#!/bin/sh
-# postinst script for spamassassin-cn
+# postinst script for kernel-2.6-cn
#
# see: dh_installdeb(1)
# import CN-functions
. /usr/share/carnet-tools/functions.sh
+# import GRUB helper functions
+. /usr/share/kernel-2.6-cn/grub-functions.sh
+
################################################################################
# starting up backup
################################################################################
+# remove obsolete symlinks and kernels
+rm -f /boot/vmlinuz /boot/vmlinuz.old /boot/vmlinuz.old2 \
+ /boot/vmlinuz.plain /vmlinuz /vmlinuz.old /boot/vmlinuz.plain \
+ /boot/vmlinuz.generic /boot/vmlinuz-generic /boot/vmlinuz-old
+echo "CN: Removed old symlinks in / and /boot."
+
+################################################################################
+
# intro msg
echo -n "CN: Configuring system (this will take a while):"
cp -a /usr/lib/grub/i386-pc/* /boot/grub
fi
fi
+echo -n " grub1"
# create/update grub configuration
if [ -e /boot/grub/menu.lst ]; then
else
/usr/sbin/update-grub >/dev/null 2>&1 || true
fi
+echo -n " grub2"
-# install grub loader
+# workaround grsec
+if [ -x /sbin/chpax ]; then
+ if [ -x /usr/sbin/grub ]; then
+ chpax -spmrx /usr/sbin/grub || true
+ fi
+ if [ -x /usr/sbin/grub-probe ]; then
+ chpax -spmrx /usr/sbin/grub-probe || true
+ fi
+fi
+echo -n " grub3"
+
+# workaround execshield
SHIELD=$(sysctl -e -n kernel.exec-shield)
if [ ! -z "$SHIELD" ]; then
sysctl -w -e kernel.exec-shield=0 >/dev/null 2>&1
fi
+
+# install grub loader
if ! grub-install --no-floppy '(hd0)' >/dev/null 2>&1; then
echo "."
echo "CN: FATAL ERROR running grub-install!"
echo "CN: Do not reboot your server and report this to OTRS immediately!"
exit 1
fi
+echo -n " grub4"
+
+# fix possible wrong params in menu.lst
+cp_check_and_sed '^# groot=' \
+ "s;^# groot=.*;# groot=$grub_root_device;g" \
+ /boot/grub/menu.lst || true
+cp_check_and_sed '^# kopt=' \
+ "s;^# kopt=\(.*\)root=[^[:space:]]*\(.*\);# kopt=\1root=$root_device\2;g" \
+ /boot/grub/menu.lst || true
+/usr/sbin/update-grub >/dev/null 2>&1 || true
+echo -n " grub5"
+
+# restore execshield state
if [ ! -z "$SHIELD" ]; then
sysctl -w -e "kernel.exec-shield=$SHIELD" >/dev/null 2>&1
fi
################################################################################
-# remove obsolete links
-rm -f /boot/vmlinuz /boot/vmlinuz.old /boot/vmlinuz.old2 \
- /boot/vmlinuz.plain /vmlinuz /vmlinuz.old /boot/vmlinuz.plain
-echo "CN: Removed old symlinks in / and /boot."
-
-################################################################################
-
# fix old kernel-2.4-cn postrm
if [ -e /var/lib/dpkg/info/kernel-2.4-cn.postrm ]; then
echo "CN: Fixed old kernel-2.4-cn postrm."