From a76d46969a25863dc25466004280e861f9037dac Mon Sep 17 00:00:00 2001 From: Denis Chevalier Date: Thu, 6 Aug 2026 12:36:52 +0200 Subject: blacklist obscure and legacy modules --- etc.bash | 1 + etc/modprobe.d/blacklist-security.conf | 16 ++++++++++++++++ 2 files changed, 17 insertions(+) create mode 100644 etc/modprobe.d/blacklist-security.conf diff --git a/etc.bash b/etc.bash index 6c46e23..14b41b7 100755 --- a/etc.bash +++ b/etc.bash @@ -3,6 +3,7 @@ sudo cp -rv etc/keyd/* /etc/keyd/ sudo cp -v etc/pacman.conf /etc/ sudo cp -v etc/kernel/cmdline /etc/kernel/ +sudo cp -v etc/modprobe.d/blacklist-security.conf /etc/modprobe.d/ sudo cp -v etc/pam.d/system-local-login /etc/pam.d/ sudo cp -v etc/pam.d/system-login /etc/pam.d/ sudo cp -v etc/login.defs /etc/ diff --git a/etc/modprobe.d/blacklist-security.conf b/etc/modprobe.d/blacklist-security.conf new file mode 100644 index 0000000..bced95c --- /dev/null +++ b/etc/modprobe.d/blacklist-security.conf @@ -0,0 +1,16 @@ +# Disable rare/legacy network protocols +install dccp /bin/true +install sctp /bin/true +install rds /bin/true +install tipc /bin/true + +# Disable legacy/unused filesystems +install cramfs /bin/true +install freevxfs /bin/true +install jffs2 /bin/true +install hfs /bin/true +install hfsplus /bin/true +install udf /bin/true + +# Disable FireWire Direct Memory Access (DMA) if unneeded +install firewire-core /bin/true -- cgit