X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=debian%2Fpreinst;h=d13bffce39807c4082ac7ba7922260baba7650f9;hb=refs%2Ftags%2Fv2.6.32.1;hp=6cc6e1f8103dc8338cb62ca3159845a7aee69af0;hpb=e7d98e8f3aabd8ac906b73bfa2e301e38d490be8;p=kernel-cn.git

diff --git a/debian/preinst b/debian/preinst
index 6cc6e1f..d13bffc 100755
--- a/debian/preinst
+++ b/debian/preinst
@@ -19,6 +19,11 @@ case "$1" in
     ;;
 
     abort-upgrade)
+        # check if we have Layer7 active...
+        if iptables-save | grep -qs '^-A.* -m layer7 '; then
+            echo 'CN: Layer7 Netfilter no longer supported, report this to SysHelp!'
+            exit 1
+        fi
     ;;
 
     *)
@@ -27,11 +32,29 @@ case "$1" in
     ;;
 esac
 
+# check if the config script fixed the grub diverts
+if [ -e /usr/sbin/grub.real -o -e /usr/sbin/grub-probe.real ]; then
+    echo "CN: Please install this package using apt-get."
+    exit 1
+fi
+
 # make GRUB template directory
 if [ ! -d /boot/grub ]; then
+    echo "CN: Made /boot/grub directory."
     mkdir -p /boot/grub
 fi
 
+################################################################################
+
+SHIELD=$(sysctl -e -n kernel.exec-shield)
+
+if [ ! -z "$SHIELD" ]; then
+    sysctl -e -w kernel.exec-shield=0 >/dev/null 2>&1 || true
+    echo "CN: Disabled Exec-Shield."
+fi
+
+################################################################################
+
 # dh_installdeb will replace this with shell code automatically
 # generated by other debhelper scripts.