security-misc icon indicating copy to clipboard operation
security-misc copied to clipboard

Refresh `/etc/modprobe.d/*` blacklisting and disabling

Open raja-grewal opened this issue 1 month ago • 3 comments

This pull request updates our list of blacklisted and disabled kernel modules.

The last major updates were done by us around July 2024 in https://github.com/Kicksecure/security-misc/pull/230, https://github.com/Kicksecure/security-misc/pull/232, https://github.com/Kicksecure/security-misc/pull/234, https://github.com/Kicksecure/security-misc/pull/236, https://github.com/Kicksecure/security-misc/pull/237, https://github.com/Kicksecure/security-misc/pull/238, and https://github.com/Kicksecure/security-misc/pull/245. There were also numerous updates by others not using the GitHub PR system and so harder to link.

This current refresh updates documentation, relocates a few things under better headings, moves some modules from blacklisted to disabled, and adds more disabled modules.

The biggest change is incorporating more disabled file systems form secureblue's config. These have all been used for a lengthy period sometime and so should be considered free of any obvious breakages.

Changes

Primarily disables more uncommon and legacy file systems.

Mandatory Checklist

  • [x] Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:

Terms of Service, Privacy Policy, Cookie Policy, E-Sign Consent, DMCA, Imprint

Optional Checklist

The following items are optional but might be requested in certain cases.

  • [x] I have tested it locally
  • [x] I have reviewed and updated any documentation if relevant
  • [ ] I am providing new code and test(s) for it

raja-grewal avatar Nov 21 '25 13:11 raja-grewal