blob: fd951eb695700608f630e45f5030c04c564e5787 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
#!/bin/sh
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
# Clear keyring
if [ -x "/bin/keyctl" ]; then
/bin/keyctl clear @u
fi
# Force the hostname
/bin/hostname `cat /etc/hostname`
# Remove puppetd lock, then restart puppet with the right hostname
# Not using this anymore since we moved to a masterless setup.
#rm -f /var/lib/puppet/state/puppetdlock
#/etc/init.d/puppet restart
# Keep this mountpoint while ekeyd fact needs it
if [ -d "/proc/bus/usb" ]; then
/bin/mount -t usbfs usbfs /proc/bus/usb -onodev,noexec,nosuid
fi
# Restart shorewall to make sure it gets virtual interfaces
#if [ -f '/etc/init.d/shorewall' ]; then
# /etc/init.d/shorewall restart
#fi
# Start system-wide screen session
if [ -f "/etc/screenrc.startup" ]; then
( . /etc/default/locale && cd /root && HOME=/root LANG=$LANG /usr/bin/screen -d -m -S root -c /etc/screenrc.startup )
fi
# See https://links.fluxo.info/tags/badusb
if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
echo "0" > /sys/module/usbcore/parameters/authorized_default
for bus in /sys/bus/usb/devices/usb*; do
echo "0" > "$bus/authorized_default"
done
fi
# Then exit
exit 0
|
