#!/bin/sh
# preinst script for kernel-cn
#
# see: dh_installdeb(1)

set -e

# summary of how this script can be called:
#        * <new-preinst> `install'
#        * <new-preinst> `install' <old-version>
#        * <new-preinst> `upgrade' <old-version>
#        * <old-preinst> `abort-upgrade' <new-version>
# for details, see http://www.debian.org/doc/debian-policy/ or
# the debian-policy package


case "$1" in
    install|upgrade)
    ;;

    abort-upgrade)
        # check if we have Layer7 active...
        if iptables-save | grep -qs '^-A.* -m layer7 '; then
            echo 'CN: Layer7 Netfilter no longer supported, report this to SysHelp!'
            exit 1
        fi
    ;;

    *)
        echo "preinst called with unknown argument \`$1'" >&2
        exit 1
    ;;
esac

# check if the config script fixed the grub diverts
if [ -e /usr/sbin/grub.real -o -e /usr/sbin/grub-probe.real ]; then
    echo "CN: Please install Grub2 package using: apt-get install grub-pc"
    exit 1
fi

# make GRUB template directory
if [ ! -d /boot/grub ]; then
    echo "CN: Made /boot/grub directory."
    mkdir -p /boot/grub
fi

################################################################################

SHIELD=$(sysctl -e -n kernel.exec-shield)

if [ ! -z "$SHIELD" ]; then
    sysctl -e -w kernel.exec-shield=0 >/dev/null 2>&1 || true
    echo "CN: Disabled Exec-Shield."
fi

################################################################################

# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.

#DEBHELPER#

exit 0