Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-11 11:39:27 -05:00
Code Issues Packages Projects Releases Wiki Activity

blacklist modules with /bin/false rather than /bin/true to fail with error

Browse Source 
message rather than failing without notification
This commit is contained in:
Patrick Schleizer 2019-09-07 05:47:34 +00:00
parent 8132052ce0
commit 7affddb3bb
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
3 changed files with 22 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/modprobe.d/blacklist-bluetooth.conf
View File

@ -1,3 +1,3 @@
# Blacklists bluetooth.
install bluetooth /bin/true
install btusb /bin/true
install bluetooth /bin/false
install btusb /bin/false

4
etc/modprobe.d/blacklist-dma.conf
View File

@ -1,3 +1,3 @@
# Blacklist thunderbolt and firewire to prevent some DMA attacks.
install firewire-core /bin/true
install thunderbolt /bin/true
install firewire-core /bin/false
install thunderbolt /bin/false

36
etc/modprobe.d/uncommon-network-protocols.conf
View File

@ -1,25 +1,25 @@
# Disables unneeded network protocols that will likely not be used as these may have unknown vulnerabilties.
#
# Credit to Tails (https://tails.boum.org/blueprint/blacklist_modules/) for some of these.
#
#
# > Debian ships a long list of modules for wide support of devices, filesystems, protocols. Some of these modules have a pretty bad security track record, and some of those are simply not used by most of our users.
#
# > Other distributions like Ubuntu[1] and Fedora[2] already ship a blacklist for various network protocols which aren't much in use by users and have a poor security track record.
#
install dccp /bin/true
install sctp /bin/true
install rds /bin/true
install tipc /bin/true
install n-hdlc /bin/true
install ax25 /bin/true
install netrom /bin/true
install x25 /bin/true
install rose /bin/true
install decnet /bin/true
install econet /bin/true
install af_802154 /bin/true
install ipx /bin/true
install appletalk /bin/true
install psnap /bin/true
install p8023 /bin/true
install p8022 /bin/true
install dccp /bin/false
install sctp /bin/false
install rds /bin/false
install tipc /bin/false
install n-hdlc /bin/false
install ax25 /bin/false
install netrom /bin/false
install x25 /bin/false
install rose /bin/false
install decnet /bin/false
install econet /bin/false
install af_802154 /bin/false
install ipx /bin/false
install appletalk /bin/false
install psnap /bin/false
install p8023 /bin/false
install p8022 /bin/false