From 01d57bde324508d4f487c0c6e0884d86885262f8 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Tue, 30 Jun 2015 13:31:24 -0300
Subject: Basic BadUSB mitigation

---
 files/etc/rc.local | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'files/etc/rc.local')

diff --git a/files/etc/rc.local b/files/etc/rc.local
index 4ce3a3a..b2ca780 100644
--- a/files/etc/rc.local
+++ b/files/etc/rc.local
@@ -40,5 +40,10 @@ if [ -f "/etc/screenrc.startup" ]; then
   ( . /etc/default/locale && cd /root && HOME=/root LANG=$LANG /usr/bin/screen -d -m -S root -c /etc/screenrc.startup )
 fi
 
+# See https://links.sarava.org/tags/badusb
+if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
+  echo "0" > /sys/module/usbcore/parameters/authorized_default
+fi
+
 # Then exit
 exit 0
-- 
cgit v1.2.3