Better BadUSB mitigation

diff --git a/files/etc/rc.local b/files/etc/rc.local
index b2ca780245fca7b73190808d9692f9dd08bb2c30..2618f6e161588b1070eae6f6bb07eac3c0de6447 100644 (file)
--- a/files/etc/rc.local
+++ b/files/etc/rc.local
@@ -43,6 +43,10 @@ fi
 # See https://links.sarava.org/tags/badusb
 if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
   echo "0" > /sys/module/usbcore/parameters/authorized_default
+
+  for bus in /sys/bus/usb/devices/usb*; do
+    echo $0 > $bus/authorized_default
+  done
 fi
 
 # Then exit