mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-25 10:35:32 +07:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/master'

Browse Source
This commit is contained in:
Patrick Schleizer 2019-07-06 07:06:54 -04:00
commit 7b0b9da32c
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
3 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/control vendored
View File

@ -95,7 +95,7 @@ Description: enhances misc security settings
.
All mitigations for the MDS vulnerability are enabled.
.
DCCP, SCTP, TIPC and RDS are blacklisted as they are rarely used and may have
DCCP, SCTP, TIPC, RDS and HDLC are blacklisted as they are rarely used and may have
unknown vulnerabilities.
.
The kernel logs are restricted to root only.

4
etc/modprobe.d/blacklist-dma.conf
View File

@ -1,3 +1,3 @@
# Blacklist thunderbolt and firewire to prevent some DMA attacks.
blacklist firewire-core
blacklist thunderbolt
install firewire-core /bin/true
install thunderbolt /bin/true

1
etc/modprobe.d/uncommon-network-protocols.conf
View File

@ -3,3 +3,4 @@ install dccp /bin/true
install sctp /bin/true
install rds /bin/true
install tipc /bin/true
install n-hdlc /bin/true