From ca19d78d48ca88f5b00dcceb18ac4803c7893ca4 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Thu, 7 Jul 2022 15:27:15 -0400 Subject: [PATCH] shuffle --- etc/modprobe.d/30_security-misc.conf | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/etc/modprobe.d/30_security-misc.conf b/etc/modprobe.d/30_security-misc.conf index a855e79..c8851dd 100644 --- a/etc/modprobe.d/30_security-misc.conf +++ b/etc/modprobe.d/30_security-misc.conf @@ -80,12 +80,12 @@ install gfs2 /bin/disabled-by-security-misc # https://github.com/a13xp0p0v/kconfig-hardened-check/commit/981bd163fa19fccbc5ce5d4182e639d67e484475 install vivid /bin/disabled-by-security-misc -# Blacklist CD-ROM devices -# https://nvd.nist.gov/vuln/detail/CVE-2018-11506 -install cdrom /bin/disabled-by-security-misc -install sr_mod /bin/disabled-by-security-misc - # Blacklist Intel Management Engine (ME) interface with the OS # https://www.kernel.org/doc/html/latest/driver-api/mei/mei.html install mei /bin/disabled-by-security-misc install mei-me /bin/disabled-by-security-misc + +# Blacklist CD-ROM devices +# https://nvd.nist.gov/vuln/detail/CVE-2018-11506 +install cdrom /bin/disabled-by-security-misc +install sr_mod /bin/disabled-by-security-misc