Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-26 08:56:24 -05:00
Code Issues Projects Releases Packages Wiki Activity

Disable RNDIS due to unfixable security issues

Browse source
This commit is contained in:
Aaron Rainbolt 2025-08-28 16:18:14 -05:00
parent 78b66ba159
commit b95598b6f7
No known key found for this signature in database
GPG key ID: A709160D73C79109
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
etc/modprobe.d/30_security-misc_disable.conf
View file

@ -308,3 +308,15 @@ install prism54 /usr/bin/disabled-miscellaneous-by-security-misc
## https://github.com/Kicksecure/security-misc/issues/298
##
#install vivid /usr/bin/disabled-miscellaneous-by-security-misc
## RNDIS:
## Disable the RNDIS drivers used by some network devices (common with Android
## USB tethering). RNDIS as a protocol is believed to have supposedly
## unfixable buffer overflow issues and may be impossible to implement in a
## secure fashion.
##
## https://lkml.org/lkml/2022/11/23/728
## https://lore.kernel.org/lkml/2023071333-wildly-playroom-878b@gregkh/
##
install rndis_host /usr/bin/disabled-miscellaneous-by-security-misc
install usb_f_rndis /usr/bin/disabled-miscellaneous-by-security-misc