mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-31 15:20:23 +07:00
Code Issues Packages Projects Releases Wiki Activity

no longer disable MSR by default

Browse Source 
fixes https://github.com/Kicksecure/security-misc/issues/215
This commit is contained in:
Patrick Schleizer
2024-04-01 02:55:59 -04:00
parent d9ac01ba5c
commit 7dba3fb7be
2 changed files with 2 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
etc/modprobe.d/30_security-misc.conf
View File

@ -33,7 +33,8 @@ install video1394 /usr/bin/disabled-firewire-by-security-misc
## Disable CPU MSRs as they can be abused to write to arbitrary memory.
## https://security.stackexchange.com/questions/119712/methods-root-can-use-to-elevate-itself-to-kernel-mode
install msr /usr/bin/disabled-msr-by-security-misc
## https://github.com/Kicksecure/security-misc/issues/215
#install msr /usr/bin/disabled-msr-by-security-misc
## Disables unneeded network protocols that will likely not be used as these may have unknown vulnerabilties.
## Credit to Tails (https://tails.boum.org/blueprint/blacklist_modules/) for some of these.