Gecko [ www.thearyasamaj.org ]

/ usr / bin / [ HOME SHELL ]

Name	Size	Permission
7za	41 B	-rwxr-xr-x
GET	15.84 KB	-rwxr-xr-x
HEAD	15.84 KB	-rwxr-xr-x
POST	15.84 KB	-rwxr-xr-x
[	53.57 KB	-rwxr-xr-x
ab	56.96 KB	-rwxr-xr-x
ac	33.07 KB	-rwxr-xr-x
aclocal	35.62 KB	-rwxr-xr-x
aclocal-1.16	35.62 KB	-rwxr-xr-x
acyclic	12.37 KB	-rwxr-xr-x
addr2line	33.28 KB	-rwxr-xr-x
alias	29 B	-rwxr-xr-x
appstream-compose	33.21 KB	-rwxr-xr-x
appstream-util	114.34 KB	-rwxr-xr-x
apropos	54.04 KB	-rwxr-xr-x
ar	61.95 KB	-rwxr-xr-x
arch	37.33 KB	-rwxr-xr-x
arpaname	11.81 KB	-rwxr-xr-x
as	889.89 KB	-rwxr-xr-x
aspell	159.5 KB	-rwxr-xr-x
at	57.33 KB	-rwsr-xr-x
atq	57.33 KB	-rwsr-xr-x
atrm	57.33 KB	-rwsr-xr-x
attr	13.06 KB	-rwxr-xr-x
audit2allow	14.85 KB	-rwxr-xr-x
audit2why	14.85 KB	-rwxr-xr-x
aulast	20.56 KB	-rwxr-xr-x
aulastlog	12.43 KB	-rwxr-xr-x
ausyscall	12.27 KB	-rwxr-xr-x
authselect	41.06 KB	-rwxr-xr-x
autoconf	14.42 KB	-rwxr-xr-x
autoheader	8.33 KB	-rwxr-xr-x
autom4te	31.43 KB	-rwxr-xr-x
automake	251.9 KB	-rwxr-xr-x
automake-1.16	251.9 KB	-rwxr-xr-x
autoreconf	20.57 KB	-rwxr-xr-x
autoscan	16.72 KB	-rwxr-xr-x
autoupdate	33.08 KB	-rwxr-xr-x
auvirt	32.71 KB	-rwxr-xr-x
awk	669.77 KB	-rwxr-xr-x
b2sum	57.68 KB	-rwxr-xr-x
base32	41.46 KB	-rwxr-xr-x
base64	41.48 KB	-rwxr-xr-x
basename	37.41 KB	-rwxr-xr-x
bash	1.1 MB	-rwxr-xr-x
bashbug	7.18 KB	-rwxr-xr-x
bashbug-64	7.18 KB	-rwxr-xr-x
batch	137 B	-rwxr-xr-x
bc	94.98 KB	-rwxr-xr-x
bcomps	20.59 KB	-rwxr-xr-x
bdftopcf	45.4 KB	-rwxr-xr-x
bg	26 B	-rwxr-xr-x
bison	437.72 KB	-rwxr-xr-x
blkiomon	30.51 KB	-rwxr-xr-x
blkparse	61.48 KB	-rwxr-xr-x
blkrawverify	18.7 KB	-rwxr-xr-x
blktrace	49.66 KB	-rwxr-xr-x
bmon	122.1 KB	-rwxr-xr-x
bno_plot.py	3.47 KB	-rwxr-xr-x
bond2team	22.74 KB	-rwxr-xr-x
bootctl	45.14 KB	-rwxr-xr-x
brotli	739.2 KB	-rwxr-xr-x
btrace	891 B	-rwxr-xr-x
btrecord	19.94 KB	-rwxr-xr-x
btreplay	32.45 KB	-rwxr-xr-x
btt	144.79 KB	-rwxr-xr-x
bunzip2	37.57 KB	-rwxr-xr-x
busctl	77.25 KB	-rwxr-xr-x
bzcat	37.57 KB	-rwxr-xr-x
bzcmp	2.08 KB	-rwxr-xr-x
bzdiff	2.08 KB	-rwxr-xr-x
bzegrep	1.64 KB	-rwxr-xr-x
bzfgrep	1.64 KB	-rwxr-xr-x
bzgrep	1.64 KB	-rwxr-xr-x
bzip2	37.57 KB	-rwxr-xr-x
bzip2recover	17.15 KB	-rwxr-xr-x
bzless	1.23 KB	-rwxr-xr-x
bzmore	1.23 KB	-rwxr-xr-x
c++	1.21 MB	-rwxr-xr-x
c++filt	28.89 KB	-rwxr-xr-x
c89	224 B	-rwxr-xr-x
c99	215 B	-rwxr-xr-x
ca-legacy	1.61 KB	-rwxr-xr-x
cairo-sphinx	69.71 KB	-rwxr-xr-x
cal	65.98 KB	-rwxr-xr-x
captoinfo	85.23 KB	-rwxr-xr-x
cat	37.45 KB	-rwxr-xr-x
catchsegv	3.21 KB	-rwxr-xr-x
catman	41.45 KB	-rwxr-xr-x
cc	1.21 MB	-rwxr-xr-x
ccomps	24.68 KB	-rwxr-xr-x
cd	26 B	-rwxr-xr-x
centrino-decode	11.26 KB	-rwxr-xr-x
certbot	387 B	-rwxr-xr-x
certbot-3	387 B	-rwxr-xr-x
chacl	17.08 KB	-rwxr-xr-x
chage	77.67 KB	-rwsr-xr-x
chardetect	400 B	-rwxr-xr-x
chattr	16.4 KB	-rwxr-xr-x
chcat	13.57 KB	-rwxr-xr-x
chcon	70.34 KB	-rwxr-xr-x
checkmodule	427.01 KB	-rwxr-xr-x
checkpolicy	488.64 KB	-rwxr-xr-x
chfn	32.89 KB	-rws--x--x
chgrp	66.27 KB	-rwxr-xr-x
chmem	45.47 KB	-rwxr-xr-x
chmod	62.22 KB	-rwxr-xr-x
chown	70.3 KB	-rwxr-xr-x
chronyc	119.37 KB	-rwxr-xr-x
chrt	37.18 KB	-rwxr-xr-x
chsh	24.71 KB	-rws--x--x
chvt	12.66 KB	-rwxr-xr-x
circo	12.23 KB	-rwxr-xr-x
cksum	37.38 KB	-rwxr-xr-x
clear	12.49 KB	-rwxr-xr-x
cluster	518.3 KB	-rwxr-xr-x
cmp	103.76 KB	-rwxr-xr-x
cockpit-bridge	496.18 KB	-rwxr-xr-x
col	29 KB	-rwxr-xr-x
colcrt	16.47 KB	-rwxr-xr-x
colrm	24.88 KB	-rwxr-xr-x
column	49.46 KB	-rwxr-xr-x
comm	41.54 KB	-rwxr-xr-x
command	31 B	-rwxr-xr-x
compile_et	1.31 KB	-rwxr-xr-x
config_data	6.97 KB	-rwxr-xr-x
coredumpctl	44.9 KB	-rwxr-xr-x
corelist	14.64 KB	-rwxr-xr-x
cp	147.99 KB	-rwxr-xr-x
cpan	7.87 KB	-rwxr-xr-x
cpan-mirrors	4.19 KB	-rwxr-xr-x
cpio	159.8 KB	-rwxr-xr-x
cpp	1.21 MB	-rwxr-xr-x
cpupower	66.9 KB	-rwxr-xr-x
crb	2.58 KB	-rwxr--r--
crc32	1.02 KB	-rwxr-xr-x
cronnext	49.8 KB	-rwxr-xr-x
crontab	61.66 KB	-rwsr-xr-x
csplit	53.66 KB	-rwxr-xr-x
csslint-0.6	24.56 KB	-rwxr-xr-x
cstool	4.58 MB	-rwxr-xr-x
curl	230.08 KB	-rwxr-xr-x
cut	49.51 KB	-rwxr-xr-x
cvtsudoers	263.95 KB	-rwxr-xr-x
date	105.95 KB	-rwxr-xr-x
db_archive	12.45 KB	-rwxr-xr-x
db_checkpoint	16.48 KB	-rwxr-xr-x
db_deadlock	16.48 KB	-rwxr-xr-x
db_dump	16.51 KB	-rwxr-xr-x
db_dump185	69.55 KB	-rwxr-xr-x
db_hotbackup	20.49 KB	-rwxr-xr-x
db_load	28.61 KB	-rwxr-xr-x
db_log_verify	16.52 KB	-rwxr-xr-x
db_printlog	33.4 KB	-rwxr-xr-x
db_recover	16.51 KB	-rwxr-xr-x
db_replicate	16.49 KB	-rwxr-xr-x
db_stat	16.48 KB	-rwxr-xr-x
db_tuner	24.55 KB	-rwxr-xr-x
db_upgrade	12.45 KB	-rwxr-xr-x
db_verify	16.46 KB	-rwxr-xr-x
dbilogstrip	1.35 KB	-rwxr-xr-x
dbinfo	4.5 KB	-rwxr-xr-x
dbiprof	6.06 KB	-rwxr-xr-x
dbpmda	93.96 KB	-rwxr-xr-x
dbus-binding-tool	110.43 KB	-rwxr-xr-x
dbus-cleanup-sockets	16.38 KB	-rwxr-xr-x
dbus-daemon	239.71 KB	-rwxr-xr-x
dbus-monitor	28.57 KB	-rwxr-xr-x
dbus-run-session	15.88 KB	-rwxr-xr-x
dbus-send	28.54 KB	-rwxr-xr-x
dbus-test-tool	24.59 KB	-rwxr-xr-x
dbus-update-activation-environ...	16.41 KB	-rwxr-xr-x
dbus-uuidgen	12.37 KB	-rwxr-xr-x
dc	53.02 KB	-rwxr-xr-x
dd	77.96 KB	-rwxr-xr-x
deallocvt	12.66 KB	-rwxr-xr-x
debuginfod-find	16.46 KB	-rwxr-xr-x
delv	42.45 KB	-rwxr-xr-x
df	91.08 KB	-rwxr-xr-x
diff	268.01 KB	-rwxr-xr-x
diff3	128.6 KB	-rwxr-xr-x
diffimg	12.24 KB	-rwxr-xr-x
dig	162.17 KB	-rwxr-xr-x
dijkstra	16.7 KB	-rwxr-xr-x
dir	139.88 KB	-rwxr-xr-x
dircolors	49.55 KB	-rwxr-xr-x
dirmngr	580.16 KB	-rwxr-xr-x
dirmngr-client	120.12 KB	-rwxr-xr-x
dirname	33.36 KB	-rwxr-xr-x
distro	389 B	-rwxr-xr-x
dltest	13.05 KB	-rwxr-xr-x
dm_date	5.38 KB	-rwxr-xr-x
dm_zdump	4.99 KB	-rwxr-xr-x
dmesg	77.9 KB	-rwxr-xr-x
dnf	1.91 KB	-rwxr-xr-x
dnf-3	1.91 KB	-rwxr-xr-x
dnsdomainname	21.16 KB	-rwxr-xr-x
dnstap-read	20.42 KB	-rwxr-xr-x
domainname	21.16 KB	-rwxr-xr-x
dos2unix	58.54 KB	-rwxr-xr-x
dot	12.23 KB	-rwxr-xr-x
dot2gxl	41.27 KB	-rwxr-xr-x
dotty	2.04 KB	-rwxr-xr-x
doveadm	678.08 KB	-rwxr-xr-x
doveconf	185.02 KB	-rwxr-xr-x
dovecot-sysreport	5.63 KB	-rwxr-xr-x
dracut	67.81 KB	-rwxr-xr-x
dstat	70.37 KB	-rwxr-xr-x
dsync	678.08 KB	-rwxr-xr-x
dtrace	17.25 KB	-rwxr-xr-x
du	107.02 KB	-rwxr-xr-x
dumpkeys	170 KB	-rwxr-xr-x
dwp	2.17 MB	-rwxr-xr-x
dwz	167.64 KB	-rwxr-xr-x
easy_install-3	246 B	-rwxr-xr-x
easy_install-3.6	246 B	-rwxr-xr-x
echo	37.34 KB	-rwxr-xr-x
ed	57.28 KB	-rwxr-xr-x
edgepaint	420.73 KB	-rwxr-xr-x
egrep	28 B	-rwxr-xr-x
eject	57.77 KB	-rwxr-xr-x
elfedit	33.27 KB	-rwxr-xr-x
enc2xs	40.97 KB	-rwxr-xr-x
encguess	2.91 KB	-rwxr-xr-x
enchant	21.08 KB	-rwxr-xr-x
enchant-lsmod	13.09 KB	-rwxr-xr-x
env	41.34 KB	-rwxr-xr-x
envml	4.1 KB	-rwxr-xr-x
envsubst	48.99 KB	-rwxr-xr-x
eqn	232.16 KB	-rwxr-xr-x
erb	4.72 KB	-rwxr-xr-x
evmctl	62.54 KB	-rwxr-xr-x
ex	1.13 MB	-rwxr-xr-x
expand	41.58 KB	-rwxr-xr-x
expr	49.56 KB	-rwxr-xr-x
facter	145.19 KB	-rwxr-xr-x
factor	85.97 KB	-rwxr-xr-x
fail2ban-client	1.39 KB	-rwxr-xr-x
fail2ban-python	11.59 KB	-rwxr-xr-x
fail2ban-regex	1.25 KB	-rwxr-xr-x
fail2ban-server	1.39 KB	-rwxr-xr-x
fallocate	28.95 KB	-rwxr-xr-x
false	33.3 KB	-rwxr-xr-x
fc	26 B	-rwxr-xr-x
fc-cache	132 B	-rwxr-xr-x
fc-cache-64	20.35 KB	-rwxr-xr-x
fc-cat	16.35 KB	-rwxr-xr-x
fc-conflist	12.25 KB	-rwxr-xr-x
fc-list	12.25 KB	-rwxr-xr-x
fc-match	16.26 KB	-rwxr-xr-x
fc-pattern	12.26 KB	-rwxr-xr-x
fc-query	12.24 KB	-rwxr-xr-x
fc-scan	12.26 KB	-rwxr-xr-x
fc-validate	16.26 KB	-rwxr-xr-x
fdp	12.23 KB	-rwxr-xr-x
fg	26 B	-rwxr-xr-x
fgconsole	12.67 KB	-rwxr-xr-x
fgrep	28 B	-rwxr-xr-x
file	24.68 KB	-rwxr-xr-x
fincore	33.02 KB	-rwxr-xr-x
find	255.85 KB	-rwxr-xr-x
findmnt	70.6 KB	-rwxr-xr-x
fips-finish-install	1.29 KB	-rwxr-xr-x
fips-mode-setup	3.91 KB	-rwxr-xr-x
firewall-cmd	139.61 KB	-rwxr-xr-x
firewall-offline-cmd	120.73 KB	-rwxr-xr-x
flex	428.45 KB	-rwxr-xr-x
flex++	428.45 KB	-rwxr-xr-x
flock	33.19 KB	-rwxr-xr-x
fmt	45.48 KB	-rwxr-xr-x
fold	41.4 KB	-rwxr-xr-x
fonttosfnt	41.18 KB	-rwxr-xr-x
formail	48.22 KB	-rwxr-xr-x
free	20.66 KB	-rwxr-xr-x
fribidi	21.14 KB	-rwxr-xr-x
ftpdctl	98.2 KB	-rwxr-xr-x
funzip	36.74 KB	-rwxr-xr-x
g++	1.21 MB	-rwxr-xr-x
g13	212.02 KB	-rwxr-xr-x
gapplication	20.44 KB	-rwxr-xr-x
gawk	669.77 KB	-rwxr-xr-x
gc	16.61 KB	-rwxr-xr-x
gcc	1.21 MB	-rwxr-xr-x
gcc-ar	36.64 KB	-rwxr-xr-x
gcc-nm	36.65 KB	-rwxr-xr-x
gcc-ranlib	36.65 KB	-rwxr-xr-x
gcov	1.31 MB	-rwxr-xr-x
gcov-dump	566.9 KB	-rwxr-xr-x
gcov-tool	603.88 KB	-rwxr-xr-x
gdbm_dump	21.05 KB	-rwxr-xr-x
gdbm_load	25.31 KB	-rwxr-xr-x
gdbmtool	111.57 KB	-rwxr-xr-x
gdbus	48.7 KB	-rwxr-xr-x
gdk-pixbuf-query-loaders-64	18.7 KB	-rwxr-xr-x
gdk-pixbuf-thumbnailer	28.66 KB	-rwxr-xr-x
gem	542 B	-rwxr-xr-x
gencat	24.82 KB	-rwxr-xr-x
genl-ctrl-list	12.04 KB	-rwxr-xr-x
geoiplookup	21.89 KB	-rwxr-xr-x
geoiplookup6	21.65 KB	-rwxr-xr-x
geqn	232.16 KB	-rwxr-xr-x
getconf	32.45 KB	-rwxr-xr-x
getent	33.12 KB	-rwxr-xr-x
getfacl	27.99 KB	-rwxr-xr-x
getfattr	23.03 KB	-rwxr-xr-x
getkeycodes	12.66 KB	-rwxr-xr-x
getopt	20.52 KB	-rwxr-xr-x
getopts	31 B	-rwxr-xr-x
gettext	48.97 KB	-rwxr-xr-x
gettext.sh	4.52 KB	-rwxr-xr-x
gio	85.2 KB	-rwxr-xr-x
gio-querymodules-64	16.3 KB	-rwxr-xr-x
glib-compile-schemas	48.84 KB	-rwxr-xr-x
gmake	235.32 KB	-rwxr-xr-x
gml2gv	41.2 KB	-rwxr-xr-x
gneqn	908 B	-rwxr-xr-x
gnroff	3.23 KB	-rwxr-xr-x
gpasswd	82.17 KB	-rwsr-xr-x
gpg	1.04 MB	-rwxr-xr-x
gpg-agent	419.29 KB	-rwxr-xr-x
gpg-connect-agent	165.3 KB	-rwxr-xr-x
gpg-error	34.16 KB	-rwxr-xr-x
gpg-wks-server	206.69 KB	-rwxr-xr-x
gpg-zip	3.44 KB	-rwxr-xr-x
gpg2	1.04 MB	-rwxr-xr-x
gpgconf	176.09 KB	-rwxr-xr-x
gpgme-json	85.8 KB	-rwxr-xr-x
gpgparsemail	28.74 KB	-rwxr-xr-x
gpgsm	514.45 KB	-rwxr-xr-x
gpgsplit	87.02 KB	-rwxr-xr-x
gpgv	451.58 KB	-rwxr-xr-x
gpgv2	451.58 KB	-rwxr-xr-x
gpic	293.84 KB	-rwxr-xr-x
gpio-event-mon	14.96 KB	-rwxr-xr-x
gpio-hammer	14.95 KB	-rwxr-xr-x
gprof	103.34 KB	-rwxr-xr-x
gr2fonttest	29.95 KB	-rwxr-xr-x
graphml2gv	20.62 KB	-rwxr-xr-x
grep	193.63 KB	-rwxr-xr-x
groff	124.92 KB	-rwxr-xr-x
grops	191.14 KB	-rwxr-xr-x
grotty	141.9 KB	-rwxr-xr-x
groups	37.38 KB	-rwxr-xr-x
grub2-editenv	444.02 KB	-rwxr-xr-x
grub2-file	914.98 KB	-rwxr-xr-x
grub2-fstest	1.14 MB	-rwxr-xr-x
grub2-glue-efi	279.27 KB	-rwxr-xr-x
grub2-kbdcomp	1.63 KB	-rwxr-xr-x
grub2-menulst2cfg	262.57 KB	-rwxr-xr-x
grub2-mkfont	308.02 KB	-rwxr-xr-x
grub2-mkimage	427.29 KB	-rwxr-xr-x
grub2-mklayout	285.4 KB	-rwxr-xr-x
grub2-mknetdir	481.71 KB	-rwxr-xr-x
grub2-mkpasswd-pbkdf2	287.74 KB	-rwxr-xr-x
grub2-mkrelpath	279.16 KB	-rwxr-xr-x
grub2-mkrescue	1.1 MB	-rwxr-xr-x
grub2-mkstandalone	590.36 KB	-rwxr-xr-x
grub2-render-label	919.53 KB	-rwxr-xr-x
grub2-script-check	311.89 KB	-rwxr-xr-x
grub2-syslinux2cfg	844.16 KB	-rwxr-xr-x
gsettings	28.6 KB	-rwxr-xr-x
gsoelim	42.55 KB	-rwxr-xr-x
gss-client	24.55 KB	-rwxr-xr-x
gtar	449 KB	-rwxr-xr-x
gtbl	154.61 KB	-rwxr-xr-x
gtk-query-immodules-2.0-64	16.29 KB	-rwxr-xr-x
gtk-update-icon-cache	33.02 KB	-rwxr-xr-x
gtroff	805.02 KB	-rwxr-xr-x
gunzip	2.29 KB	-rwxr-xr-x
gv2gml	24.66 KB	-rwxr-xr-x
gv2gxl	41.27 KB	-rwxr-xr-x
gvcolor	46.87 KB	-rwxr-xr-x
gvgen	24.77 KB	-rwxr-xr-x
gvmap	526.3 KB	-rwxr-xr-x
gvmap.sh	2.14 KB	-rwxr-xr-x
gvpack	28.87 KB	-rwxr-xr-x
gvpr	7.8 KB	-rwxr-xr-x
gxl2dot	41.27 KB	-rwxr-xr-x
gxl2gv	41.27 KB	-rwxr-xr-x
gzexe	6.23 KB	-rwxr-xr-x
gzip	94.67 KB	-rwxr-xr-x
h2ph	28.54 KB	-rwxr-xr-x
h2xs	59.44 KB	-rwxr-xr-x
hash	28 B	-rwxr-xr-x
head	45.49 KB	-rwxr-xr-x
hexdump	57.5 KB	-rwxr-xr-x
host	142.29 KB	-rwxr-xr-x
hostid	33.32 KB	-rwxr-xr-x
hostname	21.16 KB	-rwxr-xr-x
hostnamectl	20.82 KB	-rwxr-xr-x
htdbm	24.66 KB	-rwxr-xr-x
htdigest	16.53 KB	-rwxr-xr-x
htop	304.73 KB	-rwxr-xr-x
htpasswd	24.66 KB	-rwxr-xr-x
httxt2dbm	16.47 KB	-rwxr-xr-x
hunspell	144.7 KB	-rwxr-xr-x
i386	20.75 KB	-rwxr-xr-x
ibd2sdi	313.23 KB	-rwxr-xr-x
ibdev2netdev	5.59 KB	-rwxr-xr-x
iceauth	41.87 KB	-rwxr-xr-x
iconv	61.43 KB	-rwxr-xr-x
id	45.43 KB	-rwxr-xr-x
idiag-socket-details	12.09 KB	-rwxr-xr-x
idn	39.41 KB	-rwxr-xr-x
ifnames	4.03 KB	-rwxr-xr-x
iio_event_monitor	22.97 KB	-rwxr-xr-x
iio_generic_buffer	26.98 KB	-rwxr-xr-x
info	249.89 KB	-rwxr-xr-x
infocmp	60.98 KB	-rwxr-xr-x
infotocap	85.23 KB	-rwxr-xr-x
innochecksum	219.7 KB	-rwxr-xr-x
install	156.14 KB	-rwxr-xr-x
instmodsh	4.1 KB	-rwxr-xr-x
intel-speed-select	93.02 KB	-rwxr-xr-x
ionice	28.98 KB	-rwxr-xr-x
ipcalc	46.08 KB	-rwxr-xr-x
ipcmk	29.13 KB	-rwxr-xr-x
ipcount	3.55 KB	-rwxr-xr-x
ipcrm	28.98 KB	-rwxr-xr-x
ipcs	53.4 KB	-rwxr-xr-x
iptab	897 B	-rwxr-xr-x
irb	186 B	-rwxr-xr-x
isosize	24.87 KB	-rwxr-xr-x
ispell	988 B	-rwxr-xr-x
isql	37.29 KB	-rwxr-xr-x
iusql	29.68 KB	-rwxr-xr-x
jk_uchroot	28.85 KB	-rwsr-xr-x
jobs	28 B	-rwxr-xr-x
join	53.68 KB	-rwxr-xr-x
journalctl	76.98 KB	-rwxr-xr-x
json_pp	4.19 KB	-rwxr-xr-x
json_xs	6.84 KB	-rwxr-xr-x
jws	373 B	-rwxr-xr-x
kbd_mode	12.67 KB	-rwxr-xr-x
kbdinfo	16.69 KB	-rwxr-xr-x
kbdrate	16.64 KB	-rwxr-xr-x
kbxutil	177.32 KB	-rwxr-xr-x
kdumpctl	33.18 KB	-rwxr-xr-x
kernel-install	4.41 KB	-rwxr-xr-x
kill	37.27 KB	-rwxr-xr-x
killall	29.77 KB	-rwxr-xr-x
kmod	159.46 KB	-rwxr-xr-x
krb5-config	6.98 KB	-rwxr-xr-x
kvm_stat	60.85 KB	-rwxr-xr-x
l4p-tmpl	1.8 KB	-rwxr-xr-x
last	49.27 KB	-rwxr-xr-x
lastb	49.27 KB	-rwxr-xr-x
lastcomm	37.8 KB	-rwxr-xr-x
lastlog	20.61 KB	-rwxr-xr-x
lchfn	20.33 KB	-rwxr-xr-x
lchsh	16.34 KB	-rwxr-xr-x
ld	1.71 MB	-rwxr-xr-x
ld.bfd	1.71 MB	-rwxr-xr-x
ld.gold	2.39 MB	-rwxr-xr-x
ld.so	1.07 MB	-rwxr-xr-x
ldd	5.31 KB	-rwxr-xr-x
lefty	304.54 KB	-rwxr-xr-x
less	187.54 KB	-rwxr-xr-x
lessecho	13.52 KB	-rwxr-xr-x
lesskey	23.11 KB	-rwxr-xr-x
lesspipe.sh	3.07 KB	-rwxr-xr-x
letsencrypt	387 B	-rwxr-xr-x
lex	428.45 KB	-rwxr-xr-x
lexgrog	93.7 KB	-rwxr-xr-x
libnetcfg	15.41 KB	-rwxr-xr-x
libtool	359.11 KB	-rwxr-xr-x
libtoolize	126.17 KB	-rwxr-xr-x
link	33.32 KB	-rwxr-xr-x
linux-boot-prober	5.85 KB	-rwxr-xr-x
linux32	20.75 KB	-rwxr-xr-x
linux64	20.75 KB	-rwxr-xr-x
ln	70.48 KB	-rwxr-xr-x
lneato	1.51 KB	-rwxr-xr-x
loadkeys	210.65 KB	-rwxr-xr-x
loadunimap	29.13 KB	-rwxr-xr-x
locale	56.43 KB	-rwxr-xr-x
localectl	28.84 KB	-rwxr-xr-x
localedef	307.45 KB	-rwxr-xr-x
locate	47.41 KB	-rwx--s--x
lockfile	23.91 KB	-rwxr-sr-x
logger	49.97 KB	-rwxr-xr-x
login	40.95 KB	-rwxr-xr-x
loginctl	57.28 KB	-rwxr-xr-x
logname	33.34 KB	-rwxr-xr-x
logresolve	16.39 KB	-rwxr-xr-x
look	16.45 KB	-rwxr-xr-x
ls	139.88 KB	-rwxr-xr-x
lsattr	11.93 KB	-rwxr-xr-x
lsblk	90.13 KB	-rwxr-xr-x
lscpu	77.68 KB	-rwxr-xr-x
lsgpio	15.05 KB	-rwxr-xr-x
lsiio	22.98 KB	-rwxr-xr-x
lsinitrd	8.68 KB	-rwxr-xr-x
lsipc	73.77 KB	-rwxr-xr-x
lslocks	37.52 KB	-rwxr-xr-x
lslogins	69.63 KB	-rwxr-xr-x
lsmcli	954 B	-rwxr-xr-x
lsmd	24.87 KB	-rwxr-xr-x
lsmem	45.32 KB	-rwxr-xr-x
lsns	49.27 KB	-rwxr-xr-x
lsof	175.4 KB	-rwxr-xr-x
lsscsi	86.01 KB	-rwxr-xr-x
lsusb	244.14 KB	-rwxr-xr-x
lsusb.py	14.89 KB	-rwxr-xr-x
lwp-download	10.05 KB	-rwxr-xr-x
lwp-dump	2.65 KB	-rwxr-xr-x
lwp-mirror	2.36 KB	-rwxr-xr-x
lwp-request	15.84 KB	-rwxr-xr-x
m4	185.56 KB	-rwxr-xr-x
mac2unix	58.54 KB	-rwxr-xr-x
mailq	28.48 KB	-rwxr-xr-x
mailq.postfix	28.48 KB	-rwxr-xr-x
mailstat	5.72 KB	-rwxr-xr-x
make	235.32 KB	-rwxr-xr-x
make-dummy-cert	610 B	-rwxr-xr-x
makedb	24.83 KB	-rwxr-xr-x
man	112.52 KB	-rwxr-xr-x
mandb	134.52 KB	-rwxr-xr-x
manpath	33.42 KB	-rwxr-xr-x
mapscrn	24.97 KB	-rwxr-xr-x
mcookie	33.26 KB	-rwxr-xr-x
mcpp	9.02 KB	-rwxr-xr-x
md5sum	45.52 KB	-rwxr-xr-x
mdig	48.51 KB	-rwxr-xr-x
mecab	7.84 KB	-rwxr-xr-x
memstrack	83.72 KB	-rwxr-xr-x
mesg	16.36 KB	-rwxr-xr-x
miltertest	56.8 KB	-rwxr-xr-x
mkdir	82.7 KB	-rwxr-xr-x
mkfifo	66.48 KB	-rwxr-xr-x
mkfontdir	65 B	-rwxr-xr-x
mkfontscale	41.59 KB	-rwxr-xr-x
mkinitrd	6.43 KB	-rwxr-xr-x
mknod	70.47 KB	-rwxr-xr-x
mktemp	45.66 KB	-rwxr-xr-x
mm2gv	90.51 KB	-rwxr-xr-x
mmdblookup	16.8 KB	-rwxr-xr-x
modulecmd	384.46 KB	-rwxr-xr-x
modulemd-validator	24.96 KB	-rwxr-xr-x
more	44.94 KB	-rwxr-xr-x
mount	49.16 KB	-rwsr-xr-x
mountpoint	16.47 KB	-rwxr-xr-x
msgattrib	25.58 KB	-rwxr-xr-x
msgcat	25.55 KB	-rwxr-xr-x
msgcmp	26.12 KB	-rwxr-xr-x
msgcomm	25.55 KB	-rwxr-xr-x
msgconv	21.55 KB	-rwxr-xr-x
msgen	21.55 KB	-rwxr-xr-x
msgexec	21.55 KB	-rwxr-xr-x
msgfilter	34.53 KB	-rwxr-xr-x
msgfmt	90.3 KB	-rwxr-xr-x
msggrep	43.6 KB	-rwxr-xr-x
msginit	67.85 KB	-rwxr-xr-x
msgmerge	71.48 KB	-rwxr-xr-x
msgunfmt	35.8 KB	-rwxr-xr-x
msguniq	25.56 KB	-rwxr-xr-x
mv	143.96 KB	-rwxr-xr-x
my_print_defaults	195.91 KB	-rwxr-xr-x
myisam_ftdump	6.38 MB	-rwxr-xr-x
myisamchk	6.59 MB	-rwxr-xr-x
myisamlog	6.4 MB	-rwxr-xr-x
myisampack	6.44 MB	-rwxr-xr-x
mysql	7.27 MB	-rwxr-xr-x
mysql_config_editor	181.27 KB	-rwxr-xr-x
mysql_migrate_keyring	7.18 MB	-rwxr-xr-x
mysql_secure_installation	7.09 MB	-rwxr-xr-x
mysql_ssl_rsa_setup	232.91 KB	-rwxr-xr-x
mysql_tzinfo_to_sql	123.82 KB	-rwxr-xr-x
mysql_upgrade	7.18 MB	-rwxr-xr-x
mysqladmin	7.11 MB	-rwxr-xr-x
mysqlbinlog	7.44 MB	-rwxr-xr-x
mysqlcheck	7.12 MB	-rwxr-xr-x
mysqld_pre_systemd	4.27 KB	-rwxr-xr-x
mysqldump	7.19 MB	-rwxr-xr-x
mysqldumpslow	7.49 KB	-rwxr-xr-x
mysqlimport	7.1 MB	-rwxr-xr-x
mysqlpump	7.52 MB	-rwxr-xr-x
mysqlshow	7.1 MB	-rwxr-xr-x
mysqlslap	7.12 MB	-rwxr-xr-x
named-rrchecker	19.87 KB	-rwxr-xr-x
namei	33.09 KB	-rwxr-xr-x
nano	254.73 KB	-rwxr-xr-x
ncurses6-config	5.87 KB	-rwxr-xr-x
ncursesw6-config	5.88 KB	-rwxr-xr-x
ndptool	24.41 KB	-rwxr-xr-x
neato	12.23 KB	-rwxr-xr-x
neqn	908 B	-rwxr-xr-x
net-server	3.34 KB	-rwxr-xr-x
netstat	158.68 KB	-rwxr-xr-x
newaliases	28.48 KB	-rwxr-xr-x
newaliases.postfix	28.48 KB	-rwxr-xr-x
newgidmap	47.79 KB	-rwxr-xr-x
newgrp	42.45 KB	-rwsr-xr-x
newuidmap	47.75 KB	-rwxr-xr-x
nf-ct-add	16.46 KB	-rwxr-xr-x
nf-ct-events	12.38 KB	-rwxr-xr-x
nf-ct-list	16.49 KB	-rwxr-xr-x
nf-exp-add	16.87 KB	-rwxr-xr-x
nf-exp-delete	16.66 KB	-rwxr-xr-x
nf-exp-list	16.49 KB	-rwxr-xr-x
nf-log	12.35 KB	-rwxr-xr-x
nf-monitor	12.36 KB	-rwxr-xr-x
nf-queue	16.35 KB	-rwxr-xr-x
ngettext	48.97 KB	-rwxr-xr-x
nice	37.32 KB	-rwxr-xr-x
nisdomainname	21.16 KB	-rwxr-xr-x
nl	45.54 KB	-rwxr-xr-x
nl-addr-add	12.34 KB	-rwxr-xr-x
nl-addr-delete	16.77 KB	-rwxr-xr-x
nl-addr-list	16.88 KB	-rwxr-xr-x
nl-class-add	16.73 KB	-rwxr-xr-x
nl-class-delete	12.63 KB	-rwxr-xr-x
nl-class-list	12.59 KB	-rwxr-xr-x
nl-classid-lookup	12.47 KB	-rwxr-xr-x
nl-cls-add	16.77 KB	-rwxr-xr-x
nl-cls-delete	16.77 KB	-rwxr-xr-x
nl-cls-list	12.73 KB	-rwxr-xr-x
nl-fib-lookup	12.5 KB	-rwxr-xr-x
nl-link-enslave	11.87 KB	-rwxr-xr-x
nl-link-ifindex2name	11.87 KB	-rwxr-xr-x
nl-link-list	12.23 KB	-rwxr-xr-x
nl-link-name2ifindex	11.86 KB	-rwxr-xr-x
nl-link-release	11.86 KB	-rwxr-xr-x
nl-link-set	12.77 KB	-rwxr-xr-x
nl-link-stats	12.59 KB	-rwxr-xr-x
nl-list-caches	12.27 KB	-rwxr-xr-x
nl-list-sockets	11.87 KB	-rwxr-xr-x
nl-monitor	12.52 KB	-rwxr-xr-x
nl-neigh-add	12.63 KB	-rwxr-xr-x
nl-neigh-delete	12.66 KB	-rwxr-xr-x
nl-neigh-list	12.19 KB	-rwxr-xr-x
nl-neightbl-list	12.01 KB	-rwxr-xr-x
nl-pktloc-lookup	12.56 KB	-rwxr-xr-x
nl-qdisc-add	12.65 KB	-rwxr-xr-x
nl-qdisc-delete	12.63 KB	-rwxr-xr-x
nl-qdisc-list	16.74 KB	-rwxr-xr-x
nl-route-add	16.39 KB	-rwxr-xr-x
nl-route-delete	16.88 KB	-rwxr-xr-x
nl-route-get	12.35 KB	-rwxr-xr-x
nl-route-list	16.44 KB	-rwxr-xr-x
nl-rule-list	12.05 KB	-rwxr-xr-x
nl-tctree-list	12.66 KB	-rwxr-xr-x
nl-util-addr	11.85 KB	-rwxr-xr-x
nload	234.35 KB	-rwxr-xr-x
nm	50.24 KB	-rwxr-xr-x
nm-online	20.83 KB	-rwxr-xr-x
nmcli	1008.96 KB	-rwxr-xr-x
nmtui	780.12 KB	-rwxr-xr-x
nmtui-connect	780.12 KB	-rwxr-xr-x
nmtui-edit	780.12 KB	-rwxr-xr-x
nmtui-hostname	780.12 KB	-rwxr-xr-x
nohup	37.41 KB	-rwxr-xr-x
nop	12.47 KB	-rwxr-xr-x
nproc	37.4 KB	-rwxr-xr-x
nroff	3.23 KB	-rwxr-xr-x
nsenter	33.29 KB	-rwxr-xr-x
nslookup	146.24 KB	-rwxr-xr-x
nsupdate	73.03 KB	-rwxr-xr-x
numfmt	65.63 KB	-rwxr-xr-x
objcopy	240.05 KB	-rwxr-xr-x
objdump	415.61 KB	-rwxr-xr-x
od	73.8 KB	-rwxr-xr-x
odbc_config	13.05 KB	-rwxr-xr-x
odbcinst	37.68 KB	-rwxr-xr-x
open	21.09 KB	-rwxr-xr-x
openssl	745.94 KB	-rwxr-xr-x
openvt	21.09 KB	-rwxr-xr-x
os-prober	5.78 KB	-rwxr-xr-x
osage	12.23 KB	-rwxr-xr-x
p11-kit	37.16 KB	-rwxr-xr-x
package-stash-conflicts	842 B	-rwxr-xr-x
page_owner_sort	10.88 KB	-rwxr-xr-x
pango-list	11.88 KB	-rwxr-xr-x
pango-view	57.44 KB	-rwxr-xr-x
paperconf	13.07 KB	-rwxr-xr-x
passwd	32.77 KB	-rwsr-xr-x
paste	37.37 KB	-rwxr-xr-x
patchwork	12.23 KB	-rwxr-xr-x
pathchk	37.32 KB	-rwxr-xr-x
pchrt	4.53 KB	-rwxr-xr-x
pcp	5.3 KB	-rwxr-xr-x
pcp2csv	65.89 KB	-rwxr-xr-x
pcre-config	2.09 KB	-rwxr-xr-x
pcre2-config	1.9 KB	-rwxr-xr-x
pear	333 B	-rwxr-xr-x
peardev	360 B	-rwxr-xr-x
pecl	248 B	-rwxr-xr-x
peekfd	16.51 KB	-rwxr-xr-x
percona-release	21.4 KB	-rwxr-xr-x
perl	12.52 KB	-rwxr-xr-x
perl5.26.3	12.52 KB	-rwxr-xr-x
perlbug	44.39 KB	-rwxr-xr-x
perldoc	118 B	-rwxr-xr-x
perlivp	10.56 KB	-rwxr-xr-x
perlthanks	44.39 KB	-rwxr-xr-x
perltidy	129.13 KB	-rwxr-xr-x
perror	1.43 MB	-rwxr-xr-x
pflags	2.57 KB	-rwxr-xr-x
pgrep	28.7 KB	-rwxr-xr-x
phar	14.46 KB	-rwxr-xr-x
phar.phar	14.46 KB	-rwxr-xr-x
php	6.1 MB	-rwxr-xr-x
php-bkp9july	4.84 MB	-rwxr-xr-x
php-cgi	4.74 MB	-rwxr-xr-x
php-config	5.11 KB	-rwxr-xr-x
php.old	6.09 MB	-rwxr-xr-x
php56	4.3 MB	-rwxr-xr-x
php56-cgi	4.27 MB	-rwxr-xr-x
php56-pear	393 B	-rwxr-xr-x
php56-phar	14.5 KB	-rwxr-xr-x
php70	4.31 MB	-rwxr-xr-x
php70-cgi	4.21 MB	-rwxr-xr-x
php70-pear	393 B	-rwxr-xr-x
php70-phar	14.5 KB	-rwxr-xr-x
php71	4.46 MB	-rwxr-xr-x
php71-cgi	4.36 MB	-rwxr-xr-x
php71-pear	393 B	-rwxr-xr-x
php71-phar	14.48 KB	-rwxr-xr-x
php72	4.84 MB	-rwxr-xr-x
php72-cgi	4.74 MB	-rwxr-xr-x
php72-pear	393 B	-rwxr-xr-x
php72-phar	14.48 KB	-rwxr-xr-x
php73	4.62 MB	-rwxr-xr-x
php73-cgi	4.51 MB	-rwxr-xr-x
php73-pear	393 B	-rwxr-xr-x
php73-phar	14.48 KB	-rwxr-xr-x
php74	6.08 MB	-rwxr-xr-x
php74-cgi	6.08 MB	-rwxr-xr-x
php74-pear	393 B	-rwxr-xr-x
php74-phar	14.55 KB	-rwxr-xr-x
php80	6.08 MB	-rwxr-xr-x
php80-cgi	6.08 MB	-rwxr-xr-x
php80-phar	24.5 KB	-rwxr-xr-x
php81	6.09 MB	-rwxr-xr-x
php81-cgi	6.09 MB	-rwxr-xr-x
php81-phar	14.9 KB	-rwxr-xr-x
php82	6.09 MB	-rwxr-xr-x
php82-cgi	6.09 MB	-rwxr-xr-x
php82-phar	14.9 KB	-rwxr-xr-x
php83-cgi	6.1 MB	-rwxr-xr-x
php83-phar	14.9 KB	-rwxr-xr-x
phpize	4.65 KB	-rwxr-xr-x
pic	293.84 KB	-rwxr-xr-x
piconv	8.08 KB	-rwxr-xr-x
pidof	16.55 KB	-rwxr-xr-x
pigz	125.38 KB	-rwxr-xr-x
pinentry	2.35 KB	-rwxr-xr-x
pinentry-curses	77.89 KB	-rwxr-xr-x
ping	66.08 KB	-rwxr-xr-x
pinky	41.45 KB	-rwxr-xr-x
pip-3	209 B	-rwxr-xr-x
pip-3.6	209 B	-rwxr-xr-x
pip3	209 B	-rwxr-xr-x
pip3.6	209 B	-rwxr-xr-x
pkaction	16.38 KB	-rwxr-xr-x
pkcheck	24.4 KB	-rwxr-xr-x
pkcon	81.53 KB	-rwxr-xr-x
pkexec	28.4 KB	-rwsr-xr-x
pkg-config	40.04 KB	-rwxr-xr-x
pkgconf	40.04 KB	-rwxr-xr-x
pkill	28.7 KB	-rwxr-xr-x
pkla-admin-identities	25.72 KB	-rwxr-xr-x
pkla-check-authorization	33.78 KB	-rwxr-xr-x
pkmon	20.9 KB	-rwxr-xr-x
pkttyagent	20.23 KB	-rwxr-xr-x
pl2pm	4.43 KB	-rwxr-xr-x
pldd	16.73 KB	-rwxr-xr-x
pmafm	11.84 KB	-rwxr-xr-x
pmap	32.65 KB	-rwxr-xr-x
pmdate	11.83 KB	-rwxr-xr-x
pmdiff	7.63 KB	-rwxr-xr-x
pmdumplog	33.53 KB	-rwxr-xr-x
pmevent	41.9 KB	-rwxr-xr-x
pmfind	21.21 KB	-rwxr-xr-x
pmgenmap	2.38 KB	-rwxr-xr-x
pmie	182.95 KB	-rwxr-xr-x
pmie2col	2.81 KB	-rwxr-xr-x
pmieconf	60.01 KB	-rwxr-xr-x
pmiectl	44.39 KB	-rwxr-xr-x
pminfo	42.02 KB	-rwxr-xr-x
pmiostat	20.78 KB	-rwxr-xr-x
pmjson	12.51 KB	-rwxr-xr-x
pmlc	58.81 KB	-rwxr-xr-x
pmlogcheck	37.18 KB	-rwxr-xr-x
pmlogconf	54.48 KB	-rwxr-xr-x
pmlogctl	44.39 KB	-rwxr-xr-x
pmlogextract	70.02 KB	-rwxr-xr-x
pmlogger	143.2 KB	-rwxr-xr-x
pmloglabel	21.01 KB	-rwxr-xr-x
pmlogmv	16.91 KB	-rwxr-xr-x
pmlogpaste	16.98 KB	-rwxr-xr-x
pmlogsize	29.02 KB	-rwxr-xr-x
pmlogsummary	33.59 KB	-rwxr-xr-x
pmprobe	21.41 KB	-rwxr-xr-x
pmpython	11.83 KB	-rwxr-xr-x
pmrep	65.89 KB	-rwxr-xr-x
pmrepconf	54.48 KB	-rwxr-xr-x
pmsearch	21.36 KB	-rwxr-xr-x
pmseries	37.97 KB	-rwxr-xr-x
pmsocks	1010 B	-rwxr-xr-x
pmstat	25.55 KB	-rwxr-xr-x
pmstore	16.97 KB	-rwxr-xr-x
pmtrace	15.84 KB	-rwxr-xr-x
pmval	41.9 KB	-rwxr-xr-x
pod2html	4.04 KB	-rwxr-xr-x
pod2man	14.68 KB	-rwxr-xr-x
pod2text	10.55 KB	-rwxr-xr-x
pod2usage	3.86 KB	-rwxr-xr-x
podchecker	3.57 KB	-rwxr-xr-x
podselect	2.47 KB	-rwxr-xr-x
post-grohtml	238.73 KB	-rwxr-xr-x
powernow-k8-decode	10.87 KB	-rwxr-xr-x
pr	82.13 KB	-rwxr-xr-x
pre-grohtml	130.55 KB	-rwxr-xr-x
precat	5.52 KB	-rwxr-xr-x
preconv	57.65 KB	-rwxr-xr-x
preunzip	5.52 KB	-rwxr-xr-x
prezip	5.52 KB	-rwxr-xr-x
prezip-bin	11.98 KB	-rwxr-xr-x
printenv	33.3 KB	-rwxr-xr-x
printf	53.55 KB	-rwxr-xr-x
prlimit	37.53 KB	-rwxr-xr-x
procmail	116.16 KB	-rwxr-xr-x
procmail-wrapper	8.45 KB	-rwsr-sr-x
prove	13.24 KB	-rwxr-xr-x
prtstat	20.51 KB	-rwxr-xr-x
prune	16.7 KB	-rwxr-xr-x
ps	134.63 KB	-rwxr-xr-x
psfaddtable	20.77 KB	-rwxr-xr-x
psfgettable	20.77 KB	-rwxr-xr-x
psfstriptable	20.77 KB	-rwxr-xr-x
psfxtable	20.77 KB	-rwxr-xr-x
pslog	12.48 KB	-rwxr-xr-x
pstree	33.53 KB	-rwxr-xr-x
pstree.x11	33.53 KB	-rwxr-xr-x
ptar	3.38 KB	-rwxr-xr-x
ptardiff	2.48 KB	-rwxr-xr-x
ptargrep	4.2 KB	-rwxr-xr-x
ptaskset	4.48 KB	-rwxr-xr-x
ptx	77.98 KB	-rwxr-xr-x
pwd	37.41 KB	-rwxr-xr-x
pwdx	12.55 KB	-rwxr-xr-x
pwmake	12.26 KB	-rwxr-xr-x
pwscore	12.26 KB	-rwxr-xr-x
pydoc-3	89 B	-rwxr-xr-x
pydoc3	89 B	-rwxr-xr-x
pydoc3.6	89 B	-rwxr-xr-x
python3	11.59 KB	-rwxr-xr-x
python3.6	11.59 KB	-rwxr-xr-x
python3.6m	11.59 KB	-rwxr-xr-x
pyvenv-3	446 B	-rwxr-xr-x
pyvenv-3.6	446 B	-rwxr-xr-x
quota	91.49 KB	-rwxr-xr-x
quotasync	74.69 KB	-rwxr-xr-x
ranlib	61.95 KB	-rwxr-xr-x
raw	16.48 KB	-rwxr-xr-x
rdoc	934 B	-rwxr-xr-x
read	28 B	-rwxr-xr-x
readelf	624.54 KB	-rwxr-xr-x
readlink	45.88 KB	-rwxr-xr-x
realpath	49.93 KB	-rwxr-xr-x
recode-sr-latin	17.99 KB	-rwxr-xr-x
red	89 B	-rwxr-xr-x
rename	16.48 KB	-rwxr-xr-x
renew-dummy-cert	725 B	-rwxr-xr-x
renice	16.45 KB	-rwxr-xr-x
rescan-scsi-bus.sh	38.24 KB	-rwxr-xr-x
reset	24.72 KB	-rwxr-xr-x
resizecons	20.89 KB	-rwxr-xr-x
resolvectl	195.74 KB	-rwxr-xr-x
rev	12.45 KB	-rwxr-xr-x
ri	184 B	-rwxr-xr-x
rm	70.38 KB	-rwxr-xr-x
rmail	262 B	-rwxr-xr-x
rmail.postfix	262 B	-rwxr-xr-x
rmdir	45.46 KB	-rwxr-xr-x
rnano	254.73 KB	-rwxr-xr-x
rngtest	17.34 KB	-rwxr-xr-x
rpm	20.84 KB	-rwxr-xr-x
rpm2archive	19.84 KB	-rwxr-xr-x
rpm2cpio	11.84 KB	-rwxr-xr-x
rpmdb	16.95 KB	-rwxr-xr-x
rpmkeys	16.87 KB	-rwxr-xr-x
rpmquery	20.84 KB	-rwxr-xr-x
rpmverify	20.84 KB	-rwxr-xr-x
rsync	506.1 KB	-rwxr-xr-x
rsyslog-recover-qi.pl	5.96 KB	-rwxr-xr-x
ruby	11.84 KB	-rwxr-xr-x
run-parts	1.94 KB	-rwxr-xr-x
run-with-aspell	85 B	-rwxr-xr-x
runcon	37.36 KB	-rwxr-xr-x
rvi	1.13 MB	-rwxr-xr-x
rview	1.13 MB	-rwxr-xr-x
rvim	2.93 MB	-rwxr-xr-x
sa-awl	4.9 KB	-rwxr-xr-x
sa-check_spamd	14.52 KB	-rwxr-xr-x
sa-learn	44.83 KB	-rwxr-xr-x
sa-update	72.6 KB	-rwxr-xr-x
sandbox	17.62 KB	-rwxr-xr-x
sccmap	20.59 KB	-rwxr-xr-x
scl	36.95 KB	-rwxr-xr-x
scl_enabled	258 B	-rwxr-xr-x
scl_source	1.82 KB	-rwxr-xr-x
scp	102.82 KB	-rwxr-xr-x
screen	482.46 KB	-rwxr-sr-x
script	36.82 KB	-rwxr-xr-x
scriptreplay	28.98 KB	-rwxr-xr-x
scsi-rescan	38.24 KB	-rwxr-xr-x
scsi_logging_level	8.38 KB	-rwxr-xr-x
scsi_mandat	3.52 KB	-rwxr-xr-x
scsi_readcap	1.3 KB	-rwxr-xr-x
scsi_ready	1.09 KB	-rwxr-xr-x
scsi_satl	3.77 KB	-rwxr-xr-x
scsi_start	1.25 KB	-rwxr-xr-x
scsi_stop	1.44 KB	-rwxr-xr-x
scsi_temperature	936 B	-rwxr-xr-x
sdiff	105.33 KB	-rwxr-xr-x
sealert	26.97 KB	-rwxr-xr-x
secon	25.45 KB	-rwxr-xr-x
secret-tool	21.17 KB	-rwxr-xr-x
sed	115.48 KB	-rwxr-xr-x
sedismod	273.66 KB	-rwxr-xr-x
sedispol	198.48 KB	-rwxr-xr-x
semodule_expand	12.27 KB	-rwxr-xr-x
semodule_link	12.27 KB	-rwxr-xr-x
semodule_package	16.67 KB	-rwxr-xr-x
semodule_unpackage	12.28 KB	-rwxr-xr-x
seq	53.45 KB	-rwxr-xr-x
sessreg	17.38 KB	-rwxr-xr-x
setarch	20.75 KB	-rwxr-xr-x
setfacl	41.48 KB	-rwxr-xr-x
setfattr	23.19 KB	-rwxr-xr-x
setfont	45.3 KB	-rwxr-xr-x
setkeycodes	12.69 KB	-rwxr-xr-x
setleds	16.72 KB	-rwxr-xr-x
setmetamode	12.76 KB	-rwxr-xr-x
setpriv	45.15 KB	-rwxr-xr-x
setsid	16.37 KB	-rwxr-xr-x
setterm	45.12 KB	-rwxr-xr-x
setup-nsssysinit	1.5 KB	-rwxr-xr-x
setup-nsssysinit.sh	1.5 KB	-rwxr-xr-x
setvtrgb	16.77 KB	-rwxr-xr-x
sfdp	12.23 KB	-rwxr-xr-x
sftp	159.73 KB	-rwxr-xr-x
sg	42.45 KB	-rwsr-xr-x
sg_bg_ctl	16.07 KB	-rwxr-xr-x
sg_compare_and_write	20.9 KB	-rwxr-xr-x
sg_copy_results	20.81 KB	-rwxr-xr-x
sg_dd	44.58 KB	-rwxr-xr-x
sg_decode_sense	20.33 KB	-rwxr-xr-x
sg_emc_trespass	12.26 KB	-rwxr-xr-x
sg_format	33.37 KB	-rwxr-xr-x
sg_get_config	33.31 KB	-rwxr-xr-x
sg_get_lba_status	20.46 KB	-rwxr-xr-x
sg_ident	16.17 KB	-rwxr-xr-x
sg_inq	117.91 KB	-rwxr-xr-x
sg_logs	150.02 KB	-rwxr-xr-x
sg_luns	24.85 KB	-rwxr-xr-x
sg_map	16.41 KB	-rwxr-xr-x
sg_map26	24.87 KB	-rwxr-xr-x
sg_modes	43.88 KB	-rwxr-xr-x
sg_opcodes	28.69 KB	-rwxr-xr-x
sg_persist	34.13 KB	-rwxr-xr-x
sg_prevent	12.07 KB	-rwxr-xr-x
sg_raw	24.38 KB	-rwxr-xr-x
sg_rbuf	20.84 KB	-rwxr-xr-x
sg_rdac	15.88 KB	-rwxr-xr-x
sg_read	24.41 KB	-rwxr-xr-x
sg_read_attr	34.79 KB	-rwxr-xr-x
sg_read_block_limits	12.12 KB	-rwxr-xr-x
sg_read_buffer	20.96 KB	-rwxr-xr-x
sg_read_long	16.27 KB	-rwxr-xr-x
sg_readcap	20.86 KB	-rwxr-xr-x
sg_reassign	16.22 KB	-rwxr-xr-x
sg_referrals	16.23 KB	-rwxr-xr-x
sg_rep_zones	20.66 KB	-rwxr-xr-x
sg_requests	16.3 KB	-rwxr-xr-x
sg_reset	16.73 KB	-rwxr-xr-x
sg_reset_wp	16.17 KB	-rwxr-xr-x
sg_rmsn	12.06 KB	-rwxr-xr-x
sg_rtpg	16.16 KB	-rwxr-xr-x
sg_safte	20.27 KB	-rwxr-xr-x
sg_sanitize	24.58 KB	-rwxr-xr-x
sg_sat_identify	16.71 KB	-rwxr-xr-x
sg_sat_phy_event	20.59 KB	-rwxr-xr-x
sg_sat_read_gplog	16.3 KB	-rwxr-xr-x
sg_sat_set_features	16.27 KB	-rwxr-xr-x
sg_scan	16.5 KB	-rwxr-xr-x
sg_seek	16.85 KB	-rwxr-xr-x
sg_senddiag	25.27 KB	-rwxr-xr-x
sg_ses	118.23 KB	-rwxr-xr-x
sg_ses_microcode	29.48 KB	-rwxr-xr-x
sg_start	20.93 KB	-rwxr-xr-x
sg_stpg	20.3 KB	-rwxr-xr-x
sg_stream_ctl	20.27 KB	-rwxr-xr-x
sg_sync	16.22 KB	-rwxr-xr-x
sg_test_rwbuf	20.73 KB	-rwxr-xr-x
sg_timestamp	20.74 KB	-rwxr-xr-x
sg_turs	16.74 KB	-rwxr-xr-x
sg_unmap	24.32 KB	-rwxr-xr-x
sg_verify	20.46 KB	-rwxr-xr-x
sg_vpd	108.75 KB	-rwxr-xr-x
sg_wr_mode	20.3 KB	-rwxr-xr-x
sg_write_buffer	21.24 KB	-rwxr-xr-x
sg_write_long	16.33 KB	-rwxr-xr-x
sg_write_same	24.48 KB	-rwxr-xr-x
sg_write_verify	20.78 KB	-rwxr-xr-x
sg_write_x	53.75 KB	-rwxr-xr-x
sg_xcopy	40.59 KB	-rwxr-xr-x
sg_zone	16.3 KB	-rwxr-xr-x
sginfo	74.85 KB	-rwxr-xr-x
sgm_dd	32.55 KB	-rwxr-xr-x
sgp_dd	36.95 KB	-rwxr-xr-x
sh	1.1 MB	-rwxr-xr-x
sha1hmac	32.82 KB	-rwxr-xr-x
sha1sum	45.54 KB	-rwxr-xr-x
sha224hmac	32.82 KB	-rwxr-xr-x
sha224sum	45.58 KB	-rwxr-xr-x
sha256hmac	32.82 KB	-rwxr-xr-x
sha256sum	45.58 KB	-rwxr-xr-x
sha384hmac	32.82 KB	-rwxr-xr-x
sha384sum	45.58 KB	-rwxr-xr-x
sha512hmac	32.82 KB	-rwxr-xr-x
sha512sum	45.58 KB	-rwxr-xr-x
shasum	9.66 KB	-rwxr-xr-x
showconsolefont	20.85 KB	-rwxr-xr-x
showkey	16.7 KB	-rwxr-xr-x
showrgb	13.05 KB	-rwxr-xr-x
shred	61.86 KB	-rwxr-xr-x
shuf	58.08 KB	-rwxr-xr-x
sim_client	16.27 KB	-rwxr-xr-x
sim_lsmplugin	1.22 KB	-rwxr-xr-x
simc_lsmplugin	118.55 KB	-rwxr-xr-x
size	33.23 KB	-rwxr-xr-x
skill	28.66 KB	-rwxr-xr-x
slabinfo	36.14 KB	-rwxr-xr-x
slabtop	20.7 KB	-rwxr-xr-x
sleep	37.38 KB	-rwxr-xr-x
slencheck	13.07 KB	-rwxr-xr-x
snice	28.66 KB	-rwxr-xr-x
soelim	42.55 KB	-rwxr-xr-x
sort	123.45 KB	-rwxr-xr-x
sotruss	4.18 KB	-rwxr-xr-x
spamassassin	29.39 KB	-rwxr-xr-x
spamc	50.15 KB	-rwxr-xr-x
spamd	127.63 KB	-rwxr-xr-x
spell	122 B	-rwxr-xr-x
spfd	17.96 KB	-rw-r--r--
spfd.perl-Mail-SPF	17.96 KB	-rw-r--r--
spfquery	22.45 KB	-rwxr-xr-x
spfquery.perl-Mail-SPF	22.45 KB	-rwxr-xr-x
spinner	2.38 KB	-rwxr-xr-x
splain	18.7 KB	-rwxr-xr-x
split	58.02 KB	-rwxr-xr-x
sprof	28.66 KB	-rwxr-xr-x
sqlite3	1.28 MB	-rwxr-xr-x
sscg	57.1 KB	-rwxr-xr-x
ssh	757.46 KB	-rwxr-xr-x
ssh-add	346.15 KB	-rwxr-xr-x
ssh-agent	325.6 KB	-rwxr-xr-x
ssh-copy-id	10.44 KB	-rwxr-xr-x
ssh-keygen	427.17 KB	-rwxr-xr-x
ssh-keyscan	428.53 KB	-rwxr-xr-x
sss_ssh_authorizedkeys	24.76 KB	-rwxr-xr-x
sss_ssh_knownhostsproxy	28.76 KB	-rwxr-xr-x
stat	86.14 KB	-rwxr-xr-x
stdbuf	49.49 KB	-rwxr-xr-x
strace	1.97 MB	-rwxr-xr-x
strace-log-merge	1.78 KB	-rwxr-xr-x
strings	37.42 KB	-rwxr-xr-x
strip	240.07 KB	-rwxr-xr-x
stty	77.59 KB	-rwxr-xr-x
su	48.98 KB	-rwsr-xr-x
sudo	161.77 KB	---s--x--x
sudoedit	161.77 KB	---s--x--x
sudoreplay	61.79 KB	---x--x--x
sum	45.52 KB	-rwxr-xr-x
symlinks	17.16 KB	-rwxr-xr-x
sync	37.34 KB	-rwxr-xr-x
systemctl	218.45 KB	-rwxr-xr-x
systemd-analyze	1.55 MB	-rwxr-xr-x
systemd-ask-password	12.02 KB	-rwxr-xr-x
systemd-cat	16.02 KB	-rwxr-xr-x
systemd-cgls	16.43 KB	-rwxr-xr-x
systemd-cgtop	32.88 KB	-rwxr-xr-x
systemd-delta	24.44 KB	-rwxr-xr-x
systemd-detect-virt	11.87 KB	-rwxr-xr-x
systemd-escape	16 KB	-rwxr-xr-x
systemd-firstboot	36.98 KB	-rwxr-xr-x
systemd-hwdb	28.9 KB	-rwxr-xr-x
systemd-inhibit	16.02 KB	-rwxr-xr-x
systemd-machine-id-setup	24.74 KB	-rwxr-xr-x
systemd-mount	52.63 KB	-rwxr-xr-x
systemd-notify	16.02 KB	-rwxr-xr-x
systemd-path	16.01 KB	-rwxr-xr-x
systemd-resolve	195.74 KB	-rwxr-xr-x
systemd-run	48.93 KB	-rwxr-xr-x
systemd-socket-activate	24.77 KB	-rwxr-xr-x
systemd-stdio-bridge	16.03 KB	-rwxr-xr-x
systemd-sysusers	53.05 KB	-rwxr-xr-x
systemd-tmpfiles	73.29 KB	-rwxr-xr-x
systemd-tty-ask-password-agent	32.81 KB	-rwxr-xr-x
systemd-umount	52.63 KB	-rwxr-xr-x
tabs	16.52 KB	-rwxr-xr-x
tac	41.48 KB	-rwxr-xr-x
tail	74.14 KB	-rwxr-xr-x
tar	449 KB	-rwxr-xr-x
taskset	37.25 KB	-rwxr-xr-x
tbl	154.61 KB	-rwxr-xr-x
tcamgr	25.13 KB	-rwxr-xr-x
tcamttest	21.16 KB	-rwxr-xr-x
tcatest	57.6 KB	-rwxr-xr-x
tcbmgr	29.1 KB	-rwxr-xr-x
tcbmttest	53.22 KB	-rwxr-xr-x
tcbtest	69.56 KB	-rwxr-xr-x
tcfmgr	25.09 KB	-rwxr-xr-x
tcfmttest	37.2 KB	-rwxr-xr-x
tcftest	45.18 KB	-rwxr-xr-x
tchmgr	25.09 KB	-rwxr-xr-x
tchmttest	49.22 KB	-rwxr-xr-x
tchtest	57.53 KB	-rwxr-xr-x
tclsh	9.04 KB	-rwxr-xr-x
tclsh8.6	9.04 KB	-rwxr-xr-x
tcptraceroute	1.54 KB	-rwxr-xr-x
tctmgr	37.09 KB	-rwxr-xr-x
tctmttest	45.2 KB	-rwxr-xr-x
tcttest	57.19 KB	-rwxr-xr-x
tcucodec	37.08 KB	-rwxr-xr-x
tcumttest	25.16 KB	-rwxr-xr-x
tcutest	73.17 KB	-rwxr-xr-x
teamd	160.63 KB	-rwxr-xr-x
teamdctl	30.52 KB	-rwxr-xr-x
teamnl	20.59 KB	-rwxr-xr-x
tee	41.47 KB	-rwxr-xr-x
telnet	104.88 KB	-rwxr-xr-x
test	53.55 KB	-rwxr-xr-x
tic	85.23 KB	-rwxr-xr-x
time	27.54 KB	-rwxr-xr-x
timedatectl	36.95 KB	-rwxr-xr-x
timeout	41.85 KB	-rwxr-xr-x
tload	16.62 KB	-rwxr-xr-x
tmon	39.62 KB	-rwxr-xr-x
tmux	589.49 KB	-rwxr-xr-x
toe	16.42 KB	-rwxr-xr-x
top	121.57 KB	-rwxr-xr-x
touch	93.92 KB	-rwxr-xr-x
tput	24.73 KB	-rwxr-xr-x
tr	49.62 KB	-rwxr-xr-x
tracepath	20.44 KB	-rwxr-xr-x
tracer	1.15 KB	-rwxr-xr-x
traceroute	79.56 KB	-rwxr-xr-x
traceroute6	79.56 KB	-rwxr-xr-x
tred	16.55 KB	-rwxr-xr-x
tree	81.59 KB	-rwxr-xr-x
troff	805.02 KB	-rwxr-xr-x
true	33.32 KB	-rwxr-xr-x
truncate	41.35 KB	-rwxr-xr-x
trust	215.59 KB	-rwxr-xr-x
tset	24.72 KB	-rwxr-xr-x
tsort	41.48 KB	-rwxr-xr-x
tty	33.3 KB	-rwxr-xr-x
turbostat	122.38 KB	-rwxr-xr-x
twopi	12.23 KB	-rwxr-xr-x
type	28 B	-rwxr-xr-x
tzselect	15.01 KB	-rwxr-xr-x
ucs2any	24.41 KB	-rwxr-xr-x
udevadm	424.55 KB	-rwxr-xr-x
ul	20.57 KB	-rwxr-xr-x
ulimit	30 B	-rwxr-xr-x
umask	29 B	-rwxr-xr-x
umount	32.74 KB	-rwsr-xr-x
unalias	31 B	-rwxr-xr-x
uname	37.33 KB	-rwxr-xr-x
uname26	20.75 KB	-rwxr-xr-x
unexpand	45.59 KB	-rwxr-xr-x
unflatten	16.59 KB	-rwxr-xr-x
unicode_start	2.55 KB	-rwxr-xr-x
unicode_stop	363 B	-rwxr-xr-x
uniq	49.63 KB	-rwxr-xr-x
unix2dos	58.53 KB	-rwxr-xr-x
unix2mac	58.53 KB	-rwxr-xr-x
unlink	33.33 KB	-rwxr-xr-x
unpigz	125.38 KB	-rwxr-xr-x
unshare	24.92 KB	-rwxr-xr-x
unversioned-python	157 B	-rwxr-xr-x
unxz	82.09 KB	-rwxr-xr-x
unzip	201.98 KB	-rwxr-xr-x
unzipsfx	101.59 KB	-rwxr-xr-x
update-ca-trust	1.24 KB	-rwxr-xr-x
update-crypto-policies	87 B	-rwxr-xr-x
update-gtk-immodules	313 B	-rwxr-xr-x
update-mime-database	53.92 KB	-rwxr-xr-x
updatedb	53.84 KB	-rwxr-xr-x
uptime	12.45 KB	-rwxr-xr-x
usb-devices	4.01 KB	-rwxr-xr-x
usbhid-dump	31.04 KB	-rwxr-xr-x
users	37.38 KB	-rwxr-xr-x
usleep	11.85 KB	-rwxr-xr-x
utmpdump	28.68 KB	-rwxr-xr-x
uuclient	15.87 KB	-rwxr-xr-x
uuidgen	16.37 KB	-rwxr-xr-x
uuidparse	37.13 KB	-rwxr-xr-x
vdir	139.88 KB	-rwxr-xr-x
vdo	5 KB	-rwxr-xr-x
vdo-by-dev	1.83 KB	-rwxr-xr-x
vdodmeventd	62.44 KB	-rwxr-xr-x
vdodumpconfig	536.56 KB	-rwxr-xr-x
vdoforcerebuild	524.62 KB	-rwxr-xr-x
vdoformat	548.9 KB	-rwxr-xr-x
vdosetuuid	536.57 KB	-rwxr-xr-x
vdostats	10.26 KB	-rwxr-xr-x
verify_blkparse	14.52 KB	-rwxr-xr-x
vi	1.13 MB	-rwxr-xr-x
view	1.13 MB	-rwxr-xr-x
vim	2.93 MB	-rwxr-xr-x
vimdiff	2.93 MB	-rwxr-xr-x
vimdot	1.06 KB	-rwxr-xr-x
vimtutor	2.07 KB	-rwxr-xr-x
virtualmin-config-system	3.22 KB	-rwxr-xr-x
vlock	20.98 KB	-rwxr-xr-x
vmstat	36.66 KB	-rwxr-xr-x
vnstat	153.03 KB	-rwxr-xr-x
w	20.61 KB	-rwxr-xr-x
wait	28 B	-rwxr-xr-x
wall	33.05 KB	-rwxr-xr-x
watch	29.05 KB	-rwxr-xr-x
watchgnupg	16.43 KB	-rwxr-xr-x
wc	49.66 KB	-rwxr-xr-x
wcmgr	24.66 KB	-rwxr-xr-x
wdctl	36.97 KB	-rwxr-xr-x
webalizer	197.15 KB	-rwxr-xr-x
webazolver	197.15 KB	-rwxr-xr-x
webmin	14.57 KB	-rwxr-xr-x
wget	521.64 KB	-rwxr-xr-x
whatis	54.04 KB	-rwxr-xr-x
whereis	29.27 KB	-rwxr-xr-x
which	29.37 KB	-rwxr-xr-x
whiptail	33.09 KB	-rwxr-xr-x
who	53.58 KB	-rwxr-xr-x
whoami	33.33 KB	-rwxr-xr-x
word-list-compress	11.99 KB	-rwxr-xr-x
wp	6.61 MB	-rwxrwxr-x
write	20.61 KB	-rwxr-sr-x
x86_64	20.75 KB	-rwxr-xr-x
x86_64-redhat-linux-c++	1.21 MB	-rwxr-xr-x
x86_64-redhat-linux-g++	1.21 MB	-rwxr-xr-x
x86_64-redhat-linux-gcc	1.21 MB	-rwxr-xr-x
x86_64-redhat-linux-gcc-8	1.21 MB	-rwxr-xr-x
x86_64-redhat-linux-gnu-pkg-co...	424 B	-rwxr-xr-x
x86_energy_perf_policy	31.95 KB	-rwxr-xr-x
xargs	88.2 KB	-rwxr-xr-x
xgamma	17.08 KB	-rwxr-xr-x
xgettext	283.88 KB	-rwxr-xr-x
xhost	17.12 KB	-rwxr-xr-x
xinput	63.61 KB	-rwxr-xr-x
xkill	17.1 KB	-rwxr-xr-x
xml2-config	1.71 KB	-rwxr-xr-x
xmlcatalog	20.36 KB	-rwxr-xr-x
xmllint	73.36 KB	-rwxr-xr-x
xmlwf	32.95 KB	-rwxr-xr-x
xmodmap	39.98 KB	-rwxr-xr-x
xorg-x11-fonts-update-dirs	1.29 KB	-rwxr--r--
xrandr	65.46 KB	-rwxr-xr-x
xrdb	33.98 KB	-rwxr-xr-x
xrefresh	17.94 KB	-rwxr-xr-x
xset	37.2 KB	-rwxr-xr-x
xsetpointer	13.05 KB	-rwxr-xr-x
xsetroot	21.44 KB	-rwxr-xr-x
xsltproc	28.42 KB	-rwxr-xr-x
xstdcmap	17.68 KB	-rwxr-xr-x
xsubpp	4.96 KB	-rwxr-xr-x
xxd	20.52 KB	-rwxr-xr-x
xz	82.09 KB	-rwxr-xr-x
xzcat	82.09 KB	-rwxr-xr-x
xzcmp	6.48 KB	-rwxr-xr-x
xzdec	16.48 KB	-rwxr-xr-x
xzdiff	6.48 KB	-rwxr-xr-x
xzegrep	5.76 KB	-rwxr-xr-x
xzfgrep	5.76 KB	-rwxr-xr-x
xzgrep	5.76 KB	-rwxr-xr-x
xzless	1.76 KB	-rwxr-xr-x
xzmore	2.11 KB	-rwxr-xr-x
yes	33.36 KB	-rwxr-xr-x
ypdomainname	21.16 KB	-rwxr-xr-x
yum	1.91 KB	-rwxr-xr-x
zcat	1.94 KB	-rwxr-xr-x
zcmp	1.64 KB	-rwxr-xr-x
zdiff	5.74 KB	-rwxr-xr-x
zegrep	29 B	-rwxr-xr-x
zfgrep	29 B	-rwxr-xr-x
zforce	2.03 KB	-rwxr-xr-x
zgrep	7.4 KB	-rwxr-xr-x
zip	229 KB	-rwxr-xr-x
zipcloak	102.91 KB	-rwxr-xr-x
zipdetails	49.39 KB	-rwxr-xr-x
zipgrep	2.88 KB	-rwxr-xr-x
zipinfo	201.98 KB	-rwxr-xr-x
zipnote	97.76 KB	-rwxr-xr-x
zipsplit	97.76 KB	-rwxr-xr-x
zless	2.15 KB	-rwxr-xr-x
zmore	1.8 KB	-rwxr-xr-x
znew	4.45 KB	-rwxr-xr-x
zsoelim	42.55 KB	-rwxr-xr-x
zts-php	5.01 MB	-rwxr-xr-x
zts-php-config	5.29 KB	-rwxr-xr-x
zts-phpize	4.66 KB	-rwxr-xr-x

Code Editor : sa-update

#!/usr/bin/perl -T -w

# <@LICENSE>
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at:
# 
#     http://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# </@LICENSE>

use strict;
use warnings;
use re 'taint';

my $VERSION = 'svnunknown';
if ('$Id: sa-update.raw 1881784 2020-09-17 07:17:40Z gbechis $' =~ ':') {
  # Subversion keyword "$Id: sa-update.raw 1881784 2020-09-17 07:17:40Z gbechis $" has been successfully expanded.
  # Doesn't happen with automated launchpad builds:
  # https://bugs.launchpad.net/launchpad/+bug/780916
  $VERSION = &Mail::SpamAssassin::Version . ' / svn' . (split(/\s+/, '$Id: sa-update.raw 1881784 2020-09-17 07:17:40Z gbechis $'))[2];
}

my $PREFIX          = '/usr';             # substituted at 'make' time
my $DEF_RULES_DIR   = '/usr/share/spamassassin';      # substituted at 'make' time
my $LOCAL_RULES_DIR = '/etc/mail/spamassassin';    # substituted at 'make' time
my $LOCAL_STATE_DIR = '/var/lib/spamassassin';    # substituted at 'make' time
use lib '/usr/share/perl5/vendor_perl';                   # substituted at 'make' time

# We want to do a small amount of macro processing during channel installs,
# based on the values as passed in via 'make'
my %MACRO_VALUES = (
	'VERSION'		=> '3.004006',
	'CONTACT_ADDRESS'	=> 'the administrator of that system',
	'PREFIX'		=> '/usr',
	'DEF_RULES_DIR'		=> '/usr/share/spamassassin',
	'LOCAL_RULES_DIR'	=> '/etc/mail/spamassassin',
	'LOCAL_STATE_DIR'	=> '/var/lib/spamassassin',
	'INSTALLSITELIB'	=> '/usr/share/perl5/vendor_perl',
);

# Standard perl modules
use Errno qw(ENOENT EACCES);
use IO::File qw(O_RDONLY O_WRONLY O_RDWR O_CREAT O_EXCL);
use File::Spec;
use File::Path;
use Getopt::Long;
use Pod::Usage;
use Config;
use POSIX qw(locale_h setsid sigprocmask _exit);
 
POSIX::setlocale(LC_TIME,'C');

BEGIN {                          # see comments in "spamassassin.raw" for doco
  my @bin = File::Spec->splitpath($0);
  my $bin = ($bin[0] ? File::Spec->catpath(@bin[0..1], '') : $bin[1])
            || File::Spec->curdir;

if (-e $bin.'/lib/Mail/SpamAssassin.pm'
        || !-e '/usr/share/perl5/vendor_perl/Mail/SpamAssassin.pm' )
  {
    my $searchrelative;
    if ($searchrelative && $bin eq '../' && -e '../blib/lib/Mail/SpamAssassin.pm')
    {
      unshift ( @INC, '../blib/lib' );
    } else {
      foreach ( qw(lib ../lib/site_perl
                ../lib/spamassassin ../share/spamassassin/lib))
      {
        my $dir = File::Spec->catdir( $bin, split ( '/', $_ ) );
        if ( -f File::Spec->catfile( $dir, "Mail", "SpamAssassin.pm" ) )
        { unshift ( @INC, $dir ); last; }
      }
    }
  }
}

# These are the non-standard required modules
use Net::DNS;
use HTTP::Date qw(time2str);
use Archive::Tar 1.23;
use IO::Zlib 1.04;
use Mail::SpamAssassin::Logger qw(:DEFAULT info log_message);

our ($have_lwp, $io_socket_module_name, $have_inet4, $use_inet4, $have_inet6, $use_inet6, $have_sha256, $have_sha512);

BEGIN {
  # Deal with optional modules

eval { require Digest::SHA; import Digest::SHA qw(sha256_hex sha512_hex); 1 } and do { $have_sha256=1; $have_sha512=1 }
  or die "Unable to verify file hashes! You must install a modern version of Digest::SHA.";
  
    $have_lwp = eval {
    require LWP::UserAgent;
  };

if (eval { require IO::Socket::IP }) {  # handles IPv6 and IPv4
    $io_socket_module_name = 'IO::Socket::IP';
  } elsif (eval { require IO::Socket::INET6 }) {  # handles IPv6 and IPv4
    $io_socket_module_name = 'IO::Socket::INET6';

} elsif (eval { require IO::Socket::INET }) {  # IPv4 only
    $io_socket_module_name = 'IO::Socket::INET';
  }

$have_inet4 =  # can we create a PF_INET socket?
    defined $io_socket_module_name && eval {
      my $sock =
        $io_socket_module_name->new(LocalAddr => '0.0.0.0', Proto => 'tcp');
      $sock->close or die "error closing socket: $!"  if $sock;
      $sock ? 1 : undef;
    };

$have_inet6 =  # can we create a PF_INET6 socket?
    defined $io_socket_module_name &&
    $io_socket_module_name ne 'IO::Socket::INET' &&
    eval {
      my $sock =
        $io_socket_module_name->new(LocalAddr => '::', Proto => 'tcp');
      $sock->close or die "error closing socket: $!"  if $sock;
      $sock ? 1 : undef;
    };
}

# These should already be available
use Mail::SpamAssassin;
use Mail::SpamAssassin::Util qw(untaint_var untaint_file_path
                           proc_status_ok exit_status_str am_running_on_windows
                           secure_tmpfile secure_tmpdir);

# Make the main dbg() accessible in our package w/o an extra function
*dbg=\&Mail::SpamAssassin::dbg;
sub dbg;

$| = 1;  # autoflushing STDOUT makes verbose output consistent with warnings

# Clean up PATH appropriately
Mail::SpamAssassin::Util::clean_path_in_taint_mode();

##############################################################################

# Default list of GPG keys allowed to sign update releases
#
# pub   4096R/5244EC45 2005-12-20
#       Key fingerprint = 5E54 1DC9 59CB 8BAC 7C78  DFDC 4056 A61A 5244 EC45
# uid                  updates.spamassassin.org Signing Key <release@spamassassin.org>
# sub   4096R/24F434CE 2005-12-20
#
# note for gpg newbs: these are "long" gpg keyids.  It's common to also
# use the last 8 hex digits as a shorter keyid string.
#
my %valid_GPG = ( 
  '0C2B1D7175B852C64B3CDC716C55397824F434CE' => 1,
  '5E541DC959CB8BAC7C78DFDC4056A61A5244EC45' => 1,
);

# Default list of channels to update against
#
my @channels = ( 'updates.spamassassin.org' );

my $IGNORE_MIRBY_OLDER_THAN = (24 * 60 * 60 * 7);       # 1 week

##############################################################################

my %opt;
@{$opt{'gpgkey'}} = ();
@{$opt{'channel'}} = ();
my $GPG_ENABLED = 1;

$opt{'gpghomedir'} = File::Spec->catfile($LOCAL_RULES_DIR, 'sa-update-keys');

Getopt::Long::Configure(
  qw(bundling no_getopt_compat no_auto_abbrev no_ignore_case));
GetOptions(
  'debug|D:s'                           => \$opt{'debug'},
  'version|V'                           => \$opt{'version'},
  'help|h|?'                            => \$opt{'help'},
  'verbose|v+'                          => \$opt{'verbose'},
  'checkonly'                           => \$opt{'checkonly'},
  'allowplugins'                        => \$opt{'allowplugins'},
  'reallyallowplugins'                  => \$opt{'reallyallowplugins'},
  'refreshmirrors'                      => \$opt{'refreshmirrors'},
  'httputil=s'                          => \$opt{'httputil'},

# allow multiple of these on the commandline
  'gpgkey=s'				=> $opt{'gpgkey'},
  'gpghomedir=s'			=> \$opt{'gpghomedir'},
  'channel=s'				=> $opt{'channel'},

'install=s'                           => \$opt{'install'},
  'import=s'			        => \$opt{'import'},
  'gpgkeyfile=s'			=> \$opt{'gpgkeyfile'},
  'channelfile=s'			=> \$opt{'channelfile'},
  'updatedir=s'				=> \$opt{'updatedir'},
  'gpg!'				=> \$GPG_ENABLED,

'4'                                   => sub { $opt{'force_pf'} = 'inet' },
  '6'                                   => sub { $opt{'force_pf'} = 'inet6' },

# backward compatibility
  'usegpg'				=> \$GPG_ENABLED,

) or print_usage_and_exit();

if ( defined $opt{'help'} ) {               
  print_usage_and_exit("For more information read the sa-update man page.\n", 0);
} 
if ( defined $opt{'version'} ) {            
  print_version();
  exit(0);
}

if ( $opt{'allowplugins'} && !$opt{'reallyallowplugins'} ) {
  warn "Security warning: dangerous option --allowplugins used:\n".
       "- there should never be need to use this option, see man sa-update(1)\n".
       "- specify --reallyallowplugins to allow activating plugins\n";
  exit 2;
}

$use_inet4 = $have_inet4 && ( !$opt{'force_pf'} || $opt{'force_pf'} eq 'inet' );
$use_inet6 = $have_inet6 && ( !$opt{'force_pf'} || $opt{'force_pf'} eq 'inet6' );

if ( $opt{'force_pf'} && $opt{'force_pf'} eq 'inet' && !$have_inet4 ) {
  warn "Option -4 specified but support for the ".
       "INET protocol family is not available.\n";
}
if ( $opt{'force_pf'} && $opt{'force_pf'} eq 'inet6' && !$have_inet6 ) {
  warn "Option -6 specified but support for the ".
       "INET6 protocol family is not available.\n";
}

if ( defined $opt{'httputil'} && $opt{'httputil'} !~ /^(curl|wget|fetch|lwp)$/ ) {
  warn "Invalid parameter for --httputil, curl|wget|fetch|lwp wanted\n";
}

# Figure out what version of SpamAssassin we're using, and also figure out the
# reverse of it for the DNS query.  Handle x.yyyzzz as well as x.yz.
my $SAVersion = $Mail::SpamAssassin::VERSION;
if ($SAVersion =~ /^(\d+)\.(\d{3})(\d{3})$/) {
  $SAVersion = join(".", $1+0, $2+0, $3+0);
}
elsif ($SAVersion =~ /^(\d)\.(\d)(\d)$/) {
  $SAVersion = "$1.$2.$3";
}
else {
  die "fatal: SpamAssassin version number '$SAVersion' is in an unknown format!\n";
}
my $RevSAVersion = join(".", reverse split(/\./, $SAVersion));

# set debug areas, if any specified (only useful for command-line tools)
$SAVersion =~ /^(\d+\.\d+)/;
if ($1+0 > 3.0) {
  $opt{'debug'} ||= 'all' if (defined $opt{'debug'});
}
else {
  $opt{'debug'} = defined $opt{'debug'};
}

# Find the default site rule directory, also setup debugging and other M::SA bits
my $SA = Mail::SpamAssassin->new({
  debug => $opt{'debug'},
  local_tests_only => 1,
  dont_copy_prefs => 1,

PREFIX          => $PREFIX,
  DEF_RULES_DIR   => $DEF_RULES_DIR,
  LOCAL_RULES_DIR => $LOCAL_RULES_DIR,
  LOCAL_STATE_DIR => $LOCAL_STATE_DIR,
});

if (defined $opt{'updatedir'}) {
  $opt{'updatedir'} = untaint_file_path($opt{'updatedir'});
}
else {
  $opt{'updatedir'} = $SA->sed_path('__local_state_dir__/__version__');
}

# check only disabled gpg
# https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5854
if ( defined $opt{'checkonly'}) {
  $GPG_ENABLED=0;
  dbg("gpg: Disabling gpg requirement due to checkonly flag.");
}

dbg("generic: sa-update version $VERSION");
dbg("generic: using update directory: $opt{'updatedir'}");

# doesn't really display useful things for this script, but we do want
# a module/version listing, etc. sa-update may be used for older versions
# of SA that don't include this function, so eval around it.
eval { $SA->debug_diagnostics(); 1; };

$SA->finish();

# untaint the command-line args; since the root user supplied these, and
# we're not a setuid script, we trust them
foreach my $optkey (keys %opt) {
  next if ref $opt{$optkey};
  untaint_var(\$opt{$optkey});
}

##############################################################################

# Deal with gpg-related options

if (@{$opt{'gpgkey'}}) {
  $GPG_ENABLED = 1;
  foreach my $key (@{$opt{'gpgkey'}}) {
    unless (is_valid_gpg_key_id($key)) {
      dbg("gpg: invalid gpgkey parameter $key");
      next;
    }
    $key = uc $key;
    dbg("gpg: adding key id $key");
    $valid_GPG{$key} = 1;
  }
}

if (defined $opt{'gpgkeyfile'}) {
  $GPG_ENABLED = 1;
  open(GPG, $opt{'gpgkeyfile'})
    or die "cannot open $opt{'gpgkeyfile'} for reading: $!\n";

dbg("gpg: reading in gpgfile ".$opt{'gpgkeyfile'});
  while(my $key = <GPG>) {
    chomp $key;

$key =~ s/#.*$//;   # remove comments
    $key =~ s/^\s+//;   # remove leading whitespace
    $key =~ s/\s+$//;   # remove tailing whitespace
    next if $key eq ''; # skip empty lines

unless (is_valid_gpg_key_id($key)) {
      dbg("gpg: invalid key id $key");
      next;
    }
    $key = uc $key;
    dbg("gpg: adding key id $key");
    $valid_GPG{$key} = 1;
  }
  close(GPG) or die "cannot close $opt{'gpgkeyfile'}: $!";
}

# At this point, we need to know where GPG is ...
my $GPGPath;
if ($GPG_ENABLED || $opt{'import'}) {
  # find GPG in the PATH
  # bug 4958: for *NIX it's "gpg", in Windows it's "gpg.exe"
  $GPGPath = 'gpg2' . $Config{_exe};
  dbg("gpg: Searching for '$GPGPath'");

if ($GPGPath = Mail::SpamAssassin::Util::find_executable_in_env_path($GPGPath)) {
    dbg("gpg: found $GPGPath");

# bug 5030: if GPGPath has a space, put it in quotes
    if ($GPGPath =~ / /) {
      $GPGPath =~ s/"/\\"/g;
      $GPGPath = qq/"$GPGPath"/;
      dbg("gpg: path changed to $GPGPath");
    }
  }
  else {
    die "error: gpg required but not found!  It is not recommended, but you can use \"sa-update\" with the --no-gpg to skip the verification. \n";
  }

# GPG was found, and we've been asked to import a key only
  if ( $opt{'import'} ) {
    my $ex = import_gpg_key($opt{'import'});
    exit $ex;
  }

# does the sa-update keyring exist?  if not, import it
  if(!-f File::Spec->catfile($opt{'gpghomedir'}, "trustdb.gpg")) {
    import_default_keyring();
    # attempt to continue even if this fails, anyway
  }

# specify which keys are trusted
  dbg("gpg: release trusted key id list: ".join(" ", keys %valid_GPG));

# convert fingerprint gpg ids to keyids
  foreach (keys %valid_GPG) {
    my $id = substr $_, -8;
    $valid_GPG{$id} = 1;
  }
}

##############################################################################

# Deal with channel-related options
if (defined $opt{'channel'} && scalar @{$opt{'channel'}} > 0) {
  @channels = @{$opt{'channel'}};
}
if (defined $opt{'channelfile'}) {
  open(CHAN, $opt{'channelfile'})
    or die "cannot open $opt{'channelfile'} for reading: $!\n";

dbg("channel: reading in channelfile ".$opt{'channelfile'});
  @channels = ();
  while(my $chan = <CHAN>) {
    chomp $chan;

$chan =~ s/#.*$//;   # remove comments
    $chan =~ s/^\s+//;   # remove leading whitespace
    $chan =~ s/\s+$//;   # remove tailing whitespace
    next if $chan eq ''; # skip empty lines

$chan = lc $chan;
    dbg("channel: adding $chan");
    push(@channels, $chan);
  }
  close(CHAN) or die "cannot close $opt{'channelfile'}: $!";
}

# untaint the channel listing
for(my $ind = 0; $ind < @channels; $ind++) {
  local($1); # bug 5061: prevent random taint flagging of $1
  if ($channels[$ind] =~ /^([a-zA-Z0-9._-]+)$/) {
    untaint_var(\$channels[$ind]);
  }
  else {
    dbg("channel: skipping invalid channel: $channels[$ind]");
    splice @channels, $ind, 1;
    $ind--; # the next element takes the place of the deleted one
  }
}

my ($res, $ua);

if ($opt{'install'}) {
  if (scalar @channels > 1) {
    die "fatal: --install cannot be used with multiple --channel switches.\n";
  }

} else {
  $res = Net::DNS::Resolver->new();
  $res->force_v4(1)  if $have_inet4 &&
                        $opt{'force_pf'} && $opt{'force_pf'} eq 'inet';
}

# Generate a temporary file to put channel content in for later use ...
my ($content_file, $tfh) = secure_tmpfile();
$tfh
  or die "fatal: could not create temporary channel content file: $!\n";
close $tfh
  or die "cannot close temporary channel content file $content_file: $!";
undef $tfh;

my $lint_failures = 0;
my $channel_failures = 0;
my $channel_successes = 0;

# Use a temporary directory for all update channels
my $UPDTmp;

# we only need to lint the site pre files once
my $site_pre_linted = 0;

# Go ahead and loop through all of the channels
foreach my $channel (@channels) {
  dbg("channel: attempting channel $channel");
  my %preserve_files;

# Convert the channel to a nice-for-filesystem version
  my $nicechannel = $channel;
  $nicechannel =~ tr/A-Za-z0-9-/_/cs;

my $UPDDir = File::Spec->catfile($opt{'updatedir'}, $nicechannel);
  my $CFFile = "$UPDDir.cf";
  my $PREFile = "$UPDDir.pre";

if (-d $UPDDir) {
    dbg("channel: using existing directory $UPDDir");
  } else {
    # create the dir, if it doesn't exist
    dbg("channel: creating directory $UPDDir");
    mkpath([$UPDDir], 0, 0777)
      or die "channel: cannot create channel directory $UPDDir: $!\n";
  }
  dbg("channel: channel cf file $CFFile");
  dbg("channel: channel pre file $PREFile");

my $instfile;
  if ($opt{'install'}) {
    $instfile = $opt{'install'};
    dbg("channel: installing from file $instfile");
  }

my($mirby, $mirby_force_reload, $mirby_file_is_ok);
  my $mirby_path = File::Spec->catfile($UPDDir, "MIRRORED.BY");

# try to read metadata from channel.cf file
  my $currentV = -1;
  if (!open(CF, $CFFile)) {
    dbg("channel: error opening file %s: %s",
        $CFFile, $!)  unless $! == ENOENT;
  } else {
    while(<CF>) {
      local($1,$2);
      last unless /^# UPDATE\s+([A-Za-z]+)\s+(\S+)/;
      my($type, $value) = (lc $1,$2);

dbg("channel: metadata $type = $value, from file $CFFile");

if ($type eq 'version') {
        $value =~ /^(\d+)/;
        $currentV = $1;
      }
    }
    close(CF) or die "cannot close $CFFile: $!";
  }

# obtain a version number which should be installed
  my $newV;
  if ($instfile) {
    # the /.*/ ensures we use the 3-digit string nearest to the end of string,
    # otherwise we might pick up something from the middle of the directory path
    local($1);
    if ($instfile !~ /(?:.*\D|^)(\d{3,})/) {        
      # this is a requirement
      die "channel: $channel: --install file $instfile does not contain a 3-digit version number!\n";
    }
    $newV = $1;

if ( defined $opt{'checkonly'} ) {            
      dbg("channel: $channel: --install and --checkonly, claiming update available");
      $channel_successes++;
      next;
    }

} else {  # not an install file, get the latest version number from network
    # Setup the channel version DNS query
    my $DNSQ = "$RevSAVersion.$channel";

my $dnsV = join(' ', do_dns_query($DNSQ));
    local($1);
    if (defined $dnsV && $dnsV =~ /^(\d+)/) {
      $newV = untaint_var($1) if (!defined $newV || $1 > $newV);
      dbg("dns: $DNSQ => $dnsV, parsed as $1");
    }

# Not getting a response isn't a failure, there may just not be any updates
    # for this SA version yet.
    if (!defined $newV) {
      my @mirs = do_dns_query("mirrors.$channel");
      if (defined shift @mirs) {
        dbg("channel: no updates available, skipping channel");
      } else {
        channel_failed("channel '$channel': no 'mirrors.$channel' record found");
      }
      next;
    }

# If this channel hasn't been installed before, or it's out of date,
    # keep going.  Otherwise, skip it.
    if ($currentV >= $newV) {
      dbg("channel: current version is $currentV, new version is $newV, ".
          "skipping channel");
      next;
    }

print "Update available for channel $channel: $currentV -> $newV\n"  if $opt{'verbose'};

# If we are only checking for update availability, exit now
    if ( defined $opt{'checkonly'} ) {            
      dbg("channel: $channel: update available, not downloading ".
          "in checkonly mode");
      $channel_successes++;
      next;
    }

}

# we need a directory we control that we can use to avoid loading any rules
  # when we lint the site pre files, we might as well use the channel temp dir
  dbg("channel: preparing temp directory for new channel");
  if (!$UPDTmp) {
    $UPDTmp = secure_tmpdir();
    dbg("channel: created tmp directory $UPDTmp");
  }
  else {
    dbg("channel: using existing tmp directory $UPDTmp");
    if (!clean_update_dir($UPDTmp)) {
      die "channel: attempt to clean update temp dir failed, aborting";
    }
  }

# lint the site pre files (that will be used when lint checking the channel)
  # before downloading the channel update
  unless ($site_pre_linted) {
    dbg("generic: lint checking site pre files once before attempting channel updates");
    unless (lint_check_dir(File::Spec->catfile($UPDTmp, "doesnotexist"))) {
      dbg("generic: lint of site pre files failed, cannot continue"); 
      print "Lint of site pre files failed, cannot continue\n"  if $opt{'verbose'};
      $lint_failures++;
      last;
    }
    dbg("generic: lint check of site pre files succeeded, continuing with channel updates");
    $site_pre_linted = 1;
  }

my $content;
  my $SHA512;
  my $SHA256;
  my $GPG;

if ($instfile) {
    dbg("channel: using --install files $instfile\{,.sha256,.sha512,.asc\}");
    $content = read_install_file($instfile);
    if ( -s "$instfile.sha512" ) { $SHA512 = read_install_file($instfile.".sha512"); }
    if ( -s "$instfile.sha256" ) { $SHA256 = read_install_file($instfile.".sha256"); }
    $GPG = read_install_file($instfile.".asc") if $GPG_ENABLED;

} else {  # not an install file, obtain fresh rules from network
    dbg("channel: protocol family available: %s%s",
        join(',', $have_inet4 ? 'inet'  : (),
                  $have_inet6 ? 'inet6' : ()),
        $opt{'force_pf'} ? '; force '.$opt{'force_pf'} : '' );

# test if the MIRRORED.BY file for this channel exists,
    # is nonempty, and is reasonably fresh

my(@mirr_stat_list) = stat($mirby_path);
    if (!@mirr_stat_list) {
      if ($! == ENOENT) {
        dbg("channel: no mirror file %s, will fetch it", $mirby_path);
      } else {
        # protection error, misconfiguration, file system error, ...
        warn "error: error accessing mirrors file $mirby_path: $!\n";
        channel_failed("channel '$channel': error accessing mirrors file $mirby_path: $!");
        next;
      }
    } elsif (-z _) {
      dbg("channel: file %s is empty, refreshing mirrors file", $mirby_path);
      $mirby_force_reload = 1;
    } elsif ($opt{'refreshmirrors'}) {
      dbg("channel: --refreshmirrors used, forcing mirrors file refresh ".
          "on channel $channel");
      $mirby_force_reload = 1;
    } elsif (time - $mirr_stat_list[9] > $IGNORE_MIRBY_OLDER_THAN) {
      dbg("channel: file %s is too old, refreshing mirrors file", $mirby_path);
      $mirby_file_is_ok = 1;  # mirrors file seems fine, but is old
      $mirby_force_reload = 1;
    } else {
      # mirror file $mirby_path exists, is nonempty, and is reasonably fresh
      $mirby_file_is_ok = 1;
    }

if (!$mirby_file_is_ok || $mirby_force_reload) {
      # fetch a fresh list of mirrors
      dbg("channel: DNS lookup on mirrors.$channel");
      my @mirrors = do_dns_query("mirrors.$channel");
      unless (@mirrors) {
        warn "error: no mirror data available for channel $channel\n";
        channel_failed("channel '$channel': MIRRORED.BY file URL was not in DNS");
        next;
      }
      foreach my $mirror (@mirrors) {
        my ($result_fname, $http_ok) =
          http_get($mirror, $UPDDir, $mirby_path, $mirby_force_reload);
        if (!$http_ok) {
          dbg("channel: no mirror data available for channel %s from %s",
              $channel, $mirror);
          next;
        }
        $mirby = read_content($result_fname, 0);
        if ($mirby) {
          dbg("channel: MIRRORED.BY file for channel %s retrieved", $channel);
          $mirby_file_is_ok = 1;
          $mirby_force_reload = 0;
          $preserve_files{$mirby_path} = 1;

# set file creation time to now, otherwise we'll keep refreshing
          # (N.B.: curl preserves time of a downloaded file)
          my $now = time;
          utime($now, $now, $mirby_path)
            or warn "error: error setting creation time of $mirby_path: $!\n";

last;
        }
      }
      if ($mirby_force_reload) {  # not refreshed?
        warn "error: unable to refresh mirrors file for channel $channel, ".
             "using old file\n";
      }
    }

if (!$mirby_file_is_ok) {
      warn "error: no mirror data available for channel $channel\n";
      channel_failed("channel '$channel': MIRRORED.BY file contents were missing");
      next;
    } elsif ($mirby) {
      # file contents already in memory, no need to read it from a file
    } elsif (!open(MIRBY, $mirby_path)) {
      warn "error: error opening mirrors file $mirby_path: $!\n";
      channel_failed("channel '$channel': error opening mirrors file $mirby_path: $!");
      next;
    } else {
      dbg("channel: reading MIRRORED.BY file %s", $mirby_path);
      { local $/ = undef; $mirby = <MIRBY> }
      close(MIRBY) or die "cannot close $mirby_path: $!";
      $preserve_files{$mirby_path} = 1;
    }

# Parse the list of mirrors
    dbg("channel: parsing MIRRORED.BY file for channel %s", $channel);
    my %mirrors;
    my @mirrors = split(/^/, $mirby);
    while(my $mirror = shift @mirrors) {
      chomp $mirror;

$mirror =~ s/#.*$//;   # remove comments
      $mirror =~ s/^\s+//;   # remove leading whitespace
      $mirror =~ s/\s+$//;   # remove tailing whitespace
      next if $mirror eq ''; # skip empty lines

# We only support HTTP (and HTTPS) right now
      if ($mirror !~ m{^https?://}i) {
        dbg("channel: skipping non-HTTP mirror: $mirror");
        next;
      }

dbg("channel: found mirror $mirror");

my @data;
      ($mirror,@data) = split(/\s+/, $mirror);
      $mirror =~ s{/+\z}{};  # http://example.com/updates/ -> .../updates
      $mirrors{$mirror}->{weight} = 1;
      foreach (@data) {
        my($k,$v) = split(/=/, $_, 2);
        $mirrors{$mirror}->{$k} = $v;
      }
    }

unless (%mirrors) {
      warn "error: no mirrors available for channel $channel\n";
      channel_failed("channel '$channel': no mirrors available");
      next;
    }

# Now that we've laid the foundation, go grab the appropriate files
    #
    my $path_content = File::Spec->catfile($UPDDir, "$newV.tar.gz");
    my $path_sha512 =  File::Spec->catfile($UPDDir, "$newV.tar.gz.sha512");
    my $path_sha256 =  File::Spec->catfile($UPDDir, "$newV.tar.gz.sha256");
    my $path_asc =     File::Spec->catfile($UPDDir, "$newV.tar.gz.asc");

# Loop through all available mirrors, choose from them randomly
    # if any get fails, choose another mirror to retry _all_ files again
    # sleep few seconds on retries
    my $download_ok = 0;
    while (my $mirror = choose_mirror(\%mirrors)) {
      my ($result_fname, $http_ok);
      # Grab the data hash for this mirror, then remove it from the list
      my $mirror_info = $mirrors{$mirror};
      delete $mirrors{$mirror};

# Make sure we start without files from existing tries
      unlink($path_content);
      unlink($path_sha512);
      unlink($path_sha256);
      unlink($path_asc);

my $sleep_sec = 2;

if (!check_mirror_af($mirror)) {
        my @my_af;
        push(@my_af, "IPv4") if $use_inet4;
        push(@my_af, "IPv6") if $use_inet6;
        push(@my_af, "no IP service") if !@my_af;
        dbg("reject mirror %s: no common address family (%s), %s",
            $mirror, join(" ", @my_af),
            %mirrors ? "sleeping $sleep_sec sec and trying next" : 'no mirrors left');
        sleep($sleep_sec) if %mirrors;
        next;
      }

dbg("channel: selected mirror $mirror");

# Actual archive file
      ($result_fname, $http_ok) = http_get("$mirror/$newV.tar.gz", $UPDDir);
      if (!$http_ok || !-s $result_fname) {
        dbg("channel: failed to get $newV.tar.gz from mirror $mirror, %s",
          %mirrors ? "sleeping $sleep_sec sec and trying next" : 'no mirrors left');
        sleep($sleep_sec) if %mirrors;
        next;
      }

# SHA512 of the archive file
      ($result_fname, $http_ok) = http_get("$mirror/$newV.tar.gz.sha512", $UPDDir);
      if (!$http_ok || !-s $result_fname) {
        # If not found, try SHA256 instead
        ($result_fname, $http_ok) = http_get("$mirror/$newV.tar.gz.sha256", $UPDDir);
        if (!$http_ok || !-s $result_fname) {
          dbg("channel: No sha512 or sha256 file available from $mirror, %s",
            %mirrors ? "sleeping $sleep_sec sec and trying next" : 'no mirrors left');
          sleep($sleep_sec) if %mirrors;
          next;
        }
      }

# if GPG is enabled, the GPG detached signature of the archive file
      if ($GPG_ENABLED) {
        ($result_fname, $http_ok) = http_get("$mirror/$newV.tar.gz.asc", $UPDDir);
        if (!$http_ok || !-s $result_fname) {
          dbg("channel: No GPG/asc file available from $mirror, %s",
            %mirrors ? "sleeping $sleep_sec sec and trying next" : 'no mirrors left');
          sleep($sleep_sec) if %mirrors;
          next;
        }
      }

$download_ok = 1;
      last;
    }

if ($download_ok) {
      if (-s $path_content) {
        $content = read_content($path_content, 1); # binary
        $preserve_files{$path_content} = 1;
      }
      if (-s $path_sha512) {
        $SHA512 = read_content($path_sha512, 0); # ascii
        $preserve_files{$path_sha512} = 1;
      }
      if (-s $path_sha256) {
        $SHA256 = read_content($path_sha256, 0); # ascii
        $preserve_files{$path_sha256} = 1;
      }
      if (-s $path_asc) {
        $GPG = read_content($path_asc, 0); # ascii
        $preserve_files{$path_asc} = 1;
      }
    }
  }

unless ($content && ( $SHA512 || $SHA256 ) && (!$GPG_ENABLED || $GPG)) {
    channel_failed("channel '$channel': could not find working mirror");
    next;
  }

if ( $SHA512 ) {
    # Validate the SHA512 signature
    { local($1);
      $SHA512 =~ /^([a-fA-F0-9]{128})\b/;
      $SHA512 = defined $1 ? lc($1) : 'INVALID';
    }
    my $digest = sha512_hex($content);
    dbg("sha512: verification wanted: $SHA512");
    dbg("sha512: verification result: $digest");
    unless ($digest eq $SHA512) {
      channel_failed("channel '$channel': SHA512 verification failed");
      next;
    }
  }

if ( $SHA256 ) {
    # Validate the SHA256 signature
    { local($1);
      $SHA256 =~ /^([a-fA-F0-9]{64})\b/;
      $SHA256 = defined $1 ? lc($1) : 'INVALID';
    }
    my $digest = sha256_hex($content);
    dbg("sha256: verification wanted: $SHA256");
    dbg("sha256: verification result: $digest");
    unless ($digest eq $SHA256) {
      channel_failed("channel '$channel': SHA256 verification failed");
      next;
    }
  }

# Write the content out to a temp file for GPG/Archive::Tar interaction
  dbg("channel: populating temp content file %s", $content_file);
  open(TMP, ">$content_file")
    or die "fatal: cannot create content temp file $content_file: $!\n";
  binmode TMP
    or die "fatal: cannot set binmode on content temp file $content_file: $!\n";
  print TMP $content
    or die "fatal: cannot write to content temp file $content_file: $!\n";
  close TMP
    or die "fatal: cannot close content temp file $content_file: $!\n";

# to sign  : gpg -bas file
  # to verify: gpg --verify --batch --no-tty --status-fd=1 -q --logger-fd=1 file.asc file
  # look for : [GNUPG:] GOODSIG 6C55397824F434CE updates.spamassassin.org [...]
  #            [GNUPG:] VALIDSIG 0C2B1D7175B852C64B3CDC716C55397824F434CE [...]
  #            [GNUPG:] NO_PUBKEY 6C55397824F434CE
  if ($GPG) {
    dbg("gpg: populating temp signature file");
    my $sig_file;
    ($sig_file, $tfh) = secure_tmpfile();
    $tfh
      or die "fatal: couldn't create temp file for GPG signature: $!\n";
    binmode $tfh
      or die "fatal: cannot set binmode on temp file for GPG signature: $!\n";
    print $tfh $GPG
      or die "fatal: cannot write temp file for GPG signature: $!\n";
    close $tfh
      or die "fatal: cannot close temp file for GPG signature: $!\n";
    undef $tfh;

dbg("gpg: calling gpg");

my $gpghome = interpolate_gpghomedir();

# TODO: we could also use "--keyserver pgp.mit.edu" or similar,
    # to autodownload missing keys...
    my $CMD = "$GPGPath $gpghome --verify --batch ".
        "--no-tty --status-fd=1 -q --logger-fd=1";

unless (open(CMD, "$CMD $sig_file $content_file|")) {
      unlink $sig_file or warn "error: cannot unlink $sig_file: $!\n";
      die "fatal: couldn't execute $GPGPath: $!\n";
    }

# Determine the fate of the signature
    my $signer = '';
    my $missingkeys = '';
    while(my $GNUPG = <CMD>) {
      chop $GNUPG;
      dbg ("gpg: $GNUPG");

if ($GNUPG =~ /^gpg: fatal:/) {
        warn $GNUPG."\n";        # report bad news
      }

local($1);
      if ($GNUPG =~ /^\Q[GNUPG:]\E NO_PUBKEY \S+(\S{8})$/) {
        $missingkeys .= $1." ";
      }

next unless ($GNUPG =~ /^\Q[GNUPG:]\E (?:VALID|GOOD)SIG (\S{8,40})/);
      my $key = $1;

# we want either a keyid (8) or a fingerprint (40)
      if (length $key > 8 && length $key < 40) {
        substr($key, 8) = '';
      }

# use the longest match we can find
      $signer = $key if length $key > length $signer;
    }

my $errno = 0;  close CMD or $errno = $!;
    proc_status_ok($?,$errno)
      or warn("gpg: process '$GPGPath' finished: ".
              exit_status_str($?,$errno)."\n");

unlink $sig_file or warn "cannot unlink $sig_file: $!\n";

if ($signer) {
      my $keyid = substr $signer, -8;
      dbg("gpg: found signature made by key $signer");
      if (exists $valid_GPG{$signer}) {
	dbg("gpg: key id $signer is release trusted");
      }
      elsif (exists $valid_GPG{$keyid}) {
	dbg("gpg: key id $keyid is release trusted");
      }
      else {
	dbg("gpg: key id $keyid is not release trusted");
	$signer = undef;
      }
    }

unless ($signer) {
      warn "error: GPG validation failed!\n";

if ($missingkeys) {

warn <<ENDOFVALIDATIONERR;
The update downloaded successfully, but it was not signed with a trusted GPG
key.  Instead, it was signed with the following keys:

$missingkeys

Perhaps you need to import the channel's GPG key?  For example:

wget https://spamassassin.apache.org/updates/GPG.KEY
    sa-update --import GPG.KEY

ENDOFVALIDATIONERR

} else {

warn <<ENDOFVALIDATIONERR;
The update downloaded successfully, but the GPG signature verification
failed.
ENDOFVALIDATIONERR

}

channel_failed("channel '$channel': GPG validation failed");
      next;
    }
  }

# OK, we're all validated at this point, install the new version
  dbg("channel: file verification passed, testing update");

dbg("channel: extracting archive");
  if (!taint_safe_archive_extract($UPDTmp, $content_file)) {
    channel_failed("channel '$channel': archive extraction failed");
    next;
  }

# check --lint

if (!lint_check_dir($UPDTmp)) {
    channel_failed("channel '$channel': lint check of update failed");
    next;
  }

dbg("channel: lint check succeeded, extracting archive to $UPDDir...");

my @totry = (
    {
      'try' => sub {
        if (-d $UPDDir) {
          # ok that worked, too late to stop now!   At this stage, if there are
          # errors, we have to attempt to carry on regardless, since we've already
          # blown away the old ruleset.
          dbg("channel: point of no return for existing $UPDDir");

# clean out the previous channel files, if they exist
          if (-f $PREFile && ! unlink $PREFile ) {
            warn("channel: attempt to rm channel pre file failed, attempting to continue anyway: $!");
          }
          if (-f $CFFile && ! unlink $CFFile ) {
            warn("channel: attempt to rm channel cf file failed, attempting to continue anyway: $!");
          }
          if (!clean_update_dir($UPDDir, \%preserve_files)) {
            warn("channel: attempt to rm channel directory failed, attempting to continue anyway");
          }
        }
        else {
          # create the dir, if it doesn't exist
          dbg("channel: creating $UPDDir");
          mkpath([$UPDDir], 0, 0777)
            or die "channel: cannot create channel directory $UPDDir: $!\n";

# ok, that test worked.  it's now likely that the .cf's will
          # similarly be ok to rename, too.   Too late to stop from here on
          dbg("channel: point of no return for new $UPDDir");
        }

return 1;
      },

'rollback' => sub {
	dbg("channel: attempting to remove the channel and update directories");

# bug 4941: try to get rid of the empty directories to avoid leaving SA
        # with no rules.
        rmdir $UPDDir
          or dbg("channel: error removing dir %s: %s", $UPDDir, $!);
        rmdir $opt{'updatedir'}
          or dbg("channel: error removing dir %s: %s", $opt{'updatedir'}, $!);
      },
    },

{
      'try' => sub {
        # extract the files again for the last time
        if (!taint_safe_archive_extract($UPDDir, $content_file)) {
          channel_failed("channel '$channel': archive extraction failed");
	  return 0;
        }

return 1;
      },

'rollback' => sub {
	dbg("channel: attempting to clean out the channel update directory");

# bug 4941: try to get rid of the empty directories to avoid leaving SA
        # with no rules.
        if (!clean_update_dir($UPDDir, \%preserve_files)) {
          warn "channel: attempt to clean up failed extraction also failed!\n";
        }
      },
    },

{
      'try' => sub {
        if ($instfile) {
          dbg("channel: not creating MIRRORED.BY file due to --install");
          return 1;
        }

# The $mirby_path file should have already been created by http_get
      # and preserved past clean_update_dir()
      #
      # # Write out the mirby file, not fatal if it doesn't work
      # dbg("channel: creating MIRRORED.BY file");
      # open(MBY, ">$mirby_path")
      #   or die "cannot create a new MIRRORED.BY file: $!\n";
      # print MBY $mirby or die "error writing to $mirby_path: $!";
      # close(MBY) or die "cannot close $mirby_path: $!";

return 1;
      },

'rollback' => sub {
      },
    },

{
      'try' => sub {
        # the last step is to create the .cf and .pre files to include the
        # channel files
        my @CF;
        my @PRE;

dbg("channel: creating update cf/pre files");

# Put in whatever metadata we need
        push(@CF, "# UPDATE version $newV\n");

# Find all of the cf and pre files
        opendir(DIR, $UPDDir)
          or die "fatal: cannot access $UPDDir: $!\n";

my @files;
        while(my $file = readdir(DIR)) {
	  next if $file eq '.' || $file eq '..';
          untaint_var(\$file);
          my $path = File::Spec->catfile($UPDDir, $file);
          next unless (-f $path);   # shouldn't ever happen
          push(@files, $file);
        }

# bug 5371: ensure files are sorted
        foreach my $file ( sort @files ) {
          if ($file =~ /\.cf$/) {
            push(@CF, "include $nicechannel/$file\n");
          }
          elsif ($file =~ /\.pre$/) {
            push(@PRE, "include $nicechannel/$file\n");
          }
          else {
            next;
          }

dbg("channel: adding $file");
        }
        closedir(DIR) or die "cannot close directory $UPDDir: $!";

# Finally, write out the files to include the update files
        if (!write_channel_file($PREFile, \@PRE)) {
          channel_failed("channel '$channel': writing of $PREFile failed");
          return 0;
        }
        if (!write_channel_file($CFFile, \@CF)) {
          channel_failed("channel '$channel': writing of $CFFile failed");
          return 0;
        }

# if all went fine, remove the .tar.gz, .sha* and .asc files
        delete_files( grep(!m{/\QMIRRORED.BY\E\z}, keys %preserve_files) );

$channel_successes++;
        dbg("channel: update complete");

return 1;
      },

'rollback' => sub {
      },
    },

);

my $error;
  my $eval_stat;
  for(my $elem = 0; $elem <= $#totry; $elem++) {
    my $success;
    eval {
      $success = &{$totry[$elem]->{'try'}}();  1;
    } or do {
      $eval_stat = $@ ne '' ? $@ : "errno=$!";  chomp $eval_stat;
    };
    if (!$success) {
      $error = $elem;
      $eval_stat = "step $elem unsuccessful"  if !defined $eval_stat;
      last;
    }
  }
  if (defined $error) {
    dbg("channel: channel failed, attempting rollback: %s", $eval_stat);
    for(my $elem = $error; $elem >= 0; $elem--) {
      &{$totry[$elem]->{'rollback'}}();
    }
  }
}

##############################################################################

# clean out the temp dir
if ($UPDTmp) {
  dbg("generic: cleaning up temporary directory/files");
  if (!clean_update_dir($UPDTmp)) {
    warn "error: unable to clean out the files in $UPDTmp\n";
  }
}

# clear out the temp files if they still exist
foreach ( $content_file, $UPDTmp ) {
  next unless defined $_;
  my $stat_errn = stat($_) ? 0 : 0+$!;
  next if $stat_errn == ENOENT;

if ($stat_errn != 0) {
    warn "error: cannot access $_: $!\n";
  }
  elsif (-d _) {
    rmdir $_ or warn "error: cannot remove directory $_: $!\n";
  }
  elsif (-f _) {
    unlink $_ or warn "error: cannot remove file $_: $!\n";
  }
  else {
    warn "error: '$_' isn't a file nor a directory, skipping\n";
  }
}

my $exit;
if ($lint_failures) {
  # 2: lint of site pre files failed, cannot continue
  $exit = 2;
}
elsif (!$channel_failures) {
  # 0: updates found and successfully applied
  # 1: no updates were needed (success with nothing to do)
  $exit = $channel_successes ? 0 : 1;
}
else {  # at least some failures
  # 3: some failures, but at least one channel succeeded
  # 4 or higher means all channels failed
  $exit = $channel_successes ? 3 : 4;
}

dbg("diag: updates complete, exiting with code $exit");

if ($opt{'verbose'}) {
  if (!$exit) {
    if (defined $opt{'checkonly'}) {
      print "Update was available, but not installed in checkonly mode\n";
    } else {
      print "Update was available, and was downloaded and installed successfully\n";
    }
  } elsif ($exit == 1) {
    print "Update finished, no fresh updates were available\n";
  } elsif ($exit == 3) {
    print "Update of at least one channel finished, other updates failed\n";
  } else {
    print "Update failed, exiting with code $exit\n";
  }
}

exit $exit;

##############################################################################

sub read_install_file {
  my ($file) = @_;
  open (IN, "<$file") or die "cannot open $file\n";
  my $all;
  { local $/ = undef; $all = <IN> }
  close IN or die "cannot close $file: $!";
  return $all;
}

##############################################################################

sub write_channel_file {
  my ($filename, $contents) = @_;

return 1 unless @{$contents};

if (open(FILE, ">$filename")) {
    print FILE @{$contents} or die "cannot write to $filename: $!";
    close FILE or return 0;
    return 1;
  }

return 0;
}

##############################################################################

sub channel_failed {
  my $reason = shift;
  warn("$reason, channel failed\n");
  $channel_failures++;
}

##############################################################################

sub taint_safe_archive_extract {
  my $todir = shift;
  my $input = shift;

my $tfh = IO::Zlib->new($input, "rb");
  $tfh or die "fatal: couldn't read content tmpfile $content_file: $!\n";

my $tar = Archive::Tar->new($tfh);
  $tar or die "fatal: couldn't open tar archive!\n";

# stupid Archive::Tar is not natively taint-safe! duh.
  # return $tar->extract();
  # instead, get the file list, untaint, and extract one-by-one.

my @files = $tar->list_files();
  foreach my $file (@files) {
    next if ($file =~ /^\/$/);  # ignore dirs

local($1);
    $file =~ /^([-\.\,\/a-zA-Z0-9_]+)$/;
    my $outfname = $1;
    $outfname =~ s/\.\.\//__\//gs;      # avoid "../" dir traversal attacks
    $outfname = File::Spec->catfile($todir, $outfname);

dbg "extracting: $outfname";
    if (!open OUT, ">".$outfname) {
      warn "error: failed to create $outfname: $!";
      goto failed;
    } else {
      my $content = $tar->get_content($file);

if ($outfname =~ /\.(?:pre|cf)$/) {
        # replace macros in the update files if it's a .pre or .cf
        local($1);
        $content =~ s/\@\@([^\@]+)\@\@/$MACRO_VALUES{$1} || "\@\@$1\@\@"/ge;

# also, if --allowplugins is not specified, comment out
        # all loadplugin or tryplugin lines (and others that can load code)
        if ( !$opt{'allowplugins'} ) {
          $content =~ s{^\s*((?:load|try)plugin|\S+_modules?|\S+_factory)\s}
            {#(commented by sa-update, no --allowplugins switch specified)# $1}gmx;
        }

# other stuff never allowed for safety
        $content =~ s/^\s*(dns_server)/#(commented by sa-update, not allowed)# $1/gm;
      }

print OUT $content
        or do { warn "error writing to $outfname: $!"; goto failed };
      close OUT
        or do { warn "error: write failed to $outfname: $!"; goto failed }
    }
  }

return @files;

failed:
  return;       # undef = failure
}

##############################################################################

# Do a generic DNS query
sub do_dns_query {
  my($query, $rr_type) = @_;
  $rr_type = 'TXT'  if !defined $rr_type;

my $RR = $res->query($query, $rr_type);
  my @result;

# NOTE:  $rr->rdatastr returns the result encoded in a DNS zone file
  # format, i.e. enclosed in double quotes if a result contains whitespace
  # (or other funny characters), and may use \DDD encoding or \X quoting as
  # per RFC 1035.  Using $rr->txtdata instead avoids this unnecessary encoding
  # step and a need for decoding by a caller, returning an unmodified string.
  # Caveat: in case of multiple RDATA <character-string> fields contained
  # in a resource record (TXT, SPF, HINFO), starting with Net::DNS 0.69
  # the $rr->txtdata in a list context returns these strings as a list.
  # The $rr->txtdata in a scalar context always returns a single string
  # with <character-string> fields joined by a single space character as
  # a separator.  The $rr->txtdata in Net::DNS 0.68 and older returned
  # such joined space-separated string even in a list context.
  #
  # From Net::DNS maintainers (Willem Toorop, NLnet Labs):
  #   I encourage you to use txtdata for getting the values of
  # <version>.updates.spamassassin.org and mirros.updates.spamassassin.org.
  # As those records have only a single rdata field, txtdata would return
  # the same value since Net::DNS 0.34.
  #
  if ($RR) {
    foreach my $rr ($RR->answer) {
      next if !$rr;  # no answer records, only rcode
      next if $rr->type ne $rr_type;
      # scalar context!
      my $text = $rr->UNIVERSAL::can('txtdata') ? $rr->txtdata : $rr->rdatastr;
      push(@result,$text)  if defined $text && $text ne '';
    }
    printf("DNS %s query: %s -> %s\n", $rr_type, $query, join(", ",@result))
      if $opt{'verbose'} && $opt{'verbose'} > 1;
  }
  else {
    dbg("dns: query failed: $query => " . $res->errorstring);
    printf("DNS %s query %s failed: %s\n", $rr_type, $query, $res->errorstring)
      if $opt{'verbose'} && $opt{'verbose'} > 1;
  }

return @result;
}

##############################################################################

sub init_lwp {
  if ($have_inet6 &&
      (!$opt{'force_pf'} || $opt{'force_pf'} eq 'inet6') &&
      ($io_socket_module_name eq 'IO::Socket::IP' ||
       $io_socket_module_name eq 'IO::Socket::INET6') )
  {
    # LWP module has no support for IPv6.  Use hotpatching,
    # copying IO::Socket::IP or IO::Socket::INET6 to IO::Socket::INET.
    # 'Borrowed' from Net::INET6Glue::INET_is_INET6 :

printf("http: (lwp) hotpatching IO::Socket::INET by module %s\n",
           $io_socket_module_name) if $opt{'verbose'};
    my $io_socket_module_hash_name = $io_socket_module_name . '::';
    my $io_socket_module_path = $io_socket_module_name . '.pm';
    $io_socket_module_path =~ s{::}{/}g;
    $INC{'IO/Socket/INET.pm'} = $INC{$io_socket_module_path};
    no strict 'refs';
    no warnings 'redefine';
    for ( keys %{$io_socket_module_hash_name} ) {
      ref(my $v = $io_socket_module_hash_name->{$_}) and next;
      *{ 'IO::Socket::INET::'.$_ } =
        \&{ $io_socket_module_hash_name . $_ } if *{$v}{CODE};
    }
  }
  my $ua = LWP::UserAgent->new();
  $ua->agent("sa-update/$VERSION/$SAVersion");
  $ua->timeout(60);      # a good long timeout; 10 is too short for Coral!
  $ua->env_proxy;

# if ($opt{'force_pf'}) {
#   # No longer needed and can be harmful as we don't know which address family
#   # will be picked by the IO::Socket::* module in case of multihomed servers.
#   # The IO::Socket::IP should choose the right protocol family automatically.
#   if ($have_inet4 && $opt{'force_pf'} eq 'inet') {
#     $ua->local_address('0.0.0.0');
#   } elsif ($have_inet6 && $opt{'force_pf'} eq 'inet6') {
#     $ua->local_address('::');
#   }
# }

return $ua;
}

# Do a GET request via HTTP for a certain URL
# Use the optional time_t value to do an IMS GET
sub http_get_lwp {
  my($url, $ims, $dir) = @_;

$have_lwp  or die "http_get_lwp: module LWP not available";
  $ua = init_lwp()  if !$ua;

my $response;
  my $text;

# retry 3 times; this works better with Coral
  foreach my $retries (1 .. 3) {
    my $request = HTTP::Request->new("GET");
    $request->url($url);

if (defined $ims) {
      my $str = time2str($ims);
      $request->header('If-Modified-Since', $str);
      dbg("http: IMS GET request, $url, $str");
    }
    else {
      dbg("http: GET request, $url");
    }

$response = $ua->request($request);

printf("http: (lwp) %sGET %s, %s\n",
           defined $ims ? 'IMS ' : '',  $url,
           !$response ? '(no response)' : $response->status_line )
           if $opt{'verbose'};

if ($response->is_success) {
      return $response->content;
    }

# could be a "304 not modified" or similar.
    # TODO: should use a special return type for "not modified" here
    # instead of overloading the failure return type
    if ($ims && $response->status_line =~ /^3/) {
      return;
    }
    if ($response->status_line =~ /^[45]/) {
      # client error or server error, makes no sense retrying
      return;
    }

# include the text in the debug output; it's useful in some cases,
    # e.g. proxies that require authentication, diagnosing fascist
    # filtering false positives, etc.
    $text = $response->content;
    $text ||= "(no body)";
    $text =~ s/\s+/ /gs;

dbg ("http: GET $url request failed, retrying: " .
                    $response->status_line.": ".$text);
  }

# this should be a user-readable warning without --debug
  warn "http: GET $url request failed: " .
                    $response->status_line.": ".$text."\n";
  return;
}

# Do a GET request via HTTP for a given URL using an external program,
# or fall back to LWP if no external downloading program is available.
# Use the optional time_t value to do an IMS GET
sub http_get {
  my($url, $dir, $suggested_out_fname, $force_reload) = @_;
  my $content;

my $out_fname;
  if (defined $suggested_out_fname) {
    $out_fname = $suggested_out_fname;
  } else {
    local $1;
    $url =~ m{([^/]*)\z}s;
    my $url_fname = $1;
    $out_fname = File::Spec->catfile($dir, $url_fname);
  }
  $out_fname = untaint_var($out_fname);

# construct a short filename, relative to a current working directory $dir
  my $out_fname_short = $out_fname;
  $out_fname_short =~ s{^\Q$dir\E/*}{};

printf("fetching %s\n", $url)  if $opt{'verbose'} && $opt{'verbose'} > 1;
  dbg("http: url: %s", $url);

my $out_fname_exists = -e $out_fname;
  dbg("http: downloading to: %s, %s", $out_fname,
      !$out_fname_exists ? 'new' : $force_reload ? 'replace' : 'update');

my($ext_prog, $cmd, @args);
  if (defined $opt{'httputil'}) {
    if ($opt{'httputil'} eq 'lwp') {
      if (!$have_lwp) {
        die "http: module LWP not available, download failed";
      }
    } else {
      $ext_prog = $opt{'httputil'};
      $cmd = Mail::SpamAssassin::Util::find_executable_in_env_path($ext_prog);
      if (!defined $cmd || $cmd eq '') {
        die "http: $ext_prog utility not found, download failed";
      }
    }
  } else {
    foreach my $try_prog ('curl', 'wget', 'fetch') {
      $cmd = Mail::SpamAssassin::Util::find_executable_in_env_path($try_prog);
      if (defined $cmd && $cmd ne '') { $ext_prog = $try_prog; last }
    }
  }

if (defined $ext_prog && $ext_prog eq 'curl') {
    push(@args, qw(-s -L -O --remote-time -g --max-redirs 2
                   --connect-timeout 30 --max-time 300
                   --fail -o), $out_fname_short);
    push(@args, '-z', $out_fname_short)  if $out_fname_exists && !$force_reload;
    push(@args, '-A', "sa-update/$VERSION/$SAVersion");
  } elsif (defined $ext_prog && $ext_prog eq 'wget') {
    push(@args, qw(-q --max-redirect=2 --tries=3
                   --dns-timeout=20 --connect-timeout=30 --read-timeout=300));
    push(@args, defined $suggested_out_fname ? ('-O', $out_fname_short)
                : $force_reload ? () : ('-N') );
    push(@args, '-U', "sa-update/$VERSION/$SAVersion");
  } elsif (defined $ext_prog && $ext_prog eq 'fetch') {
    push(@args, qw(-q -n -a -w 20 -m -o), $out_fname_short);
    push(@args, '-m')  if $out_fname_exists && !$force_reload;
    push(@args, "--user-agent=sa-update/$VERSION/$SAVersion");
  } elsif ($have_lwp) {
    dbg("http: no external tool for download, fallback to using LWP") if !$opt{'httputil'};
    my $ims;
    if ($out_fname_exists && !$force_reload) {
      my @out_fname_stat = stat($out_fname);
      my $size = $out_fname_stat[7];
      $ims = $out_fname_stat[9]  if $size;  # only if nonempty
    }
    my $out_fh = IO::File->new;
    $out_fh->open($out_fname,'>',0640)
      or die "Cannot create a file $out_fname: $!";
    binmode($out_fh) or die "Can't set binmode on $out_fname: $!";
    $content = http_get_lwp($url, $ims, $dir);
    if (!defined $content) {
      dbg("http: (lwp) no content downloaded from %s", $url);
    } else {
      $out_fh->print($content) or die "Error writing to $out_fname: $!";
    }
    $out_fh->close or die "Error closing file $out_fname: $!";
    return ($out_fname, 1);
  } else {
    die "http: no downloading tool available";
  }

# only reached if invoking an external program is needed (not lwp)
  if ($opt{'force_pf'}) {
    if    ($opt{'force_pf'} eq 'inet')  { push(@args, '-4') }
    elsif ($opt{'force_pf'} eq 'inet6') { push(@args, '-6') }
  }
  push(@args, '--', untaint_var($url));
  dbg("http: %s", join(' ',$cmd,@args));

# avoid a system() call, use fork/exec to make sure we avoid invoking a shell
  my $pid;
  eval {
    # use eval, the fork() sometimes signals an error
    # instead of returning a failure status
    $pid = fork(); 1;
  } or do { $@ = "errno=$!" if $@ eq ''; chomp $@; die "http fork: $@" };
  defined $pid or die "spawning $cmd failed: $!";
  if (!$pid) {  # child
    chdir($dir) or die "Can't chdir to $dir: $!";
    $cmd = untaint_file_path($cmd);
    exec {$cmd} ($cmd,@args);
    die "failed to exec $cmd: $!";
  }

# parent
  waitpid($pid,0);
  my $child_stat = $?;
  dbg("http: process [%s], exit status: %s",
      $pid, exit_status_str($child_stat,0));

if (!$opt{'verbose'}) {
    # silent
  } elsif ($child_stat == 0) {
    printf("http: (%s) GET %s, success\n", $ext_prog, $url);
  } else {
    printf("http: (%s) GET %s, FAILED, status: %s\n",
           $ext_prog, $url, exit_status_str($child_stat,0));
  }

return ($out_fname, $child_stat == 0);
}

# Read the content of a (downloaded) file. The subroutine expects a file name
# and a boolean value. The boolean value indicates whether the file should be
# opened in "text" mode or in "binary" mode. Pass 0 for text mode, 1 for binary
# mode. Returns the content of the file as a string.
sub read_content {
  my ($file_name, $binary_mode) = @_;

my $file = IO::File->new;
  if (!$file->open($file_name, '<')) {
    dbg("read_content: Cannot open file $file_name: $!");
    return undef; ## no critic (ProhibitExplicitReturnUndef)
  }
  if ($binary_mode) {
    binmode $file;
  }

my($number_of_bytes,$buffer);
  my $content = '';
  while (($number_of_bytes = $file->read($buffer, 16384)) > 0) {
    $content .= $buffer;
  }
  if (!defined $number_of_bytes) {
    dbg("read_content: Error reading from file $file_name: $!");
    return undef; ## no critic (ProhibitExplicitReturnUndef)
  }
  $file->close;

return $content;
}

##############################################################################

# choose a random integer between 0 and the total weight of all mirrors
# loop through the mirrors from largest to smallest weight
# if random number is < largest weight, use it
# otherwise, random number -= largest, remove mirror from list, try again
# eventually, there'll just be 1 mirror left in $mirrors[0] and it'll be used
# 
sub choose_mirror {
  my($mirror_list) = @_;

# Sort the mirror list by reverse weight (largest first)
  my @mirrors = sort { $mirror_list->{$b}->{weight} <=> $mirror_list->{$a}->{weight} } keys %{$mirror_list};

return unless @mirrors;

if (keys %{$mirror_list} > 1) {
    # Figure out the total weight
    my $weight_total = 0;
    foreach (@mirrors) {
      $weight_total += $mirror_list->{$_}->{weight};
    }

# Pick a random int
    my $value = int(rand($weight_total));

# loop until we find the right mirror, or there's only 1 left
    while (@mirrors > 1) {
      if ($value < $mirror_list->{$mirrors[0]}->{weight}) {
        last;
      }
      $value -= $mirror_list->{$mirrors[0]}->{weight};
      shift @mirrors;
    }
  }

return $mirrors[0];
}

##############################################################################

sub check_mirror_af {
    my ($mirror) = @_;
    # RFC 3986:  scheme = ALPHA *( ALPHA / DIGIT / "+" / "-" / "." )
    $mirror =~ s{^([a-z][a-z0-9.+-]*)://}{}si;  # strip scheme like http://
    my $scheme = lc($1);
    # No DNS check needed for proxied connections (caveat: no_proxy is not checked)
    my $http_proxy = (defined $ENV{"http_proxy"} && $ENV{"http_proxy"} =~ /\S/) ||
                     (defined $ENV{"HTTP_PROXY"} && $ENV{"HTTP_PROXY"} =~ /\S/);
    my $https_proxy = (defined $ENV{"https_proxy"} && $ENV{"https_proxy"} =~ /\S/) ||
                      (defined $ENV{"HTTPS_PROXY"} && $ENV{"HTTPS_PROXY"} =~ /\S/);
    return 1 if $scheme eq "http" && $http_proxy;
    return 1 if $scheme eq "https" && $https_proxy;
    # No DNS check needed for IPv4 or IPv6 address literal
    return 1 if $use_inet4 && $mirror =~ m{^\d+\.\d+\.\d+\.\d+(?:[:/]|$)};
    return 1 if $use_inet6 && $mirror =~ m{^\[};
    $mirror =~ s{[:/].*}{}s;  # strip all starting from :port or /path
    return 1 if $use_inet4 && do_dns_query($mirror, "A");
    return 1 if $use_inet6 && do_dns_query($mirror, "AAAA");
    return 0;
}

##############################################################################

sub print_version {
  printf("sa-update version %s\n  running on Perl version %s\n", $VERSION, 
         join(".", map( 0+($_||0), ( $] =~ /(\d)\.(\d{3})(\d{3})?/ ))));
}

##############################################################################

sub print_usage_and_exit {
  my ( $message, $exitval ) = @_;
  $exitval ||= 64;
  
  if ($exitval == 0) {
    print_version();
    print("\n");
  }
  pod2usage(
    -verbose => 0,
    -message => $message,
    -exitval => $exitval,
  );
}

##############################################################################

sub usage {
  my ( $verbose, $message ) = @_;
  print "sa-update version $VERSION\n";
  pod2usage( -verbose => $verbose, -message => $message, -exitval => 64 );
}

##############################################################################

sub interpolate_gpghomedir {
  my $gpghome = '';
  if ($opt{'gpghomedir'}) {
    $gpghome = $opt{'gpghomedir'};
    if (am_running_on_windows()) {
      # windows is single-quote-phobic; bug 4958 cmt 7
      $gpghome =~ s/\"/\\\"/gs;
      $gpghome = "--homedir=\"$gpghome\"";
    } else {
      $gpghome =~ s/\'/\\\'/gs;
      $gpghome = "--homedir='$gpghome'";
    }
  }
  return $gpghome;
}

##############################################################################

sub check_gpghomedir {
  unless (-d $opt{gpghomedir}) {
    dbg("gpg: creating gpg home dir ".$opt{gpghomedir});
    # use 0700 to avoid "unsafe permissions" warning
    mkpath([$opt{gpghomedir}], 0, 0700)
      or die "cannot mkpath $opt{gpghomedir}: $!";
  } 
}

##############################################################################
sub import_gpg_key {
  my $keyfile = shift;

my $gpghome = interpolate_gpghomedir();
  check_gpghomedir();

my $CMD = "$GPGPath $gpghome --batch ".
      "--no-tty --status-fd=1 -q --logger-fd=1 --import";

unless (open(CMD, "$CMD $keyfile|")) {
    die "fatal: couldn't execute $GPGPath: $!\n";
  }

# Determine the fate of the signature
  while(my $GNUPG = <CMD>) {
    chop $GNUPG;
    dbg ("gpg: $GNUPG");

if ($GNUPG =~ /^gpg: /) {
      warn $GNUPG."\n";        # report bad news
    }

if ($GNUPG =~ /^IMPORTED /) {
      dbg("gpg: gpg key imported successfully");
    }
  }

my $errno = 0;  close CMD or $errno = $!;
  proc_status_ok($?,$errno)
    or warn("gpg: process '$CMD' finished: ".exit_status_str($?,$errno)."\n");

return ($? >> 8);
}

##############################################################################

sub import_default_keyring {
  my $defkey = File::Spec->catfile ($DEF_RULES_DIR, "sa-update-pubkey.txt");
  unless (-f $defkey) {
    dbg("gpg: import of default keyring failed, couldn't find sa-update-pubkey.txt");
    return;
  }

dbg("gpg: importing default keyring to ".$opt{gpghomedir});
  check_gpghomedir();
  import_gpg_key($defkey);
}

##############################################################################

sub is_valid_gpg_key_id {
  # either a keyid (8 bytes) or a fingerprint (40 bytes)
  return ($_[0] =~ /^[a-fA-F0-9]+$/ && (length $_[0] == 8 || length $_[0] == 40));
}

##############################################################################

sub clean_update_dir {
  my($dir, $preserve_files_ref) = @_;

dbg("generic: cleaning directory %s", $dir);
  unless (opendir(DIR, $dir)) {
    warn "error: cannot opendir $dir: $!\n";
    dbg("generic: attempt to opendir ($dir) failed");
    return;
  }
  while(my $file = readdir(DIR)) {
    next if $file eq '.' || $file eq '..';

my $path = File::Spec->catfile($dir, $file);
    if ($preserve_files_ref && $preserve_files_ref->{$path}) {
      dbg("generic: preserving $file");
      next;
    }
    untaint_var(\$path);
    next unless -f $path;

dbg("generic: unlinking $file");
    if (!unlink $path) {
      warn "error: cannot remove file $path: $!\n";
      closedir(DIR) or die "cannot close directory $dir: $!";
      return;
    }
  }
  closedir(DIR) or die "cannot close directory $dir: $!";
  return 1;
}

sub delete_files {
  my(@filenames) = @_;
  foreach my $path (@filenames) {
    dbg("generic: unlinking $path");
    unlink $path  or warn "error: cannot unlink file $path: $!\n";
  }
  return 1;
}

##############################################################################

sub lint_check_dir {
  my $dir = shift;

# due to the Logger module's globalness (all M::SA objects share the same
  # Logger setup), we can't change the debug level here to only include
  # "config" or otherwise be more terse. :(
  my $spamtest = new Mail::SpamAssassin( {
    rules_filename       => $dir,
    site_rules_filename  => $LOCAL_RULES_DIR,
    ignore_site_cf_files => 1,
    userprefs_filename   => File::Spec->catfile($dir, "doesnotexist"),

local_tests_only     => 1,
    dont_copy_prefs      => 1,

PREFIX               => $PREFIX,
    DEF_RULES_DIR        => $DEF_RULES_DIR,
    LOCAL_RULES_DIR      => $LOCAL_RULES_DIR,
    LOCAL_STATE_DIR      => $LOCAL_STATE_DIR,
  });

# need to kluge disabling bayes since it may try to expire the DB, and
  # without the proper config it's not going to be good.
  $spamtest->{conf}->{use_bayes} = 0;

my $res = $spamtest->lint_rules();
  $spamtest->finish();

return $res == 0;
}

##############################################################################

=head1 NAME

sa-update - automate SpamAssassin rule updates

=head1 SYNOPSIS

B<sa-update> [options]

Options:

--channel channel       Retrieve updates from this channel
                          Use multiple times for multiple channels
  --channelfile file      Retrieve updates from the channels in the file
  --checkonly             Check for update availability, do not install
  --install filename      Install updates directly from this file. Signature
                          verification will use "file.asc", "file.sha256",
                          and "file.sha512".
  --allowplugins          Allow updates to load plugin code (DANGEROUS)
  --gpgkey key            Trust the key id to sign releases
                          Use multiple times for multiple keys
  --gpgkeyfile file       Trust the key ids in the file to sign releases
  --gpghomedir path       Store the GPG keyring in this directory
  --gpg and --nogpg       Use (or do not use) GPG to verify updates
                          (--gpg is assumed by use of the above
                          --gpgkey and --gpgkeyfile options)
  --import file           Import GPG key(s) from file into sa-update's
                          keyring. Use multiple times for multiple files
  --updatedir path        Directory to place updates, defaults to the
                          SpamAssassin site rules directory
                          (default: /var/lib/spamassassin/3.004006)
  --refreshmirrors        Force the MIRRORED.BY file to be updated
  --httputil util         Force used download tool. By default first found
                          from these is used: curl, wget, fetch, lwp
  -D, --debug [area=n,...]  Print debugging messages
  -v, --verbose           Be verbose, like print updated channel names;
                          For more verbosity specify multiple times
  -V, --version           Print version
  -h, --help              Print usage message
  -4                      Force using the inet protocol (IPv4), not inet6
  -6                      Force using the inet6 protocol (IPv6), not inet

=head1 DESCRIPTION

sa-update automates the process of downloading and installing new rules and
configuration, based on channels.  The default channel is
I<updates.spamassassin.org>, which has updated rules since the previous
release.

Update archives are verified using SHA256 and SHA512 hashes and GPG signatures,
by default.

Note that C<sa-update> will not restart C<spamd> or otherwise cause
a scanner to reload the now-updated ruleset automatically.  Instead,
C<sa-update> is typically used in something like the following manner:

sa-update && /etc/init.d/spamassassin reload

This works because C<sa-update> only returns an exit status of C<0> if
it has successfully downloaded and installed an updated ruleset.

The program sa-update uses the underlying operating system umask for the
updated rule files it installs.  You may wish to run sa-update from a script
that sets the umask prior to calling sa-update.  For example:

#!/bin/sh
	umask 022
	sa-update

=head1 OPTIONS

=over 4

=item B<--channel>

sa-update can update multiple channels at the same time.  By default, it will
only access "updates.spamassassin.org", but more channels can be specified via
this option.  If there are multiple additional channels, use the option
multiple times, once per channel.  i.e.:

sa-update --channel foo.example.com --channel bar.example.com

=item B<--channelfile>

Similar to the B<--channel> option, except specify the additional channels in a
file instead of on the commandline.  This is useful when there are a
lot of additional channels.

=item B<--checkonly>

Only check if an update is available, don't actually download and install it.
The exit code will be C<0> or C<1> as described below.

=item B<--install>

Install updates "offline", from the named tar.gz file, instead of performing
DNS lookups and HTTP invocations.

Files named B<file>.sha256, B<file>.sha512, and B<file>.asc will be used for
the SHA256 and SHA512 hashes and the GPG signature, respectively.  The filename
provided must contain a version number of at least 3 digits, which will be used
as the channel's update version number.

Multiple B<--channel> switches cannot be used with B<--install>.  To install
multiple channels from tarballs, run C<sa-update> multiple times with different
B<--channel> and B<--install> switches, e.g.:

sa-update --channel foo.example.com --install foo-34958.tgz
        sa-update --channel bar.example.com --install bar-938455.tgz

=item B<--allowplugins>

Allow downloaded updates to activate plugins.  The default is not to
activate plugins; any C<loadplugin> or C<tryplugin> lines will be commented
in the downloaded update rules files.

You should never enable this for 3rd party update channels, since plugins
can execute unrestricted code on your system, even possibly as root! This
includes spamassassin official updates, which have no need to include
running code.

Use --reallyallowplugins option to bypass warnings and make it work.

=item B<--gpg>, B<--nogpg>

sa-update by default will verify update archives by use of SHA256 and SHA512
checksums and GPG signature.  SHA* hashes can verify whether or not the
downloaded archive has been corrupted, but it does not offer any form of
security regarding whether or not the downloaded archive is legitimate
(aka: non-modifed by evildoers).  GPG verification of the archive is used to
solve that problem.

If you wish to skip GPG verification, you can use the B<--nogpg> option
to disable its use.  Use of the following gpgkey-related options will
override B<--nogpg> and keep GPG verification enabled.

Note: Currently, only GPG itself is supported (ie: not PGP).  v1.2 has been
tested, although later versions ought to work as well.

=item B<--gpgkey>

sa-update has the concept of "release trusted" GPG keys.  When an archive is
downloaded and the signature verified, sa-update requires that the signature
be from one of these "release trusted" keys or else verification fails.  This
prevents third parties from manipulating the files on a mirror, for instance,
and signing with their own key.

By default, sa-update trusts key ids C<24F434CE> and C<5244EC45>, which are
the standard SpamAssassin release key and its sub-key.  Use this option to
trust additional keys.  See the B<--import> option for how to add keys to
sa-update's keyring.  For sa-update to use a key it must be in sa-update's
keyring and trusted.

For multiple keys, use the option multiple times.  i.e.:

sa-update --gpgkey E580B363 --gpgkey 298BC7D0

Note: use of this option automatically enables GPG verification.

=item B<--gpgkeyfile>

Similar to the B<--gpgkey> option, except specify the additional keys in a file
instead of on the commandline.  This is extremely useful when there are a lot
of additional keys that you wish to trust.

=item B<--gpghomedir>

Specify a directory path to use as a storage area for the C<sa-update> GPG
keyring.  By default, this is

/etc/mail/spamassassin/sa-update-keys

=item B<--import>

Use to import GPG key(s) from a file into the sa-update keyring which is
located in the directory specified by B<--gpghomedir>.  Before using channels
from third party sources, you should use this option to import the GPG key(s)
used by those channels.  You must still use the B<--gpgkey> or B<--gpgkeyfile>
options above to get sa-update to trust imported keys.

To import multiple keys, use the option multiple times.  i.e.:

sa-update --import channel1-GPG.KEY --import channel2-GPG.KEY

Note: use of this option automatically enables GPG verification.

=item B<--refreshmirrors>

Force the list of sa-update mirrors for each channel, stored in the MIRRORED.BY
file, to be updated.  By default, the MIRRORED.BY file will be cached for up to
7 days after each time it is downloaded.

=item B<--updatedir>

By default, C<sa-update> will use the system-wide rules update directory:

/var/lib/spamassassin/3.004006

If the updates should be stored in another location, specify it here.

Note that use of this option is not recommended; if you're just using sa-update
to download updated rulesets for a scanner, and sa-update is placing updates in
the wrong directory, you probably need to rebuild SpamAssassin with different
C<Makefile.PL> arguments, instead of overriding sa-update's runtime behaviour.

=item B<-D> [I<area,...>], B<--debug> [I<area,...>]

Produce debugging output.  If no areas are listed, all debugging information is
printed.  Diagnostic output can also be enabled for each area individually;
I<area> is the area of the code to instrument. For example, to produce
diagnostic output on channel, gpg, and http, use:

sa-update -D channel,gpg,http

For more information about which areas (also known as channels) are
available, please see the documentation at
L<http://wiki.apache.org/spamassassin/DebugChannels>.

=item B<-h>, B<--help>

Print help message and exit.

=item B<-V>, B<--version>

Print sa-update version and exit.

=back

=head1 EXIT CODES

In absence of a --checkonly option, an exit code of C<0> means:
an update was available, and was downloaded and installed successfully.
If --checkonly was specified, an exit code of C<0> means: an update was
available.

An exit code of C<1> means no fresh updates were available.

An exit code of C<2> means that at least one update is available but that a
lint check of the site pre files failed.  The site pre files must pass a lint
check before any updates are attempted.

An exit code of C<3> means that at least one update succeeded while 
other channels failed.  If using sa-compile, you should proceed with it.

An exit code of C<4> or higher, indicates that errors occurred while
attempting to download and extract updates, and no channels were updated.

=head1 SEE ALSO

Mail::SpamAssassin(3)
Mail::SpamAssassin::Conf(3)
spamassassin(1)
spamd(1)
<http://wiki.apache.org/spamassassin/RuleUpdates>

=head1 PREREQUISITES

C<Mail::SpamAssassin>

=head1 BUGS

See <http://issues.apache.org/SpamAssassin/>

=head1 AUTHORS

The Apache SpamAssassin(tm) Project <https://spamassassin.apache.org/>

=head1 LICENSE AND COPYRIGHT

SpamAssassin is distributed under the Apache License, Version 2.0, as
described in the file C<LICENSE> included with the distribution.

=cut

${this.title}

Code Editor : sa-update