scripts/live-premount/readonly

   1 #!/bin/sh
   2
   3 #set -e
   4
   5 # initramfs-tools header
   6
   7 PREREQ="udev"
   8
   9 prereqs()
  10 {
  11         echo "${PREREQ}"
  12 }
  13
  14 case "${1}" in
  15         prereqs)
  16                 prereqs
  17                 exit 0
  18                 ;;
  19 esac
  20
  21 # live-boot script
  22
  23 # make sure all harddisk devices are read-only
  24 # this is important for forensic investigations
  25 if grep -qe forensic -qe readonly /proc/cmdline
  26 then
  27         for device in /dev/hd* /dev/sd* /dev/vd*
  28         do
  29                 if [ -b "$device" ]
  30                 then
  31                         printf " * Setting device %-9s to read-only mode: " $device >/dev/console
  32                         blockdev --setro $device && printf "done [ execute \"blockdev --setrw %-9s\" to unlock]\n" $device >/dev/console || printf "failed\n" >/dev/console
  33                 fi
  34         done
  35 fi