diff options
| author | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 12:36:52 +0200 |
|---|---|---|
| committer | Denis Chevalier <perso@denischevalier.fr> | 2026-08-06 12:36:52 +0200 |
| commit | a76d46969a25863dc25466004280e861f9037dac (patch) | |
| tree | 448e26e6095e9702b44ac96fa169bbb94fdec9a1 /etc | |
| parent | 6343b37e9f3a473a81f6ecb0a0303bc9cd1b23ad (diff) | |
| download | postinstall-a76d46969a25863dc25466004280e861f9037dac.tar.gz postinstall-a76d46969a25863dc25466004280e861f9037dac.tar.bz2 postinstall-a76d46969a25863dc25466004280e861f9037dac.zip | |
blacklist obscure and legacy modules
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/modprobe.d/blacklist-security.conf | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/etc/modprobe.d/blacklist-security.conf b/etc/modprobe.d/blacklist-security.conf new file mode 100644 index 0000000..bced95c --- /dev/null +++ b/etc/modprobe.d/blacklist-security.conf @@ -0,0 +1,16 @@ +# Disable rare/legacy network protocols +install dccp /bin/true +install sctp /bin/true +install rds /bin/true +install tipc /bin/true + +# Disable legacy/unused filesystems +install cramfs /bin/true +install freevxfs /bin/true +install jffs2 /bin/true +install hfs /bin/true +install hfsplus /bin/true +install udf /bin/true + +# Disable FireWire Direct Memory Access (DMA) if unneeded +install firewire-core /bin/true |