harbian-audit icon indicating copy to clipboard operation
harbian-audit copied to clipboard

Need extra check on blacklisted Linux kernel modules

Open citypw opened this issue 2 years ago • 0 comments

Some kernel modules should be disabled on GNU/Linux server but the current implementation doesn't check if its blacklisted, e.g:

2.20_disable_jffs2 2.18_disable_cramfs 2.19_disable_freevxfs 2.20_disable_jffs2 2.21_disable_hfs 2.22_disable_hfsplus 2.23_disable_squashfs

Shouldn't be an extra check on /etc/modprobe.d/ and see if they're being blacklisted already. Autofix (--apply) can be doing sth like adding all of them into harbian_security_workaround*.conf

citypw avatar Jun 10 '22 01:06 citypw