aboutsummaryrefslogtreecommitdiff
path: root/files
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2015-06-30 13:31:24 -0300
committerSilvio Rhatto <rhatto@riseup.net>2015-06-30 13:31:24 -0300
commit01d57bde324508d4f487c0c6e0884d86885262f8 (patch)
tree89bc56a11ec401fb961eee80a00c2549171d257f /files
parentda49436db33d551c0c0bb09918697102e17f4ec8 (diff)
downloadpuppet-nodo-01d57bde324508d4f487c0c6e0884d86885262f8.tar.gz
puppet-nodo-01d57bde324508d4f487c0c6e0884d86885262f8.tar.bz2
Basic BadUSB mitigation
Diffstat (limited to 'files')
-rw-r--r--files/etc/rc.local5
1 files changed, 5 insertions, 0 deletions
diff --git a/files/etc/rc.local b/files/etc/rc.local
index 4ce3a3a..b2ca780 100644
--- a/files/etc/rc.local
+++ b/files/etc/rc.local
@@ -40,5 +40,10 @@ if [ -f "/etc/screenrc.startup" ]; then
( . /etc/default/locale && cd /root && HOME=/root LANG=$LANG /usr/bin/screen -d -m -S root -c /etc/screenrc.startup )
fi
+# See https://links.sarava.org/tags/badusb
+if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
+ echo "0" > /sys/module/usbcore/parameters/authorized_default
+fi
+
# Then exit
exit 0