/usr/src/openswan-2.6.38/packaging/utils/update-natt is in openswan-modules-dkms 1:2.6.38-1.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 | #!/bin/sh
# -*- sh -*-
. umlsetup.sh
KERN=$1
shift
patch20=false
patch22=false
patch24=false
patch26=false
. packaging/utils/kernelpatching.sh
case $KERN in
    2.0) kv=; patchname=os2_0; altname=fs2_0; patch20=true ;;
    2.2) kv=; patchname=os2_2; altname=fs2_2; patch22=true ;;
    2.4) kv=; patchname=os2_4; altname=fs2_4; patch24=true ;;
    2.6) kv=26; patchname=os2_6; altname=fs2_6; patch26=true ;;
    *) echo "Invalid kernel patch target: $KERN"; exit 1;;
esac
# make sure that sort gets the right locale.
LANG=C export LANG
LC_ALL=C export LC_ALL
updatepatch() {
	file=$1
	pfile=$2
	(
		cd $POOLSPACE/plain${kv}
		diff --unified=1 ${KERNPOOL}/${file} ${file}
	) > $pfile
}
updatefake() {
	doit=$1
	pfile=$2
	pname=$3
	if $doit
	then
		:
	else
		return 0;
	fi
	cp $POOLSPACE/plain${kv}/$pname $pfile
}
cd nat-t
find . -type f -print | grep -v CVS | egrep -v 'linux/Makefile' | sort | while read file 
do
  base=`basename $file`
  dir=`dirname $file`
  pname=`echo $file | sed -e 's,\.patch,,' -e 's,\.fs._.$,,' -e 's,\.os._.$,,'`
  #echo "File: $file" "PN: $pname"
  case $base in 
    TAGS) ;;
    tags) ;;
    .cvsignore) ;;
    .*.o.flags) ;;
    .\#*);;
    *.o) ;;
    *~) ;;
    version.in.c) ;;
    tagsfile.mak) ;;
    *.${patchname}.patch) updatepatch $pname $file;;
    *.${altname}.patch)   updatepatch $pname $file;;
    *.patch) ;;
    *.fs2_0) updatefake $patch20 $file $pname ;;
    *.fs2_2) updatefake $patch22 $file $pname ;;
    *.fs2_4) updatefake $patch24 $file $pname ;;
    *.fs2_6) updatefake $patch26 $file $pname ;;
    *.os2_0) updatefake $patch20 $file $pname ;;
    *.os2_2) updatefake $patch22 $file $pname ;;
    *.os2_4) updatefake $patch24 $file $pname ;;
    *.os2_6) updatefake $patch26 $file $pname ;;
    *) updatefake true $file $file ;;
  esac
done
 |