Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-27 07:19:22 -05:00
Code Issues Packages Projects Releases Wiki Activity

minor

Browse Source
This commit is contained in:
Patrick Schleizer 2023-01-07 12:43:07 -05:00
parent 450ff378b0
commit 2860560edb
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
5 changed files with 26 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
usr/lib/dracut/modules.d/10ram-wipe-exit/module-setup.sh
View File

@ -46,4 +46,3 @@ install() {
installkernel() { installkernel() {
return 0 return 0
} }

13
usr/lib/dracut/modules.d/10ram-wipe-exit/wipe-ram-needshutdown.sh
View File

@ -15,21 +15,20 @@ ram_wipe_check_needshutdown() {
if [ "$wipe_action" = "reboot" ]; then if [ "$wipe_action" = "reboot" ]; then
reboot -f reboot -f
fi fi
if [ "$wipe_action" = "poweroff" ]; then if [ "$wipe_action" = "poweroff" ]; then
poweroff -f poweroff -f
fi fi
if [ "$wipe_action" = "halt" ]; then if [ "$wipe_action" = "halt" ]; then
halt -f halt -f
fi fi
if [ "$wipe_action" = "error" ]; then if [ "$wipe_action" = "error" ]; then
info "Choice of shutdown option led to an error. Shutting down..." info "Choice of shutdown option led to an error. Shutting down..."
sleep 5 sleep 5
poweroff -f poweroff -f
fi fi
} }
ram_wipe_check_needshutdown ram_wipe_check_needshutdown

10
usr/lib/dracut/modules.d/10ram-wipe-exit/wipe-ram.sh
View File

@ -8,21 +8,19 @@ ram_wipe_action() {
local kernel_wiperam_exit local kernel_wiperam_exit
kernel_wiperam_exit=$(getarg wiperamexit) kernel_wiperam_exit=$(getarg wiperamexit)
if [ "$kernel_wiperam_exit" = "no" ]; then if [ "$kernel_wiperam_exit" = "no" ]; then
info "INFO: Skip, because wiperamexit=no kernel parameter detected, OK." info "INFO: Skip, because wiperamexit=no kernel parameter detected, OK."
return 0 return 0
fi fi
if [ "$kernel_wiperam_exit" != "yes" ]; then if [ "$kernel_wiperam_exit" != "yes" ]; then
info "INFO: Skip, becuase wiperamexit parameter is not used. " info "INFO: Skip, becuase wiperamexit parameter is not used."
return 0 return 0
fi fi
info "INFO: wiperamexit=yes. Running second RAM wipe... " info "INFO: wiperamexit=yes. Running second RAM wipe..."
sdmem -l -l -v sdmem -l -l -v
} }
ram_wipe_action
ram_wipe_action

30
usr/lib/dracut/modules.d/40cold-boot-attack-defense/module-setup.sh
View File

@ -8,31 +8,31 @@
# called by dracut # called by dracut
check() { check() {
require_binaries sync || return 1 require_binaries sync || return 1
require_binaries sleep || return 1 require_binaries sleep || return 1
require_binaries sdmem || return 1 require_binaries sdmem || return 1
require_binaries dmsetup || return 1 require_binaries dmsetup || return 1
require_binaries systemd-detect-virt || return 1 require_binaries systemd-detect-virt || return 1
return 0 return 0
} }
# called by dracut # called by dracut
depends() { depends() {
return 0 return 0
} }
# called by dracut # called by dracut
install() { install() {
inst_multiple sync inst_multiple sync
inst_multiple sleep inst_multiple sleep
inst_multiple sdmem inst_multiple sdmem
inst_multiple dmsetup inst_multiple dmsetup
inst_multiple systemd-detect-virt inst_multiple systemd-detect-virt
inst_hook shutdown 40 "$moddir/wipe-ram.sh" inst_hook shutdown 40 "$moddir/wipe-ram.sh"
inst_hook cleanup 80 "$moddir/wipe-ram-needshutdown.sh" inst_hook cleanup 80 "$moddir/wipe-ram-needshutdown.sh"
} }
# called by dracut # called by dracut
installkernel() { installkernel() {
return 0 return 0
} }

2
usr/lib/dracut/modules.d/40cold-boot-attack-defense/wipe-ram.sh
View File

@ -64,7 +64,7 @@ ram_wipe() {
sleep 3 sleep 3
else else
info "\ info "\
WARNING: wipe-ram.sh:There are still mounted encrypted disks! RAM wipe failed! WARNING: wipe-ram.sh: There are still mounted encrypted disks! RAM wipe failed!
debugging information: debugging information:
dmsetup_expected_output: '$dmsetup_expected_output' dmsetup_expected_output: '$dmsetup_expected_output'