Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-25 22:18:33 -05:00
Code Issues Projects Releases Packages Wiki Activity

Update docs on GrapheneOS blacklisted modules

Browse source
This commit is contained in:
raja-grewal 2025-11-21 12:40:12 +00:00 • committed by GitHub
parent 446d3771bf
commit 28476d3d53
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

11
etc/modprobe.d/30_security-misc_blacklist.conf#security-misc-shared
View file

@ -26,8 +26,11 @@ blacklist sr_mod
## GrapheneOS: ## GrapheneOS:
## Partial selection of their infrastructure blacklist. ## Partial selection of their infrastructure blacklist.
## Duplicate and already disabled modules have been omitted. ## Duplicate and already disabled modules have been omitted.
## Currently snd_intel8x0 is required by some users for VirtualBox audio device ICH AC97.
## ##
## https://github.com/GrapheneOS/infrastructure/blob/main/etc/modprobe.d/local.conf ## https://github.com/GrapheneOS/infrastructure/tree/main/etc/modprobe.d
## https://www.kicksecure.com/wiki/Dev/audio
## https://github.com/Kicksecure/security-misc/issues/271
## ##
#blacklist cfg80211 #blacklist cfg80211
#blacklist intel_agp #blacklist intel_agp
@ -35,12 +38,6 @@ blacklist sr_mod
blacklist joydev blacklist joydev
#blacklist mousedev #blacklist mousedev
#blacklist psmouse #blacklist psmouse
## TODO: Re-check in Debian trixie
## In GrapheneOS list, yes, "should" be out-commented here.
## But not actually out-commented.
## Breaks VirtualBox audio device ICH AC97, which is unfortunately still required by some users.
## https://www.kicksecure.com/wiki/Dev/audio
## https://github.com/Kicksecure/security-misc/issues/271
#blacklist snd_intel8x0 #blacklist snd_intel8x0
#blacklist tls #blacklist tls
#blacklist virtio_balloon #blacklist virtio_balloon