diff --git a/debian/control b/debian/control index 068030d..ee8b5af 100644 --- a/debian/control +++ b/debian/control @@ -95,7 +95,7 @@ Description: enhances misc security settings . All mitigations for the MDS vulnerability are enabled. . - DCCP, SCTP, TIPC and RDS are blacklisted as they are rarely used and may have + DCCP, SCTP, TIPC, RDS and HDLC are blacklisted as they are rarely used and may have unknown vulnerabilities. . The kernel logs are restricted to root only. diff --git a/etc/modprobe.d/blacklist-dma.conf b/etc/modprobe.d/blacklist-dma.conf index 3e2c7de..3a1485b 100644 --- a/etc/modprobe.d/blacklist-dma.conf +++ b/etc/modprobe.d/blacklist-dma.conf @@ -1,3 +1,3 @@ # Blacklist thunderbolt and firewire to prevent some DMA attacks. -blacklist firewire-core -blacklist thunderbolt +install firewire-core /bin/true +install thunderbolt /bin/true diff --git a/etc/modprobe.d/uncommon-network-protocols.conf b/etc/modprobe.d/uncommon-network-protocols.conf index 474598a..41da209 100644 --- a/etc/modprobe.d/uncommon-network-protocols.conf +++ b/etc/modprobe.d/uncommon-network-protocols.conf @@ -3,3 +3,4 @@ install dccp /bin/true install sctp /bin/true install rds /bin/true install tipc /bin/true +install n-hdlc /bin/true