From 5684a12d9db65474392dc9e1ebdc4646e34569eb Mon Sep 17 00:00:00 2001 From: raja-grewal Date: Fri, 12 Dec 2025 01:59:23 +0000 Subject: [PATCH] Whitelist `9p` module --- .../30_security-misc_disable.conf#security-misc-shared | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/etc/modprobe.d/30_security-misc_disable.conf#security-misc-shared b/etc/modprobe.d/30_security-misc_disable.conf#security-misc-shared index fb06543..6752374 100644 --- a/etc/modprobe.d/30_security-misc_disable.conf#security-misc-shared +++ b/etc/modprobe.d/30_security-misc_disable.conf#security-misc-shared @@ -160,8 +160,11 @@ install zonefs /usr/bin/disabled-filesys-by-security-misc ## Network File Systems: ## Disable uncommon network file systems to reduce attack surface. +## Currently 9p is required for KVM shared folders in Whonix. ## -install 9p /usr/bin/disabled-netfilesys-by-security-misc +## https://www.whonix.org/wiki/KVM#Shared_Folder +## +#install 9p /usr/bin/disabled-netfilesys-by-security-misc install gfs2 /usr/bin/disabled-netfilesys-by-security-misc install ksmbd /usr/bin/disabled-netfilesys-by-security-misc