Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-24 21:35:41 -05:00
Code Issues Projects Releases Packages Wiki Activity

Add kill-vboxdrmclient-on-shutdown.service

Browse source
This commit is contained in:
Aaron Rainbolt 2025-11-09 18:38:54 -06:00
parent 9d86379f56
commit 5fbd42bbec
No known key found for this signature in database
GPG key ID: A709160D73C79109
3 changed files with 46 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
debian/security-misc-shared.install vendored
View file

@ -57,6 +57,7 @@ usr/libexec/security-misc/hide-hardware-info#security-misc-shared => /usr/libexe
usr/libexec/security-misc/virusforget#security-misc-shared => /usr/libexec/security-misc/virusforget
usr/libexec/security-misc/pam_faillock_not_if_x#security-misc-shared => /usr/libexec/security-misc/pam_faillock_not_if_x
usr/libexec/security-misc/block-unsafe-logins#security-misc-shared => /usr/libexec/security-misc/block-unsafe-logins
usr/libexec/security-misc/kill-vboxdrmclient-on-shutdown#security-misc-shared => /usr/libexec/security-misc/kill-vboxdrmclient-on-shutdown
usr/src/security-misc/emerg-shutdown.c#security-misc-shared => /usr/src/security-misc/emerg-shutdown.c
usr/bin/disabled-gps-by-security-misc#security-misc-shared => /usr/bin/disabled-gps-by-security-misc
usr/bin/disabled-netfilesys-by-security-misc#security-misc-shared => /usr/bin/disabled-netfilesys-by-security-misc
@ -90,6 +91,7 @@ usr/lib/systemd/system/remount-secure.service#security-misc-shared => /usr/lib/s
usr/lib/systemd/system/ensure-shutdown.service#security-misc-shared => /usr/lib/systemd/system/ensure-shutdown.service
usr/lib/systemd/system/sysinit-post.target#security-misc-shared => /usr/lib/systemd/system/sysinit-post.target
usr/lib/systemd/system/ensure-shutdown-trigger.service#security-misc-shared => /usr/lib/systemd/system/ensure-shutdown-trigger.service
usr/lib/systemd/system/kill-vboxdrmclient-on-shutdown.service#security-misc-shared => /usr/lib/systemd/system/kill-vboxdrmclient-on-shutdown.service
usr/lib/systemd/user/usbguard-notifier.service.d/30_security-misc.conf#security-misc-shared => /usr/lib/systemd/user/usbguard-notifier.service.d/30_security-misc.conf
usr/lib/systemd/pstore.conf.d/30_security-misc.conf#security-misc-shared => /usr/lib/systemd/pstore.conf.d/30_security-misc.conf
usr/lib/udev/rules.d/95-emerg-shutdown.rules#security-misc-shared => /usr/lib/udev/rules.d/95-emerg-shutdown.rules

15
usr/lib/systemd/system/kill-vboxdrmclient-on-shutdown.service#security-misc-shared Normal file
View file

@ -0,0 +1,15 @@
## Copyright (C) 2025 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Unit]
Description=kill VBoxDRMClient during shutdown to allow /tmp to be unmounted properly
ConditionVirtualization=oracle
[Service]
Type=oneshot
RemainAfterExit=true
ExecStart=true
ExecStop=/usr/libexec/security-misc/kill-vboxdrmclient-on-shutdown
[Install]
WantedBy=multi-user.target

29
usr/libexec/security-misc/kill-vboxdrmclient-on-shutdown#security-misc-shared Normal file
View file

@ -0,0 +1,29 @@
#!/bin/bash
## Copyright (C) 2025 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See file COPYING for copying conditions.
set -o errexit
set -o nounset
set -o errtrace
set -o pipefail
vboxdrmclient_sock='/tmp/.iprt-localipc-DRMIpcServer'
if ! [ -S "$vboxdrmclient_sock" ]; then
printf '%s\n' "'$vboxdrmclient_sock' does not exist or is not a socket, ok."
exit 0
fi
sock_pid="$(/usr/libexec/helper-scripts/query-sock-pid "$vboxdrmclient_sock")" || true
if [ -z "$sock_pid" ]; then
printf '%s\n' "Cannot get PID listening on '$vboxdrmclient_sock', ok."
exit 0
fi
if kill -SIGKILL "$sock_pid"; then
printf '%s\n' "Killed VBoxDRMClient ('$sock_pid'), ok."
exit 0
fi
printf '%s\n' "ERROR: Could not kill VBoxDRMClient ('$sock_pid')!"
exit 1