Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-12-27 22:14:34 -05:00
Code Issues Projects Releases Packages Wiki Activity

Whitelist 9p module

Browse source
This commit is contained in:
raja-grewal 2025-12-12 01:59:23 +00:00 • committed by GitHub
parent 53c4fdbeea
commit 5684a12d9d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
etc/modprobe.d/30_security-misc_disable.conf#security-misc-shared
View file

@ -160,8 +160,11 @@ install zonefs /usr/bin/disabled-filesys-by-security-misc
## Network File Systems:
## Disable uncommon network file systems to reduce attack surface.
## Currently 9p is required for KVM shared folders in Whonix.
##
install 9p /usr/bin/disabled-netfilesys-by-security-misc
## https://www.whonix.org/wiki/KVM#Shared_Folder
##
#install 9p /usr/bin/disabled-netfilesys-by-security-misc
install gfs2 /usr/bin/disabled-netfilesys-by-security-misc
install ksmbd /usr/bin/disabled-netfilesys-by-security-misc