#!/bin/sh
# Seal grsec sysctl for prod units

read roku_dev_mode rest < /proc/cmdline
if [ "$roku_dev_mode" = 'dev=1' ]
then
    echo "dev unit. grsec sysctl is enabled"

    echo 0 > /proc/sys/kernel/grsecurity/roku_proc_pid_maps
    echo 0 > /proc/sys/kernel/grsecurity/roku_proc_page_monitor
else
    echo 1 > /proc/sys/kernel/grsecurity/grsec_lock
fi

