Skip to content

Conversation

@raja-grewal
Copy link
Contributor

Move existing blacklisted framebuffer and some superseded drivers to the disabled list.

This way we can start using 30_security-misc_blacklist.conf as a testing/proving ground for potential future disabling.

https://forums.whonix.org/t/kernel-hardening-security-misc/7296/560

Changes

Transfer some kernel modules to the disable list that have previously been blacklisted for over two years with seemingly no user complaints.

Mandatory Checklist

  • Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:

Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint

Optional Checklist

The following items are optional but might be requested in certain cases.

  • I have tested it locally
  • I have reviewed and updated any documentation if relevant
  • I am providing new code and test(s) for it

@raja-grewal
Copy link
Contributor Author

Also added a few new kernel modules to the blacklist.

@raja-grewal raja-grewal changed the title Migrate previously blacklisted kernel modules to being disabled Update /etc/modprobe.d/* Jul 26, 2024
@raja-grewal raja-grewal marked this pull request as ready for review July 26, 2024 01:34
@raja-grewal
Copy link
Contributor Author

Waiting for review/feedback.

I currently do not have any plans on making further additions/changes to this branch.

@adrelanos adrelanos merged commit 305467c into Kicksecure:master Aug 16, 2024
@raja-grewal raja-grewal deleted the blacklist_to_disable branch August 16, 2024 08:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants