install.sh

#!/bin/bash
#
# Copyright (C) 2022 National University of Singapore
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

if [ -t 1 ]
then
    RED="\033[31m"
    GREEN="\033[32m"
    YELLOW="\033[33m"
    BOLD="\033[1m"
    OFF="\033[0m"
else
    RED=
    GREEN=
    YELLOW=
    BOLD=
    OFF=
fi

NAME=redfat
VERSION=`cat VERSION`

if [ ! -x install/redfat.bin ]
then
    echo -e "${RED}$0${OFF}: run ./build.sh first" 1>&2
    exit 1
fi

set -e

cd install/
mkdir -p data
mkdir -p control

cd data/
mkdir -p "./usr/share/redfat/"
cp "../redfat-rt"       "./usr/share/redfat/"
cp "../redfat.bin"      "./usr/share/redfat/"
cp "../RedFatPlugin.so" "./usr/share/redfat/"
cp "../libredfat.so"    "./usr/share/redfat/"
cp "../e9patch"         "./usr/share/redfat/"
cp "../e9tool"          "./usr/share/redfat/"
mkdir -p "./usr/bin/"
cat << EOF > "./usr/bin/redfat"
#!/bin/sh

LD_PRELOAD=/usr/share/redfat/libredfat.so /usr/share/redfat/redfat.bin \$@

EOF
chmod a+x "./usr/bin/redfat"
mkdir -p "./usr/share/man/man1/"
gzip --stdout ../../man/redfat.1 > ./usr/share/man/man1/redfat.1.gz
tar cz --owner root --group root -f ../data.tar.gz .
md5sum `find ../data/ -type f -printf "%P "` > ../control/md5sums

cd ../control/
cat << EOF > control
Package: ${NAME}
Version: ${VERSION}
Maintainer: Gregory J. Duck <gregory@comp.nus.edu.sg>
Section: universe/devel
Priority: optional
Homepage: https://github.com/GJDuck/RedFat
Architecture: amd64
Depends: libc6 (>= 2.14)
Description: RedFat binary hardening
 RedFat is a tool for automatically hardening Linux x86_64 binaries against
 memory errors including buffer overflows and use-after-free.  This makes it
 possible to harden binaries without access to the original source code.
 .
 RedFat is designed to be scalable: it is based on the E9Patch static binary
 rewriting tool that can scale to very large software.  RedFat implements
 several optimizations to minimize the performance impact of the hardening
 instrumentation.
EOF
tar cz --owner root --group root -f ../control.tar.gz control md5sums
cd ..
echo "2.0" > debian-binary
PACKAGE="${NAME}_${VERSION}_amd64.deb"
fakeroot ar cr "../${PACKAGE}" debian-binary control.tar.gz \
    data.tar.gz
rm -rf debian-binary control.tar.gz data.tar.gz data/ control/

echo -e "${GREEN}$0${OFF}: Successfully built ${YELLOW}${PACKAGE}${OFF}..."

DIR="${NAME}-${VERSION}"
TAR_GZ="${DIR}.tar.gz"
mkdir -p "${DIR}"
cp "redfat-rt"       "${DIR}/"
cp "redfat.bin"      "${DIR}/"
cp "RedFatPlugin.so" "${DIR}/"
cp "libredfat.so"    "${DIR}/"
cp "e9patch"         "${DIR}/"
cp "e9tool"          "${DIR}/"
tar cz --owner root --group root -f "../${TAR_GZ}" "$DIR"

echo -e "${GREEN}$0${OFF}: Successfully built ${YELLOW}${TAR_GZ}${OFF}..."