Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-25 14:25:17 -04:00
Code Issues Projects Releases Packages Wiki Activity

not blacklist CD-ROM / DVD yet

Browse source 
https://forums.whonix.org/t/blacklist-more-kernel-modules-to-reduce-attack-surface/7989/31
This commit is contained in:
Patrick Schleizer 2022-07-07 15:39:40 -04:00
parent d5c1650341
commit 26b2c9727f
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
2 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
etc/modprobe.d/30_security-misc.conf
View file

@ -87,5 +87,6 @@ install mei-me /bin/disabled-by-security-misc
# Blacklist CD-ROM devices
# https://nvd.nist.gov/vuln/detail/CVE-2018-11506
install cdrom /bin/disabled-by-security-misc
install sr_mod /bin/disabled-by-security-misc
# https://forums.whonix.org/t/blacklist-more-kernel-modules-to-reduce-attack-surface/7989/31
#install cdrom /bin/disabled-by-security-misc
#install sr_mod /bin/disabled-by-security-misc