From b54b10300958bc3c97afec3b58cebdae65f2ab01 Mon Sep 17 00:00:00 2001
From: "Lance R. Vick" <lance@lrvick.net>
Date: Fri, 24 Jul 2020 03:08:28 -0700
Subject: [PATCH] add audit target for collecting legal/cve details

---
 scripts/audit | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100755 scripts/audit

diff --git a/scripts/audit b/scripts/audit
new file mode 100755
index 0000000..079624d
--- /dev/null
+++ b/scripts/audit
@@ -0,0 +1,26 @@
+#!/bin/bash
+[ -f /.dockerenv ] || { echo "please run in supplied container"; exit 1; }
+set -e; source environment
+
+build_dir="${BUILD_DIR?}"
+audit_dir="${BUILD_DIR?}/audit"
+buildroot_dir="${build_dir}/buildroot"
+heads_dir="${build_dir}/heads"
+
+mkdir -p ${audit_dir}
+
+echo version "${VERSION}"
+openssl sha256 -r ${buildroot_dir}/dl/*/*.tar.* > ${audit_dir}/os_src_hashes.txt
+openssl sha256 -r ${heads_dir}/packages/* > ${audit_dir}/fw_src_hashes.txt
+
+cat ${audit_dir}/os_src_hashes.txt \
+	${audit_dir}/fw_src_hashes.txt \
+	| sed 's/ .*\// /g' \
+	| awk '{ t = $1; $1 = $2; $2 = t; print;}' \
+	| sort \
+	| uniq \
+	> ${audit_dir}/hashes.txt
+
+(cd ${buildroot_dir} && make cpe-info legal-info)
+cp ${buildroot_dir}/output/cpe-manifest.csv ${audit_dir}/cpe-manifest.csv
+cp -R ${buildroot_dir}/output/legal-info ${audit_dir}/legal-info