Commit Graph

84 Commits

Author SHA1 Message Date
3280dbd5d5 Fix VirtualBox audio device ICH AC97.
no longer `blacklist snd_intel8x0`

Breaks VirtualBox audio device ICH AC97, which is unfortunately still required by some users.
https://www.kicksecure.com/wiki/Dev/audio

Fixes https://github.com/Kicksecure/security-misc/issues/271
2024-09-13 22:52:47 -04:00
18ed77ecc9 Refactor modprobe.d to minimise potential future merge conflicts 2024-08-21 12:50:14 +10:00
a5373afc55 Details on disabled fbdev kernel modules 2024-08-07 14:44:14 +10:00
50fa721fd5 Update docs regarding Intel module disabling 2024-08-07 14:01:49 +10:00
20454fb811 Merge branch 'Kicksecure:master' into blacklist_to_disable 2024-07-27 00:09:30 +10:00
9f135231cc no longer disable Intel ME related kernel modules
because that might break firmware updates

This reverts commit 64f8b2eb58.

https://github.com/Kicksecure/security-misc/issues/239
2024-07-26 06:43:14 -04:00
28b25bda3f Partial inclusion of GrapheneOS infrastructure blacklist 2024-07-25 15:51:32 +10:00
f582e54343 Merge branch 'Kicksecure:master' into blacklist_to_disable 2024-07-22 15:12:00 +10:00
64f8b2eb58 Revert "no longer disable Intel ME related kernel modules"
This reverts commit 6157e328f4.

https://www.kicksecure.com/wiki/Out-of-band_Management_Technology#Intel_ME_Kernel_Modules

https://github.com/Kicksecure/security-misc/issues/239
2024-07-21 06:36:22 -04:00
3c720a0715 Disable some legacy drivers
These were all previously blacklisted for over 2 years.
2024-07-20 15:03:21 +10:00
c4965ed838 Disable legacy framebuffer drivers
These were all previously blacklisted for over 2 years.
2024-07-20 14:55:10 +10:00
9e6facda70 Update module disabling presentation 2024-07-18 12:21:37 +10:00
df80385289 Merge pull request #237 from raja-grewal/intel_pmt
Disable some Intel PMT kernel modules
2024-07-17 09:04:18 -04:00
6157e328f4 no longer disable Intel ME related kernel modules
https://github.com/Kicksecure/security-misc/issues/239
2024-07-17 08:52:11 -04:00
a4ba6e485d Merge pull request #236 from raja-grewal/intel_me
Disable more Intel ME kernel modules
2024-07-17 08:46:27 -04:00
a3408990ab Uncomment disabling of already disabled ATM modules 2024-07-17 15:03:39 +10:00
abafb1945c Add Intel ME references 2024-07-17 13:26:03 +10:00
f317aaebab Disable two network modules
These were previously blacklisted for two years in 61ef9bd59f.
2024-07-17 01:09:02 +10:00
d69fe88091 Provide option to disable uvcvideo driver 2024-07-17 01:08:01 +10:00
94df2e3d24 further discussion required
https://github.com/Kicksecure/security-misc/pull/234#issuecomment-2228909249
2024-07-15 12:29:52 -04:00
724435e56e Disable some Intel Platform Monitoring Technology Telemetry (PMT) modules 2024-07-15 22:38:43 +10:00
22ba7a7c39 Disable more Intel Management Engine (ME) modules 2024-07-15 22:21:20 +10:00
9300c208e2 Fix script 2024-07-15 21:36:25 +10:00
f2db11269e Fix script 2024-07-15 21:18:32 +10:00
fda3832eaf Replace bash file presented for disabling of miscellaneous modules 2024-07-15 21:08:45 +10:00
cb2fb95b81 Disable more miscellaneous drivers 2024-07-15 21:01:36 +10:00
96aa63267a Disable more Thunderbolt modules 2024-07-15 20:57:14 +10:00
51f7776bc8 Disable more network protocols/drivers 2024-07-15 20:56:12 +10:00
9e40ff0551 Disable more network file systems 2024-07-15 20:54:18 +10:00
82c5a93f7c Disable another GPS module 2024-07-15 20:53:07 +10:00
99b0ce7948 Disable more file systems 2024-07-15 20:47:56 +10:00
4476a477a7 Provide option to disable more Bluetooth modules 2024-07-15 20:47:07 +10:00
9f58266546 Move nf_conntrack_helper disabling into separate file 2024-07-13 23:32:01 +10:00
98580bb39a Update modprobe presentation 2024-07-13 23:29:52 +10:00
41a3bf92fb Sort 30_security-misc_disable.conf 2024-07-12 16:21:41 +10:00
b02230a783 Split modprobe into blacklisted and disabled configurations 2024-07-12 02:42:37 +10:00
fc792ff232 Alphabetically sort existing modprobe 2024-07-12 02:29:36 +10:00
fe20f3240e Refactor existing modprobe for clarity 2024-07-12 02:28:48 +10:00
275a4ffc11 Remove redundant disabled modules 2024-07-12 02:27:56 +10:00
1bb843ec38 Update Copyright (C) to 2024 2024-05-11 13:18:36 +10:00
0f1119f326 Merge pull request #221 from raja-grewal/firewire
Disable Firewire Module
2024-05-10 06:45:57 -04:00
677f75ae8e Disable firewire-net module 2024-05-09 02:34:02 +00:00
06f13bb766 Disable GPS modules like GNSS 2024-05-09 02:28:53 +00:00
7dba3fb7be no longer disable MSR by default
fixes https://github.com/Kicksecure/security-misc/issues/215
2024-04-01 02:56:27 -04:00
0efee2f50f usrmerge
fixes https://github.com/Kicksecure/security-misc/issues/190
2024-01-17 13:39:56 -05:00
13b4ddbb62 30_security-misc.conf 2023-10-27 14:34:21 +00:00
7a4212dd76 Update copyright 2023-03-30 17:08:47 +11:00
d67845fea8 Typo 2022-12-13 16:11:24 +11:00
6f695902fb Add comment about legacy Apple fiesystems 2022-11-23 23:53:40 +11:00
daa30d4e78 Include several framebuffer drivers into blacklist
These were previously commented out to test for compatibility issues.
2022-11-09 20:43:59 +11:00