diff options
| -rwxr-xr-x | etc.bash | 1 | ||||
| -rw-r--r-- | etc/modprobe.d/blacklist-security.conf | 16 |
2 files changed, 17 insertions, 0 deletions
@@ -3,6 +3,7 @@ sudo cp -rv etc/keyd/* /etc/keyd/ sudo cp -v etc/pacman.conf /etc/ sudo cp -v etc/kernel/cmdline /etc/kernel/ +sudo cp -v etc/modprobe.d/blacklist-security.conf /etc/modprobe.d/ sudo cp -v etc/pam.d/system-local-login /etc/pam.d/ sudo cp -v etc/pam.d/system-login /etc/pam.d/ sudo cp -v etc/login.defs /etc/ diff --git a/etc/modprobe.d/blacklist-security.conf b/etc/modprobe.d/blacklist-security.conf new file mode 100644 index 0000000..bced95c --- /dev/null +++ b/etc/modprobe.d/blacklist-security.conf @@ -0,0 +1,16 @@ +# Disable rare/legacy network protocols +install dccp /bin/true +install sctp /bin/true +install rds /bin/true +install tipc /bin/true + +# Disable legacy/unused filesystems +install cramfs /bin/true +install freevxfs /bin/true +install jffs2 /bin/true +install hfs /bin/true +install hfsplus /bin/true +install udf /bin/true + +# Disable FireWire Direct Memory Access (DMA) if unneeded +install firewire-core /bin/true |