From: Silvio Rhatto <rhatto@riseup.net>
Date: Thu, 16 Jul 2015 17:36:08 +0000 (-0300)
Subject: Better BadUSB mitigation
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=d8d756b9fd0bfb4b9d9514c411c7e01e8358e9c1;p=puppet-nodo.git

Better BadUSB mitigation
---

diff --git a/files/etc/rc.local b/files/etc/rc.local
index b2ca780..2618f6e 100644
--- a/files/etc/rc.local
+++ b/files/etc/rc.local
@@ -43,6 +43,10 @@ fi
 # See https://links.sarava.org/tags/badusb
 if [ -e "/sys/module/usbcore/parameters/authorized_default" ]; then
   echo "0" > /sys/module/usbcore/parameters/authorized_default
+
+  for bus in /sys/bus/usb/devices/usb*; do
+    echo $0 > $bus/authorized_default
+  done
 fi
 
 # Then exit