#!/bin/sh
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

# Clear keyring
if [ -x "/bin/keyctl" ]; then
  /bin/keyctl clear @u
fi

# Force the hostname
/bin/hostname `cat /etc/hostname`

# Keep this mountpoint while ekeyd fact needs it
if [ -d "/proc/bus/usb" ]; then
  /bin/mount -t usbfs usbfs /proc/bus/usb -onodev,noexec,nosuid
fi

# Restart shorewall to make sure it gets virtual interfaces
#if [ -f '/etc/init.d/shorewall' ]; then
#  /etc/init.d/shorewall restart
#fi

# Start system-wide screen session
if [ -f "/etc/screenrc.startup" ]; then
  ( . /etc/default/locale && cd /root && HOME=/root LANG=$LANG /usr/bin/screen -d -m -S root -c /etc/screenrc.startup )
fi

# See https://links.fluxo.info/tags/badusb
if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
  echo "0" > /sys/module/usbcore/parameters/authorized_default

  for bus in /sys/bus/usb/devices/usb*; do
    echo "0" > "$bus/authorized_default"
  done
fi

# Then exit
exit 0