| # Copyright 2021 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| description "A watchdog to protect the system if pciguard goes into crash loop" |
| author "chromium-os-dev@chromium.org" |
| |
| oom score -200 |
| |
| start on stopped pciguard RESULT="failed" PROCESS="respawn" |
| task |
| |
| script |
| logger -p ERR "pciguard in crash loop, locking down the system!" |
| for f in /sys/bus/thunderbolt/devices/*/authorized; do |
| echo 0 > "${f}" || logger -p ERR "Unable to deauthorize ${f}" |
| done |
| echo 1 > /sys/bus/pci/drivers_allowlist_lockdown |
| end script |
