#!/bin/sh

set -e

case "${1}" in
	install)

cat > /etc/modprobe.d/mitigation_dirty-frag.conf << EOF
# /etc/modprobe.d/mitigation_dirty-frag.conf

# Dirty Frag [CVE-2026-xxxxx]
# https://github.com/V4bel/dirtyfrag

install esp4 /bin/false
install esp6 /bin/false
install rxrpc /bin/false
EOF

		rmmod esp4 > /dev/null 2>&1 || true
		rmmod esp6 > /dev/null 2>&1 || true
		rmmod rxrpc > /dev/null 2>&1 || true

		echo 3 > /proc/sys/vm/drop_caches
		;;

	remove)
		rm -f /etc/modprobe.d/mitigation_dirty-frag.conf
		;;
esac
