mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-09-07 16:23:30 -04:00
Move generate-kmod-blacklist to TommyTran732/Security-Misc
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
a781fd5a5d
commit
acf3e6ae11
@ -1,39 +0,0 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Copyright (C) 2021-2024 Thien Tran
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
||||
# use this file except in compliance with the License. You may obtain a copy of
|
||||
# the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations under
|
||||
# the License.
|
||||
|
||||
# List available modules
|
||||
# shellcheck disable=SC2010
|
||||
ls -R /lib/modules/"$(uname -r)"/kernel/{drivers,fs,net,sound} | grep "\.ko" | sed 's/.ko.xz//g' > blacklist.txt
|
||||
|
||||
# List actively used modules
|
||||
lsmod | awk '{ print $1 }' > necessary.txt
|
||||
|
||||
# Create the list to blacklist
|
||||
while read -r KMOD; do
|
||||
sed -i "s/^${KMOD}$//g" blacklist.txt
|
||||
done < necessary.txt
|
||||
|
||||
# Delete empty lines
|
||||
sed -i '/^$/d' blacklist.txt
|
||||
|
||||
# Create final blacklist config
|
||||
while read -r KMOD; do
|
||||
echo "blacklist ${KMOD}" >> blacklist.conf
|
||||
echo "install ${KMOD} /bin/false" >> blacklist.conf
|
||||
done < blacklist.txt
|
||||
|
||||
# Cleanup
|
||||
rm necessary.txt blacklist.txt
|
Loading…
Reference in New Issue
Block a user