aboutsummaryrefslogtreecommitdiff
path: root/files/etc/modprobe.d/blacklist.conf
diff options
context:
space:
mode:
Diffstat (limited to 'files/etc/modprobe.d/blacklist.conf')
-rw-r--r--files/etc/modprobe.d/blacklist.conf4
1 files changed, 4 insertions, 0 deletions
diff --git a/files/etc/modprobe.d/blacklist.conf b/files/etc/modprobe.d/blacklist.conf
index 52ea5a4..d339c0d 100644
--- a/files/etc/modprobe.d/blacklist.conf
+++ b/files/etc/modprobe.d/blacklist.conf
@@ -77,6 +77,10 @@ install ohci1394 false
# Iff we should ever load the ohci1394 module, force the use of the 'phys_dma=0' option.
options ohci1394 phys_dma=0
+# See also https://github.com/lfit/itpol/blob/master/linux-workstation-security.md#blacklisting-modules
+blacklist firewire-core
+blacklist thunderbolt
+
# PC Speaker
blacklist pcspkr