From: Silvio Rhatto <rhatto@riseup.net>
Date: Tue, 30 Jun 2015 16:31:24 +0000 (-0300)
Subject: Basic BadUSB mitigation
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=01d57bde324508d4f487c0c6e0884d86885262f8;p=puppet-nodo.git

Basic BadUSB mitigation
---

diff --git a/files/etc/rc.local b/files/etc/rc.local
index 4ce3a3a..b2ca780 100644
--- a/files/etc/rc.local
+++ b/files/etc/rc.local
@@ -40,5 +40,10 @@ if [ -f "/etc/screenrc.startup" ]; then
   ( . /etc/default/locale && cd /root && HOME=/root LANG=$LANG /usr/bin/screen -d -m -S root -c /etc/screenrc.startup )
 fi
 
+# See https://links.sarava.org/tags/badusb
+if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
+  echo "0" > /sys/module/usbcore/parameters/authorized_default
+fi
+
 # Then exit
 exit 0