DivestOS/Patches/LineageOS-15.1/android_system_core/0003-Deny_USB-Aggressive.patch
Tad 28600556b4 Many changes
- Add a variable to control inclusion of patches under a restrictive license
- Fix F-Droid building
- Add a buildDeviceDebug function that disables signing
- Misc tweaks/cleanup
- 15.1: Revert trust_interface cherry picks until official
2018-04-23 08:44:50 -04:00

28 lines
732 B
Diff

From 3c31c1f1188e1c550f02d838daa8e7c2e55e6f56 Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Mon, 23 Apr 2018 02:39:35 -0400
Subject: [PATCH] deny all new usb devices until after boot
Change-Id: I7a3dad49610eb4010dc13a3acaffb6fd91cdc89c
---
rootdir/init.rc | 3 +++
1 file changed, 3 insertions(+)
diff --git a/rootdir/init.rc b/rootdir/init.rc
index c1bd58eba..38f3bab9f 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -18,6 +18,9 @@ on early-init
# Disable sysrq from keyboard
write /proc/sys/kernel/sysrq 0
+ # Deny all new USB devices until after boot
+ write /proc/sys/kernel/deny_new_usb 1
+
# Set the security context of /adb_keys if present.
restorecon /adb_keys
--
2.17.0