enable deny_new_usb2 during normal boot before loading USB port driver

If needed, deny_new_usb2 gets disabled at a later stage by the USB HAL.

Author: muhomorr

init/first_stage_init.cpp

@@ -276,6 +276,13 @@ bool LoadKernelModules(BootMode boot_mode, bool want_console, bool want_parallel
         }
     }
 
+    if (disable_usb_port) {
+        if (auto res = WriteFile("/proc/sys/kernel/deny_new_usb2", "1"); res.ok()) {
+            LOG(INFO) << "wrote 1 to deny_new_usb2";
+        } else {
+            LOG(ERROR) << "write to deny_new_usb2 failed";
+        }
+    }
     Modprobe m({MODULE_BASE_DIR}, GetModuleLoadList(boot_mode, MODULE_BASE_DIR), true, disable_usb_port);
     bool retval = (want_parallel) ? m.LoadModulesParallel(std::thread::hardware_concurrency())
                                   : m.LoadListedModules(!want_console);