114 lines
2.6 KiB
Text
114 lines
2.6 KiB
Text
# unused network protocols
|
|
install dccp /bin/false
|
|
install sctp /bin/false
|
|
install rds /bin/false
|
|
install tipc /bin/false
|
|
install n-hdlc /bin/false
|
|
install ax25 /bin/false
|
|
install netrom /bin/false
|
|
install x25 /bin/false
|
|
install rose /bin/false
|
|
install decnet /bin/false
|
|
install econet /bin/false
|
|
install af_802154 /bin/false
|
|
install ipx /bin/false
|
|
install appletalk /bin/false
|
|
install psnap /bin/false
|
|
install p8023 /bin/false
|
|
install p8022 /bin/false
|
|
install can /bin/false
|
|
install atm /bin/false
|
|
|
|
# firewire and thunderbolt
|
|
install firewire-core /bin/false
|
|
install firewire_core /bin/false
|
|
install firewire-ohci /bin/false
|
|
install firewire_ohci /bin/false
|
|
install firewire_sbp2 /bin/false
|
|
install firewire-sbp2 /bin/false
|
|
install firewire-net /bin/false
|
|
install thunderbolt /bin/false
|
|
install ohci1394 /bin/false
|
|
install sbp2 /bin/false
|
|
install dv1394 /bin/false
|
|
install raw1394 /bin/false
|
|
install video1394 /bin/false
|
|
|
|
# unused filesystems
|
|
install cramfs /bin/false
|
|
install freevxfs /bin/false
|
|
install jffs2 /bin/false
|
|
install hfs /bin/false
|
|
install hfsplus /bin/false
|
|
install squashfs /bin/false
|
|
install udf /bin/false
|
|
install cifs /bin/false
|
|
install nfs /bin/false
|
|
install nfsv3 /bin/false
|
|
install nfsv4 /bin/false
|
|
install ksmbd /bin/false
|
|
install gfs2 /bin/false
|
|
install reiserfs /bin/false
|
|
install kafs /bin/false
|
|
install orangefs /bin/false
|
|
install 9p /bin/false
|
|
install adfs /bin/false
|
|
install affs /bin/false
|
|
install afs /bin/false
|
|
install befs /bin/false
|
|
install ceph /bin/false
|
|
install coda /bin/false
|
|
install ecryptfs /bin/false
|
|
install erofs /bin/false
|
|
install jfs /bin/false
|
|
install minix /bin/false
|
|
install netfs /bin/false
|
|
install nilfs2 /bin/false
|
|
install ocfs2 /bin/false
|
|
install romfs /bin/false
|
|
install ubifs /bin/false
|
|
install zonefs /bin/false
|
|
install sysv /bin/false
|
|
install ufs /bin/false
|
|
|
|
# disable vivid
|
|
install vivid /bin/false
|
|
|
|
# disable GNSS
|
|
install gnss /bin/false
|
|
install gnss-mtk /bin/false
|
|
install gnss-serial /bin/false
|
|
install gnss-sirf /bin/false
|
|
install gnss-usb /bin/false
|
|
install gnss-ubx /bin/false
|
|
|
|
# https://en.wikipedia.org/wiki/Bluetooth#History_of_security_concerns
|
|
install bluetooth /bin/false
|
|
install btusb /bin/false
|
|
|
|
# blacklist ath_pci
|
|
blacklist ath_pci
|
|
|
|
# blacklist cdrom
|
|
blacklist cdrom
|
|
blacklist sr_mod
|
|
|
|
# blacklist framebuffer drivers
|
|
# source, ubuntu: https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist-framebuffer.conf
|
|
blacklist cyber2000fb
|
|
blacklist cyblafb
|
|
blacklist gx1fb
|
|
blacklist hgafb
|
|
blacklist kyrofb
|
|
blacklist lxfb
|
|
blacklist matroxfb_base
|
|
blacklist neofb
|
|
blacklist nvidiafb
|
|
blacklist pm2fb
|
|
blacklist s1d13xxxfb
|
|
blacklist sisfb
|
|
blacklist tdfxfb
|
|
blacklist vesafb
|
|
blacklist vfb
|
|
blacklist vt8623fb
|
|
blacklist udlfb
|