updated build_database.sh

1 files changed, 190 insertions, 123 deletions

diff --git a/src/libpts/plugins/imv_attestation/build_database.sh b/src/libpts/plugins/imv_attestation/build_database.sh
index 310e3d3cc..5ce8edfe6 100755
--- a/src/libpts/plugins/imv_attestation/build_database.sh
+++ b/src/libpts/plugins/imv_attestation/build_database.sh
@@ -1,125 +1,192 @@
 #!/bin/sh
-ipsec attest --add --product "$1" --sha1-ima --dir  /sbin 
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/sbin
-ipsec attest --add --product "$1" --sha1-ima --dir  /bin
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/bin
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/acpi
-ipsec attest --add --product "$1" --sha1-ima --file /etc/init.d/rc
-ipsec attest --add --product "$1" --sha1-ima --file /etc/init.d/rcS
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/network/if-pre-up.d
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/network/if-up.d
-ipsec attest --add --product "$1" --sha1-ima --file /etc/NetworkManager/dispatcher.d/01ifupdown
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/ppp/ip-down.d
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/rc2.d
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/rcS.d
-ipsec attest --add --product "$1" --sha1-ima --file /etc/rc.local
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/resolvconf/update.d
-ipsec attest --add --product "$1" --sha1-ima --file /etc/resolvconf/update-libc.d/avahi-daemon
-ipsec attest --add --product "$1" --sha1-ima --dir  /etc/update-motd.d
-ipsec attest --add --product "$1" --sha1-ima --file /lib/crda/setregdomain
-ipsec attest --add --product "$1" --sha1-ima --file /lib/init/apparmor-profile-load
-ipsec attest --add --product "$1" --sha1-ima --file /lib/resolvconf/list-records
-ipsec attest --add --product "$1" --sha1-ima --dir  /lib/udev
-ipsec attest --add --product "$1" --sha1-ima --file /lib/ufw/ufw-init
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/accountsservice/accounts-daemon
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/at-spi2-core
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/avahi/avahi-daemon-check-dns.sh
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/bamf/bamfdaemon
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/ConsoleKit
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/ConsoleKit/run-seat.d
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/ConsoleKit/run-session.d
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/cups/notifier
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/dconf/dconf-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/dbus-1.0/dbus-daemon-launch-helper
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/evolution/3.2/evolution-alarm-notify
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/geoclue/geoclue-master
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/gnome-desktop3/check_gl_texture_size
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/gnome-disk-utility/gdu-notification-daemon
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/gnome-online-accounts/goa-daemon
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/gnome-settings-daemon
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/gnome-user-share/gnome-user-share
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/gvfs
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/gvfs//gvfs-fuse-daemon
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/i386-linux-gnu/colord/colord
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/i386-linux-gnu/gconf
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/indicator-application/indicator-application-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/indicator-appmenu/hud-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/indicator-datetime/indicator-datetime-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/indicator-messages/indicator-messages-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/indicator-printers/indicator-printers-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/indicator-session/indicator-session-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/indicator-sound/indicator-sound-service
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/lightdm
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/NetworkManager/nm-dhcp-client.action
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/NetworkManager/nm-dispatcher.action
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/nux/unity_support_test
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/pm-utils/power.d
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/policykit-1/polkitd
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/pulseaudio/pulse/gconf-helper
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/rtkit/rtkit-daemon
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/telepathy/mission-control-5
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/ubuntuone-client
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/ubuntu-geoip/ubuntu-geoip-provider
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/ubuntu-sso-client
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/udisks
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/unity/unity-panel-service
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/update-manager/release-upgrade-motd
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/lib/update-notifier
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/upower/upowerd
-ipsec attest --add --product "$1" --sha1-ima --file /usr/lib/zeitgeist/zeitgeist-fts
-ipsec attest --add --product "$1" --sha1-ima --dir  /usr/share/language-tools
-ipsec attest --add --product "$1" --sha1-ima --file /usr/share/virtualbox/VBoxCreateUSBNode.sh
-ipsec attest --add --product "$1" --sha1-ima --relative --file /etc/ld.so.cache
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /lib
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /lib/i386-linux-gnu
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /lib/i386-linux-gnu/security
-ipsec attest --add --product "$1" --sha1-ima --relative --file /lib/plymouth/details.so
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /lib/plymouth/renderers
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /lib/security
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/apache2/modules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/compiz
-ipsec attest --add --product "$1" --sha1-ima --relative --file /usr/lib/evolution/3.2/libemiscwidgets.so.0.0.0
-ipsec attest --add --product "$1" --sha1-ima --relative --file /usr/lib/evolution/3.2/libeutil.so.0.0.0
-ipsec attest --add --product "$1" --sha1-ima --relative --file /usr/lib/evolution/3.2/libgnomecanvas.so.0.0.0
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/gnome-bluetooth
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/gnome-settings-daemon-3.0
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/gtk-3.0/3.0.0/theming-engines
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/alsa-lib
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/dri
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gconf/2
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gconv
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gio/modules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-2.0/modules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-2.0/2.10.0/engines
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-3.0/modules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-3.0/3.0.0/immodules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gvfs
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/libcanberra-0.28
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/mesa
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/mit-krb5
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/openssl-1.0.0/engines
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/pango/1.6.0/modules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/pkcs11
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/polkit-1/extensions
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/nss
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/sane
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/indicators3/7
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/indicator-messages/status-providers/1
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/mission-control-plugins.0
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/ModemManager
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/nautilus/extensions-3.0
-ipsec attest --add --product "$1" --sha1-ima --relative --file /usr/lib/NetworkManager/libnm-settings-plugin-ifupdown.so
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/pulse-1.1/modules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/python2.7/lib-dynload
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/rsyslog
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/sane
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/sudo
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/xorg/modules
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/xorg/modules/drivers
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/xorg/modules/extensions
-ipsec attest --add --product "$1" --sha1-ima --relative --dir  /usr/lib/xorg/modules/input
+
+p="Ubuntu 12.04 LTS i686"
+
+ipsec attest --add --product "$p" --sha1-ima --dir  /sbin 
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/sbin
+ipsec attest --add --product "$p" --sha1-ima --dir  /bin
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/bin
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/acpi
+ipsec attest --add --product "$p" --sha1-ima --file /etc/init.d/rc
+ipsec attest --add --product "$p" --sha1-ima --file /etc/init.d/rcS
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/network/if-post-down.d
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/network/if-pre-up.d
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/network/if-up.d
+ipsec attest --add --product "$p" --sha1-ima --file /etc/NetworkManager/dispatcher.d/01ifupdown
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/ppp/ip-down.d
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/rc2.d
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/rcS.d
+ipsec attest --add --product "$p" --sha1-ima --file /etc/rc.local
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/resolvconf/update.d
+ipsec attest --add --product "$p" --sha1-ima --file /etc/resolvconf/update-libc.d/avahi-daemon
+ipsec attest --add --product "$p" --sha1-ima --dir  /etc/update-motd.d
+ipsec attest --add --product "$p" --sha1-ima --file /lib/crda/setregdomain
+ipsec attest --add --product "$p" --sha1-ima --file /lib/init/apparmor-profile-load
+ipsec attest --add --product "$p" --sha1-ima --file /lib/resolvconf/list-records
+ipsec attest --add --product "$p" --sha1-ima --dir  /lib/udev
+ipsec attest --add --product "$p" --sha1-ima --file /lib/ufw/ufw-init
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/accountsservice/accounts-daemon
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/at-spi2-core
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/avahi/avahi-daemon-check-dns.sh
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/bamf/bamfdaemon
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/ConsoleKit
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/ConsoleKit/run-seat.d
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/ConsoleKit/run-session.d
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/cups/notifier
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/dconf/dconf-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/dbus-1.0/dbus-daemon-launch-helper
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/deja-dup/deja-dup/deja-dup-monitor
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/evolution/3.2/evolution-alarm-notify
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/firefox/firefox
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/firefox/plugin-container
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/geoclue/geoclue-master
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/gnome-desktop3/check_gl_texture_size
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/gnome-disk-utility/gdu-notification-daemon
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/gnome-online-accounts/goa-daemon
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/gnome-settings-daemon
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/gnome-user-share/gnome-user-share
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/gnome-screensaver/gnome-screensaver-dialog
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/gvfs
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/gvfs//gvfs-fuse-daemon
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/i386-linux-gnu/colord/colord
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/i386-linux-gnu/gconf
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/indicator-application/indicator-application-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/indicator-appmenu/hud-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/indicator-datetime/indicator-datetime-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/indicator-messages/indicator-messages-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/indicator-printers/indicator-printers-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/indicator-session/indicator-session-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/indicator-sound/indicator-sound-service
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/lightdm
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/NetworkManager/nm-dhcp-client.action
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/NetworkManager/nm-dispatcher.action
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/notify-osd/notify-osd
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/nux/unity_support_test
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/pm-utils/power.d
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/policykit-1/polkitd
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/pulseaudio/pulse/gconf-helper
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/rtkit/rtkit-daemon
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/telepathy/mission-control-5
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/thunderbird/thunderbird
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/ubuntuone-client
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/ubuntu-geoip/ubuntu-geoip-provider
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/ubuntu-sso-client
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/udisks
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/unity/unity-panel-service
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/unity-lens-applications/unity-applications-daemon
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/unity-lens-files/unity-files-daemon
+ipsec attest --add --product "$p" --sha1-ima --dir /usr/lib/unity-lens-music
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/unity-lens-video/unity-lens-video
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/unity-scope-video-remote/unity-scope-video-remote
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/update-manager/release-upgrade-motd
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/lib/update-notifier
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/upower/upowerd
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/libvte-2.90-9/gnome-pty-helper
+ipsec attest --add --product "$p" --sha1-ima --file /usr/lib/zeitgeist/zeitgeist-fts
+ipsec attest --add --product "$p" --sha1-ima --file /usr/share/apport/apport
+ipsec attest --add --product "$p" --sha1-ima --file /usr/share/apport/apport-checkreports
+ipsec attest --add --product "$p" --sha1-ima --file /usr/share/apport/apport-gtk
+ipsec attest --add --product "$p" --sha1-ima --dir  /usr/share/language-tools
+ipsec attest --add --product "$p" --sha1-ima --file /usr/share/virtualbox/VBoxCreateUSBNode.sh
+ipsec attest --add --product "$p" --sha1-ima --relative --file /etc/ld.so.cache
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /lib
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /lib/i386-linux-gnu
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /lib/i386-linux-gnu/security
+ipsec attest --add --product "$p" --sha1-ima --relative --file /lib/plymouth/details.so
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /lib/plymouth/renderers
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /lib/security
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/apache2/modules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/compiz
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/enchant
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/evolution/3.2/libemiscwidgets.so.0.0.0
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/evolution/3.2/libeutil.so.0.0.0
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/evolution/3.2/libgnomecanvas.so.0.0.0
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/firefox/components/libbrowsercomps.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/firefox/libmozalloc.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/firefox/libmozsqlite3.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/firefox/libxpcom.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/firefox/libxul.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/firefox-addons/extensions/globalmenu@ubuntu.com/components/libglobalmenu.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/firefox-addons/plugins/nppdf.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/flashplugin-installer/libflashplayer.so
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/gedit/plugins
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/gnome-bluetooth
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/gnome-settings-daemon-3.0
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/gtk-3.0/3.0.0/theming-engines
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/alsa-lib
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/dri
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gconf/2
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gconv
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gio/modules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-2.0/modules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-2.0/2.10.0/engines
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-3.0/modules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gtk-3.0/3.0.0/immodules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/gvfs
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/libcanberra-0.28
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/mesa
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/mit-krb5
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/openssl-1.0.0/engines
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/pango/1.6.0/modules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/pkcs11
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/polkit-1/extensions
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/nss
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/i386-linux-gnu/sane
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/indicators3/7
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/indicator-messages/status-providers/1
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/libpeas-1.0/loaders
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/mission-control-plugins.0
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/ModemManager
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/nautilus/extensions-3.0
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/NetworkManager/libnm-settings-plugin-ifupdown.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/perl/5.14.2/auto/File/Glob/Glob.so
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/pulse-1.1/modules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/python2.7/lib-dynload
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/apt_inst.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/apt_pkg.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/cairo/_cairo.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/dbus/mainloop/qt.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/_dbus_bindings.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/_dbus_glib_bindings.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/duplicity/_librsync.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gi/_gi.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gi/_gobject/_gobject.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gi/_glib/_glib.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/glib/_glib.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gobject/_gobject.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gtk-2.0/atk.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gtk-2.0/gtk/_gtk.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gtk-2.0/gio/_gio.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gtk-2.0/gio/unix.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gtk-2.0/pango.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gtk-2.0/pangocairo.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/gtk-2.0/pynotify/_pynotify.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/OpenSSL/crypto.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/OpenSSL/rand.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/OpenSSL/SSL.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/PyQt4/QtCore.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/simplejson/_speedups.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/sip.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/twisted/internet/_sigchld.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/twisted/python/_initgroups.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/xapian/_xapian.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/python2.7/dist-packages/zope/interface/_zope_interface_coptimizations.so
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/rsyslog
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/sane
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/sudo
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/thunderbird/libldap60.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/thunderbird/libldif60.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/thunderbird/libprldap60.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/thunderbird/components/libdbusservice.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/thunderbird/components/libmozgnome.so
+ipsec attest --add --product "$p" --sha1-ima --relative --file /usr/lib/thunderbird-addons/extensions/globalmenu@ubuntu.com/components/libglobalmenu.so
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/xorg/modules
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/xorg/modules/drivers
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/xorg/modules/extensions
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/lib/xorg/modules/input
+ipsec attest --add --product "$p" --sha1-ima --relative --dir  /usr/share/fonts/truetype/ubuntu-font-family