#!/usr/bin/env bash
#
# Author: Dmitry Razumov <asmeron@ublinux.com>
# Copyright (c) 2021-2025 UBLinux <support@ublinux.com>
#
# Initial script for Linux UBLinux
# This script are launching before starting init from initrd script
# Current dir allways must be set to root (/)
# All system path must be relative, except initrd dirs

ENABLED=yes
[[ ${ENABLED} == "yes" ]] || exit 0
DEBUGMODE=no

PATH=.:/:/usr/bin:/usr/local/bin:/usr/local/sbin

[[ -d /usr/lib/ublinux ]] && { ROOTFS= ; CMD_CHROOT= ; } || { [[ -d /sysroot ]] && ROOTFS="/sysroot" || ROOTFS="."; CMD_CHROOT="chroot ${ROOTFS}"; }
SOURCE=${ROOTFS}/usr/lib/ublinux/functions; [[ -f ${SOURCE} ]] && . ${SOURCE} 2>/dev/null || exit 0
SOURCE=${ROOTFS}/usr/lib/ublinux/default; [[ -f ${SOURCE} ]] && . ${SOURCE} 2>/dev/null || exit 0
debug_mode "$0" "$@"

SYSCONF="${ROOTFS}${SYSCONF}"
SOURCE=${SYSCONF}/config; [[ -f ${SOURCE} ]] && . ${SOURCE} 2>/dev/null
SOURCE=${SYSCONF}/security; [ -f ${SOURCE} ] && . ${SOURCE} 2>/dev/null

exec_access_denied_vtx11(){
## Отключить виртуальные терминалы и запретить переключение на них из X11
    FILE_XORGDONTVTSWITCH_CONF="${ROOTFS}/etc/X11/xorg.conf.d/disable-vt-ubconfig.conf"
    FILE_SYSTEMDLOGIND_CONF="${ROOTFS}/etc/systemd/logind.conf.d/disable-vt-ubconfig.conf"
    FILE_LIGHTDM_CONF="${ROOTFS}/etc/lightdm/lightdm.conf.d/disable-vt-ubconfig.conf"
    if [[ ${ACCESS_DENIED_VTX11,,} == @(y|yes|enable) ]]; then
	mkdir -p ${FILE_XORGDONTVTSWITCH_CONF%/*}
	 cat <<-EOF | sed 's/^\s*\t*//' > "${FILE_XORGDONTVTSWITCH_CONF}"
	    Section "ServerFlags"
	    Option "DontVTSwitch" "true"
	    EndSection
EOF
	if readlink -fq ${ROOTFS}/usr/bin/init | grep -q "lib/systemd/systemd$"; then
	    mkdir -p ${FILE_SYSTEMDLOGIND_CONF%/*}
	    cat <<-EOF | sed 's/^\s*\t*//' > "${FILE_SYSTEMDLOGIND_CONF}"
		[Login]
		NAutoVTs=0
		ReserveVT=0
EOF
	fi
	if [[ -d ${ROOTFS}/etc/lightdm ]]; then
	    mkdir -p ${FILE_LIGHTDM_CONF%/*}
	    cat <<-EOF | sed 's/^\s*\t*//' > "${FILE_LIGHTDM_CONF}"
		[LightDM]
		logind-check-graphical=true
EOF
	fi
    elif [[ ${ACCESS_DENIED_VTX11,,} == @(n|no|disable) ]]; then
	rm -f "${FILE_SYSTEMDLOGIND_CONF}" "${FILE_XORGDONTVTSWITCH_CONF}" "${FILE_LIGHTDM_CONF}"
    fi
}

################
##### MAIN #####
################

    exec_access_denied_vtx11 $@