tables..." + + ####### blocker Chain ###### + ## Block google dns + $IPT -A blocker -s 8.8.0.0/24 -j LOG --log-level 7 --log-prefix "iptables: blocker google: " + $IPT -A blocker -s 8.8.0.0/24 -j DROP + ## Block sync + $IPT -A blocker -p tcp ! --syn -m state --state NEW -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 7 --log-prefix "iptables: drop sync: " + $IPT -A blocker -p tcp ! --syn -m state --state NEW -j DROP + ## Block Fragments + $IPT -A blocker -f -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop frag: " + $IPT -A blocker -f -j DROP + $IPT -A blocker -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP + $IPT -A blocker -p tcp --tcp-flags ALL ALL -j DROP + $IPT -A blocker -p tcp --tcp-flags ALL NONE -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop null: " + $IPT -A blocker -p tcp --tcp-flags ALL NONE -j DROP # NULL packets + $IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop syn rst syn rst: " + $IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -j DROP + $IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop xmas: " + $IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP #XMAS + $IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop fin scan: " + $IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -j DROP # FIN packet scans + $IPT -A blocker -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP + ## Return to caller + $IPT -A blocker -j RETURN + + ######## DNS Server + #echo "server_in chain: Allow input to DNS Server" + $IPT -A srv_dns_in -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_in -p tcp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_in -j RETURN + #echo "srv_dns_out chain: Allow output from DNS server" + $IPT -A srv_dns_out -p udp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_out -p tcp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_out -j RETURN + + ####### Database Server + $IPT -A srv_db_in -p tcp --dport 5432 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_db_in -j RETURN + $IPT -A srv_db_out -p tcp --sport 5432 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A srv_db_out -j RETURN + + ####### SSH Server + + $IPT -A srv_ssh_in -p tcp --dport 2222 -m state --state NEW -m recent --set --name SSH -j ACCEPT + + $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent \ + --update --seconds 60 --hitcount 4 --rttl \ + --name SSH -j LOG --log-prefix "${SPAMDROPMSG} SSH" + + $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent --update --seconds 60 \ + --hitcount 4 --rttl --name SSH -j DROP + + $IPT -A srv_ssh_in -p tcp --dport 2222 --sport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + + $IPT -A srv_ssh_in -j RETURN + $IPT -A srv_ssh_out -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A srv_ssh_out -j RETURN + + ####### HTTP Server + $IPT -A srv_http_in -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_http_in -j RETURN + $IPT -A srv_http_out -p tcp --sport 80 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_http_out -j RETURN + + ####### HTTPS Server + $IPT -A srv_https_in -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_https_in -j RETURN + $IPT -A srv_https_out -p tcp --sport 443 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_https_out -j RETURN + + ###### GIT server + $IPT -A srv_git_in -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_git_in -j RETURN + $IPT -A srv_git_out -p tcp --sport 9418 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_git_out -j RETURN + + ######## DNS Client + $IPT -A cli_dns_out -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_dns_out -j RETURN + $IPT -A cli_dns_in -p udp --sport 53 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_dns_in -j RETURN + + ######## HTTP Client + $IPT -A cli_http_in -p tcp --sport 80 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_http_in -j RETURN + $IPT -A cli_http_out -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_http_out -j RETURN + + + ######## IRC client + $IPT -A cli_irc_in -p tcp --sport 6667 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_irc_in -j RETURN + $IPT -A cli_irc_out -p tcp --dport 6667 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_irc_out -j RETURN + + ######## FTP client + + $IPT -A cli_ftp_in -p tcp --sport 21 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_ftp_in -j RETURN + $IPT -A cli_ftp_out -p tcp --dport 21 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_ftp_out -j RETURN + ######## GIT client + $IPT -A cli_git_in -p tcp --sport 9418 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_git_in -j RETURN + $IPT -A cli_git_out -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_git_out -j RETURN + + ######## POP3S client + $IPT -A cli_pops_in -p tcp --sport 995 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_pops_in -j RETURN + $IPT -A cli_pops_out -p tcp --dport 995 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_pops_out -j RETURN + + ######## SMTPS client + $IPT -A cli_smtps_in -p tcp --sport 465 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_smtps_in -j RETURN + $IPT -A cli_smtps_out -p tcp --dport 465 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_smtps_out -j RETURN + + ######## HTTPS client + $IPT -A cli_https_in -p tcp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_https_in -p udp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_https_in -j RETURN + $IPT -A cli_https_out -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_https_out -p udp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_https_out -j RETURN + + ######## SSH client + $IPT -A cli_ssh_in -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_in -p tcp --sport 22 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_in -j RETURN + $IPT -A cli_ssh_out -p tcp --dport 2222 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_out -p tcp --dport 22 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_out -j RETURN + + ######## GPG key client + $IPT -A cli_gpg_in -p tcp --sport 11371 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_gpg_in -j RETURN + $IPT -A cli_gpg_out -p tcp --dport 11371 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_gpg_out -j RETURN + + ######## DHCP Server + $IPT -A srv_dhcp -p udp --sport 68 --dport 67 -j ACCEPT + $IPT -A srv_dhcp -j RETURN + + ####### RIP Server + $IPT -A srv_rip -p udp --sport 520 --dport 520 -j ACCEPT + $IPT -A srv_rip -j RETURN + + ####### ICMP Server + $IPT -A srv_icmp -p icmp -j ACCEPT + $IPT -A srv_icmp -j RETURN +} diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index b887204..9c6cb87 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -1,408 +1,99 @@ -#!/bin/sh +#!/bin/bash -# -# XXXXXXXXXXXXXXXXX -# XXXX Network XXXX -# XXXXXXXXXXXXXXXXX -# + -# | -# v -# +-------------+ +------------------+ -# |table: filter| <---+ | table: nat | -# |chain: INPUT | | | chain: PREROUTING| -# +-----+-------+ | +--------+---------+ -# | | | -# v | v -# [local process] | **************** +--------------+ -# | +---------+ Routing decision +------> |table: filter | -# v **************** |chain: FORWARD| -# **************** +------+-------+ -# Routing decision | -# **************** | -# | | -# v **************** | -# +-------------+ +------> Routing decision <---------------+ -# |table: nat | | **************** -# |chain: OUTPUT| | + -# +-----+-------+ | | -# | | v -# v | +-------------------+ -# +--------------+ | | table: nat | -# |table: filter | +----+ | chain: POSTROUTING| -# |chain: OUTPUT | +--------+----------+ -# +--------------+ | -# v -# XXXXXXXXXXXXXXXXX -# XXXX Network XXXX -# XXXXXXXXXXXXXXXXX -# -# iptables [-t table] {-A|-C|-D} chain rule-specification -# -# iptables [-t table] {-A|-C|-D} chain rule-specification -# -# iptables [-t table] -I chain [rulenum] rule-specification -# -# iptables [-t table] -R chain rulenum rule-specification -# -# iptables [-t table] -D chain rulenum -# -# iptables [-t table] -S [chain [rulenum]] -# -# iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] -# -# iptables [-t table] -N chain -# -# iptables [-t table] -X [chain] -# -# iptables [-t table] -P chain target -# -# iptables [-t table] -E old-chain-name new-chain-name -# -# rule-specification = [matches...] [target] -# -# match = -m matchname [per-match-options] -# -# -# Targets -# -# can be a user defined chain -# -# ACCEPT - accepts the packet -# DROP - drop the packet on the floor -# QUEUE - packet will be stent to queue -# RETURN - stop traversing this chain and -# resume ate the next rule in the -# previeus (calling) chain. -# -# if packet reach the end of the chain or -# a target RETURN, default policy for that -# chain is applayed. -# -# Target Extensions -# -# AUDIT -# CHECKSUM -# CLASSIFY -# DNAT -# DSCP -# LOG -# Torn on kernel logging, will print some -# some information on all matching packets. -# Log data can be read with dmesg or syslogd. -# This is a non-terminating target and a rule -# should be created with matching criteria. -# -# --log-level level -# Level of logging (numeric or see sys- -# log.conf(5) -# -# --log-prefix prefix -# Prefix log messages with specified prefix -# up to 29 chars log -# -# --log-uid -# Log the userid of the process with gener- -# ated the packet -# NFLOG -# This target pass the packet to loaded logging -# backend to log the packet. One or more userspace -# processes may subscribe to the group to receive -# the packets. -# -# ULOG -# This target provides userspace logging of maching -# packets. One or more userspace processes may then -# then subscribe to various multicast groups and -# then receive the packets. -# -# -# Commands -# -# -A, --append chain rule-specification -# -C, --check chain rule-specification -# -D, --delete chain rule-specification -# -D, --delete chain rulenum -# -I, --insert chain [rulenum] rule-specification -# -R, --replace chain rulenum rule-specification -# -L, --list [chain] -# -P, --policy chain target -# -# Parameters -# -# -p, --protocol protocol -# tcp, udp, udplite, icmp, esp, ah, sctp, all -# -s, --source address[/mask][,...] -# -d, --destination address[/mask][,...] -# -j, --jump target -# -g, --goto chain -# -i, --in-interface name -# -o, --out-interface name -# -f, --fragment -# -m, --match options module-name -# iptables can use extended packet matching -# modules. -# -c, --set-counters packets bytes +TYPE=bridge IPT="/usr/sbin/iptables" SPAMLIST="blockedip" SPAMDROPMSG="BLOCKED IP DROP" + # public interface to network/internet BR_IF="br0" -BR_IP="10.0.0.254" BR_NET="10.0.0.0/8" GW="10.0.0.1" -# private interface for virtual/internal -WIFI_IF="wlp7s0" -WIFI_NET="192.168.1.0/24" -#PRI_IP="192.168.1.33" - -echo "Stopping ipv4 firewall and deny everyone..." - -iptables -F -iptables -X -iptables -t nat -F -iptables -t nat -X -iptables -t mangle -F -iptables -t mangle -X -iptables -t raw -F -iptables -t raw -X -iptables -t security -F -iptables -t security -X -iptables -N blocker - -iptables -N netconf_in -iptables -N netconf_out -iptables -N server_in -iptables -N server_out -iptables -N client_in -iptables -N client_out +PUB_IP="10.0.0.254" +PUB_IF="enp8s0" -iptables -N srv_dns_in -iptables -N srv_dns_out -iptables -N cli_dns_in -iptables -N cli_dns_out -iptables -N cli_http_in -iptables -N cli_http_out - -# Set Default Rules -iptables -P INPUT DROP -iptables -P FORWARD DROP -iptables -P OUTPUT DROP - -####### blocker Chain ###### -## Block google dns -$IPT -A blocker -s 8.8.0.0/24 -j LOG --log-level 7 --log-prefix "iptables: blocker google: " -$IPT -A blocker -s 8.8.0.0/24 -j DROP -## Block sync -$IPT -A blocker -p tcp ! --syn -m state --state NEW -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 7 --log-prefix "iptables: drop sync: " -$IPT -A blocker -p tcp ! --syn -m state --state NEW -j DROP -## Block Fragments -$IPT -A blocker -f -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop frag: " -$IPT -A blocker -f -j DROP -$IPT -A blocker -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP -$IPT -A blocker -p tcp --tcp-flags ALL ALL -j DROP -$IPT -A blocker -p tcp --tcp-flags ALL NONE -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop null: " -$IPT -A blocker -p tcp --tcp-flags ALL NONE -j DROP # NULL packets -$IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop syn rst syn rst: " -$IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -j DROP -$IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop xmas: " -$IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP #XMAS -$IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop fin scan: " -$IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -j DROP # FIN packet scans -$IPT -A blocker -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP -## Return to caller -$IPT -A blocker -j RETURN - -######## DNS Server -#echo "server_in chain: Allow input to DNS Server" -$IPT -A srv_dns_in -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A srv_dns_in -p tcp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A srv_dns_in -j RETURN -#echo "srv_dns_out chain: Allow output from DNS server" -$IPT -A srv_dns_out -p udp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -$IPT -A srv_dns_out -p tcp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -$IPT -A srv_dns_out -j RETURN - -######## DNS Client -echo "cli_dns_out chain: Allow output to DNS server" -$IPT -A cli_dns_out -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A cli_dns_out -j RETURN -echo "cli_dns_in chain: Allow input from DNS Server" -$IPT -A cli_dns_in -p udp --sport 53 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -$IPT -A cli_dns_in -j RETURN +# private interface for virtual/internal +PRIV_IF="wlp7s0" +PRIV_NET="192.168.1.0/24" -######## HTTP Client -$IPT -A cli_http_in -p tcp --sport 80 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -$IPT -A cli_http_in -j RETURN -#echo "Allow to HTTP server" -$IPT -A cli_http_out -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A cli_http_out -j RETURN +#$IPT -A netconf_in -p icmp -s ${BR_NET} -j ACCEPT -####### server input Chain ###### -#echo "server_in chain: Allow to VNC Server" -#$IPT -A server_in -p tcp --dport 5900:5910 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "server_in chain: Allow to DataBase Server" -$IPT -A server_in -p tcp --dport 5432 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "server_in chain: Allow to SSH server" -$IPT -A server_in -p tcp --dport 2222 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "server_in chain: Allow input to HTTPS Server" -$IPT -A server_in -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "server_in chain: Allow input to HTTP Server" -$IPT -A server_in -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "server_in chain: Allow output from GIT server" -$IPT -A server_in -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT +#$IPT -A netconf_out -p icmp -d ${BR_NET} -j ACCEPT -## Return to caller -$IPT -A server_in -j RETURN +source iptables-conf.sh -####### server output Chain ###### -echo "server_out chain: Allow output from GIT server" -$IPT -A server_out -p tcp --sport 9418 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -echo "server_out chain: Allow output from https server" -$IPT -A server_out -p tcp --sport 443 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -echo "server_out chain: Allow output from http server" -$IPT -A server_out -p tcp --sport 80 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -echo "server_out chain: Allow output from SSH server" -$IPT -A server_out -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "server_out chain: Allow output from Data Base server" -$IPT -A server_out -p tcp --sport 5432 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -#echo "server_out chain: Allow output from VNC server" -#$IPT -A server_out -p tcp --sport 5900:5910 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT +iptables_clear +# Unlimited on loopback +$IPT -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT +$IPT -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT +$IPT -A INPUT -i lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT +$IPT -A OUTPUT -o lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT -## Return to caller -$IPT -A server_out -j RETURN -####### client input Chain ###### -echo "client_in chain: Allow input from IRC server" -$IPT -A client_in -p tcp --sport 6667 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from FTP server" -$IPT -A client_in -p tcp --sport 21 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from GIT server" -$IPT -A client_in -p tcp --sport 9418 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from POP3S server" -$IPT -A client_in -p tcp --sport 995 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from SMTPS server" -$IPT -A client_in -p tcp --sport 465 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from HTTPS server" -$IPT -A client_in -p tcp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -$IPT -A client_in -p udp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from SSH Server" -$IPT -A client_in -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -$IPT -A client_in -p tcp --sport 22 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from GPG key Server" -$IPT -A client_in -p tcp --sport 11371 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -$IPT -A client_in -j RETURN +iptables_tables -####### client output Chain ###### -echo "client_out chain: Allow output to IRC server" -$IPT -A client_out -p tcp --dport 6667 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to FTP server" -$IPT -A client_out -p tcp --dport 21 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to GIT server" -$IPT -A client_out -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to POP3S server" -$IPT -A client_out -p tcp --dport 995 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to SMTPS server" -$IPT -A client_out -p tcp --dport 465 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to HTTPS server" -$IPT -A client_out -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A client_out -p udp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to SSH server" -$IPT -A client_out -p tcp --dport 2222 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A client_out -p tcp --dport 22 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to GPG key Server" -$IPT -A client_out -p tcp --dport 11371 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A client_out -j RETURN +case $TYPE in + bridge) -####### netconf input Chain ###### -echo "netconf_in chain: Allow DHCP protocol" -$IPT -A netconf_in -p udp --sport 68 --dport 67 -j ACCEPT -echo "netconf_in chain: Allow RIP protocol for ${BR_NET}" -$IPT -A netconf_in -p udp --sport 520 --dport 520 -j ACCEPT -#echo "netconf chain: Allow ICMP from ${BR_NET}" -#$IPT -A netconf_in -p icmp -s ${BR_NET} -j ACCEPT -echo "netconf_in chain: Allow ICMP from all" -$IPT -A netconf_in -p icmp -j ACCEPT + echo "Setting bridge network..." -## Return to caller -$IPT -A netconf_in -j RETURN + echo 1 > /proc/sys/net/ipv4/ip_forward + ####### Forward Chain ###### + $IPT -A FORWARD -j blocker + #$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -d ${NET_ADDR} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j ACCEPT + #$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap0 --physdev-out ${PUB_IF} -j srv_ssh_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_in + $IPT -A FORWARD -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out -####### netconf output Chain ###### -echo "netconf_out chain: Allow output from DHCP server" -$IPT -A netconf_out -p udp --sport 67 --dport 68 -j ACCEPT -echo "netconf_out chain: Allow RIP protocol for ${BR_NET}" -$IPT -A netconf_out -p udp --sport 520 --dport 520 -j ACCEPT -#echo "netconf chain: Allow ICMP output to ${BR_NET}" -#$IPT -A netconf_out -p icmp -d ${BR_NET} -j ACCEPT -echo "netconf chain: Allow ICMP output to all" -$IPT -A netconf_out -p icmp -j ACCEPT + ####### Input Chain ###### + $IPT -A INPUT -j blocker + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_dns_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_https_in -## Return to caller -$IPT -A netconf_out -j RETURN + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_ssh_in -############################################################ -# -# Start adding rules tables -# + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -p tcp --sport 3030 --dport 1024:65535 -j DROP -echo "Starting ipv4 firewall tables..." + ####### Output Chain ###### + $IPT -A OUTPUT -j blocker + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_dns_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out -# Unlimited on loopback -$IPT -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -$IPT -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -$IPT -A INPUT -i lo -s ${BR_IP} -d ${BR_IP} -j ACCEPT -$IPT -A OUTPUT -o lo -s ${BR_IP} -d ${BR_IP} -j ACCEPT + #Less noise + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 3030 --sport 1024:65535 -j DROP -#modprobe ip_conntrack -#modprobe ip_conntrack_ftp -echo 1 > /proc/sys/net/ipv4/ip_forward + ####### PostRouting Chain ###### + $IPT -t nat -A POSTROUTING -o ${PRIV_IF} -j MASQUERADE -####### Forward Chain ###### -$IPT -A FORWARD -j blocker -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -s ${BR_NET} -d ${BR_NET} -j ACCEPT -$IPT -A FORWARD -o ${BR_IF} -s ${BR_IP} -d ${BR_NET} -j ACCEPT -#$IPT -A FORWARD -i ${BR_IF} -o ${WIFI_IF} -j ACCEPT -#$IPT -A FORWARD -i ${WIFI_IF} -o ${BR_IF} -j ACCEPT + ## log everything else and drop + iptables_log -####### Input Chain ###### -$IPT -A INPUT -j blocker -$IPT -A INPUT -i ${BR_IF} -j netconf_in -$IPT -A INPUT -i ${BR_IF} -d ${BR_IP} -j srv_dns_in -$IPT -A INPUT -i ${BR_IF} -s ${BR_NET} -d ${BR_IP} -j server_in -#$IPT -A INPUT -i ${WIFI_IF} -d ${WIFI_NET} -j client_in -#$IPT -A INPUT -i ${WIFI_IF} -d ${WIFI_NET} -j cli_dns_in -#$IPT -A INPUT -i ${BR_IF} -d ${BR_IP} -j client_in -# -##$IPT -A INPUT -i ${WIFI_IF} -j server_in -#$IPT -A INPUT -i ${WIFI_IF} -j netconf_in + iptables-save > /etc/iptables/net.v4 + exit 0 + ;; + server) -####### Output Chain ###### -$IPT -A OUTPUT -j blocker -$IPT -A OUTPUT -o ${BR_IF} -j netconf_out -$IPT -A OUTPUT -o ${BR_IF} -s ${BR_IP} -d ${BR_NET} -j srv_dns_out -$IPT -A OUTPUT -o ${BR_IF} -s ${BR_IP} -d ${BR_NET} -j server_out -$IPT -A OUTPUT -o ${BR_IF} -s ${BR_IP} -d ${BR_NET} -j client_out -#$IPT -A OUTPUT -o ${WIFI_IF} -s ${WIFI_NET} -j client_out -#$IPT -A OUTPUT -o ${WIFI_IF} -s ${WIFI_NET} -j cli_dns_out + echo "Setting server network..." + ####### Input Chain ###### + $IPT -A INPUT -j blocker -#$IPT -A OUTPUT -o ${BR_IF} -s ${BR_IP} -j client_out + ####### Output Chain ###### + $IPT -A OUTPUT -j blocker -#$IPT -A OUTPUT -o ${WIFI_IF} -j server_out -#$IPT -A OUTPUT -o ${WIFI_IF} -j netconf_out + ## log everything else and drop + iptables_log -####### PostRouting Chain ###### -$IPT -t nat -A POSTROUTING -o ${WIFI_IF} -j MASQUERADE -#$IPT -t nat -A POSTROUTING -o ${BR_IF} -j MASQUERADE + iptables-save > /etc/iptables/net.v4 + exit 0 -## log everything else and drop -$IPT -A OUTPUT -j LOG --log-level 7 --log-prefix "iptables: OUTPUT: " -$IPT -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " -$IPT -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " -$IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " -$IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " + ;; + *) + echo "usage: $0 [start|stop|restart]" + ;; +esac -iptables-save > /etc/iptables/net.rules -exit 0 -- cgit 1.4.1-2-gfad0 From c440afaf8f47bc53cc841a1587d1c10b12911e64 Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Sun, 6 May 2018 13:37:41 +0100 Subject: iptables, failtoban and dnsmasq revision --- core/scripts/iptables-br.sh | 395 ------------------------------------------ core/scripts/iptables-conf.sh | 9 +- core/scripts/iptables.sh | 37 ++-- tools/dnsmasq.html | 2 +- tools/fail2ban.html | 23 ++- 5 files changed, 53 insertions(+), 413 deletions(-) delete mode 100644 core/scripts/iptables-br.sh (limited to 'core/scripts') diff --git a/core/scripts/iptables-br.sh b/core/scripts/iptables-br.sh deleted file mode 100644 index be1280c..0000000 --- a/core/scripts/iptables-br.sh +++ /dev/null @@ -1,395 +0,0 @@ -#!/bin/sh - -# -# XXXXXXXXXXXXXXXXX -# XXXX Network XXXX -# XXXXXXXXXXXXXXXXX -# + -# | -# v -# +-------------+ +------------------+ -# |table: filter| <---+ | table: nat | -# |chain: INPUT | | | chain: PREROUTING| -# +-----+-------+ | +--------+---------+ -# | | | -# v | v -# [local process] | **************** +--------------+ -# | +---------+ Routing decision +------> |table: filter | -# v **************** |chain: FORWARD| -# **************** +------+-------+ -# Routing decision | -# **************** | -# | | -# v **************** | -# +-------------+ +------> Routing decision <---------------+ -# |table: nat | | **************** -# |chain: OUTPUT| | + -# +-----+-------+ | | -# | | v -# v | +-------------------+ -# +--------------+ | | table: nat | -# |table: filter | +----+ | chain: POSTROUTING| -# |chain: OUTPUT | +--------+----------+ -# +--------------+ | -# v -# XXXXXXXXXXXXXXXXX -# XXXX Network XXXX -# XXXXXXXXXXXXXXXXX -# -# iptables [-t table] {-A|-C|-D} chain rule-specification -# -# iptables [-t table] {-A|-C|-D} chain rule-specification -# -# iptables [-t table] -I chain [rulenum] rule-specification -# -# iptables [-t table] -R chain rulenum rule-specification -# -# iptables [-t table] -D chain rulenum -# -# iptables [-t table] -S [chain [rulenum]] -# -# iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] -# -# iptables [-t table] -N chain -# -# iptables [-t table] -X [chain] -# -# iptables [-t table] -P chain target -# -# iptables [-t table] -E old-chain-name new-chain-name -# -# rule-specification = [matches...] [target] -# -# match = -m matchname [per-match-options] -# -# -# Targets -# -# can be a user defined chain -# -# ACCEPT - accepts the packet -# DROP - drop the packet on the floor -# QUEUE - packet will be stent to queue -# RETURN - stop traversing this chain and -# resume ate the next rule in the -# previeus (calling) chain. -# -# if packet reach the end of the chain or -# a target RETURN, default policy for that -# chain is applayed. -# -# Target Extensions -# -# AUDIT -# CHECKSUM -# CLASSIFY -# DNAT -# DSCP -# LOG -# Torn on kernel logging, will print some -# some information on all matching packets. -# Log data can be read with dmesg or syslogd. -# This is a non-terminating target and a rule -# should be created with matching criteria. -# -# --log-level level -# Level of logging (numeric or see sys- -# log.conf(5) -# -# --log-prefix prefix -# Prefix log messages with specified prefix -# up to 29 chars log -# -# --log-uid -# Log the userid of the process with gener- -# ated the packet -# NFLOG -# This target pass the packet to loaded logging -# backend to log the packet. One or more userspace -# processes may subscribe to the group to receive -# the packets. -# -# ULOG -# This target provides userspace logging of maching -# packets. One or more userspace processes may then -# then subscribe to various multicast groups and -# then receive the packets. -# -# -# Commands -# -# -A, --append chain rule-specification -# -C, --check chain rule-specification -# -D, --delete chain rule-specification -# -D, --delete chain rulenum -# -I, --insert chain [rulenum] rule-specification -# -R, --replace chain rulenum rule-specification -# -L, --list [chain] -# -P, --policy chain target -# -# Parameters -# -# -p, --protocol protocol -# tcp, udp, udplite, icmp, esp, ah, sctp, all -# -s, --source address[/mask][,...] -# -d, --destination address[/mask][,...] -# -j, --jump target -# -g, --goto chain -# -i, --in-interface name -# -o, --out-interface name -# -f, --fragment -# -m, --match options module-name -# iptables can use extended packet matching -# modules. -# -c, --set-counters packets bytes - -IPT="/usr/sbin/iptables" -SPAMLIST="blockedip" -SPAMDROPMSG="BLOCKED IP DROP" -# public interface to network/internet -#PUB_IF="wlp7s0" -PUB_IF="enp8s0" -BR_IF="br0" -PUB_IP="10.0.0.254" -NET_ADDR="10.0.0.0/8" -GW="10.0.0.1" -# private interface for virtual/internal -PRIV_IF="wlp7s0" -PRIV_IP="192.168.1.33" - -echo "Stopping ipv4 firewall and deny everyone..." - -iptables -F -iptables -X -iptables -t nat -F -iptables -t nat -X -iptables -t mangle -F -iptables -t mangle -X -iptables -t raw -F -iptables -t raw -X -iptables -t security -F -iptables -t security -X -iptables -N blocker - -iptables -N netconf_in -iptables -N netconf_out -iptables -N server_in -iptables -N server_out -iptables -N client_in -iptables -N client_out - -# Set Default Rules -iptables -P INPUT DROP -iptables -P FORWARD DROP -iptables -P OUTPUT DROP - -echo "Starting ipv4 firewall tables..." -# Unlimited on loopback -$IPT -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -$IPT -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -$IPT -A INPUT -i lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT -$IPT -A OUTPUT -o lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT - -#modprobe ip_conntrack -#modprobe ip_conntrack_ftp -#echo 1 > /proc/sys/net/ipv4/ip_forward - -####### blocker Chain ###### -## Block google dns -$IPT -A blocker -s 8.8.0.0/24 -j LOG --log-level 7 --log-prefix "iptables: blocker google: " -$IPT -A blocker -s 8.8.0.0/24 -j DROP -## Block sync -$IPT -A blocker -p tcp ! --syn -m state --state NEW -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 7 --log-prefix "iptables: drop sync: " -$IPT -A blocker -p tcp ! --syn -m state --state NEW -j DROP -## Block Fragments -$IPT -A blocker -f -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop frag: " -$IPT -A blocker -f -j DROP - -$IPT -A blocker -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP -$IPT -A blocker -p tcp --tcp-flags ALL ALL -j DROP - -$IPT -A blocker -p tcp --tcp-flags ALL NONE -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop null: " -$IPT -A blocker -p tcp --tcp-flags ALL NONE -j DROP # NULL packets - -$IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop syn rst syn rst: " -$IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -j DROP - -$IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop xmas: " -$IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP #XMAS - -$IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop fin scan: " -$IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -j DROP # FIN packet scans - -$IPT -A blocker -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP -## Return to caller -$IPT -A blocker -j RETURN - -####### server input Chain ###### -#echo "server_in chain: Allow to VNC Server" -#$IPT -A server_in -p tcp --dport 5900 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -#echo "server_in chain: Allow to DataBase Server" -#$IPT -A server_in -p tcp --dport 5432 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -#echo "server_in chain: Allow to SSH server" -#$IPT -A server_in -p tcp --dport 2222 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -#echo "server_in chain: Allow input to HTTPS Server" -#$IPT -A server_in -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -#echo "server_in chain: Allow input to HTTP Server" -#$IPT -A server_in -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "server_in chain: Allow input to DNS Server" -$IPT -A server_in -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A server_in -p tcp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -#echo "server_in chain: Allow input to GIT server" -#$IPT -A server_in -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - -## Return to caller -$IPT -A server_in -j RETURN - -####### server output Chain ###### -echo "server_out chain: Allow output from DNS server" -$IPT -A server_out -p udp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -$IPT -A server_out -p tcp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -#echo "server_out chain: Allow output from GIT server" -#$IPT -A server_out -p tcp --sport 9418 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -#echo "server_out chain: Allow output from https server" -#$IPT -A server_out -p tcp --sport 443 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -#echo "server_out chain: Allow output from http server" -#$IPT -A server_out -p tcp --sport 80 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT -#echo "server_out chain: Allow output from SSH server" -#$IPT -A server_out -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -#echo "server_out chain: Allow output from Data Base server" -#$IPT -A server_out -p tcp --sport 5432 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -#echo "server_out chain: Allow output from VNC server" -#$IPT -A server_out -p tcp --sport 5900 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT - -## Return to caller -$IPT -A server_out -j RETURN - -####### client input Chain ###### -echo "client_in chain: Allow input from IRC server" -$IPT -A client_in -p tcp --sport 6667 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from FTP server" -$IPT -A client_in -p tcp --sport 21 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from GIT server" -$IPT -A client_in -p tcp --sport 9418 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from POP3S server" -$IPT -A client_in -p tcp --sport 995 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from SMTPS server" -$IPT -A client_in -p tcp --sport 465 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from HTTP Server" -$IPT -A client_in -p tcp --sport 80 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from HTTPS server" -$IPT -A client_in -p tcp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -#$IPT -A client_in -p udp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from DNS Server" -$IPT -A client_in -p udp --sport 53 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from SSH Server" -$IPT -A client_in -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -$IPT -A client_in -p tcp --sport 22 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT -echo "client_in chain: Allow input from GPG key Server" -$IPT -A client_in -p tcp --sport 11371 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - -## Return to caller -$IPT -A client_in -j RETURN - -####### client output Chain ###### -echo "client_out chain: Allow output to IRC server" -$IPT -A client_out -p tcp --dport 6667 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to FTP server" -$IPT -A client_out -p tcp --dport 21 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to GIT server" -$IPT -A client_out -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to POP3S server" -$IPT -A client_out -p tcp --dport 995 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to SMTPS server" -$IPT -A client_out -p tcp --dport 465 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to HTTPS server" -$IPT -A client_out -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A client_out -p udp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "Allow to HTTP server" -$IPT -A client_out -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to DNS server" -$IPT -A client_out -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to SSH server" -$IPT -A client_out -p tcp --dport 2222 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -$IPT -A client_out -p tcp --dport 22 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT -echo "client_out chain: Allow output to GPG key Server" -$IPT -A client_out -p tcp --dport 11371 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - -## Return to caller -$IPT -A client_out -j RETURN - -####### netconf input Chain ###### -echo "netconf_in chain: Allow DHCP protocol" -$IPT -A netconf_in -p udp --sport 68 --dport 67 -j ACCEPT -echo "netconf_in chain: Allow RIP protocol for ${NET_ADDR}" -$IPT -A netconf_in -p udp --sport 520 --dport 520 -s ${NET_ADDR} -d ${NET_ADDR} -j ACCEPT -#echo "netconf chain: Allow ICMP from ${NET_ADDR}" -#$IPT -A netconf_in -p icmp -s ${NET_ADDR} -j ACCEPT -echo "netconf_in chain: Allow ICMP from all" -$IPT -A netconf_in -p icmp -j LOG --log-level 7 --log-prefix "iptables: netconf_in ICMP: " -$IPT -A netconf_in -p icmp -j ACCEPT - -## Return to caller -$IPT -A netconf_in -j RETURN - - -####### netconf output Chain ###### -echo "netconf_out chain: Allow output from DHCP server" -$IPT -A netconf_out -p udp --sport 67 --dport 68 -s ${NET_ADDR} -d ${NET_ADDR} -j ACCEPT -echo "netconf_out chain: Allow RIP protocol for ${NET_ADDR}" -$IPT -A netconf_out -p udp --sport 520 --dport 520 -s ${NET_ADDR} -d ${NET_ADDR} -j ACCEPT -#echo "netconf chain: Allow ICMP output to ${NET_ADDR}" -#$IPT -A netconf_out -p icmp -d ${NET_ADDR} -j ACCEPT -echo "netconf chain: Allow ICMP output to all" -$IPT -A netconf_out -p icmp -j LOG --log-level 7 --log-prefix "iptables: netconf_out ICMP: " -$IPT -A netconf_out -p icmp -j ACCEPT - -## Return to caller -$IPT -A netconf_out -j RETURN - -####### AP rules ###### -#$IPT -t nat -A PREROUTING -i ${BR_IF} -p tcp --dport 80 -j DNAT --to 10.0.0.4:80 - -$IPT -A FORWARD -j blocker -#$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -s ${NET_ADDR} -d ${NET_ADDR} -j ACCEPT -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -j netconf_in -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -j netconf_out -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -d ${NET_ADDR} -j client_in -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -s ${NET_ADDR} -j client_out -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -d ${NET_ADDR} -j server_in -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -s ${NET_ADDR} -j server_out - -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -d ${NET_ADDR} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j ACCEPT - -$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j ACCEPT - -#$IPT -A FORWARD -j server_in - -#$IPT -t nat -A POSTROUTING -o ${BR_IF} -j SNAT --to ${PUB_IP} - -####### Input Chain ###### -$IPT -A INPUT -j blocker - -$IPT -A INPUT -i ${BR_IF} -s ${NET_ADDR} -d ${PUB_IP} -j server_in -$IPT -A INPUT -i ${BR_IF} -d ${NET_ADDR} -j client_in -$IPT -A INPUT -i ${BR_IF} -j netconf_in - -#$IPT -A INPUT -i ${PUB_IF} -d ${NET_ADDR} -j client_in - -####### Output Chain ###### -$IPT -A OUTPUT -j blocker - -$IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${NET_ADDR} -j server_out -$IPT -A OUTPUT -o ${BR_IF} -s ${NET_ADDR} -j client_out -$IPT -A OUTPUT -o ${BR_IF} -j netconf_out - - -#$IPT -A OUTPUT -o ${PUB_IF} -s ${NET_ADDR} -j client_out - -## log everything else and drop -$IPT -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " -$IPT -A OUTPUT -j LOG --log-level 7 --log-prefix "iptables: OUTPUT: " -$IPT -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " - -iptables-save > /etc/iptables/br-lan.v4 -exit 0 diff --git a/core/scripts/iptables-conf.sh b/core/scripts/iptables-conf.sh index cd3185b..04e804b 100644 --- a/core/scripts/iptables-conf.sh +++ b/core/scripts/iptables-conf.sh @@ -59,7 +59,6 @@ iptables_clear () { iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP - } iptables_log () { @@ -120,11 +119,11 @@ iptables_tables () { $IPT -A srv_ssh_in -p tcp --dport 2222 -m state --state NEW -m recent --set --name SSH -j ACCEPT $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent \ - --update --seconds 60 --hitcount 4 --rttl \ - --name SSH -j LOG --log-prefix "${SPAMDROPMSG} SSH" + --update --seconds 60 --hitcount 4 --rttl \ + --name SSH -j LOG --log-prefix "${SPAMDROPMSG} SSH" $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent --update --seconds 60 \ - --hitcount 4 --rttl --name SSH -j DROP + --hitcount 4 --rttl --name SSH -j DROP $IPT -A srv_ssh_in -p tcp --dport 2222 --sport 1024:65535 -m state --state ESTABLISHED -j ACCEPT @@ -217,6 +216,8 @@ iptables_tables () { ######## DHCP Server $IPT -A srv_dhcp -p udp --sport 68 --dport 67 -j ACCEPT + $IPT -A srv_dhcp -p udp --sport 67 --dport 68 -j ACCEPT + $IPT -A srv_dhcp -p udp --sport 67 --dport 67 -j ACCEPT $IPT -A srv_dhcp -j RETURN ####### RIP Server diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 9c6cb87..6efdcc6 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -31,43 +31,60 @@ $IPT -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT $IPT -A INPUT -i lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT $IPT -A OUTPUT -o lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT - iptables_tables case $TYPE in bridge) echo "Setting bridge network..." - echo 1 > /proc/sys/net/ipv4/ip_forward + + ####### NAT Prerouting Chain ###### + #PREROUTING: IN=br0 OUT= PHYSIN=tap2 MAC=ff:ff:ff:ff:ff:ff:54:60:be:ef:5c:14:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=377 TOS=0x00 PREC=0x00 TTL=64 ID=37544 PROTO=UDP SPT=68 DPT=67 LEN=357 + ####### Forward Chain ###### $IPT -A FORWARD -j blocker - #$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -d ${NET_ADDR} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j ACCEPT - #$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap0 --physdev-out ${PUB_IF} -j srv_ssh_out + $IPT -A FORWARD -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + $IPT -A FORWARD -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_in $IPT -A FORWARD -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_rip + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_dhcp + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_dhcp + #$IPT -A FORWARD -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_ssh_out + ####### Input Chain ###### $IPT -A INPUT -j blocker + #Less noise + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -p tcp --sport 3030 --dport 1024:65535 -j DROP + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_dns_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_https_in - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_ssh_in - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -p tcp --sport 3030 --dport 1024:65535 -j DROP + $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap2 -j srv_dhcp + $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in ${PUB_IF} -s ${GW} -d ${PUB_IP} -j srv_dhcp ####### Output Chain ###### $IPT -A OUTPUT -j blocker + #Less noise + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 3030 --sport 1024:65535 -j DROP + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_dns_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out - - #Less noise - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 3030 --sport 1024:65535 -j DROP + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j srv_dhcp ####### PostRouting Chain ###### - $IPT -t nat -A POSTROUTING -o ${PRIV_IF} -j MASQUERADE + #May 6 11:31:45 c9 kernel: iptables: POSTROUTING: IN= OUT=br0 PHYSIN=tap2 PHYSOUT=enp8s0 SRC=0.0.0.0 DST=255.255.255.255 LEN=377 TOS=0x00 PREC=0x00 TTL=64 ID=37544 PROTO=UDP SPT=68 DPT=67 LEN=357 + + $IPT -t nat -A POSTROUTING -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + + + #$IPT -t nat -A POSTROUTING -o ${PRIV_IF} -j MASQUERADE ## log everything else and drop iptables_log diff --git a/tools/dnsmasq.html b/tools/dnsmasq.html index 720979b..0938cc0 100644 --- a/tools/dnsmasq.html +++ b/tools/dnsmasq.html @@ -69,7 +69,7 @@

This is part of the c9-doc Manual. - Copyright (C) 2016 + Copyright (C) 2018 c9 team. See the file Gnu Free Documentation License for copying conditions.

diff --git a/tools/fail2ban.html b/tools/fail2ban.html index 9fad021..0238635 100644 --- a/tools/fail2ban.html +++ b/tools/fail2ban.html @@ -2,10 +2,13 @@ - 1. Fail2ban + Fail2ban -

1. Fail2ban

+ + Tools Index + +

Fail2ban

        $ prt-get depinst fail2ban
@@ -33,5 +36,19 @@
                   logpath  = /var/log/auth
                   maxretry = 5
        
- + +

Test a filter

+ +
+        # fail2ban-regex /var/log/iptables iptables-ssh.conf
+        
+ + Tools Index + +

+ This is part of the c9-doc Manual. + Copyright (C) 2018 + c9 team. + See the file Gnu Free Documentation License for copying conditions.

+ -- cgit 1.4.1-2-gfad0 From 1bfea776374a665e4e2fd70aa74a145976c4034e Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Sun, 6 May 2018 14:06:13 +0100 Subject: iptables server revision --- core/scripts/iptables-conf.sh | 2 -- core/scripts/iptables.sh | 25 +++++++++++++++++++++---- 2 files changed, 21 insertions(+), 6 deletions(-) (limited to 'core/scripts') diff --git a/core/scripts/iptables-conf.sh b/core/scripts/iptables-conf.sh index 04e804b..726539e 100644 --- a/core/scripts/iptables-conf.sh +++ b/core/scripts/iptables-conf.sh @@ -66,8 +66,6 @@ iptables_log () { $IPT -A OUTPUT -j LOG --log-level 7 --log-prefix "iptables: OUTPUT: " $IPT -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " $IPT -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " - $IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " - $IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " } diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 6efdcc6..3824dab 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -1,6 +1,7 @@ #!/bin/bash TYPE=bridge +#TYPE=server IPT="/usr/sbin/iptables" SPAMLIST="blockedip" @@ -10,13 +11,14 @@ SPAMDROPMSG="BLOCKED IP DROP" BR_IF="br0" BR_NET="10.0.0.0/8" GW="10.0.0.1" +DNS="10.0.0.254" PUB_IP="10.0.0.254" PUB_IF="enp8s0" # private interface for virtual/internal -PRIV_IF="wlp7s0" -PRIV_NET="192.168.1.0/24" +#PRIV_IF="wlp7s0" +#PRIV_NET="192.168.1.0/24" #$IPT -A netconf_in -p icmp -s ${BR_NET} -j ACCEPT @@ -63,6 +65,8 @@ case $TYPE in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_dns_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_https_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_git_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_ssh_in $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap2 -j srv_dhcp @@ -76,11 +80,11 @@ case $TYPE in $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_dns_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_git_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j srv_dhcp ####### PostRouting Chain ###### - #May 6 11:31:45 c9 kernel: iptables: POSTROUTING: IN= OUT=br0 PHYSIN=tap2 PHYSOUT=enp8s0 SRC=0.0.0.0 DST=255.255.255.255 LEN=377 TOS=0x00 PREC=0x00 TTL=64 ID=37544 PROTO=UDP SPT=68 DPT=67 LEN=357 - $IPT -t nat -A POSTROUTING -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT @@ -89,6 +93,9 @@ case $TYPE in ## log everything else and drop iptables_log + $IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " + $IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " + iptables-save > /etc/iptables/net.v4 exit 0 ;; @@ -98,9 +105,19 @@ case $TYPE in ####### Input Chain ###### $IPT -A INPUT -j blocker + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${DNS} -j cli_dns_in + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_https_in + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_ssh_in + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_git_in + ####### Output Chain ###### $IPT -A OUTPUT -j blocker + $IPT -A OUTPUT -o ${PUB_IF} -d ${DNS} -s ${PUB_IP} -j cli_dns_out + $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_https_out + $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_ssh_out + $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_git_out + ## log everything else and drop iptables_log -- cgit 1.4.1-2-gfad0 From 807e672437b0da7e9c3afd51e7d863515118c3ef Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Sun, 6 May 2018 14:26:55 +0100 Subject: added dns server to brigde --- core/scripts/iptables.sh | 3 +++ 1 file changed, 3 insertions(+) (limited to 'core/scripts') diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 3824dab..5d09f00 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -69,6 +69,8 @@ case $TYPE in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_ssh_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap2 -j srv_dns_in + $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap2 -j srv_dhcp $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in ${PUB_IF} -s ${GW} -d ${PUB_IP} -j srv_dhcp @@ -83,6 +85,7 @@ case $TYPE in $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_git_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j srv_dhcp + $IPT -A OUTPUT -o ${BR_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_dns_out ####### PostRouting Chain ###### $IPT -t nat -A POSTROUTING -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -- cgit 1.4.1-2-gfad0 From d476ab5f420b2f1b3c81d65856ecd7113976391b Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Sun, 6 May 2018 14:31:35 +0100 Subject: added https client to server iptables --- core/scripts/iptables.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'core/scripts') diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 5d09f00..41ce988 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -90,7 +90,6 @@ case $TYPE in ####### PostRouting Chain ###### $IPT -t nat -A POSTROUTING -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT - #$IPT -t nat -A POSTROUTING -o ${PRIV_IF} -j MASQUERADE ## log everything else and drop @@ -112,6 +111,7 @@ case $TYPE in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_https_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_ssh_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_git_in + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -j cli_https_in ####### Output Chain ###### $IPT -A OUTPUT -j blocker @@ -120,6 +120,7 @@ case $TYPE in $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_https_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_ssh_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_git_out + $IPT -A OUTPUT -o ${PUB_IF} -s ${PUB_IP} -j cli_https_out ## log everything else and drop iptables_log -- cgit 1.4.1-2-gfad0 From a34bc1f0a639d73d644a448ac8b4cf5e2614e018 Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Sun, 6 May 2018 15:05:18 +0100 Subject: allow client https to tap2 --- core/scripts/iptables.sh | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'core/scripts') diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 41ce988..0f05b1f 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -54,9 +54,12 @@ case $TYPE in $IPT -A FORWARD -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_rip + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_dhcp $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_dhcp - #$IPT -A FORWARD -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_ssh_out + + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j cli_https_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j cli_https_in ####### Input Chain ###### $IPT -A INPUT -j blocker @@ -78,6 +81,7 @@ case $TYPE in $IPT -A OUTPUT -j blocker #Less noise $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 3030 --sport 1024:65535 -j DROP + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 80 --sport 1024:65535 -j DROP $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_dns_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out -- cgit 1.4.1-2-gfad0 From f5a5ccbf1af61c4a70695b01187c32fd5ead2e76 Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Tue, 12 Jun 2018 00:09:06 +0100 Subject: network, iptables, sshd config fix's --- core/network.html | 66 +++++++- core/scripts/iptables-conf.sh | 247 +++------------------------- core/scripts/iptables.sh | 364 +++++++++++++++++++++++++++++++++++------ tools/conf/etc/ssh/sshd_config | 21 ++- tools/scripts/pkgmk-test.conf | 2 +- 5 files changed, 404 insertions(+), 296 deletions(-) (limited to 'core/scripts') diff --git a/core/network.html b/core/network.html index 3f8a870..657cd31 100644 --- a/core/network.html +++ b/core/network.html @@ -138,6 +138,12 @@ SERVICES=(iptables lo net crond) +

See current rules and packets counts;

+ +
+        # iptables -L -n -v | less
+        
+

Diagram of a package route throw iptables;

@@ -285,25 +291,67 @@
         

Adjust iptables.sh with your network configuration then run it;

+

Default configuration;

+
-        # bash core/scripts/iptables.sh
+    server)
+
+        echo "Setting server network..."
+        ####### Input Chain ######
+        $IPT -A INPUT -j blocker
+
+	$IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${DNS} -j cli_dns_in
+	$IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_https_in
+	$IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_ssh_in
+	$IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_git_in
+	$IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -j cli_https_in
+
+        ####### Output Chain ######
+        $IPT -A OUTPUT -j blocker
+
+	$IPT -A OUTPUT -o ${PUB_IF} -d ${DNS} -s ${PUB_IP} -j cli_dns_out
+	$IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_https_out
+	$IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_ssh_out
+	$IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_git_out
+	$IPT -A OUTPUT -o ${PUB_IF} -s ${PUB_IP} -j cli_https_out
+
+        ## log everything else and drop
+        iptables_log
+
+        iptables-save > /etc/iptables/net.v4
+        exit 0
+
+        ;;
         
-

- iptables.sh with your needs and run - to save rules in /etc/iptables/net.v4 - file.

+
+        # bash core/scripts/iptables.sh
+        

2.3.3.2. Client iptables

2.3.3.3. Bridge iptables

-

See current rules and packets;

-
-        # iptables -L -n -v | less
-        
+ $IPT -A FORWARD -j blocker + $IPT -A FORWARD -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + $IPT -A FORWARD -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -d ${BR_NET} -j srv_ssh_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_ssh_out + + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_https_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_https_out + + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_rip + + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_dhcp + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_dhcp + + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j cli_https_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j cli_https_in +
 
         

2.3.4. Wpa and dhcpd

diff --git a/core/scripts/iptables-conf.sh b/core/scripts/iptables-conf.sh index 726539e..478ce08 100644 --- a/core/scripts/iptables-conf.sh +++ b/core/scripts/iptables-conf.sh @@ -1,228 +1,21 @@ #!/bin/bash - - - -iptables_clear () { - echo "clear all iptables tables" - - iptables -F - iptables -X - iptables -t nat -F - iptables -t nat -X - iptables -t mangle -F - iptables -t mangle -X - iptables -t raw -F - iptables -t raw -X - iptables -t security -F - iptables -t security -X - iptables -N blocker - - iptables -N srv_dhcp - iptables -N srv_rip - iptables -N srv_icmp - iptables -N srv_dns_in - iptables -N srv_dns_out - iptables -N srv_http_in - iptables -N srv_http_out - iptables -N srv_https_in - iptables -N srv_https_out - iptables -N srv_ssh_in - iptables -N srv_ssh_out - iptables -N srv_git_in - iptables -N srv_git_out - iptables -N srv_db_in - iptables -N srv_db_out - - - iptables -N cli_dns_in - iptables -N cli_dns_out - iptables -N cli_http_in - iptables -N cli_http_out - iptables -N cli_https_in - iptables -N cli_https_out - iptables -N cli_ssh_in - iptables -N cli_ssh_out - iptables -N cli_pops_in - iptables -N cli_pops_out - iptables -N cli_smtps_in - iptables -N cli_smtps_out - iptables -N cli_irc_in - iptables -N cli_irc_out - iptables -N cli_ftp_in - iptables -N cli_ftp_out - iptables -N cli_git_in - iptables -N cli_git_out - iptables -N cli_gpg_in - iptables -N cli_gpg_out - - # Set Default Rules - iptables -P INPUT DROP - iptables -P FORWARD DROP - iptables -P OUTPUT DROP -} - -iptables_log () { - ## log everything else and drop - $IPT -A OUTPUT -j LOG --log-level 7 --log-prefix "iptables: OUTPUT: " - $IPT -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " - $IPT -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " -} - - -iptables_tables () { - echo "start adding tables..." - - ####### blocker Chain ###### - ## Block google dns - $IPT -A blocker -s 8.8.0.0/24 -j LOG --log-level 7 --log-prefix "iptables: blocker google: " - $IPT -A blocker -s 8.8.0.0/24 -j DROP - ## Block sync - $IPT -A blocker -p tcp ! --syn -m state --state NEW -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 7 --log-prefix "iptables: drop sync: " - $IPT -A blocker -p tcp ! --syn -m state --state NEW -j DROP - ## Block Fragments - $IPT -A blocker -f -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop frag: " - $IPT -A blocker -f -j DROP - $IPT -A blocker -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP - $IPT -A blocker -p tcp --tcp-flags ALL ALL -j DROP - $IPT -A blocker -p tcp --tcp-flags ALL NONE -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop null: " - $IPT -A blocker -p tcp --tcp-flags ALL NONE -j DROP # NULL packets - $IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop syn rst syn rst: " - $IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -j DROP - $IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop xmas: " - $IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP #XMAS - $IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop fin scan: " - $IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -j DROP # FIN packet scans - $IPT -A blocker -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP - ## Return to caller - $IPT -A blocker -j RETURN - - ######## DNS Server - #echo "server_in chain: Allow input to DNS Server" - $IPT -A srv_dns_in -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A srv_dns_in -p tcp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A srv_dns_in -j RETURN - #echo "srv_dns_out chain: Allow output from DNS server" - $IPT -A srv_dns_out -p udp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT - $IPT -A srv_dns_out -p tcp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT - $IPT -A srv_dns_out -j RETURN - - ####### Database Server - $IPT -A srv_db_in -p tcp --dport 5432 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A srv_db_in -j RETURN - $IPT -A srv_db_out -p tcp --sport 5432 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A srv_db_out -j RETURN - - ####### SSH Server - - $IPT -A srv_ssh_in -p tcp --dport 2222 -m state --state NEW -m recent --set --name SSH -j ACCEPT - - $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent \ - --update --seconds 60 --hitcount 4 --rttl \ - --name SSH -j LOG --log-prefix "${SPAMDROPMSG} SSH" - - $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent --update --seconds 60 \ - --hitcount 4 --rttl --name SSH -j DROP - - $IPT -A srv_ssh_in -p tcp --dport 2222 --sport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - - $IPT -A srv_ssh_in -j RETURN - $IPT -A srv_ssh_out -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A srv_ssh_out -j RETURN - - ####### HTTP Server - $IPT -A srv_http_in -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A srv_http_in -j RETURN - $IPT -A srv_http_out -p tcp --sport 80 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT - $IPT -A srv_http_out -j RETURN - - ####### HTTPS Server - $IPT -A srv_https_in -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A srv_https_in -j RETURN - $IPT -A srv_https_out -p tcp --sport 443 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT - $IPT -A srv_https_out -j RETURN - - ###### GIT server - $IPT -A srv_git_in -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A srv_git_in -j RETURN - $IPT -A srv_git_out -p tcp --sport 9418 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT - $IPT -A srv_git_out -j RETURN - - ######## DNS Client - $IPT -A cli_dns_out -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_dns_out -j RETURN - $IPT -A cli_dns_in -p udp --sport 53 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_dns_in -j RETURN - - ######## HTTP Client - $IPT -A cli_http_in -p tcp --sport 80 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_http_in -j RETURN - $IPT -A cli_http_out -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_http_out -j RETURN - - - ######## IRC client - $IPT -A cli_irc_in -p tcp --sport 6667 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_irc_in -j RETURN - $IPT -A cli_irc_out -p tcp --dport 6667 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_irc_out -j RETURN - - ######## FTP client - - $IPT -A cli_ftp_in -p tcp --sport 21 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_ftp_in -j RETURN - $IPT -A cli_ftp_out -p tcp --dport 21 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_ftp_out -j RETURN - ######## GIT client - $IPT -A cli_git_in -p tcp --sport 9418 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_git_in -j RETURN - $IPT -A cli_git_out -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_git_out -j RETURN - - ######## POP3S client - $IPT -A cli_pops_in -p tcp --sport 995 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_pops_in -j RETURN - $IPT -A cli_pops_out -p tcp --dport 995 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_pops_out -j RETURN - - ######## SMTPS client - $IPT -A cli_smtps_in -p tcp --sport 465 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_smtps_in -j RETURN - $IPT -A cli_smtps_out -p tcp --dport 465 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_smtps_out -j RETURN - - ######## HTTPS client - $IPT -A cli_https_in -p tcp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_https_in -p udp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_https_in -j RETURN - $IPT -A cli_https_out -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_https_out -p udp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_https_out -j RETURN - - ######## SSH client - $IPT -A cli_ssh_in -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_ssh_in -p tcp --sport 22 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_ssh_in -j RETURN - $IPT -A cli_ssh_out -p tcp --dport 2222 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_ssh_out -p tcp --dport 22 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_ssh_out -j RETURN - - ######## GPG key client - $IPT -A cli_gpg_in -p tcp --sport 11371 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT - $IPT -A cli_gpg_in -j RETURN - $IPT -A cli_gpg_out -p tcp --dport 11371 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT - $IPT -A cli_gpg_out -j RETURN - - ######## DHCP Server - $IPT -A srv_dhcp -p udp --sport 68 --dport 67 -j ACCEPT - $IPT -A srv_dhcp -p udp --sport 67 --dport 68 -j ACCEPT - $IPT -A srv_dhcp -p udp --sport 67 --dport 67 -j ACCEPT - $IPT -A srv_dhcp -j RETURN - - ####### RIP Server - $IPT -A srv_rip -p udp --sport 520 --dport 520 -j ACCEPT - $IPT -A srv_rip -j RETURN - - ####### ICMP Server - $IPT -A srv_icmp -p icmp -j ACCEPT - $IPT -A srv_icmp -j RETURN -} +TYPE=bridge +#TYPE=server + +IPT="/usr/sbin/iptables" +SPAMLIST="blockedip" +SPAMDROPMSG="BLOCKED IP DROP" + +# public interface to network/internet +BR_IF="br0" +BR_NET="10.0.0.0/8" +GW="10.0.0.1" +#DNS="10.0.0.254" +DNS="212.55.154.174" + +PUB_IP="10.0.0.254" +PUB_IF="enp8s0" + +# private interface for virtual/internal +#PRIV_IF="wlp7s0" +#PRIV_NET="192.168.1.0/24" diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 0f05b1f..2b4d68a 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -1,66 +1,296 @@ #!/bin/bash -TYPE=bridge -#TYPE=server - -IPT="/usr/sbin/iptables" -SPAMLIST="blockedip" -SPAMDROPMSG="BLOCKED IP DROP" - -# public interface to network/internet -BR_IF="br0" -BR_NET="10.0.0.0/8" -GW="10.0.0.1" -DNS="10.0.0.254" - -PUB_IP="10.0.0.254" -PUB_IF="enp8s0" - -# private interface for virtual/internal -#PRIV_IF="wlp7s0" -#PRIV_NET="192.168.1.0/24" - -#$IPT -A netconf_in -p icmp -s ${BR_NET} -j ACCEPT - -#$IPT -A netconf_out -p icmp -d ${BR_NET} -j ACCEPT - -source iptables-conf.sh - -iptables_clear -# Unlimited on loopback -$IPT -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -$IPT -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -$IPT -A INPUT -i lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT -$IPT -A OUTPUT -o lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT - -iptables_tables +source /etc/iptables/iptables-conf.sh + +iptables_clear () { + echo "clear all iptables tables" + + iptables -F + iptables -X + iptables -t nat -F + iptables -t nat -X + iptables -t mangle -F + iptables -t mangle -X + iptables -t raw -F + iptables -t raw -X + iptables -t security -F + iptables -t security -X + iptables -N blocker + + iptables -N srv_dhcp + iptables -N srv_rip + iptables -N srv_icmp + iptables -N srv_dns_in + iptables -N srv_dns_out + iptables -N srv_http_in + iptables -N srv_http_out + iptables -N srv_https_in + iptables -N srv_https_out + iptables -N srv_ssh_in + iptables -N srv_ssh_out + iptables -N srv_git_in + iptables -N srv_git_out + iptables -N srv_db_in + iptables -N srv_db_out + + + iptables -N cli_dns_in + iptables -N cli_dns_out + iptables -N cli_http_in + iptables -N cli_http_out + iptables -N cli_https_in + iptables -N cli_https_out + iptables -N cli_ssh_in + iptables -N cli_ssh_out + iptables -N cli_pops_in + iptables -N cli_pops_out + iptables -N cli_smtps_in + iptables -N cli_smtps_out + iptables -N cli_irc_in + iptables -N cli_irc_out + iptables -N cli_ftp_in + iptables -N cli_ftp_out + iptables -N cli_git_in + iptables -N cli_git_out + iptables -N cli_gpg_in + iptables -N cli_gpg_out + + # Set Default Rules + iptables -P INPUT DROP + iptables -P FORWARD DROP + iptables -P OUTPUT DROP +} + +iptables_log () { + ## log everything else and drop + $IPT -A OUTPUT -j LOG --log-level 7 --log-prefix "iptables: OUTPUT: " + $IPT -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " + $IPT -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " +} + + +iptables_tables () { + echo "start adding tables..." + + ####### blocker Chain ###### + ## Block google dns + $IPT -A blocker -s 8.8.0.0/24 -j LOG --log-level 7 --log-prefix "iptables: blocker google: " + $IPT -A blocker -s 8.8.0.0/24 -j DROP + ## Block sync + $IPT -A blocker -p tcp ! --syn -m state --state NEW -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 7 --log-prefix "iptables: drop sync: " + $IPT -A blocker -p tcp ! --syn -m state --state NEW -j DROP + ## Block Fragments + $IPT -A blocker -f -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop frag: " + $IPT -A blocker -f -j DROP + $IPT -A blocker -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP + $IPT -A blocker -p tcp --tcp-flags ALL ALL -j DROP + $IPT -A blocker -p tcp --tcp-flags ALL NONE -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop null: " + $IPT -A blocker -p tcp --tcp-flags ALL NONE -j DROP # NULL packets + $IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop syn rst syn rst: " + $IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -j DROP + $IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop xmas: " + $IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP #XMAS + $IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "iptables: drop fin scan: " + $IPT -A blocker -p tcp --tcp-flags FIN,ACK FIN -j DROP # FIN packet scans + $IPT -A blocker -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP + #$IPT -A blocker -p tcp --tcp-flags ACK,FIN FIN -j DROP + #$IPT -A blocker -p tcp --tcp-flags ACK,PSH PSH -j DROP + #$IPT -A blocker -p tcp --tcp-flags ACK,URG URG -j DROP + #$IPT -A blocker -p tcp --tcp-flags FIN,RST FIN,RST -j DROP + #$IPT -A blocker -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP + #$IPT -A blocker -p tcp --tcp-flags SYN,RST SYN,RST -j DROP + #$IPT -A blocker -p tcp --tcp-flags ALL ALL -j DROP + #$IPT -A blocker -p tcp --tcp-flags ALL NONE -j DROP + #$IPT -A blocker -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP + #$IPT -A blocker -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP + #$IPT -A blocker -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP + ## Return to caller + $IPT -A blocker -j RETURN + + ######## DNS Server + #echo "server_in chain: Allow input to DNS Server" + $IPT -A srv_dns_in -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_in -p tcp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_in -j RETURN + #echo "srv_dns_out chain: Allow output from DNS server" + $IPT -A srv_dns_out -p udp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_out -p tcp --sport 53 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_dns_out -j RETURN + + ####### Database Server + $IPT -A srv_db_in -p tcp --dport 5432 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_db_in -j RETURN + $IPT -A srv_db_out -p tcp --sport 5432 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A srv_db_out -j RETURN + + ####### SSH Server + + $IPT -A srv_ssh_in -p tcp --dport 2222 -m state --state NEW -m recent --set --name SSH -j ACCEPT + + $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent \ + --update --seconds 60 --hitcount 4 --rttl \ + --name SSH -j LOG --log-prefix "${SPAMDROPMSG} SSH" + + $IPT -A srv_ssh_in -p tcp --dport 2222 -m recent --update --seconds 60 \ + --hitcount 4 --rttl --name SSH -j DROP + + $IPT -A srv_ssh_in -p tcp --dport 2222 --sport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + + $IPT -A srv_ssh_in -j RETURN + $IPT -A srv_ssh_out -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A srv_ssh_out -j RETURN + + ####### HTTP Server + $IPT -A srv_http_in -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_http_in -j RETURN + $IPT -A srv_http_out -p tcp --sport 80 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_http_out -j RETURN + + ####### HTTPS Server + $IPT -A srv_https_in -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_https_in -j RETURN + $IPT -A srv_https_out -p tcp --sport 443 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_https_out -j RETURN + + ###### GIT server + $IPT -A srv_git_in -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A srv_git_in -j RETURN + $IPT -A srv_git_out -p tcp --sport 9418 --dport 1024:65535 -m state --state RELATED,ESTABLISHED -j ACCEPT + $IPT -A srv_git_out -j RETURN + + ######## DNS Client + $IPT -A cli_dns_out -p udp --dport 53 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_dns_out -j RETURN + $IPT -A cli_dns_in -p udp --sport 53 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_dns_in -j RETURN + + ######## HTTP Client + #$IPT -A cli_http_in -p tcp -m tcp --tcp-flags ACK --sport 80 --dport 1024:65535 -j DROP + + $IPT -A cli_http_in -p tcp --sport 80 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_http_in -p udp --sport 80 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_http_in -j RETURN + $IPT -A cli_http_out -p tcp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_http_out -p udp --dport 80 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_http_out -j RETURN + + ######## IRC client + $IPT -A cli_irc_in -p tcp --sport 6667 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_irc_in -j RETURN + $IPT -A cli_irc_out -p tcp --dport 6667 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_irc_out -j RETURN + + ######## FTP client + + $IPT -A cli_ftp_in -p tcp --sport 21 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_ftp_in -j RETURN + $IPT -A cli_ftp_out -p tcp --dport 21 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_ftp_out -j RETURN + ######## GIT client + $IPT -A cli_git_in -p tcp --sport 9418 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_git_in -j RETURN + $IPT -A cli_git_out -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_git_out -j RETURN + + ######## POP3S client + $IPT -A cli_pops_in -p tcp --sport 995 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_pops_in -j RETURN + $IPT -A cli_pops_out -p tcp --dport 995 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_pops_out -j RETURN + + ######## SMTPS client + $IPT -A cli_smtps_in -p tcp --sport 465 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_smtps_in -j RETURN + $IPT -A cli_smtps_out -p tcp --dport 465 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_smtps_out -j RETURN + + ######## HTTPS client + $IPT -A cli_https_in -p tcp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_https_in -p udp --sport 443 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_https_in -j RETURN + $IPT -A cli_https_out -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_https_out -p udp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_https_out -j RETURN + + ######## SSH client + $IPT -A cli_ssh_in -p tcp --sport 2222 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_in -p tcp --sport 22 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_in -j RETURN + $IPT -A cli_ssh_out -p tcp --dport 2222 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_out -p tcp --dport 22 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_ssh_out -j RETURN + + ######## GPG key client + $IPT -A cli_gpg_in -p tcp --sport 11371 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT + $IPT -A cli_gpg_in -j RETURN + $IPT -A cli_gpg_out -p tcp --dport 11371 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + $IPT -A cli_gpg_out -j RETURN + + ######## DHCP Server + $IPT -A srv_dhcp -p udp --sport 68 --dport 67 -j ACCEPT + $IPT -A srv_dhcp -p udp --sport 67 --dport 68 -j ACCEPT + $IPT -A srv_dhcp -p udp --sport 67 --dport 67 -j ACCEPT + $IPT -A srv_dhcp -j RETURN + + ####### RIP Server + $IPT -A srv_rip -p udp --sport 520 --dport 520 -j ACCEPT + $IPT -A srv_rip -j RETURN + + ####### ICMP Server + $IPT -A srv_icmp -p icmp -j ACCEPT + $IPT -A srv_icmp -j RETURN +} case $TYPE in bridge) + iptables_clear + iptables_tables - echo "Setting bridge network..." + echo "setting bridge network..." echo 1 > /proc/sys/net/ipv4/ip_forward - + # Unlimited on loopback + $IPT -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + $IPT -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + $IPT -A INPUT -i lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT + $IPT -A OUTPUT -o lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT + ####### NAT Prerouting Chain ###### - #PREROUTING: IN=br0 OUT= PHYSIN=tap2 MAC=ff:ff:ff:ff:ff:ff:54:60:be:ef:5c:14:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=377 TOS=0x00 PREC=0x00 TTL=64 ID=37544 PROTO=UDP SPT=68 DPT=67 LEN=357 ####### Forward Chain ###### $IPT -A FORWARD -j blocker $IPT -A FORWARD -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT $IPT -A FORWARD -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT - $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_in - $IPT -A FORWARD -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap1 --physdev-out tap2 -s ${BR_NET} -d ${BR_NET} -j ACCEPT + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out tap1 -s ${BR_NET} -d ${BR_NET} -j ACCEPT + + # Tap1 can access external http + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap1 -j cli_http_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap1 --physdev-out ${PUB_IF} -j cli_http_out - $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_rip + ####### Forward TAP2 ssh and https ###### + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -d ${BR_NET} -j srv_ssh_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_ssh_out - $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_dhcp - $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_dhcp + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_https_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_https_out + # + # #$IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_rip + # + # $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_dhcp + # $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_dhcp + # Tap1 and Tap2 can access external https $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j cli_https_out $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j cli_https_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap1 --physdev-out ${PUB_IF} -j cli_https_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap1 -j cli_https_in + + #Less noise + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} -p udp --dport 519 --sport 520 -j DROP + ####### Input Chain ###### $IPT -A INPUT -j blocker #Less noise @@ -69,45 +299,61 @@ case $TYPE in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_dns_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_https_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_git_in - - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_ssh_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_ssh_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap2 -j srv_dns_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap1 -j srv_dns_in $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap2 -j srv_dhcp + $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap1 -j srv_dhcp $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in ${PUB_IF} -s ${GW} -d ${PUB_IP} -j srv_dhcp ####### Output Chain ###### $IPT -A OUTPUT -j blocker #Less noise $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 3030 --sport 1024:65535 -j DROP - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 80 --sport 1024:65535 -j DROP - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_dns_out - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${DNS} -j cli_dns_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d 10.0.0.4 -j srv_dns_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d 10.0.0.3 -j srv_dns_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_git_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j srv_dhcp - $IPT -A OUTPUT -o ${BR_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_dns_out - + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_git_out ####### PostRouting Chain ###### - $IPT -t nat -A POSTROUTING -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + #Less noise + #$IPT -t nat -A POSTROUTING -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + #$IPT -t nat -A POSTROUTING -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 443 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT + #$IPT -t nat -A POSTROUTING -o ${BR_IF} -s ${PUB_IP} -d ${DNS} -p udp --dport 53 --sport 1024:65535 -j ACCEPT #$IPT -t nat -A POSTROUTING -o ${PRIV_IF} -j MASQUERADE ## log everything else and drop iptables_log - $IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " - $IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " + #$IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " + # $IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " iptables-save > /etc/iptables/net.v4 exit 0 ;; + server) + iptables_clear + iptables_tables + + echo "setting server network..." + + # Unlimited on loopback + $IPT -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + $IPT -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + $IPT -A INPUT -i lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT + $IPT -A OUTPUT -o lo -s ${PUB_IP} -d ${PUB_IP} -j ACCEPT - echo "Setting server network..." ####### Input Chain ###### $IPT -A INPUT -j blocker @@ -115,16 +361,28 @@ case $TYPE in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_https_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_ssh_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_git_in + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_http_in + + + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -j srv_https_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -j cli_https_in + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -j srv_ssh_in + $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -j srv_git_in ####### Output Chain ###### $IPT -A OUTPUT -j blocker $IPT -A OUTPUT -o ${PUB_IF} -d ${DNS} -s ${PUB_IP} -j cli_dns_out + $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j cli_http_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_https_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_ssh_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_git_out + $IPT -A OUTPUT -o ${PUB_IF} -s ${PUB_IP} -j cli_https_out + $IPT -A OUTPUT -o ${PUB_IF} -s ${PUB_IP} -j srv_https_out + + $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -j srv_ssh_out + $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -j srv_git_out ## log everything else and drop iptables_log diff --git a/tools/conf/etc/ssh/sshd_config b/tools/conf/etc/ssh/sshd_config index cba9be5..6fd955a 100644 --- a/tools/conf/etc/ssh/sshd_config +++ b/tools/conf/etc/ssh/sshd_config @@ -1,4 +1,4 @@ -# $OpenBSD: sshd_config,v 1.101 2017/03/14 07:19:07 djm Exp $ +# $OpenBSD: sshd_config,v 1.100 2016/08/15 12:32:04 naddy Exp $ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. @@ -16,6 +16,10 @@ AddressFamily inet #ListenAddress 0.0.0.0 #ListenAddress :: + +# The default requires explicit activation of protocol 1 +Protocol 2 + #HostKey /etc/ssh/ssh_host_rsa_key #HostKey /etc/ssh/ssh_host_dsa_key #HostKey /etc/ssh/ssh_host_ecdsa_key @@ -27,17 +31,18 @@ AddressFamily inet # Logging #SyslogFacility AUTH #LogLevel INFO -LogLevel VERBOSE # Authentication: -#LoginGraceTime 2m +LoginGraceTime 1m #PermitRootLogin prohibit-password +PermitRootLogin no #StrictModes yes -#MaxAuthTries 6 +MaxAuthTries 3 #MaxSessions 10 +MaxSessions 3 -#PubkeyAuthentication yes +PubkeyAuthentication yes # The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2 # but this is overridden so installations will only check .ssh/authorized_keys @@ -58,10 +63,12 @@ AuthorizedKeysFile .ssh/authorized_keys # To disable tunneled clear text passwords, change to no here! #PasswordAuthentication yes +PasswordAuthentication no #PermitEmptyPasswords no # Change to no to disable s/key passwords #ChallengeResponseAuthentication yes +ChallengeResponseAuthentication no # Kerberos options #KerberosAuthentication no @@ -83,6 +90,7 @@ AuthorizedKeysFile .ssh/authorized_keys # PAM authentication, then enable this but set PasswordAuthentication # and ChallengeResponseAuthentication to 'no'. #UsePAM no +#UsePAM no #AllowAgentForwarding yes #AllowTcpForwarding yes @@ -95,6 +103,7 @@ AuthorizedKeysFile .ssh/authorized_keys #PrintLastLog yes #TCPKeepAlive yes #UseLogin no +#UsePrivilegeSeparation sandbox #PermitUserEnvironment no #Compression delayed #ClientAliveInterval 0 @@ -107,7 +116,7 @@ AuthorizedKeysFile .ssh/authorized_keys #VersionAddendum none # no default banner path -Banner /etc/issues +Banner /etc/issue # override default of no subsystems Subsystem sftp /usr/lib/ssh/sftp-server diff --git a/tools/scripts/pkgmk-test.conf b/tools/scripts/pkgmk-test.conf index 3b0031d..6dec896 100644 --- a/tools/scripts/pkgmk-test.conf +++ b/tools/scripts/pkgmk-test.conf @@ -4,7 +4,7 @@ source /etc/pkgmk.conf -#PKGMK_SOURCE_MIRRORS=(https://c9.root.sx/ports/distfiles/) +PKGMK_SOURCE_MIRRORS=() PKGMK_SOURCE_DIR="$PWD" PKGMK_PACKAGE_DIR="$PWD" PKGMK_WORK_DIR="$PWD/work" -- cgit 1.4.1-2-gfad0 From d548aa0cf8497cfd4151768e5d85e1db858ee6d2 Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Tue, 12 Jun 2018 20:09:49 +0100 Subject: fix iptables let ssh out if server --- core/scripts/iptables.sh | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) (limited to 'core/scripts') diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 2b4d68a..1304210 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -270,7 +270,7 @@ case $TYPE in $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap1 --physdev-out ${PUB_IF} -j cli_http_out ####### Forward TAP2 ssh and https ###### - $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -d ${BR_NET} -j srv_ssh_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_ssh_in $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_ssh_out $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_https_in @@ -296,11 +296,6 @@ case $TYPE in #Less noise $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -p tcp --sport 3030 --dport 1024:65535 -j DROP - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_dns_in - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_https_in - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_git_in - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_ssh_in - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap2 -j srv_dns_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap1 -j srv_dns_in @@ -308,6 +303,11 @@ case $TYPE in $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap1 -j srv_dhcp $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in ${PUB_IF} -s ${GW} -d ${PUB_IP} -j srv_dhcp + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_dns_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_https_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_git_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_ssh_in + ####### Output Chain ###### $IPT -A OUTPUT -j blocker #Less noise @@ -324,6 +324,8 @@ case $TYPE in $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_git_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d cli_ssh_out + ####### PostRouting Chain ###### #Less noise #$IPT -t nat -A POSTROUTING -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT -- cgit 1.4.1-2-gfad0 From 8c5096c08932dc5d636f5ddbc65392dacf3bc962 Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Mon, 9 Jul 2018 14:44:50 +0100 Subject: setup-iso revision --- core/scripts/setup-iso.sh | 103 ++++++++++++++++++++++++++++++++++++++-------- 1 file changed, 85 insertions(+), 18 deletions(-) (limited to 'core/scripts') diff --git a/core/scripts/setup-iso.sh b/core/scripts/setup-iso.sh index 11a38bc..ddad787 100644 --- a/core/scripts/setup-iso.sh +++ b/core/scripts/setup-iso.sh @@ -1,19 +1,18 @@ #!/bin/sh -ISO_DIR=$1 -CHROOT="/mnt" - -ISO_URL="https://serverop.de/crux/crux-3.3/iso/crux-3.3.iso" -MD5_URL="https://serverop.de/crux/crux-3.3/iso/crux-3.3.md5" - -ISO_FILE="${ISO_DIR}/crux-3.3.iso" -MD5_FILE="${ISO_DIR}/crux-3.3.md5" +# location of iso and md5 file +ISO_DIR="/usr/ports/iso" +ISO_FILE="${ISO_DIR}/crux-3.4.iso" +MD5_FILE="${ISO_DIR}/crux-3.4.md5" +# iso and md5 remote location +#ISO_URL="https://serverop.de/crux/crux-3.4/iso/crux-3.4.iso" +ISO_URL="https://ftp.spline.inf.fu-berlin.de/pub/crux/crux-3.4/iso/crux-3.4.iso" +MD5_URL="https://serverop.de/crux/crux-3.4/iso/crux-3.4.md5" # First we define the function -ConfirmOrExit () -{ +ConfirmOrExit () { while true do echo -n "Please confirm (y or n) :" @@ -30,7 +29,7 @@ ConfirmOrExit () echo "You entered $CONFIRM. Continuing ..." } -prepare_iso() { +download_iso() { mkdir -p ${ISO_DIR} @@ -50,22 +49,90 @@ prepare_iso() { cd ${ISO_DIR} && { curl -k -O ${MD5_URL} ; cd -; } fi +} + +check_iso() { if cd ${ISO_DIR} && md5sum -c ${MD5_FILE} ; then echo "Valid iso md5sum" else echo "Invalid iso md5sum" fi +} + +mount_iso() { + + if [ ! -f $ISO_FILE ]; + then + echo "File $ISO_FILE does not exist." + exit 0 + fi modprobe isofs modprobe loop - mount -o loop $ISO_FILE $CHROOT/media + mount -o loop $ISO_FILE /media +} + +print_data() { + echo "1.1.1 Paths to iso and md5 files:" + echo "iso dir: ${ISO_DIR}" + echo "iso file: ${ISO_FILE}" + echo "md5 file: ${MD5_FILE}" + echo "iso url: ${ISO_URL}" + echo "md5 url: ${MD5_URL}" } -echo "1.1.1 Paths to iso and md5 files:" -echo "dir: ${ISO_DIR}" -echo "iso url: ${ISO_URL}" -echo "md5 url: ${MD5_URL}" +print_help() { + echo "usage: setup-iso [options]" + echo "options:" + echo " -r, --root default dir is /usr/ports/iso" + echo " -d, --download download iso" + echo " -c, --check check iso md5sum" + echo " -m, --mount mount iso on /media " + echo " -h, --help print help and exit" +} + +while [ "$1" ]; do + case $1 in + -r|--root) + ISO_DIR=$2 + + ISO_FILE="${ISO_DIR}/crux-3.4.iso" + MD5_FILE="${ISO_DIR}/crux-3.4.md5" + + shift ;; + -d|--download) + echo "Download iso:" + echo "_____________________" + print_data + ConfirmOrExit + download_iso + exit 0 ;; + -c|--check) + echo "Check iso md5sum:" + echo "_____________________" + print_data + ConfirmOrExit + check_iso + exit 0 ;; + -m|--mount) + echo "Check iso md5sum:" + echo "_____________________" + print_data + ConfirmOrExit + mount_iso + exit 0 ;; + -h|--help) + print_help + exit 0 ;; + *) + echo "setup-iso: invalid option $1" + print_help + exit 1 ;; + esac + shift +done -ConfirmOrExit -prepare_iso +echo "setup-iso: no option provided" +print_help +exit 1 -- cgit 1.4.1-2-gfad0 From bdea1c23d13c417a00b71654670aed309cfa302a Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Mon, 16 Jul 2018 14:33:23 +0100 Subject: core linux, backup and iptables script fix --- core/linux.html | 13 ++++ core/scripts/backup-system.sh | 157 ++++++++++++++++++++++++++++++------------ core/scripts/iptables.sh | 36 +++++++--- 3 files changed, 151 insertions(+), 55 deletions(-) (limited to 'core/scripts') diff --git a/core/linux.html b/core/linux.html index f04b193..1592fc4 100644 --- a/core/linux.html +++ b/core/linux.html @@ -559,6 +559,9 @@
HugeTLB file system support
+
CONFIG_FUSE_FS=y
+
FUSE (Filesystem in Userspace) support
+

2.1.2.12 Kernel hacking

@@ -682,6 +685,16 @@

2.1.2.14 Cryptographic API

+ +
+            RIPEMD-160 digest algorithm 
+            SHA384 and SHA512 digest algorithms 
+            Whirlpool digest algorithms 
+            LRW support 
+            Serpent cipher algorithm 
+            Twofish cipher algorithm
+        
+

2.1.2.15 Virtualization

diff --git a/core/scripts/backup-system.sh b/core/scripts/backup-system.sh index 49b9873..ba6a961 100644 --- a/core/scripts/backup-system.sh +++ b/core/scripts/backup-system.sh @@ -1,4 +1,12 @@ -#!/bin/sh +#!/bin/bash + +ROOT_DIR= +DEST_DIR=/root/backup +PORT_PKG="${DEST_DIR}/crux" +PORT_PRT="${DEST_DIR}/ports" +DATA_CNF="${DEST_DIR}/conf" +DATA_USR="${DEST_DIR}/user" +DATA_SRV="${DEST_DIR}/srv" ConfirmOrExit () { @@ -50,9 +58,9 @@ mkbk_coll_ports() { --directory=$ROOT_DIR/usr/ports/${col} \ --exclude=.git/ \ . - } + mkbk_metadata() { # archive pkgutils data @@ -158,8 +166,8 @@ mkbk_user_metadata() { # encript data #gpg --output "${DATA_USR}/meta-${user}.tar.gz.gpg" \ - # --encrypt --recipient user@host \ - # "${DATA_USR}/meta-${user}.tar.gz" + # --encrypt --recipient user@host \ + # "${DATA_USR}/meta-${user}.tar.gz" tar --xattrs -zcpf "${DATA_USR}/gitolite-${user}.tar.gz" \ $dir/gitolite-admin @@ -167,34 +175,56 @@ mkbk_user_metadata() { done } -echo -n "root directory you want backup (/mnt/):\n " -#read ROOT_DIR -ROOT_DIR=$1 - -echo -n "where you want to save (/home/user):\n " -DEST_DIR=$2 - -# Temporary directory -PORT_PKG="${DEST_DIR}/crux" -PORT_PRT="${DEST_DIR}/ports" -DATA_CNF="${DEST_DIR}/conf" -DATA_USR="${DEST_DIR}/user" -DATA_SRV="${DEST_DIR}/srv" +print_data () { + echo "ROOT_DIR=${ROOT_DIR}" + echo "DEST_DIR=${DEST_DIR}" + echo "PORT_PKG=${PORT_PKG}" + echo "PORT_PRT=${PORT_PRT}" + echo "DATA_CNF=${DATA_CNF}" + echo "DATA_USR=${DATA_USR}" + echo "DATA_SRV=${DATA_SRV}" +} -echo "ROOT_DIR=${ROOT_DIR}" -echo "DEST_DIR=${DEST_DIR}" -echo "PORT_PKG=${PORT_PKG}" -echo "PORT_PRT=${PORT_PRT}" -echo "DATA_CNF=${DATA_CNF}" -echo "DATA_USR=${DATA_USR}" -echo "DATA_SRV=${DATA_SRV}" +print_help() { + echo "usage: backup-system [options]" + echo "options:" + echo " -r, --root root directory to backup, default /" + echo " -d, --destination save backup, default /root/backup" + echo " -h, --help print help and exit" +} +while [ "$1" ]; do + case $1 in + -r|--root) + ROOT_DIR=$2 + if [ ${ROOT_DIR} == "/" ]; then + ROOT_DIR="" + fi + shift ;; + -d|--destination) + DEST_DIR=$2 + + # Destination directory + PORT_PKG="${DEST_DIR}/crux" + PORT_PRT="${DEST_DIR}/ports" + DATA_CNF="${DEST_DIR}/conf" + DATA_USR="${DEST_DIR}/user" + DATA_SRV="${DEST_DIR}/srv" + shift ;; + -h|--help) + print_help + exit 0 ;; + *) + echo "backup-system: invalid option $1" + print_help + exit 1 ;; + esac + shift +done + +print_data ConfirmOrExit -if [ ${ROOT_DIR} == "/" ]; then - ROOT_DIR="" -fi - mkdir -p ${PORT_PKG} mkdir -p ${PORT_PRT} mkdir -p ${DATA_CNF} @@ -204,20 +234,59 @@ mkdir -p ${DATA_SRV} # Light backup data mkbk_metadata mkbk_etc_conf -mkbk_user_metadata -mkbk_srv_www -mkbk_srv_pgsql -mkbk_srv_gitolite - -# Port system -mkbk_coll_ports "core" -mkbk_coll_pkg "core" -mkbk_coll_ports "opt" -mkbk_coll_pkg "opt" -mkbk_coll_ports "contrib" -mkbk_coll_pkg "contrib" -mkbk_coll_ports "xorg" -mkbk_coll_pkg "xorg" - -mkbk_coll_pkg "other" +while true +do + echo -n "Backup user metadata ? Please confirm (y or n) :" + read CONFIRM + case $CONFIRM in + n|N|no|NO|No) break ;; + y|Y|YES|yes|Yes) + echo "Accept - you entered $CONFIRM" + mkbk_user_metadata + break + ;; + *) echo "Please enter only y or n" + esac +done + +while true +do + echo -n "Backup server data ? Please confirm (y or n) :" + read CONFIRM + case $CONFIRM in + n|N|no|NO|No) break ;; + y|Y|YES|yes|Yes) + echo "Accept - you entered $CONFIRM" + mkbk_srv_www + mkbk_srv_pgsql + mkbk_srv_gitolite + break + ;; + *) echo "Please enter only y or n" + esac +done + + +while true +do + echo -n "Backup port system ? Please confirm (y or n) :" + read CONFIRM + case $CONFIRM in + n|N|no|NO|No) break ;; + y|Y|YES|yes|Yes) + echo "Accept - you entered $CONFIRM" + mkbk_coll_ports "core" + mkbk_coll_pkg "core" + mkbk_coll_ports "opt" + mkbk_coll_pkg "opt" + mkbk_coll_ports "contrib" + mkbk_coll_pkg "contrib" + mkbk_coll_ports "xorg" + mkbk_coll_pkg "xorg" + mkbk_coll_pkg "other" + break + ;; + *) echo "Please enter only y or n" + esac +done diff --git a/core/scripts/iptables.sh b/core/scripts/iptables.sh index 1304210..db1078d 100644 --- a/core/scripts/iptables.sh +++ b/core/scripts/iptables.sh @@ -265,14 +265,23 @@ case $TYPE in $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap1 --physdev-out tap2 -s ${BR_NET} -d ${BR_NET} -j ACCEPT $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out tap1 -s ${BR_NET} -d ${BR_NET} -j ACCEPT + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap1 --physdev-out tap3 -s ${BR_NET} -d ${BR_NET} -j ACCEPT + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap3 --physdev-out tap1 -s ${BR_NET} -d ${BR_NET} -j ACCEPT + + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap3 --physdev-out tap2 -s ${BR_NET} -d ${BR_NET} -j ACCEPT + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out tap3 -s ${BR_NET} -d ${BR_NET} -j ACCEPT + # Tap1 can access external http $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap1 -j cli_http_in $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap1 --physdev-out ${PUB_IF} -j cli_http_out - ####### Forward TAP2 ssh and https ###### + ####### Forward TAP2 ssh, http and https ###### $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_ssh_in $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_ssh_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_http_in + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_http_out + $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in ${PUB_IF} --physdev-out tap2 -j srv_https_in $IPT -A FORWARD -i ${BR_IF} -o ${BR_IF} -m physdev --physdev-in tap2 --physdev-out ${PUB_IF} -j srv_https_out # @@ -296,35 +305,40 @@ case $TYPE in #Less noise $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -p tcp --sport 3030 --dport 1024:65535 -j DROP - $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap2 -j srv_dns_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap1 -j srv_dns_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap2 -j srv_dns_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -s ${BR_NET} -m physdev --physdev-in tap3 -j srv_dns_in - $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap2 -j srv_dhcp $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap1 -j srv_dhcp + $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap2 -j srv_dhcp + $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in tap3 -j srv_dhcp + $IPT -A INPUT -i ${BR_IF} -m physdev --physdev-in ${PUB_IF} -s ${GW} -d ${PUB_IP} -j srv_dhcp $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_dns_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_https_in + $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_http_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_git_in $IPT -A INPUT -i ${BR_IF} -d ${PUB_IP} -j cli_ssh_in ####### Output Chain ###### $IPT -A OUTPUT -j blocker + #Less noise $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -p tcp --dport 3030 --sport 1024:65535 -j DROP $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${DNS} -j cli_dns_out - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d 10.0.0.4 -j srv_dns_out - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d 10.0.0.3 -j srv_dns_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j srv_dns_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_ssh_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_git_out + $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j cli_http_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d ${BR_NET} -j srv_dhcp $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_https_out + #$IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_http_out $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_git_out - $IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -d cli_ssh_out + #$IPT -A OUTPUT -o ${BR_IF} -s ${PUB_IP} -j cli_ssh_out ####### PostRouting Chain ###### #Less noise @@ -337,8 +351,8 @@ case $TYPE in ## log everything else and drop iptables_log - #$IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " - # $IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " + #$IPT -t nat -A POSTROUTING -j LOG --log-level 7 --log-prefix "iptables: POSTROUTING: " + # $IPT -t nat -A PREROUTING -j LOG --log-level 7 --log-prefix "iptables: PREROUTING: " iptables-save > /etc/iptables/net.v4 exit 0 @@ -363,7 +377,7 @@ case $TYPE in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_https_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_ssh_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j srv_git_in - $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_http_in + #$IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -s ${BR_NET} -j cli_http_in $IPT -A INPUT -i ${PUB_IF} -d ${PUB_IP} -j srv_https_in @@ -375,7 +389,7 @@ case $TYPE in $IPT -A OUTPUT -j blocker $IPT -A OUTPUT -o ${PUB_IF} -d ${DNS} -s ${PUB_IP} -j cli_dns_out - $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j cli_http_out + #$IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j cli_http_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_https_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_ssh_out $IPT -A OUTPUT -o ${PUB_IF} -d ${BR_NET} -s ${PUB_IP} -j srv_git_out -- cgit 1.4.1-2-gfad0 From fa4a1dbc55e566b6f891636ed0301bf6a188b312 Mon Sep 17 00:00:00 2001 From: Silvino Silva Date: Tue, 17 Jul 2018 00:07:20 +0100 Subject: release revision --- core/index.html | 8 +- core/install.html | 18 +- core/linux.html | 45 +- core/ports/linux-gnu/.footprint | 1940 ++++++++++++++++++------------------- core/ports/linux-gnu/.md5sum | 4 +- core/ports/linux-gnu/Pkgfile | 6 +- core/ports/linux-gnu/config-crux | 60 +- core/ports/linux-gnu/post-install | 2 +- core/scripts/setup-target.sh | 2 +- tools/qemu.html | 2 +- tools/scripts/runvm/profile/crux | 2 +- tools/scripts/runvm/runvm.sh | 2 +- 12 files changed, 1065 insertions(+), 1026 deletions(-) (limited to 'core/scripts') diff --git a/core/index.html b/core/index.html index f8b3663..9145f3e 100644 --- a/core/index.html +++ b/core/index.html @@ -11,20 +11,20 @@

c9 Core OS

c9 Core OS covers installation and configuration of - basic functionality of Crux 3.3 Gnu\Linux operating system. + basic functionality of Crux 3.4 Gnu\Linux operating system. This documentation try's to follow Crux HandBook installation method diverges, for example, by only installing and documenting gpt and grub2.

-

Read Crux HandBook, +

Read Crux HandBook, you can ask for help on freenode #crux. Check scripts folder the install process is automated and ports for extra ports used during the installation.

-

1. Install Crux 3.3 Gnu/Linux

+

1. Install Crux 3.4 Gnu/Linux

    -
  • 1.1. Install Crux 3.3 +
  • 1.1. Install Crux 3.4
    • 1.1.1. Download
    • 1.1.2. Prepare target
    • diff --git a/core/install.html b/core/install.html index 3f2334b..dfde50a 100644 --- a/core/install.html +++ b/core/install.html @@ -2,20 +2,20 @@ - 1.1. Install Crux 3.3 + 1.1. Install Crux 3.4 Core OS Index -

      1.1. Install Crux 3.3

      +

      1.1. Install Crux 3.4

      -

      Installation of minimal Crux 3.3 Gnu\Linux system, +

      Installation of minimal Crux 3.4 Gnu\Linux system, with selected packages from core, opt and contrib ports. Process of installation documented can be executed from iso or from existing gnu\linux installation. Read - Hand book 3.3, + Hand book 3.4, .

      If you are booting from crux iso and is not your keyboard @@ -34,10 +34,10 @@ iso from master repo and checks md5sum.

      -        $ curl -k -O https://serverop.de/crux/crux-3.3/iso/crux-3.3.iso
      -        $ curl -k -O https://serverop.de/crux/crux-3.3/iso/crux-3.3.md5
      -        $ md5sum crux-3.3.iso
      -        b82134d40c9947580f7510694f6970de  crux-3.3.iso
      +        $ curl -k -O https://serverop.de/crux/crux-3.4/iso/crux-3.4.iso
      +        $ curl -k -O https://serverop.de/crux/crux-3.4/iso/crux-3.4.md5
      +        $ md5sum crux-3.4.iso
      +        73bf4d301e2dcfb0636cb7fc2a9e8fde crux-3.4.iso
               

      1.1.2. Prepare target

      @@ -231,7 +231,7 @@
               # modprobe isofs
               # modprobe loop
      -        # mount -o loop crux-3.3.iso $CHROOT/media
      +        # mount -o loop crux-3.4.iso $CHROOT/media
               

      1.1.4. Install Crux

      diff --git a/core/linux.html b/core/linux.html index 0cfecd6..f4dd14f 100644 --- a/core/linux.html +++ b/core/linux.html @@ -687,13 +687,44 @@

      2.1.2.14 Cryptographic API

      -            RIPEMD-160 digest algorithm 
      -            SHA384 and SHA512 digest algorithms 
      -            Whirlpool digest algorithms 
      -            LRW support 
      -            Serpent cipher algorithm 
      -            Twofish cipher algorithm
      -        
      + +
      CONFIG_CRYPTO_LRW
      +
      Liskov Rivest Wagner, a tweakable, non malleable, non movable + narrow block cipher mode for dm-crypt.
      + +
      CONFIG_CRYPTO_RMD160=y
      +
      CONFIG_CRYPTO_RMD256=y
      +
      CONFIG_CRYPTO_RMD320=y
      +
      RIPEMD 160/256/320 digest algorithm
      + +
      CONFIG_CRYPTO_SHA256=y
      +
      SHA224 and SHA256 digest algorithm
      + +
      CONFIG_CRYPTO_SHA512=y
      +
      SHA384 and SHA512 digest algorithms
      + +
      CONFIG_CRYPTO_WP512=y
      +
      Whirlpool digest algorithms
      + +
      CONFIG_CRYPTO_DES3_EDE_X86_64=y
      +
      DES and Triple DES EDE cipher algorithms
      + +
      CONFIG_CRYPTO_SERPENT=y
      +
      Serpent cipher algorithm
      + +
      CONFIG_CRYPTO_TWOFISH=y
      +
      Twofish cipher algorithm
      + +
      +	    *   MD4 digest algorithm
      +	    *   MD5 digest algorithm
      +	    *   SHA1 digest algorithm
      +	    *   Blowfish cipher algorithm
      +	    *   AES cipher algorithms
      +	    *   CAST5 (CAST-128) cipher algorithm
      +	    *   CAST6 (CAST-256) cipher algorithm 
      +	    *   Deflate compression algorithm
      +	    

      2.1.2.15 Virtualization

      diff --git a/core/ports/linux-gnu/.footprint b/core/ports/linux-gnu/.footprint index 56a3cf9..baf16d8 100644 --- a/core/ports/linux-gnu/.footprint +++ b/core/ports/linux-gnu/.footprint @@ -1,975 +1,975 @@ drwxr-xr-x root/root boot/ --rw-r--r-- root/root boot/System.map-4.9.92-gnu --rw-r--r-- root/root boot/config-4.9.92-gnu --rw-r--r-- root/root boot/vmlinuz-4.9.92-gnu +-rw-r--r-- root/root boot/System.map-4.9.111-gnu +-rw-r--r-- root/root boot/config-4.9.111-gnu +-rw-r--r-- root/root boot/vmlinuz-4.9.111-gnu drwxr-xr-x root/root lib/ drwxr-xr-x root/root lib/modules/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/ -lrwxrwxrwx root/root lib/modules/4.9.92-gnu/build -> /usr/src/linux-4.9.92 -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/arch/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/arch/x86/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/arch/x86/platform/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/arch/x86/platform/intel/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/arch/x86/platform/intel/iosf_mbi.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/acpi/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/acpi/dptf/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/acpi/dptf/dptf_power.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/acpi/nfit/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/acpi/nfit/nfit.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/ahci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/ata_generic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/ata_piix.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/libahci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_ali.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_amd.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_artop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_atiixp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_cmd640.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_cmd64x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_cypress.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_efar.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_hpt366.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_hpt37x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_hpt3x2n.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_hpt3x3.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_it8213.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_it821x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_jmicron.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_marvell.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_mpiix.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_netcell.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_ninja32.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_ns87410.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_ns87415.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_oldpiix.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_opti.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_optidma.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_pcmcia.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_pdc2027x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_radisys.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_rz1000.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_sch.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_serverworks.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_sil680.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_sis.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_sl82c105.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_triflex.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pata_via.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/pdc_adma.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_inic162x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_mv.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_nv.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_promise.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_qstor.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_sil.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_sil24.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_sis.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_svw.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_sx4.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_uli.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_via.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ata/sata_vsc.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/bcma/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/bcma/bcma.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/block/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/block/loop.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/char/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/char/agp/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/char/agp/amd64-agp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/char/agp/intel-agp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/char/agp/intel-gtt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/char/nvram.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/clk/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/clk/clk-cdce706.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/clk/clk-cs2000-cp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/clk/clk-si5351.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/connector/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/connector/cn.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/acpi-cpufreq.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/amd_freq_sensitivity.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/cpufreq_conservative.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/cpufreq_powersave.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/cpufreq_userspace.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/p4-clockmod.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/pcc-cpufreq.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/powernow-k8.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/cpufreq/speedstep-lib.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/dca/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dca/dca.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/dw/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/dw/dw_dmac.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/dw/dw_dmac_core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/dw/dw_dmac_pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/idma64.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/ioat/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/ioat/ioatdma.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/qcom/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/qcom/hdma.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/qcom/hdma_mgmt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/dma/virt-dma.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/firewire/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/firewire/firewire-core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/firewire/firewire-ohci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/firewire/firewire-sbp2.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/firmware/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/firmware/dmi-sysfs.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/firmware/iscsi_ibft.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-adp5588.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-amd8111.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-amdpt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-bt8xx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-dwapb.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-f7188x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-generic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-ich.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-it87.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-lynxpoint.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-max7300.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-max7301.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-max730x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-max732x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-mc33880.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-ml-ioh.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-pca953x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-pcf857x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-pisosr.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-rdc321x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-sch.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-sch311x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-tpic2810.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpio/gpio-ts4900.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/amd/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/amd/amdgpu/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/amd/amdgpu/amdgpu.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/gma500/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/gma500/gma500_gfx.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/i915/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/i915/i915.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/nouveau/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/nouveau/nouveau.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/radeon/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/radeon/radeon.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/udl/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/udl/udl.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/vmwgfx/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/gpu/drm/vmwgfx/vmwgfx.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-a4tech.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-apple.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-belkin.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-cherry.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-chicony.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-cypress.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-ezkey.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-generic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-kensington.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-logitech-dj.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-logitech-hidpp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-logitech.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-microsoft.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/hid-monterey.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/i2c-hid/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/i2c-hid/i2c-hid.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/intel-ish-hid/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/intel-ish-hid/intel-ish-ipc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/intel-ish-hid/intel-ishtp-hid.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/intel-ish-hid/intel-ishtp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hid/uhid.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/abituguru.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/abituguru3.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/acpi_power_meter.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ad7314.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ad7414.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ad7418.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adc128d818.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adcxx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adm1021.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adm1025.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adm1026.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adm1029.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adm1031.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adm9240.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ads1015.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ads7828.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ads7871.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adt7310.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adt7410.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adt7411.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adt7462.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adt7470.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adt7475.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/adt7x10.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/amc6821.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/applesmc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/asb100.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/asc7621.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/asus_atk0110.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/atxp1.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/coretemp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/dell-smm-hwmon.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/dme1737.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ds1621.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ds620.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/emc1403.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/emc2103.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/emc6w201.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/f71805f.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/f71882fg.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/f75375s.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/fam15h_power.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/fschmd.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/g760a.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/g762.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/gl518sm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/gl520sm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/gpio-fan.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/hih6130.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/hwmon-vid.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/i5500_temp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/i5k_amb.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ina209.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ina2xx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ina3221.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/it87.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/jc42.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/k10temp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/k8temp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lineage-pem.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm63.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm70.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm73.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm75.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm77.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm78.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm80.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm83.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm85.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm87.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm90.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm92.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm93.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm95234.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm95241.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/lm95245.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc2945.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc2990.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc4151.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc4215.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc4222.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc4245.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc4260.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ltc4261.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max1111.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max16065.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max1619.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max1668.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max197.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max31722.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max31790.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max6639.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max6642.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max6650.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/max6697.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/mcp3021.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/nct6683.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/nct6775.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/nct7802.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/nct7904.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/ntc_thermistor.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/pc87360.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/pc87427.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/pcf8591.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/pmbus/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/pmbus/pmbus.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/pmbus/pmbus_core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/powr1220.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/sht15.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/sht21.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/sht3x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/shtc1.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/sis5595.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/smm665.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/smsc47b397.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/smsc47m1.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/smsc47m192.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/tc74.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/thmc50.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/tmp102.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/tmp103.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/tmp401.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/tmp421.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/via-cputemp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/via686a.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/vt1211.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/vt8231.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83627ehf.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83627hf.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83781d.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83791d.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83792d.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83793.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83795.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83l785ts.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/hwmon/w83l786ng.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-amd756-s4882.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-amd756.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-amd8111.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-designware-core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-designware-pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-i801.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-isch.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-ismt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-nforce2-s4985.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-nforce2.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-piix4.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/busses/i2c-scmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/i2c-dev.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/i2c-mux.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/i2c-slave-eeprom.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/i2c-smbus.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/muxes/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/muxes/i2c-mux-pca9541.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/i2c/muxes/i2c-mux-reg.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/input/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/evdev.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/input-leds.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/input-polldev.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/input/mouse/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/mouse/synaptics_i2c.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/mouse/synaptics_usb.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/mousedev.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/input/serio/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/serio/pcips2.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/serio/serio_raw.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/input/sparse-keymap.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/leds/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/leds/led-class.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/md/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/md/dm-log.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/md/dm-mirror.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/md/dm-multipath.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/md/dm-raid.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/md/dm-region-hash.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/md/dm-round-robin.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/mt9m111.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/ov7670.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/imx074.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/mt9m001.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/mt9t031.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/mt9t112.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/mt9v022.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/ov2640.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/ov5642.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/ov6650.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/ov772x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/ov9640.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/ov9740.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/rj54n1cb0c.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/i2c/soc_camera/tw9910.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/platform/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/platform/marvell-ccic/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/platform/marvell-ccic/cafe_ccic.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/platform/soc_camera/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/platform/soc_camera/soc_camera.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/platform/soc_camera/soc_camera_platform.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/platform/soc_camera/soc_mediabus.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/mc44s803.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/mt20xx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/tda18271.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/tda827x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/tda8290.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/tda9887.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/tuner-simple.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/tuner-types.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/tuner-xc2028.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/xc4000.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/tuners/xc5000.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/v4l2-common.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/v4l2-dv-timings.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videobuf-core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videobuf2-core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videobuf2-dma-contig.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videobuf2-dma-sg.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videobuf2-memops.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videobuf2-v4l2.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videobuf2-vmalloc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/media/v4l2-core/videodev.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/core/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/core/memstick.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/core/ms_block.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/core/mspro_block.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/host/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/host/jmb38x_ms.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/host/r592.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/host/rtsx_pci_ms.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/host/rtsx_usb_ms.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/memstick/host/tifm_ms.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/message/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/message/fusion/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/message/fusion/mptbase.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/message/fusion/mptctl.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/message/fusion/mptfc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/message/fusion/mptsas.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/message/fusion/mptscsih.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/message/fusion/mptspi.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/intel-lpss-acpi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/intel-lpss-pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/intel-lpss.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/intel_quark_i2c_gpio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/lpc_ich.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/lpc_sch.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/mfd-core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/rdc321x-southbridge.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/rtsx_pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mfd/rtsx_usb.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/cb710/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/cb710/cb710.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/eeprom/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/eeprom/eeprom_93cx6.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/lis3lv02d/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/lis3lv02d/lis3lv02d.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/tifm_7xx1.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/tifm_core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/vmw_balloon.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/vmw_vmci/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/misc/vmw_vmci/vmw_vmci.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/card/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/card/mmc_block.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/card/sdio_uart.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/core/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/core/mmc_core.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/cb710-mmc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/mmc_spi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/mtk-sd.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/rtsx_pci_sdmmc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/rtsx_usb_sdmmc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/sdhci-acpi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/sdhci-pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/sdhci-pltfm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/sdhci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/sdricoh_cs.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/tifm_sd.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/toshsd.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/usdhi6rol0.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/ushc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/via-sdmmc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/vub300.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/mmc/host/wbsd.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/3com/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/3com/3c59x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/3com/typhoon.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/8390/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/8390/8390.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/8390/ne2k-pci.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/adaptec/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/adaptec/starfire.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/amd/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/amd/amd8111e.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/amd/pcnet32.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/alx/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/alx/alx.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/atl1c/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/atl1c/atl1c.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/atl1e/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/atl1e/atl1e.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/atlx/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/atlx/atl1.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/atheros/atlx/atl2.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/broadcom/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/broadcom/b44.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/broadcom/bnx2.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/broadcom/bnx2x/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/broadcom/bnx2x/bnx2x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/broadcom/cnic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/broadcom/tg3.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/brocade/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/brocade/bna/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/brocade/bna/bna.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/cadence/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/cadence/macb.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/cisco/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/cisco/enic/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/cisco/enic/enic.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/tulip/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/tulip/de2104x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/tulip/de4x5.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/tulip/dmfe.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/tulip/tulip.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/tulip/uli526x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dec/tulip/winbond-840.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dlink/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dlink/dl2k.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/dlink/sundance.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/emulex/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/emulex/benet/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/emulex/benet/be2net.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/hp/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/hp/hp100.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/e100.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/e1000/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/e1000/e1000.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/e1000e/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/e1000e/e1000e.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/igb/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/igb/igb.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/igbvf/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/igbvf/igbvf.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/ixgb/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/ixgb/ixgb.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/ixgbe/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/ixgbe/ixgbe.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/ixgbevf/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/intel/ixgbevf/ixgbevf.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/marvell/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/marvell/mvmdio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/marvell/skge.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/marvell/sky2.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/natsemi/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/natsemi/natsemi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/natsemi/ns83820.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/nvidia/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/nvidia/forcedeth.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/realtek/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/realtek/8139cp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/realtek/8139too.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/realtek/r8169.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/via/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/via/via-rhine.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/ethernet/via/via-velocity.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/mdio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/mii.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/nlmon.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath10k/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath10k/ath10k_core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath10k/ath10k_pci.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath5k/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath5k/ath5k.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath6kl/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath6kl/ath6kl_core.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath9k/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath9k/ath9k.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath9k/ath9k_common.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath9k/ath9k_htc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ath/ath9k/ath9k_hw.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/broadcom/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/broadcom/b43/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/broadcom/b43/b43.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/broadcom/b43legacy/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/broadcom/b43legacy/b43legacy.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/ipw2x00/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/ipw2x00/ipw2100.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/ipw2x00/ipw2200.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/ipw2x00/libipw.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlegacy/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlegacy/iwl3945.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlegacy/iwl4965.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlegacy/iwlegacy.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlwifi/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlwifi/dvm/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlwifi/dvm/iwldvm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlwifi/iwlwifi.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlwifi/mvm/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/intel/iwlwifi/mvm/iwlmvm.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2400pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2500pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2800lib.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2800mmio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2800pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2x00lib.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2x00mmio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt2x00pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/ralink/rt2x00/rt61pci.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/btcoexist/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/btcoexist/btcoexist.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/rtl8188ee.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192c/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192c/rtl8192c-common.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192ce/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192ce/rtl8192ce.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192de/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192de/rtl8192de.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192se/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192se/rtl8192se.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723ae/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723ae/rtl8723ae.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723com/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723com/rtl8723-common.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtl_pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/net/wireless/realtek/rtlwifi/rtlwifi.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/nvdimm/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/nvdimm/libnvdimm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/nvdimm/nd_blk.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/nvdimm/nd_btt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/nvdimm/nd_pmem.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/host/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/host/vmd.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/hotplug/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/hotplug/acpiphp_ibm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/hotplug/cpcihp_generic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/hotplug/cpcihp_zt5550.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pci/hotplug/shpchp.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/pcmcia/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pcmcia/i82092.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pcmcia/pcmcia.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pcmcia/pcmcia_core.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pcmcia/pcmcia_rsrc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pcmcia/pd6729.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pcmcia/yenta_socket.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/acer-wmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/acerhdf.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/alienware-wmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/amilo-rfkill.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/apple-gmux.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/asus-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/asus-wireless.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/classmate-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/compal-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/dell-rbtn.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/dell-smo8800.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/dell-wmi-aio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/fujitsu-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/fujitsu-tablet.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/hdaps.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/hp-wireless.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/hp-wmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/hp_accel.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/ibm_rtl.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/ideapad-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel-hid.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel-rst.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel-smartconnect.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel-vbtn.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel_ips.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel_menlow.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel_oaktrail.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel_pmc_ipc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/intel_punit_ipc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/msi-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/msi-wmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/mxm-wmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/panasonic-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/pvpanic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/samsung-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/samsung-q10.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/sony-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/surfacepro3_button.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/thinkpad_acpi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/topstar-laptop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/toshiba-wmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/toshiba_bluetooth.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/toshiba_haps.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/platform/x86/wmi.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/pps/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/pps/pps_core.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/ptp/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ptp/ptp.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/regulator/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/regulator/gpio-regulator.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/regulator/userspace-consumer.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/3w-9xxx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/3w-xxxx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/BusLogic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/a100u2w.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/aacraid/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/aacraid/aacraid.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/advansys.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/aic7xxx/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/aic7xxx/aic79xx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/aic7xxx/aic7xxx.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/aic94xx/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/aic94xx/aic94xx.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/arcmsr/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/arcmsr/arcmsr.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/atp870u.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/dc395x.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/dmx3191d.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/dpt_i2o.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/eata.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/fdomain.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/gdth.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/hpsa.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/hptiop.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/initio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/ipr.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/ips.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/libiscsi.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/libsas/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/libsas/libsas.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/lpfc/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/lpfc/lpfc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/megaraid.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/megaraid/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/megaraid/megaraid_mbox.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/megaraid/megaraid_mm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/megaraid/megaraid_sas.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/mpt3sas/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/mpt3sas/mpt3sas.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/mvsas/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/mvsas/mvsas.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/qla1280.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/qla2xxx/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/qla2xxx/qla2xxx.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/qla4xxx/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/qla4xxx/qla4xxx.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/scsi_transport_fc.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/scsi_transport_iscsi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/scsi_transport_sas.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/scsi_transport_spi.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/snic/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/snic/snic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/stex.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/sym53c8xx_2/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/scsi/sym53c8xx_2/sym53c8xx.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/spi/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/spi/spi-bitbang.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/spi/spi-dw-midpci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/spi/spi-dw-mmio.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/spi/spi-dw.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/ssb/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/ssb/ssb.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/acpi_thermal_rel.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/int3400_thermal.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/int3402_thermal.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/int3403_thermal.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/int3406_thermal.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/int340x_thermal_zone.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/int340x_thermal/processor_thermal_device.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/intel_pch_thermal.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/intel_powerclamp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/intel_soc_dts_iosf.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/thermal/intel_soc_dts_thermal.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/uio/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/uio/uio.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/usb/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/usb/class/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/usb/class/cdc-acm.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/usb/mon/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/usb/mon/usbmon.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/usb/storage/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/usb/storage/usb-storage.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/video/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/video/backlight/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/video/backlight/generic_bl.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/video/backlight/lcd.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/virtio/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/virtio/virtio_balloon.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/virtio/virtio_input.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/virtio/virtio_mmio.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/masters/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/masters/ds1wm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/masters/ds2482.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/masters/ds2490.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/masters/matrox_w1.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/masters/w1-gpio.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_bq27000.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2406.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2408.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2413.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2423.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2431.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2433.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2760.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2780.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds2781.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_ds28e04.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_smem.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/slaves/w1_therm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/w1/wire.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/acquirewdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/advantechwdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/alim1535_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/alim7101_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/cadence_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/cpu5wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/dw_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/eurotechwdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/f71808e_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/hpwdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/i6300esb.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/iTCO_vendor_support.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/iTCO_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/ib700wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/ibmasr.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/ie6xx_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/it8712f_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/it87_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/machzwd.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/max63xx_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/mena21_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/ni903x_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/nv_tco.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/of_xilinx_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/pc87413_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/pcwd_pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/pcwd_usb.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/sbc60xxwdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/sbc_epx_c3.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/sbc_fitpc2_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/sc1200wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/sch311x_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/smsc37b787_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/softdog.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/sp5100_tco.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/via_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/w83627hf_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/w83877f_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/w83977f_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/wafer5823wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/wdat_wdt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/wdt_pci.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/drivers/watchdog/ziirave_wdt.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/btrfs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/btrfs/btrfs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/f2fs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/f2fs/f2fs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/fat/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/fat/fat.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/fat/msdos.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/fat/vfat.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/fuse/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/fuse/fuse.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/hfsplus/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/hfsplus/hfsplus.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/isofs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/isofs/isofs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/jfs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/jfs/jfs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/nilfs2/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/nilfs2/nilfs2.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/nls/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/nls/nls_cp437.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/nls/nls_iso8859-1.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/nls/nls_iso8859-15.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/nls/nls_utf8.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/ntfs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/ntfs/ntfs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/reiserfs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/reiserfs/reiserfs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/udf/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/udf/udf.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/ufs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/ufs/ufs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/fs/xfs/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/fs/xfs/xfs.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/bluetooth/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/bluetooth/bluetooth.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/core/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/core/pktgen.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/ah4.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/esp4.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/gre.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/inet_diag.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/ip_gre.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/ip_vti.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/ipcomp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/ipip.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/netfilter/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/netfilter/nf_nat_snmp_basic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/tcp_diag.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/tunnel4.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/udp_diag.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/xfrm4_mode_beet.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/xfrm4_mode_transport.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/xfrm4_mode_tunnel.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/ipv4/xfrm4_tunnel.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/mac80211/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/mac80211/mac80211.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/netfilter/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/netfilter/xt_LED.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/rfkill/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/rfkill/rfkill.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/wireless/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/wireless/cfg80211.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/wireless/lib80211.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/wireless/lib80211_crypt_ccmp.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/wireless/lib80211_crypt_tkip.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/wireless/lib80211_crypt_wep.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/net/xfrm/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/net/xfrm/xfrm_ipcomp.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/sound/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/sound/core/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/core/snd-pcm.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/core/snd-timer.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/core/snd.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/sound/hda/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/hda/snd-hda-core.ko -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/sound/pci/ -drwxr-xr-x root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/ --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-analog.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-ca0110.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-ca0132.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-cirrus.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-cmedia.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-conexant.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-generic.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-hdmi.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-idt.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-realtek.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-si3054.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec-via.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-codec.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/pci/hda/snd-hda-intel.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/kernel/sound/soundcore.ko --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.alias --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.alias.bin --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.builtin --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.builtin.bin --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.dep --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.dep.bin --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.devname --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.order --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.softdep --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.symbols --rw-r--r-- root/root lib/modules/4.9.92-gnu/modules.symbols.bin -lrwxrwxrwx root/root lib/modules/4.9.92-gnu/source -> /usr/src/linux-4.9.92 +drwxr-xr-x root/root lib/modules// +lrwxrwxrwx root/root lib/modules//build -> /usr/src/linux-4.9.111 +drwxr-xr-x root/root lib/modules//kernel/ +drwxr-xr-x root/root lib/modules//kernel/arch/ +drwxr-xr-x root/root lib/modules//kernel/arch/x86/ +drwxr-xr-x root/root lib/modules//kernel/arch/x86/platform/ +drwxr-xr-x root/root lib/modules//kernel/arch/x86/platform/intel/ +-rw-r--r-- root/root lib/modules//kernel/arch/x86/platform/intel/iosf_mbi.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/ +drwxr-xr-x root/root lib/modules//kernel/drivers/acpi/ +drwxr-xr-x root/root lib/modules//kernel/drivers/acpi/dptf/ +-rw-r--r-- root/root lib/modules//kernel/drivers/acpi/dptf/dptf_power.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/acpi/nfit/ +-rw-r--r-- root/root lib/modules//kernel/drivers/acpi/nfit/nfit.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/ata/ +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/ahci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/ata_generic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/ata_piix.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/libahci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_ali.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_amd.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_artop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_atiixp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_cmd640.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_cmd64x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_cypress.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_efar.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_hpt366.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_hpt37x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_hpt3x2n.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_hpt3x3.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_it8213.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_it821x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_jmicron.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_marvell.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_mpiix.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_netcell.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_ninja32.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_ns87410.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_ns87415.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_oldpiix.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_opti.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_optidma.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_pcmcia.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_pdc2027x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_radisys.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_rz1000.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_sch.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_serverworks.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_sil680.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_sis.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_sl82c105.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_triflex.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pata_via.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/pdc_adma.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_inic162x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_mv.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_nv.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_promise.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_qstor.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_sil.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_sil24.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_sis.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_svw.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_sx4.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_uli.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_via.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/ata/sata_vsc.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/bcma/ +-rw-r--r-- root/root lib/modules//kernel/drivers/bcma/bcma.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/block/ +-rw-r--r-- root/root lib/modules//kernel/drivers/block/loop.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/char/ +drwxr-xr-x root/root lib/modules//kernel/drivers/char/agp/ +-rw-r--r-- root/root lib/modules//kernel/drivers/char/agp/amd64-agp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/char/agp/intel-agp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/char/agp/intel-gtt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/char/nvram.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/clk/ +-rw-r--r-- root/root lib/modules//kernel/drivers/clk/clk-cdce706.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/clk/clk-cs2000-cp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/clk/clk-si5351.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/connector/ +-rw-r--r-- root/root lib/modules//kernel/drivers/connector/cn.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/cpufreq/ +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/acpi-cpufreq.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/amd_freq_sensitivity.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/cpufreq_conservative.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/cpufreq_powersave.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/cpufreq_userspace.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/p4-clockmod.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/pcc-cpufreq.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/powernow-k8.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/cpufreq/speedstep-lib.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/dca/ +-rw-r--r-- root/root lib/modules//kernel/drivers/dca/dca.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/dma/ +drwxr-xr-x root/root lib/modules//kernel/drivers/dma/dw/ +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/dw/dw_dmac.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/dw/dw_dmac_core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/dw/dw_dmac_pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/idma64.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/dma/ioat/ +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/ioat/ioatdma.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/dma/qcom/ +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/qcom/hdma.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/qcom/hdma_mgmt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/dma/virt-dma.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/firewire/ +-rw-r--r-- root/root lib/modules//kernel/drivers/firewire/firewire-core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/firewire/firewire-ohci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/firewire/firewire-sbp2.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/firmware/ +-rw-r--r-- root/root lib/modules//kernel/drivers/firmware/dmi-sysfs.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/firmware/iscsi_ibft.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpio/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-adp5588.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-amd8111.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-amdpt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-bt8xx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-dwapb.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-f7188x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-generic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-ich.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-it87.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-lynxpoint.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-max7300.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-max7301.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-max730x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-max732x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-mc33880.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-ml-ioh.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-pca953x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-pcf857x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-pisosr.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-rdc321x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-sch.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-sch311x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-tpic2810.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/gpio/gpio-ts4900.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/ +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/ +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/amd/ +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/amd/amdgpu/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpu/drm/amd/amdgpu/amdgpu.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/gma500/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpu/drm/gma500/gma500_gfx.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/i915/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpu/drm/i915/i915.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/nouveau/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpu/drm/nouveau/nouveau.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/radeon/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpu/drm/radeon/radeon.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/udl/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpu/drm/udl/udl.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/gpu/drm/vmwgfx/ +-rw-r--r-- root/root lib/modules//kernel/drivers/gpu/drm/vmwgfx/vmwgfx.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/hid/ +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-a4tech.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-apple.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-belkin.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-cherry.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-chicony.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-cypress.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-ezkey.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-generic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-kensington.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-logitech-dj.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-logitech-hidpp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-logitech.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-microsoft.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/hid-monterey.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/hid/i2c-hid/ +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/i2c-hid/i2c-hid.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/hid/intel-ish-hid/ +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/intel-ish-hid/intel-ish-ipc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/intel-ish-hid/intel-ishtp-hid.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/intel-ish-hid/intel-ishtp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hid/uhid.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/hwmon/ +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/abituguru.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/abituguru3.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/acpi_power_meter.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ad7314.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ad7414.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ad7418.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adc128d818.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adcxx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adm1021.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adm1025.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adm1026.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adm1029.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adm1031.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adm9240.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ads1015.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ads7828.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ads7871.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adt7310.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adt7410.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adt7411.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adt7462.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adt7470.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adt7475.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/adt7x10.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/amc6821.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/applesmc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/asb100.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/asc7621.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/asus_atk0110.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/atxp1.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/coretemp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/dell-smm-hwmon.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/dme1737.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ds1621.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ds620.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/emc1403.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/emc2103.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/emc6w201.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/f71805f.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/f71882fg.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/f75375s.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/fam15h_power.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/fschmd.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/g760a.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/g762.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/gl518sm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/gl520sm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/gpio-fan.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/hih6130.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/hwmon-vid.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/i5500_temp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/i5k_amb.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ina209.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ina2xx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ina3221.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/it87.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/jc42.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/k10temp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/k8temp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lineage-pem.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm63.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm70.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm73.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm75.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm77.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm78.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm80.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm83.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm85.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm87.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm90.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm92.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm93.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm95234.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm95241.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/lm95245.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc2945.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc2990.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc4151.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc4215.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc4222.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc4245.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc4260.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ltc4261.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max1111.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max16065.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max1619.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max1668.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max197.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max31722.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max31790.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max6639.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max6642.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max6650.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/max6697.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/mcp3021.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/nct6683.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/nct6775.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/nct7802.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/nct7904.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/ntc_thermistor.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/pc87360.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/pc87427.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/pcf8591.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/hwmon/pmbus/ +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/pmbus/pmbus.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/pmbus/pmbus_core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/powr1220.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/sht15.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/sht21.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/sht3x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/shtc1.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/sis5595.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/smm665.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/smsc47b397.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/smsc47m1.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/smsc47m192.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/tc74.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/thmc50.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/tmp102.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/tmp103.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/tmp401.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/tmp421.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/via-cputemp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/via686a.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/vt1211.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/vt8231.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83627ehf.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83627hf.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83781d.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83791d.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83792d.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83793.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83795.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83l785ts.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/hwmon/w83l786ng.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/i2c/ +drwxr-xr-x root/root lib/modules//kernel/drivers/i2c/busses/ +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-amd756-s4882.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-amd756.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-amd8111.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-designware-core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-designware-pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-i801.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-isch.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-ismt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-nforce2-s4985.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-nforce2.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-piix4.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/busses/i2c-scmi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/i2c-dev.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/i2c-mux.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/i2c-slave-eeprom.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/i2c-smbus.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/i2c/muxes/ +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/muxes/i2c-mux-pca9541.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/i2c/muxes/i2c-mux-reg.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/input/ +-rw-r--r-- root/root lib/modules//kernel/drivers/input/evdev.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/input/input-leds.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/input/input-polldev.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/input/mouse/ +-rw-r--r-- root/root lib/modules//kernel/drivers/input/mouse/synaptics_i2c.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/input/mouse/synaptics_usb.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/input/mousedev.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/input/serio/ +-rw-r--r-- root/root lib/modules//kernel/drivers/input/serio/pcips2.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/input/serio/serio_raw.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/input/sparse-keymap.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/leds/ +-rw-r--r-- root/root lib/modules//kernel/drivers/leds/led-class.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/md/ +-rw-r--r-- root/root lib/modules//kernel/drivers/md/dm-log.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/md/dm-mirror.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/md/dm-multipath.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/md/dm-raid.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/md/dm-region-hash.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/md/dm-round-robin.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/media/ +drwxr-xr-x root/root lib/modules//kernel/drivers/media/i2c/ +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/mt9m111.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/ov7670.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/media/i2c/soc_camera/ +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/imx074.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/mt9m001.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/mt9t031.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/mt9t112.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/mt9v022.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/ov2640.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/ov5642.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/ov6650.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/ov772x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/ov9640.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/ov9740.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/rj54n1cb0c.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/i2c/soc_camera/tw9910.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/media/platform/ +drwxr-xr-x root/root lib/modules//kernel/drivers/media/platform/marvell-ccic/ +-rw-r--r-- root/root lib/modules//kernel/drivers/media/platform/marvell-ccic/cafe_ccic.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/media/platform/soc_camera/ +-rw-r--r-- root/root lib/modules//kernel/drivers/media/platform/soc_camera/soc_camera.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/platform/soc_camera/soc_camera_platform.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/platform/soc_camera/soc_mediabus.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/media/tuners/ +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/mc44s803.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/mt20xx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/tda18271.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/tda827x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/tda8290.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/tda9887.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/tuner-simple.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/tuner-types.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/tuner-xc2028.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/xc4000.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/tuners/xc5000.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/media/v4l2-core/ +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/v4l2-common.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/v4l2-dv-timings.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videobuf-core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videobuf2-core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videobuf2-dma-contig.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videobuf2-dma-sg.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videobuf2-memops.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videobuf2-v4l2.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videobuf2-vmalloc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/media/v4l2-core/videodev.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/memstick/ +drwxr-xr-x root/root lib/modules//kernel/drivers/memstick/core/ +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/core/memstick.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/core/ms_block.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/core/mspro_block.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/memstick/host/ +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/host/jmb38x_ms.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/host/r592.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/host/rtsx_pci_ms.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/host/rtsx_usb_ms.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/memstick/host/tifm_ms.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/message/ +drwxr-xr-x root/root lib/modules//kernel/drivers/message/fusion/ +-rw-r--r-- root/root lib/modules//kernel/drivers/message/fusion/mptbase.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/message/fusion/mptctl.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/message/fusion/mptfc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/message/fusion/mptsas.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/message/fusion/mptscsih.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/message/fusion/mptspi.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/mfd/ +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/intel-lpss-acpi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/intel-lpss-pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/intel-lpss.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/intel_quark_i2c_gpio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/lpc_ich.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/lpc_sch.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/mfd-core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/rdc321x-southbridge.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/rtsx_pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mfd/rtsx_usb.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/misc/ +drwxr-xr-x root/root lib/modules//kernel/drivers/misc/cb710/ +-rw-r--r-- root/root lib/modules//kernel/drivers/misc/cb710/cb710.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/misc/eeprom/ +-rw-r--r-- root/root lib/modules//kernel/drivers/misc/eeprom/eeprom_93cx6.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/misc/lis3lv02d/ +-rw-r--r-- root/root lib/modules//kernel/drivers/misc/lis3lv02d/lis3lv02d.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/misc/tifm_7xx1.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/misc/tifm_core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/misc/vmw_balloon.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/misc/vmw_vmci/ +-rw-r--r-- root/root lib/modules//kernel/drivers/misc/vmw_vmci/vmw_vmci.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/mmc/ +drwxr-xr-x root/root lib/modules//kernel/drivers/mmc/card/ +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/card/mmc_block.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/card/sdio_uart.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/mmc/core/ +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/core/mmc_core.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/mmc/host/ +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/cb710-mmc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/mmc_spi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/mtk-sd.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/rtsx_pci_sdmmc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/rtsx_usb_sdmmc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/sdhci-acpi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/sdhci-pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/sdhci-pltfm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/sdhci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/sdricoh_cs.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/tifm_sd.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/toshsd.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/usdhi6rol0.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/ushc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/via-sdmmc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/vub300.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/mmc/host/wbsd.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/3com/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/3com/3c59x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/3com/typhoon.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/8390/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/8390/8390.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/8390/ne2k-pci.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/adaptec/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/adaptec/starfire.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/amd/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/amd/amd8111e.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/amd/pcnet32.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/atheros/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/atheros/alx/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/atheros/alx/alx.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/atheros/atl1c/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/atheros/atl1c/atl1c.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/atheros/atl1e/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/atheros/atl1e/atl1e.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/atheros/atlx/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/atheros/atlx/atl1.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/atheros/atlx/atl2.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/broadcom/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/broadcom/b44.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/broadcom/bnx2.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/broadcom/bnx2x/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/broadcom/bnx2x/bnx2x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/broadcom/cnic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/broadcom/tg3.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/brocade/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/brocade/bna/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/brocade/bna/bna.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/cadence/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/cadence/macb.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/cisco/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/cisco/enic/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/cisco/enic/enic.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/dec/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/dec/tulip/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dec/tulip/de2104x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dec/tulip/de4x5.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dec/tulip/dmfe.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dec/tulip/tulip.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dec/tulip/uli526x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dec/tulip/winbond-840.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/dlink/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dlink/dl2k.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/dlink/sundance.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/emulex/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/emulex/benet/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/emulex/benet/be2net.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/hp/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/hp/hp100.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/e100.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/e1000/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/e1000/e1000.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/e1000e/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/e1000e/e1000e.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/igb/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/igb/igb.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/igbvf/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/igbvf/igbvf.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/ixgb/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/ixgb/ixgb.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/ixgbe/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/ixgbe/ixgbe.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/intel/ixgbevf/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/intel/ixgbevf/ixgbevf.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/marvell/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/marvell/mvmdio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/marvell/skge.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/marvell/sky2.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/natsemi/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/natsemi/natsemi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/natsemi/ns83820.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/nvidia/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/nvidia/forcedeth.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/realtek/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/realtek/8139cp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/realtek/8139too.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/realtek/r8169.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/ethernet/via/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/via/via-rhine.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/ethernet/via/via-velocity.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/mdio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/mii.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/nlmon.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ath/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ath/ath10k/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath10k/ath10k_core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath10k/ath10k_pci.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ath/ath5k/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath5k/ath5k.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ath/ath6kl/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath6kl/ath6kl_core.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ath/ath9k/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath9k/ath9k.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath9k/ath9k_common.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath9k/ath9k_htc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ath/ath9k/ath9k_hw.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/broadcom/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/broadcom/b43/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/broadcom/b43/b43.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/broadcom/b43legacy/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/broadcom/b43legacy/b43legacy.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/intel/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/intel/ipw2x00/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/ipw2x00/ipw2100.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/ipw2x00/ipw2200.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/ipw2x00/libipw.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/intel/iwlegacy/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/iwlegacy/iwl3945.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/iwlegacy/iwl4965.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/iwlegacy/iwlegacy.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/intel/iwlwifi/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/intel/iwlwifi/dvm/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/iwlwifi/dvm/iwldvm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/iwlwifi/iwlwifi.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/intel/iwlwifi/mvm/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/intel/iwlwifi/mvm/iwlmvm.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ralink/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2400pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2500pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2800lib.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2800mmio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2800pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2x00lib.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2x00mmio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt2x00pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/ralink/rt2x00/rt61pci.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/ +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/btcoexist/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/btcoexist/btcoexist.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/rtl8188ee.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192c/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192c/rtl8192c-common.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192ce/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192ce/rtl8192ce.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192de/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192de/rtl8192de.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192se/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8192se/rtl8192se.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723ae/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723ae/rtl8723ae.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723com/ +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl8723com/rtl8723-common.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtl_pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/net/wireless/realtek/rtlwifi/rtlwifi.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/nvdimm/ +-rw-r--r-- root/root lib/modules//kernel/drivers/nvdimm/libnvdimm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/nvdimm/nd_blk.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/nvdimm/nd_btt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/nvdimm/nd_pmem.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/pci/ +drwxr-xr-x root/root lib/modules//kernel/drivers/pci/host/ +-rw-r--r-- root/root lib/modules//kernel/drivers/pci/host/vmd.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/pci/hotplug/ +-rw-r--r-- root/root lib/modules//kernel/drivers/pci/hotplug/acpiphp_ibm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pci/hotplug/cpcihp_generic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pci/hotplug/cpcihp_zt5550.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pci/hotplug/shpchp.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/pcmcia/ +-rw-r--r-- root/root lib/modules//kernel/drivers/pcmcia/i82092.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pcmcia/pcmcia.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pcmcia/pcmcia_core.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pcmcia/pcmcia_rsrc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pcmcia/pd6729.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/pcmcia/yenta_socket.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/platform/ +drwxr-xr-x root/root lib/modules//kernel/drivers/platform/x86/ +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/acer-wmi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/acerhdf.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/alienware-wmi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/amilo-rfkill.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/apple-gmux.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/asus-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/asus-wireless.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/classmate-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/compal-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/dell-rbtn.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/dell-smo8800.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/dell-wmi-aio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/fujitsu-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/fujitsu-tablet.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/hdaps.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/hp-wireless.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/hp-wmi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/hp_accel.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/ibm_rtl.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/ideapad-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel-hid.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel-rst.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel-smartconnect.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel-vbtn.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel_ips.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel_menlow.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel_oaktrail.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel_pmc_ipc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/intel_punit_ipc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/msi-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/msi-wmi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/mxm-wmi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/panasonic-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/pvpanic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/samsung-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/samsung-q10.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/sony-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/surfacepro3_button.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/thinkpad_acpi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/topstar-laptop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/toshiba-wmi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/toshiba_bluetooth.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/toshiba_haps.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/platform/x86/wmi.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/pps/ +-rw-r--r-- root/root lib/modules//kernel/drivers/pps/pps_core.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/ptp/ +-rw-r--r-- root/root lib/modules//kernel/drivers/ptp/ptp.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/regulator/ +-rw-r--r-- root/root lib/modules//kernel/drivers/regulator/gpio-regulator.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/regulator/userspace-consumer.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/3w-9xxx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/3w-xxxx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/BusLogic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/a100u2w.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/aacraid/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/aacraid/aacraid.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/advansys.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/aic7xxx/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/aic7xxx/aic79xx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/aic7xxx/aic7xxx.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/aic94xx/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/aic94xx/aic94xx.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/arcmsr/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/arcmsr/arcmsr.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/atp870u.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/dc395x.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/dmx3191d.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/dpt_i2o.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/eata.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/fdomain.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/gdth.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/hpsa.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/hptiop.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/initio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/ipr.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/ips.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/libiscsi.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/libsas/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/libsas/libsas.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/lpfc/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/lpfc/lpfc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/megaraid.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/megaraid/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/megaraid/megaraid_mbox.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/megaraid/megaraid_mm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/megaraid/megaraid_sas.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/mpt3sas/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/mpt3sas/mpt3sas.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/mvsas/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/mvsas/mvsas.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/qla1280.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/qla2xxx/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/qla2xxx/qla2xxx.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/qla4xxx/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/qla4xxx/qla4xxx.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/scsi_transport_fc.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/scsi_transport_iscsi.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/scsi_transport_sas.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/scsi_transport_spi.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/snic/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/snic/snic.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/stex.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/scsi/sym53c8xx_2/ +-rw-r--r-- root/root lib/modules//kernel/drivers/scsi/sym53c8xx_2/sym53c8xx.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/spi/ +-rw-r--r-- root/root lib/modules//kernel/drivers/spi/spi-bitbang.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/spi/spi-dw-midpci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/spi/spi-dw-mmio.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/spi/spi-dw.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/ssb/ +-rw-r--r-- root/root lib/modules//kernel/drivers/ssb/ssb.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/thermal/ +drwxr-xr-x root/root lib/modules//kernel/drivers/thermal/int340x_thermal/ +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/int340x_thermal/acpi_thermal_rel.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/int340x_thermal/int3400_thermal.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/int340x_thermal/int3402_thermal.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/int340x_thermal/int3403_thermal.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/int340x_thermal/int3406_thermal.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/int340x_thermal/int340x_thermal_zone.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/int340x_thermal/processor_thermal_device.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/intel_pch_thermal.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/intel_powerclamp.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/intel_soc_dts_iosf.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/thermal/intel_soc_dts_thermal.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/uio/ +-rw-r--r-- root/root lib/modules//kernel/drivers/uio/uio.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/usb/ +drwxr-xr-x root/root lib/modules//kernel/drivers/usb/class/ +-rw-r--r-- root/root lib/modules//kernel/drivers/usb/class/cdc-acm.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/usb/mon/ +-rw-r--r-- root/root lib/modules//kernel/drivers/usb/mon/usbmon.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/usb/storage/ +-rw-r--r-- root/root lib/modules//kernel/drivers/usb/storage/usb-storage.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/video/ +drwxr-xr-x root/root lib/modules//kernel/drivers/video/backlight/ +-rw-r--r-- root/root lib/modules//kernel/drivers/video/backlight/generic_bl.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/video/backlight/lcd.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/virtio/ +-rw-r--r-- root/root lib/modules//kernel/drivers/virtio/virtio_balloon.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/virtio/virtio_input.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/virtio/virtio_mmio.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/w1/ +drwxr-xr-x root/root lib/modules//kernel/drivers/w1/masters/ +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/masters/ds1wm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/masters/ds2482.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/masters/ds2490.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/masters/matrox_w1.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/masters/w1-gpio.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/w1/slaves/ +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_bq27000.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2406.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2408.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2413.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2423.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2431.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2433.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2760.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2780.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds2781.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_ds28e04.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_smem.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/slaves/w1_therm.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/w1/wire.ko +drwxr-xr-x root/root lib/modules//kernel/drivers/watchdog/ +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/acquirewdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/advantechwdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/alim1535_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/alim7101_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/cadence_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/cpu5wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/dw_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/eurotechwdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/f71808e_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/hpwdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/i6300esb.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/iTCO_vendor_support.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/iTCO_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/ib700wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/ibmasr.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/ie6xx_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/it8712f_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/it87_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/machzwd.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/max63xx_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/mena21_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/ni903x_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/nv_tco.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/of_xilinx_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/pc87413_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/pcwd_pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/pcwd_usb.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/sbc60xxwdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/sbc_epx_c3.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/sbc_fitpc2_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/sc1200wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/sch311x_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/smsc37b787_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/softdog.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/sp5100_tco.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/via_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/w83627hf_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/w83877f_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/w83977f_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/wafer5823wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/wdat_wdt.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/wdt_pci.ko +-rw-r--r-- root/root lib/modules//kernel/drivers/watchdog/ziirave_wdt.ko +drwxr-xr-x root/root lib/modules//kernel/fs/ +drwxr-xr-x root/root lib/modules//kernel/fs/btrfs/ +-rw-r--r-- root/root lib/modules//kernel/fs/btrfs/btrfs.ko +drwxr-xr-x root/root lib/modules//kernel/fs/f2fs/ +-rw-r--r-- root/root lib/modules//kernel/fs/f2fs/f2fs.ko +drwxr-xr-x root/root lib/modules//kernel/fs/fat/ +-rw-r--r-- root/root lib/modules//kernel/fs/fat/fat.ko +-rw-r--r-- root/root lib/modules//kernel/fs/fat/msdos.ko +-rw-r--r-- root/root lib/modules//kernel/fs/fat/vfat.ko +drwxr-xr-x root/root lib/modules//kernel/fs/fuse/ +-rw-r--r-- root/root lib/modules//kernel/fs/fuse/fuse.ko +drwxr-xr-x root/root lib/modules//kernel/fs/hfsplus/ +-rw-r--r-- root/root lib/modules//kernel/fs/hfsplus/hfsplus.ko +drwxr-xr-x root/root lib/modules//kernel/fs/isofs/ +-rw-r--r-- root/root lib/modules//kernel/fs/isofs/isofs.ko +drwxr-xr-x root/root lib/modules//kernel/fs/jfs/ +-rw-r--r-- root/root lib/modules//kernel/fs/jfs/jfs.ko +drwxr-xr-x root/root lib/modules//kernel/fs/nilfs2/ +-rw-r--r-- root/root lib/modules//kernel/fs/nilfs2/nilfs2.ko +drwxr-xr-x root/root lib/modules//kernel/fs/nls/ +-rw-r--r-- root/root lib/modules//kernel/fs/nls/nls_cp437.ko +-rw-r--r-- root/root lib/modules//kernel/fs/nls/nls_iso8859-1.ko +-rw-r--r-- root/root lib/modules//kernel/fs/nls/nls_iso8859-15.ko +-rw-r--r-- root/root lib/modules//kernel/fs/nls/nls_utf8.ko +drwxr-xr-x root/root lib/modules//kernel/fs/ntfs/ +-rw-r--r-- root/root lib/modules//kernel/fs/ntfs/ntfs.ko +drwxr-xr-x root/root lib/modules//kernel/fs/reiserfs/ +-rw-r--r-- root/root lib/modules//kernel/fs/reiserfs/reiserfs.ko +drwxr-xr-x root/root lib/modules//kernel/fs/udf/ +-rw-r--r-- root/root lib/modules//kernel/fs/udf/udf.ko +drwxr-xr-x root/root lib/modules//kernel/fs/ufs/ +-rw-r--r-- root/root lib/modules//kernel/fs/ufs/ufs.ko +drwxr-xr-x root/root lib/modules//kernel/fs/xfs/ +-rw-r--r-- root/root lib/modules//kernel/fs/xfs/xfs.ko +drwxr-xr-x root/root lib/modules//kernel/net/ +drwxr-xr-x root/root lib/modules//kernel/net/bluetooth/ +-rw-r--r-- root/root lib/modules//kernel/net/bluetooth/bluetooth.ko +drwxr-xr-x root/root lib/modules//kernel/net/core/ +-rw-r--r-- root/root lib/modules//kernel/net/core/pktgen.ko +drwxr-xr-x root/root lib/modules//kernel/net/ipv4/ +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/ah4.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/esp4.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/gre.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/inet_diag.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/ip_gre.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/ip_vti.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/ipcomp.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/ipip.ko +drwxr-xr-x root/root lib/modules//kernel/net/ipv4/netfilter/ +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/netfilter/nf_nat_snmp_basic.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/tcp_diag.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/tunnel4.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/udp_diag.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/xfrm4_mode_beet.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/xfrm4_mode_transport.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/xfrm4_mode_tunnel.ko +-rw-r--r-- root/root lib/modules//kernel/net/ipv4/xfrm4_tunnel.ko +drwxr-xr-x root/root lib/modules//kernel/net/mac80211/ +-rw-r--r-- root/root lib/modules//kernel/net/mac80211/mac80211.ko +drwxr-xr-x root/root lib/modules//kernel/net/netfilter/ +-rw-r--r-- root/root lib/modules//kernel/net/netfilter/xt_LED.ko +drwxr-xr-x root/root lib/modules//kernel/net/rfkill/ +-rw-r--r-- root/root lib/modules//kernel/net/rfkill/rfkill.ko +drwxr-xr-x root/root lib/modules//kernel/net/wireless/ +-rw-r--r-- root/root lib/modules//kernel/net/wireless/cfg80211.ko +-rw-r--r-- root/root lib/modules//kernel/net/wireless/lib80211.ko +-rw-r--r-- root/root lib/modules//kernel/net/wireless/lib80211_crypt_ccmp.ko +-rw-r--r-- root/root lib/modules//kernel/net/wireless/lib80211_crypt_tkip.ko +-rw-r--r-- root/root lib/modules//kernel/net/wireless/lib80211_crypt_wep.ko +drwxr-xr-x root/root lib/modules//kernel/net/xfrm/ +-rw-r--r-- root/root lib/modules//kernel/net/xfrm/xfrm_ipcomp.ko +drwxr-xr-x root/root lib/modules//kernel/sound/ +drwxr-xr-x root/root lib/modules//kernel/sound/core/ +-rw-r--r-- root/root lib/modules//kernel/sound/core/snd-pcm.ko +-rw-r--r-- root/root lib/modules//kernel/sound/core/snd-timer.ko +-rw-r--r-- root/root lib/modules//kernel/sound/core/snd.ko +drwxr-xr-x root/root lib/modules//kernel/sound/hda/ +-rw-r--r-- root/root lib/modules//kernel/sound/hda/snd-hda-core.ko +drwxr-xr-x root/root lib/modules//kernel/sound/pci/ +drwxr-xr-x root/root lib/modules//kernel/sound/pci/hda/ +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-analog.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-ca0110.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-ca0132.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-cirrus.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-cmedia.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-conexant.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-generic.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-hdmi.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-idt.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-realtek.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-si3054.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec-via.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-codec.ko +-rw-r--r-- root/root lib/modules//kernel/sound/pci/hda/snd-hda-intel.ko +-rw-r--r-- root/root lib/modules//kernel/sound/soundcore.ko +-rw-r--r-- root/root lib/modules//modules.alias +-rw-r--r-- root/root lib/modules//modules.alias.bin +-rw-r--r-- root/root lib/modules//modules.builtin +-rw-r--r-- root/root lib/modules//modules.builtin.bin +-rw-r--r-- root/root lib/modules//modules.dep +-rw-r--r-- root/root lib/modules//modules.dep.bin +-rw-r--r-- root/root lib/modules//modules.devname +-rw-r--r-- root/root lib/modules//modules.order +-rw-r--r-- root/root lib/modules//modules.softdep +-rw-r--r-- root/root lib/modules//modules.symbols +-rw-r--r-- root/root lib/modules//modules.symbols.bin +lrwxrwxrwx root/root lib/modules//source -> /usr/src/linux-4.9.111 drwxr-xr-x root/root usr/ drwxr-xr-x root/root usr/src/ --rw-r--r-- root/root usr/src/config-4.9.92-gnu --rw-r--r-- root/root usr/src/cpu_optimizations-4.9.92.patch +-rw-r--r-- root/root usr/src/config-4.9.111-gnu +-rw-r--r-- root/root usr/src/cpu_optimizations-4.9.111.patch diff --git a/core/ports/linux-gnu/.md5sum b/core/ports/linux-gnu/.md5sum index c036940..d79a0d9 100644 --- a/core/ports/linux-gnu/.md5sum +++ b/core/ports/linux-gnu/.md5sum @@ -1,3 +1,3 @@ -4d9228fb147d3a5ac779f1b84b153a82 config-crux +9fa0186479cf95f6ecf40d613169c7d8 config-crux c92c4304d774ced05be10a35a0a2ec55 cpu_optimizations.patch -9c8ae19f781ee9967430a6e18e6a1a5c linux-libre-4.9.92-gnu.tar.xz +cb34a8cc00f62ee5c97619ab0689f8ad linux-libre-4.9.111-gnu.tar.xz diff --git a/core/ports/linux-gnu/Pkgfile b/core/ports/linux-gnu/Pkgfile index 9d43608..ea8868f 100644 --- a/core/ports/linux-gnu/Pkgfile +++ b/core/ports/linux-gnu/Pkgfile @@ -4,9 +4,9 @@ # Depends on: dracut grub2 grub2-efi name=linux-gnu -version=4.9.92 -release=9 -source=(http://linux-libre.fsfla.org/pub/linux-libre/releases/$version-gnu/linux-libre-$version-gnu.tar.xz \ +version=4.9.111 +release=12 +source=(https://linux-libre.fsfla.org/pub/linux-libre/releases/$version-gnu/linux-libre-$version-gnu.tar.xz \ cpu_optimizations.patch \ config-crux) diff --git a/core/ports/linux-gnu/config-crux b/core/ports/linux-gnu/config-crux index 03d3b5a..35df266 100644 --- a/core/ports/linux-gnu/config-crux +++ b/core/ports/linux-gnu/config-crux @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.9.92-gnu Kernel Configuration +# Linux/x86 4.9.111-gnu Kernel Configuration # CONFIG_64BIT=y CONFIG_X86_64=y @@ -3184,7 +3184,7 @@ CONFIG_DRM_UDL=m # CONFIG_DRM_AST is not set # CONFIG_DRM_MGAG200 is not set # CONFIG_DRM_CIRRUS_QEMU is not set -# CONFIG_DRM_QXL is not set +CONFIG_DRM_QXL=y CONFIG_DRM_BOCHS=y CONFIG_DRM_VIRTIO_GPU=y CONFIG_DRM_PANEL=y @@ -4619,9 +4619,10 @@ CONFIG_CRYPTO_RNG_DEFAULT=y CONFIG_CRYPTO_AKCIPHER2=y CONFIG_CRYPTO_AKCIPHER=y CONFIG_CRYPTO_KPP2=y +CONFIG_CRYPTO_KPP=y CONFIG_CRYPTO_RSA=y -# CONFIG_CRYPTO_DH is not set -# CONFIG_CRYPTO_ECDH is not set +CONFIG_CRYPTO_DH=y +CONFIG_CRYPTO_ECDH=y CONFIG_CRYPTO_MANAGER=y CONFIG_CRYPTO_MANAGER2=y # CONFIG_CRYPTO_USER is not set @@ -4652,7 +4653,7 @@ CONFIG_CRYPTO_CBC=y CONFIG_CRYPTO_CTR=y CONFIG_CRYPTO_CTS=y CONFIG_CRYPTO_ECB=y -# CONFIG_CRYPTO_LRW is not set +CONFIG_CRYPTO_LRW=y # CONFIG_CRYPTO_PCBC is not set CONFIG_CRYPTO_XTS=y # CONFIG_CRYPTO_KEYWRAP is not set @@ -4662,8 +4663,8 @@ CONFIG_CRYPTO_XTS=y # CONFIG_CRYPTO_CMAC=y CONFIG_CRYPTO_HMAC=y -# CONFIG_CRYPTO_XCBC is not set -# CONFIG_CRYPTO_VMAC is not set +CONFIG_CRYPTO_XCBC=y +CONFIG_CRYPTO_VMAC=y # # Digest @@ -4677,13 +4678,13 @@ CONFIG_CRYPTO_CRCT10DIF=y CONFIG_CRYPTO_GHASH=y # CONFIG_CRYPTO_POLY1305 is not set # CONFIG_CRYPTO_POLY1305_X86_64 is not set -# CONFIG_CRYPTO_MD4 is not set +CONFIG_CRYPTO_MD4=y CONFIG_CRYPTO_MD5=y CONFIG_CRYPTO_MICHAEL_MIC=y # CONFIG_CRYPTO_RMD128 is not set -# CONFIG_CRYPTO_RMD160 is not set -# CONFIG_CRYPTO_RMD256 is not set -# CONFIG_CRYPTO_RMD320 is not set +CONFIG_CRYPTO_RMD160=y +CONFIG_CRYPTO_RMD256=y +CONFIG_CRYPTO_RMD320=y CONFIG_CRYPTO_SHA1=y # CONFIG_CRYPTO_SHA1_SSSE3 is not set # CONFIG_CRYPTO_SHA256_SSSE3 is not set @@ -4693,9 +4694,9 @@ CONFIG_CRYPTO_SHA1=y # CONFIG_CRYPTO_SHA512_MB is not set CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA512=y -# CONFIG_CRYPTO_SHA3 is not set -# CONFIG_CRYPTO_TGR192 is not set -# CONFIG_CRYPTO_WP512 is not set +CONFIG_CRYPTO_SHA3=y +CONFIG_CRYPTO_TGR192=y +CONFIG_CRYPTO_WP512=y # CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL is not set # @@ -4704,20 +4705,22 @@ CONFIG_CRYPTO_SHA512=y CONFIG_CRYPTO_AES=y # CONFIG_CRYPTO_AES_X86_64 is not set # CONFIG_CRYPTO_AES_NI_INTEL is not set -# CONFIG_CRYPTO_ANUBIS is not set +CONFIG_CRYPTO_ANUBIS=y CONFIG_CRYPTO_ARC4=y -# CONFIG_CRYPTO_BLOWFISH is not set +CONFIG_CRYPTO_BLOWFISH=y +CONFIG_CRYPTO_BLOWFISH_COMMON=y # CONFIG_CRYPTO_BLOWFISH_X86_64 is not set -# CONFIG_CRYPTO_CAMELLIA is not set +CONFIG_CRYPTO_CAMELLIA=y # CONFIG_CRYPTO_CAMELLIA_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64 is not set # CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64 is not set -# CONFIG_CRYPTO_CAST5 is not set +CONFIG_CRYPTO_CAST_COMMON=y +CONFIG_CRYPTO_CAST5=y # CONFIG_CRYPTO_CAST5_AVX_X86_64 is not set -# CONFIG_CRYPTO_CAST6 is not set +CONFIG_CRYPTO_CAST6=y # CONFIG_CRYPTO_CAST6_AVX_X86_64 is not set CONFIG_CRYPTO_DES=y -# CONFIG_CRYPTO_DES3_EDE_X86_64 is not set +CONFIG_CRYPTO_DES3_EDE_X86_64=y # CONFIG_CRYPTO_FCRYPT is not set # CONFIG_CRYPTO_KHAZAD is not set # CONFIG_CRYPTO_SALSA20 is not set @@ -4725,12 +4728,13 @@ CONFIG_CRYPTO_DES=y # CONFIG_CRYPTO_CHACHA20 is not set # CONFIG_CRYPTO_CHACHA20_X86_64 is not set # CONFIG_CRYPTO_SEED is not set -# CONFIG_CRYPTO_SERPENT is not set +CONFIG_CRYPTO_SERPENT=y # CONFIG_CRYPTO_SERPENT_SSE2_X86_64 is not set # CONFIG_CRYPTO_SERPENT_AVX_X86_64 is not set # CONFIG_CRYPTO_SERPENT_AVX2_X86_64 is not set # CONFIG_CRYPTO_TEA is not set -# CONFIG_CRYPTO_TWOFISH is not set +CONFIG_CRYPTO_TWOFISH=y +CONFIG_CRYPTO_TWOFISH_COMMON=y # CONFIG_CRYPTO_TWOFISH_X86_64 is not set # CONFIG_CRYPTO_TWOFISH_X86_64_3WAY is not set # CONFIG_CRYPTO_TWOFISH_AVX_X86_64 is not set @@ -4739,10 +4743,10 @@ CONFIG_CRYPTO_DES=y # Compression # CONFIG_CRYPTO_DEFLATE=y -# CONFIG_CRYPTO_LZO is not set -# CONFIG_CRYPTO_842 is not set -# CONFIG_CRYPTO_LZ4 is not set -# CONFIG_CRYPTO_LZ4HC is not set +CONFIG_CRYPTO_LZO=y +CONFIG_CRYPTO_842=y +CONFIG_CRYPTO_LZ4=y +CONFIG_CRYPTO_LZ4HC=y # # Random Number Generation @@ -4829,10 +4833,14 @@ CONFIG_LIBCRC32C=y CONFIG_CRC8=y # CONFIG_AUDIT_ARCH_COMPAT_GENERIC is not set # CONFIG_RANDOM32_SELFTEST is not set +CONFIG_842_COMPRESS=y +CONFIG_842_DECOMPRESS=y CONFIG_ZLIB_INFLATE=y CONFIG_ZLIB_DEFLATE=y CONFIG_LZO_COMPRESS=y CONFIG_LZO_DECOMPRESS=y +CONFIG_LZ4_COMPRESS=y +CONFIG_LZ4HC_COMPRESS=y CONFIG_LZ4_DECOMPRESS=y CONFIG_XZ_DEC=y CONFIG_XZ_DEC_X86=y diff --git a/core/ports/linux-gnu/post-install b/core/ports/linux-gnu/post-install index 5363300..45690a4 100644 --- a/core/ports/linux-gnu/post-install +++ b/core/ports/linux-gnu/post-install @@ -1,5 +1,5 @@ #!/bin/sh -/usr/bin/dracut -f --kver 4.9.92-gnu +/usr/bin/dracut -f --kver 4.9.111-gnu /usr/sbin/grub-mkconfig -o /boot/grub/grub.cfg diff --git a/core/scripts/setup-target.sh b/core/scripts/setup-target.sh index b0828e5..ecbe018 100755 --- a/core/scripts/setup-target.sh +++ b/core/scripts/setup-target.sh @@ -13,7 +13,7 @@ SCRIPTPATH=$(dirname "$SCRIPT") DIR=$(dirname "$SCRIPTPATH"); DIR_LOCAL="$(dirname $(dirname ${DIR}))/local"; -ISO_FILE="${DIR_LOCAL}/crux-3.3.iso" +ISO_FILE="${DIR_LOCAL}/crux-3.4.iso" ##read BLK_EFI BLK_EFI="${DEV}2" diff --git a/tools/qemu.html b/tools/qemu.html index 1d745d4..e180ed4 100644 --- a/tools/qemu.html +++ b/tools/qemu.html @@ -287,7 +287,7 @@ memory=1024 boot=d tap="tap1" - iso=iso/crux-3.3.iso + iso=iso/crux-3.4.iso image=img/crux-standard.qcow2 other="-vga std -display sdl"
diff --git a/tools/scripts/runvm/profile/crux b/tools/scripts/runvm/profile/crux index af33e1b..672b80d 100644 --- a/tools/scripts/runvm/profile/crux +++ b/tools/scripts/runvm/profile/crux @@ -2,6 +2,6 @@ mac="54:60:be:ef:5c:64" memory=1024 boot=$2 tap="tap4" -iso=iso/crux-3.3.iso +iso=iso/crux-3.4.iso image=img/c14.qcow2 other="-vga std -display sdl" diff --git a/tools/scripts/runvm/runvm.sh b/tools/scripts/runvm/runvm.sh index 1e56a52..21cd097 100644 --- a/tools/scripts/runvm/runvm.sh +++ b/tools/scripts/runvm/runvm.sh @@ -10,7 +10,7 @@ source profile/$1 #memory=1024 #boot=d #tap="tap1" -#iso=iso/crux-3.3.iso +#iso=iso/crux-3.4.iso #image=img/crux-standard.qcow2 #other="-soundhw hda -vga std -display sdl" -- cgit 1.4.1-2-gfad0