From b63d4ccb41d6c4942faa8ec5e2b8de8cffacd03e Mon Sep 17 00:00:00 2001 From: madaidan <50278627+madaidan@users.noreply.github.com> Date: Thu, 11 Jul 2019 15:28:56 +0000 Subject: [PATCH] Update uncommon-network-protocols.conf --- etc/modprobe.d/uncommon-network-protocols.conf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/etc/modprobe.d/uncommon-network-protocols.conf b/etc/modprobe.d/uncommon-network-protocols.conf index 6bbc37d..008e207 100644 --- a/etc/modprobe.d/uncommon-network-protocols.conf +++ b/etc/modprobe.d/uncommon-network-protocols.conf @@ -1,4 +1,11 @@ # Disables unneeded network protocols that will likely not be used as these may have unknown vulnerabilties. +# +# Credit to Tails (https://tails.boum.org/blueprint/blacklist_modules/) for some of these. +# +# > Debian ships a long list of modules for wide support of devices, filesystems, protocols. Some of these modules have a pretty bad security track record, and some of those are simply not used by most of our users. +# +# > Other distributions like Ubuntu[1] and Fedora[2] already ship a blacklist for various network protocols which aren't much in use by users and have a poor security track record. +# install dccp /bin/true install sctp /bin/true install rds /bin/true