Blacklist vivid

This commit is contained in:
madaidan 2020-01-11 18:37:00 +00:00 committed by GitHub
parent 13a1e1321e
commit a662a76a52
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

10
etc/modprobe.d/vivid.conf Normal file
View File

@ -0,0 +1,10 @@
## Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
## Blacklists the vivid kernel module as it's only required for
## testing and has been the cause of multiple vulnerabilities.
##
## https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598/233
## https://www.openwall.com/lists/oss-security/2019/11/02/1
## https://github.com/a13xp0p0v/kconfig-hardened-check/commit/981bd163fa19fccbc5ce5d4182e639d67e484475
install vivid /bin/false