harbian-audit
harbian-audit copied to clipboard
Need extra check on blacklisted Linux kernel modules
Some kernel modules should be disabled on GNU/Linux server but the current implementation doesn't check if its blacklisted, e.g:
2.20_disable_jffs2 2.18_disable_cramfs 2.19_disable_freevxfs 2.20_disable_jffs2 2.21_disable_hfs 2.22_disable_hfsplus 2.23_disable_squashfs
Shouldn't be an extra check on /etc/modprobe.d/ and see if they're being blacklisted already. Autofix (--apply) can be doing sth like adding all of them into harbian_security_workaround*.conf