From f3800a4e2b7bef87cc3bd8791f9e7f654f8d782a Mon Sep 17 00:00:00 2001 From: raja-grewal Date: Thu, 9 May 2024 02:25:46 +0000 Subject: [PATCH 1/2] Create disabled-gps-by-security-misc --- usr/bin/disabled-gps-by-security-misc | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 usr/bin/disabled-gps-by-security-misc diff --git a/usr/bin/disabled-gps-by-security-misc b/usr/bin/disabled-gps-by-security-misc new file mode 100644 index 0000000..460e39c --- /dev/null +++ b/usr/bin/disabled-gps-by-security-misc @@ -0,0 +1,10 @@ +#!/bin/bash + +## Copyright (C) 2019 - 2023 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + +## Alerts the user that a kernel module failed to load due to it being blacklisted by default. + +echo "$0: ERROR: This GNSS (Global Navigation Satellite System) kernel module is disabled by package security-misc by default. See the configuration file /etc/modprobe.d/30_security-misc.conf | args: $@" >&2 + +exit 1 From 06f13bb766bd84182331aeb1632b917de4b36020 Mon Sep 17 00:00:00 2001 From: raja-grewal Date: Thu, 9 May 2024 02:28:53 +0000 Subject: [PATCH 2/2] Disable GPS modules like GNSS --- etc/modprobe.d/30_security-misc.conf | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/etc/modprobe.d/30_security-misc.conf b/etc/modprobe.d/30_security-misc.conf index 8b5af64..d993919 100644 --- a/etc/modprobe.d/30_security-misc.conf +++ b/etc/modprobe.d/30_security-misc.conf @@ -88,6 +88,14 @@ install vivid /usr/bin/disabled-vivid-by-security-misc install mei /usr/bin/disabled-intelme-by-security-misc install mei-me /usr/bin/disabled-intelme-by-security-misc +# Disable GPS modules like GNSS (Global Navigation Satellite System) +install gnss /usr/bin/disabled-gps-by-security-misc +install gnss-mtk /usr/bin/disabled-gps-by-security-misc +install gnss-serial /usr/bin/disabled-gps-by-security-misc +install gnss-sirf /usr/bin/disabled-gps-by-security-misc +install gnss-usb /usr/bin/disabled-gps-by-security-misc +install gnss-ubx /usr/bin/disabled-gps-by-security-misc + ## Blacklist automatic loading of the Atheros 5K RF MACs madwifi driver ## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist-ath_pci.conf?h=ubuntu/disco blacklist ath_pci