59 Commits

Author	SHA1	Message	Date
Raja Grewal	cb2fb95b81	Disable more miscellaneous drivers	2024-07-15 21:01:36 +10:00
Raja Grewal	96aa63267a	Disable more Thunderbolt modules	2024-07-15 20:57:14 +10:00
Raja Grewal	51f7776bc8	Disable more network protocols/drivers	2024-07-15 20:56:12 +10:00
Raja Grewal	9e40ff0551	Disable more network file systems	2024-07-15 20:54:18 +10:00
Raja Grewal	82c5a93f7c	Disable another GPS module	2024-07-15 20:53:07 +10:00
Raja Grewal	99b0ce7948	Disable more file systems	2024-07-15 20:47:56 +10:00
Raja Grewal	4476a477a7	Provide option to disable more Bluetooth modules	2024-07-15 20:47:07 +10:00
Raja Grewal	9f58266546	Move nf_conntrack_helper disabling into separate file	2024-07-13 23:32:01 +10:00
Raja Grewal	98580bb39a	Update modprobe presentation	2024-07-13 23:29:52 +10:00
Raja Grewal	41a3bf92fb	Sort 30_security-misc_disable.conf	2024-07-12 16:21:41 +10:00
Raja Grewal	b02230a783	Split modprobe into blacklisted and disabled configurations	2024-07-12 02:42:37 +10:00
Raja Grewal	fc792ff232	Alphabetically sort existing modprobe	2024-07-12 02:29:36 +10:00
Raja Grewal	fe20f3240e	Refactor existing modprobe for clarity	2024-07-12 02:28:48 +10:00
Raja Grewal	275a4ffc11	Remove redundant disabled modules	2024-07-12 02:27:56 +10:00
Raja Grewal	1bb843ec38	Update Copyright (C) to 2024	2024-05-11 13:18:36 +10:00
Patrick Schleizer	0f1119f326	Merge pull request #221 from raja-grewal/firewire ... Disable Firewire Module	2024-05-10 06:45:57 -04:00
raja-grewal	677f75ae8e	Disable firewire-net module	2024-05-09 02:34:02 +00:00
raja-grewal	06f13bb766	Disable GPS modules like GNSS	2024-05-09 02:28:53 +00:00
Patrick Schleizer	7dba3fb7be	no longer disable MSR by default ... fixes https://github.com/Kicksecure/security-misc/issues/215	2024-04-01 02:56:27 -04:00
Patrick Schleizer	0efee2f50f	usrmerge ... fixes https://github.com/Kicksecure/security-misc/issues/190	2024-01-17 13:39:56 -05:00
monsieuremre	13b4ddbb62	30_security-misc.conf	2023-10-27 14:34:21 +00:00
Raja Grewal	7a4212dd76	Update copyright	2023-03-30 17:08:47 +11:00
Raja Grewal	d67845fea8	Typo	2022-12-13 16:11:24 +11:00
Raja Grewal	6f695902fb	Add comment about legacy Apple fiesystems	2022-11-23 23:53:40 +11:00
Raja Grewal	daa30d4e78	Include several framebuffer drivers into blacklist ... These were previously commented out to test for compatibility issues.	2022-11-09 20:43:59 +11:00
Raja Grewal	a72bbb1883	Corrected kerenl module disabling	2022-07-13 23:42:13 +10:00
Raja Grewal	48089e5ba4	More verbose kernel module blocking error logs	2022-07-12 17:02:12 +10:00
Raja Grewal	40ec791774	Updated comments	2022-07-12 16:58:16 +10:00
Raja Grewal	ef1ef9917d	Blacklist automatic loading of CD-ROM modules	2022-07-10 04:53:25 +10:00
Raja Grewal	61ef9bd59f	Incorporated Ubuntu’s kernel module blacklists	2022-07-10 04:52:00 +10:00
Patrick Schleizer	26b2c9727f	not blacklist CD-ROM / DVD yet ... https://forums.whonix.org/t/blacklist-more-kernel-modules-to-reduce-attack-surface/7989/31	2022-07-07 15:39:40 -04:00
Patrick Schleizer	ca19d78d48	shuffle	2022-07-07 15:27:15 -04:00
Raja Grewal	780dc8eec9	replace /bin/false -> /bin/disabled-by-security-misc	2022-07-08 04:11:25 +10:00
Raja Grewal	fa2e30f512	Updated descriptions of disabled modules	2022-07-08 03:04:37 +10:00
Raja Grewal	da389d6682	Revert "replace /bin/false -> /bin/true" ... This reverts commit f0511635a9.	2022-07-08 02:12:04 +10:00
raja-grewal	f0511635a9	replace /bin/false -> /bin/true	2022-07-07 09:27:53 +00:00
raja-grewal	18d67dbc53	Blacklist more modules	2022-07-07 09:26:55 +00:00
Patrick Schleizer	2d37e3a1af	copyright	2022-05-20 14:46:38 -04:00
Patrick Schleizer	a67007f4b7	copyright	2021-03-17 09:45:21 -04:00
Patrick Schleizer	da1ac48cde	unblacklist squashfs as this would likely break Whonix-Host ISO ... https://github.com/Whonix/security-misc/pull/75#issuecomment-700044182	2020-09-28 10:29:50 -04:00
Patrick Schleizer	4070133ed6	unblacklist vfat ... https://github.com/Whonix/security-misc/pull/75#issuecomment-695201068	2020-09-28 10:25:57 -04:00
flawedworld	a813e7da07	Blacklist more modules	2020-09-19 20:46:19 +01:00
Patrick Schleizer	2ceea8d1fe	update copyright year	2020-04-01 08:49:59 -04:00
Patrick Schleizer	e0aa67677d	merge the many modprobe.d config files into 1 ... and use a name starting with double digits to make it easier to disable settings using a lexically higher config file	2020-01-24 04:30:36 -05:00
madaidan	a662a76a52	Blacklist vivid	2020-01-11 18:37:00 +00:00
madaidan	dd93b11321	Blacklist CPU MSRs	2019-12-22 13:52:43 +00:00
madaidan	a14a2854c6	Elaborate	2019-10-16 18:52:14 +00:00
Patrick Schleizer	7affddb3bb	blacklist modules with /bin/false rather than /bin/true to fail with error ... message rather than failing without notification	2019-09-07 05:47:34 +00:00
onions-knight	a8b6281119	Update uncommon-network-protocols.conf ... Removing llc from blacklisted network protocols as it is needed by KVM for networking. See https://hub.packtpub.com/kvm-networking-libvirt/ and https://forums.whonix.org/t/whonix-desktop-installer-with-calamares-field-report/7350/107	2019-08-19 11:30:57 +00:00
madaidan	5a4ea39566	Create blacklist-bluetooth.conf	2019-07-31 18:30:57 +00:00