1
0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-12-26 08:41:57 -05:00

Move generate-kmod-blacklist to TommyTran732/Security-Misc

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-06-02 15:06:04 -07:00
parent a781fd5a5d
commit acf3e6ae11
Signed by: Tomster
GPG Key ID: 555C902A34EC968F

View File

@ -1,39 +0,0 @@
#!/bin/bash
# Copyright (C) 2021-2024 Thien Tran
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
# use this file except in compliance with the License. You may obtain a copy of
# the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations under
# the License.
# List available modules
# shellcheck disable=SC2010
ls -R /lib/modules/"$(uname -r)"/kernel/{drivers,fs,net,sound} | grep "\.ko" | sed 's/.ko.xz//g' > blacklist.txt
# List actively used modules
lsmod | awk '{ print $1 }' > necessary.txt
# Create the list to blacklist
while read -r KMOD; do
sed -i "s/^${KMOD}$//g" blacklist.txt
done < necessary.txt
# Delete empty lines
sed -i '/^$/d' blacklist.txt
# Create final blacklist config
while read -r KMOD; do
echo "blacklist ${KMOD}" >> blacklist.conf
echo "install ${KMOD} /bin/false" >> blacklist.conf
done < blacklist.txt
# Cleanup
rm necessary.txt blacklist.txt