This file is indexed.

/usr/sbin/pkcs11_startup is in opencryptoki 2.3.1+dfsg-3ubuntu4.

This file is owned by root:root, with mode 0o755.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
#!/bin/bash

#
#
# $Header: /cvsroot/opencryptoki/opencryptoki/usr/sbin/pkcs11_startup/pkcs11_startup.in,v 1.4 2007/11/08 22:06:17 kyoder Exp $
#


#
#             Common Public License Version 0.5

#             THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF
#             THIS COMMON PUBLIC LICENSE ("AGREEMENT"). ANY USE,
#             REPRODUCTION OR DISTRIBUTION OF THE PROGRAM CONSTITUTES
#             RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
#
#             1. DEFINITIONS
#
#             "Contribution" means: 
#                   a) in the case of the initial Contributor, the
#                   initial code and documentation distributed under
#                   this Agreement, and 
#
#                   b) in the case of each subsequent Contributor:
#                   i) changes to the Program, and
#                   ii) additions to the Program;
#
#                   where such changes and/or additions to the Program
#                   originate from and are distributed by that
#                   particular Contributor. A Contribution 'originates'
#                   from a Contributor if it was added to the Program
#                   by such Contributor itself or anyone acting on such
#                   Contributor's behalf. Contributions do not include
#                   additions to the Program which: (i) are separate
#                   modules of software distributed in conjunction with
#                   the Program under their own license agreement, and
#                   (ii) are not derivative works of the Program.
#
#
#             "Contributor" means any person or entity that distributes
#             the Program.
#
#             "Licensed Patents " mean patent claims licensable by a
#             Contributor which are necessarily infringed by the use or
#             sale of its Contribution alone or when combined with the
#             Program. 
#
#             "Program" means the Contributions distributed in
#             accordance with this Agreement.
#
#             "Recipient" means anyone who receives the Program under
#             this Agreement, including all Contributors.
#
#             2. GRANT OF RIGHTS
#
#                   a) Subject to the terms of this Agreement, each
#                   Contributor hereby grants Recipient a
#                   non-exclusive, worldwide, royalty-free copyright
#                   license to reproduce, prepare derivative works of,
#                   publicly display, publicly perform, distribute and
#                   sublicense the Contribution of such Contributor, if
#                   any, and such derivative works, in source code and
#                   object code form.
#
#                   b) Subject to the terms of this Agreement, each
#                   Contributor hereby grants Recipient a
#                   non-exclusive, worldwide, royalty-free patent
#                   license under Licensed Patents to make, use, sell,
#                   offer to sell, import and otherwise transfer the
#                   Contribution of such Contributor, if any, in source
#                   code and object code form. This patent license
#                   shall apply to the combination of the Contribution
#                   and the Program if, at the time the Contribution is
#                   added by the Contributor, such addition of the
#                   Contribution causes such combination to be covered
#                   by the Licensed Patents. The patent license shall
#                   not apply to any other combinations which include
#                   the Contribution. No hardware per se is licensed
#                   hereunder.
#
#                   c) Recipient understands that although each
##                   Contributor grants the licenses to its
#                   Contributions set forth herein, no assurances are
#                   provided by any Contributor that the Program does
#                   not infringe the patent or other intellectual
#                   property rights of any other entity. Each
#                   Contributor disclaims any liability to Recipient
#                   for claims brought by any other entity based on
#                   infringement of intellectual property rights or
#                   otherwise. As a condition to exercising the rights
#                   and licenses granted hereunder, each Recipient
#                   hereby assumes sole responsibility to secure any
#                   other intellectual property rights needed, if any.
#
#                   For example, if a third party patent license is
#                   required to allow Recipient to distribute the
#                   Program, it is Recipient's responsibility to
#                   acquire that license before distributing the
#                   Program.
#
#                   d) Each Contributor represents that to its
#                   knowledge it has sufficient copyright rights in its
#                   Contribution, if any, to grant the copyright
#                   license set forth in this Agreement.
#
#             3. REQUIREMENTS
#
#             A Contributor may choose to distribute the Program in
#             object code form under its own license agreement, provided
#             that:
#                   a) it complies with the terms and conditions of
#                   this Agreement; and
#
#                   b) its license agreement:
#                   i) effectively disclaims on behalf of all
#                   Contributors all warranties and conditions, express
#                   and implied, including warranties or conditions of
#                   title and non-infringement, and implied warranties
#                   or conditions of merchantability and fitness for a
#                   particular purpose;
#
#                   ii) effectively excludes on behalf of all
#                   Contributors all liability for damages, including
#                   direct, indirect, special, incidental and
#                   consequential damages, such as lost profits;
#
#                   iii) states that any provisions which differ from
#                   this Agreement are offered by that Contributor
#                   alone and not by any other party; and
#
#                   iv) states that source code for the Program is
#                   available from such Contributor, and informs
#                   licensees how to obtain it in a reasonable manner
#                   on or through a medium customarily used for
#                   software exchange.
#
#             When the Program is made available in source code form:
#                   a) it must be made available under this Agreement;
#                   and
#                   b) a copy of this Agreement must be included with
#                   each copy of the Program. 
#
#             Contributors may not remove or alter any copyright notices
#             contained within the Program.
#
#             Each Contributor must identify itself as the originator of
#             its Contribution, if any, in a manner that reasonably
#             allows subsequent Recipients to identify the originator of
#             the Contribution. 
#
#
#             4. COMMERCIAL DISTRIBUTION
#
#             Commercial distributors of software may accept certain
#             responsibilities with respect to end users, business
#             partners and the like. While this license is intended to
#             facilitate the commercial use of the Program, the
#             Contributor who includes the Program in a commercial
#             product offering should do so in a manner which does not
#             create potential liability for other Contributors.
#             Therefore, if a Contributor includes the Program in a
#             commercial product offering, such Contributor ("Commercial
#             Contributor") hereby agrees to defend and indemnify every
#             other Contributor ("Indemnified Contributor") against any
#             losses, damages and costs (collectively "Losses") arising
#             from claims, lawsuits and other legal actions brought by a
#             third party against the Indemnified Contributor to the
#             extent caused by the acts or omissions of such Commercial
#             Contributor in connection with its distribution of the
#             Program in a commercial product offering. The obligations
#             in this section do not apply to any claims or Losses
#             relating to any actual or alleged intellectual property
#             infringement. In order to qualify, an Indemnified
#             Contributor must: a) promptly notify the Commercial
#             Contributor in writing of such claim, and b) allow the
#             Commercial Contributor to control, and cooperate with the
#             Commercial Contributor in, the defense and any related
#             settlement negotiations. The Indemnified Contributor may
#             participate in any such claim at its own expense.
#
#
#             For example, a Contributor might include the Program in a
#             commercial product offering, Product X. That Contributor
#             is then a Commercial Contributor. If that Commercial
#             Contributor then makes performance claims, or offers
#             warranties related to Product X, those performance claims
#             and warranties are such Commercial Contributor's
#             responsibility alone. Under this section, the Commercial
#             Contributor would have to defend claims against the other
#             Contributors related to those performance claims and
#             warranties, and if a court requires any other Contributor
#             to pay any damages as a result, the Commercial Contributor
#             must pay those damages.
#
#
#             5. NO WARRANTY
#
#             EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE
#             PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT
#             WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR
#             IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR
#             CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR
#             FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely
#             responsible for determining the appropriateness of using
#             and distributing the Program and assumes all risks
#             associated with its exercise of rights under this
#             Agreement, including but not limited to the risks and
#             costs of program errors, compliance with applicable laws,
#             damage to or loss of data, programs or equipment, and
#             unavailability or interruption of operations. 
#
#             6. DISCLAIMER OF LIABILITY
#             EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER
#             RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY
#             FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
#             OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION
#             LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF
#             LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
#             (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
#             OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE
#             OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE
#             POSSIBILITY OF SUCH DAMAGES.
#
#             7. GENERAL
#
#             If any provision of this Agreement is invalid or
#             unenforceable under applicable law, it shall not affect
#             the validity or enforceability of the remainder of the
#             terms of this Agreement, and without further action by the
#             parties hereto, such provision shall be reformed to the
#             minimum extent necessary to make such provision valid and
#             enforceable.
#
#
#             If Recipient institutes patent litigation against a
#             Contributor with respect to a patent applicable to
#             software (including a cross-claim or counterclaim in a
#             lawsuit), then any patent licenses granted by that
#             Contributor to such Recipient under this Agreement shall
#             terminate as of the date such litigation is filed. In
#             addition, If Recipient institutes patent litigation
#             against any entity (including a cross-claim or
#             counterclaim in a lawsuit) alleging that the Program
#             itself (excluding combinations of the Program with other
#             software or hardware) infringes such Recipient's
#             patent(s), then such Recipient's rights granted under
#             Section 2(b) shall terminate as of the date such
#             litigation is filed.
#
#             All Recipient's rights under this Agreement shall
#             terminate if it fails to comply with any of the material
#             terms or conditions of this Agreement and does not cure
#             such failure in a reasonable period of time after becoming
#             aware of such noncompliance. If all Recipient's rights
#             under this Agreement terminate, Recipient agrees to cease
#             use and distribution of the Program as soon as reasonably
#             practicable. However, Recipient's obligations under this
#             Agreement and any licenses granted by Recipient relating
#             to the Program shall continue and survive. 
#
#             Everyone is permitted to copy and distribute copies of
#             this Agreement, but in order to avoid inconsistency the
#             Agreement is copyrighted and may only be modified in the
#             following manner. The Agreement Steward reserves the right
#             to publish new versions (including revisions) of this
#             Agreement from time to time. No one other than the
#             Agreement Steward has the right to modify this Agreement.
#
#             IBM is the initial Agreement Steward. IBM may assign the
#             responsibility to serve as the Agreement Steward to a
#             suitable separate entity. Each new version of the
#             Agreement will be given a distinguishing version number.
#             The Program (including Contributions) may always be
#             distributed subject to the version of the Agreement under
#             which it was received. In addition, after a new version of
#             the Agreement is published, Contributor may elect to
#             distribute the Program (including its Contributions) under
#             the new version. Except as expressly stated in Sections
#             2(a) and 2(b) above, Recipient receives no rights or
#             licenses to the intellectual property of any Contributor
#             under this Agreement, whether expressly, by implication,
#             estoppel or otherwise. All rights in the Program not
#             expressly granted under this Agreement are reserved.
#
#
#             This Agreement is governed by the laws of the State of New
#             York and the intellectual property laws of the United
#             States of America. No party to this Agreement will bring a
#             legal action under this Agreement more than one year after
#             the cause of action arose. Each party waives its rights to
#             a jury trial in any resulting litigation. 
#
#
#
#*/
#
#/* (C) COPYRIGHT International Business Machines Corp. 2001          */



# this is the Linux and NON-ODM startup script
# Get the operating System....  Everything else falls into that
# Get a list of crypto adapters and set error code to 0

CARDS=`ls /dev/crypt* 2>/dev/null | sed s?\/dev\/??g 2>/dev/null`
ERRORS=0
STATCOMMAND=/usr/lib/pkcs11/methods/4758_status
rm -f /var/lib/opencryptoki/pk_config_data >/dev/null 2>&1  # always whack the entire config file and build
		        # it from scratch


# Create the pkcs11 group if it does not exist...
#cat /etc/group|grep pkcs11 >/dev/null 2>&1
#rc=$?
#if [ $rc = 1 ]
#then
#   if [ -x /usr/sbin/groupadd ]
#   then
#	   /usr/sbin/groupadd pkcs11 >/dev/null 2>&1
#
#   else
#	   echo "Couldn't execute /usr/sbin/groupadd. Please add the group 'pkcs11' manually."
#   fi
#fi


#if [ -x /usr/sbin/usermod -a -x /usr/bin/id ]
#then
	# add the pkcs group
	# replace spaces by commas
#	/usr/sbin/usermod -G $( /usr/bin/id --groups --name root | /bin/sed -e 'y/ /,/'),pkcs11  root
#else
#	echo "Couldn't execute /usr/sbin/usermod. Please add root to the group 'pkcs11' manually."
#fi


# For each card run the status command and if successful
# create the odm stanza for the file

if [ -x $STATCOMMAND ]
then
for i in $CARDS
do
    $STATCOMMAND -c $i
    RC=$?
    if [ $RC = 101 ]
    then
       # need to make this the minor number of the device only
        x=`ls -l /dev/$i | awk '{ print $6 }'`
	 /usr/sbin/pkcs_slot $x deep
    elif [ $RC = 102 ]
    then
	# SAB XXX Need to get the groups created elsewhere
	# actually we should build the correlator list here
	# and pass the list in all at once
        x=`ls -l /dev/$i | awk '{ print $6 }'`
	if [ -z $CORRLIST ]
	then
	    CORRLIST="${x}"
	else
	    CORRLIST="${CORRLIST},${x}"
	fi
    fi
done
fi

# Add the TPM device automatically if it exists

if [ -f /usr/lib/opencryptoki/stdll/libpkcs11_tpm.so ]
then
    /usr/sbin/pkcs_slot 0  tpm
fi


# Addition for AEP Devices

if [ -f /usr/lib/opencryptoki/stdll/PKCS11_AEP.so ]
then
    /bin/cat /proc/devices | grep paep >/dev/null 2>&1
    rc=$?
    if [ $rc = 0 ]
    then
	    /usr/sbin/pkcs_slot 0  aep
    fi
fi



# Add the ICA device if it exists
# Starting from version 1.3, libica supports software
# fallback when no specialized hardware is found, so
# we default for including the ica token when it's
# stdll is present (s390x by default) - KlausK Jul'09
if [ -f /usr/lib/opencryptoki/stdll/libpkcs11_ica.so ]
then
    /usr/sbin/pkcs_slot 0  ica
fi



#add the broadcom device

if [ -f /usr/lib/opencryptoki/stdll/PKCS11_BC.so ]
then
    /bin/cat /proc/devices | grep cryptonet >/dev/null 2>&1
    rc=$?
    if [ $rc = 0 ]
    then
	    /usr/sbin/pkcs_slot 0  bcom
    fi
fi

#add the Corrent device

if [ -f /usr/lib/opencryptoki/stdll/PKCS11_CR.so ]
then
    /bin/cat /proc/misc | grep cr702x >/dev/null 2>&1
    rc=$?
    if [ $rc = 0 ]
    then
	    /usr/sbin/pkcs_slot 0  cr
    fi
fi

# add the CCA token
# CCA stdll is always built by default in supported archs, so check for both
# the CCA stdll *and* for a library needed by the CCA token - KlausK Jul'09
# The libraries required by CCA token are provided by the 'xcryptolinzGA'
# RPM package, available from the IBM web site.
if [ -f /usr/lib/opencryptoki/stdll/libpkcs11_cca.so ] && [ -f /usr/lib/libcsulmkapi.so.1 ]
then
    /usr/sbin/pkcs_slot 0 cca
fi

# Add the SW token last, so that "dumb" apps that always open
# slot 0 will get a HW token if one exists
if [ -f /usr/lib/opencryptoki/stdll/libpkcs11_sw.so ]
then
    /usr/sbin/pkcs_slot 0  soft
fi

if [ $ERRORS -ne 0 ]
then
  exit -1
fi

exit 0