disable some protocol

as suggested by lynis
Zalaxx · Nov 22, 2023 · 5f870c3 · 5f870c3
1 parent bd5cb15
commit 5f870c3
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/config/files/usr/etc/modprobe.d/blacklist.conf b/config/files/usr/etc/modprobe.d/blacklist.conf
@@ -0,0 +1,11 @@
+# See https://wiki.archlinux.org/title/Kernel_module#Using_files_in_/etc/modprobe.d/_2 for why both install <module> /bin/true and blacklist <module>
+
+install dccp /bin/true
+install sctp /bin/true
+install rds /bin/true
+install tipc /bin/true
+
+blacklist dccp
+blacklist sctp
+blacklist rds
+blacklist tipc