Clarify README.mmd relating to module disabling

This commit is contained in:
Raja Grewal 2024-07-13 23:30:55 +10:00
parent 98580bb39a
commit 8f2ec75f81
No known key found for this signature in database
GPG Key ID: 92CA473C156B64C4

View File

@ -143,7 +143,8 @@ modules from automatically starting.
Specific kernel modules are entirely disabled to reduce attack surface via
`/etc/modprobe.d/30_security-misc_disable.conf`. Disabling prohibits kernel
modules from starting. This approach should not be considered comprehensive,
rather it is a form of badness enumeration.
rather it is a form of badness enumeration. Any potential candidates for future
disabling should first be blacklisted for a suitable amount of time.
- File Systems: Disable uncommon and legacy file systems.