Blacklist the uvcvideo driver

[raja-grewal]

Blacklist the uvcvideo USB-based video streaming driver for devices like webcams and digital camcorders.

This driver should ideally be only loaded by the kernel when specifically required.

Completely disabling it was first suggested in Issue #224.

Changes

Add uvcvideo to blacklist and provide provision for it to be disabled.

Mandatory Checklist

• Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:

Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint

Optional Checklist

The following items are optional but might be requested in certain cases.

• I have tested it locally
• I have reviewed and updated any documentation if relevant
• I am providing new code and test(s) for it

[raja-grewal]

https://forums.whonix.org/t/blacklist-more-kernel-modules-to-reduce-attack-surface/7989/38

[adrelanos]

Not sure about this yet. -> #224 (comment)

Also a merge conflict.

[adrelanos]

How many video streaming devices like webcams and digital camcorders will be broken?

[raja-grewal]

I agree that this is a major addition, perhaps provide the option and comment out the command by default?

That way people who have no desire to ever use webcams etc. on their PC can disable their enabling at the kernel level. I think a lot of users with high threat models would really appreciate knowing that camera functionality via uvcvideo is disabled.

I will resolve the merge conflict once we decide on what path to take.

[adrelanos]

raja-grewal:

I agree that this is a major addition, perhaps provide the option and comment out the command by default?

Ok.