Disable some legacy drivers

These were all previously blacklisted for over 2 years.
This commit is contained in:
Raja Grewal 2024-07-20 15:03:21 +10:00
parent c4965ed838
commit 3c720a0715
No known key found for this signature in database
GPG Key ID: 92CA473C156B64C4
3 changed files with 14 additions and 6 deletions

View File

@ -226,7 +226,8 @@ disabling should first be blacklisted for a suitable amount of time.
are disabled.
- Miscellaneous: Disable an assortment of other modules such as those required
for amateur radio, floppy disks, and vivid.
for amateur radio, floppy disks, and vivid. Also disable legacy drivers that
have been entirely replaced by newer drivers.
- Thunderbolt: Disabled as they are often vulnerable to DMA attacks.

View File

@ -26,14 +26,10 @@ blacklist sr_mod
## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist.conf?h=ubuntu/disco
## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist-ath_pci.conf?h=ubuntu/disco
##
blacklist ath_pci
blacklist amd76x_edac
blacklist asus_acpi
blacklist bcm43xx
blacklist ath_pci
blacklist evbug
blacklist de4x5
blacklist pcspkr
blacklist prism54
blacklist snd_aw2
blacklist snd_intel8x0m
blacklist snd_pcsp

View File

@ -256,6 +256,17 @@ install hamradio /usr/bin/disabled-miscellaneous-by-security-misc
##
install floppy /usr/bin/disabled-miscellaneous-by-security-misc
##
## Replaced:
## These legacy drivers have all been entirely replaced and superseded by newer drivers.
## These were all previously blacklisted.
##
## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist.conf?h=ubuntu/disco
##
install asus_acpi /usr/bin/disabled-miscellaneous-by-security-misc
install bcm43xx /usr/bin/disabled-miscellaneous-by-security-misc
install de4x5 /usr/bin/disabled-miscellaneous-by-security-misc
install prism54 /usr/bin/disabled-miscellaneous-by-security-misc
##
## Vivid:
## Disables the vivid kernel module since it has been the cause of multiple vulnerabilities.
##