diff --git a/debian/control b/debian/control index ba36d93..5f1fe60 100644 --- a/debian/control +++ b/debian/control @@ -97,7 +97,7 @@ Description: enhances misc security settings . All mitigations for the MDS vulnerability are enabled. . - DCCP, SCTP, TIPC, RDS and HDLC are blacklisted as they are rarely used and + Uncommon network protocols are blacklisted as they are rarely used and may have unknown vulnerabilities. . The kernel logs are restricted to root only. diff --git a/etc/modprobe.d/uncommon-network-protocols.conf b/etc/modprobe.d/uncommon-network-protocols.conf index 41da209..6bbc37d 100644 --- a/etc/modprobe.d/uncommon-network-protocols.conf +++ b/etc/modprobe.d/uncommon-network-protocols.conf @@ -4,3 +4,16 @@ install sctp /bin/true install rds /bin/true install tipc /bin/true install n-hdlc /bin/true +install ax25 /bin/true +install netrom /bin/true +install x25 /bin/true +install rose /bin/true +install decnet /bin/true +install econet /bin/true +install af_802154 /bin/true +install ipx /bin/true +install appletalk /bin/true +install psnap /bin/true +install p8023 /bin/true +install llc /bin/true +install p8022 /bin/true diff --git a/lib/systemd/system/coredump.conf.d/disable-coredumps.conf b/lib/systemd/coredump.conf.d/disable-coredumps.conf similarity index 100% rename from lib/systemd/system/coredump.conf.d/disable-coredumps.conf rename to lib/systemd/coredump.conf.d/disable-coredumps.conf