msw/CISS.debian.live.builder
SHA256
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity

V8.13.536.2025.12.04
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m11s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-12-04 22:17:40 +01:00
parent 1b5fc26993
commit aedd03513e
8 changed files with 150 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
config/includes.chroot/etc/modprobe.d/30-cendev-hardening.conf → config/includes.chroot/etc/modprobe.d/30-ciss-hardening.conf
View File

@@ -94,9 +94,11 @@ blacklist gfs2
# The vivid driver is only useful for testing purposes and has been the cause of privilege escalation vulnerabilities, so it should be disabled.
install vivid /bin/true
##### Disable access to USB #####
install usb_storage /bin/true
##### Disable access to USB and UAS #####
install usb-storage /bin/true
install uas /bin/true
blacklist usb-storage
blacklist uas
##### Disable access to IEEE1394 #####
install firewire-core /bin/true