#!/bin/sh
PREREQ="udev"
prereqs()
{
	echo "$PREREQ"
}

case $1 in
	prereqs)
		prereqs
		exit 0
		;;
esac

. /scripts/functions

securityfs_mnt=/sys/kernel/security
sysfs_entry="$securityfs_mnt"/kysec/3adm

securityfs_is_mounted()
{
	mount -t securityfs | awk '{print $3}' | while read mntdir
	do
		if [ "$mntdir" = "$securityfs_mnt" ]; then
			echo "yes"
			return
		fi
	done

	echo "no"
}

if [ "yes" != `securityfs_is_mounted` ]; then
	mount -t securityfs none "$securityfs_mnt"
	if [ $? -ne 0 ]; then
		panic "Failed to mount securityfs"
		exit 0
	fi
fi

if [ -e "$securityfs_mnt/kysec/kid" ]; then
	old_kid_status=$(cat "$securityfs_mnt/kysec/kid")
	echo "$old_kid_status" > "$securityfs_mnt/kysec/kid"
fi

mount -o remount,rw ${ROOT} ${rootmnt}

if [ -f "$sysfs_entry" ]; then
	adm_status=`cat "$sysfs_entry"`
	if [ x"${adm_status}" = x"1" ]; then
		# disable 3adm
		echo 0 > "$sysfs_entry"
		echo "$adm_status" > /.3adm
		log_success_msg "kysec 3adm disabled"
	fi
fi
