Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-02 12:56:06 -04:00
Code Issues Projects Releases Packages Wiki Activity

Change echo to info. Included more reliable way of getting initrd and kernel. Allow user custom kexec

Browse source
This commit is contained in:
Friedrich Doku 2023-01-07 11:14:31 -05:00
parent 8da3b9c40c
commit 78a4fad667
5 changed files with 32 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

21
usr/libexec/security-misc/cold-boot-attack-defense-kexec-prepare
View file

@ -12,8 +12,16 @@ env
## Lets hope $1 is set to reboot, poweroff or halt by systemd.
true "1: $1"
initrd=/boot/initrd.img-$(uname -r)
kernel=/boot/vmlinuz-$(uname -r)
# Get the kernel command-line arguments
cmdline=$(cat /proc/cmdline)
# Get the current boot image
kernel=$(echo "$cmdline" | grep -o 'BOOT_IMAGE=\S*' | cut -d '=' -f 2)
initrd=$(echo "$kernel" | sed "s#vmlinuz#initrd.img#")
kernel="/boot/$kernel"
initrd="/boot/$initrd"
if test -e $initrd; then
echo "Initrd File Found"
@ -39,14 +47,9 @@ elif systemctl list-jobs | grep "reboot.target" | grep -q "start"; then
elif systemctl list-jobs | grep "halt.target" | grep -q "start"; then
wram="yes"
wact="halt"
elif systemctl list-jobs | grep "kexec.target" | grep -q "start"; then
wram="yes"
wact="kexec"
else
echo "Error no shutdown option found!"
wram="yes"
wact="error"
echo "No shutdown option found!"
exit 0
fi
kexec -l $kernel --initrd=$initrd --reuse-cmdline --append="wiperamexit=$wram wiperamaction=$wact"