volatility: fix PLIST, depend on py-sqlite3

4 files changed, 231 insertions, 26 deletions

diff --git a/security/volatility/Makefile b/security/volatility/Makefile
index 56833df2c19..a7f029e6867 100644
--- a/security/volatility/Makefile
+++ b/security/volatility/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.14 2021/03/12 11:36:07 nia Exp $
+# $NetBSD: Makefile,v 1.15 2021/03/29 07:58:53 adam Exp $
 
 DISTNAME=	volatility-2.6.1
 CATEGORIES=	security
@@ -9,6 +9,7 @@ HOMEPAGE=	https://www.volatilityfoundation.org/
 COMMENT=	Advanced memory forensics framework
 LICENSE=	gnu-gpl-v2
 
+DEPENDS+=	${PYPKGPREFIX}-sqlite3-[0-9]*:../../databases/py-sqlite3
 # Recommended packages
 # from https://github.com/volatilityfoundation/volatility/wiki/Installation
 DEPENDS+=	${PYPKGPREFIX}-Pillow-[0-9]*:../../graphics/py-Pillow6
@@ -20,7 +21,7 @@ DEPENDS+=	${PYPKGPREFIX}-openpyxl-[0-9]*:../../textproc/py-openpyxl
 #DEPENDS+=	${PYPKGPREFIX}-ujson-[0-9]*:../../textproc/py-ujson
 DEPENDS+=	${PYPKGPREFIX}-yara-[0-9]*:../../security/py-yara
 
-REPLACE_PYTHON= tools/vtype_diff.py
+REPLACE_PYTHON=	tools/vtype_diff.py
 
 PYTHON_VERSIONS_ACCEPTED=	27
 
diff --git a/security/volatility/PLIST b/security/volatility/PLIST
index 115bd3125ff..7bbadfa91e2 100644
--- a/security/volatility/PLIST
+++ b/security/volatility/PLIST
@@ -1,17 +1,9 @@
-@comment $NetBSD: PLIST,v 1.1 2015/06/03 22:21:41 pettai Exp $
+@comment $NetBSD: PLIST,v 1.2 2021/03/29 07:58:53 adam Exp $
 bin/vol.py
-contrib/plugins/aspaces/__init__.py
-contrib/plugins/aspaces/ewf.py
-contrib/plugins/disablewarnings.py
-contrib/plugins/enumfunc.py
-contrib/plugins/example.py
-contrib/plugins/pagecheck.py
-contrib/plugins/psdispscan.py
-contrib/plugins/scanprof.py
-${PYSITELIB}/${PKGNAME}-py2.7.egg-info/PKG-INFO
-${PYSITELIB}/${PKGNAME}-py2.7.egg-info/SOURCES.txt
-${PYSITELIB}/${PKGNAME}-py2.7.egg-info/dependency_links.txt
-${PYSITELIB}/${PKGNAME}-py2.7.egg-info/top_level.txt
+${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
+${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
+${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
+${PYSITELIB}/${EGG_INFODIR}/top_level.txt
 ${PYSITELIB}/volatility/__init__.py
 ${PYSITELIB}/volatility/__init__.pyc
 ${PYSITELIB}/volatility/__init__.pyo
@@ -123,6 +115,9 @@ ${PYSITELIB}/volatility/plugins/crashinfo.pyo
 ${PYSITELIB}/volatility/plugins/dlldump.py
 ${PYSITELIB}/volatility/plugins/dlldump.pyc
 ${PYSITELIB}/volatility/plugins/dlldump.pyo
+${PYSITELIB}/volatility/plugins/drivermodule.py
+${PYSITELIB}/volatility/plugins/drivermodule.pyc
+${PYSITELIB}/volatility/plugins/drivermodule.pyo
 ${PYSITELIB}/volatility/plugins/dumpcerts.py
 ${PYSITELIB}/volatility/plugins/dumpcerts.pyc
 ${PYSITELIB}/volatility/plugins/dumpcerts.pyo
@@ -162,6 +157,9 @@ ${PYSITELIB}/volatility/plugins/gui/constants.pyo
 ${PYSITELIB}/volatility/plugins/gui/desktops.py
 ${PYSITELIB}/volatility/plugins/gui/desktops.pyc
 ${PYSITELIB}/volatility/plugins/gui/desktops.pyo
+${PYSITELIB}/volatility/plugins/gui/editbox.py
+${PYSITELIB}/volatility/plugins/gui/editbox.pyc
+${PYSITELIB}/volatility/plugins/gui/editbox.pyo
 ${PYSITELIB}/volatility/plugins/gui/eventhooks.py
 ${PYSITELIB}/volatility/plugins/gui/eventhooks.pyc
 ${PYSITELIB}/volatility/plugins/gui/eventhooks.pyo
@@ -189,6 +187,9 @@ ${PYSITELIB}/volatility/plugins/gui/vtypes/__init__.pyo
 ${PYSITELIB}/volatility/plugins/gui/vtypes/vista.py
 ${PYSITELIB}/volatility/plugins/gui/vtypes/vista.pyc
 ${PYSITELIB}/volatility/plugins/gui/vtypes/vista.pyo
+${PYSITELIB}/volatility/plugins/gui/vtypes/win10.py
+${PYSITELIB}/volatility/plugins/gui/vtypes/win10.pyc
+${PYSITELIB}/volatility/plugins/gui/vtypes/win10.pyo
 ${PYSITELIB}/volatility/plugins/gui/vtypes/win2003.py
 ${PYSITELIB}/volatility/plugins/gui/vtypes/win2003.pyc
 ${PYSITELIB}/volatility/plugins/gui/vtypes/win2003.pyo
@@ -261,6 +262,9 @@ ${PYSITELIB}/volatility/plugins/linux/apihooks.pyo
 ${PYSITELIB}/volatility/plugins/linux/arp.py
 ${PYSITELIB}/volatility/plugins/linux/arp.pyc
 ${PYSITELIB}/volatility/plugins/linux/arp.pyo
+${PYSITELIB}/volatility/plugins/linux/aslr_shift.py
+${PYSITELIB}/volatility/plugins/linux/aslr_shift.pyc
+${PYSITELIB}/volatility/plugins/linux/aslr_shift.pyo
 ${PYSITELIB}/volatility/plugins/linux/banner.py
 ${PYSITELIB}/volatility/plugins/linux/banner.pyc
 ${PYSITELIB}/volatility/plugins/linux/banner.pyo
@@ -324,6 +328,9 @@ ${PYSITELIB}/volatility/plugins/linux/find_file.pyo
 ${PYSITELIB}/volatility/plugins/linux/flags.py
 ${PYSITELIB}/volatility/plugins/linux/flags.pyc
 ${PYSITELIB}/volatility/plugins/linux/flags.pyo
+${PYSITELIB}/volatility/plugins/linux/getcwd.py
+${PYSITELIB}/volatility/plugins/linux/getcwd.pyc
+${PYSITELIB}/volatility/plugins/linux/getcwd.pyo
 ${PYSITELIB}/volatility/plugins/linux/hidden_modules.py
 ${PYSITELIB}/volatility/plugins/linux/hidden_modules.pyc
 ${PYSITELIB}/volatility/plugins/linux/hidden_modules.pyo
@@ -342,6 +349,9 @@ ${PYSITELIB}/volatility/plugins/linux/kernel_opened_files.pyo
 ${PYSITELIB}/volatility/plugins/linux/keyboard_notifiers.py
 ${PYSITELIB}/volatility/plugins/linux/keyboard_notifiers.pyc
 ${PYSITELIB}/volatility/plugins/linux/keyboard_notifiers.pyo
+${PYSITELIB}/volatility/plugins/linux/ld_env.py
+${PYSITELIB}/volatility/plugins/linux/ld_env.pyc
+${PYSITELIB}/volatility/plugins/linux/ld_env.pyo
 ${PYSITELIB}/volatility/plugins/linux/ldrmodules.py
 ${PYSITELIB}/volatility/plugins/linux/ldrmodules.pyc
 ${PYSITELIB}/volatility/plugins/linux/ldrmodules.pyo
@@ -387,9 +397,12 @@ ${PYSITELIB}/volatility/plugins/linux/mount.pyo
 ${PYSITELIB}/volatility/plugins/linux/mount_cache.py
 ${PYSITELIB}/volatility/plugins/linux/mount_cache.pyc
 ${PYSITELIB}/volatility/plugins/linux/mount_cache.pyo
-${PYSITELIB}/volatility/plugins/linux/netfiler.py
-${PYSITELIB}/volatility/plugins/linux/netfiler.pyc
-${PYSITELIB}/volatility/plugins/linux/netfiler.pyo
+${PYSITELIB}/volatility/plugins/linux/netfilter.py
+${PYSITELIB}/volatility/plugins/linux/netfilter.pyc
+${PYSITELIB}/volatility/plugins/linux/netfilter.pyo
+${PYSITELIB}/volatility/plugins/linux/netscan.py
+${PYSITELIB}/volatility/plugins/linux/netscan.pyc
+${PYSITELIB}/volatility/plugins/linux/netscan.pyo
 ${PYSITELIB}/volatility/plugins/linux/netstat.py
 ${PYSITELIB}/volatility/plugins/linux/netstat.pyc
 ${PYSITELIB}/volatility/plugins/linux/netstat.pyo
@@ -432,6 +445,9 @@ ${PYSITELIB}/volatility/plugins/linux/pslist.pyo
 ${PYSITELIB}/volatility/plugins/linux/pslist_cache.py
 ${PYSITELIB}/volatility/plugins/linux/pslist_cache.pyc
 ${PYSITELIB}/volatility/plugins/linux/pslist_cache.pyo
+${PYSITELIB}/volatility/plugins/linux/psscan.py
+${PYSITELIB}/volatility/plugins/linux/psscan.pyc
+${PYSITELIB}/volatility/plugins/linux/psscan.pyo
 ${PYSITELIB}/volatility/plugins/linux/pstree.py
 ${PYSITELIB}/volatility/plugins/linux/pstree.pyc
 ${PYSITELIB}/volatility/plugins/linux/pstree.pyo
@@ -462,6 +478,9 @@ ${PYSITELIB}/volatility/plugins/linux/tty_check.pyo
 ${PYSITELIB}/volatility/plugins/linux/vma_cache.py
 ${PYSITELIB}/volatility/plugins/linux/vma_cache.pyc
 ${PYSITELIB}/volatility/plugins/linux/vma_cache.pyo
+${PYSITELIB}/volatility/plugins/mac/WKdm.py
+${PYSITELIB}/volatility/plugins/mac/WKdm.pyc
+${PYSITELIB}/volatility/plugins/mac/WKdm.pyo
 ${PYSITELIB}/volatility/plugins/mac/__init__.py
 ${PYSITELIB}/volatility/plugins/mac/__init__.pyc
 ${PYSITELIB}/volatility/plugins/mac/__init__.pyo
@@ -489,6 +508,9 @@ ${PYSITELIB}/volatility/plugins/mac/bash_hash.pyo
 ${PYSITELIB}/volatility/plugins/mac/calendar.py
 ${PYSITELIB}/volatility/plugins/mac/calendar.pyc
 ${PYSITELIB}/volatility/plugins/mac/calendar.pyo
+${PYSITELIB}/volatility/plugins/mac/check_fop.py
+${PYSITELIB}/volatility/plugins/mac/check_fop.pyc
+${PYSITELIB}/volatility/plugins/mac/check_fop.pyo
 ${PYSITELIB}/volatility/plugins/mac/check_mig_table.py
 ${PYSITELIB}/volatility/plugins/mac/check_mig_table.pyc
 ${PYSITELIB}/volatility/plugins/mac/check_mig_table.pyo
@@ -504,9 +526,15 @@ ${PYSITELIB}/volatility/plugins/mac/check_sysctl.pyo
 ${PYSITELIB}/volatility/plugins/mac/check_trap_table.py
 ${PYSITELIB}/volatility/plugins/mac/check_trap_table.pyc
 ${PYSITELIB}/volatility/plugins/mac/check_trap_table.pyo
+${PYSITELIB}/volatility/plugins/mac/classes.py
+${PYSITELIB}/volatility/plugins/mac/classes.pyc
+${PYSITELIB}/volatility/plugins/mac/classes.pyo
 ${PYSITELIB}/volatility/plugins/mac/common.py
 ${PYSITELIB}/volatility/plugins/mac/common.pyc
 ${PYSITELIB}/volatility/plugins/mac/common.pyo
+${PYSITELIB}/volatility/plugins/mac/compressed_swap.py
+${PYSITELIB}/volatility/plugins/mac/compressed_swap.pyc
+${PYSITELIB}/volatility/plugins/mac/compressed_swap.pyo
 ${PYSITELIB}/volatility/plugins/mac/contacts.py
 ${PYSITELIB}/volatility/plugins/mac/contacts.pyc
 ${PYSITELIB}/volatility/plugins/mac/contacts.pyo
@@ -519,6 +547,9 @@ ${PYSITELIB}/volatility/plugins/mac/dead_sockets.pyo
 ${PYSITELIB}/volatility/plugins/mac/dead_vnodes.py
 ${PYSITELIB}/volatility/plugins/mac/dead_vnodes.pyc
 ${PYSITELIB}/volatility/plugins/mac/dead_vnodes.pyo
+${PYSITELIB}/volatility/plugins/mac/devfs.py
+${PYSITELIB}/volatility/plugins/mac/devfs.pyc
+${PYSITELIB}/volatility/plugins/mac/devfs.pyo
 ${PYSITELIB}/volatility/plugins/mac/dlyd_maps.py
 ${PYSITELIB}/volatility/plugins/mac/dlyd_maps.pyc
 ${PYSITELIB}/volatility/plugins/mac/dlyd_maps.pyo
@@ -534,15 +565,24 @@ ${PYSITELIB}/volatility/plugins/mac/dump_map.pyo
 ${PYSITELIB}/volatility/plugins/mac/find_aslr_shift.py
 ${PYSITELIB}/volatility/plugins/mac/find_aslr_shift.pyc
 ${PYSITELIB}/volatility/plugins/mac/find_aslr_shift.pyo
+${PYSITELIB}/volatility/plugins/mac/get_profile.py
+${PYSITELIB}/volatility/plugins/mac/get_profile.pyc
+${PYSITELIB}/volatility/plugins/mac/get_profile.pyo
 ${PYSITELIB}/volatility/plugins/mac/gkextmap.py
 ${PYSITELIB}/volatility/plugins/mac/gkextmap.pyc
 ${PYSITELIB}/volatility/plugins/mac/gkextmap.pyo
 ${PYSITELIB}/volatility/plugins/mac/ifconfig.py
 ${PYSITELIB}/volatility/plugins/mac/ifconfig.pyc
 ${PYSITELIB}/volatility/plugins/mac/ifconfig.pyo
+${PYSITELIB}/volatility/plugins/mac/interest_handlers.py
+${PYSITELIB}/volatility/plugins/mac/interest_handlers.pyc
+${PYSITELIB}/volatility/plugins/mac/interest_handlers.pyo
 ${PYSITELIB}/volatility/plugins/mac/ip_filters.py
 ${PYSITELIB}/volatility/plugins/mac/ip_filters.pyc
 ${PYSITELIB}/volatility/plugins/mac/ip_filters.pyo
+${PYSITELIB}/volatility/plugins/mac/kevents.py
+${PYSITELIB}/volatility/plugins/mac/kevents.pyc
+${PYSITELIB}/volatility/plugins/mac/kevents.pyo
 ${PYSITELIB}/volatility/plugins/mac/keychaindump.py
 ${PYSITELIB}/volatility/plugins/mac/keychaindump.pyc
 ${PYSITELIB}/volatility/plugins/mac/keychaindump.pyo
@@ -555,6 +595,15 @@ ${PYSITELIB}/volatility/plugins/mac/librarydump.pyo
 ${PYSITELIB}/volatility/plugins/mac/list_files.py
 ${PYSITELIB}/volatility/plugins/mac/list_files.pyc
 ${PYSITELIB}/volatility/plugins/mac/list_files.pyo
+${PYSITELIB}/volatility/plugins/mac/list_kauth_listeners.py
+${PYSITELIB}/volatility/plugins/mac/list_kauth_listeners.pyc
+${PYSITELIB}/volatility/plugins/mac/list_kauth_listeners.pyo
+${PYSITELIB}/volatility/plugins/mac/list_kauth_scopes.py
+${PYSITELIB}/volatility/plugins/mac/list_kauth_scopes.pyc
+${PYSITELIB}/volatility/plugins/mac/list_kauth_scopes.pyo
+${PYSITELIB}/volatility/plugins/mac/list_raw.py
+${PYSITELIB}/volatility/plugins/mac/list_raw.pyc
+${PYSITELIB}/volatility/plugins/mac/list_raw.pyo
 ${PYSITELIB}/volatility/plugins/mac/list_zones.py
 ${PYSITELIB}/volatility/plugins/mac/list_zones.pyc
 ${PYSITELIB}/volatility/plugins/mac/list_zones.pyo
@@ -603,6 +652,9 @@ ${PYSITELIB}/volatility/plugins/mac/notesapp.pyo
 ${PYSITELIB}/volatility/plugins/mac/notifiers.py
 ${PYSITELIB}/volatility/plugins/mac/notifiers.pyc
 ${PYSITELIB}/volatility/plugins/mac/notifiers.pyo
+${PYSITELIB}/volatility/plugins/mac/orphan_threads.py
+${PYSITELIB}/volatility/plugins/mac/orphan_threads.pyc
+${PYSITELIB}/volatility/plugins/mac/orphan_threads.pyo
 ${PYSITELIB}/volatility/plugins/mac/pgrp_hash_table.py
 ${PYSITELIB}/volatility/plugins/mac/pgrp_hash_table.pyc
 ${PYSITELIB}/volatility/plugins/mac/pgrp_hash_table.pyo
@@ -621,6 +673,9 @@ ${PYSITELIB}/volatility/plugins/mac/procdump.pyo
 ${PYSITELIB}/volatility/plugins/mac/psaux.py
 ${PYSITELIB}/volatility/plugins/mac/psaux.pyc
 ${PYSITELIB}/volatility/plugins/mac/psaux.pyo
+${PYSITELIB}/volatility/plugins/mac/psenv.py
+${PYSITELIB}/volatility/plugins/mac/psenv.pyc
+${PYSITELIB}/volatility/plugins/mac/psenv.pyo
 ${PYSITELIB}/volatility/plugins/mac/pslist.py
 ${PYSITELIB}/volatility/plugins/mac/pslist.pyc
 ${PYSITELIB}/volatility/plugins/mac/pslist.pyo
@@ -645,12 +700,24 @@ ${PYSITELIB}/volatility/plugins/mac/session_hash_table.pyo
 ${PYSITELIB}/volatility/plugins/mac/socket_filters.py
 ${PYSITELIB}/volatility/plugins/mac/socket_filters.pyc
 ${PYSITELIB}/volatility/plugins/mac/socket_filters.pyo
+${PYSITELIB}/volatility/plugins/mac/threads.py
+${PYSITELIB}/volatility/plugins/mac/threads.pyc
+${PYSITELIB}/volatility/plugins/mac/threads.pyo
+${PYSITELIB}/volatility/plugins/mac/threads_simple.py
+${PYSITELIB}/volatility/plugins/mac/threads_simple.pyc
+${PYSITELIB}/volatility/plugins/mac/threads_simple.pyo
+${PYSITELIB}/volatility/plugins/mac/timers.py
+${PYSITELIB}/volatility/plugins/mac/timers.pyc
+${PYSITELIB}/volatility/plugins/mac/timers.pyo
 ${PYSITELIB}/volatility/plugins/mac/trustedbsd.py
 ${PYSITELIB}/volatility/plugins/mac/trustedbsd.pyc
 ${PYSITELIB}/volatility/plugins/mac/trustedbsd.pyo
 ${PYSITELIB}/volatility/plugins/mac/version.py
 ${PYSITELIB}/volatility/plugins/mac/version.pyc
 ${PYSITELIB}/volatility/plugins/mac/version.pyo
+${PYSITELIB}/volatility/plugins/mac/vfsevents.py
+${PYSITELIB}/volatility/plugins/mac/vfsevents.pyc
+${PYSITELIB}/volatility/plugins/mac/vfsevents.pyo
 ${PYSITELIB}/volatility/plugins/machoinfo.py
 ${PYSITELIB}/volatility/plugins/machoinfo.pyc
 ${PYSITELIB}/volatility/plugins/machoinfo.pyo
@@ -681,6 +748,9 @@ ${PYSITELIB}/volatility/plugins/malware/malfind.pyo
 ${PYSITELIB}/volatility/plugins/malware/psxview.py
 ${PYSITELIB}/volatility/plugins/malware/psxview.pyc
 ${PYSITELIB}/volatility/plugins/malware/psxview.pyo
+${PYSITELIB}/volatility/plugins/malware/servicediff.py
+${PYSITELIB}/volatility/plugins/malware/servicediff.pyc
+${PYSITELIB}/volatility/plugins/malware/servicediff.pyo
 ${PYSITELIB}/volatility/plugins/malware/svcscan.py
 ${PYSITELIB}/volatility/plugins/malware/svcscan.pyc
 ${PYSITELIB}/volatility/plugins/malware/svcscan.pyo
@@ -804,6 +874,75 @@ ${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x64_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/vista_sp2_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_10240_17770_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_10240_17770_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_10240_17770_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_10586_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_10586_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_10586_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_14393_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_14393_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_14393_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_15063_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_15063_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_15063_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_15063_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_15063_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_15063_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_16299_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_16299_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_16299_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_16299_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_16299_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_16299_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_17134_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_17134_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_17134_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_1AC738FB_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_1AC738FB_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_1AC738FB_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_DD08DD42_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_DD08DD42_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_DD08DD42_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_10240_17770_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_10240_17770_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_10240_17770_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_10586_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_10586_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_10586_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_14393_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_14393_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_14393_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_15063_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_15063_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_15063_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_15063_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_15063_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_15063_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_16299_syscalls.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_16299_syscalls.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_16299_syscalls.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_16299_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_16299_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_16299_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_17134_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_17134_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_17134_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_44B89EEA_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_44B89EEA_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_44B89EEA_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_9619274A_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_9619274A_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_9619274A_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win10_x86_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win2003.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win2003.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win2003.pyo
@@ -846,15 +985,33 @@ ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x64_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp0_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_24000_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_24000_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_24000_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_632B36E0_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_632B36E0_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_632B36E0_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_24000_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_24000_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_24000_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_BBA98F40_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_BBA98F40_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_BBA98F40_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win7_sp1_x86_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win81_u1_x64_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win81_u1_x86_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_kdbg.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_kdbg.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_kdbg.pyo
@@ -870,6 +1027,9 @@ ${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_syscalls.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp0_x86_vtypes.pyo
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_54B5A1C6_vtypes.py
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_54B5A1C6_vtypes.pyc
+${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_54B5A1C6_vtypes.pyo
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.py
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.pyc
 ${PYSITELIB}/volatility/plugins/overlays/windows/win8_sp1_x64_syscalls.pyo
@@ -924,9 +1084,15 @@ ${PYSITELIB}/volatility/plugins/raw2dmp.pyo
 ${PYSITELIB}/volatility/plugins/registry/__init__.py
 ${PYSITELIB}/volatility/plugins/registry/__init__.pyc
 ${PYSITELIB}/volatility/plugins/registry/__init__.pyo
+${PYSITELIB}/volatility/plugins/registry/amcache.py
+${PYSITELIB}/volatility/plugins/registry/amcache.pyc
+${PYSITELIB}/volatility/plugins/registry/amcache.pyo
 ${PYSITELIB}/volatility/plugins/registry/auditpol.py
 ${PYSITELIB}/volatility/plugins/registry/auditpol.pyc
 ${PYSITELIB}/volatility/plugins/registry/auditpol.pyo
+${PYSITELIB}/volatility/plugins/registry/dumpregistry.py
+${PYSITELIB}/volatility/plugins/registry/dumpregistry.pyc
+${PYSITELIB}/volatility/plugins/registry/dumpregistry.pyo
 ${PYSITELIB}/volatility/plugins/registry/hivelist.py
 ${PYSITELIB}/volatility/plugins/registry/hivelist.pyc
 ${PYSITELIB}/volatility/plugins/registry/hivelist.pyo
@@ -948,6 +1114,9 @@ ${PYSITELIB}/volatility/plugins/registry/shellbags.pyo
 ${PYSITELIB}/volatility/plugins/registry/shimcache.py
 ${PYSITELIB}/volatility/plugins/registry/shimcache.pyc
 ${PYSITELIB}/volatility/plugins/registry/shimcache.pyo
+${PYSITELIB}/volatility/plugins/registry/shutdown.py
+${PYSITELIB}/volatility/plugins/registry/shutdown.pyc
+${PYSITELIB}/volatility/plugins/registry/shutdown.pyo
 ${PYSITELIB}/volatility/plugins/registry/userassist.py
 ${PYSITELIB}/volatility/plugins/registry/userassist.pyc
 ${PYSITELIB}/volatility/plugins/registry/userassist.pyo
@@ -987,6 +1156,9 @@ ${PYSITELIB}/volatility/plugins/vmwareinfo.pyo
 ${PYSITELIB}/volatility/plugins/volshell.py
 ${PYSITELIB}/volatility/plugins/volshell.pyc
 ${PYSITELIB}/volatility/plugins/volshell.pyo
+${PYSITELIB}/volatility/plugins/win10cookie.py
+${PYSITELIB}/volatility/plugins/win10cookie.pyc
+${PYSITELIB}/volatility/plugins/win10cookie.pyo
 ${PYSITELIB}/volatility/poolscan.py
 ${PYSITELIB}/volatility/poolscan.pyc
 ${PYSITELIB}/volatility/poolscan.pyo
@@ -996,6 +1168,27 @@ ${PYSITELIB}/volatility/protos.pyo
 ${PYSITELIB}/volatility/registry.py
 ${PYSITELIB}/volatility/registry.pyc
 ${PYSITELIB}/volatility/registry.pyo
+${PYSITELIB}/volatility/renderers/__init__.py
+${PYSITELIB}/volatility/renderers/__init__.pyc
+${PYSITELIB}/volatility/renderers/__init__.pyo
+${PYSITELIB}/volatility/renderers/basic.py
+${PYSITELIB}/volatility/renderers/basic.pyc
+${PYSITELIB}/volatility/renderers/basic.pyo
+${PYSITELIB}/volatility/renderers/dot.py
+${PYSITELIB}/volatility/renderers/dot.pyc
+${PYSITELIB}/volatility/renderers/dot.pyo
+${PYSITELIB}/volatility/renderers/html.py
+${PYSITELIB}/volatility/renderers/html.pyc
+${PYSITELIB}/volatility/renderers/html.pyo
+${PYSITELIB}/volatility/renderers/sqlite.py
+${PYSITELIB}/volatility/renderers/sqlite.pyc
+${PYSITELIB}/volatility/renderers/sqlite.pyo
+${PYSITELIB}/volatility/renderers/text.py
+${PYSITELIB}/volatility/renderers/text.pyc
+${PYSITELIB}/volatility/renderers/text.pyo
+${PYSITELIB}/volatility/renderers/xlsx.py
+${PYSITELIB}/volatility/renderers/xlsx.pyc
+${PYSITELIB}/volatility/renderers/xlsx.pyo
 ${PYSITELIB}/volatility/scan.py
 ${PYSITELIB}/volatility/scan.pyc
 ${PYSITELIB}/volatility/scan.pyo
@@ -1005,6 +1198,9 @@ ${PYSITELIB}/volatility/timefmt.pyo
 ${PYSITELIB}/volatility/utils.py
 ${PYSITELIB}/volatility/utils.pyc
 ${PYSITELIB}/volatility/utils.pyo
+${PYSITELIB}/volatility/validity.py
+${PYSITELIB}/volatility/validity.pyc
+${PYSITELIB}/volatility/validity.pyo
 ${PYSITELIB}/volatility/win32/__init__.py
 ${PYSITELIB}/volatility/win32/__init__.pyc
 ${PYSITELIB}/volatility/win32/__init__.pyo
@@ -1038,10 +1234,3 @@ ${PYSITELIB}/volatility/win32/tasks.pyo
 ${PYSITELIB}/volatility/win32/xpress.py
 ${PYSITELIB}/volatility/win32/xpress.pyc
 ${PYSITELIB}/volatility/win32/xpress.pyo
-tools/linux/Makefile
-tools/linux/module.c
-tools/linux/pmem/Makefile
-tools/linux/pmem/pmem.c
-tools/mac/convert.py
-tools/mac/mac_create_all_profiles.py
-tools/vtype_diff.py
diff --git a/security/volatility/distinfo b/security/volatility/distinfo
index d44add481c9..09861f3d831 100644
--- a/security/volatility/distinfo
+++ b/security/volatility/distinfo
@@ -1,6 +1,7 @@
-$NetBSD: distinfo,v 1.3 2021/03/27 23:07:56 mef Exp $
+$NetBSD: distinfo,v 1.4 2021/03/29 07:58:53 adam Exp $
 
 SHA1 (volatility-2.6.1.tar.gz) = 16e393a01f542c880190c1ec6339bb27943a600c
 RMD160 (volatility-2.6.1.tar.gz) = ad00ca8219dcb25a10ec4bbcfb74bd458669d939
 SHA512 (volatility-2.6.1.tar.gz) = 64d49de21a87fb6152ad430126466bf66bca06457f3fa2d54cee29b0e4a2eee53ab658570b6cbc782e85ca558f45fac5cf6e6625ebd85aa3ffc9f69768cfa844
 Size (volatility-2.6.1.tar.gz) = 5246187 bytes
+SHA1 (patch-setup.py) = 451c9d2eb77b14239d9aac778735be900b8b593c
diff --git a/security/volatility/patches/patch-setup.py b/security/volatility/patches/patch-setup.py
new file mode 100644
index 00000000000..8c8806805f0
--- /dev/null
+++ b/security/volatility/patches/patch-setup.py
@@ -0,0 +1,14 @@
+$NetBSD: patch-setup.py,v 1.1 2021/03/29 07:58:53 adam Exp $
+
+Do not install extra files.
+
+--- setup.py.orig	2021-03-29 07:52:47.000000000 +0000
++++ setup.py
+@@ -72,7 +72,6 @@ opts['packages'] = ["volatility",
+                     "volatility.plugins.registry",
+                     "volatility.plugins.malware", 
+                     "volatility.plugins.mac"]
+-opts['data_files'] = find_files(['contrib'], py = True) + find_files(['tools'])
+ 
+ if py2exe_available:
+     py2exe_distdir = 'dist/py2exe'