Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
+4
-2
@@ -94,9 +94,11 @@ blacklist gfs2
|
||||
# The vivid driver is only useful for testing purposes and has been the cause of privilege escalation vulnerabilities, so it should be disabled.
|
||||
install vivid /bin/true
|
||||
|
||||
##### Disable access to USB #####
|
||||
install usb_storage /bin/true
|
||||
##### Disable access to USB and UAS #####
|
||||
install usb-storage /bin/true
|
||||
install uas /bin/true
|
||||
blacklist usb-storage
|
||||
blacklist uas
|
||||
|
||||
##### Disable access to IEEE1394 #####
|
||||
install firewire-core /bin/true
|
||||
Reference in New Issue
Block a user