aboutsummaryrefslogtreecommitdiff
path: root/files/etc/rc.local
blob: 55fdcd914a4600dd51122703b5d460f60f73c826 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
#!/bin/sh
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.

# Clear keyring
if [ -x "/bin/keyctl" ]; then
  /bin/keyctl clear @u
fi

# Force the hostname
/bin/hostname `cat /etc/hostname`

# Remove puppetd lock
rm -f /var/lib/puppet/state/puppetdlock

# Then restart puppet with the right hostname
/etc/init.d/puppet restart

# Keep this mountpoint while ekeyd fact needs it
if [ -d "/proc/bus/usb" ]; then
  /bin/mount -t usbfs usbfs /proc/bus/usb -onodev,noexec,nosuid
fi

# Restart shorewall to make sure it gets virtual interfaces
if [ -f '/etc/init.d/shorewall' ]; then
  /etc/init.d/shorewall restart
fi

# Start system-wide screen session
if [ -f "/etc/screenrc.startup" ]; then
  ( . /etc/default/locale && cd /root && HOME=/root LANG=$LANG /usr/bin/screen -d -m -S root -c /etc/screenrc.startup )
fi

# See https://links.sarava.org/tags/badusb
if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
  echo "0" > /sys/module/usbcore/parameters/authorized_default

  for bus in /sys/bus/usb/devices/usb*; do
    echo 0 > $bus/authorized_default
  done
fi

# Then exit
exit 0