#!/bin/sh

set -e

case "${1}" in
	install)

cat > /etc/modprobe.d/mitigation_copy-fail.conf << EOF
# /etc/modprobe.d/mitigation_copy-fail.conf

# Copy Fail [CVE-2026-31431]
# https://copy.fail
#
install algif_aead /bin/false
EOF

		rmmod algif_aead > /dev/null 2>&1 || true

		echo 3 > /proc/sys/vm/drop_caches
		;;

	remove)
		rm -f /etc/modprobe.d/mitigation_copy-fail.conf
		;;
esac
