Move joydev from blacklist to disable

README.md

@@ -380,6 +380,8 @@ Miscellaneous modules:
 - Framebuffer (fbdev): Disabled as these drivers are well-known to be buggy, cause
   kernel panics, and are generally only used by legacy devices.
 
+- Joysticks: Disabled to reduce attack surface.
+
 - Replaced Modules: Disabled legacy drivers that have been entirely replaced and
   superseded by newer drivers.
 

etc/modprobe.d/30_security-misc_blacklist.conf#security-misc-shared

@@ -35,7 +35,6 @@ blacklist sr_mod
 #blacklist cfg80211
 #blacklist intel_agp
 #blacklist ip_tables
-blacklist joydev
 #blacklist mousedev
 #blacklist psmouse
 #blacklist snd_intel8x0

etc/modprobe.d/30_security-misc_disable.conf#security-misc-shared

@@ -283,6 +283,12 @@ install viafb /usr/bin/disabled-framebuffer-by-security-misc
 install vt8623fb /usr/bin/disabled-framebuffer-by-security-misc
 install udlfb /usr/bin/disabled-framebuffer-by-security-misc
 
+## Joysticks:
+##
+## https://docs.kernel.org/input/joydev/joystick.html
+##
+install joydev /usr/bin/disabled-miscellaneous-by-security-misc
+
 ## Replaced Modules:
 ## These legacy drivers have all been entirely replaced and superseded by newer drivers.
 ## Many of these were previously blacklisted.