add rc.local with exec bit
update whitelist