;;
abort-upgrade)
+ # check if we have Layer7 active...
+ if iptables-save | grep -qs '^-A.* -m layer7 '; then
+ echo 'CN: Layer7 Netfilter no longer supported, report this to SysHelp!'
+ exit 1
+ fi
;;
*)
;;
esac
+# check if the config script fixed the grub diverts
+if [ -e /usr/sbin/grub.real -o -e /usr/sbin/grub-probe.real ]; then
+ echo "CN: Please install this package using apt-get."
+ exit 1
+fi
+
# make GRUB template directory
if [ ! -d /boot/grub ]; then
echo "CN: Made /boot/grub directory."
################################################################################
-DIVERT_TO="grub grub-probe"
+SHIELD=$(sysctl -e -n kernel.exec-shield)
-echo -n "CN: Diverting binaries:"
-for i in $DIVERT_TO; do
- dpkg-divert --add --rename --package 'kernel-2.6-cn' \
- --divert /usr/sbin/$i.real /usr/sbin/$i >/dev/null
- echo -n " $i"
-done
-echo "."
+if [ ! -z "$SHIELD" ]; then
+ sysctl -e -w kernel.exec-shield=0 >/dev/null 2>&1 || true
+ echo "CN: Disabled Exec-Shield."
+fi
################################################################################
-if iptables-save | grep -qs '^-A.* -m layer7 '; then
- echo 'CN: Layer7 Netfilter no longer supported, report this to SysHelp!'
- exit 1
-fi
-
# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.